# Top **URL:** https://discuss.elastic.co/top.md?page=710&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 711 --- ## [Increase the scrolling limit in Kibana](https://discuss.elastic.co/t/increase-the-scrolling-limit-in-kibana/91453)
**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Replies:** 2\ **Last updated:** [June 30, 2017, 4:03pm UTC](https://discuss.elastic.co/t/increase-the-scrolling-limit-in-kibana/91453 "2017-06-30T16:03:45Z")
Hi All, Is it possible to have infinite scrolling in Kibana? Currently it's limited to 500 events before a search needs to be refined and for some of use cases of ours 500 events is a bit limited and we would like to… --- ## [Return substring of analyzed, non-stored text field](https://discuss.elastic.co/t/return-substring-of-analyzed-non-stored-text-field/83231)
**Author:** [@jdpark](https://discuss.elastic.co/u/jdpark)\ **Replies:** 2\ **Last updated:** [May 8, 2017, 5:12pm UTC](https://discuss.elastic.co/t/return-substring-of-analyzed-non-stored-text-field/83231 "2017-05-08T17:12:38Z")
Hi. I'd like to get the first 100 characters of an analyzed, non-stored text field. (Imagine I'm doing fulltext search on documents, and I want to return the documents with just snippets.) I read https://www.elastic.c… --- ## [Extracting MonthOfYear In Kibana Scripted Field](https://discuss.elastic.co/t/extracting-monthofyear-in-kibana-scripted-field/218322)
**Author:** [@Ramya\_Tanikanti](https://discuss.elastic.co/u/Ramya_Tanikanti)\ **Replies:** 3\ **Last updated:** [February 11, 2020, 1:44pm UTC](https://discuss.elastic.co/t/extracting-monthofyear-in-kibana-scripted-field/218322 "2020-02-11T13:44:04Z")
The following Scripted Field code is throwing an error, def month = doc\['signed\_date'\].date.monthOfYear; I want to extract the months as a separate column. What am I doing wrong here? Kindly help. --- ## [Shield on Containerized Elasticsearch \*RESOLVED\*](https://discuss.elastic.co/t/shield-on-containerized-elasticsearch-resolved/28053)
**Author:** [@kunickiaj](https://discuss.elastic.co/u/kunickiaj)\ **Replies:** 3\ **Last updated:** [August 25, 2015, 10:01pm UTC](https://discuss.elastic.co/t/shield-on-containerized-elasticsearch-resolved/28053 "2015-08-25T22:01:05Z")
Hi, I'd like to try out shield and installed it in a docker container running es 1.7.1, however authentication always fails. Anyone else run into this? I've verified that a user exists and has the admin role. esusers… --- ## [Max docs per index limit](https://discuss.elastic.co/t/max-docs-per-index-limit/13367)
**Author:** [@Vadim\_Kisselmann](https://discuss.elastic.co/u/Vadim_Kisselmann)\ **Replies:** 3\ **Last updated:** [September 1, 2013, 5:56pm UTC](https://discuss.elastic.co/t/max-docs-per-index-limit/13367 "2013-09-01T17:56:35Z")
Hi folks, is it possible to set a limit like max docs in index? And maybe to kick old docs when the limit is reached? I want to use elasticsearch with an in-memory index for caching. My cache-docs get an TTL, but… --- ## [Error multiple index templates may not match during index creation](https://discuss.elastic.co/t/error-multiple-index-templates-may-not-match-during-index-creation/299666)
**Author:** [@Guif](https://discuss.elastic.co/u/Guif)\ **Replies:** 1\ **Last updated:** [March 15, 2022, 7:28am UTC](https://discuss.elastic.co/t/error-multiple-index-templates-may-not-match-during-index-creation/299666 "2022-03-15T07:28:23Z")
Hi, I got the following error message in kibana.log {"type":"log","@timestamp":"2022-03-14T21:31:34+01:00","tags":\["error","plugins","security","session","index"\],"pid":14270,"message":"Failed to create session index t… --- ## [How to correct custom logstash index name for use by ILM](https://discuss.elastic.co/t/how-to-correct-custom-logstash-index-name-for-use-by-ilm/246346)
**Author:** [@hueyg](https://discuss.elastic.co/u/hueyg)\ **Replies:** 6\ **Last updated:** [October 5, 2020, 7:13pm UTC](https://discuss.elastic.co/t/how-to-correct-custom-logstash-index-name-for-use-by-ilm/246346 "2020-10-05T19:13:21Z")
I have a custom logstash index named asa-%date%. I have attempted to apply an ILM policy to it, but I get an error when it attempts to apply. According to an elastic team member in another thread this is because ILM ex… --- ## [Customize Kibana URL and DNS](https://discuss.elastic.co/t/customize-kibana-url-and-dns/284744)
**Author:** [@netjammr](https://discuss.elastic.co/u/netjammr)\ **Replies:** 5\ **Last updated:** [October 4, 2021, 2:47pm UTC](https://discuss.elastic.co/t/customize-kibana-url-and-dns/284744 "2021-10-04T14:47:18Z")
I am looking at options for customizing the Kibana URL for an ECE deployment. As an example, if under Platform \> Settings the "Deployments domain name" is "myece.mydomain.com", I understand that the Kibana URL would be s… --- ## [High load, but lower cpu,lower IO](https://discuss.elastic.co/t/high-load-but-lower-cpu-lower-io/259047)
**Author:** [@111421](https://discuss.elastic.co/u/111421)\ **Replies:** 5\ **Last updated:** [December 29, 2020, 3:49am UTC](https://discuss.elastic.co/t/high-load-but-lower-cpu-lower-io/259047 "2020-12-29T03:49:33Z")
Hello, eyeryone I checked the es single node load through cerebor and found that the load is very high, but the cpu utilization rate is very low. Why? ES is deployed through docker, version: 6.8 cerebro: kibana: … --- ## [Cannot opening index with Luke](https://discuss.elastic.co/t/cannot-opening-index-with-luke/14408)
**Author:** [@Kim\_Laplume](https://discuss.elastic.co/u/Kim_Laplume)\ **Replies:** 5\ **Last updated:** [March 7, 2014, 8:51am UTC](https://discuss.elastic.co/t/cannot-opening-index-with-luke/14408 "2014-03-07T08:51:18Z")
Hi, I'm trying to inspect some ES indices with an updated Luke repo https://github.com/tarzanek/luke I can compile and start Luke, with java -jar lukeall-4.5.1.jar but when I try to open an index I get the… --- ## [Detect Horizontal Port Scan](https://discuss.elastic.co/t/detect-horizontal-port-scan/272710)
**Author:** [@pmorenosi](https://discuss.elastic.co/u/pmorenosi)\ **Replies:** 1\ **Last updated:** [May 18, 2021, 11:23am UTC](https://discuss.elastic.co/t/detect-horizontal-port-scan/272710 "2021-05-18T11:23:09Z")
Hello everyone, From the logs that I have stored in Elasticsearch from a Firewall, I need to detect a type of attack called "Horizontal Port Scan" that is defined as follows: Unique source IP address that has "N" differ… --- ## [@timestamp not matching date parsed, apache logs](https://discuss.elastic.co/t/timestamp-not-matching-date-parsed-apache-logs/32912)
**Author:** [@JamesNJ](https://discuss.elastic.co/u/JamesNJ)\ **Replies:** 2\ **Last updated:** [October 24, 2015, 2:08pm UTC](https://discuss.elastic.co/t/timestamp-not-matching-date-parsed-apache-logs/32912 "2015-10-24T14:08:37Z")
Hello all, I'm new to log stash and probably this is a simple mistake on my part. I have a pile of old apache combined logs I want to put into elasticsearch, using logstash. I found that logstash was was not properly tra… --- ## [ES 7.6 on AWS ECS](https://discuss.elastic.co/t/es-7-6-on-aws-ecs/223431)
**Author:** [@jf11](https://discuss.elastic.co/u/jf11)\ **Replies:** 8\ **Last updated:** [March 14, 2020, 10:49am UTC](https://discuss.elastic.co/t/es-7-6-on-aws-ecs/223431 "2020-03-14T10:49:13Z")
Hello, Trust all is well. Im trying to setup a cluster on AWS ECS via Cloudformation. I've used ELK in the past and have been used to the older style dynamic node discovery for all nodes (data & masters) and in setting… --- ## [Filebeat-Logstash back pressure without persistent queues](https://discuss.elastic.co/t/filebeat-logstash-back-pressure-without-persistent-queues/171570)
**Author:** [@cciaccio](https://discuss.elastic.co/u/cciaccio)\ **Replies:** 3\ **Last updated:** [March 11, 2019, 2:10pm UTC](https://discuss.elastic.co/t/filebeat-logstash-back-pressure-without-persistent-queues/171570 "2019-03-11T14:10:53Z")
If Logstash persistent queues are disabled, is there back pressure between Logstash and Filebeat? --- ## [ES logs errors with large initial logfiles](https://discuss.elastic.co/t/es-logs-errors-with-large-initial-logfiles/41383)
**Author:** [@r\_grosmann](https://discuss.elastic.co/u/r_grosmann)\ **Replies:** 8\ **Last updated:** [February 23, 2016, 3:19pm UTC](https://discuss.elastic.co/t/es-logs-errors-with-large-initial-logfiles/41383 "2016-02-23T15:19:08Z")
hello, I use fluentd, elasticsearch 1.2.4 and kibana 3.1.2 on a ubuntu trusty platform to analyze logfiles I have. I have an initial logfile that has to be taken into account. In trying to get the stack workingk, I found… --- ## [Instructions ot upgrade the ELK stack](https://discuss.elastic.co/t/instructions-ot-upgrade-the-elk-stack/41201)
**Author:** [@yahoo](https://discuss.elastic.co/u/yahoo)\ **Replies:** 3\ **Last updated:** [February 11, 2016, 2:45am UTC](https://discuss.elastic.co/t/instructions-ot-upgrade-the-elk-stack/41201 "2016-02-11T02:45:28Z")
I am trying to upgrade ELK stack (L 2.1.2, E 2.1.2, K 4.3.1) to (L 2.2.0, E 2.2.0, K 4.4.0) in a windows 10 environment. I assembled the following instructions. Please, correct, suggest, advice, expand, or critique. U… --- ## [Unable to embed Kibana dashboard on a reverse proxy server using Nginx](https://discuss.elastic.co/t/unable-to-embed-kibana-dashboard-on-a-reverse-proxy-server-using-nginx/278521)
**Author:** [@Fabian\_Matesa](https://discuss.elastic.co/u/Fabian_Matesa)\ **Replies:** 2\ **Last updated:** [July 15, 2021, 8:46am UTC](https://discuss.elastic.co/t/unable-to-embed-kibana-dashboard-on-a-reverse-proxy-server-using-nginx/278521 "2021-07-15T08:46:51Z")
I am trying to embed a Kibana dashboard using Nginx, but keep getting a blank screen. No errors are thrown (except for the expected "inline script" error), but nothing gets loaded. Kibana is deployed on an Azure cloud, a… --- ## [Simple Grok and Date filter problem](https://discuss.elastic.co/t/simple-grok-and-date-filter-problem/168867)
**Author:** [@Tim3](https://discuss.elastic.co/u/Tim3)\ **Replies:** 4\ **Last updated:** [February 18, 2019, 5:03pm UTC](https://discuss.elastic.co/t/simple-grok-and-date-filter-problem/168867 "2019-02-18T17:03:46Z")
Hello, I recently tried to use ElasticSearch and Logstash, and I'm currently trying to get few fields from this log line : 2018-12-05 00:13:45,000 LogType - MachineNumber Message I use this filter : filter { grok { … --- ## [Please Disable snapshots for 8195b9](https://discuss.elastic.co/t/please-disable-snapshots-for-8195b9/97363)
**Author:** [@lukmdo](https://discuss.elastic.co/u/lukmdo)\ **Replies:** 4\ **Last updated:** [August 17, 2017, 8:20pm UTC](https://discuss.elastic.co/t/please-disable-snapshots-for-8195b9/97363 "2017-08-17T20:20:05Z")
This cluster is used as build node only and because of async snapshots sometimes it fails build with {"error":{"root\_cause":\[{"type":"illegal\_argument\_exception","reason":"Cannot delete indices that are being snapshotte… --- ## [How much work will it take to make Kibana work with solr?](https://discuss.elastic.co/t/how-much-work-will-it-take-to-make-kibana-work-with-solr/86122)
**Author:** [@Muhammad-Ezzat](https://discuss.elastic.co/u/Muhammad-Ezzat)\ **Replies:** 4\ **Last updated:** [May 17, 2017, 3:13pm UTC](https://discuss.elastic.co/t/how-much-work-will-it-take-to-make-kibana-work-with-solr/86122 "2017-05-17T15:13:31Z")
I know that Lucidworks made two projects Banana and SiLK for that purpose, but these projects are working on old versions of kibana. So I'm wondering, how much work will it take to make the latest version of kibana work … --- ## [Put each shard on different disk](https://discuss.elastic.co/t/put-each-shard-on-different-disk/13262)
**Author:** [@Mingfeng\_Yang](https://discuss.elastic.co/u/Mingfeng_Yang)\ **Replies:** 7\ **Last updated:** [August 22, 2013, 8:49am UTC](https://discuss.elastic.co/t/put-each-shard-on-different-disk/13262 "2013-08-22T08:49:04Z")
I am trying to set up a ES server (one node only) with 4 shards. Is it possible to put 4 shard on 4 different disks? How? Thanks, Ming- -- You received this message because you are subscribed to the Google … --- ## [How to know the kibana plugin well installed](https://discuss.elastic.co/t/how-to-know-the-kibana-plugin-well-installed/139182)
**Author:** [@asallemi](https://discuss.elastic.co/u/asallemi)\ **Replies:** 6\ **Last updated:** [July 10, 2018, 1:24pm UTC](https://discuss.elastic.co/t/how-to-know-the-kibana-plugin-well-installed/139182 "2018-07-10T13:24:01Z")
Hello, I am using Kibana 6.3 and I installed some plugins in my instance from this link. I follow this instructions: 1- Stop Kibana server. 2- Clone the plugin into KIBANA\_HOME/plugins from github and execute npm i … --- ## [Promote replica to primary](https://discuss.elastic.co/t/promote-replica-to-primary/106942)
**Author:** [@erikstephens](https://discuss.elastic.co/u/erikstephens)\ **Replies:** 2\ **Last updated:** [November 9, 2017, 2:11am UTC](https://discuss.elastic.co/t/promote-replica-to-primary/106942 "2017-11-09T02:11:32Z")
After a network partition, primary shards are heavily skewed to the side where the master was. Partition is now healed but there's too much traffic to & from the side with more of the primaries. To resolve that, would … --- ## [How to design ES for user-defined custom fields](https://discuss.elastic.co/t/how-to-design-es-for-user-defined-custom-fields/142663)
**Author:** [@Redkin](https://discuss.elastic.co/u/Redkin)\ **Replies:** 5\ **Last updated:** [August 6, 2018, 3:48pm UTC](https://discuss.elastic.co/t/how-to-design-es-for-user-defined-custom-fields/142663 "2018-08-06T15:48:41Z")
Let's say I have an index called "Contacts" Any contact belongs to a user, it'll have custom variables like this: { user\_id: 684498, name: "John Doe", custom\_age: 27, custom\_hobbies: \['painting'\], custom\_sour… --- ## [Some fields missing](https://discuss.elastic.co/t/some-fields-missing/31828)
**Author:** [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)\ **Replies:** 5\ **Last updated:** [October 8, 2015, 11:36am UTC](https://discuss.elastic.co/t/some-fields-missing/31828 "2015-10-08T11:36:01Z")
when i am indexing my log file from logstash some fields are missing . \_grokparsefailure is coming . I am indexing a log file it has log levels so my error and trace are getting indexed but warn , debug are missing and w… --- ## [Dynamic Shards (Incremental Resharding)](https://discuss.elastic.co/t/dynamic-shards-incremental-resharding/184801)
**Author:** [@panda2004](https://discuss.elastic.co/u/panda2004)\ **Replies:** 3\ **Last updated:** [June 10, 2019, 2:28pm UTC](https://discuss.elastic.co/t/dynamic-shards-incremental-resharding/184801 "2019-06-10T14:28:02Z")
Hello everyone, One of the most common challenges with big data is dealing with increasing volume of data. The traditional solution in ElasticSearch is dynamically creating new indices - which means that the latest docu… --- ## [Logstash: mutate convert doesn't work on dynamic field name](https://discuss.elastic.co/t/logstash-mutate-convert-doesnt-work-on-dynamic-field-name/22128)
**Author:** [@Cyril\_SANTUNE](https://discuss.elastic.co/u/Cyril_SANTUNE)\ **Replies:** 3\ **Last updated:** [March 23, 2017, 12:39pm UTC](https://discuss.elastic.co/t/logstash-mutate-convert-doesnt-work-on-dynamic-field-name/22128 "2017-03-23T12:39:42Z")
Hi, I have a csv file as follow : ,10,CPU load,.... ,3958,Memory used,.... ,...,..,.... So, I parse the csv. I create a new field, I use content of the 3rd column as name, and the 2nd column as value. Extra… --- ## [Graphing parent-child relationship tree](https://discuss.elastic.co/t/graphing-parent-child-relationship-tree/52862)
**Author:** [@dandrestor](https://discuss.elastic.co/u/dandrestor)\ **Replies:** 3\ **Last updated:** [June 16, 2016, 7:31am UTC](https://discuss.elastic.co/t/graphing-parent-child-relationship-tree/52862 "2016-06-16T07:31:24Z")
Hi there, I have records in elastic search which have a parent-child relationship which forms a tree. This is represented using two fields, let's say id and parent\_id. I would like to use graph to obtain a visual repre… --- ## [Nested query, missing inner hits](https://discuss.elastic.co/t/nested-query-missing-inner-hits/41038)
**Author:** [@Benjamin\_Gathmann](https://discuss.elastic.co/u/Benjamin_Gathmann)\ **Replies:** 3\ **Last updated:** [February 12, 2016, 4:51pm UTC](https://discuss.elastic.co/t/nested-query-missing-inner-hits/41038 "2016-02-12T16:51:37Z")
I have observed a strange behavior for nested queries which I do not understand. Here is an example query: { "query" : { "nested" : { "path" : "first.nested.path", "query" : { … --- ## [Shards/routing based on geohash](https://discuss.elastic.co/t/shards-routing-based-on-geohash/27318)
**Author:** [@belaboros](https://discuss.elastic.co/u/belaboros)\ **Replies:** 3\ **Last updated:** [August 24, 2015, 9:29am UTC](https://discuss.elastic.co/t/shards-routing-based-on-geohash/27318 "2015-08-24T09:29:35Z")
Hi, Please help me, I would like to search based on geo location efficiently. For that I would like to create shards/routing based on geohash. (Suggestion: https://discuss.elastic.co/t/sharding-of-geo-points/27284) … --- ## [If \_grokparsefailure break condition](https://discuss.elastic.co/t/if-grokparsefailure-break-condition/122918)
**Author:** [@pfseth](https://discuss.elastic.co/u/pfseth)\ **Replies:** 1\ **Last updated:** [March 7, 2018, 6:39pm UTC](https://discuss.elastic.co/t/if-grokparsefailure-break-condition/122918 "2018-03-07T18:39:49Z")
is there any way to break if conditions ? filter { grok { patterns\_dir =\> "/etc/logstash/file/patterns" match =\> { "message" =\> "%{COMMON\_HEADER}" } } if "\_grokparsefailure" in… --- ## [Head malformed HTTP response](https://discuss.elastic.co/t/head-malformed-http-response/34875)
**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\ **Replies:** 4\ **Last updated:** [November 18, 2015, 1:52pm UTC](https://discuss.elastic.co/t/head-malformed-http-response/34875 "2015-11-18T13:52:16Z")
Hi, I tried filebeat version 1.0.0-rc2 (amd64), running on a Mac and pointed to ES 1.7.x. It looks like it's reading the log file because it prints nice JSON to console at debug logging level. However, I cannot get i… --- ## [Need help in v7.9.2 cluster configuration of 3 nodes](https://discuss.elastic.co/t/need-help-in-v7-9-2-cluster-configuration-of-3-nodes/252101)
**Author:** [@sges](https://discuss.elastic.co/u/sges)\ **Replies:** 7\ **Last updated:** [October 21, 2020, 11:10am UTC](https://discuss.elastic.co/t/need-help-in-v7-9-2-cluster-configuration-of-3-nodes/252101 "2020-10-21T11:10:59Z")
Hello, I'm setting up a cluster with elasticsearch v7.9.2 and for that I'm setting up a 3 node elasticsearch cluster environment on separate VM's. On performing search I'm seeing IllegalStateException in the logs. I nee… --- ## [Over-allocation of shards](https://discuss.elastic.co/t/over-allocation-of-shards/6448)
**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\ **Replies:** 8\ **Last updated:** [March 25, 2013, 7:14am UTC](https://discuss.elastic.co/t/over-allocation-of-shards/6448 "2013-03-25T07:14:04Z")
Hi, Shay mentioned/suggested over-allocation of shards on a few occasions and I wanted to make sure I understand why. Is this primarily to accommodate future cluster growth, so that new nodes can be added and exi… --- ## [\[PLEASE\_HELP\] Consistent searching with search\_after](https://discuss.elastic.co/t/please-help-consistent-searching-with-search-after/294033)
**Author:** [@Juan\_Longo](https://discuss.elastic.co/u/Juan_Longo)\ **Replies:** 2\ **Last updated:** [January 26, 2022, 2:13pm UTC](https://discuss.elastic.co/t/please-help-consistent-searching-with-search-after/294033 "2022-01-26T14:13:50Z")
Hello, I need help making one of our queries consistent. We currently make a query that handles a big amount of documents. The problem I'm having is with an index that have documents that literally have the same properti… --- ## [Shards stuck in relocating](https://discuss.elastic.co/t/shards-stuck-in-relocating/41336)
**Author:** [@bwgriffith](https://discuss.elastic.co/u/bwgriffith)\ **Replies:** 2\ **Last updated:** [February 10, 2016, 3:46pm UTC](https://discuss.elastic.co/t/shards-stuck-in-relocating/41336 "2016-02-10T15:46:38Z")
We had a cluster go into recovery today due to an outage. It has recovered, but there seems to be 2 shards stuck in relocation. The cluster is green, but search is extremely slow to non-responsive (Kibana times out). … --- ## [Grokparsefailure for auth.log](https://discuss.elastic.co/t/grokparsefailure-for-auth-log/104127)
**Author:** [@pdna](https://discuss.elastic.co/u/pdna)\ **Replies:** 1\ **Last updated:** [October 16, 2017, 5:36pm UTC](https://discuss.elastic.co/t/grokparsefailure-for-auth-log/104127 "2017-10-16T17:36:53Z")
I have the following test.conf file input { beats { port =\> "5043" } } filter { grok { match =\> \["message", "%{SYSLOGTIMESTAMP:system.auth.timestamp} %{SYSLOGHOST:system.auth.hostname} sshd(?:… --- ## [Script Based Sorting & query-based score](https://discuss.elastic.co/t/script-based-sorting-query-based-score/102677)
**Author:** [@Pyppe](https://discuss.elastic.co/u/Pyppe)\ **Replies:** 1\ **Last updated:** [October 4, 2017, 3:00pm UTC](https://discuss.elastic.co/t/script-based-sorting-query-based-score/102677 "2017-10-04T15:00:29Z")
Hi. Is it possible to combine painless script-based sorting with default query-based score? What I'm after is this: { "query": { "simple\_query\_string": { "fields": \["name"\], "query": "foobar\*" } … --- ## [Global Search](https://discuss.elastic.co/t/global-search/294887)
**Author:** [@Prabakar](https://discuss.elastic.co/u/Prabakar)\ **Replies:** 6\ **Last updated:** [January 20, 2022, 4:59pm UTC](https://discuss.elastic.co/t/global-search/294887 "2022-01-20T16:59:25Z")
Hello Everyone, I would like to perform a global search by providing a keyword like below (2 different requests) in the request. It returns the result which matches the word "pizza" in any of the field. But if I give "p… --- ## [APM Agente - WAS 8.5.5.11 + Java 8 Error: JVMJ9VM135W /proc/sys/kernel/core\_pattern setting](https://discuss.elastic.co/t/apm-agente-was-8-5-5-11-java-8-error-jvmj9vm135w-proc-sys-kernel-core-pattern-setting/251499)
**Author:** [@amateur](https://discuss.elastic.co/u/amateur)\ **Replies:** 3\ **Last updated:** [October 26, 2020, 8:52pm UTC](https://discuss.elastic.co/t/apm-agente-was-8-5-5-11-java-8-error-jvmj9vm135w-proc-sys-kernel-core-pattern-setting/251499 "2020-10-26T20:52:27Z")
Please your help, when I start the WAS Node it does not raise and appears this error. WAS 8.5.5.11 Java SDK 8.0.6.15 APM Agent: 1.18.1 Centos 6.9-32bits Thank you very much. \*\*\*\*\*\*\*\*\*\*\*\*\* End Display Current Enviro… --- ## [Using FROM option with delete by query](https://discuss.elastic.co/t/using-from-option-with-delete-by-query/225925)
**Author:** [@ninze](https://discuss.elastic.co/u/ninze)\ **Replies:** 3\ **Last updated:** [April 1, 2020, 5:13pm UTC](https://discuss.elastic.co/t/using-from-option-with-delete-by-query/225925 "2020-04-01T17:13:06Z")
Hi, I want to keep a max of 1000 latest documents (notifications) for each user. In case the search finds much more than that, I am trying to use "delete by query" to delete excess documents for the user. The docs for … --- ## [Logstash stopped processing because of an error: (SystemExit) exit](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/291997)
**Author:** [@sama.sowjanya](https://discuss.elastic.co/u/sama.sowjanya)\ **Replies:** 4\ **Last updated:** [December 16, 2021, 3:10pm UTC](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/291997 "2021-12-16T15:10:49Z")
Hi I am getting the error when I run the config file through 'systemctl start logstash' log---- \[2021-12-15T13:49:55,003\]\[INFO \]\[logstash.runner\] Log4j configuration path used is: /etc/logstash/log4j2.properties \[202… --- ## [Color in vega bar charts](https://discuss.elastic.co/t/color-in-vega-bar-charts/261739)
**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\ **Replies:** 4\ **Last updated:** [January 22, 2021, 7:28am UTC](https://discuss.elastic.co/t/color-in-vega-bar-charts/261739 "2021-01-22T07:28:55Z")
I want to give color of the bars by using the 'v' field which consists the hexcode of color. I gave it using datum.v (mentioned in below code) { "$schema": "https://vega.github.io/schema/vega-lite/v4.json", "descri… --- ## [Network Device Monitoring possible?](https://discuss.elastic.co/t/network-device-monitoring-possible/203613)
**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\ **Replies:** 2\ **Last updated:** [October 18, 2019, 10:16am UTC](https://discuss.elastic.co/t/network-device-monitoring-possible/203613 "2019-10-18T10:16:25Z")
Is it possible to monitor network devices ( Switch , Router , link ) through ELK Stack ? Need to monitor the matrices cpu , ram and mem in Routers and switches . --- ## [Ruby : Remove event](https://discuss.elastic.co/t/ruby-remove-event/142479)
**Author:** [@Pierre2](https://discuss.elastic.co/u/Pierre2)\ **Replies:** 2\ **Last updated:** [August 1, 2018, 8:48am UTC](https://discuss.elastic.co/t/ruby-remove-event/142479 "2018-08-01T08:48:41Z")
Hello ! I know that it is possible to remove fields from one event thanks to "event.remove('field')". I want to know if there is a way to remove the complete event and not one or two fields. My probleme is that I have… --- ## [Visualization to view the difference of time for two events with a particular field value](https://discuss.elastic.co/t/visualization-to-view-the-difference-of-time-for-two-events-with-a-particular-field-value/138896)
**Author:** [@kaushik.vankayala](https://discuss.elastic.co/u/kaushik.vankayala)\ **Replies:** 2\ **Last updated:** [July 18, 2018, 10:07am UTC](https://discuss.elastic.co/t/visualization-to-view-the-difference-of-time-for-two-events-with-a-particular-field-value/138896 "2018-07-18T10:07:54Z")
Hi There, I am a total newbie to the ELK stack. I have recently developed a logstash pipeline successfully for a custom log of an application and now i have the data on elasticsearch and indexed in kibana as expected. N… --- ## [How to call Ruby function in logstash filter?](https://discuss.elastic.co/t/how-to-call-ruby-function-in-logstash-filter/107930)
**Author:** [@Harim\_Tong](https://discuss.elastic.co/u/Harim_Tong)\ **Replies:** 2\ **Last updated:** [November 27, 2017, 3:55pm UTC](https://discuss.elastic.co/t/how-to-call-ruby-function-in-logstash-filter/107930 "2017-11-27T15:55:42Z")
I don't want to write too much Ruby code in filter(Ruby filter) ,because it's hard to maintenance, can logstash filter call user defined function? Like I have a business function: foo(x) in the file: my.rb as below: d… --- ## [Has anyone tried to compile beats for Raspberry Pi (ARM) yet?](https://discuss.elastic.co/t/has-anyone-tried-to-compile-beats-for-raspberry-pi-arm-yet/37716)
**Author:** [@kai5263499](https://discuss.elastic.co/u/kai5263499)\ **Replies:** 2\ **Last updated:** [December 21, 2015, 8:00pm UTC](https://discuss.elastic.co/t/has-anyone-tried-to-compile-beats-for-raspberry-pi-arm-yet/37716 "2015-12-21T20:00:01Z")
When I tried to build beats from source I get the following: make -C libbeat testsuite || exit 1; make -C packetbeat testsuite || exit 1; make -C topbeat testsuite || exit 1; make -C filebeat testsuite || exit 1; make … --- ## [Kibana: how to show values directly without aggregation?](https://discuss.elastic.co/t/kibana-how-to-show-values-directly-without-aggregation/22844)
**Author:** [@Jason\_9](https://discuss.elastic.co/u/Jason_9)\ **Replies:** 2\ **Last updated:** [July 1, 2015, 12:31pm UTC](https://discuss.elastic.co/t/kibana-how-to-show-values-directly-without-aggregation/22844 "2015-07-01T12:31:18Z")
ELK experts, I'm desperately need your help. I've spend hours and days on this simple thing but still can't figure it out. My settings are Elasticsearch 1.4.4 and Kibana 4.0.1. My program feeds data into ElasticSe… --- ## [Performing a partial word search without wildcards](https://discuss.elastic.co/t/performing-a-partial-word-search-without-wildcards/11362)
**Author:** [@kazoompa\_3](https://discuss.elastic.co/u/kazoompa_3)\ **Replies:** 2\ **Last updated:** [March 29, 2013, 11:47am UTC](https://discuss.elastic.co/t/performing-a-partial-word-search-without-wildcards/11362 "2013-03-29T11:47:28Z")
Hi, I would like to search for the word 'admin' when almost all the indexed values are: admin adminblabla admin\_blabla adminadminblabla blablaadmin admin.blabla Here is my query JSON: { "query": { … [Previous page](https://discuss.elastic.co/top.md?page=709&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=711&per_page=50&period=all)