# Top **URL:** https://discuss.elastic.co/top.md?page=747&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 748 --- ## [Filebeat module netflow doesn't exist](https://discuss.elastic.co/t/filebeat-module-netflow-doesnt-exist/220774)
**Author:** [@bunico](https://discuss.elastic.co/u/bunico)\ **Replies:** 4\ **Last updated:** [February 26, 2020, 9:42am UTC](https://discuss.elastic.co/t/filebeat-module-netflow-doesnt-exist/220774 "2020-02-26T09:42:53Z")
I am trying to enable netflow module on my VM but I can't seem to able to do so. I have installed the whole ELK stack with the latest versions available. Does anyone have any idea how can I enable this module or how c… --- ## [Request elasticsearch to update geoip database](https://discuss.elastic.co/t/request-elasticsearch-to-update-geoip-database/315850)
**Author:** [@A\_Abdellah](https://discuss.elastic.co/u/A_Abdellah)\ **Replies:** 6\ **Last updated:** [October 14, 2022, 12:32pm UTC](https://discuss.elastic.co/t/request-elasticsearch-to-update-geoip-database/315850 "2022-10-14T12:32:30Z")
Hello I use elasticsearch on premises for security features, and I can't expose it all the time which made my geoip databases expire. I'm aware that elasticsearch use maxmind database and request using https://geoip.el… --- ## [How to flatten the json, not working with previous post](https://discuss.elastic.co/t/how-to-flatten-the-json-not-working-with-previous-post/222608)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 6\ **Last updated:** [March 8, 2020, 6:38pm UTC](https://discuss.elastic.co/t/how-to-flatten-the-json-not-working-with-previous-post/222608 "2020-03-08T18:38:52Z")
Hi All I have a case, wherein i need to flatten the json data.To get started i am just following the previous post. But i am not successful with the result I am getting below result { "@timestamp" : "2020-03-08T15… --- ## [Snapshot restore from S3 bucket in different region not working](https://discuss.elastic.co/t/snapshot-restore-from-s3-bucket-in-different-region-not-working/199806)
**Author:** [@subbu\_sw](https://discuss.elastic.co/u/subbu_sw)\ **Replies:** 6\ **Last updated:** [September 24, 2019, 11:04am UTC](https://discuss.elastic.co/t/snapshot-restore-from-s3-bucket-in-different-region-not-working/199806 "2019-09-24T11:04:41Z")
We have aws instances that are setup in different regions (eu-central-1, ap-south-1 etc). Each aws instance has its own ES single-node cluster running within the instance. There are s3 buckets created for each region tha… --- ## [How to read remote unix logs](https://discuss.elastic.co/t/how-to-read-remote-unix-logs/141470)
**Author:** [@kavitajp](https://discuss.elastic.co/u/kavitajp)\ **Replies:** 8\ **Last updated:** [July 30, 2018, 12:12am UTC](https://discuss.elastic.co/t/how-to-read-remote-unix-logs/141470 "2018-07-30T00:12:11Z")
Hi, i am new to ELK, can someone help me to get logs from remote unix server,i am using filebeat and logstash on my local windows machine. Thanks, --- ## [Rally "default latency" performance degradation](https://discuss.elastic.co/t/rally-default-latency-performance-degradation/120763)
**Author:** [@zcola](https://discuss.elastic.co/u/zcola)\ **Replies:** 8\ **Last updated:** [March 16, 2018, 2:36am UTC](https://discuss.elastic.co/t/rally-default-latency-performance-degradation/120763 "2018-03-16T02:36:50Z")
env:Docker 4 cpu 16g mem 8g heap config file：processors: 4 run test action="index-append,force-merge,index-stats,node-stats,default,term,phrase,country\_agg\_uncached,country\_agg\_cached,scroll,expression,painless\_stati… --- ## [Script field returns wrong value](https://discuss.elastic.co/t/script-field-returns-wrong-value/77044)
**Author:** [@Parisa](https://discuss.elastic.co/u/Parisa)\ **Replies:** 8\ **Last updated:** [March 13, 2017, 8:11pm UTC](https://discuss.elastic.co/t/script-field-returns-wrong-value/77044 "2017-03-13T20:11:41Z")
Hi, I'm I'm trying to use the script field and I started with an existing field. The value of the script field is different from the value of the field itself. I'm using metricbeat "system.cpu.idle.pct" and have defi… --- ## [JSON Input - Count strings (Metric visualization)](https://discuss.elastic.co/t/json-input-count-strings-metric-visualization/62492)
**Author:** [@Roberto\_Iglesias](https://discuss.elastic.co/u/Roberto_Iglesias)\ **Replies:** 2\ **Last updated:** [October 12, 2016, 6:42pm UTC](https://discuss.elastic.co/t/json-input-count-strings-metric-visualization/62492 "2016-10-12T18:42:09Z")
Hi and thanks for reading. I want to count how many times repeats a field. I have one field authfailure\_ and i want to count how many times it appears in logs. The field's content is always the same. Thanks! --- ## [Android Studio 3.0 elasticSearch library error when building android project](https://discuss.elastic.co/t/android-studio-3-0-elasticsearch-library-error-when-building-android-project/107085)
**Author:** [@hughboi](https://discuss.elastic.co/u/hughboi)\ **Replies:** 1\ **Last updated:** [November 17, 2017, 10:57pm UTC](https://discuss.elastic.co/t/android-studio-3-0-elasticsearch-library-error-when-building-android-project/107085 "2017-11-17T22:57:14Z")
Hello, I am trying to include org.elasticSearch:elasticSearch\ as a library to my android project. Right now I am using android studio 3.0, and am getting the following errors no matter how old/new of a version … --- ## [Date filter not working](https://discuss.elastic.co/t/date-filter-not-working/79679)
**Author:** [@techols](https://discuss.elastic.co/u/techols)\ **Replies:** 5\ **Last updated:** [April 1, 2017, 11:29pm UTC](https://discuss.elastic.co/t/date-filter-not-working/79679 "2017-04-01T23:29:31Z")
I have an xml file being ingested by logstash. The xml file has a timestamp element with a unix\_ms format (e.g., 1458827492928). My date filter is not properly parsing this and setting the @timestamp variable. I creat… --- ## [What is the difference between indices in /var/lib/elasticsearch and the snapshot?](https://discuss.elastic.co/t/what-is-the-difference-between-indices-in-var-lib-elasticsearch-and-the-snapshot/93815)
**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\ **Replies:** 3\ **Last updated:** [July 21, 2017, 11:37am UTC](https://discuss.elastic.co/t/what-is-the-difference-between-indices-in-var-lib-elasticsearch-and-the-snapshot/93815 "2017-07-21T11:37:07Z")
All the indices data are saved at /var/lib/elasticsearch by default. Is it necessary to backup indices by snapshot? They are both cold data saved in disk, what is the difference between them? --- ## [Visualisation from Kibana using SQL query](https://discuss.elastic.co/t/visualisation-from-kibana-using-sql-query/211676)
**Author:** [@mindbee](https://discuss.elastic.co/u/mindbee)\ **Replies:** 2\ **Last updated:** [December 17, 2019, 2:15pm UTC](https://discuss.elastic.co/t/visualisation-from-kibana-using-sql-query/211676 "2019-12-17T14:15:51Z")
Hi, I have results correct getting from SQL query using devtools of Kibana. But not sure how I can translate into the visualization of kibana. Below are the things done using devtool: POST \_sql?format=txt { "query":… --- ## [Cannot use non-grouped column \[sales\_manager\_name\], expected \[\]](https://discuss.elastic.co/t/cannot-use-non-grouped-column-sales-manager-name-expected/162331)
**Author:** [@Gosforth](https://discuss.elastic.co/u/Gosforth)\ **Replies:** 2\ **Last updated:** [December 31, 2018, 10:13am UTC](https://discuss.elastic.co/t/cannot-use-non-grouped-column-sales-manager-name-expected/162331 "2018-12-31T10:13:08Z")
What's wrong with this SQL syntax in ES: SELECT sum(net\_value), sales\_manager\_name FROM "sales\*" ? It generates error: Whoops! Expression failed Expression failed with the message: \[essql\] \> Unexpected error from … --- ## [Need help running Ansible Playbook to install Elastic Search](https://discuss.elastic.co/t/need-help-running-ansible-playbook-to-install-elastic-search/146238)
**Author:** [@Shahzeb\_Siddiqui](https://discuss.elastic.co/u/Shahzeb_Siddiqui)\ **Replies:** 2\ **Last updated:** [September 5, 2018, 7:09am UTC](https://discuss.elastic.co/t/need-help-running-ansible-playbook-to-install-elastic-search/146238 "2018-09-05T07:09:35Z")
Looking at https://github.com/elastic/ansible-elasticsearch I am trying to install elastic search. I have run command ansible-galaxy install elastic.elasticsearch Now I have the following file, I added the two paramet… --- ## [ApacheログのRequestによって挙動を変えたい](https://discuss.elastic.co/t/apache-request/56464)
**Author:** [@nishida2](https://discuss.elastic.co/u/nishida2)\ **Replies:** 2\ **Last updated:** [July 27, 2016, 4:13am UTC](https://discuss.elastic.co/t/apache-request/56464 "2016-07-27T04:13:00Z")
Apacheログを処理しようとしています。 Requestのトップディレクトリを抜き出そうとしていますが、トップへのアクセスはディレクトリがありません。 そのため、トップへのアクセスだけ例外処理をしようとしていますが、うまくいきません。 下記で "first\_path" =\> "/" とするためのif文の書き方を教えてください。 テストデータ \> 10.236.75.4 - - \[04/Jul/2016:23:59… --- ## [\[esrally\] The principle of esrally to test the performance of elasticsearch?](https://discuss.elastic.co/t/esrally-the-principle-of-esrally-to-test-the-performance-of-elasticsearch/57640)
**Author:** [@laoyang360](https://discuss.elastic.co/u/laoyang360)\ **Replies:** 4\ **Last updated:** [August 11, 2016, 5:51am UTC](https://discuss.elastic.co/t/esrally-the-principle-of-esrally-to-test-the-performance-of-elasticsearch/57640 "2016-08-11T05:51:10Z")
Now, your know, I already installed esrally successfully. I want to know the principle of esrally. As far as I know, from the running logs, Firstly, esrally running as "building from source", and download the newest e… --- ## [Org.elasticsearch.common.netty.channel.ConnectTimeoutException: connection timed out:](https://discuss.elastic.co/t/org-elasticsearch-common-netty-channel-connecttimeoutexception-connection-timed-out/36251)
**Author:** [@Shivang\_Sarawagi](https://discuss.elastic.co/u/Shivang_Sarawagi)\ **Replies:** 4\ **Last updated:** [December 3, 2015, 9:15am UTC](https://discuss.elastic.co/t/org-elasticsearch-common-netty-channel-connecttimeoutexception-connection-timed-out/36251 "2015-12-03T09:15:52Z")
I have an elastic server deployed on a remote machine & using the Java API to connect to it. The connection works fine when hit from my local sandbox machine. But when I deploy my code to the dev environment. The con… --- ## [Launch Kibana in a Java VM as a Servlet](https://discuss.elastic.co/t/launch-kibana-in-a-java-vm-as-a-servlet/28253)
**Author:** [@Victor\_Ferrer](https://discuss.elastic.co/u/Victor_Ferrer)\ **Replies:** 4\ **Last updated:** [October 1, 2015, 10:35am UTC](https://discuss.elastic.co/t/launch-kibana-in-a-java-vm-as-a-servlet/28253 "2015-10-01T10:35:38Z")
Hi, I´d like to know whether is possible to launch Kibana inside a Java VM as a servlet (along with its servlet mapping) For instance, I have a Spring Boot application where I can register the H2 Console Servlet: @… --- ## [Primary shard is not active Timeout:](https://discuss.elastic.co/t/primary-shard-is-not-active-timeout/81902)
**Author:** [@Balaji.pudur](https://discuss.elastic.co/u/Balaji.pudur)\ **Replies:** 0\ **Last updated:** [April 11, 2017, 3:10am UTC](https://discuss.elastic.co/t/primary-shard-is-not-active-timeout/81902 "2017-04-11T03:10:45Z")
Issue : getting time out error when load data ( document) into index because of "org.elasticsearch.action.UnavailableShardsException: \[index\_name\]\[2\] primary shard is not active Timeout: \[1m\]," ( error from server). Plea… --- ## [How to boost results on the basis of fields values](https://discuss.elastic.co/t/how-to-boost-results-on-the-basis-of-fields-values/287826)
**Author:** [@Ashutosh\_Dwivedi](https://discuss.elastic.co/u/Ashutosh_Dwivedi)\ **Replies:** 7\ **Last updated:** [October 29, 2021, 1:10pm UTC](https://discuss.elastic.co/t/how-to-boost-results-on-the-basis-of-fields-values/287826 "2021-10-29T13:10:12Z")
Hi Everyone, I have stuck into creating query for a specific problem. Can anyone please help me ? I have these list of products \[ { "name":"pro", "clickCount":110, "bookingCount":57, "isPromoted":0 }, { "na… --- ## [NullPointerException when settings "es.read.field.as.array.include" options](https://discuss.elastic.co/t/nullpointerexception-when-settings-es-read-field-as-array-include-options/63223)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 6\ **Last updated:** [February 24, 2017, 12:06pm UTC](https://discuss.elastic.co/t/nullpointerexception-when-settings-es-read-field-as-array-include-options/63223 "2017-02-24T12:06:30Z")
With Spark + ES, when I set: conf.set("es.read.field.as.array.include", "api\_search\_ads\_print\_data.ads"); I got the following exception: java.lang.NullPointerException at java.lang.String.startsWith(String.java:14… --- ## [Starting Elasticsearch 8.0.1 in Docker](https://discuss.elastic.co/t/starting-elasticsearch-8-0-1-in-docker/298997)
**Author:** [@SwampyFox](https://discuss.elastic.co/u/SwampyFox)\ **Replies:** 2\ **Last updated:** [March 31, 2022, 2:51am UTC](https://discuss.elastic.co/t/starting-elasticsearch-8-0-1-in-docker/298997 "2022-03-31T02:51:08Z")
I am running the following docker run command docker run --name es01 --net elastic -p 9200:9200 -v /home/cbryan/Elasticsearch.yml:/usr/share/Elasticsearch/config/Elasticsearch.yml -it docker.elastic.co/elasticsearch/ela… --- ## [ELSER - Elastic Learned Sparse EncodeR model is unable using Trial License](https://discuss.elastic.co/t/elser-elastic-learned-sparse-encoder-model-is-unable-using-trial-license/334643)
**Author:** [@Rahul\_Agarwal1](https://discuss.elastic.co/u/Rahul_Agarwal1)\ **Replies:** 8\ **Last updated:** [June 8, 2023, 7:21pm UTC](https://discuss.elastic.co/t/elser-elastic-learned-sparse-encoder-model-is-unable-using-trial-license/334643 "2023-06-08T19:21:18Z")
I want to play with the new ELSER model released by Elasticsearch in new release 8.8. I tried installing Elasticsearch 8.8 in my local system and tried with the trial license but the model is not available under: Stack M… --- ## [Exclude a file based on a value inside this file](https://discuss.elastic.co/t/exclude-a-file-based-on-a-value-inside-this-file/136307)
**Author:** [@dyl](https://discuss.elastic.co/u/dyl)\ **Replies:** 8\ **Last updated:** [June 21, 2018, 6:43pm UTC](https://discuss.elastic.co/t/exclude-a-file-based-on-a-value-inside-this-file/136307 "2018-06-21T18:43:35Z")
Hey, I listen several files in a directory thanks to Filebeat and then I parse those who interest me. For exemple : This file doesn't interest me because its "CODE RETOUR" value is 0 (last line) : INFO;0000;000002;\* … --- ## [Select où 2 champs doivent avoir la même valeur](https://discuss.elastic.co/t/select-ou-2-champs-doivent-avoir-la-meme-valeur/136266)
**Author:** [@Athimue](https://discuss.elastic.co/u/Athimue)\ **Replies:** 8\ **Last updated:** [June 19, 2018, 12:04pm UTC](https://discuss.elastic.co/t/select-ou-2-champs-doivent-avoir-la-meme-valeur/136266 "2018-06-19T12:04:46Z")
Bonjour à tous, Comme mon titre l'explique, je souhaite ferme une requête Select qui me récupère les documents où 2 colonnes ont la même valeur. En effet, j'ai essayé via : GET index/doc/\_search { "query": { … --- ## [\[mapper\_parsing\_exception\] when creating the same document with different type](https://discuss.elastic.co/t/mapper-parsing-exception-when-creating-the-same-document-with-different-type/82987)
**Author:** [@tim\_wong](https://discuss.elastic.co/u/tim_wong)\ **Replies:** 3\ **Last updated:** [April 20, 2017, 8:01am UTC](https://discuss.elastic.co/t/mapper-parsing-exception-when-creating-the-same-document-with-different-type/82987 "2017-04-20T08:01:48Z")
I am importing a document twice into the same index but different types. However, I got a \[mapper\_parsing\_exception\] when I import the document the second time. Below are my steps. Create the template for the index… --- ## [Cannot create datastream under new index template](https://discuss.elastic.co/t/cannot-create-datastream-under-new-index-template/347126)
**Author:** [@Casper\_Thrane](https://discuss.elastic.co/u/Casper_Thrane)\ **Replies:** 5\ **Last updated:** [November 14, 2023, 3:17pm UTC](https://discuss.elastic.co/t/cannot-create-datastream-under-new-index-template/347126 "2023-11-14T15:17:49Z")
Hi I am using logstash running Kubernetes under ECK. I am ingesting both logs (filebeat) and metrics (metricbeat). Now i want ingest data from heartbeat. I get the following error: \[2023-11-14T13:22:23,598\]\[INFO \]\[logs… --- ## [UNASSIGNED shards after removing a node](https://discuss.elastic.co/t/unassigned-shards-after-removing-a-node/56721)
**Author:** [@ApurvG](https://discuss.elastic.co/u/ApurvG)\ **Replies:** 5\ **Last updated:** [July 29, 2016, 7:21pm UTC](https://discuss.elastic.co/t/unassigned-shards-after-removing-a-node/56721 "2016-07-29T19:21:11Z")
I had a 4 node cluster, 2 indices (5 and 10 shards respectively) each with 2 replicas. I removed one of the nodes from the cluster by shutting it down - it's gone. This was done by first calling \_cluster/nodes//shutdow… --- ## [Elasticsearch endpoints using TLS/SSL for HTTPS without X-pack](https://discuss.elastic.co/t/elasticsearch-endpoints-using-tls-ssl-for-https-without-x-pack/102188)
**Author:** [@gomarivera](https://discuss.elastic.co/u/gomarivera)\ **Replies:** 1\ **Last updated:** [September 28, 2017, 11:06pm UTC](https://discuss.elastic.co/t/elasticsearch-endpoints-using-tls-ssl-for-https-without-x-pack/102188 "2017-09-28T23:06:00Z")
I have found only information pertaining to X-pack + elasticsearch for TLS/SSL and HTTPS. Does the X-Pack license need to be valid in order to allow elasticsearch services to use TLS/HTTPS ? Are there other tools or al… --- ## [How to remove fields not required while sending log data from file beat](https://discuss.elastic.co/t/how-to-remove-fields-not-required-while-sending-log-data-from-file-beat/290484)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 2\ **Last updated:** [December 8, 2021, 6:04pm UTC](https://discuss.elastic.co/t/how-to-remove-fields-not-required-while-sending-log-data-from-file-beat/290484 "2021-12-08T18:04:07Z")
While sending data from a logfile using file beat through ingest pipeline to index in Elasticsearch, some additional fields not present in the concerned log file is also getting populated. These data are mostly relate… --- ## [Filebeat is not sending data to Elasticsearch](https://discuss.elastic.co/t/filebeat-is-not-sending-data-to-elasticsearch/123915)
**Author:** [@solo](https://discuss.elastic.co/u/solo)\ **Replies:** 2\ **Last updated:** [March 15, 2018, 2:46pm UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-data-to-elasticsearch/123915 "2018-03-15T14:46:42Z")
I have a standard Ubuntu 17.10 installation. I've installed elasticsearch, kibana and filebeat. Filebeat is processing data from a log file named fuse.log, but it is not sending it to Elasticsearch. I'm not sure where… --- ## [What would be the best implementation](https://discuss.elastic.co/t/what-would-be-the-best-implementation/1163)
**Author:** [@grmrgecko](https://discuss.elastic.co/u/grmrgecko)\ **Replies:** 3\ **Last updated:** [June 7, 2015, 3:11pm UTC](https://discuss.elastic.co/t/what-would-be-the-best-implementation/1163 "2015-06-07T15:11:59Z")
I am writing a website which has a bunch of posts and allows users to favorite posts. What I am wondering is what would be the best implementation that will allow users to search their favorites? There will be around… --- ## [\[Resolved\] Ruby filter exceptions in 5.0.0](https://discuss.elastic.co/t/resolved-ruby-filter-exceptions-in-5-0-0/56643)
**Author:** [@Rom1](https://discuss.elastic.co/u/Rom1)\ **Replies:** 1\ **Last updated:** [August 3, 2016, 3:16pm UTC](https://discuss.elastic.co/t/resolved-ruby-filter-exceptions-in-5-0-0/56643 "2016-08-03T15:16:36Z")
Hi, I want to create a new field by computing hour, minute and second in seconds with logstash 5.0.0-alpha4. I'm using : ruby { code =\> "event\['duration'\] = event\['dur\_hour'\] \* 3600 + event\['dur\_min'\] \* 60 + event\['… --- ## [Refresh\_interval:"10s" is better than refresh\_interval:"-1"?](https://discuss.elastic.co/t/refresh-interval-10s-is-better-than-refresh-interval-1/23207)
**Author:** [@Hajime\_Takase](https://discuss.elastic.co/u/Hajime_Takase)\ **Replies:** 7\ **Last updated:** [April 15, 2015, 10:48am UTC](https://discuss.elastic.co/t/refresh-interval-10s-is-better-than-refresh-interval-1/23207 "2015-04-15T10:48:26Z")
Hi, I'm trying to improve the indexing performances.I follow these instructions https://www.elastic.co/blog/performance-considerations-elasticsearch-indexing http://www.elastic.co/guide/en/elasticsearch/guide/master… --- ## [Java api : how to append/add a object to array using java highlevel client](https://discuss.elastic.co/t/java-api-how-to-append-add-a-object-to-array-using-java-highlevel-client/188944)
**Author:** [@gangakrishhh](https://discuss.elastic.co/u/gangakrishhh)\ **Replies:** 6\ **Last updated:** [July 8, 2019, 2:13pm UTC](https://discuss.elastic.co/t/java-api-how-to-append-add-a-object-to-array-using-java-highlevel-client/188944 "2019-07-08T14:13:42Z")
I've nested type in mappings and below doc looks like { "id" : 1, "blog": "something.." users : \[ { "name","xyz", "id": 123 }, { "name","abc", "id": 235 } \] I want to add one more user to users array how to d… --- ## [Filebeat is not writing logs when I try to start filebeat service](https://discuss.elastic.co/t/filebeat-is-not-writing-logs-when-i-try-to-start-filebeat-service/165439)
**Author:** [@janu](https://discuss.elastic.co/u/janu)\ **Replies:** 6\ **Last updated:** [January 29, 2019, 6:28am UTC](https://discuss.elastic.co/t/filebeat-is-not-writing-logs-when-i-try-to-start-filebeat-service/165439 "2019-01-29T06:28:24Z")
When I try to start the filebeat service it is throwing Error 1053 and I don't see logs that are written for this error. Can you please help --- ## [Filebeat Errors](https://discuss.elastic.co/t/filebeat-errors/119102)
**Author:** [@elJoeyJojo](https://discuss.elastic.co/u/elJoeyJojo)\ **Replies:** 6\ **Last updated:** [February 9, 2018, 8:35am UTC](https://discuss.elastic.co/t/filebeat-errors/119102 "2018-02-09T08:35:15Z")
Hello there, Trying in the Kibana section since the Filebeat is not much help and hardly anyone gets back to me. I am having this issue with Filebeat configuration in Kibana. This is my setup: Kibana Elasticsearch Vers… --- ## [New to ELK, do we need a queue for ELK stack](https://discuss.elastic.co/t/new-to-elk-do-we-need-a-queue-for-elk-stack/48829)
**Author:** [@nanshan](https://discuss.elastic.co/u/nanshan)\ **Replies:** 6\ **Last updated:** [June 20, 2016, 8:16pm UTC](https://discuss.elastic.co/t/new-to-elk-do-we-need-a-queue-for-elk-stack/48829 "2016-06-20T20:16:53Z")
Thanks --- ## [Send Cisco ASA Logs to ElasticSearch](https://discuss.elastic.co/t/send-cisco-asa-logs-to-elasticsearch/213749)
**Author:** [@YogeshAggarwal](https://discuss.elastic.co/u/YogeshAggarwal)\ **Replies:** 3\ **Last updated:** [January 8, 2020, 7:06pm UTC](https://discuss.elastic.co/t/send-cisco-asa-logs-to-elasticsearch/213749 "2020-01-08T19:06:20Z")
Hi, I am new to Elastic and need some help as i could not find an answer even after extensive googling. I have installed Elasticsearch 7.5, kibana 7.5, Filebeat and Logstash. All of these things works fine when i forwa… --- ## [Hive queries to read ES data taking too long | Need suggestions to improve](https://discuss.elastic.co/t/hive-queries-to-read-es-data-taking-too-long-need-suggestions-to-improve/46662)
**Author:** [@Preeti\_Raj\_Buchhada](https://discuss.elastic.co/u/Preeti_Raj_Buchhada)\ **Replies:** 3\ **Last updated:** [April 13, 2016, 11:39am UTC](https://discuss.elastic.co/t/hive-queries-to-read-es-data-taking-too-long-need-suggestions-to-improve/46662 "2016-04-13T11:39:49Z")
Hello, My ES version is 1.3.2 I setup an AWS EMR cluster (emr-4.2.0) with Hive 1.0.0 to provide an SQL-like interface to our data in ES. Since, our Analytics team prefers SQL like queries rather than ES. I'm using the … --- ## [Compute difference between 2 timestamps](https://discuss.elastic.co/t/compute-difference-between-2-timestamps/89276)
**Author:** [@ibrahimsharaf](https://discuss.elastic.co/u/ibrahimsharaf)\ **Replies:** 2\ **Last updated:** [June 14, 2017, 10:45am UTC](https://discuss.elastic.co/t/compute-difference-between-2-timestamps/89276 "2017-06-14T10:45:02Z")
Hello, I want to calculate time elapsed between the start and end of a logfile, if I extract the timestamp for every line, can I calculate the min and max (or first and last) ones, and get the difference between them? f… --- ## [Field and Document Level Security Limitations](https://discuss.elastic.co/t/field-and-document-level-security-limitations/74177)
**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\ **Replies:** 5\ **Last updated:** [February 8, 2017, 1:43pm UTC](https://discuss.elastic.co/t/field-and-document-level-security-limitations/74177 "2017-02-08T13:43:43Z")
Hi all, I've got a question regarding the security limitations: a normal user (even having all privileges to a particular index) cannot \_update documents: "type": "security\_exception", "reason": "Can't execute an upd… --- ## [Trying to figure out how to enable x-pack](https://discuss.elastic.co/t/trying-to-figure-out-how-to-enable-x-pack/213367)
**Author:** [@penguinairlines](https://discuss.elastic.co/u/penguinairlines)\ **Replies:** 1\ **Last updated:** [December 31, 2019, 12:09am UTC](https://discuss.elastic.co/t/trying-to-figure-out-how-to-enable-x-pack/213367 "2019-12-31T00:09:18Z")
I have been repeatedly failing to figure out how to properly enable x-pack. There's a lot of guides out there, but I still feel like I'm missing something. I built a new test machine to try to simplify this but am still … --- ## [Error 500 while creating s3 snapshot repo](https://discuss.elastic.co/t/error-500-while-creating-s3-snapshot-repo/267239)
**Author:** [@aditiparnami](https://discuss.elastic.co/u/aditiparnami)\ **Replies:** 1\ **Last updated:** [March 17, 2021, 8:16am UTC](https://discuss.elastic.co/t/error-500-while-creating-s3-snapshot-repo/267239 "2021-03-17T08:16:59Z")
I'm getting HTTP 500 status whenever I try to create the snapshot repository on an AWS S3 bucket. I have updated the AWS access key, secret key, and session token into the elasticsearch-keystore and reloaded the secure … --- ## [Clean install and running as a service: no files in /etc/logstash/conf.d/\*](https://discuss.elastic.co/t/clean-install-and-running-as-a-service-no-files-in-etc-logstash-conf-d/97920)
**Author:** [@Zilean](https://discuss.elastic.co/u/Zilean)\ **Replies:** 4\ **Last updated:** [August 23, 2017, 9:36pm UTC](https://discuss.elastic.co/t/clean-install-and-running-as-a-service-no-files-in-etc-logstash-conf-d/97920 "2017-08-23T21:36:42Z")
Hi, I am setting up logstash 5.5.1 in a RHEL 7 and my java version is 1.8.0\_144 (Oracle). I have been following the tutorials and it seems that the pipeline configuration files are placed in the /etc/logstash/conf.d di… --- ## [Docker logs to ES with FileBeat](https://discuss.elastic.co/t/docker-logs-to-es-with-filebeat/70006)
**Author:** [@gilcoh](https://discuss.elastic.co/u/gilcoh)\ **Replies:** 4\ **Last updated:** [December 28, 2016, 6:05pm UTC](https://discuss.elastic.co/t/docker-logs-to-es-with-filebeat/70006 "2016-12-28T18:05:09Z")
Hi, I need help to parse my docker logs to ES with FileBeat - without using logstash. The main issue is that my "log" line transfers to the ES as a string instead of being parsed. Versions: FileBeat - 5.1.1 ES - 2.3 … --- ## [Docker image for elastic search](https://discuss.elastic.co/t/docker-image-for-elastic-search/56615)
**Author:** [@Ravi\_Shanker\_Reddy](https://discuss.elastic.co/u/Ravi_Shanker_Reddy)\ **Replies:** 4\ **Last updated:** [August 1, 2016, 5:23pm UTC](https://discuss.elastic.co/t/docker-image-for-elastic-search/56615 "2016-08-01T17:23:42Z")
While creating a docker image for ES I downloaded 2.3.4 ES and changed my config file as below cluster.name: my-application node.name: ravi-1 node.master: true node.data: true network.host: 172.16.1.92 http.port: 9200 d… --- ## [\[SOLVED\] Is there a way to exclude 0 size (kibana 4.5.1)](https://discuss.elastic.co/t/solved-is-there-a-way-to-exclude-0-size-kibana-4-5-1/52137)
**Author:** [@rheng](https://discuss.elastic.co/u/rheng)\ **Replies:** 4\ **Last updated:** [June 8, 2016, 3:20am UTC](https://discuss.elastic.co/t/solved-is-there-a-way-to-exclude-0-size-kibana-4-5-1/52137 "2016-06-08T03:20:49Z")
--- ## [Rdf data](https://discuss.elastic.co/t/rdf-data/23888)
**Author:** [@sgsg](https://discuss.elastic.co/u/sgsg)\ **Replies:** 4\ **Last updated:** [June 18, 2015, 5:17am UTC](https://discuss.elastic.co/t/rdf-data/23888 "2015-06-18T05:17:32Z")
I 'd like to import RDF data to Elasticsearch and use instead of SPARQL. Is there such a river plugin? --- ## [Elasticsearch fleet error](https://discuss.elastic.co/t/elasticsearch-fleet-error/312117)
**Author:** [@alex\_96](https://discuss.elastic.co/u/alex_96)\ **Replies:** 4\ **Last updated:** [August 24, 2022, 11:23pm UTC](https://discuss.elastic.co/t/elasticsearch-fleet-error/312117 "2022-08-24T23:23:29Z")
Good evening, I use elastic 7.17.5 and fleet 7.17, on Sunday after 18:00 notifications to Microsoft 365 integration stopped coming, or rather they do, but a strictly fixed amount in a period of time, the error is as foll… [Previous page](https://discuss.elastic.co/top.md?page=746&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=748&per_page=50&period=all)