# Top **URL:** https://discuss.elastic.co/top.md?page=730&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 731 --- ## [Problem in kibana (web browser not working)](https://discuss.elastic.co/t/problem-in-kibana-web-browser-not-working/267022)
**Author:** [@gregory7](https://discuss.elastic.co/u/gregory7)\ **Replies:** 2\ **Last updated:** [March 12, 2021, 4:13am UTC](https://discuss.elastic.co/t/problem-in-kibana-web-browser-not-working/267022 "2021-03-12T04:13:13Z")
Hi, I installed elasticsearch and kibana on my local pc with virtualbox machine. They are works good. later, I install same application on linux server, they are not working. The linux server cannot access internet c… --- ## [Out-of-memory issues in 7.6](https://discuss.elastic.co/t/out-of-memory-issues-in-7-6/230158)
**Author:** [@sherzinger](https://discuss.elastic.co/u/sherzinger)\ **Replies:** 2\ **Last updated:** [May 4, 2020, 12:54pm UTC](https://discuss.elastic.co/t/out-of-memory-issues-in-7-6/230158 "2020-05-04T12:54:05Z")
Hello, we're having some issues starting Kibana 7.6.2. During the optimization step this error is being thrown. We have a VM with 16GB RAM and 8 vCPU with this setting in the Dockerfile: ENV NODE\_OPTIONS="--max-old-s… --- ## [Track Visualization and Dashboard Usage and Performance](https://discuss.elastic.co/t/track-visualization-and-dashboard-usage-and-performance/311152)
**Author:** [@Kohlman](https://discuss.elastic.co/u/Kohlman)\ **Replies:** 4\ **Last updated:** [August 2, 2022, 1:46pm UTC](https://discuss.elastic.co/t/track-visualization-and-dashboard-usage-and-performance/311152 "2022-08-02T13:46:31Z")
I've searched and this question has been asked a number of times over the years. The 2 most recent being in September and October 2020. I'd like to be able to see how often users are accessing our various dashboards? A… --- ## [How to ignore previous log files when using file input plugin?](https://discuss.elastic.co/t/how-to-ignore-previous-log-files-when-using-file-input-plugin/25940)
**Author:** [@nathaniel](https://discuss.elastic.co/u/nathaniel)\ **Replies:** 4\ **Last updated:** [September 5, 2016, 6:44pm UTC](https://discuss.elastic.co/t/how-to-ignore-previous-log-files-when-using-file-input-plugin/25940 "2016-09-05T18:44:21Z")
Hi guys, I am a newbie in logstash. I am trying to forward all my log files to elasticsearch using logstash. The problem is, the previously existing log files are huge and I do not need them. Is there a way to only input… --- ## [Will packetbeat remain free?](https://discuss.elastic.co/t/will-packetbeat-remain-free/1580)
**Author:** [@kitex](https://discuss.elastic.co/u/kitex)\ **Replies:** 4\ **Last updated:** [September 4, 2015, 7:25pm UTC](https://discuss.elastic.co/t/will-packetbeat-remain-free/1580 "2015-09-04T19:25:59Z")
I was wondering if packetbeat will remail free? --- ## [Flush API and Garbage Collection](https://discuss.elastic.co/t/flush-api-and-garbage-collection/14677)
**Author:** [@vaidik](https://discuss.elastic.co/u/vaidik)\ **Replies:** 7\ **Last updated:** [December 4, 2013, 9:41am UTC](https://discuss.elastic.co/t/flush-api-and-garbage-collection/14677 "2013-12-04T09:41:48Z")
I am trying to understand Flush API and some JVM related issues I am seeing. The Flush API in the guide says: The flush API allows to flush one or more indices through an API. The flush process of an index basically… --- ## [How i can determine the difference of two fields(ROWS) in kibana](https://discuss.elastic.co/t/how-i-can-determine-the-difference-of-two-fields-rows-in-kibana/250922)
**Author:** [@Raja\_Kushwah](https://discuss.elastic.co/u/Raja_Kushwah)\ **Replies:** 2\ **Last updated:** [October 5, 2020, 6:43am UTC](https://discuss.elastic.co/t/how-i-can-determine-the-difference-of-two-fields-rows-in-kibana/250922 "2020-10-05T06:43:33Z")
Please find the attached screenshot.!! I am trying to create a new filed name -- 'msec different' and its value will be '0' when the event name is a start and 2nd value will be the difference of \[2nd 'msecs' value - 3… --- ## [Logs UI - Selectable message fields?](https://discuss.elastic.co/t/logs-ui-selectable-message-fields/166051)
**Author:** [@ceekay](https://discuss.elastic.co/u/ceekay)\ **Replies:** 2\ **Last updated:** [January 29, 2019, 11:22pm UTC](https://discuss.elastic.co/t/logs-ui-selectable-message-fields/166051 "2019-01-29T23:22:13Z")
I'd like to use the Logs UI for a bit more than plain syslog (e.g., Apache all the logs) however I can't get it to display anything other than a plain message field. This is not ideal when displaying non-syslog logs for… --- ## [Output.elasticsearch -\> console](https://discuss.elastic.co/t/output-elasticsearch-console/132708)
**Author:** [@ecc256](https://discuss.elastic.co/u/ecc256)\ **Replies:** 2\ **Last updated:** [May 22, 2018, 4:29am UTC](https://discuss.elastic.co/t/output-elasticsearch-console/132708 "2018-05-22T04:29:59Z")
Guys, How do I set output.elasticsearch to console only, without elasticsearch hosts? If I do # hosts: \["localhost:9200"\] console: I get Exiting: error initializing publisher: missing required field accessing 'outp… --- ## [Elastic Search Spark Connector for Spark 1.6, ES 5.1.1 and Scala 2.10](https://discuss.elastic.co/t/elastic-search-spark-connector-for-spark-1-6-es-5-1-1-and-scala-2-10/70046)
**Author:** [@krishmah](https://discuss.elastic.co/u/krishmah)\ **Replies:** 2\ **Last updated:** [February 6, 2017, 5:36pm UTC](https://discuss.elastic.co/t/elastic-search-spark-connector-for-spark-1-6-es-5-1-1-and-scala-2-10/70046 "2017-02-06T17:36:03Z")
Hi Team, Can you please confirm the following 2 questions 1) see that from Spark Packages link https://spark-packages.org/package/elastic/elasticsearch-hadoop that anything above 5.0.0-Alpha4 release provides only … --- ## [What is way to approach "INSERT ON DUPLICATE KEY UPDATE" in ES](https://discuss.elastic.co/t/what-is-way-to-approach-insert-on-duplicate-key-update-in-es/10426)
**Author:** [@haizaar](https://discuss.elastic.co/u/haizaar)\ **Replies:** 2\ **Last updated:** [January 20, 2013, 5:59pm UTC](https://discuss.elastic.co/t/what-is-way-to-approach-insert-on-duplicate-key-update-in-es/10426 "2013-01-20T17:59:36Z")
Good day, I have the following "article" document: { "article\_text" : { "type": "string" }, "found\_at\_urls": { "type": "string" }, } I generate \_id myself by hashing the article\_text. Article can appea… --- ## [Question about Logstash and SNMP](https://discuss.elastic.co/t/question-about-logstash-and-snmp/72938)
**Author:** [@rcaropreso](https://discuss.elastic.co/u/rcaropreso)\ **Replies:** 5\ **Last updated:** [January 27, 2017, 3:41pm UTC](https://discuss.elastic.co/t/question-about-logstash-and-snmp/72938 "2017-01-27T15:41:59Z")
Hello, I'm new on logstash applications and I have a scenario here like this: it is necessary to perform a polling over a bunch of sensors through SNMP requests. The snmp trap is not applicable for this situation si… --- ## [Filebeat Vulenerability - Logjam attack](https://discuss.elastic.co/t/filebeat-vulenerability-logjam-attack/58572)
**Author:** [@vienodp](https://discuss.elastic.co/u/vienodp)\ **Replies:** 5\ **Last updated:** [August 24, 2016, 10:40am UTC](https://discuss.elastic.co/t/filebeat-vulenerability-logjam-attack/58572 "2016-08-24T10:40:37Z")
Hi , Background - ELK 2,3, Shield 2.x, Filebeat latest stable. Configuration done - We are trying to configure Filebeat with TLS V1.2 Filebeat sending data to logstash , so logstash output is configured. For that w… --- ## [Create index with multiple different types / add new type to existing index via JavaAPI](https://discuss.elastic.co/t/create-index-with-multiple-different-types-add-new-type-to-existing-index-via-javaapi/14110)
**Author:** [@Alexander\_Kley](https://discuss.elastic.co/u/Alexander_Kley)\ **Replies:** 5\ **Last updated:** [October 28, 2013, 11:00am UTC](https://discuss.elastic.co/t/create-index-with-multiple-different-types-add-new-type-to-existing-index-via-javaapi/14110 "2013-10-28T11:00:04Z")
Hi guys, 1. is it possible to create an index with more than one type? Things like this don't work and thrown a 'Index allready exists': // create index with more than one type with default mapping public void… --- ## [Elasticsearch Disk indices storage greater than the indices used space](https://discuss.elastic.co/t/elasticsearch-disk-indices-storage-greater-than-the-indices-used-space/271328)
**Author:** [@Ahmed\_Abdulaleem](https://discuss.elastic.co/u/Ahmed_Abdulaleem)\ **Replies:** 4\ **Last updated:** [April 29, 2021, 8:07am UTC](https://discuss.elastic.co/t/elasticsearch-disk-indices-storage-greater-than-the-indices-used-space/271328 "2021-04-29T08:07:54Z")
I have an issue with disk space as the disk indices greater than size of index as shown in the attached file. can anyone help me to understand why the data much greater than actual index size as sum of storage o… --- ## [How to add field to every element from an array with logstash ruby](https://discuss.elastic.co/t/how-to-add-field-to-every-element-from-an-array-with-logstash-ruby/266257)
**Author:** [@syrine\_chelly](https://discuss.elastic.co/u/syrine_chelly)\ **Replies:** 4\ **Last updated:** [March 5, 2021, 9:33am UTC](https://discuss.elastic.co/t/how-to-add-field-to-every-element-from-an-array-with-logstash-ruby/266257 "2021-03-05T09:33:35Z")
Hi I have an array such like this: "step": \[ "\> MESSAGE AUTOMATE 03/08/2020 18:39:01 : POUR LA JOURNEE DU 20200731 L'ETAPE UNIP A PRIS 00H00", "\> MESSAGE AUTOMATE 03/08/2020 18:39:01 : POUR LA JOURNEE DU 20… --- ## [Index not rolling over](https://discuss.elastic.co/t/index-not-rolling-over/183603)
**Author:** [@xyz2](https://discuss.elastic.co/u/xyz2)\ **Replies:** 4\ **Last updated:** [June 3, 2019, 5:50pm UTC](https://discuss.elastic.co/t/index-not-rolling-over/183603 "2019-06-03T17:50:01Z")
Hi I performed below steps as per https://github.com/elastic/kibana/issues/27967 Index rolls over only once but not after that. I have logstash setup with ilm settings as below ilm\_enabled =\> true ilm\_rollover\_alias… --- ## [Help with simple grok filter for getting date](https://discuss.elastic.co/t/help-with-simple-grok-filter-for-getting-date/75951)
**Author:** [@Pete\_Del\_Rosso](https://discuss.elastic.co/u/Pete_Del_Rosso)\ **Replies:** 4\ **Last updated:** [February 22, 2017, 6:46am UTC](https://discuss.elastic.co/t/help-with-simple-grok-filter-for-getting-date/75951 "2017-02-22T06:46:20Z")
i have tried to get this working for a couple of days now. it seems so simple i must be missing something. I have read all the topics and tried to find examples to help me get it working, no luck. I just want to have the… --- ## [Kibana 4.5.0: dashboard can not open in IE 11](https://discuss.elastic.co/t/kibana-4-5-0-dashboard-can-not-open-in-ie-11/48369)
**Author:** [@macymin](https://discuss.elastic.co/u/macymin)\ **Replies:** 4\ **Last updated:** [August 11, 2016, 4:35pm UTC](https://discuss.elastic.co/t/kibana-4-5-0-dashboard-can-not-open-in-ie-11/48369 "2016-08-11T16:35:21Z")
when i use chrome no issue but IE 11, it will show fatal error. Any one know how to fix? btw, this happens when i try to access kibana, not dashboard related. --- ## [ANN Search Timeouts](https://discuss.elastic.co/t/ann-search-timeouts/299879)
**Author:** [@SbstnErhrdt](https://discuss.elastic.co/u/SbstnErhrdt)\ **Replies:** 8\ **Last updated:** [April 9, 2022, 2:10pm UTC](https://discuss.elastic.co/t/ann-search-timeouts/299879 "2022-04-09T14:10:33Z")
We try to use the ANN (Approximate Nearest Neighbor) feature of the 8.0 Version of Elasticsearch. (k-nearest neighbor (kNN) search | Elasticsearch Guide \[8.1\] | Elastic) At the moment we have indexed 16 million document… --- ## [How much disk and memory is my Elasticsearch using and occupying?](https://discuss.elastic.co/t/how-much-disk-and-memory-is-my-elasticsearch-using-and-occupying/263926)
**Author:** [@mahalabobis](https://discuss.elastic.co/u/mahalabobis)\ **Replies:** 3\ **Last updated:** [February 28, 2021, 12:59am UTC](https://discuss.elastic.co/t/how-much-disk-and-memory-is-my-elasticsearch-using-and-occupying/263926 "2021-02-28T00:59:27Z")
I'm trying to determine my hardware needs. So I want to find exactly how much memory and disk space am I using and occupying. What are the commands to use? --- ## [.NET core app unsuccessful transfer to APM server on Kubernetes](https://discuss.elastic.co/t/net-core-app-unsuccessful-transfer-to-apm-server-on-kubernetes/264242)
**Author:** [@greenfield](https://discuss.elastic.co/u/greenfield)\ **Replies:** 3\ **Last updated:** [February 17, 2021, 6:41pm UTC](https://discuss.elastic.co/t/net-core-app-unsuccessful-transfer-to-apm-server-on-kubernetes/264242 "2021-02-17T18:41:52Z")
Kibana version: 7.11 Elasticsearch version: 7.11 APM Server version: 7.11 APM Agent language and version: .NET\_Core/3.1.12 Original install method (e.g. download page, yum, deb, from source, etc.) and version: ECK o… --- ## [Is there a way to combine default BM25 score of Elasticsearch and Dense Vectors similarity](https://discuss.elastic.co/t/is-there-a-way-to-combine-default-bm25-score-of-elasticsearch-and-dense-vectors-similarity/225168)
**Author:** [@dpappas](https://discuss.elastic.co/u/dpappas)\ **Replies:** 2\ **Last updated:** [March 26, 2020, 9:04pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-combine-default-bm25-score-of-elasticsearch-and-dense-vectors-similarity/225168 "2020-03-26T21:04:30Z")
Hello everyone! I would like to combine the BM25 score computed by Elasticsearch and The cosine similarity of dense vectors. I read the following post It would be nice if I could somehow use the BM25 score in the … --- ## [Use environmental variables in filebeat configuration?](https://discuss.elastic.co/t/use-environmental-variables-in-filebeat-configuration/162772)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [January 3, 2019, 9:28am UTC](https://discuss.elastic.co/t/use-environmental-variables-in-filebeat-configuration/162772 "2019-01-03T09:28:26Z")
Hi, I would like to add some fields to some log inputs. Lets say I have an environmental variable path1=my\_first\_instance Is it possible to configure something like this in the input configuration? fields: instanc… --- ## [ServiceNow integration with ELK Stack 6.3](https://discuss.elastic.co/t/servicenow-integration-with-elk-stack-6-3/147903)
**Author:** [@bab](https://discuss.elastic.co/u/bab)\ **Replies:** 2\ **Last updated:** [September 10, 2018, 8:29am UTC](https://discuss.elastic.co/t/servicenow-integration-with-elk-stack-6-3/147903 "2018-09-10T08:29:41Z")
Hey, We’re using ELK Stack 6.3 to visualize/analyse different kind of logs in our company. Now, we would need to raise a ticket in ServiceNow if there are any warnings or critical messages in the logs. Is there anyway … --- ## [401 Authorization Error with logstash elastic cloud module](https://discuss.elastic.co/t/401-authorization-error-with-logstash-elastic-cloud-module/146477)
**Author:** [@aashishgahlawat](https://discuss.elastic.co/u/aashishgahlawat)\ **Replies:** 2\ **Last updated:** [August 29, 2018, 3:03pm UTC](https://discuss.elastic.co/t/401-authorization-error-with-logstash-elastic-cloud-module/146477 "2018-08-29T15:03:47Z")
Official logstash elastic cloud module Official doc for starting with My logstash.yml looks like: # ------------ Cloud Settings --------------- # Define Elastic Cloud settings here. # Format of cloud.id is a base64 va… --- ## [Derive new fields from existing fields](https://discuss.elastic.co/t/derive-new-fields-from-existing-fields/117197)
**Author:** [@ramchjob](https://discuss.elastic.co/u/ramchjob)\ **Replies:** 2\ **Last updated:** [January 26, 2018, 2:59pm UTC](https://discuss.elastic.co/t/derive-new-fields-from-existing-fields/117197 "2018-01-26T14:59:17Z")
Dear Gurus, I am looking dynamic mapping of the fields from the existing fields. Ex: I have below document currently. { "id": "1b2b3c4d5e", "active": true, "lastName": "Mike", "firstName": "Walter", "gender": "m… --- ## [Divide two fields and store in a new field to be visualized in Kibana](https://discuss.elastic.co/t/divide-two-fields-and-store-in-a-new-field-to-be-visualized-in-kibana/67400)
**Author:** [@Mike\_Clarke](https://discuss.elastic.co/u/Mike_Clarke)\ **Replies:** 2\ **Last updated:** [November 30, 2016, 11:56am UTC](https://discuss.elastic.co/t/divide-two-fields-and-store-in-a-new-field-to-be-visualized-in-kibana/67400 "2016-11-30T11:56:41Z")
I would like to take two fields from a GROK filter and divide the two to get the number of events occurring in one second. ES, LS, FB, Kibana all 5.0. Something like this time\_per\_sel = enrichtime / totalsel. Input: 2… --- ## [Configuring Logstash to read Cisco WSA logs](https://discuss.elastic.co/t/configuring-logstash-to-read-cisco-wsa-logs/76975)
**Author:** [@Becky\_Jones](https://discuss.elastic.co/u/Becky_Jones)\ **Replies:** 1\ **Last updated:** [March 21, 2017, 6:34am UTC](https://discuss.elastic.co/t/configuring-logstash-to-read-cisco-wsa-logs/76975 "2017-03-21T06:34:44Z")
Hi there, I have installed logstash and have some raw logs which have been transferred to my log server from our Cisco WSA (IronPort S170). I have run some basic tests, e.g the Hello World test which works fine. When… --- ## [🎉 Elastic Stack 8.1 released](https://discuss.elastic.co/t/elastic-stack-8-1-released/299146)
**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\ **Replies:** 0\ **Last updated:** [March 8, 2022, 9:32pm UTC](https://discuss.elastic.co/t/elastic-stack-8-1-released/299146 "2022-03-08T21:32:12Z")
New in Elastic 8.1 Elastic 8.1 enables our customers and community to further accelerate software development lifecycles with deeper visibility into both serverless architectures and CI/CD pipelines. In addition, Elastic… --- ## [How to unzip s3 log files in Logstash](https://discuss.elastic.co/t/how-to-unzip-s3-log-files-in-logstash/133679)
**Author:** [@clash\_of\_clanss](https://discuss.elastic.co/u/clash_of_clanss)\ **Replies:** 4\ **Last updated:** [May 29, 2018, 1:16pm UTC](https://discuss.elastic.co/t/how-to-unzip-s3-log-files-in-logstash/133679 "2018-05-29T13:16:52Z")
Hi, I have to load s3 log files into an ES. So I read log files from S3 through LogStash. But the problem is, the log files are in zip file format. How to unzip these log files in LogStash? Thanks, --- ## [java.sql.Timestamp =\> ElasticSearch long =\> C# System.DateTime](https://discuss.elastic.co/t/java-sql-timestamp-elasticsearch-long-c-system-datetime/59048)
**Author:** [@fpopic](https://discuss.elastic.co/u/fpopic)\ **Replies:** 4\ **Last updated:** [August 30, 2016, 10:59am UTC](https://discuss.elastic.co/t/java-sql-timestamp-elasticsearch-long-c-system-datetime/59048 "2016-08-30T10:59:04Z")
I use java.sql.Timestamp 2014-12-27 00:00:00 and ElasticSearch saves it as 1419634800000 "EventDateLocal" : { "type" : "long" }, and I want to read it in C# (via NEST) in DateTime I tried \[Date(NumericRe… --- ## [Tutorial/example of embedding?](https://discuss.elastic.co/t/tutorial-example-of-embedding/4343)
**Author:** [@bimargulies](https://discuss.elastic.co/u/bimargulies)\ **Replies:** 4\ **Last updated:** [May 17, 2011, 10:38pm UTC](https://discuss.elastic.co/t/tutorial-example-of-embedding/4343 "2011-05-17T22:38:21Z")
I want to hide an elastic search instance entirely within my own webapp. Googling shows evidence that this is possible, but I'd be grateful for a straight-up example. --- ## [Logstash not connecting to elasticsearch after enabling xpack.security on single.node](https://discuss.elastic.co/t/logstash-not-connecting-to-elasticsearch-after-enabling-xpack-security-on-single-node/242741)
**Author:** [@Bhanu\_Praveen](https://discuss.elastic.co/u/Bhanu_Praveen)\ **Replies:** 3\ **Last updated:** [July 28, 2020, 6:05am UTC](https://discuss.elastic.co/t/logstash-not-connecting-to-elasticsearch-after-enabling-xpack-security-on-single-node/242741 "2020-07-28T06:05:07Z")
Hello, I have configured elastic stack on Docker with below docker-compose on single node model. Initially disabled xpack-security and everything working fine. Post that enabled, xpack-security and restarted stack. Log… --- ## [Logstash collecting logs from multiple servers](https://discuss.elastic.co/t/logstash-collecting-logs-from-multiple-servers/143682)
**Author:** [@Priyaranjan\_Mudliar](https://discuss.elastic.co/u/Priyaranjan_Mudliar)\ **Replies:** 3\ **Last updated:** [August 9, 2018, 1:09pm UTC](https://discuss.elastic.co/t/logstash-collecting-logs-from-multiple-servers/143682 "2018-08-09T13:09:18Z")
Is there a way so that i can use logstash to input from multiple servers without me having to install filebeat on multiple servers? Please Help ... Any leads would be appreciated. :slightly\_smiling\_face: PS:- I am worki… --- ## [So much pain on ES, query on date returns wrong results](https://discuss.elastic.co/t/so-much-pain-on-es-query-on-date-returns-wrong-results/120215)
**Author:** [@Derrick](https://discuss.elastic.co/u/Derrick)\ **Replies:** 3\ **Last updated:** [February 16, 2018, 6:07pm UTC](https://discuss.elastic.co/t/so-much-pain-on-es-query-on-date-returns-wrong-results/120215 "2018-02-16T18:07:38Z")
Hi support, I am doing range query on date field, but it returns no expected result, any idea? { "query": { "bool": { "filter": \[ { "range": { "booking.dealerIDUpdate": { … --- ## [Timelion - subtract by split data field (group per field before operation)](https://discuss.elastic.co/t/timelion-subtract-by-split-data-field-group-per-field-before-operation/114180)
**Author:** [@eurobosch](https://discuss.elastic.co/u/eurobosch)\ **Replies:** 3\ **Last updated:** [January 9, 2018, 4:32pm UTC](https://discuss.elastic.co/t/timelion-subtract-by-split-data-field-group-per-field-before-operation/114180 "2018-01-09T16:32:28Z")
Just found out I have this great tool for time-series in Kibana for ES timed data and would like to analyse through \>1M of the following doc type per MarketName field: { "MarketName" : "BTC-XRP", "High" : 0.000009… --- ## [Status: red; Crashes with java.nio.channels.ClosedChannelException](https://discuss.elastic.co/t/status-red-crashes-with-java-nio-channels-closedchannelexception/11318)
**Author:** [@Andreas\_Jansson](https://discuss.elastic.co/u/Andreas_Jansson)\ **Replies:** 3\ **Last updated:** [March 27, 2013, 12:23pm UTC](https://discuss.elastic.co/t/status-red-crashes-with-java-nio-channels-closedchannelexception/11318 "2013-03-27T12:23:15Z")
Hi list, I've been running ES for about a week (I'm a complete noob, I should add), but recently it started behaving weirdly. I start elasticsearch, indices are recovered, then it hangs for a minute or so, refusin… --- ## [Parsing apache airflow logs](https://discuss.elastic.co/t/parsing-apache-airflow-logs/186792)
**Author:** [@e526e9a7b99f61623fe7](https://discuss.elastic.co/u/e526e9a7b99f61623fe7)\ **Replies:** 2\ **Last updated:** [June 21, 2019, 1:55pm UTC](https://discuss.elastic.co/t/parsing-apache-airflow-logs/186792 "2019-06-21T13:55:21Z")
My main goal is to parse apache airflow logs into particular fields using logstash, feed it into elasticsearch and visualise them using kibana. There is no particular grok pattern available for airflow logs. I'm fairly n… --- ## [Testing filebeat+logstash](https://discuss.elastic.co/t/testing-filebeat-logstash/32811)
**Author:** [@erikstephens](https://discuss.elastic.co/u/erikstephens)\ **Replies:** 2\ **Last updated:** [October 23, 2015, 3:59pm UTC](https://discuss.elastic.co/t/testing-filebeat-logstash/32811 "2015-10-23T15:59:19Z")
Is there a way to have filebeat exit once it reaches end-of-file for all prospectors? The use case I'm trying to support is to launch filebeat with a known set of payloads, send to a test instance of logstash, and then c… --- ## [Doing Complex Calculations in Kibana](https://discuss.elastic.co/t/doing-complex-calculations-in-kibana/86869)
**Author:** [@Pulkit\_Sachdeva\_US](https://discuss.elastic.co/u/Pulkit_Sachdeva_US)\ **Replies:** 1\ **Last updated:** [May 24, 2017, 5:58am UTC](https://discuss.elastic.co/t/doing-complex-calculations-in-kibana/86869 "2017-05-24T05:58:30Z")
Hi, I have data from a survey coming into elastic search. I want to do visualizations for customer satisfaction, net promoter scores, etc. The issue I am facing are in calculation for these results. I am not able to in… --- ## [Kibana keep restarting it self constantly](https://discuss.elastic.co/t/kibana-keep-restarting-it-self-constantly/148313)
**Author:** [@mhein](https://discuss.elastic.co/u/mhein)\ **Replies:** 3\ **Last updated:** [September 21, 2018, 12:25pm UTC](https://discuss.elastic.co/t/kibana-keep-restarting-it-self-constantly/148313 "2018-09-21T12:25:01Z")
Hey, I have this weird problems which appears suddently, my kibana keep restarting constantly and port 5601 never comes listening state (running elastic stack on windows" Only thing which appears in kibana log is this: … --- ## [Completion suggester - java API - Suggest Response\[Error: Can not write a field name, expecting a value\]](https://discuss.elastic.co/t/completion-suggester-java-api-suggest-response-error-can-not-write-a-field-name-expecting-a-value/13533)
**Author:** [@LudoN4R4](https://discuss.elastic.co/u/LudoN4R4)\ **Replies:** 5\ **Last updated:** [September 11, 2013, 7:03am UTC](https://discuss.elastic.co/t/completion-suggester-java-api-suggest-response-error-can-not-write-a-field-name-expecting-a-value/13533 "2013-09-11T07:03:35Z")
Hello, I try to work with the new completion suggester (0.90.3) through java API, but i get this error : \*Suggest Response\[Error: Can not write a field name, expecting a value\*\] \*This a sample code that i ex… --- ## [How to read my spring-boot application logs from APM logs menu?](https://discuss.elastic.co/t/how-to-read-my-spring-boot-application-logs-from-apm-logs-menu/324635)
**Author:** [@vincentLG](https://discuss.elastic.co/u/vincentLG)\ **Replies:** 7\ **Last updated:** [February 6, 2023, 3:23pm UTC](https://discuss.elastic.co/t/how-to-read-my-spring-boot-application-logs-from-apm-logs-menu/324635 "2023-02-06T15:23:10Z")
Hello, I have a spring-boot application running into a docker container. I have set up Filebeat, and I can read my dockerized spring-boot application logs from Kibana Stream logs menu: I have set up an APM server en… --- ## [Canvas Time Filter not using correct date format](https://discuss.elastic.co/t/canvas-time-filter-not-using-correct-date-format/151175)
**Author:** [@FWerner](https://discuss.elastic.co/u/FWerner)\ **Replies:** 2\ **Last updated:** [October 11, 2018, 1:45pm UTC](https://discuss.elastic.co/t/canvas-time-filter-not-using-correct-date-format/151175 "2018-10-11T13:45:53Z")
Hi Guys, This is my first post here :slight\_smile: I am trying to get Canvas to work with my Timelion expression. I am using ES 6.4.2. In Timelion, my query .es(q=\*, index=att\*\_touchpoints, timefield=fields.timestamp… --- ## [Filebeat Nginx ingress controller module doesn't work in 7.11+](https://discuss.elastic.co/t/filebeat-nginx-ingress-controller-module-doesnt-work-in-7-11/271804)
**Author:** [@Evgeni\_Gordeev](https://discuss.elastic.co/u/Evgeni_Gordeev)\ **Replies:** 6\ **Last updated:** [May 2, 2021, 6:36pm UTC](https://discuss.elastic.co/t/filebeat-nginx-ingress-controller-module-doesnt-work-in-7-11/271804 "2021-05-02T18:36:14Z")
This configuration used to work in Elastic Stack 7.10. It stopped in 7.11 and doesn't work in 7.12 as well. Elastic: 7.12.1 ES Helm chart: 7.12.1 Kubernetes: 1.18 ingress-nginx Helm chart: 3.19.0 (ingress-nginx contr… --- ## [Policy for index failed on step \[{"phase":"hot","action":"rollover","name":"check-rollover-ready"}\]](https://discuss.elastic.co/t/policy-for-index-failed-on-step-phase-hot-action-rollover-name-check-rollover-ready/278141)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 1\ **Last updated:** [July 8, 2021, 6:40am UTC](https://discuss.elastic.co/t/policy-for-index-failed-on-step-phase-hot-action-rollover-name-check-rollover-ready/278141 "2021-07-08T06:40:09Z")
I am using Logstash to create a daily index in ElasticSearch. This time, I tried to create an index using an index template, but I noticed that ElasticSearch was generating the following ILM error. $ tail -n 30 /var/lo… --- ## [Copy\_to in Nest Attributes](https://discuss.elastic.co/t/copy-to-in-nest-attributes/95724)
**Author:** [@mjgasior](https://discuss.elastic.co/u/mjgasior)\ **Replies:** 1\ **Last updated:** [August 9, 2017, 1:25pm UTC](https://discuss.elastic.co/t/copy-to-in-nest-attributes/95724 "2017-08-09T13:25:10Z")
Is it possible to use copy\_to in Nest attributes? I know, there is an option to use the Fluent Mapping (but the CopyTo doesn’t work with string) instead of Attribute Mapping. And if I do make a “copy\_to”, do I have to ad… --- ## [Logstash elasticsearch filter error TypeError: can't convert nil into String](https://discuss.elastic.co/t/logstash-elasticsearch-filter-error-typeerror-cant-convert-nil-into-string/75125)
**Author:** [@Len\_Rugen](https://discuss.elastic.co/u/Len_Rugen)\ **Replies:** 3\ **Last updated:** [February 15, 2017, 2:17pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-filter-error-typeerror-cant-convert-nil-into-string/75125 "2017-02-15T14:17:19Z")
I'm new to elk, trying to query es from logstash with this: elasticsearch { hosts =\> \[ "my-elk-server:9200" \] user =\> "elastic" password =\> "changeme" i… --- ## [Query on multiple nested objects](https://discuss.elastic.co/t/query-on-multiple-nested-objects/11423)
**Author:** [@Victor\_Huang](https://discuss.elastic.co/u/Victor_Huang)\ **Replies:** 3\ **Last updated:** [April 3, 2013, 5:46pm UTC](https://discuss.elastic.co/t/query-on-multiple-nested-objects/11423 "2013-04-03T17:46:55Z")
a have Author model Author: { name: xyz, books: \[ { //nested object title: "abc", date: 1/1/1 },{ title: "123" date: 2/2/2 } \], deals: \[{ //nested object name: "best", … [Previous page](https://discuss.elastic.co/top.md?page=729&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=731&per_page=50&period=all)