# Top **URL:** https://discuss.elastic.co/top.md?page=727&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 728 --- ## [How to migrate index](https://discuss.elastic.co/t/how-to-migrate-index/34264)
**Author:** [@Juan\_Andres\_Ramirez](https://discuss.elastic.co/u/Juan_Andres_Ramirez)\ **Replies:** 7\ **Last updated:** [November 10, 2015, 6:29pm UTC](https://discuss.elastic.co/t/how-to-migrate-index/34264 "2015-11-10T18:29:11Z")
Hello Guys, I need to migrate 50 index to a new cluster, I'm going try to explain my situation. Today I have 1 server with 1 shard, 0 replicas and 50 index, and my new environment is with 1 cluster with 4 ES n… --- ## [Error opening zip file or JAR manifest missing : elastic-apm-agent-1.7.0.jar](https://discuss.elastic.co/t/error-opening-zip-file-or-jar-manifest-missing-elastic-apm-agent-1-7-0-jar/192991)
**Author:** [@hikozzaru](https://discuss.elastic.co/u/hikozzaru)\ **Replies:** 1\ **Last updated:** [July 31, 2019, 12:23am UTC](https://discuss.elastic.co/t/error-opening-zip-file-or-jar-manifest-missing-elastic-apm-agent-1-7-0-jar/192991 "2019-07-31T00:23:55Z")
APM Agent language and version: Java-1.7.0 Original install method (e.g. download page, yum, deb, from source, etc.) and version: https://search.maven.org/search?q=a:elastic-apm-agent Fresh install or upgraded from o… --- ## [TypeError: "field" is a required parameter (error)](https://discuss.elastic.co/t/typeerror-field-is-a-required-parameter-error/80769)
**Author:** [@GregMeadows](https://discuss.elastic.co/u/GregMeadows)\ **Replies:** 1\ **Last updated:** [March 31, 2017, 1:36pm UTC](https://discuss.elastic.co/t/typeerror-field-is-a-required-parameter-error/80769 "2017-03-31T13:36:19Z")
Same error in 5.2/5.3 and with different datasets. I have specified the default @timestamp field --- ## [How to pass parameter filter from dashboard to Visualize Kibana](https://discuss.elastic.co/t/how-to-pass-parameter-filter-from-dashboard-to-visualize-kibana/279948)
**Author:** [@HuongCV](https://discuss.elastic.co/u/HuongCV)\ **Replies:** 4\ **Last updated:** [July 30, 2021, 9:46am UTC](https://discuss.elastic.co/t/how-to-pass-parameter-filter-from-dashboard-to-visualize-kibana/279948 "2021-07-30T09:46:51Z")
Hi all, In Dashboard, I have range filter: confirmation\_year from A year to B year. In Elastic have field dead\_year. In metric Visualize , I want to count documents that satisfy the condition: 'dead\_year' less than or… --- ## [Json date is not parsing to @timestamp](https://discuss.elastic.co/t/json-date-is-not-parsing-to-timestamp/229539)
**Author:** [@Bhupal\_Bobbadi](https://discuss.elastic.co/u/Bhupal_Bobbadi)\ **Replies:** 4\ **Last updated:** [April 23, 2020, 10:42pm UTC](https://discuss.elastic.co/t/json-date-is-not-parsing-to-timestamp/229539 "2020-04-23T22:42:13Z")
I'm new to logstash and I'm trying to index json data into Elastic search with logstash and my data has datetime field, and I'm trying to use that field as @timestamp but I could not parse it to the field. Any suggestio… --- ## [Elasticsearch query to check last entries](https://discuss.elastic.co/t/elasticsearch-query-to-check-last-entries/157520)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 4\ **Last updated:** [November 26, 2018, 12:06pm UTC](https://discuss.elastic.co/t/elasticsearch-query-to-check-last-entries/157520 "2018-11-26T12:06:28Z")
Hi, I am using ELK GA 6.3.0. I have the below query; "body": { "query": { "bool": { "filter": { "range": { "@timestamp": { "gte": "now-30s/s", "lte": "now/s", "format": "epoch\_millis" } } … --- ## [Filter or remove some logs in logstash](https://discuss.elastic.co/t/filter-or-remove-some-logs-in-logstash/153519)
**Author:** [@prem\_kumar](https://discuss.elastic.co/u/prem_kumar)\ **Replies:** 4\ **Last updated:** [October 23, 2018, 5:59am UTC](https://discuss.elastic.co/t/filter-or-remove-some-logs-in-logstash/153519 "2018-10-23T05:59:34Z")
I have Filebeat -\> logstash -\> Elasticsearch setup and everything is working fine. I have filter condition in logstash so that I can parse. In my log file it will have some additional logs lines like +++++++++++++++++… --- ## [Search For String That Doesn't End With $ In KQL](https://discuss.elastic.co/t/search-for-string-that-doesnt-end-with-in-kql/205130)
**Author:** [@joshuasmith](https://discuss.elastic.co/u/joshuasmith)\ **Replies:** 2\ **Last updated:** [October 25, 2019, 12:02am UTC](https://discuss.elastic.co/t/search-for-string-that-doesnt-end-with-in-kql/205130 "2019-10-25T00:02:55Z")
Hello, I am trying to perform a Kibana KQL search on a text field for any value that doesn't end in $ For instance, when parsing Windows Event Logs for successful/unsuccessful logins, I am trying to not show computer a… --- ## [Kibana search not returning expected results when wildcard is used in search](https://discuss.elastic.co/t/kibana-search-not-returning-expected-results-when-wildcard-is-used-in-search/217070)
**Author:** [@lzukel](https://discuss.elastic.co/u/lzukel)\ **Replies:** 6\ **Last updated:** [February 12, 2020, 8:26pm UTC](https://discuss.elastic.co/t/kibana-search-not-returning-expected-results-when-wildcard-is-used-in-search/217070 "2020-02-12T20:26:27Z")
I am having a very odd issue and hoping you have seen something like this previously. We have a keyword field application.api.responseText Mapping for that field is: "application": { "properties": { … --- ## [Problem in script field](https://discuss.elastic.co/t/problem-in-script-field/121100)
**Author:** [@nabilberd](https://discuss.elastic.co/u/nabilberd)\ **Replies:** 6\ **Last updated:** [February 27, 2018, 4:26pm UTC](https://discuss.elastic.co/t/problem-in-script-field/121100 "2018-02-27T16:26:45Z")
Hello, I have a problem with script field in kibana , by the way i want count number of attribute but i must test it before calculate then do another count for another attribute and finally sum them. Thank you. --- ## [Sporadic failures with X-Pack/Shield](https://discuss.elastic.co/t/sporadic-failures-with-x-pack-shield/76259)
**Author:** [@Greek0](https://discuss.elastic.co/u/Greek0)\ **Replies:** 6\ **Last updated:** [February 28, 2017, 7:51pm UTC](https://discuss.elastic.co/t/sporadic-failures-with-x-pack-shield/76259 "2017-02-28T19:51:53Z")
We started using xpack/shield with ElasticSearch 5.2. Unfortunately, we get random auth errors and can't even get logstash running because of it (it was running fine before). When requesting http://kibana:9200/\_templat… --- ## [Unable to choose Fleet Agent Policy](https://discuss.elastic.co/t/unable-to-choose-fleet-agent-policy/292051)
**Author:** [@thedanielmatt](https://discuss.elastic.co/u/thedanielmatt)\ **Replies:** 3\ **Last updated:** [December 29, 2021, 3:48am UTC](https://discuss.elastic.co/t/unable-to-choose-fleet-agent-policy/292051 "2021-12-29T03:48:37Z")
Hello everyone, I'm trying to get a Fleet server set up on my on-premise stack for the first time. Server and Agent are RPM installed with version 7.16.1. When setting up the Fleet server, I am unable to select an Age… --- ## [Logstash GROK parse for syslog](https://discuss.elastic.co/t/logstash-grok-parse-for-syslog/86077)
**Author:** [@engineering87](https://discuss.elastic.co/u/engineering87)\ **Replies:** 3\ **Last updated:** [May 17, 2017, 11:33am UTC](https://discuss.elastic.co/t/logstash-grok-parse-for-syslog/86077 "2017-05-17T11:33:04Z")
Hi all, I have a problem with the logstash grok configuration. This is my current logstash configuration (logstash is running on a windows machine): input { tcp { port =\> 5000 type =\> syslog } udp { … --- ## [Authorization Exception Kibana 6.3](https://discuss.elastic.co/t/authorization-exception-kibana-6-3/162605)
**Author:** [@Jagadeesh\_ctm](https://discuss.elastic.co/u/Jagadeesh_ctm)\ **Replies:** 5\ **Last updated:** [March 1, 2019, 6:12pm UTC](https://discuss.elastic.co/t/authorization-exception-kibana-6-3/162605 "2019-03-01T18:12:43Z")
Hii I downloaded the Kibana 6.3.3 git hub and run the code using the command yarn start --no-base-path --oss I use elastic search as a service from aws as a the elastic search and then it is showing an error server … --- ## [Potential logs loss on a WEC server via Winlogbeat](https://discuss.elastic.co/t/potential-logs-loss-on-a-wec-server-via-winlogbeat/331561)
**Author:** [@rpe](https://discuss.elastic.co/u/rpe)\ **Replies:** 1\ **Last updated:** [May 16, 2023, 2:58pm UTC](https://discuss.elastic.co/t/potential-logs-loss-on-a-wec-server-via-winlogbeat/331561 "2023-05-16T14:58:53Z")
Hello, I deployed a WEC with a customer to forward its Windows logs to our SIEM, following the Elastic WEC Server cookbook. However, after synchronizing with the customer, he generated some events that we didn't receiv… --- ## [Receive Authorization Header Logstash Http Input Plugin](https://discuss.elastic.co/t/receive-authorization-header-logstash-http-input-plugin/257407)
**Author:** [@sai\_kiran1](https://discuss.elastic.co/u/sai_kiran1)\ **Replies:** 4\ **Last updated:** [December 3, 2020, 2:18pm UTC](https://discuss.elastic.co/t/receive-authorization-header-logstash-http-input-plugin/257407 "2020-12-03T14:18:43Z")
Hi, I am using the HTTP input plugin to receive data from the postman with Basic Auth enabled, "Authorization" header is available in the postman response but when I print the data in logstash I don't see the Authorizat… --- ## [Elasticsearch not working after enabling X-Pack](https://discuss.elastic.co/t/elasticsearch-not-working-after-enabling-x-pack/185564)
**Author:** [@Dhrumil](https://discuss.elastic.co/u/Dhrumil)\ **Replies:** 4\ **Last updated:** [June 17, 2019, 12:59am UTC](https://discuss.elastic.co/t/elasticsearch-not-working-after-enabling-x-pack/185564 "2019-06-17T00:59:10Z")
Hello, I have installed elasticsearch version 6.8.0 in my production and have created a cluster with 3 master nodes and 20 data nodes. I have installed x-pack in all of the nodes and was trying to authenticate the clust… --- ## [Shield and a new node](https://discuss.elastic.co/t/shield-and-a-new-node/24290)
**Author:** [@bdunbar](https://discuss.elastic.co/u/bdunbar)\ **Replies:** 4\ **Last updated:** [June 25, 2015, 4:14pm UTC](https://discuss.elastic.co/t/shield-and-a-new-node/24290 "2015-06-25T16:14:18Z")
I have an existing ES host. I've got Shield installed. I want a new host to share the load so I install ES, then the Shield plugin. Put the sys and copied system\_key to the new host. Edited elasticsearch.yml with sh… --- ## [Beats on Raspberry Pi 4/4g](https://discuss.elastic.co/t/beats-on-raspberry-pi-4-4g/231814)
**Author:** [@Rainbird](https://discuss.elastic.co/u/Rainbird)\ **Replies:** 2\ **Last updated:** [May 9, 2020, 4:36pm UTC](https://discuss.elastic.co/t/beats-on-raspberry-pi-4-4g/231814 "2020-05-09T16:36:00Z")
It has been a few months since this topic has come up. I thought I would ask here before starting what looks like will be a difficult slog. I would like to run filebeats on a Raspberry Pi to take in data from a bunch o… --- ## [Boosting by popularity in a nested field with a filter](https://discuss.elastic.co/t/boosting-by-popularity-in-a-nested-field-with-a-filter/62261)
**Author:** [@martinwatts](https://discuss.elastic.co/u/martinwatts)\ **Replies:** 2\ **Last updated:** [October 6, 2016, 5:11am UTC](https://discuss.elastic.co/t/boosting-by-popularity-in-a-nested-field-with-a-filter/62261 "2016-10-06T05:11:43Z")
I am trying to create a searchable catalogue of products where products that the user has bought before will get a boost in scoring. I have an index full of products, and these products may have been bought multiple … --- ## [What doest the weight means in completion suggester?](https://discuss.elastic.co/t/what-doest-the-weight-means-in-completion-suggester/33345)
**Author:** [@litaotao](https://discuss.elastic.co/u/litaotao)\ **Replies:** 2\ **Last updated:** [October 30, 2015, 12:34pm UTC](https://discuss.elastic.co/t/what-doest-the-weight-means-in-completion-suggester/33345 "2015-10-30T12:34:37Z")
what does the 'weight' means ? what if leave out the 'weight' data ? curl -X PUT 'localhost:9200/music/song/1?refresh=true' -d '{ "name" : "Nevermind", "suggest" : { "input": \[ "Nevermind", "Nirvana… --- ## [Problems with parsing XML log files with XML filter of Logstash](https://discuss.elastic.co/t/problems-with-parsing-xml-log-files-with-xml-filter-of-logstash/36796)
**Author:** [@Omer\_Uludag](https://discuss.elastic.co/u/Omer_Uludag)\ **Replies:** 7\ **Last updated:** [December 11, 2015, 6:47am UTC](https://discuss.elastic.co/t/problems-with-parsing-xml-log-files-with-xml-filter-of-logstash/36796 "2015-12-11T06:47:25Z")
Hello together, I tried multiple solutions for parsing my logs which are XML files to JSON in Logstash. One log file does look like in this way: \ **Author:** [@Tess.Snow](https://discuss.elastic.co/u/Tess.Snow)\ **Replies:** 1\ **Last updated:** [March 4, 2016, 2:20pm UTC](https://discuss.elastic.co/t/docker-container-logs-and-filebeat/43510 "2016-03-04T14:20:51Z") Hi, was looking forward to filebeats multiline support and shipping docker container logs to ELK. The only option seems to be to parse /var/lib/docker/containers for json logs. Json and multiline seems hard to do. Also… --- ## [Auto kill queries taking more time](https://discuss.elastic.co/t/auto-kill-queries-taking-more-time/289775)
**Author:** [@sreekanth](https://discuss.elastic.co/u/sreekanth)\ **Replies:** 6\ **Last updated:** [November 22, 2021, 9:02pm UTC](https://discuss.elastic.co/t/auto-kill-queries-taking-more-time/289775 "2021-11-22T21:02:09Z")
We are using 7.3 ES. Due to few bad queries fired by end user, ES CPU/Memory jumps to very high and impacts all others. We want to know any way to stop those long-running queries and return 429 or some status, so the cli… --- ## [Create index to HDFS from ElasticSearch](https://discuss.elastic.co/t/create-index-to-hdfs-from-elasticsearch/41229)
**Author:** [@Roberto\_Sancho\_Rojas](https://discuss.elastic.co/u/Roberto_Sancho_Rojas)\ **Replies:** 6\ **Last updated:** [February 10, 2016, 1:14am UTC](https://discuss.elastic.co/t/create-index-to-hdfs-from-elasticsearch/41229 "2016-02-10T01:14:02Z")
Hi: I want to index the data from HDFS and show to the kibana. Actaully elastic and kibana are working in locally directory, but can I search from HDFS JSON files?? How?? Thanks --- ## [Use @timestamp in a \_update\_by\_query](https://discuss.elastic.co/t/use-timestamp-in-a-update-by-query/109581)
**Author:** [@Frances\_Buontempo](https://discuss.elastic.co/u/Frances_Buontempo)\ **Replies:** 3\ **Last updated:** [November 29, 2017, 1:30pm UTC](https://discuss.elastic.co/t/use-timestamp-in-a-update-by-query/109581 "2017-11-29T13:30:36Z")
I'm trying to add a field to documents in an index. I want to bake in the @timestamp field. If I use something like the following in a curl -XPOST -d '{ "script" : { "ctx.source.extra\_field = ctx.\_source.timestamp;",… --- ## [Import dashboard in kibana from 7.5.0 version to 7.4.0](https://discuss.elastic.co/t/import-dashboard-in-kibana-from-7-5-0-version-to-7-4-0/236914)
**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\ **Replies:** 2\ **Last updated:** [June 12, 2020, 3:10pm UTC](https://discuss.elastic.co/t/import-dashboard-in-kibana-from-7-5-0-version-to-7-4-0/236914 "2020-06-12T15:10:58Z")
Hi guys , i'm trying to import a dashboard from kibana 7.5.0 version to 7.4.0 ? is it impossible ? because the loading logo in kibana keeps on loading in kibana when i click import !! Kibana version 7.4.0 thanks in adv… --- ## [Cluster health status changed from \[YELLOW\] to \[RED\] (reason: \[auto-create\] after changing path.data and path.log](https://discuss.elastic.co/t/cluster-health-status-changed-from-yellow-to-red-reason-auto-create-after-changing-path-data-and-path-log/320864)
**Author:** [@amiraliw](https://discuss.elastic.co/u/amiraliw)\ **Replies:** 1\ **Last updated:** [December 11, 2022, 11:58pm UTC](https://discuss.elastic.co/t/cluster-health-status-changed-from-yellow-to-red-reason-auto-create-after-changing-path-data-and-path-log/320864 "2022-12-11T23:58:12Z")
I have installed elasticsearch-8.4.3-x86\_64 and changed the path.data and path.log before I started the service. Permissions to the new pathes are more than needed as following: drwxrwsrwx. 2 elasticsearch elasticsearc… --- ## [How to search when there are 2 fields with dense vectors](https://discuss.elastic.co/t/how-to-search-when-there-are-2-fields-with-dense-vectors/248630)
**Author:** [@Chetan\_Ambi](https://discuss.elastic.co/u/Chetan_Ambi)\ **Replies:** 2\ **Last updated:** [September 28, 2020, 6:23am UTC](https://discuss.elastic.co/t/how-to-search-when-there-are-2-fields-with-dense-vectors/248630 "2020-09-28T06:23:08Z")
I am working on implementing semantic search. I was able to implement where there is only one text field for which we can create dense vector. Can anyone please suggest how to achieve when there are more than one text fi… --- ## [Index Pattern not available when creating a Map layer](https://discuss.elastic.co/t/index-pattern-not-available-when-creating-a-map-layer/217270)
**Author:** [@JoshuaKFarrar](https://discuss.elastic.co/u/JoshuaKFarrar)\ **Replies:** 2\ **Last updated:** [January 30, 2020, 9:14pm UTC](https://discuss.elastic.co/t/index-pattern-not-available-when-creating-a-map-layer/217270 "2020-01-30T21:14:55Z")
I had issues getting Discover to allow me to select data from an index pattern, but fixed this by setting my new index pattern as the default. When attempting to create a map layer from this index pattern, it is not list… --- ## [Heartbeat Won't Ignore SSL Verification](https://discuss.elastic.co/t/heartbeat-wont-ignore-ssl-verification/204472)
**Author:** [@sdf301](https://discuss.elastic.co/u/sdf301)\ **Replies:** 2\ **Last updated:** [October 25, 2019, 12:47am UTC](https://discuss.elastic.co/t/heartbeat-wont-ignore-ssl-verification/204472 "2019-10-25T00:47:58Z")
Hello all. Long time lurker, first time poster. Using Elastic Stack 7.4. I have spent the better part of the past 2 weeks setting up Heartbeats to monitor all of my internal systems and services. It was a ton of work b… --- ## [Conditionals with multiple strings](https://discuss.elastic.co/t/conditionals-with-multiple-strings/78726)
**Author:** [@jcannell](https://discuss.elastic.co/u/jcannell)\ **Replies:** 2\ **Last updated:** [March 15, 2017, 4:40pm UTC](https://discuss.elastic.co/t/conditionals-with-multiple-strings/78726 "2017-03-15T16:40:50Z")
Hello, I'm trying to drop an event should there be either "Device Product" or "Device Vendor" in the \[message\] field. This works fine: if ("Device Vendor" in \[message\] or "Device Product" in \[message\]) { d… --- ## [Ingest date with 12 hour format](https://discuss.elastic.co/t/ingest-date-with-12-hour-format/189713)
**Author:** [@Vijayakumar\_Kannan](https://discuss.elastic.co/u/Vijayakumar_Kannan)\ **Replies:** 4\ **Last updated:** [July 11, 2019, 5:20am UTC](https://discuss.elastic.co/t/ingest-date-with-12-hour-format/189713 "2019-07-11T05:20:10Z")
Trying to extract the date by date processor it's not successful. Still taking the normal timestamp POST \_ingest/pipeline/\_simulate { "pipeline": { "processors": \[ { "grok": { "ignore\_missing": true, … --- ## [Creating new scripted field to showing time difference between 2 log lines](https://discuss.elastic.co/t/creating-new-scripted-field-to-showing-time-difference-between-2-log-lines/253112)
**Author:** [@singyim817](https://discuss.elastic.co/u/singyim817)\ **Replies:** 3\ **Last updated:** [October 30, 2020, 2:28pm UTC](https://discuss.elastic.co/t/creating-new-scripted-field-to-showing-time-difference-between-2-log-lines/253112 "2020-10-30T14:28:49Z")
Hi there, I got a similar situation like this. I have assigned a unique ID for each pair of lines, then I need to calculate the transaction time in second between the datetime value in these lines, finally display on … --- ## [Canvas line chart with timeseries](https://discuss.elastic.co/t/canvas-line-chart-with-timeseries/210034)
**Author:** [@dave.b](https://discuss.elastic.co/u/dave.b)\ **Replies:** 3\ **Last updated:** [December 10, 2019, 2:04pm UTC](https://discuss.elastic.co/t/canvas-line-chart-with-timeseries/210034 "2019-12-10T14:04:42Z")
Using Canvas on Kibana version 6.6.0. I'm new to canvas and struggling to display a line chart with counts over time. Below is the query I'm using. The time doesn't update whenever I change the time filter. I have the ti… --- ## [Is it possible to extract day, month of a date at the time of indexing](https://discuss.elastic.co/t/is-it-possible-to-extract-day-month-of-a-date-at-the-time-of-indexing/162121)
**Author:** [@msmani](https://discuss.elastic.co/u/msmani)\ **Replies:** 3\ **Last updated:** [December 27, 2018, 2:32pm UTC](https://discuss.elastic.co/t/is-it-possible-to-extract-day-month-of-a-date-at-the-time-of-indexing/162121 "2018-12-27T14:32:45Z")
Assume I index a field named "created\_on" as date type (epoch), now I want to extract reports like number of documents created on Monday. 2.number of documents created in the month of December. etc... now if I simpl… --- ## [Metricbeat to show network packets over time](https://discuss.elastic.co/t/metricbeat-to-show-network-packets-over-time/149709)
**Author:** [@Drav3nmc](https://discuss.elastic.co/u/Drav3nmc)\ **Replies:** 3\ **Last updated:** [September 25, 2018, 3:04pm UTC](https://discuss.elastic.co/t/metricbeat-to-show-network-packets-over-time/149709 "2018-09-25T15:04:17Z")
I have metricbeats running on windows server and would like to see a graph of the network traffic over time, to see if i am maxing out network card. I can see the network metricset.name and the system.network.in.bytes a… --- ## [Understanding sending data to ELK](https://discuss.elastic.co/t/understanding-sending-data-to-elk/87860)
**Author:** [@cshekar](https://discuss.elastic.co/u/cshekar)\ **Replies:** 3\ **Last updated:** [June 18, 2017, 8:22am UTC](https://discuss.elastic.co/t/understanding-sending-data-to-elk/87860 "2017-06-18T08:22:38Z")
Hello All, I am kind a newbie to this whole elk field, looking for pointers to my problem. Idea is to generate meaning full reports from logs. Logs include windows DC autentication logs, fw logs, or any application l… --- ## [Nginx file for hosting kibana 5.3.2 not working](https://discuss.elastic.co/t/nginx-file-for-hosting-kibana-5-3-2-not-working/84704)
**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\ **Replies:** 3\ **Last updated:** [May 9, 2017, 10:26am UTC](https://discuss.elastic.co/t/nginx-file-for-hosting-kibana-5-3-2-not-working/84704 "2017-05-09T10:26:35Z")
I am having trouble on hosting kibana 5.3.2 The same file is working on 1 machine but not on another, upstream kibana { server 127.0.0.1:5601; } server { listen 80; server\_name x.y.z.a; # here it is the … --- ## [Showing data hourly](https://discuss.elastic.co/t/showing-data-hourly/278777)
**Author:** [@prathamesh7](https://discuss.elastic.co/u/prathamesh7)\ **Replies:** 7\ **Last updated:** [July 16, 2021, 3:38pm UTC](https://discuss.elastic.co/t/showing-data-hourly/278777 "2021-07-16T15:38:22Z")
Hi Team, I need to display results of filter i am running in visualisation to show for each hour of a day. When i run filter, i can see date for today but not each hour of day , it is showing with gap of 3 hours, so my… --- ## [Remove Fields - all or if contained specific string](https://discuss.elastic.co/t/remove-fields-all-or-if-contained-specific-string/187285)
**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\ **Replies:** 2\ **Last updated:** [June 28, 2019, 8:07am UTC](https://discuss.elastic.co/t/remove-fields-all-or-if-contained-specific-string/187285 "2019-06-28T08:07:06Z")
Hi all, I have a question regarding removing an existing field if contained a specific string. What I did: I update documents by this Post: POST /myindex/\_update\_by\_query { "script": { "source": "ctx.\_source.ta… --- ## [How to create nested mapping using Java API?](https://discuss.elastic.co/t/how-to-create-nested-mapping-using-java-api/89483)
**Author:** [@kaushah](https://discuss.elastic.co/u/kaushah)\ **Replies:** 2\ **Last updated:** [June 15, 2017, 5:00pm UTC](https://discuss.elastic.co/t/how-to-create-nested-mapping-using-java-api/89483 "2017-06-15T17:00:34Z")
PUT /Test1 { "mappings": { "Testing1" : { "properties" : { "Tags" : { "type" : "nested" } } } } } How to do this using … --- ## [Python Elasticsearch urllib3 exception](https://discuss.elastic.co/t/python-elasticsearch-urllib3-exception/59730)
**Author:** [@techrawther](https://discuss.elastic.co/u/techrawther)\ **Replies:** 2\ **Last updated:** [September 8, 2016, 5:16am UTC](https://discuss.elastic.co/t/python-elasticsearch-urllib3-exception/59730 "2016-09-08T05:16:00Z")
I have to use python-elasticsearch library on a machine where I could only execute programs. I am trying to use elasticsearch module by appending sys.path as mentioned below. I am facing below issue. It looks like the pr… --- ## [How to use "ECS logging Java"?](https://discuss.elastic.co/t/how-to-use-ecs-logging-java/206348)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 4\ **Last updated:** [November 4, 2019, 9:08am UTC](https://discuss.elastic.co/t/how-to-use-ecs-logging-java/206348 "2019-11-04T09:08:40Z")
I add log4j2-ecs-layout dependency to the application log4j2.xml COMMAND: ————————————————————— java -javaagent:/root/elastic-apm-agent-1.11.0.jar -Delastic.apm.service\_name=my-cool-service -Delastic.apm.enab… --- ## [Fetching all docs in an app search index](https://discuss.elastic.co/t/fetching-all-docs-in-an-app-search-index/159918)
**Author:** [@frankjoh2](https://discuss.elastic.co/u/frankjoh2)\ **Replies:** 4\ **Last updated:** [December 10, 2018, 9:23pm UTC](https://discuss.elastic.co/t/fetching-all-docs-in-an-app-search-index/159918 "2018-12-10T21:23:47Z")
Hi, I'm trying to get the ids of all documents in my app search index. I tried to simply iteration of searches with an empty query and incrementally increasing the page-number. This seemed to work fine for the first 10 … --- ## [Email action: AddressException\[Illegal address\] when sending to address list](https://discuss.elastic.co/t/email-action-addressexception-illegal-address-when-sending-to-address-list/24452)
**Author:** [@cciaccio](https://discuss.elastic.co/u/cciaccio)\ **Replies:** 4\ **Last updated:** [June 26, 2015, 7:13pm UTC](https://discuss.elastic.co/t/email-action-addressexception-illegal-address-when-sending-to-address-list/24452 "2015-06-26T19:13:47Z")
I keep getting the AddressException\[Illegal address\] error when I try to send alerts to multiple email addresses. This is the "to" attribute in my email action: "to" : "'name1@domain1.com, name2@domain.com'" or "… --- ## [Get elasticsearch settings](https://discuss.elastic.co/t/get-elasticsearch-settings/16151)
**Author:** [@eunever32](https://discuss.elastic.co/u/eunever32)\ **Replies:** 4\ **Last updated:** [May 27, 2014, 6:39pm UTC](https://discuss.elastic.co/t/get-elasticsearch-settings/16151 "2014-05-27T18:39:22Z")
I have what I think is an obvious question. If I tweak some settings such as: index.translog.flush\_threshold\_period or index.merge.policy.use\_compound\_file or index.refresh\_interval or indices.memory.i… --- ## [Trouble importing json log file to ELK via Elasticsearch (or other method)](https://discuss.elastic.co/t/trouble-importing-json-log-file-to-elk-via-elasticsearch-or-other-method/196210)
**Author:** [@0x00](https://discuss.elastic.co/u/0x00)\ **Replies:** 5\ **Last updated:** [August 22, 2019, 5:17am UTC](https://discuss.elastic.co/t/trouble-importing-json-log-file-to-elk-via-elasticsearch-or-other-method/196210 "2019-08-22T05:17:08Z")
I've been fighting this for a while now and may have run into a bit of a roadblock. PROBLEM: I'm trying to import 5GB worth of Zeek/Bro logs (see sample log below) WHAT I TRIED: I've tried to use CURL to send the log… --- ## [Formatting output in a metric visualization](https://discuss.elastic.co/t/formatting-output-in-a-metric-visualization/103193)
**Author:** [@eebee](https://discuss.elastic.co/u/eebee)\ **Replies:** 5\ **Last updated:** [October 12, 2017, 2:33pm UTC](https://discuss.elastic.co/t/formatting-output-in-a-metric-visualization/103193 "2017-10-12T14:33:27Z")
I'm having a couple of metric outputs to show average processing times, but I get alot of decimals in my answers. Visualization edit view I've tried to set the number formatting for the field I'm calculating the averag… --- ## [Logstash filter for start and end events repeating](https://discuss.elastic.co/t/logstash-filter-for-start-and-end-events-repeating/90036)
**Author:** [@pavangovinda](https://discuss.elastic.co/u/pavangovinda)\ **Replies:** 5\ **Last updated:** [June 22, 2017, 5:03am UTC](https://discuss.elastic.co/t/logstash-filter-for-start-and-end-events-repeating/90036 "2017-06-22T05:03:45Z")
Hi, I have a log in the below format.. (Not the complete log, only a sample) 2017-05-25T04:22:38.857 INFO - calling : Main.java method :main 2017-05-25T04:22:39.248 INFO - calling : PhiConfigParser.java method :getDocu… [Previous page](https://discuss.elastic.co/top.md?page=726&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=728&per_page=50&period=all)