# Top **URL:** https://discuss.elastic.co/top.md?page=748&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 749 --- ## [Choropleth map from a spatial query?](https://discuss.elastic.co/t/choropleth-map-from-a-spatial-query/232044)
**Author:** [@Karel\_Cech](https://discuss.elastic.co/u/Karel_Cech)\ **Replies:** 2\ **Last updated:** [May 12, 2020, 9:53am UTC](https://discuss.elastic.co/t/choropleth-map-from-a-spatial-query/232044 "2020-05-12T09:53:35Z")
I have 2 indices: first, static with custom geometries (geo\_shape) and second is time-based stream of logs with coordinates (geo\_point). I need to show the custom geometries from the 1st index in a color palette that re… --- ## [How to change S3 base\_path for snapshot repos](https://discuss.elastic.co/t/how-to-change-s3-base-path-for-snapshot-repos/151544)
**Author:** [@raywtsang](https://discuss.elastic.co/u/raywtsang)\ **Replies:** 0\ **Last updated:** [October 9, 2018, 2:36am UTC](https://discuss.elastic.co/t/how-to-change-s3-base-path-for-snapshot-repos/151544 "2018-10-09T02:36:14Z")
I'm having some difficulty changing the base\_path for a snapshot repository and having the change persist after a snapshot has been saved. I have removed the repo using the DELETE /\_snapshot/\ and recreating wit… --- ## [Log4j -\>Logstash problem with "LocationInfo is not allowed" exception](https://discuss.elastic.co/t/log4j-logstash-problem-with-locationinfo-is-not-allowed-exception/85054)
**Author:** [@iknowabc](https://discuss.elastic.co/u/iknowabc)\ **Replies:** 0\ **Last updated:** [May 9, 2017, 9:52am UTC](https://discuss.elastic.co/t/log4j-logstash-problem-with-locationinfo-is-not-allowed-exception/85054 "2017-05-09T09:52:19Z")
When I use log4j sends log event to Logstash , a problem ("exception=\>java.io.InvalidObjectException: Object type org.apache.log4j.spi.LocationInfo is not allowed.") is encountered. Anyone could help me ? thanks! BTW: Bo… --- ## [Creating Dropdowns in Kibana](https://discuss.elastic.co/t/creating-dropdowns-in-kibana/66285)
**Author:** [@Aparna\_Bhardwaj](https://discuss.elastic.co/u/Aparna_Bhardwaj)\ **Replies:** 2\ **Last updated:** [November 18, 2016, 6:17pm UTC](https://discuss.elastic.co/t/creating-dropdowns-in-kibana/66285 "2016-11-18T18:17:54Z")
Hi, Has anyone created drop-downs in Kibana to filter data? For example consider the data being passed to Kibana has three fields- Source, file and Count. I want to create a drop down on source almost in the beginni… --- ## [How to highlight text in elastic search result - codeigniter](https://discuss.elastic.co/t/how-to-highlight-text-in-elastic-search-result-codeigniter/54251)
**Author:** [@gutasaputra](https://discuss.elastic.co/u/gutasaputra)\ **Replies:** 2\ **Last updated:** [June 30, 2016, 5:21am UTC](https://discuss.elastic.co/t/how-to-highlight-text-in-elastic-search-result-codeigniter/54251 "2016-06-30T05:21:31Z")
hello guys, thanks for helping me before, so now i can explore more about elastic search. so far, i can manipulate data using elasticsearch. i create new library in my php framework (codeigniter). after make several d… --- ## [Elasticsearch-6.1.1 failed to load plugin class \[org.elasticsearch.xpack.XPackPlugin\]](https://discuss.elastic.co/t/elasticsearch-6-1-1-failed-to-load-plugin-class-org-elasticsearch-xpack-xpackplugin/114667)
**Author:** [@shaonbean](https://discuss.elastic.co/u/shaonbean)\ **Replies:** 3\ **Last updated:** [January 11, 2018, 1:50pm UTC](https://discuss.elastic.co/t/elasticsearch-6-1-1-failed-to-load-plugin-class-org-elasticsearch-xpack-xpackplugin/114667 "2018-01-11T13:50:12Z")
1、env：centos6.9 + elastic stask 6.1.x yum install elasticsearch/filebeat/kibana is ok, but I follow https://www.elastic.co/guide/en/elasticsearch/reference/6.1/installing-xpack-es.html install x-pack restart elastics… --- ## [How to convert string field to number using painless script to visualize in kibana](https://discuss.elastic.co/t/how-to-convert-string-field-to-number-using-painless-script-to-visualize-in-kibana/182886)
**Author:** [@Vafa](https://discuss.elastic.co/u/Vafa)\ **Replies:** 6\ **Last updated:** [May 29, 2019, 8:31am UTC](https://discuss.elastic.co/t/how-to-convert-string-field-to-number-using-painless-script-to-visualize-in-kibana/182886 "2019-05-29T08:31:18Z")
Hello I am trying to convert a string field to number. This string field contains mainly floated point values like "127.5", "218.3" etc, etc. I appreciate any advice in advance . --- ## [Monitor/alert beats dropped events](https://discuss.elastic.co/t/monitor-alert-beats-dropped-events/295591)
**Author:** [@smueller](https://discuss.elastic.co/u/smueller)\ **Replies:** 7\ **Last updated:** [March 14, 2022, 8:28am UTC](https://discuss.elastic.co/t/monitor-alert-beats-dropped-events/295591 "2022-03-14T08:28:42Z")
Hi, i need to alert me on filebeat dropping events. Even better alerting me on the kind of error that lead to the dropping. I'm running filebeat 7.15 on rhel-7. First tack i tried was to use the internal monitorings sys… --- ## [Routing - Massive injection with bulk API](https://discuss.elastic.co/t/routing-massive-injection-with-bulk-api/43095)
**Author:** [@xam](https://discuss.elastic.co/u/xam)\ **Replies:** 7\ **Last updated:** [March 1, 2016, 3:09pm UTC](https://discuss.elastic.co/t/routing-massive-injection-with-bulk-api/43095 "2016-03-01T15:09:54Z")
Hi, I was wondering how the bulk API works for massive indexing job on a multi node cluster. For me they are two possibilities: - The Java client sends documents on a round robin basis to each node of the cluster. The… --- ## [Error at starting Elasticsearch: StartupException - Unable to initialize modules](https://discuss.elastic.co/t/error-at-starting-elasticsearch-startupexception-unable-to-initialize-modules/99266)
**Author:** [@patbre](https://discuss.elastic.co/u/patbre)\ **Replies:** 1\ **Last updated:** [September 4, 2017, 10:50am UTC](https://discuss.elastic.co/t/error-at-starting-elasticsearch-startupexception-unable-to-initialize-modules/99266 "2017-09-04T10:50:06Z")
Hello, my 30 days trial of X-Pack has ended and I tried updating it to Basic License. I have registered and downloaded the license and tried updating it through the license API like it is said in the Docs. There was som… --- ## [Kibana, unique or distinct count alerting](https://discuss.elastic.co/t/kibana-unique-or-distinct-count-alerting/263803)
**Author:** [@earlsanchez](https://discuss.elastic.co/u/earlsanchez)\ **Replies:** 5\ **Last updated:** [February 20, 2021, 2:04am UTC](https://discuss.elastic.co/t/kibana-unique-or-distinct-count-alerting/263803 "2021-02-20T02:04:39Z")
Hello, Using Kibana Discovery and then Alerting is it possible to create an alert based on the count of a unique field value during a particular time period? For instance, in Splunk I can alarm a query such as this: in… --- ## [Replace empty strings with Ruby code](https://discuss.elastic.co/t/replace-empty-strings-with-ruby-code/206590)
**Author:** [@vinay.rao](https://discuss.elastic.co/u/vinay.rao)\ **Replies:** 5\ **Last updated:** [November 7, 2019, 3:47pm UTC](https://discuss.elastic.co/t/replace-empty-strings-with-ruby-code/206590 "2019-11-07T15:47:39Z")
Dear All, I am here seeking your help on the following. I have empty strings in fields and i need to replace it with NULL or NILL . Since am very new to Ruby, Can you help me with the complete query to achieve the abov… --- ## [Kibana Regexp Filter Error Unexpected '.'](https://discuss.elastic.co/t/kibana-regexp-filter-error-unexpected/146569)
**Author:** [@caklier](https://discuss.elastic.co/u/caklier)\ **Replies:** 5\ **Last updated:** [August 31, 2018, 6:44pm UTC](https://discuss.elastic.co/t/kibana-regexp-filter-error-unexpected/146569 "2018-08-31T18:44:47Z")
I am trying to create a filter than only shows page urls that have an extension. pagename.keyword:/.\*.\[^./\]+/ works fine when I enter it into the search bar but I can't seem to find the right way to enter it as a filte… --- ## [SNMP Trap listener died Address already in use](https://discuss.elastic.co/t/snmp-trap-listener-died-address-already-in-use/103146)
**Author:** [@gilisade](https://discuss.elastic.co/u/gilisade)\ **Replies:** 5\ **Last updated:** [October 10, 2017, 6:25am UTC](https://discuss.elastic.co/t/snmp-trap-listener-died-address-already-in-use/103146 "2017-10-10T06:25:44Z")
HI I'm encountering a problem with snmptrap input using LS 5.2 this is my conf file: input{ snmptrap{ port =\> "5042" type =\> "test" community =\> "Public" … --- ## [Kibanaが複数インスタンスある場合の状態確認について](https://discuss.elastic.co/t/kibana/173064)
**Author:** [@gou](https://discuss.elastic.co/u/gou)\ **Replies:** 4\ **Last updated:** [April 15, 2019, 9:21am UTC](https://discuss.elastic.co/t/kibana/173064 "2019-04-15T09:21:33Z")
◆バージョン ElasticSearch : 6.2.4 kibana : 6.2.4 ◆構成 kibanaとESは別のサーバ上 ・kibana 1クラスタ構成 インスタンスとサーバの関係が1:1 インスタンス数は10程度 (仮に名前をA,B,C…とします) ・ES 3クラスタ構成 10台程度のkibanaが同じESを見ている ノード数は10程度 ◆目的 Monitoringの機能を使用して、ESにクエリ(… --- ## [How to write a Python script to create dashboard in Kibana 6.2.2](https://discuss.elastic.co/t/how-to-write-a-python-script-to-create-dashboard-in-kibana-6-2-2/123475)
**Author:** [@rohanparikh](https://discuss.elastic.co/u/rohanparikh)\ **Replies:** 4\ **Last updated:** [March 12, 2018, 9:25am UTC](https://discuss.elastic.co/t/how-to-write-a-python-script-to-create-dashboard-in-kibana-6-2-2/123475 "2018-03-12T09:25:21Z")
Hello All I am new to elasticsearch and I am learning by searching tutorials but what I found is writing python program to get the data from a URL or retrieving a data Now I want to learn how to create dashboard using … --- ## [User based access control in kibana using Nginx+ lua](https://discuss.elastic.co/t/user-based-access-control-in-kibana-using-nginx-lua/25881)
**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\ **Replies:** 4\ **Last updated:** [July 21, 2015, 1:31pm UTC](https://discuss.elastic.co/t/user-based-access-control-in-kibana-using-nginx-lua/25881 "2015-07-21T13:31:22Z")
Hi, Is there any way of kibana access control using ngix+lua ? i came to know it is possible , if yes is there getting start stuff available ? --- ## [Recovery failed : IllegalArgumentException\[No enum constant org.apache.lucene.util.Version.4.3.1\]](https://discuss.elastic.co/t/recovery-failed-illegalargumentexception-no-enum-constant-org-apache-lucene-util-version-4-3-1/18873)
**Author:** [@pounraj\_manikandan](https://discuss.elastic.co/u/pounraj_manikandan)\ **Replies:** 4\ **Last updated:** [July 28, 2014, 5:52pm UTC](https://discuss.elastic.co/t/recovery-failed-illegalargumentexception-no-enum-constant-org-apache-lucene-util-version-4-3-1/18873 "2014-07-28T17:52:15Z")
Hello Team, We are using Elastic search for last 2years and we are currently in 0.90.2 release which was upgraded on Jan 2014. For our requirement aggregation (top\_hits) fits and we planned to upgrade to 1.3.0 … --- ## [Searching with uri request](https://discuss.elastic.co/t/searching-with-uri-request/10254)
**Author:** [@emj11](https://discuss.elastic.co/u/emj11)\ **Replies:** 4\ **Last updated:** [January 8, 2013, 6:59pm UTC](https://discuss.elastic.co/t/searching-with-uri-request/10254 "2013-01-08T18:59:44Z")
This will seem like a silly question, but I don't have much experience with http requests/responses. I am trying to run a query against elastic search using the Java URLConnection API: The following gives me all … --- ## [Recommended JVM settings?](https://discuss.elastic.co/t/recommended-jvm-settings/250891)
**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\ **Replies:** 2\ **Last updated:** [October 4, 2020, 5:50pm UTC](https://discuss.elastic.co/t/recommended-jvm-settings/250891 "2020-10-04T17:50:48Z")
this is the settings I gave logstash: -Xms2g -Xmx4g The machine has 8 cores and 24 GB of ram. My problem is that I've only added about 10-15 machines with audit&filebeat and all the cores are over 80% and some reach … --- ## [Single thread with high CPU usage](https://discuss.elastic.co/t/single-thread-with-high-cpu-usage/16039)
**Author:** [@Magnus\_Hyllander](https://discuss.elastic.co/u/Magnus_Hyllander)\ **Replies:** 2\ **Last updated:** [February 27, 2014, 10:46pm UTC](https://discuss.elastic.co/t/single-thread-with-high-cpu-usage/16039 "2014-02-27T22:46:50Z")
I have an ES 0.90.11 cluster with three nodes (d0, d1, d2), with 4 cores and 7GB memory, running Ubuntu and JDK 7u45. The ES instances are all master+data, configured with 3.5GB heap size. They are pretty much runnin… --- ## [X-pack default password is not working for Elasticsearch 5.6.8 version](https://discuss.elastic.co/t/x-pack-default-password-is-not-working-for-elasticsearch-5-6-8-version/123371)
**Author:** [@bob999c](https://discuss.elastic.co/u/bob999c)\ **Replies:** 3\ **Last updated:** [March 10, 2018, 7:08am UTC](https://discuss.elastic.co/t/x-pack-default-password-is-not-working-for-elasticsearch-5-6-8-version/123371 "2018-03-10T07:08:05Z")
Hi, I installed X-Pack(5.6.8) plugin on ElasticSearch(5.6.8).Here is the error I see when I try to do curl with default password. \[root@dev01-2 elasticsearch\]# curl -XGET -u elastic:changeme http://10.2.2.5:9200 {"err… --- ## [Rename and sub field dont work](https://discuss.elastic.co/t/rename-and-sub-field-dont-work/86940)
**Author:** [@nigdav007](https://discuss.elastic.co/u/nigdav007)\ **Replies:** 3\ **Last updated:** [May 24, 2017, 12:14pm UTC](https://discuss.elastic.co/t/rename-and-sub-field-dont-work/86940 "2017-05-24T12:14:25Z")
Hay All I am trying to rename and field called "@fields.ctxt\_file" to "file" but it does not work the config i am using is json { source =\> "message" } mutate { replace =\> \[ "messag… --- ## [Forcing a Default Dashboard](https://discuss.elastic.co/t/forcing-a-default-dashboard/252586)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 6\ **Last updated:** [October 20, 2020, 3:03pm UTC](https://discuss.elastic.co/t/forcing-a-default-dashboard/252586 "2020-10-20T15:03:13Z")
Hi, Curious how I can force a dashboard to appear as default when a user logs in. Currently, they have to go to the DASHBOARD section and select one but I want them to get one of my choosing the moment they log in. Than… --- ## [Sending logs from filebeat(WIndows) to Logstash and Elasticsearch(RHEL)](https://discuss.elastic.co/t/sending-logs-from-filebeat-windows-to-logstash-and-elasticsearch-rhel/330499)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 5\ **Last updated:** [April 25, 2023, 7:52pm UTC](https://discuss.elastic.co/t/sending-logs-from-filebeat-windows-to-logstash-and-elasticsearch-rhel/330499 "2023-04-25T19:52:48Z")
Hi, I have installed filebeat on my windows machine. I've enabled the systema nd logstash module. Here is the filebeat.yml - type: filestream # Unique ID among all inputs, an ID is required. id: my-filestream-id … --- ## [Split and Substring](https://discuss.elastic.co/t/split-and-substring/179536)
**Author:** [@Akhraht](https://discuss.elastic.co/u/Akhraht)\ **Replies:** 5\ **Last updated:** [May 6, 2019, 12:53pm UTC](https://discuss.elastic.co/t/split-and-substring/179536 "2019-05-06T12:53:41Z")
Hello guys, I have a group of strings like "lorem","ipsum", i wanna only "um" part of the string how i can do it i tried mutate filter and split, split give me array but i need last two char of the array filter { mu… --- ## [Can elasticsearch handle long text?](https://discuss.elastic.co/t/can-elasticsearch-handle-long-text/173991)
**Author:** [@flash](https://discuss.elastic.co/u/flash)\ **Replies:** 5\ **Last updated:** [March 28, 2019, 7:52am UTC](https://discuss.elastic.co/t/can-elasticsearch-handle-long-text/173991 "2019-03-28T07:52:03Z")
I am trying to use elasticsearch to do some document understanding. Here is the index settings DELETE index PUT index/\_doc/type\_name { "id": "id1" "name": "Lake Tahoe" "indexed\_at": "2019-03-01" } PUT index/\_do… --- ## [Help to convert SQL to ElasticSearch](https://discuss.elastic.co/t/help-to-convert-sql-to-elasticsearch/102083)
**Author:** [@irfanh94](https://discuss.elastic.co/u/irfanh94)\ **Replies:** 5\ **Last updated:** [September 29, 2017, 7:40am UTC](https://discuss.elastic.co/t/help-to-convert-sql-to-elasticsearch/102083 "2017-09-29T07:40:31Z")
Hey guys, can somone help me to convert this sql query to elasticsearch query: SELECT id, supplier FROM s\_articles WHERE supplier NOT IN (1,2) OR id IN (1,2,3,4,5,6) --- ## [Problem with root ERROR Cannot run subcommand in rally](https://discuss.elastic.co/t/problem-with-root-error-cannot-run-subcommand-in-rally/69275)
**Author:** [@Walter](https://discuss.elastic.co/u/Walter)\ **Replies:** 5\ **Last updated:** [December 26, 2016, 7:12am UTC](https://discuss.elastic.co/t/problem-with-root-error-cannot-run-subcommand-in-rally/69275 "2016-12-26T07:12:00Z")
HI： I run the rally on ES the first time. And i got the error message like this: \[elsearch@elksearch01 ~\]$ esrally \_\_\_\_ \_\_\_\_ / \_ \_\_\_\_ \_/ / / \_\_ / /\_/ / \_\_ \`/ / / / / / / , \_/ // / / / /\_/ / /\_/ ||\_,//… --- ## [How to collect performance data related to disk](https://discuss.elastic.co/t/how-to-collect-performance-data-related-to-disk/48615)
**Author:** [@tuankun](https://discuss.elastic.co/u/tuankun)\ **Replies:** 5\ **Last updated:** [May 10, 2016, 1:59am UTC](https://discuss.elastic.co/t/how-to-collect-performance-data-related-to-disk/48615 "2016-05-10T01:59:51Z")
Hi, I want to collect performance data related to disk into ELK,especially physical disk read/write,IOPs,Does anybody know which software or beat could work? thanks so much. --- ## [ES 2.1.0 error](https://discuss.elastic.co/t/es-2-1-0-error/36131)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 5\ **Last updated:** [December 5, 2015, 5:12am UTC](https://discuss.elastic.co/t/es-2-1-0-error/36131 "2015-12-05T05:12:37Z")
Hi Experts, While starting ES I am getting following error . Right now I do not have any index in this new setup Except .kibana as I was trying to open kibana 4.3.0 . \[2015-12-02 12:44:35,451\]\[WARN \]\[index.translog … --- ## [Elasticsearch-certutil add node pem format failing](https://discuss.elastic.co/t/elasticsearch-certutil-add-node-pem-format-failing/199325)
**Author:** [@kdotson](https://discuss.elastic.co/u/kdotson)\ **Replies:** 2\ **Last updated:** [September 13, 2019, 3:02pm UTC](https://discuss.elastic.co/t/elasticsearch-certutil-add-node-pem-format-failing/199325 "2019-09-13T15:02:22Z")
In prep for upgrade to 7x from 6.61, I am creating new certs. After creating the initial certs without issue, I attempted to add a node and it is failing using the following command: bin/elasticsearch-certutil cert --p… --- ## [Is it possible to disable versioning?](https://discuss.elastic.co/t/is-it-possible-to-disable-versioning/6750)
**Author:** [@T\_Vinod\_Gupta](https://discuss.elastic.co/u/T_Vinod_Gupta)\ **Replies:** 2\ **Last updated:** [February 20, 2012, 12:32am UTC](https://discuss.elastic.co/t/is-it-possible-to-disable-versioning/6750 "2012-02-20T00:32:06Z")
in my use case, i don't really care about the versions of a document. i only care about the latest version. so i was wondering if its a good idea to disable it so that i save on space overhead of multiple versions? if … --- ## [Unable to initialize Fleet in v8.0.0](https://discuss.elastic.co/t/unable-to-initialize-fleet-in-v8-0-0/296968)
**Author:** [@vvlad](https://discuss.elastic.co/u/vvlad)\ **Replies:** 7\ **Last updated:** [February 14, 2022, 3:59pm UTC](https://discuss.elastic.co/t/unable-to-initialize-fleet-in-v8-0-0/296968 "2022-02-14T15:59:42Z")
I've just update a cluster from 7.17 to 8.0.0 and the Fleet app in Kibana doesn't work anymore. I'm running OnPrem on Linux/aarch64. Is this a known issue? Logs below: {"ecs":{"version":"8.0.0"},"@timestamp":"2022-02… --- ## [Failed visualize data from Elastic SQL query in Canvas Bar Chart](https://discuss.elastic.co/t/failed-visualize-data-from-elastic-sql-query-in-canvas-bar-chart/183327)
**Author:** [@ofitz](https://discuss.elastic.co/u/ofitz)\ **Replies:** 7\ **Last updated:** [June 28, 2019, 9:55pm UTC](https://discuss.elastic.co/t/failed-visualize-data-from-elastic-sql-query-in-canvas-bar-chart/183327 "2019-06-28T21:55:46Z")
I create a canvas board and would like to visualize data in "realtime". My board: My Datasource SQL query: SELECT TIMESTAMP, SENSOR, LAST(VALUE) VALUE FROM "runtime\_kibana\_stream" WHERE SENSOR='knife01' OR SENSOR=… --- ## [View\_index\_metadata doesn't allow indices:admin/get (solved)](https://discuss.elastic.co/t/view-index-metadata-doesnt-allow-indices-admin-get-solved/169861)
**Author:** [@matt\_p](https://discuss.elastic.co/u/matt_p)\ **Replies:** 1\ **Last updated:** [March 6, 2019, 1:21pm UTC](https://discuss.elastic.co/t/view-index-metadata-doesnt-allow-indices-admin-get-solved/169861 "2019-03-06T13:21:35Z")
How should I grant permissions for GET index (https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-get-index.html). From the docs I expected that view\_index\_metadata should do this. I can search the i… --- ## [How do you delete the task document once the task has completed?](https://discuss.elastic.co/t/how-do-you-delete-the-task-document-once-the-task-has-completed/134492)
**Author:** [@Jinggang\_Diao](https://discuss.elastic.co/u/Jinggang_Diao)\ **Replies:** 1\ **Last updated:** [June 4, 2018, 9:37pm UTC](https://discuss.elastic.co/t/how-do-you-delete-the-task-document-once-the-task-has-completed/134492 "2018-06-04T21:37:34Z")
This question is also asked here No delete task by id API in ES cluster? Intentionally? Not documented?, but no answer is provided. --- ## [Не работает boost в запросах](https://discuss.elastic.co/t/boost/51648)
**Author:** [@MaWr](https://discuss.elastic.co/u/MaWr)\ **Replies:** 7\ **Last updated:** [August 20, 2016, 7:49am UTC](https://discuss.elastic.co/t/boost/51648 "2016-08-20T07:49:30Z")
Добрый день! Есть индекс: curl -XDELETE "http://127.0.0.1:9200/tests" curl -XPUT "http://127.0.0.1:9200/tests/" -d '{ "settings":{ "analysis":{ "filter":{ "edge":{"type":"edgeNGram", … --- ## [Parsing Python Logs - Use Logstash or not](https://discuss.elastic.co/t/parsing-python-logs-use-logstash-or-not/35464)
**Author:** [@Mathew\_Mathew](https://discuss.elastic.co/u/Mathew_Mathew)\ **Replies:** 1\ **Last updated:** [November 24, 2015, 4:03pm UTC](https://discuss.elastic.co/t/parsing-python-logs-use-logstash-or-not/35464 "2015-11-24T16:03:00Z")
My current logging infrastructure uses just filebeats and elasticsearch. Would like to enhance the quality of the logs by parsing out individual fields columns. Looking for recommendation on best practice to do this.… --- ## [Elasticsearch 8 won't start on Centos 7](https://discuss.elastic.co/t/elasticsearch-8-wont-start-on-centos-7/336722)
**Author:** [@Geek2.0](https://discuss.elastic.co/u/Geek2.0)\ **Replies:** 4\ **Last updated:** [June 23, 2023, 8:06am UTC](https://discuss.elastic.co/t/elasticsearch-8-wont-start-on-centos-7/336722 "2023-06-23T08:06:26Z")
I have installed Elasticsearch 7.8 on centos 7 server and it was running normally. After uninstalling it and installing elasticsearch 8.8, I get the following error when trying to start it with the command sudo systemc… --- ## [Disable Kibana Management section for users](https://discuss.elastic.co/t/disable-kibana-management-section-for-users/76443)
**Author:** [@elk12](https://discuss.elastic.co/u/elk12)\ **Replies:** 3\ **Last updated:** [April 19, 2017, 4:09pm UTC](https://discuss.elastic.co/t/disable-kibana-management-section-for-users/76443 "2017-04-19T16:09:12Z")
Hello Folks, Is there a way we can disable the management section from being visible or throw a 404 for users ? We are using kibana-5.1.2 and niginx for security , was thinking if there is a way to avoid that being vi… --- ## [Extracting a value(Integer) from the logs and plotting it in kibana VS time](https://discuss.elastic.co/t/extracting-a-value-integer-from-the-logs-and-plotting-it-in-kibana-vs-time/39861)
**Author:** [@shivam\_singh](https://discuss.elastic.co/u/shivam_singh)\ **Replies:** 3\ **Last updated:** [January 22, 2016, 12:12pm UTC](https://discuss.elastic.co/t/extracting-a-value-integer-from-the-logs-and-plotting-it-in-kibana-vs-time/39861 "2016-01-22T12:12:30Z")
Hi, I am tying to parse logs using grok filters. if \[type\]=="xyz"{ multiline { pattern =\> "^%{SYSLOG5424SD} " negate =\> true what =\> previous } grok{ match =\> { "message" =\> \["%{SYSL… --- ## [Writing rich datatypes from Pig to ElasticSearch type with mapping (Geoshape)](https://discuss.elastic.co/t/writing-rich-datatypes-from-pig-to-elasticsearch-type-with-mapping-geoshape/51016)
**Author:** [@liadl](https://discuss.elastic.co/u/liadl)\ **Replies:** 3\ **Last updated:** [June 1, 2016, 2:06pm UTC](https://discuss.elastic.co/t/writing-rich-datatypes-from-pig-to-elasticsearch-type-with-mapping-geoshape/51016 "2016-06-01T14:06:50Z")
Hello, I am trying to write a Geoshape from Pig to ElasticSearch using EsStorage. (The Index has a mapping for the geoshape field) I am able to write a document with that field identified as a "GeoShape" using "curl", … --- ## [Can't embed instagram post on custom plugin visualization](https://discuss.elastic.co/t/cant-embed-instagram-post-on-custom-plugin-visualization/224181)
**Author:** [@Jessica\_Langanz](https://discuss.elastic.co/u/Jessica_Langanz)\ **Replies:** 3\ **Last updated:** [March 19, 2020, 7:30pm UTC](https://discuss.elastic.co/t/cant-embed-instagram-post-on-custom-plugin-visualization/224181 "2020-03-19T19:30:46Z")
I am creating a kibana plugin that embeds an instagram post and receiving this error: C:\\Users\\User\\Documents\\Projects\\kibana\\plugins\\kbn\_tp\_custom\_visualizations\\node\_modules\\react-instagram-embed\\lib\\index.js:135 Refu… --- ## [Deleting Logs](https://discuss.elastic.co/t/deleting-logs/140874)
**Author:** [@Marcos\_Felix](https://discuss.elastic.co/u/Marcos_Felix)\ **Replies:** 1\ **Last updated:** [July 27, 2018, 2:44pm UTC](https://discuss.elastic.co/t/deleting-logs/140874 "2018-07-27T14:44:36Z")
Hello, I have deleted many logs before, but for some reason now the logs aren't getting deleted. I am using the following command: PowerShell.exe Invoke-RestMethod -Method Delete http://IP:9200/logstash-\* but for som… --- ## [Machine Learning Watcher does not send emails](https://discuss.elastic.co/t/machine-learning-watcher-does-not-send-emails/191148)
**Author:** [@Kiril\_Shivachev](https://discuss.elastic.co/u/Kiril_Shivachev)\ **Replies:** 8\ **Last updated:** [July 18, 2019, 2:53pm UTC](https://discuss.elastic.co/t/machine-learning-watcher-does-not-send-emails/191148 "2019-07-18T14:53:25Z")
Hello I have very weird case. After I configure job for Anomaly detection and set real time watcher alerts, the system does not generate emails in case of anomaly ( no matter if I configure it to send emails in case of … --- ## [Xml filter: create filter definition based on xsd](https://discuss.elastic.co/t/xml-filter-create-filter-definition-based-on-xsd/141581)
**Author:** [@JPelastic](https://discuss.elastic.co/u/JPelastic)\ **Replies:** 8\ **Last updated:** [July 26, 2018, 3:08pm UTC](https://discuss.elastic.co/t/xml-filter-create-filter-definition-based-on-xsd/141581 "2018-07-26T15:08:21Z")
Hi Context: I need to put (several millions) XML invoices into ES and query and aggregate over their content. Proposed solution: use Logstash xml filter plugin to map the XML to JSON First question: For my context, wo… --- ## [Configuring TLS on a Logstash Docker container](https://discuss.elastic.co/t/configuring-tls-on-a-logstash-docker-container/62580)
**Author:** [@espogian](https://discuss.elastic.co/u/espogian)\ **Replies:** 2\ **Last updated:** [October 9, 2016, 6:03pm UTC](https://discuss.elastic.co/t/configuring-tls-on-a-logstash-docker-container/62580 "2016-10-09T18:03:16Z")
Hello, maybe this is a dumb question. I'm in the situation in which I want to use TLS between Filebeat and Logstash, the latter being on a Docker container. To enable TLS on Logstash, I'm supposed to configure it as foll… --- ## [Filtering nested objects using inner hits total](https://discuss.elastic.co/t/filtering-nested-objects-using-inner-hits-total/56302)
**Author:** [@JeremyFelder](https://discuss.elastic.co/u/JeremyFelder)\ **Replies:** 2\ **Last updated:** [July 28, 2016, 6:22am UTC](https://discuss.elastic.co/t/filtering-nested-objects-using-inner-hits-total/56302 "2016-07-28T06:22:00Z")
I'm new to Elasticsearch so forgive me if I don't know the lingo. I have this mapping with a nested object Command "Command": { "type": "nested", "include\_in\_parent": true, "prope… --- ## [Setup a elastic cluster](https://discuss.elastic.co/t/setup-a-elastic-cluster/339741)
**Author:** [@psanggabuana](https://discuss.elastic.co/u/psanggabuana)\ **Replies:** 2\ **Last updated:** [August 1, 2023, 12:50pm UTC](https://discuss.elastic.co/t/setup-a-elastic-cluster/339741 "2023-08-01T12:50:09Z")
Hi everyone, I want to set up my cluster with the right server requirement. My cluster consists of: Master Data Coordinating Transform Ingest Can anyone share with me how much CPU, RAM, and storage for each server? … [Previous page](https://discuss.elastic.co/top.md?page=747&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=749&per_page=50&period=all)