# Top

**URL:** https://discuss.elastic.co/top.md?page=778&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 779

---

## [Possibility to constrain certain field(s) as mandatory field(s)](https://discuss.elastic.co/t/possibility-to-constrain-certain-field-s-as-mandatory-field-s/11975)

<div class="topic-metadata">

**Author:** [@AshutoshB](https://discuss.elastic.co/u/AshutoshB)\
**Replies:** 3\
**Last updated:** [May 16, 2013, 5:04am UTC](https://discuss.elastic.co/t/possibility-to-constrain-certain-field-s-as-mandatory-field-s/11975 "2013-05-16T05:04:32Z")

</div>

Hi All, We are using elastic-search for our project. We would like to implement a feature in our project using elastic search. We want to make sure that all the saved documents in our project must contain certain…

---

## [Transport.go 125 SSL client failed to connect with dial tcp \<IP:Address of ELK\>5044 getsockopt connection refused](https://discuss.elastic.co/t/transport-go-125-ssl-client-failed-to-connect-with-dial-tcp-ip-address-of-elk-5044-getsockopt-connection-refused/145706)

<div class="topic-metadata">

**Author:** [@murthy.mvvs](https://discuss.elastic.co/u/murthy.mvvs)\
**Replies:** 7\
**Last updated:** [September 12, 2018, 12:14pm UTC](https://discuss.elastic.co/t/transport-go-125-ssl-client-failed-to-connect-with-dial-tcp-ip-address-of-elk-5044-getsockopt-connection-refused/145706 "2018-09-12T12:14:43Z")

</div>

Hi Team, The filebeat seems to be running, but giving the following error. transport.go:125: SSL client failed to connect with: dial tcp \<IP address where elastic search, logstash and kibana are hosted\>: getsockopt: co…

---

## [Geo\_point error in visualization](https://discuss.elastic.co/t/geo-point-error-in-visualization/119352)

<div class="topic-metadata">

**Author:** [@ggajanan](https://discuss.elastic.co/u/ggajanan)\
**Replies:** 7\
**Last updated:** [February 13, 2018, 1:32pm UTC](https://discuss.elastic.co/t/geo-point-error-in-visualization/119352 "2018-02-13T13:32:18Z")

</div>

Hi, Using ELK stack 6.2.0 For weblogs getting - Index pattern does not contain any of the following field types: geo\_point error in Kibana while creating the Visualize -\> Map -\> Coordinate Map \[image\] This is how l…

---

## [Winlogbeat running on Windows Event Collector - logs use the collector name instead of log sources](https://discuss.elastic.co/t/winlogbeat-running-on-windows-event-collector-logs-use-the-collector-name-instead-of-log-sources/111806)

<div class="topic-metadata">

**Author:** [@mike.harlan](https://discuss.elastic.co/u/mike.harlan)\
**Replies:** 7\
**Last updated:** [December 18, 2017, 2:56pm UTC](https://discuss.elastic.co/t/winlogbeat-running-on-windows-event-collector-logs-use-the-collector-name-instead-of-log-sources/111806 "2017-12-18T14:56:12Z")

</div>

I've been searching for a little bit without luck so hopefully I'm not duplicating: I'm running Windows Event Forwarding =\> Windows Event Collector to collect logs from endpoints, while viewing the logs in Kibana - the …

---

## [Value of "elastic" is forbidden in Kibana 8.2](https://discuss.elastic.co/t/value-of-elastic-is-forbidden-in-kibana-8-2/305501)

<div class="topic-metadata">

**Author:** [@borisr84](https://discuss.elastic.co/u/borisr84)\
**Replies:** 0\
**Last updated:** [May 24, 2022, 12:04pm UTC](https://discuss.elastic.co/t/value-of-elastic-is-forbidden-in-kibana-8-2/305501 "2022-05-24T12:04:18Z")

</div>

Hi, after upgrading to ELK 8.2, I started getting some errors, some of which I was able to resolve for now, however the last error that keeps me stuck is the error of using "elastic" user. I'm getting the following erro…

---

## [ElasticSearch 2.x : more\_like\_this query and nested objects](https://discuss.elastic.co/t/elasticsearch-2-x-more-like-this-query-and-nested-objects/53322)

<div class="topic-metadata">

**Author:** [@anizon](https://discuss.elastic.co/u/anizon)\
**Replies:** 3\
**Last updated:** [September 7, 2016, 12:50pm UTC](https://discuss.elastic.co/t/elasticsearch-2-x-more-like-this-query-and-nested-objects/53322 "2016-09-07T12:50:27Z")

</div>

I just discovered the "more\_like\_this" query type and tried to used it with my nested objects. Unfortunatelly, it seems this query is not able to search inside nested objects. Here is my mapping : { "Presentation":{…

---

## [Logstash ruby convert seconds to milliseconds](https://discuss.elastic.co/t/logstash-ruby-convert-seconds-to-milliseconds/101508)

<div class="topic-metadata">

**Author:** [@ktella](https://discuss.elastic.co/u/ktella)\
**Replies:** 2\
**Last updated:** [September 27, 2017, 7:05pm UTC](https://discuss.elastic.co/t/logstash-ruby-convert-seconds-to-milliseconds/101508 "2017-09-27T19:05:24Z")

</div>

I'm trying to convert responsetime from nginx access logs which is in seconds to milliseconds using ruby. I was able to successfully GROK the access log. grok { match =\> { "message" =\> "%{IPV4:clientip} - - \[%{HTTPDAT…

---

## [How to create a watcher alert if a specific service goes down on a system which is monitored using metricbeat agent?](https://discuss.elastic.co/t/how-to-create-a-watcher-alert-if-a-specific-service-goes-down-on-a-system-which-is-monitored-using-metricbeat-agent/278464)

<div class="topic-metadata">

**Author:** [@Patr123](https://discuss.elastic.co/u/Patr123)\
**Replies:** 4\
**Last updated:** [July 15, 2021, 2:34pm UTC](https://discuss.elastic.co/t/how-to-create-a-watcher-alert-if-a-specific-service-goes-down-on-a-system-which-is-monitored-using-metricbeat-agent/278464 "2021-07-15T14:34:31Z")

</div>

I have few systems on which I have metricbeat v7.12.1 installed. How can I configure the watcher alert to send me an email if the service called testservice.exe goes down on server A?

---

## [Delete indices curator 4.2](https://discuss.elastic.co/t/delete-indices-curator-4-2/66701)

<div class="topic-metadata">

**Author:** [@dmitry1980](https://discuss.elastic.co/u/dmitry1980)\
**Replies:** 4\
**Last updated:** [November 23, 2016, 8:18am UTC](https://discuss.elastic.co/t/delete-indices-curator-4-2/66701 "2016-11-23T08:18:13Z")

</div>

1) I install curator 4.2 on ELK server (kibana 4.6, elasticsearch 2.4, logstash 2.4) When run command curator\_cli delete\_snapshots --repository my\_backup --filter\_list '\[{"filtertype":"age","source":"name","direction":…

---

## [Parsing mySql slow query logs using Logstash](https://discuss.elastic.co/t/parsing-mysql-slow-query-logs-using-logstash/275518)

<div class="topic-metadata">

**Author:** [@learningelk](https://discuss.elastic.co/u/learningelk)\
**Replies:** 6\
**Last updated:** [June 13, 2021, 5:07pm UTC](https://discuss.elastic.co/t/parsing-mysql-slow-query-logs-using-logstash/275518 "2021-06-13T17:07:10Z")

</div>

I want to parse the mysql slow query logs using logstash and I want to replace modifieddate \> '2021-06-08 08:13:48' with some generix text like modifieddate \> 'NNNN' Below is the log sample : # Time: 2021-06-10T06:30:…

---

## [How to delete an index from logstash output](https://discuss.elastic.co/t/how-to-delete-an-index-from-logstash-output/121017)

<div class="topic-metadata">

**Author:** [@Efrain\_Gonzalez](https://discuss.elastic.co/u/Efrain_Gonzalez)\
**Replies:** 6\
**Last updated:** [February 22, 2018, 11:01am UTC](https://discuss.elastic.co/t/how-to-delete-an-index-from-logstash-output/121017 "2018-02-22T11:01:49Z")

</div>

Hi, From logstash, if there is a specific event, I need to delete all documents in an index or delete the entire index (both options works for me, so the more efficient the better) I don't find a way to do that, some c…

---

## [AD Parsing](https://discuss.elastic.co/t/ad-parsing/98176)

<div class="topic-metadata">

**Author:** [@rajath](https://discuss.elastic.co/u/rajath)\
**Replies:** 6\
**Last updated:** [September 21, 2017, 9:00am UTC](https://discuss.elastic.co/t/ad-parsing/98176 "2017-09-21T09:00:16Z")

</div>

We are trying to parse Checkpoint logs but as there are multiple types of log formats. Depending on the blades we are running on Checkpoint the key value changes. if anyone has a conf file for checkpoint please share.

---

## [Is it possible to have dynamic attachment fields in slack action?](https://discuss.elastic.co/t/is-it-possible-to-have-dynamic-attachment-fields-in-slack-action/64169)

<div class="topic-metadata">

**Author:** [@anon12945697](https://discuss.elastic.co/u/anon12945697)\
**Replies:** 6\
**Last updated:** [November 2, 2016, 2:58pm UTC](https://discuss.elastic.co/t/is-it-possible-to-have-dynamic-attachment-fields-in-slack-action/64169 "2016-11-02T14:58:58Z")

</div>

Hi there, Thanks for elasticsearch and watcher, my devops job goes better. When I was looking at slack action of Watcher, I started to wondering if there was a way to make dynamic attachment fields. Dynamic attachments a…

---

## [Failed to obtain node locks, tried \[/usr/share/elasticsearch/data\]](https://discuss.elastic.co/t/failed-to-obtain-node-locks-tried-usr-share-elasticsearch-data/346558)

<div class="topic-metadata">

**Author:** [@arpitsharma-vw](https://discuss.elastic.co/u/arpitsharma-vw)\
**Replies:** 1\
**Last updated:** [November 15, 2023, 6:45am UTC](https://discuss.elastic.co/t/failed-to-obtain-node-locks-tried-usr-share-elasticsearch-data/346558 "2023-11-15T06:45:49Z")

</div>

Hello Team, I have installed ECK Operator(v2.9.0) on openshift(v 4.13.18). Installation of the operator is successful. If I am creating elasticsearch cluster via an operator, pods are getting crashed with following erro…

---

## [Exception while retrieving instance list from AWS API: Unable to execute HTTP request: us-west-2](https://discuss.elastic.co/t/exception-while-retrieving-instance-list-from-aws-api-unable-to-execute-http-request-us-west-2/116772)

<div class="topic-metadata">

**Author:** [@klahnakoski](https://discuss.elastic.co/u/klahnakoski)\
**Replies:** 3\
**Last updated:** [January 24, 2018, 2:39pm UTC](https://discuss.elastic.co/t/exception-while-retrieving-instance-list-from-aws-api-unable-to-execute-http-request-us-west-2/116772 "2018-01-24T14:39:31Z")

</div>

I hope someone can help point out where I got my config file wrong. Thank you! I am using ESv6.1.2 Here is part of my config file: discovery: ec2: endpoint: us-west-2 protocol: https discovery.ze…

---

## [Stability of Elasitcsearch](https://discuss.elastic.co/t/stability-of-elasitcsearch/56017)

<div class="topic-metadata">

**Author:** [@wldbs0508](https://discuss.elastic.co/u/wldbs0508)\
**Replies:** 3\
**Last updated:** [July 21, 2016, 5:00am UTC](https://discuss.elastic.co/t/stability-of-elasitcsearch/56017 "2016-07-21T05:00:10Z")

</div>

Hi, I'm doing project related to Elasticsearch (ES), Kibana and Logstash. I would like to setup log data visualizing system using them. My data is log data and it from other system so I need to save original log data i…

---

## [Push data from Jaeger to Elastic APM](https://discuss.elastic.co/t/push-data-from-jaeger-to-elastic-apm/168305)

<div class="topic-metadata">

**Author:** [@trondhindenes](https://discuss.elastic.co/u/trondhindenes)\
**Replies:** 5\
**Last updated:** [February 22, 2019, 9:40am UTC](https://discuss.elastic.co/t/push-data-from-jaeger-to-elastic-apm/168305 "2019-02-22T09:40:35Z")

</div>

We already have a fully working Jaeger infra setup. Is there (or is there planned) any simple way of simply pushing that data into Elastic APM straight from the Jaeger collector?

---

## [Elasticsearch shard corrupted](https://discuss.elastic.co/t/elasticsearch-shard-corrupted/79131)

<div class="topic-metadata">

**Author:** [@Selvam\_ayyanar](https://discuss.elastic.co/u/Selvam_ayyanar)\
**Replies:** 5\
**Last updated:** [March 29, 2017, 12:42pm UTC](https://discuss.elastic.co/t/elasticsearch-shard-corrupted/79131 "2017-03-29T12:42:13Z")

</div>

Hi All, We are getting below error on our clusters, the shard number 2 goes unassigned. \[2017-03-18 04:17:37,072\]\[WARN \]\[indices.cluster \] \[node-1\] \[index1\]\[2\] failed to start shard org.elasticsearch.index…

---

## [Recommended Merge Option](https://discuss.elastic.co/t/recommended-merge-option/2233)

<div class="topic-metadata">

**Author:** [@mosiddi](https://discuss.elastic.co/u/mosiddi)\
**Replies:** 5\
**Last updated:** [June 14, 2015, 2:28pm UTC](https://discuss.elastic.co/t/recommended-merge-option/2233 "2015-06-14T14:28:56Z")

</div>

Guys, In a system where u could expect a decent rate of update request, say 10% of overall documents getting updated daily, what is the merge setting for - Merge | Elasticsearch Guide \[8.11\] | Elastic index.merge.po…

---

## [Parsing hostname](https://discuss.elastic.co/t/parsing-hostname/57924)

<div class="topic-metadata">

**Author:** [@rth](https://discuss.elastic.co/u/rth)\
**Replies:** 1\
**Last updated:** [August 12, 2016, 1:27pm UTC](https://discuss.elastic.co/t/parsing-hostname/57924 "2016-08-12T13:27:45Z")

</div>

Hello, I parse the hostname of the syslog source event with the following grok: grok { match =\> \[ "message", "%{SYSLOGTIMESTAMP:timestamp} %{SYSLOGHOST:hostname} %{GREEDYDATA:mess}" \] } It works well for hostname …

---

## [Scroll et recherche "enregistrée"](https://discuss.elastic.co/t/scroll-et-recherche-enregistree/179530)

<div class="topic-metadata">

**Author:** [@rikemSen](https://discuss.elastic.co/u/rikemSen)\
**Replies:** 8\
**Last updated:** [May 4, 2019, 1:31pm UTC](https://discuss.elastic.co/t/scroll-et-recherche-enregistree/179530 "2019-05-04T13:31:31Z")

</div>

Bonjour, Je reprends ce qui a été dit précédemment dans l'autre topic (en anglais), ça me permettra sûrement d'être un peu plus clair :). Alors en fait, notre utilisateur disposera d'une interface dans laquelle il va p…

---

## [EdgeNGrams with Fuzzy not working perfect](https://discuss.elastic.co/t/edgengrams-with-fuzzy-not-working-perfect/80437)

<div class="topic-metadata">

**Author:** [@Grigorios\_Loukidis](https://discuss.elastic.co/u/Grigorios_Loukidis)\
**Replies:** 8\
**Last updated:** [March 30, 2017, 7:46am UTC](https://discuss.elastic.co/t/edgengrams-with-fuzzy-not-working-perfect/80437 "2017-03-30T07:46:16Z")

</div>

I am using elastic and I am cuurently satisfied with my searches relevance except of one ocassion.For example If I am searching for the world "play" I will get docs containing wold "plays" with higher score than these on…

---

## [How to do custom mapping using mongo connector with Elastic-search](https://discuss.elastic.co/t/how-to-do-custom-mapping-using-mongo-connector-with-elastic-search/31753)

<div class="topic-metadata">

**Author:** [@jayphate](https://discuss.elastic.co/u/jayphate)\
**Replies:** 0\
**Last updated:** [October 7, 2015, 7:58am UTC](https://discuss.elastic.co/t/how-to-do-custom-mapping-using-mongo-connector-with-elastic-search/31753 "2015-10-07T07:58:39Z")

</div>

I wanna connect mongodb and elasticsearch. I used mongo connector to connect them. I followed instruction from below link to setup==\> http://vi3k6i5.blogspot.in/2014/12/using-elastic-search-with-mongodb.html I am …

---

## [Stuck at loading page](https://discuss.elastic.co/t/stuck-at-loading-page/250393)

<div class="topic-metadata">

**Author:** [@obones](https://discuss.elastic.co/u/obones)\
**Replies:** 4\
**Last updated:** [September 30, 2020, 8:25pm UTC](https://discuss.elastic.co/t/stuck-at-loading-page/250393 "2020-09-30T20:25:29Z")

</div>

Hello, I have a running instance of ElasticSearch and Kibana and while they both appear to be started, the Kibana page never goes past the "Loading Elastic Kibana" text with the logo on top and the moving bar beneath. …

---

## [Alias with multiple filters](https://discuss.elastic.co/t/alias-with-multiple-filters/243095)

<div class="topic-metadata">

**Author:** [@Rom1](https://discuss.elastic.co/u/Rom1)\
**Replies:** 4\
**Last updated:** [August 12, 2020, 8:45am UTC](https://discuss.elastic.co/t/alias-with-multiple-filters/243095 "2020-08-12T08:45:29Z")

</div>

Hi guys, In order to filter data to be displayed in a drop down list of the control visualization in Kibana, I decided to create an alias on my index by filtering some data but I'm facing like an issue. Here is the pa…

---

## [How to parse json array to get object count](https://discuss.elastic.co/t/how-to-parse-json-array-to-get-object-count/170409)

<div class="topic-metadata">

**Author:** [@pcrai](https://discuss.elastic.co/u/pcrai)\
**Replies:** 4\
**Last updated:** [March 1, 2019, 11:21pm UTC](https://discuss.elastic.co/t/how-to-parse-json-array-to-get-object-count/170409 "2019-03-01T23:21:18Z")

</div>

I have given one json log file as input in logstash and getting corresponding mapping in kibana but I want to count element available in json array object. need help to get that.

---

## [Sharing resources (Data views and Dashboards) across Spaces](https://discuss.elastic.co/t/sharing-resources-data-views-and-dashboards-across-spaces/312933)

<div class="topic-metadata">

**Author:** [@yelloyonder](https://discuss.elastic.co/u/yelloyonder)\
**Replies:** 3\
**Last updated:** [September 29, 2022, 1:10pm UTC](https://discuss.elastic.co/t/sharing-resources-data-views-and-dashboards-across-spaces/312933 "2022-09-29T13:10:06Z")

</div>

Hi, I've been trying to setup Spaces in Kibana (Elastic cloud) for non-admin teams so they only see the Kibana resources they need e.g. Discover and Dashboards under Analytics and not Security. When moving to the new S…

---

## [Logstash missing events - monitoring ftp logs](https://discuss.elastic.co/t/logstash-missing-events-monitoring-ftp-logs/115362)

<div class="topic-metadata">

**Author:** [@premkumar\_narashiman](https://discuss.elastic.co/u/premkumar_narashiman)\
**Replies:** 3\
**Last updated:** [January 17, 2018, 11:31pm UTC](https://discuss.elastic.co/t/logstash-missing-events-monitoring-ftp-logs/115362 "2018-01-17T23:31:11Z")

</div>

I am an Newbie to ELK using to stash for processing ftp logs (vsftpd, sftp). I am facing missing event issue with Logstash version: 6.1.0, Test case: uploaded 15 files using ftp - only 7 lines logged in logstash-output…

---

## [Transport client error after installing x-pack on es-5-5-1](https://discuss.elastic.co/t/transport-client-error-after-installing-x-pack-on-es-5-5-1/97021)

<div class="topic-metadata">

**Author:** [@akshaymaniyar](https://discuss.elastic.co/u/akshaymaniyar)\
**Replies:** 3\
**Last updated:** [August 15, 2017, 8:39am UTC](https://discuss.elastic.co/t/transport-client-error-after-installing-x-pack-on-es-5-5-1/97021 "2017-08-15T08:39:14Z")

</div>

I have the following configs related to xpack: xpack.security.enabled: false xpack.monitoring.enabled: true xpack.ml.enabled: false xpack.graph.enabled: false xpack.watcher.enabled: false Also have the below: node…

---

## [Data Table and large fields](https://discuss.elastic.co/t/data-table-and-large-fields/84482)

<div class="topic-metadata">

**Author:** [@Tobymaro](https://discuss.elastic.co/u/Tobymaro)\
**Replies:** 3\
**Last updated:** [May 5, 2017, 9:25am UTC](https://discuss.elastic.co/t/data-table-and-large-fields/84482 "2017-05-05T09:25:27Z")

</div>

Hello, I have search logs that contains query to database. Sometimes this query can contain more than 300 words(and symbols). I tried to build data table visualization and everything looks ok, but all records with que…

---

## [Epoch time in milliseconds with decimal](https://discuss.elastic.co/t/epoch-time-in-milliseconds-with-decimal/52117)

<div class="topic-metadata">

**Author:** [@joeyd](https://discuss.elastic.co/u/joeyd)\
**Replies:** 3\
**Last updated:** [June 8, 2016, 8:16am UTC](https://discuss.elastic.co/t/epoch-time-in-milliseconds-with-decimal/52117 "2016-06-08T08:16:58Z")

</div>

Elasticsearch doesn't seem to recognize epoch time in milliseconds with a decimal (ex 1413680667.549). When importing the json logs with Logstash, the dynamic field created is "double". I've setup an index template forci…

---

## [Custom font canvas](https://discuss.elastic.co/t/custom-font-canvas/271265)

<div class="topic-metadata">

**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\
**Replies:** 6\
**Last updated:** [April 28, 2021, 4:02am UTC](https://discuss.elastic.co/t/custom-font-canvas/271265 "2021-04-28T04:02:07Z")

</div>

hi, how can I add custom font in Canvas? Thanks

---

## [My plugin will build and install, but kibana wont run](https://discuss.elastic.co/t/my-plugin-will-build-and-install-but-kibana-wont-run/214126)

<div class="topic-metadata">

**Author:** [@McKittrick\_Kaminski](https://discuss.elastic.co/u/McKittrick_Kaminski)\
**Replies:** 6\
**Last updated:** [January 15, 2020, 9:21pm UTC](https://discuss.elastic.co/t/my-plugin-will-build-and-install-but-kibana-wont-run/214126 "2020-01-15T21:21:16Z")

</div>

I'm developing a plugin with Kibana v7.5.1, and I have it in a state where I want to build the plugin and install it into a docker container, and recommit the container and save it to my private registry. All of these s…

---

## [How to remove old data without losing kibana dashboard?](https://discuss.elastic.co/t/how-to-remove-old-data-without-losing-kibana-dashboard/97676)

<div class="topic-metadata">

**Author:** [@elhamsadat](https://discuss.elastic.co/u/elhamsadat)\
**Replies:** 1\
**Last updated:** [August 20, 2017, 3:57pm UTC](https://discuss.elastic.co/t/how-to-remove-old-data-without-losing-kibana-dashboard/97676 "2017-08-20T15:57:42Z")

</div>

Hi my elasticsearch server have limit storage and i had to remove ot archive old data from it. I removed some old data in path var/data/elasticsearch/node0/ but after restart kibana i had losed all of my dashboards and …

---

## [Getting windows event log to elk server](https://discuss.elastic.co/t/getting-windows-event-log-to-elk-server/35661)

<div class="topic-metadata">

**Author:** [@ShraddhaBandhakavi](https://discuss.elastic.co/u/ShraddhaBandhakavi)\
**Replies:** 1\
**Last updated:** [November 26, 2015, 12:28pm UTC](https://discuss.elastic.co/t/getting-windows-event-log-to-elk-server/35661 "2015-11-26T12:28:53Z")

</div>

Hi All, I am new to ELK. I have setup of ELK on Linux server. I want to send windows event logs to elk server. i am using NXlog to collect windows logs But i was unable to collect events. please provide me basic s…

---

## [8.1.0 Java Client - SearchRequest example](https://discuss.elastic.co/t/8-1-0-java-client-searchrequest-example/299640)

<div class="topic-metadata">

**Author:** [@Valh](https://discuss.elastic.co/u/Valh)\
**Replies:** 2\
**Last updated:** [March 14, 2022, 6:08pm UTC](https://discuss.elastic.co/t/8-1-0-java-client-searchrequest-example/299640 "2022-03-14T18:08:40Z")

</div>

Hi, I'm struggling to understand how to do convert my code from the HLRC to the new Elasticsearch Java API Client. Could someone please give me an example? The documentation is very unclear on this subject. Fonctional …

---

## [Agent.hostname unique search](https://discuss.elastic.co/t/agent-hostname-unique-search/194245)

<div class="topic-metadata">

**Author:** [@jwwags92](https://discuss.elastic.co/u/jwwags92)\
**Replies:** 2\
**Last updated:** [August 9, 2019, 3:04pm UTC](https://discuss.elastic.co/t/agent-hostname-unique-search/194245 "2019-08-09T15:04:38Z")

</div>

Hi, I'm forwarding event logs for 75 servers to elasticsearch. I would like to be able to run a query that lets me check the past 24 hours for all the UNIQUE entries in the agent.hostnames field. It should come back wi…

---

## [No monitoring data found error. The .monitoring index is also not found](https://discuss.elastic.co/t/no-monitoring-data-found-error-the-monitoring-index-is-also-not-found/134072)

<div class="topic-metadata">

**Author:** [@vnallamothu](https://discuss.elastic.co/u/vnallamothu)\
**Replies:** 2\
**Last updated:** [May 31, 2018, 4:42pm UTC](https://discuss.elastic.co/t/no-monitoring-data-found-error-the-monitoring-index-is-also-not-found/134072 "2018-05-31T16:42:02Z")

</div>

I am seeing the error "No monitoring data found" since I've installed Kibana 6.2. Can anyone help me with this?

---

## [How to convert String to long in logstash](https://discuss.elastic.co/t/how-to-convert-string-to-long-in-logstash/116029)

<div class="topic-metadata">

**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\
**Replies:** 2\
**Last updated:** [January 29, 2018, 5:37am UTC](https://discuss.elastic.co/t/how-to-convert-string-to-long-in-logstash/116029 "2018-01-29T05:37:53Z")

</div>

Example from my log i am getting response time as String in ES i want to convert it to long mutate{ convert =\> {"respnseTime" =\> "long"} } it throws me an error

---

## [Short url is not working](https://discuss.elastic.co/t/short-url-is-not-working/229583)

<div class="topic-metadata">

**Author:** [@manojkrishna561994](https://discuss.elastic.co/u/manojkrishna561994)\
**Replies:** 5\
**Last updated:** [April 25, 2020, 7:20am UTC](https://discuss.elastic.co/t/short-url-is-not-working/229583 "2020-04-25T07:20:52Z")

</div>

I have installed ELK on my ubuntu VM with Nginx server following this guide Install ELK on Ubuntu. I have tried to get the shortended url from Dashboard\>share\>short url and when im trying to open it with that url it is …

---

## [Enabel/Disable Elastic Apm Agent in runtime](https://discuss.elastic.co/t/enabel-disable-elastic-apm-agent-in-runtime/312164)

<div class="topic-metadata">

**Author:** [@yahire](https://discuss.elastic.co/u/yahire)\
**Replies:** 4\
**Last updated:** [August 25, 2022, 5:59am UTC](https://discuss.elastic.co/t/enabel-disable-elastic-apm-agent-in-runtime/312164 "2022-08-25T05:59:32Z")

</div>

Kibana version: 8.2.3 Elasticsearch version: 8.2.3 APM Server version: 8.2.3 APM Agent language and version: Java Original install method : download page Fresh install or upgraded from other version? : Fresh Instal…

---

## [Retry Logstash connection to a DB after failed attempt](https://discuss.elastic.co/t/retry-logstash-connection-to-a-db-after-failed-attempt/266441)

<div class="topic-metadata">

**Author:** [@d.malacrida](https://discuss.elastic.co/u/d.malacrida)\
**Replies:** 4\
**Last updated:** [March 16, 2021, 4:30pm UTC](https://discuss.elastic.co/t/retry-logstash-connection-to-a-db-after-failed-attempt/266441 "2021-03-16T16:30:09Z")

</div>

Hello everyone, We have set up a Logstash connector to gather data from a DB every day at a fixed time (7 a.m.). Now, we have included the following parameters in the input.conf file (some parameters are masked for obvi…

---

## [Keep only last record of each type](https://discuss.elastic.co/t/keep-only-last-record-of-each-type/54866)

<div class="topic-metadata">

**Author:** [@yodog](https://discuss.elastic.co/u/yodog)\
**Replies:** 4\
**Last updated:** [July 8, 2016, 11:48am UTC](https://discuss.elastic.co/t/keep-only-last-record-of-each-type/54866 "2016-07-08T11:48:45Z")

</div>

Hello all. I have to keep 2 types of indices on elasticsearch: 1- full, regular index holding all records sent to it (logstash-YYYY.MM.DD) 2- small, fast index holding only the last log message of each kind (lastacti…

---

## [How to get hostname of "Elastic" server / "Cluster" name where the watcher is running?](https://discuss.elastic.co/t/how-to-get-hostname-of-elastic-server-cluster-name-where-the-watcher-is-running/247552)

<div class="topic-metadata">

**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\
**Replies:** 2\
**Last updated:** [September 16, 2020, 3:16pm UTC](https://discuss.elastic.co/t/how-to-get-hostname-of-elastic-server-cluster-name-where-the-watcher-is-running/247552 "2020-09-16T15:16:04Z")

</div>

hi we have a clustered environment. Is there a way to get where the "watcher" have run? We have putting a same set of watcher ,but needed to ensure only PROD watchers are alerted. Hence wanted to filter on a specific ke…

---

## [Using machine learning and TF-IDF for record linkage, fuzzy grouping, and deduplication?](https://discuss.elastic.co/t/using-machine-learning-and-tf-idf-for-record-linkage-fuzzy-grouping-and-deduplication/16407)

<div class="topic-metadata">

**Author:** [@Shrin\_King](https://discuss.elastic.co/u/Shrin_King)\
**Replies:** 2\
**Last updated:** [March 17, 2014, 6:47pm UTC](https://discuss.elastic.co/t/using-machine-learning-and-tf-idf-for-record-linkage-fuzzy-grouping-and-deduplication/16407 "2014-03-17T18:47:57Z")

</div>

Given a new big department merged from three departments. A few employees worked for two or three departments before merging. That means, the attributes of one person might be listed under different departments' da…

---

## [Delete file after read](https://discuss.elastic.co/t/delete-file-after-read/26656)

<div class="topic-metadata">

**Author:** [@Win\_Wang](https://discuss.elastic.co/u/Win_Wang)\
**Replies:** 1\
**Last updated:** [July 31, 2015, 5:58pm UTC](https://discuss.elastic.co/t/delete-file-after-read/26656 "2015-07-31T17:58:58Z")

</div>

I want to delete a file once all its lines have been read. I'm using file input + split filter so I can't just delete at the end of my filters.

---

## [Unable to start the metric beat in ELK 6.5.4](https://discuss.elastic.co/t/unable-to-start-the-metric-beat-in-elk-6-5-4/158859)

<div class="topic-metadata">

**Author:** [@subhash.parise](https://discuss.elastic.co/u/subhash.parise)\
**Replies:** 8\
**Last updated:** [December 1, 2018, 3:21am UTC](https://discuss.elastic.co/t/unable-to-start-the-metric-beat-in-elk-6-5-4/158859 "2018-12-01T03:21:30Z")

</div>

Hi Team, I have successfully installed and enabled mongod module for metricbeat in elk 6.5.4 while starting the metricbeat facing below error and i have checked metricbeat.yml file seems fine. \*\*Error Log: \*\* 2018-11…

---

## [What is visualize aggregation filters syntax?](https://discuss.elastic.co/t/what-is-visualize-aggregation-filters-syntax/49304)

<div class="topic-metadata">

**Author:** [@Viktor\_Nakidailo](https://discuss.elastic.co/u/Viktor_Nakidailo)\
**Replies:** 2\
**Last updated:** [May 10, 2016, 1:14pm UTC](https://discuss.elastic.co/t/what-is-visualize-aggregation-filters-syntax/49304 "2016-05-10T13:14:29Z")

</div>

My task at hand: group all events which labels start with Dec\* OR Back\* into one filter. I assumed, label:Dec\* OR label:Back\* should work, but it does not, I get 0 results. Nor does label:(Dec\* or Back\*) though t…

---

## [Es highlevel client do bulk operations java.lang. IllegalStateException happened](https://discuss.elastic.co/t/es-highlevel-client-do-bulk-operations-java-lang-illegalstateexception-happened/190849)

<div class="topic-metadata">

**Author:** [@chen\_steven](https://discuss.elastic.co/u/chen_steven)\
**Replies:** 6\
**Last updated:** [July 18, 2019, 6:44am UTC](https://discuss.elastic.co/t/es-highlevel-client-do-bulk-operations-java-lang-illegalstateexception-happened/190849 "2019-07-18T06:44:11Z")

</div>

ref url in github: env: CentOS7, Java 8, SpringBoot, Maven, ES highlevel jar Elasticsearch 6.7 which was running in docker on OSS service background: this is a data handler node which need to do some scheduled da…

---

## [Grok Trying to continue with pattern based on match](https://discuss.elastic.co/t/grok-trying-to-continue-with-pattern-based-on-match/186185)

<div class="topic-metadata">

**Author:** [@talqadi7](https://discuss.elastic.co/u/talqadi7)\
**Replies:** 6\
**Last updated:** [June 23, 2019, 7:07pm UTC](https://discuss.elastic.co/t/grok-trying-to-continue-with-pattern-based-on-match/186185 "2019-06-23T19:07:07Z")

</div>

Hi, I'm still new to grok and logstash, and appreciate any help. So, I'm currently setting up a grok pattern, to extract a field from a large message field with a lot of human text. The data is extremely unstructured, so…

[Previous page](https://discuss.elastic.co/top.md?page=777&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=779&per_page=50&period=all)
