# Top **URL:** https://discuss.elastic.co/top.md?page=735&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 736 --- ## [Wildcard search with dash](https://discuss.elastic.co/t/wildcard-search-with-dash/210364)
**Author:** [@111220](https://discuss.elastic.co/u/111220)\ **Replies:** 2\ **Last updated:** [December 3, 2019, 3:48pm UTC](https://discuss.elastic.co/t/wildcard-search-with-dash/210364 "2019-12-03T15:48:53Z")
I'm trying to write a query to find all data that contains a specific string with dash, for example: "abcd-ehd". however, using wildcard abcd-ehd doesnt work because the dash is not translated. if the data for example… --- ## [Looking for an example plugin that uses a Java library](https://discuss.elastic.co/t/looking-for-an-example-plugin-that-uses-a-java-library/23898)
**Author:** [@Niels\_Basjes](https://discuss.elastic.co/u/Niels_Basjes)\ **Replies:** 2\ **Last updated:** [June 19, 2015, 7:07pm UTC](https://discuss.elastic.co/t/looking-for-an-example-plugin-that-uses-a-java-library/23898 "2015-06-19T19:07:22Z")
Hi , I'm looking to see if I can wrap my apache logparsing library (https://github.com/nielsbasjes/logparser/ ) (which was written in Java) to become a plugin for logstash. The problem I have is that my Ruby knowledge is… --- ## [Watcher: dynamic index name does not work](https://discuss.elastic.co/t/watcher-dynamic-index-name-does-not-work/87420)
**Author:** [@abpabab](https://discuss.elastic.co/u/abpabab)\ **Replies:** 6\ **Last updated:** [May 31, 2017, 2:47am UTC](https://discuss.elastic.co/t/watcher-dynamic-index-name-does-not-work/87420 "2017-05-31T02:47:33Z")
I'm wanna limit searching indices in my watch by follow https://www.elastic.co/guide/en/elasticsearch/reference/current/date-math-index-names.html, but can not make it work. Here is my watch indices config: "indices": … --- ## [\[Solved\]What kind of visualization is this?](https://discuss.elastic.co/t/solved-what-kind-of-visualization-is-this/55394)
**Author:** [@brayndasilva](https://discuss.elastic.co/u/brayndasilva)\ **Replies:** 6\ **Last updated:** [July 13, 2016, 10:46am UTC](https://discuss.elastic.co/t/solved-what-kind-of-visualization-is-this/55394 "2016-07-13T10:46:33Z")
On an article about syslog dashboards I found an image with a visualization I'd like to recreate for my dashboard, but they don't specify what kind of visualisation it is and how they made it. It's the "Log View" visua… --- ## [Curator Index Allocation Error on Hot/Warm Architecture](https://discuss.elastic.co/t/curator-index-allocation-error-on-hot-warm-architecture/83464)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 5\ **Last updated:** [April 25, 2017, 3:39pm UTC](https://discuss.elastic.co/t/curator-index-allocation-error-on-hot-warm-architecture/83464 "2017-04-25T15:39:17Z")
ES v5.3, Curator v5.0 I've implemented a hot/warm architecture on one cluster containing nodes with SSDs (hot) and nodes with HDDs (warm). This is set up so that any index being written to and actively searched is on an… --- ## [Where are the logs stored?](https://discuss.elastic.co/t/where-are-the-logs-stored/84218)
**Author:** [@BrunoC](https://discuss.elastic.co/u/BrunoC)\ **Replies:** 3\ **Last updated:** [May 2, 2017, 8:57am UTC](https://discuss.elastic.co/t/where-are-the-logs-stored/84218 "2017-05-02T08:57:10Z")
Hi there, I'm currently setting up the ELK suite with pfSense. I will use the pfSense UI to redirect the log to the server where ELK will be installed. My question is, where will the raw logs of pfSense will be stored?… --- ## [Performance querying time-based indices in a date range](https://discuss.elastic.co/t/performance-querying-time-based-indices-in-a-date-range/238283)
**Author:** [@devplayer0](https://discuss.elastic.co/u/devplayer0)\ **Replies:** 2\ **Last updated:** [July 6, 2020, 10:16am UTC](https://discuss.elastic.co/t/performance-querying-time-based-indices-in-a-date-range/238283 "2020-07-06T10:16:38Z")
Bit new to Elasticsearch. When limiting the date range of a query (for example if I have a daily index of events and I'd like to search within only a non-aligned monthly cycle), is it worth optimising the index pattern? … --- ## [使用docker-compose创建的es集群，怎么使用Java连接进行查询？](https://discuss.elastic.co/t/docker-compose-es-java/78089)
**Author:** [@silence](https://discuss.elastic.co/u/silence)\ **Replies:** 2\ **Last updated:** [March 20, 2017, 11:26pm UTC](https://discuss.elastic.co/t/docker-compose-es-java/78089 "2017-03-20T23:26:59Z")
我采用官方文档中说明的，使用了docker-compose搭建了一个es集群。 采用curl 方式访问都没有任何问题，使用elasticsearch-head工具监控也是正常的。 但是使用Java编写代码链接集群出现异常，由于搭建es集群默认使用的是docker-compose中指定的网络链接方式，IP也是docker-compose自动分配的。与当前机器都不再同一个网段内，因此不知道怎么访问这个docker搭建的es集群？ 亲们有… --- ## [User log and Kibana queries log](https://discuss.elastic.co/t/user-log-and-kibana-queries-log/80996)
**Author:** [@josemgloc](https://discuss.elastic.co/u/josemgloc)\ **Replies:** 2\ **Last updated:** [April 4, 2017, 6:25am UTC](https://discuss.elastic.co/t/user-log-and-kibana-queries-log/80996 "2017-04-04T06:25:12Z")
Hi Support, Sometimes we have CPU problems related to some Kibana queries. Could we view a user log and what they are querying? Thanks. --- ## [Search fields (file path), with similiar file regex/patterns](https://discuss.elastic.co/t/search-fields-file-path-with-similiar-file-regex-patterns/20737)
**Author:** [@Veerraju\_Tadimeti](https://discuss.elastic.co/u/Veerraju_Tadimeti)\ **Replies:** 2\ **Last updated:** [July 31, 2015, 3:23pm UTC](https://discuss.elastic.co/t/search-fields-file-path-with-similiar-file-regex-patterns/20737 "2015-07-31T15:23:57Z")
Hi, I am new to Elastic Search. I have a field which is file path. I want to search this field which has similar file patterns. Here is an example of different values of the field URI: 1. /cds-apis/api/v1… --- ## [Logstash using custom Java](https://discuss.elastic.co/t/logstash-using-custom-java/149763)
**Author:** [@serozhka](https://discuss.elastic.co/u/serozhka)\ **Replies:** 3\ **Last updated:** [September 25, 2018, 11:41am UTC](https://discuss.elastic.co/t/logstash-using-custom-java/149763 "2018-09-25T11:41:42Z")
Hi guys! I have a Linux (RHEL) server, where I have to use logstash 6 in order to send log files to Kafka. Unfortunately, I dont have sudo there, also it has Java 1.7 and it is difficult to upgrade since these are produ… --- ## [Logstash output to elasticsearch cluster](https://discuss.elastic.co/t/logstash-output-to-elasticsearch-cluster/46742)
**Author:** [@xo4n](https://discuss.elastic.co/u/xo4n)\ **Replies:** 3\ **Last updated:** [April 9, 2016, 12:38am UTC](https://discuss.elastic.co/t/logstash-output-to-elasticsearch-cluster/46742 "2016-04-09T00:38:43Z")
when ingesting data to an elasticsearch cluster does it bring any advantage configuring logstash to use a client node for load balancing traffic instead of adding the cluster data nodes directly to the output configurati… --- ## [Winlogbeat drop\_fields not working](https://discuss.elastic.co/t/winlogbeat-drop-fields-not-working/275129)
**Author:** [@Billz1026](https://discuss.elastic.co/u/Billz1026)\ **Replies:** 5\ **Last updated:** [June 7, 2021, 6:20pm UTC](https://discuss.elastic.co/t/winlogbeat-drop-fields-not-working/275129 "2021-06-07T18:20:48Z")
Hi All, I have configured Winlogbeat to drop some fields from all the events using below configuration. But it seems the "drop\_fields" process is not applying to the events since I can see those fields in the Kibana. C… --- ## [Logstash file input read order](https://discuss.elastic.co/t/logstash-file-input-read-order/90246)
**Author:** [@giannisapi](https://discuss.elastic.co/u/giannisapi)\ **Replies:** 5\ **Last updated:** [July 3, 2017, 7:43am UTC](https://discuss.elastic.co/t/logstash-file-input-read-order/90246 "2017-07-03T07:43:20Z")
Hi to All, I have one configuration file with multiple file inputs. Since deploy we have parsed hundreds of files, I now want to re parse everything but I want to re parse them ordered by creation time. Could you t… --- ## [Apply synonyms that include confidence weights](https://discuss.elastic.co/t/apply-synonyms-that-include-confidence-weights/16093)
**Author:** [@Jake\_M](https://discuss.elastic.co/u/Jake_M)\ **Replies:** 5\ **Last updated:** [March 4, 2014, 5:01pm UTC](https://discuss.elastic.co/t/apply-synonyms-that-include-confidence-weights/16093 "2014-03-04T17:01:00Z")
I want to apply weights to different synonyms because in some cases we are not sure the relationship is legitimate or the relationship is not a true synonym. For example I would like 'doctor' and 'nurse' to be relate… --- ## [Monitoring Spark and Kafka performance with Metricbeat](https://discuss.elastic.co/t/monitoring-spark-and-kafka-performance-with-metricbeat/187588)
**Author:** [@cjb312](https://discuss.elastic.co/u/cjb312)\ **Replies:** 0\ **Last updated:** [June 26, 2019, 2:03pm UTC](https://discuss.elastic.co/t/monitoring-spark-and-kafka-performance-with-metricbeat/187588 "2019-06-26T14:03:55Z")
I'm looking to monitor performance of both Kafka and Spark using Metricbeat. For example, how long it takes to send a message with Kafka and how long Spark takes to complete a job. Whether you have direct advice/examp… --- ## [Kubernetes - Filebeat can't index event publisher](https://discuss.elastic.co/t/kubernetes-filebeat-cant-index-event-publisher/164595)
**Author:** [@tomaaron](https://discuss.elastic.co/u/tomaaron)\ **Replies:** 0\ **Last updated:** [January 17, 2019, 9:04am UTC](https://discuss.elastic.co/t/kubernetes-filebeat-cant-index-event-publisher/164595 "2019-01-17T09:04:10Z")
Hey there, I am trying to setup Filebeat v6.5.4 on a selfhosted Kubernetes Cluster to monitor the PHP example guestbook application. I used the provided filebeat-kubernetes.yaml from your GitHub Repo. Metricbeat is alre… --- ## [ERROR pipeline/output.go:100 Failed to connect to backoff(elasticsearch(https://\)): 401 Unauthorized](https://discuss.elastic.co/t/error-pipeline-output-go-100-failed-to-connect-to-backoff-elasticsearch-https-es-url-401-unauthorized/227772)
**Author:** [@\_kyllr](https://discuss.elastic.co/u/_kyllr)\ **Replies:** 4\ **Last updated:** [April 14, 2020, 10:30am UTC](https://discuss.elastic.co/t/error-pipeline-output-go-100-failed-to-connect-to-backoff-elasticsearch-https-es-url-401-unauthorized/227772 "2020-04-14T10:30:20Z")
Hello, AWS Elasticsearch Version: 7.1 aws-es-proxy-0.9-windows-amd64.exe Kibana OSS 7.1.1 Filebeat OSS 7.1.1 This is a production issue on our windows server, we suddenly got this error from filebeat logs: 2020-04… --- ## [Kibana response time is slow](https://discuss.elastic.co/t/kibana-response-time-is-slow/42083)
**Author:** [@Nexus](https://discuss.elastic.co/u/Nexus)\ **Replies:** 2\ **Last updated:** [September 29, 2016, 10:02am UTC](https://discuss.elastic.co/t/kibana-response-time-is-slow/42083 "2016-09-29T10:02:17Z")
Hello, I am currently using the stack ELK for monitoring. Here is my hardware specs : Two machine : 30GB and 8CPU (15 GB JVM Heap). Two small machine for logstash and kibana. We are doing about 5MB to 500MB per ind… --- ## [Looking for ES expertise in Austin TX](https://discuss.elastic.co/t/looking-for-es-expertise-in-austin-tx/94688)
**Author:** [@dgaedcke](https://discuss.elastic.co/u/dgaedcke)\ **Replies:** 8\ **Last updated:** [April 4, 2018, 7:41am UTC](https://discuss.elastic.co/t/looking-for-es-expertise-in-austin-tx/94688 "2018-04-04T07:41:36Z")
I'm looking for ES expertise (contractor/consultant) in austin tx and I've posted on the local meetup and not getting any responses....anyone have other tips about the best way to find someone?? Thx D --- ## [Plugin Development - Saving Updates](https://discuss.elastic.co/t/plugin-development-saving-updates/74705)
**Author:** [@Kikketer](https://discuss.elastic.co/u/Kikketer)\ **Replies:** 6\ **Last updated:** [February 10, 2017, 8:06pm UTC](https://discuss.elastic.co/t/plugin-development-saving-updates/74705 "2017-02-10T20:06:04Z")
How do I save things to Elastic from the server side of a plugin? I have several use cases coming up where I will either need to insert a document into an index or use the Watcher API to save a watcher. I may be craz… --- ## [Enable Position Increments property not available](https://discuss.elastic.co/t/enable-position-increments-property-not-available/15627)
**Author:** [@Christian\_Rohling](https://discuss.elastic.co/u/Christian_Rohling)\ **Replies:** 2\ **Last updated:** [October 16, 2014, 3:30pm UTC](https://discuss.elastic.co/t/enable-position-increments-property-not-available/15627 "2014-10-16T15:30:06Z")
Hello, I am trying to use the shingle token filter, and previously was using a stop-filter with the enable\_position\_increments property(http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/analy… --- ## [C# NEST: Expression required for "field" specification in FieldValueFactor?](https://discuss.elastic.co/t/c-nest-expression-required-for-field-specification-in-fieldvaluefactor/100803)
**Author:** [@Thomas\_Doman](https://discuss.elastic.co/u/Thomas_Doman)\ **Replies:** 4\ **Last updated:** [September 20, 2017, 5:33pm UTC](https://discuss.elastic.co/t/c-nest-expression-required-for-field-specification-in-fieldvaluefactor/100803 "2017-09-20T17:33:28Z")
I'm using NEST and Elasticsearch.Net versions 1.9.2. I'm trying to create a FieldValueFactor scoring function which all seems to work properly except I can't figure out how to specify the field I want to use. .Function… --- ## [Distributed search, how to work?](https://discuss.elastic.co/t/distributed-search-how-to-work/173073)
**Author:** [@jerry-chen-315](https://discuss.elastic.co/u/jerry-chen-315)\ **Replies:** 5\ **Last updated:** [March 29, 2019, 9:19am UTC](https://discuss.elastic.co/t/distributed-search-how-to-work/173073 "2019-03-29T09:19:19Z")
Hello, I read this document about distributed search execution: https://www.elastic.co/guide/en/elasticsearch/guide/current/\_query\_phase.html If query is broadcast to every shard in the index. Are there duplicate quer… --- ## [Snapshot & Restore failing while restoring indices from ES 1.6.1 to ES 2.1.2](https://discuss.elastic.co/t/snapshot-restore-failing-while-restoring-indices-from-es-1-6-1-to-es-2-1-2/49197)
**Author:** [@ayushsangani](https://discuss.elastic.co/u/ayushsangani)\ **Replies:** 5\ **Last updated:** [May 24, 2016, 9:32pm UTC](https://discuss.elastic.co/t/snapshot-restore-failing-while-restoring-indices-from-es-1-6-1-to-es-2-1-2/49197 "2016-05-24T21:32:35Z")
Hey all, I'm upgrading our ES cluster from 1.6.1 to 2.1.2, we have spun up new cluster with ES 2.1.2 I have reindexed documents on ES 1.6.1 so that it passes all the checks on ES migration plugin. Now when I create a s… --- ## [ElasticSearch V0.90 Faster Than V7.10.1](https://discuss.elastic.co/t/elasticsearch-v0-90-faster-than-v7-10-1/267495)
**Author:** [@ercinakcay](https://discuss.elastic.co/u/ercinakcay)\ **Replies:** 6\ **Last updated:** [March 18, 2021, 8:10pm UTC](https://discuss.elastic.co/t/elasticsearch-v0-90-faster-than-v7-10-1/267495 "2021-03-18T20:10:25Z")
Hi everyone, We are doing migration for ElasticSearch version 0.90 to version 7.10.1. I know this is really big upgrade for a component. While this migration we realized, V7 queries are slower than V0 ones. This slow … --- ## [Combining two inputs how to access the fields](https://discuss.elastic.co/t/combining-two-inputs-how-to-access-the-fields/109415)
**Author:** [@ericohtake](https://discuss.elastic.co/u/ericohtake)\ **Replies:** 4\ **Last updated:** [November 29, 2017, 9:39am UTC](https://discuss.elastic.co/t/combining-two-inputs-how-to-access-the-fields/109415 "2017-11-29T09:39:57Z")
Hi, I have 2 inputs in a config file where I need to send a field from one to another if a condition is met. However I'm failing to find documentation on how to reference the fields living in different input events. Be… --- ## [Filebeat 6 + Apache2 module : fields not exported to Logstash](https://discuss.elastic.co/t/filebeat-6-apache2-module-fields-not-exported-to-logstash/109402)
**Author:** [@michaelbouvy](https://discuss.elastic.co/u/michaelbouvy)\ **Replies:** 4\ **Last updated:** [November 28, 2017, 4:44pm UTC](https://discuss.elastic.co/t/filebeat-6-apache2-module-fields-not-exported-to-logstash/109402 "2017-11-28T16:44:48Z")
Hi Everyone, I have recently a full Beats 6 + ELK 6 stack : Filebeat + Metricbeat agents on 2 servers, ELK on another one. I've configured both Metricbeat and Filebeat the same way to send data to Logstash over TLS, an… --- ## [Elastic cluster is getting overloaded by incorrect shard allocation](https://discuss.elastic.co/t/elastic-cluster-is-getting-overloaded-by-incorrect-shard-allocation/323595)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 2\ **Last updated:** [January 20, 2023, 2:12pm UTC](https://discuss.elastic.co/t/elastic-cluster-is-getting-overloaded-by-incorrect-shard-allocation/323595 "2023-01-20T14:12:55Z")
Hi Community, May I ask for help: We have elastic v7.17.0 with 43 nodes. Sizing 2TB SSD, 8cores, 32GB RAM, 16GB Heap. Currently about 2400 indices and 6400shards. some nodes have less shards but have disk full which … --- ## [JDBC Plugin - sql\_last\_value equals a not existing timestamp](https://discuss.elastic.co/t/jdbc-plugin-sql-last-value-equals-a-not-existing-timestamp/96605)
**Author:** [@mberger1](https://discuss.elastic.co/u/mberger1)\ **Replies:** 2\ **Last updated:** [August 31, 2017, 1:10pm UTC](https://discuss.elastic.co/t/jdbc-plugin-sql-last-value-equals-a-not-existing-timestamp/96605 "2017-08-31T13:10:28Z")
Hey there, I recently began to use the JDBC Plugin, which will be used to copy data (log data to be specific) from a table within an oracle database. Data is written there every few minutes later on and I just want to u… --- ## [\[SOLVED\] Kibana Geo Filter: Add Filter for Index](https://discuss.elastic.co/t/solved-kibana-geo-filter-add-filter-for-index/84757)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 3\ **Last updated:** [May 5, 2017, 8:27pm UTC](https://discuss.elastic.co/t/solved-kibana-geo-filter-add-filter-for-index/84757 "2017-05-05T20:27:13Z")
I have a tilemap visualization on a dashboard in Kibana 5.3.0 displaying results properly as seen below. The issue is that when I try to add a geo filter (to geofence the data I'm returning), everything displays properly… --- ## [Replace the existing index with new data](https://discuss.elastic.co/t/replace-the-existing-index-with-new-data/55908)
**Author:** [@AnantPatil](https://discuss.elastic.co/u/AnantPatil)\ **Replies:** 3\ **Last updated:** [July 20, 2016, 10:12pm UTC](https://discuss.elastic.co/t/replace-the-existing-index-with-new-data/55908 "2016-07-20T22:12:23Z")
Hi, I have the index name called "pattwo" ,wanted to update the old data with new data for this index.without creating the new index. My input file is having two records which is already indexed and the records in th… --- ## [JSON data validation using scheme](https://discuss.elastic.co/t/json-data-validation-using-scheme/51559)
**Author:** [@michaltptk](https://discuss.elastic.co/u/michaltptk)\ **Replies:** 3\ **Last updated:** [June 3, 2016, 1:52pm UTC](https://discuss.elastic.co/t/json-data-validation-using-scheme/51559 "2016-06-03T13:52:08Z")
Is there a possibility to validate JSON data using a proper JSON scheme? I put the data into Logstash, parsed it using JSON plugin but I want to make sure that the data match the given pattern. There are few fields where… --- ## [How to group all the values for a column into an array jdbc mysql](https://discuss.elastic.co/t/how-to-group-all-the-values-for-a-column-into-an-array-jdbc-mysql/33433)
**Author:** [@clp](https://discuss.elastic.co/u/clp)\ **Replies:** 1\ **Last updated:** [June 15, 2016, 9:32am UTC](https://discuss.elastic.co/t/how-to-group-all-the-values-for-a-column-into-an-array-jdbc-mysql/33433 "2016-06-15T09:32:18Z")
Hi, I am trying to import data from mysql to elasticsearch via logstash and i would like to know if it's possible to group all the values for a column into an array per id. for example in mysql, results of query i… --- ## [Accessing doc value fields from painless in update](https://discuss.elastic.co/t/accessing-doc-value-fields-from-painless-in-update/124771)
**Author:** [@Attila\_Nagy](https://discuss.elastic.co/u/Attila_Nagy)\ **Replies:** 6\ **Last updated:** [March 29, 2018, 8:52am UTC](https://discuss.elastic.co/t/accessing-doc-value-fields-from-painless-in-update/124771 "2018-03-29T08:52:29Z")
Hi, I can do this: https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-update.html#\_scripted\_updates which increments the previously stored counter field by 4. But what if I want to exclude the count… --- ## [CONFIG\_SECCOMP and CONFIG\_SECCOMP\_FILTER](https://discuss.elastic.co/t/config-seccomp-and-config-seccomp-filter/86991)
**Author:** [@ori.rubinfeld](https://discuss.elastic.co/u/ori.rubinfeld)\ **Replies:** 6\ **Last updated:** [May 25, 2017, 8:52am UTC](https://discuss.elastic.co/t/config-seccomp-and-config-seccomp-filter/86991 "2017-05-25T08:52:03Z")
Hi, I am upgrading to Version 5.4 from Version 5.0 After upgrade process, the elastic refuses to start, giving the following message: bootstrap checks failed system call filters failed to install; check the logs and… --- ## [Set logstash cloud output hosts](https://discuss.elastic.co/t/set-logstash-cloud-output-hosts/114435)
**Author:** [@Amir\_P](https://discuss.elastic.co/u/Amir_P)\ **Replies:** 5\ **Last updated:** [January 8, 2018, 7:27am UTC](https://discuss.elastic.co/t/set-logstash-cloud-output-hosts/114435 "2018-01-08T07:27:44Z")
hello, I am trying to set Logstash configuration file output hosts as Elasticsearch cloud link output { elasticsearch { hosts =\> "https://5something3.us-east-1.aws.found.io:9243" index =\> "check1" } stdout {} Unf… --- ## [Cannot create index after installing x-pack](https://discuss.elastic.co/t/cannot-create-index-after-installing-x-pack/90419)
**Author:** [@bhavna\_jha](https://discuss.elastic.co/u/bhavna_jha)\ **Replies:** 5\ **Last updated:** [July 5, 2017, 1:38pm UTC](https://discuss.elastic.co/t/cannot-create-index-after-installing-x-pack/90419 "2017-07-05T13:38:54Z")
Hi , I am not able to create index after installing x-pack, I keep getting this error : "error":{"root\_cause":\[{"type":"index\_not\_found\_exception","reason":"no such index","resource.type":"index\_or\_alias","resource.id":… --- ## [Shipping Postfix logs to ELK stack](https://discuss.elastic.co/t/shipping-postfix-logs-to-elk-stack/290603)
**Author:** [@DoDuyen162000](https://discuss.elastic.co/u/DoDuyen162000)\ **Replies:** 2\ **Last updated:** [November 30, 2021, 9:54pm UTC](https://discuss.elastic.co/t/shipping-postfix-logs-to-elk-stack/290603 "2021-11-30T21:54:36Z")
Hello, Well this is not actually an issue rather query. I have been playing with ELK stack for a few days. I have a working ELK stack running on Ubuntu 20.4. Now, I want to ship mail logs (postfix logs) to my ELK stack… --- ## [Logstash V.7.0 RC 2 installation with Java 11 fails](https://discuss.elastic.co/t/logstash-v-7-0-rc-2-installation-with-java-11-fails/175473)
**Author:** [@hispeed](https://discuss.elastic.co/u/hispeed)\ **Replies:** 2\ **Last updated:** [April 7, 2019, 11:10am UTC](https://discuss.elastic.co/t/logstash-v-7-0-rc-2-installation-with-java-11-fails/175473 "2019-04-07T11:10:34Z")
Hi Logstash dev's and friends, Centos 7 64 Bit (latest all updates) (Virtual Machine) Installation of Elasticsearch and Kibana on the same machine successfull. Tried first to install without Java but installation of Lo… --- ## [Watches Not Triggering](https://discuss.elastic.co/t/watches-not-triggering/149326)
**Author:** [@jmccain](https://discuss.elastic.co/u/jmccain)\ **Replies:** 2\ **Last updated:** [September 21, 2018, 6:49am UTC](https://discuss.elastic.co/t/watches-not-triggering/149326 "2018-09-21T06:49:15Z")
Elasticsearch & Kibana version: 6.2.4 Hi, This morning we noticed that several (but not all) of our watches were not triggering and had no watcher history. In particular, one watch should have been firing alerts off b… --- ## [Kibana line chart limit number of lines over date histogram](https://discuss.elastic.co/t/kibana-line-chart-limit-number-of-lines-over-date-histogram/52700)
**Author:** [@patrickko](https://discuss.elastic.co/u/patrickko)\ **Replies:** 2\ **Last updated:** [June 15, 2016, 6:37am UTC](https://discuss.elastic.co/t/kibana-line-chart-limit-number-of-lines-over-date-histogram/52700 "2016-06-15T06:37:12Z")
I have created a line chart with a date histogram on the x-axis in Kibana. On the y-axis I have put a count aggregation that is split using a terms aggregation. The terms aggregation gives the ability to select the top n… --- ## [How to remove custom filter from Kibana v. 4.5.0 (Windows) dashboard](https://discuss.elastic.co/t/how-to-remove-custom-filter-from-kibana-v-4-5-0-windows-dashboard/49423)
**Author:** [@Lori](https://discuss.elastic.co/u/Lori)\ **Replies:** 2\ **Last updated:** [May 6, 2016, 6:43pm UTC](https://discuss.elastic.co/t/how-to-remove-custom-filter-from-kibana-v-4-5-0-windows-dashboard/49423 "2016-05-06T18:43:00Z")
Hello. I have created a new dashboard (screenshots attached). I am unable to remove the date filters after I have finished reviewing the information for a particular date range in my histogram. Will you instruct me ho… --- ## [Which information retrieval model does ES used?](https://discuss.elastic.co/t/which-information-retrieval-model-does-es-used/11653)
**Author:** [@Jingang\_Wang](https://discuss.elastic.co/u/Jingang_Wang)\ **Replies:** 2\ **Last updated:** [April 22, 2013, 8:20am UTC](https://discuss.elastic.co/t/which-information-retrieval-model-does-es-used/11653 "2013-04-22T08:20:59Z")
Hi all, Does anybody know which information retrieval model is utilized in ES? TF\*IDF-based vector space model or some relevance-based language model？Could I change these model？ Thanks very much. -- You re… --- ## [Elastic APM plus MS Application Insights spamms Logs in .net Core 2.1 Web App](https://discuss.elastic.co/t/elastic-apm-plus-ms-application-insights-spamms-logs-in-net-core-2-1-web-app/219951)
**Author:** [@marcus.labohm](https://discuss.elastic.co/u/marcus.labohm)\ **Replies:** 4\ **Last updated:** [February 20, 2020, 12:23pm UTC](https://discuss.elastic.co/t/elastic-apm-plus-ms-application-insights-spamms-logs-in-net-core-2-1-web-app/219951 "2020-02-20T12:23:21Z")
Kibana version: 7.5 on premise Elasticsearch version: 7.5 on premise APM Server version: 7.5 on premise APM Agent language and version: Elastic.Apm.NetCoreAll - 1.3 Browser version: Chrome - newest Original install … --- ## [XML output from elastic](https://discuss.elastic.co/t/xml-output-from-elastic/122451)
**Author:** [@rpc29y](https://discuss.elastic.co/u/rpc29y)\ **Replies:** 4\ **Last updated:** [March 6, 2018, 4:30pm UTC](https://discuss.elastic.co/t/xml-output-from-elastic/122451 "2018-03-06T16:30:15Z")
Hello: I wanted to ask if it is possible with elastic 5.6 to generate xml as an output format. For me it is much faster to deal with the XML response in java. Thank you. --- ## [Filtering to a subset of the full index](https://discuss.elastic.co/t/filtering-to-a-subset-of-the-full-index/25795)
**Author:** [@Phil\_Messenger](https://discuss.elastic.co/u/Phil_Messenger)\ **Replies:** 4\ **Last updated:** [March 2, 2016, 8:01pm UTC](https://discuss.elastic.co/t/filtering-to-a-subset-of-the-full-index/25795 "2016-03-02T20:01:33Z")
I have a large (tens of billions of docs) index spread across a bunch of machines. I'd like to constrain a query to a subset of that index. Example: each doc might be a message with an author, and I want to constrain a s… --- ## [Custom Aggregation \[Plugin\] for Elasticsearch 5.x](https://discuss.elastic.co/t/custom-aggregation-plugin-for-elasticsearch-5-x/106567)
**Author:** [@varundbest](https://discuss.elastic.co/u/varundbest)\ **Replies:** 3\ **Last updated:** [November 20, 2017, 3:53pm UTC](https://discuss.elastic.co/t/custom-aggregation-plugin-for-elasticsearch-5-x/106567 "2017-11-20T15:53:06Z")
I'm trying to implement Weighted Avg Agg and It would be great if I could do it as a plugin, Is there any way to do so in ES 5.x? I can't seem to find any Plugins implementing Custom Aggregation logic. --- ## [ES Document Update Issue MR](https://discuss.elastic.co/t/es-document-update-issue-mr/27812)
**Author:** [@Tauqeer\_Ul\_Islam](https://discuss.elastic.co/u/Tauqeer_Ul_Islam)\ **Replies:** 3\ **Last updated:** [November 12, 2015, 10:45am UTC](https://discuss.elastic.co/t/es-document-update-issue-mr/27812 "2015-11-12T10:45:58Z")
I am trying to use ES hadoop MR to update documents using following properties: es.write.operation=update es.mapping.id=metadata.id es.read.metadata.field=metadata es.read.metadata=true On each document write function ca… --- ## [How to handle duplicate column name while parsing csv?](https://discuss.elastic.co/t/how-to-handle-duplicate-column-name-while-parsing-csv/1684)
**Author:** [@Saket\_Kumar](https://discuss.elastic.co/u/Saket_Kumar)\ **Replies:** 3\ **Last updated:** [June 2, 2015, 6:33am UTC](https://discuss.elastic.co/t/how-to-handle-duplicate-column-name-while-parsing-csv/1684 "2015-06-02T06:33:19Z")
First help: I have log where duplicate field name occurs with same values. while parsing that csv file just want to entertain single field and their values. e.g. Fields\_A |Fields\_B| Fields\_A| Fields\_C Just want Fi… [Previous page](https://discuss.elastic.co/top.md?page=734&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=736&per_page=50&period=all)