# Top **URL:** https://discuss.elastic.co/top.md?page=758&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 759 --- ## [Kibana visualization for total count of Jenkins jobs currently passing/failing](https://discuss.elastic.co/t/kibana-visualization-for-total-count-of-jenkins-jobs-currently-passing-failing/137507)
**Author:** [@ps895r](https://discuss.elastic.co/u/ps895r)\ **Replies:** 4\ **Last updated:** [June 28, 2018, 4:23am UTC](https://discuss.elastic.co/t/kibana-visualization-for-total-count-of-jenkins-jobs-currently-passing-failing/137507 "2018-06-28T04:23:32Z")
This question is regarding Jenkins, the use of their logstash plugin to send build logs to elasticsearch and how to get the current state of all jobs. For example, let's say there are 10 jobs. I'd like to generate a grap… --- ## [Error 1067: The process terminated unexpectedly while starting metricbeat service on Windows server 2016 and 2019](https://discuss.elastic.co/t/error-1067-the-process-terminated-unexpectedly-while-starting-metricbeat-service-on-windows-server-2016-and-2019/168810)
**Author:** [@ShilpaT](https://discuss.elastic.co/u/ShilpaT)\ **Replies:** 1\ **Last updated:** [February 19, 2019, 2:37am UTC](https://discuss.elastic.co/t/error-1067-the-process-terminated-unexpectedly-while-starting-metricbeat-service-on-windows-server-2016-and-2019/168810 "2019-02-19T02:37:29Z")
Everytime I am trying to start metricbeat service, the error 'Error 1067: The process terminated unexpectedly' is shown. I have tried this on Windows server 2012, 2016 and 2019. Same result on every OS. What could be the… --- ## [How to build dynamic query of elasticsearch. which will execute on nodejs](https://discuss.elastic.co/t/how-to-build-dynamic-query-of-elasticsearch-which-will-execute-on-nodejs/47238)
**Author:** [@smart.amit](https://discuss.elastic.co/u/smart.amit)\ **Replies:** 1\ **Last updated:** [April 14, 2016, 1:40pm UTC](https://discuss.elastic.co/t/how-to-build-dynamic-query-of-elasticsearch-which-will-execute-on-nodejs/47238 "2016-04-14T13:40:58Z")
When i tried to create query like on nodejs like var my\_query = new Object("\[{ \\"match\\": { \\"techskills.programming\\":"+ programming+" } }\]"); var deferred = Q.defer(); client.search({ "index": \_index, "type… --- ## [Error: getsockopt: connection refused](https://discuss.elastic.co/t/error-getsockopt-connection-refused/103418)
**Author:** [@Amit2015](https://discuss.elastic.co/u/Amit2015)\ **Replies:** 3\ **Last updated:** [October 11, 2017, 9:37pm UTC](https://discuss.elastic.co/t/error-getsockopt-connection-refused/103418 "2017-10-11T21:37:39Z")
Hi, I am using filebeat with logstash-\> ElasticSearch. I have configured same port on filebeat and logstash but I am getting error : getsockopt: connection refused Filebeat.yml indent preformatted text by 4 spaces #… --- ## ["failed to reduce search"](https://discuss.elastic.co/t/failed-to-reduce-search/54647)
**Author:** [@michbsd](https://discuss.elastic.co/u/michbsd)\ **Replies:** 3\ **Last updated:** [July 5, 2016, 10:33am UTC](https://discuss.elastic.co/t/failed-to-reduce-search/54647 "2016-07-05T10:33:58Z")
Hi, ES 2.3.0 When starting Timelion ES throws the following error: \[2016-07-04 14:10:26,915\]\[DEBUG\]\[action.search \] \[Hector\] failed to reduce search Failed to execute phase \[fetch\], \[reduce\] at org.ela… --- ## [Importing Existing Beat Dashboards in offline server](https://discuss.elastic.co/t/importing-existing-beat-dashboards-in-offline-server/69075)
**Author:** [@Ravikumar\_G](https://discuss.elastic.co/u/Ravikumar_G)\ **Replies:** 2\ **Last updated:** [December 14, 2016, 8:11pm UTC](https://discuss.elastic.co/t/importing-existing-beat-dashboards-in-offline-server/69075 "2016-12-14T20:11:46Z")
Hi I'm trying to install Metric dashboard its my first time trying this Downloaded .zip beats tried still by defaults its taking to https://artifacts.elastic.co/downloads/beats/beats-dashboards/beats-dashboards-5.1.1… --- ## [Social Network Analysis using Graph](https://discuss.elastic.co/t/social-network-analysis-using-graph/47334)
**Author:** [@jenoldyoung](https://discuss.elastic.co/u/jenoldyoung)\ **Replies:** 2\ **Last updated:** [April 14, 2016, 8:00am UTC](https://discuss.elastic.co/t/social-network-analysis-using-graph/47334 "2016-04-14T08:00:14Z")
Hey, Something I'd be super interested in is doing social network analysis using Graph. Currently, it seams more geared for doing link analysis (if that). I'd want to be able to do the kinds of metrics like centrality … --- ## [Endpoint security configuration](https://discuss.elastic.co/t/endpoint-security-configuration/315486)
**Author:** [@ttyser](https://discuss.elastic.co/u/ttyser)\ **Replies:** 7\ **Last updated:** [October 3, 2022, 9:13am UTC](https://discuss.elastic.co/t/endpoint-security-configuration/315486 "2022-10-03T09:13:38Z")
Hello all, I have an agent deployed via fleet on red hat server and I want to use the endpoint security there. I did add the endpoint security integration under the policy the red hat agent is bound to. Now it seems like… --- ## [How to insert json data into elasticsearch](https://discuss.elastic.co/t/how-to-insert-json-data-into-elasticsearch/271921)
**Author:** [@pyeonzzang123](https://discuss.elastic.co/u/pyeonzzang123)\ **Replies:** 1\ **Last updated:** [May 3, 2021, 1:34am UTC](https://discuss.elastic.co/t/how-to-insert-json-data-into-elasticsearch/271921 "2021-05-03T01:34:23Z")
I want to write the same c# code as the Python code below. But there was an error. I don’t' know the reason. python ''' import json import time from elasticsearch import Elasticsearch from elasticsearch.helpers imp… --- ## [Filebeat multiline question](https://discuss.elastic.co/t/filebeat-multiline-question/46455)
**Author:** [@mregmi](https://discuss.elastic.co/u/mregmi)\ **Replies:** 6\ **Last updated:** [April 11, 2016, 3:31am UTC](https://discuss.elastic.co/t/filebeat-multiline-question/46455 "2016-04-11T03:31:54Z")
My application maintains its state by persisting some info on a file within an interval of time. This file is not more than 10 lines at a time. The format of the data that's inside the file would be something like th… --- ## [Visualize metrics as a column using Metric Visualization](https://discuss.elastic.co/t/visualize-metrics-as-a-column-using-metric-visualization/172536)
**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\ **Replies:** 4\ **Last updated:** [March 17, 2019, 10:41am UTC](https://discuss.elastic.co/t/visualize-metrics-as-a-column-using-metric-visualization/172536 "2019-03-17T10:41:42Z")
Hi there! My question is simple: is there any way to visualize some data similar to how I do using Metric Visualization but as a column rather than a row? I have a field "accidents" and a field "city". I'd like to have… --- ## [Bulk item error](https://discuss.elastic.co/t/bulk-item-error/154052)
**Author:** [@Abhijith\_Vijayan](https://discuss.elastic.co/u/Abhijith_Vijayan)\ **Replies:** 4\ **Last updated:** [October 26, 2018, 5:38am UTC](https://discuss.elastic.co/t/bulk-item-error/154052 "2018-10-26T05:38:04Z")
I am getting the following error very frequently. \[2018-10-25T23:29:53,133\]\[DEBUG\]\[o.e.a.b.TransportShardBulkAction\] \[pm-2018.10.25\]\[0\] failed to execute bulk item (index) BulkShardRequest \[\[pm-2018.10.25\]\[0\]\] containin… --- ## [How to find kibana's full id?](https://discuss.elastic.co/t/how-to-find-kibanas-full-id/131610)
**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\ **Replies:** 4\ **Last updated:** [May 14, 2018, 11:41am UTC](https://discuss.elastic.co/t/how-to-find-kibanas-full-id/131610 "2018-05-14T11:41:25Z")
When I do \_cat/indices I see index id like this: QWsT5b6YR92v-1UIxJHJrw. When I open a saved object in the same kibana index, I see different id: e5234d00-123b-11e8-ac70-55d54df89f62 Why the id's aren't the same? If … --- ## [ArgumentError: short\_message is missing. Options version, short\_message and host must be set](https://discuss.elastic.co/t/argumenterror-short-message-is-missing-options-version-short-message-and-host-must-be-set/59033)
**Author:** [@bujar\_metaj](https://discuss.elastic.co/u/bujar_metaj)\ **Replies:** 2\ **Last updated:** [November 28, 2016, 10:22am UTC](https://discuss.elastic.co/t/argumenterror-short-message-is-missing-options-version-short-message-and-host-must-be-set/59033 "2016-11-28T10:22:32Z")
Hi, I need help with this issue my config is as follows input { beats { port =\> 5044 ssl =\> true ssl\_certificate =\> "/etc/pki/tls/certs/logstash-forwarder.crt" ssl\_key =\> "/etc/pki/tls/private/logs… --- ## [Watcher - simulate shows it should fire, but it isn't](https://discuss.elastic.co/t/watcher-simulate-shows-it-should-fire-but-it-isnt/202808)
**Author:** [@Stuart\_Moore](https://discuss.elastic.co/u/Stuart_Moore)\ **Replies:** 3\ **Last updated:** [October 10, 2019, 11:35am UTC](https://discuss.elastic.co/t/watcher-simulate-shows-it-should-fire-but-it-isnt/202808 "2019-10-10T11:35:30Z")
I am trying to write a watcher. I've tested the search expression on the console, and it appears to work. When I use "Simulate" within Kibana, it says that the trigger should fire. However, it isn't firing - the UI shows… --- ## [How to stem, remove stop words from my index data?](https://discuss.elastic.co/t/how-to-stem-remove-stop-words-from-my-index-data/184501)
**Author:** [@princesahu04](https://discuss.elastic.co/u/princesahu04)\ **Replies:** 3\ **Last updated:** [June 6, 2019, 8:12am UTC](https://discuss.elastic.co/t/how-to-stem-remove-stop-words-from-my-index-data/184501 "2019-06-06T08:12:13Z")
I want to stem, remove stop words from my index data (\_doc/1). My analyzer, mapping is: \> PUT my\_index { "settings": { "index":{ "analysis":{ "filter":{ "synonym":{ "type":"s… --- ## [Filebeat: Reading Prospector Config from Directory](https://discuss.elastic.co/t/filebeat-reading-prospector-config-from-directory/37752)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 3\ **Last updated:** [December 23, 2015, 3:50pm UTC](https://discuss.elastic.co/t/filebeat-reading-prospector-config-from-directory/37752 "2015-12-23T15:50:49Z")
Hi, I have been reading some test logs successfully with filebeat. However, when I move the prospector config out into an external directory it fails. Fielbeat sees the directory and the file: 2015-12-22T11:48:11Z INFO… --- ## [Mapping a field that contains hexadecimal number?](https://discuss.elastic.co/t/mapping-a-field-that-contains-hexadecimal-number/101212)
**Author:** [@avidane](https://discuss.elastic.co/u/avidane)\ **Replies:** 1\ **Last updated:** [September 20, 2017, 5:30pm UTC](https://discuss.elastic.co/t/mapping-a-field-that-contains-hexadecimal-number/101212 "2017-09-20T17:30:05Z")
I have a document that looks like the following: "\_index": "bla", "\_type": "blu", "\_source": { "id": "0x090256c0" } The 'id' field is an integer in hexadecimal format. If I try to use the following mapping for it: … --- ## [ERROR - Kibana Canvas email Reporting via Watcher](https://discuss.elastic.co/t/error-kibana-canvas-email-reporting-via-watcher/281234)
**Author:** [@keshara](https://discuss.elastic.co/u/keshara)\ **Replies:** 0\ **Last updated:** [August 12, 2021, 5:18pm UTC](https://discuss.elastic.co/t/error-kibana-canvas-email-reporting-via-watcher/281234 "2021-08-12T17:18:30Z")
Hi, My use case is to automate email report via Watcher from a kibana Canvas report. ELK Stack =\> 7.14.0 I have already build a Canvas report. And from this same Canvas report I copied automatically generated Watcher … --- ## [Metricbeat Error : instance/beat.go:971 Exiting: missing field accessing 'metricbeat.modules.0.hosts.0' (source:'metricbeat.yml'](https://discuss.elastic.co/t/metricbeat-error-instance-beat-go-971-exiting-missing-field-accessing-metricbeat-modules-0-hosts-0-source-metricbeat-yml/266520)
**Author:** [@vbharath2007](https://discuss.elastic.co/u/vbharath2007)\ **Replies:** 0\ **Last updated:** [March 8, 2021, 8:27am UTC](https://discuss.elastic.co/t/metricbeat-error-instance-beat-go-971-exiting-missing-field-accessing-metricbeat-modules-0-hosts-0-source-metricbeat-yml/266520 "2021-03-08T08:27:11Z")
Hi, I'm trying to deploy metric beat in our environment using helm charts 7.11.2, but the pods are crashing due to below error. Please help me to fix this issue... 2021-03-08T08:09:50.607Z INFO instance/beat.go:304 Se… --- ## [Elastic agents are not sending data to fleet server](https://discuss.elastic.co/t/elastic-agents-are-not-sending-data-to-fleet-server/315599)
**Author:** [@Leonardo\_Henrique](https://discuss.elastic.co/u/Leonardo_Henrique)\ **Replies:** 3\ **Last updated:** [October 14, 2022, 4:37am UTC](https://discuss.elastic.co/t/elastic-agents-are-not-sending-data-to-fleet-server/315599 "2022-10-14T04:37:59Z")
Hello everyone! I set up a Fleet Server in CentOS with the command sudo ./elastic-agent install \\ --fleet-server-es=http://\:9200 \\ --fleet-server-service-token=\ \\ --fleet-server-policy=\ **Author:** [@Dennis1](https://discuss.elastic.co/u/Dennis1)\ **Replies:** 5\ **Last updated:** [August 24, 2020, 7:40pm UTC](https://discuss.elastic.co/t/your-query-is-taking-a-while-notification-prompted-too-early-on-dashboard-load/246136 "2020-08-24T19:40:04Z") Hello, Whenever my dashboard has to reload, a little pop-up notification appears after about 5 seconds in the lower-right of the screen that informs me, "Your query is taking a while," and asks if I want to "Run beyond … --- ## [Not Able to Create Geopoint data](https://discuss.elastic.co/t/not-able-to-create-geopoint-data/89597)
**Author:** [@wlin](https://discuss.elastic.co/u/wlin)\ **Replies:** 5\ **Last updated:** [June 21, 2017, 8:26pm UTC](https://discuss.elastic.co/t/not-able-to-create-geopoint-data/89597 "2017-06-21T20:26:25Z")
Hi I'm trying to make some map based on some ip address which are private, so I cannot use geoip filter here. Currently I'm implementing some naive method to assign the (lat, lon) coordinates using some if else condition… --- ## [How can I limit bucket to n results for averaging?](https://discuss.elastic.co/t/how-can-i-limit-bucket-to-n-results-for-averaging/29432)
**Author:** [@samthurston](https://discuss.elastic.co/u/samthurston)\ **Replies:** 5\ **Last updated:** [September 21, 2015, 6:04pm UTC](https://discuss.elastic.co/t/how-can-i-limit-bucket-to-n-results-for-averaging/29432 "2015-09-21T18:04:25Z")
In the guide I saw an example: GET /cars/transactions/\_search?search\_type=count { "query":{ "match": { "make": "ford" } }, "aggs":{ "recent\_sales": { "filter": { … --- ## [Index audit output](https://discuss.elastic.co/t/index-audit-output/68896)
**Author:** [@terje](https://discuss.elastic.co/u/terje)\ **Replies:** 2\ **Last updated:** [December 16, 2016, 9:49am UTC](https://discuss.elastic.co/t/index-audit-output/68896 "2016-12-16T09:49:44Z")
I'm trying to start elasticsearch with the index audit logging enabled, but the x-pack plugin are not able to write the events to the cluster. In the logs I only get a lot of these messages: failed to index audit event… --- ## [Field statistics - sampling](https://discuss.elastic.co/t/field-statistics-sampling/27343)
**Author:** [@secsubs](https://discuss.elastic.co/u/secsubs)\ **Replies:** 2\ **Last updated:** [August 14, 2015, 5:56pm UTC](https://discuss.elastic.co/t/field-statistics-sampling/27343 "2015-08-14T17:56:43Z")
Hi, As I understand, in Kibana4, the field statistics are done on the n records/documents that are returned to the browser (set under Advanced settings -\> sampleSize). If this is correct, then how does Kibana select n … --- ## [Including calculated value from condition script in output](https://discuss.elastic.co/t/including-calculated-value-from-condition-script-in-output/180046)
**Author:** [@mdrowl1](https://discuss.elastic.co/u/mdrowl1)\ **Replies:** 4\ **Last updated:** [May 14, 2019, 1:32pm UTC](https://discuss.elastic.co/t/including-calculated-value-from-condition-script-in-output/180046 "2019-05-14T13:32:53Z")
I have a watcher that looks for transactions with a specific status code in proxy traffic, and will alert if the percentage is above a threshold (eg if the number of 401 errors is above 5% of total, alert). I use chaine… --- ## [Adding optional match pattern to grok for syslog messages](https://discuss.elastic.co/t/adding-optional-match-pattern-to-grok-for-syslog-messages/144250)
**Author:** [@nodesocket](https://discuss.elastic.co/u/nodesocket)\ **Replies:** 4\ **Last updated:** [August 21, 2018, 11:25pm UTC](https://discuss.elastic.co/t/adding-optional-match-pattern-to-grok-for-syslog-messages/144250 "2018-08-21T23:25:16Z")
Currently I am using the following logstash configuration to match syslog messages in the form of: Message: Aug 10 01:09:56.071 (info) smtpd: \[178cea3e-9c3a-11e8-93fa-f3ebd9db2b94\] \[SMTP\] \[EHLO\] EHLO SEKO-SBS.sekonorth… --- ## [Nested Json fields](https://discuss.elastic.co/t/nested-json-fields/127669)
**Author:** [@chrigui94](https://discuss.elastic.co/u/chrigui94)\ **Replies:** 4\ **Last updated:** [April 12, 2018, 9:41am UTC](https://discuss.elastic.co/t/nested-json-fields/127669 "2018-04-12T09:41:27Z")
I have a json that looks like this \[Capture\] This is my problem: I need to get positions of gateways (antennaLongitude, antennaLatitude) as a geo\_point type and make a kibana map that contains the posititions of gatew… --- ## [Delete index from elasticsearch thru spark scala code](https://discuss.elastic.co/t/delete-index-from-elasticsearch-thru-spark-scala-code/90464)
**Author:** [@jobyjohny](https://discuss.elastic.co/u/jobyjohny)\ **Replies:** 1\ **Last updated:** [June 22, 2017, 7:10pm UTC](https://discuss.elastic.co/t/delete-index-from-elasticsearch-thru-spark-scala-code/90464 "2017-06-22T19:10:45Z")
I am creating a spark object which contains the stats of a table and writing into elasticsearch val cases\_count\_stats = spark.sql("select col2,count(\*) from table group by col2" cases\_count\_stats.saveToEs("abc/def") Ho… --- ## [ElasticSearch & Kibana для анализа кликов](https://discuss.elastic.co/t/elasticsearch-kibana/103856)
**Author:** [@vasina](https://discuss.elastic.co/u/vasina)\ **Replies:** 6\ **Last updated:** [October 13, 2017, 3:31pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana/103856 "2017-10-13T15:31:05Z")
Привет! Скажите пожалуйста, хорошая ли идея использовать стек ElasticSearch - Kibana для анализа потока кликов пользователей, их взаимодействия с продуктом? Есть ли тут какие-то ограничения по сравнению с базами данных … --- ## [How to Parse url.query into Different Fields?](https://discuss.elastic.co/t/how-to-parse-url-query-into-different-fields/200920)
**Author:** [@antonio84](https://discuss.elastic.co/u/antonio84)\ **Replies:** 3\ **Last updated:** [October 1, 2019, 2:36pm UTC](https://discuss.elastic.co/t/how-to-parse-url-query-into-different-fields/200920 "2019-10-01T14:36:16Z")
ELK 7.3 and Filebeat 7.3 I'm using the IIS module currently, and everything is parsing great. I would like to further parse the url.query section of this line, indicated in bold: 2019-09-24 17:14:04 10.202.225.10 GET … --- ## [How to drop event in logstash](https://discuss.elastic.co/t/how-to-drop-event-in-logstash/145854)
**Author:** [@ashok9177](https://discuss.elastic.co/u/ashok9177)\ **Replies:** 3\ **Last updated:** [August 24, 2018, 2:19pm UTC](https://discuss.elastic.co/t/how-to-drop-event-in-logstash/145854 "2018-08-24T14:19:22Z")
I want drop logfile mean shoudn't export to elasticsearch, like if any log message contains "monitoring" keyword i want to drop that event. can any anyone suggest me how to do that ? filter { if \[loglevel\] == "debug" … --- ## [mySql binlog](https://discuss.elastic.co/t/mysql-binlog/113415)
**Author:** [@evuori](https://discuss.elastic.co/u/evuori)\ **Replies:** 3\ **Last updated:** [January 3, 2018, 11:17pm UTC](https://discuss.elastic.co/t/mysql-binlog/113415 "2018-01-03T23:17:35Z")
Hey there, new here so I try to behave and keep this short Looking if it is possible to parse and ship mySql binlog with Filebeat? Im currently using solution built using python-mysql-replication module reading only I… --- ## [\[SOLVED\] Stuck on getting netflow data into logstash](https://discuss.elastic.co/t/solved-stuck-on-getting-netflow-data-into-logstash/52909)
**Author:** [@DRW](https://discuss.elastic.co/u/DRW)\ **Replies:** 3\ **Last updated:** [June 19, 2016, 8:14pm UTC](https://discuss.elastic.co/t/solved-stuck-on-getting-netflow-data-into-logstash/52909 "2016-06-19T20:14:14Z")
Hello, I've been playing with this for longer than I would care to admit(weeks). I am trying to setup up an nProbe/Netflow into ELK and have it in one or more docker containers. I have tried the existing projects, … --- ## [Remove "Add filter" inside an iframe](https://discuss.elastic.co/t/remove-add-filter-inside-an-iframe/127286)
**Author:** [@network](https://discuss.elastic.co/u/network)\ **Replies:** 1\ **Last updated:** [April 9, 2018, 2:19pm UTC](https://discuss.elastic.co/t/remove-add-filter-inside-an-iframe/127286 "2018-04-09T14:19:35Z")
Hi all, I want to add kibana graphics to a website. I use the option Share\>Embedded iframe but the "Add filter" option appears in the graphic displayed on the website. Is there any way to remove this option only in the… --- ## [Problem to connect filebeat to logstash (no route to host)](https://discuss.elastic.co/t/problem-to-connect-filebeat-to-logstash-no-route-to-host/106262)
**Author:** [@alexandre\_29](https://discuss.elastic.co/u/alexandre_29)\ **Replies:** 1\ **Last updated:** [November 3, 2017, 1:18am UTC](https://discuss.elastic.co/t/problem-to-connect-filebeat-to-logstash-no-route-to-host/106262 "2017-11-03T01:18:13Z")
Hello, At first, sorry for my english because, i'm french :slight\_smile: I follow a tutorial to install ELK at this adress : https://www.howtoforge.com/tutorial/how-to-install-elastic-stack-on-centos-7/ I just have t… --- ## [Is there a complete, working example of a filebeats config on kubernetes?](https://discuss.elastic.co/t/is-there-a-complete-working-example-of-a-filebeats-config-on-kubernetes/187813)
**Author:** [@Rainer\_Alfoldi](https://discuss.elastic.co/u/Rainer_Alfoldi)\ **Replies:** 5\ **Last updated:** [June 29, 2019, 6:57pm UTC](https://discuss.elastic.co/t/is-there-a-complete-working-example-of-a-filebeats-config-on-kubernetes/187813 "2019-06-29T18:57:16Z")
Hi all, is there a complete(!) working example of a filebeat configuration on kubernetes where I only want the logs of a specific set of containers. Just dumping everything to es is trivial, but not what I want or need. … --- ## [Two of the twelve nodes not joining the cluster](https://discuss.elastic.co/t/two-of-the-twelve-nodes-not-joining-the-cluster/63398)
**Author:** [@Denny](https://discuss.elastic.co/u/Denny)\ **Replies:** 5\ **Last updated:** [October 20, 2016, 8:51am UTC](https://discuss.elastic.co/t/two-of-the-twelve-nodes-not-joining-the-cluster/63398 "2016-10-20T08:51:58Z")
Hello, I have setup a cluster of twelve nodes (node 2 is master, others are data nodes) but two nodes are missing. I've googled a lot before coming here but I cannot find the fix I need. The content of elasticsearch.ym… --- ## [How to delete data complete?](https://discuss.elastic.co/t/how-to-delete-data-complete/50123)
**Author:** [@stefansaye](https://discuss.elastic.co/u/stefansaye)\ **Replies:** 3\ **Last updated:** [May 17, 2016, 5:55am UTC](https://discuss.elastic.co/t/how-to-delete-data-complete/50123 "2016-05-17T05:55:29Z")
hi all, i have using curl -XDELETE to delete indices and delete (logstash-log-\*) index from kibana , but when i create the index (logstash-log-) again , why the old field for the index (logstash-log-) is still exis… --- ## [Removing agent.\* metadata doesn't work in Filebet nor Logstash](https://discuss.elastic.co/t/removing-agent-metadata-doesnt-work-in-filebet-nor-logstash/222314)
**Author:** [@ehsank777](https://discuss.elastic.co/u/ehsank777)\ **Replies:** 4\ **Last updated:** [March 9, 2020, 2:27pm UTC](https://discuss.elastic.co/t/removing-agent-metadata-doesnt-work-in-filebet-nor-logstash/222314 "2020-03-09T14:27:31Z")
Hi, I have Elasticsearch and Logstash version 7.5.0 installed in an ELK stack. So far I was using filebeat version 6.8.0 on my machines. Today I upgraded some of them to version 7.6.0 and after that I see the following … --- ## [Problem running my first benchmark with esrally - rally.launcher cannot start node](https://discuss.elastic.co/t/problem-running-my-first-benchmark-with-esrally-rally-launcher-cannot-start-node/61942)
**Author:** [@uncas](https://discuss.elastic.co/u/uncas)\ **Replies:** 4\ **Last updated:** [October 5, 2016, 6:40am UTC](https://discuss.elastic.co/t/problem-running-my-first-benchmark-with-esrally-rally-launcher-cannot-start-node/61942 "2016-10-05T06:40:00Z")
Hi. I am new to ES and Rally. I'm trying to educate myself on benchmarking ES with Rally. I'm following documentation on running a benchmark with rally. Here is how I run the esrally command. \[elasticsearch@fedoravm… --- ## [Mac hostname showing as 'localhost'](https://discuss.elastic.co/t/mac-hostname-showing-as-localhost/48878)
**Author:** [@DPattee](https://discuss.elastic.co/u/DPattee)\ **Replies:** 4\ **Last updated:** [May 5, 2016, 3:57am UTC](https://discuss.elastic.co/t/mac-hostname-showing-as-localhost/48878 "2016-05-05T03:57:14Z")
Two Mac OS X machines set up to report statistics via TopBeat 1.2.1 (amd64). One of those machines is the one that Elastic runs on. Same topbeat config file on both machines. The elastic search: hosts: line is set to … --- ## [Is logstash distributed real time computing system?](https://discuss.elastic.co/t/is-logstash-distributed-real-time-computing-system/55180)
**Author:** [@sen](https://discuss.elastic.co/u/sen)\ **Replies:** 6\ **Last updated:** [July 11, 2016, 2:50pm UTC](https://discuss.elastic.co/t/is-logstash-distributed-real-time-computing-system/55180 "2016-07-11T14:50:15Z")
Hi folks, The elastic website says that logstash can: Centralize data processing of all types Normalize varying schema and formats Quickly extend to custom log formats Easily add plugins for custom data sources … --- ## [Updating index gives number of documents in the index cannot exceed 2147483519](https://discuss.elastic.co/t/updating-index-gives-number-of-documents-in-the-index-cannot-exceed-2147483519/273547)
**Author:** [@NLSVTN](https://discuss.elastic.co/u/NLSVTN)\ **Replies:** 7\ **Last updated:** [May 21, 2021, 4:31pm UTC](https://discuss.elastic.co/t/updating-index-gives-number-of-documents-in-the-index-cannot-exceed-2147483519/273547 "2021-05-21T16:31:28Z")
We are trying to write 42522080 documents into Elasticsearch in python using Hail: mt = hl.import\_vcf(dataset\_path, reference\_genome='GRCh' + genome\_version, force\_bgz=True, min\_partitions=500) mt = hl.split\_mul… --- ## [Index Pattern is limited to 100](https://discuss.elastic.co/t/index-pattern-is-limited-to-100/133463)
**Author:** [@Hanny](https://discuss.elastic.co/u/Hanny)\ **Replies:** 1\ **Last updated:** [May 28, 2018, 9:03am UTC](https://discuss.elastic.co/t/index-pattern-is-limited-to-100/133463 "2018-05-28T09:03:20Z")
Hey, I found out that Kibana doesn't display over 100 indices. I couldn't find how to change the settings or how to delete old indices automatically (by date). Kibana version 6.2.1 Go to Managment \> Index Patterns \> … --- ## [Logstash json to multiple documents](https://discuss.elastic.co/t/logstash-json-to-multiple-documents/207007)
**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\ **Replies:** 8\ **Last updated:** [November 9, 2019, 2:18pm UTC](https://discuss.elastic.co/t/logstash-json-to-multiple-documents/207007 "2019-11-09T14:18:49Z")
I have an input in the below format: \\\1\\this is first event\\\\2\\this is second event\\\\3\\this is third event\>\\\\4\\<… --- ## [Cant roll over index via index template?](https://discuss.elastic.co/t/cant-roll-over-index-via-index-template/164264)
**Author:** [@bmatoki](https://discuss.elastic.co/u/bmatoki)\ **Replies:** 8\ **Last updated:** [January 20, 2019, 2:50pm UTC](https://discuss.elastic.co/t/cant-roll-over-index-via-index-template/164264 "2019-01-20T14:50:39Z")
Hey all. im trying to set roll over in my index template. my logstash using index template this is my index template \> \> { \> "template" : "logstash-\*", \> "version" : 60001, \> "settings" : { \> "index.refre… --- ## [6.1.2 performs existing ruby filter extremly SLOWER than 5.2.0. Need help!](https://discuss.elastic.co/t/6-1-2-performs-existing-ruby-filter-extremly-slower-than-5-2-0-need-help/119121)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 8\ **Last updated:** [March 8, 2018, 3:23pm UTC](https://discuss.elastic.co/t/6-1-2-performs-existing-ruby-filter-extremly-slower-than-5-2-0-need-help/119121 "2018-03-08T15:23:23Z")
Hi all, Last time I wanted to migrate from 5.1.2 to 6.1.0 I had an extremeperformance drop on production - so I needed to rollback. Currently I am analyzing the issues, trying to build some rally tracks to check where … --- ## [Logstash capture error message](https://discuss.elastic.co/t/logstash-capture-error-message/38966)
**Author:** [@chicco\_95](https://discuss.elastic.co/u/chicco_95)\ **Replies:** 8\ **Last updated:** [January 15, 2016, 8:46am UTC](https://discuss.elastic.co/t/logstash-capture-error-message/38966 "2016-01-15T08:46:14Z")
Hi all, I'm trying to capture the error message that is generated for a \_dateparsefailure. an example of message is this: Failed parsing date from field {:field=\>"Data/Ora Chiusura TT", :value=\>"07/10/2015 11.04.12… [Previous page](https://discuss.elastic.co/top.md?page=757&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=759&per_page=50&period=all)