# Top **URL:** https://discuss.elastic.co/top.md?page=728&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 729 --- ## [Grok condition for two different type of files](https://discuss.elastic.co/t/grok-condition-for-two-different-type-of-files/28768)
**Author:** [@ushadatt](https://discuss.elastic.co/u/ushadatt)\ **Replies:** 5\ **Last updated:** [September 8, 2015, 6:49am UTC](https://discuss.elastic.co/t/grok-condition-for-two-different-type-of-files/28768 "2015-09-08T06:49:24Z")
Hi, I have to match two patterns to 2 different log files such that if the pattern matches with one of the errors logs encountered in the log file, it triggers the another log file to grok another pattern. How is that po… --- ## [I dont get notification emails](https://discuss.elastic.co/t/i-dont-get-notification-emails/2373)
**Author:** [@ohadR](https://discuss.elastic.co/u/ohadR)\ **Replies:** 5\ **Last updated:** [July 31, 2015, 7:24am UTC](https://discuss.elastic.co/t/i-dont-get-notification-emails/2373 "2015-07-31T07:24:22Z")
I don't get notification emails, even though it is set in my settings... any ideas? --- ## [ECK - "master not discovered yet, this node has not previously joined a bootstrapped (v7+) cluster](https://discuss.elastic.co/t/eck-master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster/237910)
**Author:** [@aman26ps](https://discuss.elastic.co/u/aman26ps)\ **Replies:** 3\ **Last updated:** [September 22, 2020, 6:06am UTC](https://discuss.elastic.co/t/eck-master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster/237910 "2020-09-22T06:06:38Z")
Hi team, We are facing a strange issue where when we are giving master node count in the elasticsearch Custom resource more than 1, the master nodes are not able to elect the master, we have tried giving odd numbers upt… --- ## [Custom labels for a saved search inserted in a dashboard](https://discuss.elastic.co/t/custom-labels-for-a-saved-search-inserted-in-a-dashboard/105926)
**Author:** [@jpertejo](https://discuss.elastic.co/u/jpertejo)\ **Replies:** 3\ **Last updated:** [November 3, 2017, 6:48pm UTC](https://discuss.elastic.co/t/custom-labels-for-a-saved-search-inserted-in-a-dashboard/105926 "2017-11-03T18:48:21Z")
I have added a saved search to a dashboard and field names are used automatically as colums labels, but it is not possible to define custom labels as it can be made in visualizations. This makes that labels for same fiel… --- ## [Java API Query for \_all field in match:](https://discuss.elastic.co/t/java-api-query-for--all-field-in-match/23745)
**Author:** [@Anusha](https://discuss.elastic.co/u/Anusha)\ **Replies:** 3\ **Last updated:** [February 16, 2017, 10:15am UTC](https://discuss.elastic.co/t/java-api-query-for--all-field-in-match/23745 "2017-02-16T10:15:22Z")
Hi, Am using a query : GET ymme/ymmetype/\_search { "size": 20, "query": { "match": { "\_all": { "query": "2000/sun ", "operator": "and" … --- ## [Kibana 4 URL template with multiple values](https://discuss.elastic.co/t/kibana-4-url-template-with-multiple-values/54842)
**Author:** [@lalitr](https://discuss.elastic.co/u/lalitr)\ **Replies:** 3\ **Last updated:** [July 11, 2016, 1:30pm UTC](https://discuss.elastic.co/t/kibana-4-url-template-with-multiple-values/54842 "2016-07-11T13:30:45Z")
Hello, The Kibana 4 feature that allows to create URL based on fields in doc is great. But seems like it support using only one value at the moment. Is there a way to use values from multiple fields in the document t… --- ## [Create link for end user to ack watcher email](https://discuss.elastic.co/t/create-link-for-end-user-to-ack-watcher-email/94987)
**Author:** [@David\_Tomasheski](https://discuss.elastic.co/u/David_Tomasheski)\ **Replies:** 3\ **Last updated:** [July 31, 2017, 9:38pm UTC](https://discuss.elastic.co/t/create-link-for-end-user-to-ack-watcher-email/94987 "2017-07-31T21:38:40Z")
I have a watch that shoots off an email which works great. I would like to add a link to the email so the end user can click it to ack the email so he doesn’t keep getting emails about the same issue. Is there a way to … --- ## [Where do get filebeat.template-es6x.json](https://discuss.elastic.co/t/where-do-get-filebeat-template-es6x-json/117598)
**Author:** [@gaukharaya](https://discuss.elastic.co/u/gaukharaya)\ **Replies:** 2\ **Last updated:** [January 30, 2018, 2:46pm UTC](https://discuss.elastic.co/t/where-do-get-filebeat-template-es6x-json/117598 "2018-01-30T14:46:55Z")
I am having a similar issue as posted here: But my filebeat is running on windows. The post suggests using filebeat.template-es6x.json. However I cannot find it my downloaded resource. I had to run a script to export… --- ## [Tcp input writing too much data in log](https://discuss.elastic.co/t/tcp-input-writing-too-much-data-in-log/24594)
**Author:** [@Wurzelmann](https://discuss.elastic.co/u/Wurzelmann)\ **Replies:** 7\ **Last updated:** [June 30, 2015, 9:05pm UTC](https://discuss.elastic.co/t/tcp-input-writing-too-much-data-in-log/24594 "2015-06-30T21:05:18Z")
I started using four tcp inputs simultaneously and I noticed the logs (var/log/logstash/logstash.log) getting bigger and bigger since then. My log is around 28 GB currently, because everything logstash outputs to elastic… --- ## [Kibana url getting stuck in between](https://discuss.elastic.co/t/kibana-url-getting-stuck-in-between/185084)
**Author:** [@Karn\_Gusain](https://discuss.elastic.co/u/Karn_Gusain)\ **Replies:** 8\ **Last updated:** [June 18, 2019, 10:59am UTC](https://discuss.elastic.co/t/kibana-url-getting-stuck-in-between/185084 "2019-06-18T10:59:43Z")
Hi Experts, i have configured ELK and everything started off well however, i'm facing issues with kibana now as the kibana url not working until i restart it again and this is what very frequent now. The errors what … --- ## [Connection Pool Limit in Elastic Search Server or Client](https://discuss.elastic.co/t/connection-pool-limit-in-elastic-search-server-or-client/111426)
**Author:** [@antonpious](https://discuss.elastic.co/u/antonpious)\ **Replies:** 0\ **Last updated:** [December 12, 2017, 7:57pm UTC](https://discuss.elastic.co/t/connection-pool-limit-in-elastic-search-server-or-client/111426 "2017-12-12T19:57:37Z")
Is there a Connect Pool Limit in either the Elastic Search Server or Java Client. If we have 1 Node, how many concurrent connections or calls can be made to this node. If we have N Nodes, how many concurrent connection… --- ## [Beats 1.3.1 released](https://discuss.elastic.co/t/beats-1-3-1-released/60643)
**Author:** [@tudor](https://discuss.elastic.co/u/tudor)\ **Replies:** 0\ **Last updated:** [September 15, 2016, 8:30pm UTC](https://discuss.elastic.co/t/beats-1-3-1-released/60643 "2016-09-15T20:30:31Z")
Hi, we'd like to announce a new Beats patch release. Changelog: https://www.elastic.co/guide/en/beats/libbeat/current/release-notes-1.3.1.html Downloads: https://www.elastic.co/downloads/beats --- ## [Count all products with True values and show % of total](https://discuss.elastic.co/t/count-all-products-with-true-values-and-show-of-total/298163)
**Author:** [@Utkarsh\_Khodke](https://discuss.elastic.co/u/Utkarsh_Khodke)\ **Replies:** 4\ **Last updated:** [February 25, 2022, 3:44pm UTC](https://discuss.elastic.co/t/count-all-products-with-true-values-and-show-of-total/298163 "2022-02-25T15:44:05Z")
Hello, I'm new to Elasticsearch and Kibana and have a fairly basic question. In the data loaded in Kibana, I have store\_id and the number of products sold in each store. I also have a field call payment\_status which is … --- ## ["{ ValidationError: child \\"elasticsearch\\" fails because \[\\"url\\" is not allowed\]\\n](https://discuss.elastic.co/t/validationerror-child-elasticsearch-fails-because-url-is-not-allowed-n/184981)
**Author:** [@nuwan](https://discuss.elastic.co/u/nuwan)\ **Replies:** 4\ **Last updated:** [June 11, 2019, 11:15am UTC](https://discuss.elastic.co/t/validationerror-child-elasticsearch-fails-because-url-is-not-allowed-n/184981 "2019-06-11T11:15:42Z")
Hi all , Still, I'm getting Kibana server is not ready yet When I go through the Kibana log it looks like this {"type":"log","@timestamp":"2019-06-10T11:41:10Z","tags":\["fatal","root"\],"pid":14918,"message":"{ Validat… --- ## [Dynamic scripting with painless, on\_failure, ingest pipelines](https://discuss.elastic.co/t/dynamic-scripting-with-painless-on-failure-ingest-pipelines/76341)
**Author:** [@mattatriactenv](https://discuss.elastic.co/u/mattatriactenv)\ **Replies:** 4\ **Last updated:** [February 26, 2017, 8:55pm UTC](https://discuss.elastic.co/t/dynamic-scripting-with-painless-on-failure-ingest-pipelines/76341 "2017-02-26T20:55:45Z")
We are on the AWS implementation on ES5. This has limitations which I am now trying to work around. The limitation I'd like help on relates to dynamic scripting - AWS appears to be only allowing Painless. This mean… --- ## [NEST Query in lIst question](https://discuss.elastic.co/t/nest-query-in-list-question/46838)
**Author:** [@Adam\_Whittaker](https://discuss.elastic.co/u/Adam_Whittaker)\ **Replies:** 4\ **Last updated:** [April 12, 2016, 12:33am UTC](https://discuss.elastic.co/t/nest-query-in-list-question/46838 "2016-04-12T00:33:34Z")
Hello, i am using NEST to query Elastic from my C# app and was wondering if there was a way to pass in a list of string to the term query? I currently have something similar with SOLR (SolrQueryInList("FIELDNAME", arra… --- ## [Redis filter/mutate for LogStash](https://discuss.elastic.co/t/redis-filter-mutate-for-logstash/27285)
**Author:** [@Sesha\_Narahari](https://discuss.elastic.co/u/Sesha_Narahari)\ **Replies:** 5\ **Last updated:** [August 13, 2015, 2:19am UTC](https://discuss.elastic.co/t/redis-filter-mutate-for-logstash/27285 "2015-08-13T02:19:28Z")
I would like to use Redis as a cache, look up key:value data to enrich messages in a mutate filter. An example would be IP:MAC association. The pipeline looks like: Input from Redis -\> Filter/Mutate with regex/grok, en… --- ## [Setting up default analyzer using elasticsearch.yml](https://discuss.elastic.co/t/setting-up-default-analyzer-using-elasticsearch-yml/10278)
**Author:** [@Patrick\_Norwood](https://discuss.elastic.co/u/Patrick_Norwood)\ **Replies:** 5\ **Last updated:** [January 10, 2013, 12:23pm UTC](https://discuss.elastic.co/t/setting-up-default-analyzer-using-elasticsearch-yml/10278 "2013-01-10T12:23:48Z")
Hi guys, while setting up my elasticsearch I have encountered a problem setting up the default index and default search analyzer. I want these analyzers to be used for all indexed data (I am using Tire gem for Rub… --- ## [How to pass Values from Drop-down Filter in to ESSQL Query in Kibana Canvas Workpad](https://discuss.elastic.co/t/how-to-pass-values-from-drop-down-filter-in-to-essql-query-in-kibana-canvas-workpad/190041)
**Author:** [@Sankalan\_Banerjee](https://discuss.elastic.co/u/Sankalan_Banerjee)\ **Replies:** 3\ **Last updated:** [August 5, 2019, 7:19pm UTC](https://discuss.elastic.co/t/how-to-pass-values-from-drop-down-filter-in-to-essql-query-in-kibana-canvas-workpad/190041 "2019-08-05T19:19:09Z")
Hi, We have created a Drop-down Filter in Kibana Canvas Workpad which shows the List of Defect Fix Versions :- \`essql query="SELECT defect\_fix\_version FROM \\"project\_defect\_list\*\\""\` | dropdownControl valueColumn="de… --- ## [Are kibana and xpack paid plugins?](https://discuss.elastic.co/t/are-kibana-and-xpack-paid-plugins/72359)
**Author:** [@tushar\_chevulkar](https://discuss.elastic.co/u/tushar_chevulkar)\ **Replies:** 3\ **Last updated:** [January 21, 2017, 8:43am UTC](https://discuss.elastic.co/t/are-kibana-and-xpack-paid-plugins/72359 "2017-01-21T08:43:51Z")
Are kibana and x-pack paid plugins ? if yes where can i find the pricing ? . I have installed kibana under the monitering tab it says "Your Trial license will expire on February 19, 2017." Also what he free alternative… --- ## [Change multiple fields with different variable](https://discuss.elastic.co/t/change-multiple-fields-with-different-variable/232090)
**Author:** [@dotan2401](https://discuss.elastic.co/u/dotan2401)\ **Replies:** 5\ **Last updated:** [May 31, 2020, 2:41pm UTC](https://discuss.elastic.co/t/change-multiple-fields-with-different-variable/232090 "2020-05-31T14:41:26Z")
Hi, I am using version -\> elasticsearch-7.5.2 I want to change multiple fields for a specific index. each field should get a different value. I am using c# Is it possible? currently, it changes all the fields for t… --- ## [How to delete all the elasticsearch indices, that start with a certain string, based on date ranges](https://discuss.elastic.co/t/how-to-delete-all-the-elasticsearch-indices-that-start-with-a-certain-string-based-on-date-ranges/283063)
**Author:** [@JaswantG](https://discuss.elastic.co/u/JaswantG)\ **Replies:** 7\ **Last updated:** [September 2, 2021, 6:03am UTC](https://discuss.elastic.co/t/how-to-delete-all-the-elasticsearch-indices-that-start-with-a-certain-string-based-on-date-ranges/283063 "2021-09-02T06:03:05Z")
I am using elasticsearch 2.2.0. I have a requirement wherein I have to delete certain indices, which are created on a day-to-day basis, based on two different dates. (format - abc-xyz-yyyy-mm-dd) For e.g. - There are 1… --- ## [\_mget vs \_search for large amount of documents](https://discuss.elastic.co/t/mget-vs-search-for-large-amount-of-documents/339521)
**Author:** [@hattorihanzo](https://discuss.elastic.co/u/hattorihanzo)\ **Replies:** 4\ **Last updated:** [July 28, 2023, 12:40pm UTC](https://discuss.elastic.co/t/mget-vs-search-for-large-amount-of-documents/339521 "2023-07-28T12:40:39Z")
Hi there! I'm looking for some guidance around what's the most fit way to retrieve a large amount of documents (\>=1000) when you know their ID. I'd like it to be fast, yet efficient and not put unnecessary strain on ES s… --- ## [Appropriate sample and certainty size](https://discuss.elastic.co/t/appropriate-sample-and-certainty-size/59606)
**Author:** [@Allie\_Yang](https://discuss.elastic.co/u/Allie_Yang)\ **Replies:** 1\ **Last updated:** [September 2, 2016, 9:00am UTC](https://discuss.elastic.co/t/appropriate-sample-and-certainty-size/59606 "2016-09-02T09:00:23Z")
Hi i notice that the default sample and certainty sizes are 2000 and 3. May I ask is there any rule of thumb for setting the numbers? And "Terms are identified from samples of the most relevant documents. Bigger is no… --- ## [How to use conditional statement in Filter](https://discuss.elastic.co/t/how-to-use-conditional-statement-in-filter/2443)
**Author:** [@Ankit\_Pradhan](https://discuss.elastic.co/u/Ankit_Pradhan)\ **Replies:** 4\ **Last updated:** [June 11, 2015, 2:17pm UTC](https://discuss.elastic.co/t/how-to-use-conditional-statement-in-filter/2443 "2015-06-11T14:17:08Z")
How can i query on the message for a particular String and then add a new Field in the output? I tried below but seems like the message as a field doesn't work ... it must be the wrong way i am using the syntax ... help … --- ## [Can I install Kibana as an Elasticsearch plugin?](https://discuss.elastic.co/t/can-i-install-kibana-as-an-elasticsearch-plugin/50624)
**Author:** [@Ij888](https://discuss.elastic.co/u/Ij888)\ **Replies:** 3\ **Last updated:** [May 23, 2016, 4:04am UTC](https://discuss.elastic.co/t/can-i-install-kibana-as-an-elasticsearch-plugin/50624 "2016-05-23T04:04:12Z")
I am trying to run plugin install kibana on my Elasticsearch v2.3.3 installation as a plugin (windows machine) but keep getting the failed to download out of all possible locations error message. I must be doing somethin… --- ## [.monitoring-es-6-\*インデックスファイルの保存期間変更](https://discuss.elastic.co/t/monitoring-es-6/214927)
**Author:** [@Negi700](https://discuss.elastic.co/u/Negi700)\ **Replies:** 3\ **Last updated:** [February 3, 2020, 6:23am UTC](https://discuss.elastic.co/t/monitoring-es-6/214927 "2020-02-03T06:23:33Z")
Elasticsearchのディスク容量が閾値を超えたので、indexがロックされました。 原因を調査しました。 原因 monitoring-es-6-\*インデックスファイルが、7個あり、ギガ単位サイズでした。 対処 monitoring-es-6-\*インデックスファイルを7日間保存から1日保存にしました。 しかし、対処の設定が反映されず、.monitoring-es-6-\*のインデックスのファイル数が 一日ごとに、増えて… --- ## [Writing data on Replica Shards is copied from Primary shard?](https://discuss.elastic.co/t/writing-data-on-replica-shards-is-copied-from-primary-shard/166919)
**Author:** [@TomerA](https://discuss.elastic.co/u/TomerA)\ **Replies:** 8\ **Last updated:** [February 4, 2019, 10:54am UTC](https://discuss.elastic.co/t/writing-data-on-replica-shards-is-copied-from-primary-shard/166919 "2019-02-04T10:54:17Z")
Hi I want to understand if when writing data on the Replica Shards is the data being copied from the Primary Shard itself or is the data provided again from the Master node? I understand that Elasticsearch may want to w… --- ## [Alter how filebeats send data to output](https://discuss.elastic.co/t/alter-how-filebeats-send-data-to-output/64362)
**Author:** [@kalapakim](https://discuss.elastic.co/u/kalapakim)\ **Replies:** 3\ **Last updated:** [October 31, 2016, 5:10pm UTC](https://discuss.elastic.co/t/alter-how-filebeats-send-data-to-output/64362 "2016-10-31T17:10:41Z")
We are created custom logs in json format and appending as a string, such as: {"host": "Kawika\_DevServer","app\_name": "Kafka Test Client","log\_level": "Info","event\_name": "MessageSend","extended\_properties": {"kawika\_… --- ## [Canvas does not recognize Date field](https://discuss.elastic.co/t/canvas-does-not-recognize-date-field/127095)
**Author:** [@MartinVarbanov](https://discuss.elastic.co/u/MartinVarbanov)\ **Replies:** 5\ **Last updated:** [April 13, 2018, 6:28pm UTC](https://discuss.elastic.co/t/canvas-does-not-recognize-date-field/127095 "2018-04-13T18:28:58Z")
I am running canvas for Kibana 6.2.3. There is a date field "Activity month" which is working fine if I build Bar charts in Kibana. However Canvas does not recognize "Activity month" as a date filed and I cannot build vi… --- ## [esRDD not returning SCRIPT\_FIELDS values](https://discuss.elastic.co/t/esrdd-not-returning-script-fields-values/40077)
**Author:** [@kyunam](https://discuss.elastic.co/u/kyunam)\ **Replies:** 5\ **Last updated:** [January 29, 2016, 5:57pm UTC](https://discuss.elastic.co/t/esrdd-not-returning-script-fields-values/40077 "2016-01-29T17:57:41Z")
Returned hashMap doesn't include 'distance' key. Do I need to use esJsonRDD instead? { "query": { ... }, "fields": \[ "\_source" \], "script\_fields": { "distance": { "params": { "lat":… --- ## [Io console not supported tty will not be manipulated - logstash 1.5.4 on Windows 7](https://discuss.elastic.co/t/io-console-not-supported-tty-will-not-be-manipulated-logstash-1-5-4-on-windows-7/32831)
**Author:** [@Sameer\_Dharur](https://discuss.elastic.co/u/Sameer_Dharur)\ **Replies:** 1\ **Last updated:** [October 23, 2015, 8:58am UTC](https://discuss.elastic.co/t/io-console-not-supported-tty-will-not-be-manipulated-logstash-1-5-4-on-windows-7/32831 "2015-10-23T08:58:22Z")
A constantly recurring problem to which I don't seem to find any answers online. The config files have been defined and uploaded in the required folder. The have also been tested using the --configtest command. Anybod… --- ## [Close\_eof](https://discuss.elastic.co/t/close-eof/142167)
**Author:** [@\_kyllr](https://discuss.elastic.co/u/_kyllr)\ **Replies:** 3\ **Last updated:** [July 31, 2018, 3:39am UTC](https://discuss.elastic.co/t/close-eof/142167 "2018-07-31T03:39:29Z")
Does config. close\_eof recommended to use? Thanks. --- ## [Custom fields in index pattern](https://discuss.elastic.co/t/custom-fields-in-index-pattern/111819)
**Author:** [@Ionaru](https://discuss.elastic.co/u/Ionaru)\ **Replies:** 3\ **Last updated:** [December 14, 2017, 10:36pm UTC](https://discuss.elastic.co/t/custom-fields-in-index-pattern/111819 "2017-12-14T22:36:12Z")
Hi, I'm fairly new to using Elastic/Kibana/APM and I'm trying to get custom fields to appear in the Kibana index pattern when the index comes from APM. Using transaction.setCustomContext() I was able to add the fields … --- ## [CASE WHEN THEN](https://discuss.elastic.co/t/case-when-then/192756)
**Author:** [@Farouk6072](https://discuss.elastic.co/u/Farouk6072)\ **Replies:** 4\ **Last updated:** [July 30, 2019, 1:42pm UTC](https://discuss.elastic.co/t/case-when-then/192756 "2019-07-30T13:42:23Z")
I have put this Query on Canva Elasticsearch SQL query : SELECT CASE sexe WHEN 1 THEN 'Male' WHEN 2 THEN 'Female' END FROM "test\*" WHERE sexe IS NOT NULL I have this error message : Whoops! Expression failed Ex… --- ## [Input HTTP\_Poller, HTTPS on the API / untrusted cert](https://discuss.elastic.co/t/input-http-poller-https-on-the-api-untrusted-cert/25492)
**Author:** [@CharlesLabri](https://discuss.elastic.co/u/CharlesLabri)\ **Replies:** 4\ **Last updated:** [September 11, 2015, 6:32pm UTC](https://discuss.elastic.co/t/input-http-poller-https-on-the-api-untrusted-cert/25492 "2015-09-11T18:32:07Z")
Anyone have any luck with HTTPS on untrusted cert with this plugin? I am getting a java error "PKIX path building failed" due to an untrusted cert. PS. trying to use the nagios NCPA plugin to gather perf metrics from… --- ## [Scripting with multiple documents](https://discuss.elastic.co/t/scripting-with-multiple-documents/27044)
**Author:** [@oravecz](https://discuss.elastic.co/u/oravecz)\ **Replies:** 6\ **Last updated:** [August 12, 2015, 12:45pm UTC](https://discuss.elastic.co/t/scripting-with-multiple-documents/27044 "2015-08-12T12:45:02Z")
All of the scripting examples (whether sorting, filtering or computing new values) take place on a single document. Is it possible to remove filtered results prior to aggregation using custom scripts or a plugin? Use c… --- ## [Dec 1st, 2023: \[EN\] Securing Elasticsearch with HashiCorp Vault](https://discuss.elastic.co/t/dec-1st-2023-en-securing-elasticsearch-with-hashicorp-vault/347280)
**Author:** [@framsouza](https://discuss.elastic.co/u/framsouza)\ **Replies:** 0\ **Last updated:** [December 1, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-1st-2023-en-securing-elasticsearch-with-hashicorp-vault/347280 "2023-12-01T08:00:52Z")
Are you utilizing both Elasticsearch and HashiCorp in your environment and seeking ways to connect the two? This concise article unveils the steps to effectively employ HashiCorp Vault for automated credential generat… --- ## [Creating a Dashboard for security events in Kibana](https://discuss.elastic.co/t/creating-a-dashboard-for-security-events-in-kibana/47376)
**Author:** [@dickepa](https://discuss.elastic.co/u/dickepa)\ **Replies:** 0\ **Last updated:** [April 14, 2016, 11:30am UTC](https://discuss.elastic.co/t/creating-a-dashboard-for-security-events-in-kibana/47376 "2016-04-14T11:30:28Z")
Hi, I'm working on a dashboard that can display a number of security events, such as logon logoff, time of day from source etc. However I don't fully appreciate the visualise component of Kibana. My question is: has anyo… --- ## [Filebeats\[6.0.0\] : Can not import Dashboard](https://discuss.elastic.co/t/filebeats-6-0-0-can-not-import-dashboard/110394)
**Author:** [@vincentzhang](https://discuss.elastic.co/u/vincentzhang)\ **Replies:** 2\ **Last updated:** [December 7, 2017, 3:43pm UTC](https://discuss.elastic.co/t/filebeats-6-0-0-can-not-import-dashboard/110394 "2017-12-07T15:43:43Z")
After set up the filebeat 6.0.0 version, I do the procedure as: and type the command ./filebeat setup --dashboards but meet the following message: Exiting: Error importing Kibana dashboards: fail to import the das… --- ## [Custom grok\_pattern on syslog input](https://discuss.elastic.co/t/custom-grok-pattern-on-syslog-input/143669)
**Author:** [@A\_B](https://discuss.elastic.co/u/A_B)\ **Replies:** 3\ **Last updated:** [August 10, 2018, 8:23am UTC](https://discuss.elastic.co/t/custom-grok-pattern-on-syslog-input/143669 "2018-08-10T08:23:54Z")
Hi, I am trying to ingest logs from our Juniper switshes and I'm trying to configure a syslog input. Manyally editing the Logstash input config I got this to work. # Juniper syslog input syslog { port =\> 5518 … --- ## [\_source vs stored fields](https://discuss.elastic.co/t/-source-vs-stored-fields/8025)
**Author:** [@Boaz\_Leskes](https://discuss.elastic.co/u/Boaz_Leskes)\ **Replies:** 3\ **Last updated:** [June 10, 2012, 10:06am UTC](https://discuss.elastic.co/t/-source-vs-stored-fields/8025 "2012-06-10T10:06:18Z")
Hi, ElasticSearch supports two ways of storing data. Every field has a store option and there is a special \_source fields which stores the original JSON. I was wondering what are the rule thumbs to choose the one… --- ## [How to filter by date range in quarter using elasticsearch](https://discuss.elastic.co/t/how-to-filter-by-date-range-in-quarter-using-elasticsearch/21728)
**Author:** [@wasaeshoaib](https://discuss.elastic.co/u/wasaeshoaib)\ **Replies:** 1\ **Last updated:** [February 20, 2017, 4:24pm UTC](https://discuss.elastic.co/t/how-to-filter-by-date-range-in-quarter-using-elasticsearch/21728 "2017-02-20T16:24:24Z")
I have an index /testdate/daterange with the following mapping PUT /testdate/daterange/\_mapping { "daterange": { "properties": { "text":{ "type": "string" },… --- ## [Monitoring UI \[illegal\_argument\_exception\] - fielddata default value](https://discuss.elastic.co/t/monitoring-ui-illegal-argument-exception-fielddata-default-value/198059)
**Author:** [@marcus\_lhisp](https://discuss.elastic.co/u/marcus_lhisp)\ **Replies:** 4\ **Last updated:** [September 5, 2019, 7:26am UTC](https://discuss.elastic.co/t/monitoring-ui-illegal-argument-exception-fielddata-default-value/198059 "2019-09-05T07:26:55Z")
Hi, First of all this is my first "real" post here so excuse me if there is something off or not according to the rules. I've read them but maybe I missed something. I will update this post in case of. I've found alrea… --- ## [Timelion: ignore some values for field](https://discuss.elastic.co/t/timelion-ignore-some-values-for-field/126359)
**Author:** [@sdndude](https://discuss.elastic.co/u/sdndude)\ **Replies:** 2\ **Last updated:** [April 2, 2018, 5:10pm UTC](https://discuss.elastic.co/t/timelion-ignore-some-values-for-field/126359 "2018-04-02T17:10:56Z")
I have a timelion "query" that works great. However, I am using the split function to get the top 10 occurences and I can't figure out how to tell it to ignore, or don't show, the fields that contain certain values. Wh… --- ## [Elasticsearch Spark - Tracing of Statement Scan And Scroll](https://discuss.elastic.co/t/elasticsearch-spark-tracing-of-statement-scan-and-scroll/35062)
**Author:** [@eliasah](https://discuss.elastic.co/u/eliasah)\ **Replies:** 2\ **Last updated:** [November 24, 2015, 8:39am UTC](https://discuss.elastic.co/t/elasticsearch-spark-tracing-of-statement-scan-and-scroll/35062 "2015-11-24T08:39:32Z")
I have found this question on SO and I'm curious about what do you think about that @costin ? We are trying to integrate ES (1.7.2, 4 node cluster) with Spark (1.5.1, compiled with hive and hadoop with scala 2.11, 4 n… --- ## [Error loading data - Request to Elasticsearch failed](https://discuss.elastic.co/t/error-loading-data-request-to-elasticsearch-failed/217629)
**Author:** [@Gelinski](https://discuss.elastic.co/u/Gelinski)\ **Replies:** 6\ **Last updated:** [February 21, 2020, 9:02pm UTC](https://discuss.elastic.co/t/error-loading-data-request-to-elasticsearch-failed/217629 "2020-02-21T21:02:43Z")
Hi, I need help to understand what is causing this error in my environment. Tks! Error loading data Request to Elasticsearch failed: {"error":{}} Error: Request to Elasticsearch failed: {"error":{}} at http://elk… --- ## [Blank dashboards after setup](https://discuss.elastic.co/t/blank-dashboards-after-setup/193721)
**Author:** [@Buh-Lock-ay](https://discuss.elastic.co/u/Buh-Lock-ay)\ **Replies:** 6\ **Last updated:** [August 6, 2019, 1:57am UTC](https://discuss.elastic.co/t/blank-dashboards-after-setup/193721 "2019-08-06T01:57:24Z")
Hey there, I'm new to the Elastic stack and trying to build a POC in my lab. I've got the foundation created of being 3 Elastic nodes (1 master and 2 ingest) and a Kibana node. I've installed filebeat, metricbeat, and … --- ## [Visualize Geohash using JSON input](https://discuss.elastic.co/t/visualize-geohash-using-json-input/31845)
**Author:** [@David\_L](https://discuss.elastic.co/u/David_L)\ **Replies:** 6\ **Last updated:** [October 13, 2015, 8:12pm UTC](https://discuss.elastic.co/t/visualize-geohash-using-json-input/31845 "2015-10-13T20:12:31Z")
Hi All, I indexed huge machine generted time series data in elastic db. We want to visualize in kibana machines locations and statiscs regarding each machine. My naive solution is to store geohash data in each record an… --- ## [Problems running via docker-compose](https://discuss.elastic.co/t/problems-running-via-docker-compose/147124)
**Author:** [@vgoklani](https://discuss.elastic.co/u/vgoklani)\ **Replies:** 7\ **Last updated:** [September 4, 2018, 6:47am UTC](https://discuss.elastic.co/t/problems-running-via-docker-compose/147124 "2018-09-04T06:47:47Z")
Hello - could you please review my docker-compose file, as I'm getting a ton of errors. docker-compose file: version: '2' services: elasticsearch: container\_name: elasticsearch restart: always im… [Previous page](https://discuss.elastic.co/top.md?page=727&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=729&per_page=50&period=all)