# Top **URL:** https://discuss.elastic.co/top.md?page=787&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 788 --- ## [How to interpret "Time spent by span type"?](https://discuss.elastic.co/t/how-to-interpret-time-spent-by-span-type/257766)
**Author:** [@giovere](https://discuss.elastic.co/u/giovere)\ **Replies:** 3\ **Last updated:** [December 16, 2020, 7:15am UTC](https://discuss.elastic.co/t/how-to-interpret-time-spent-by-span-type/257766 "2020-12-16T07:15:42Z")
Kibana: 7.8.1 APM-server: 7.8.1 Elasticsearch: 7.8.1 Java agent: 1.19.0 In my "Time spent by spant type" I get following entries: app - according to https://www.elastic.co/guide/en/kibana/7.x/transactions.html ap… --- ## [Xfs\_quota not working](https://discuss.elastic.co/t/xfs-quota-not-working/166591)
**Author:** [@darren.skinner](https://discuss.elastic.co/u/darren.skinner)\ **Replies:** 3\ **Last updated:** [February 4, 2019, 2:53pm UTC](https://discuss.elastic.co/t/xfs-quota-not-working/166591 "2019-02-04T14:53:20Z")
I'm having issues getting quotas working in ece. version 2.0.1 I'm getting the following error in the allocator.log file: \[2019-01-31 14:44:02,569\]\[WARN \]\[no.found.runner.managers.XFSQuotaManager\] Command \[\[sudo, -n, … --- ## [Add new node in ES cluster](https://discuss.elastic.co/t/add-new-node-in-es-cluster/217529)
**Author:** [@bdn](https://discuss.elastic.co/u/bdn)\ **Replies:** 4\ **Last updated:** [February 8, 2020, 5:53am UTC](https://discuss.elastic.co/t/add-new-node-in-es-cluster/217529 "2020-02-08T05:53:08Z")
Previously, I generated certificates for my ES nodes through the below command. /usr/share/elasticsearch/bin/elasticsearch-certutil cert ca --pem --in /tmp/instance.yml --out /root/new/new\_cert.zip Now I want to add … --- ## [How can i use aggregation in logstash-elasticsearch filter plugin](https://discuss.elastic.co/t/how-can-i-use-aggregation-in-logstash-elasticsearch-filter-plugin/133805)
**Author:** [@yaser](https://discuss.elastic.co/u/yaser)\ **Replies:** 4\ **Last updated:** [May 31, 2018, 9:36pm UTC](https://discuss.elastic.co/t/how-can-i-use-aggregation-in-logstash-elasticsearch-filter-plugin/133805 "2018-05-31T21:36:10Z")
if\[type\] == "mytype" { elasticsearch { hosts =\> \["192.168.1.1:9200"\] index =\> "my\_index" query\_template =\> "/logstash/my\_query.json" … --- ## [Logstash 5.4.0 not writing logs or opening port](https://discuss.elastic.co/t/logstash-5-4-0-not-writing-logs-or-opening-port/85495)
**Author:** [@Geezer](https://discuss.elastic.co/u/Geezer)\ **Replies:** 4\ **Last updated:** [May 12, 2017, 5:53pm UTC](https://discuss.elastic.co/t/logstash-5-4-0-not-writing-logs-or-opening-port/85495 "2017-05-12T17:53:56Z")
Hello, I have a new install of Logstash 5.4.0 on CentOS 7 with a single beat input and output configured. The service starts, and sytemctl says it is running, but it won't open the TCP port, connect to RabbitMQ or w… --- ## [Specify a Reverse proxy endpoint in FileBeat configuration](https://discuss.elastic.co/t/specify-a-reverse-proxy-endpoint-in-filebeat-configuration/48652)
**Author:** [@ramkchirra](https://discuss.elastic.co/u/ramkchirra)\ **Replies:** 2\ **Last updated:** [April 28, 2016, 1:09pm UTC](https://discuss.elastic.co/t/specify-a-reverse-proxy-endpoint-in-filebeat-configuration/48652 "2016-04-28T13:09:53Z")
Hi, I am very new to ELK stack. Actually i want to configure Filebeat(Client) in a way that it can directly talk to ElasticSearch present on a WebServer and whose endpoint is exposed through a Reverse proxy. If i… --- ## [How to set up alert based on value change over given amount of time](https://discuss.elastic.co/t/how-to-set-up-alert-based-on-value-change-over-given-amount-of-time/341083)
**Author:** [@Ruben\_Bajo](https://discuss.elastic.co/u/Ruben_Bajo)\ **Replies:** 6\ **Last updated:** [September 14, 2023, 9:08pm UTC](https://discuss.elastic.co/t/how-to-set-up-alert-based-on-value-change-over-given-amount-of-time/341083 "2023-09-14T21:08:07Z")
I have a costume log that contains a value that constantly increases over the day and gets back to 0 every midnight. I would like to set up a rule that can alert if this growth stops but I did not find a way to do that. … --- ## [Create an error log with an ingest pipeline when there is an indexing error](https://discuss.elastic.co/t/create-an-error-log-with-an-ingest-pipeline-when-there-is-an-indexing-error/291069)
**Author:** [@GinkoLucas](https://discuss.elastic.co/u/GinkoLucas)\ **Replies:** 6\ **Last updated:** [December 8, 2021, 3:12pm UTC](https://discuss.elastic.co/t/create-an-error-log-with-an-ingest-pipeline-when-there-is-an-indexing-error/291069 "2021-12-08T15:12:48Z")
Hi, I would like to create an error log when a document is not suitable for my mapping. For example if I send a document containing an unknown field in my mapping (dynamic:false), I would like to be able to create an e… --- ## [ES 7.5.1 exception while generating certificates](https://discuss.elastic.co/t/es-7-5-1-exception-while-generating-certificates/215186)
**Author:** [@AHS](https://discuss.elastic.co/u/AHS)\ **Replies:** 3\ **Last updated:** [January 15, 2020, 6:18pm UTC](https://discuss.elastic.co/t/es-7-5-1-exception-while-generating-certificates/215186 "2020-01-15T18:18:27Z")
Hello, I am following this guide in order to get SSL installed: When I reach to point 2-4 and run the following command: bin/elasticsearch-certutil cert ca --pem --in ~/tmp/cert\_blog/instance.yml --out ~/tmp/cert\_b… --- ## [Filebeat missing some log lines](https://discuss.elastic.co/t/filebeat-missing-some-log-lines/41487)
**Author:** [@astro](https://discuss.elastic.co/u/astro)\ **Replies:** 3\ **Last updated:** [February 11, 2016, 1:57pm UTC](https://discuss.elastic.co/t/filebeat-missing-some-log-lines/41487 "2016-02-11T13:57:21Z")
Hi Everyone , I had been in situation where I m sending logs to logstash shipper using filebeat , It seems filebeat is skipping some events , especially event at around 23:59 to 00:01 . I am not sure anyone else faci… --- ## [Mapping conflict with Elastic Agent](https://discuss.elastic.co/t/mapping-conflict-with-elastic-agent/298677)
**Author:** [@ARDiver86](https://discuss.elastic.co/u/ARDiver86)\ **Replies:** 7\ **Last updated:** [March 15, 2022, 9:52am UTC](https://discuss.elastic.co/t/mapping-conflict-with-elastic-agent/298677 "2022-03-15T09:52:09Z")
I am using the Fleet server with policies/integrations but I am running into some mapping conflicts that I am unsure how to resolve. For my "logs-\*" index pattern I see I have a conflict of keyword,object on the "source"… --- ## [Adding field creates an array not a static string](https://discuss.elastic.co/t/adding-field-creates-an-array-not-a-static-string/258149)
**Author:** [@jknott](https://discuss.elastic.co/u/jknott)\ **Replies:** 7\ **Last updated:** [December 10, 2020, 6:23pm UTC](https://discuss.elastic.co/t/adding-field-creates-an-array-not-a-static-string/258149 "2020-12-10T18:23:52Z")
When I add this in my filter it adds it but my other pipelines also add a field of the same and the values turn into an array instead of a static value per log. mutate { add\_field =\> { "service\_name"… --- ## [How to give Discover option to an user in Kibana](https://discuss.elastic.co/t/how-to-give-discover-option-to-an-user-in-kibana/192174)
**Author:** [@kaushik.vankayala](https://discuss.elastic.co/u/kaushik.vankayala)\ **Replies:** 1\ **Last updated:** [July 25, 2019, 5:00pm UTC](https://discuss.elastic.co/t/how-to-give-discover-option-to-an-user-in-kibana/192174 "2019-07-25T17:00:06Z")
Hi Team, I am trying to create a user in Kibana, who will have access to only Dashboard and Discover tabs. Alongside is it possible to give a role or permission where one will be able to just view the visualizations but… --- ## [Kibana chart element opacity on legend hover](https://discuss.elastic.co/t/kibana-chart-element-opacity-on-legend-hover/47017)
**Author:** [@Adam\_Whittaker](https://discuss.elastic.co/u/Adam_Whittaker)\ **Replies:** 7\ **Last updated:** [March 15, 2017, 3:24am UTC](https://discuss.elastic.co/t/kibana-chart-element-opacity-on-legend-hover/47017 "2017-03-15T03:24:30Z")
Hello, Is there a way in the code or otherwise to change the default opacity that is set on chart elements when one item is hovered over? I would like to to make the none selected items more transparent so that the ite… --- ## [Load testing application with TCP transport client... blocked threads!](https://discuss.elastic.co/t/load-testing-application-with-tcp-transport-client-blocked-threads/73303)
**Author:** [@riscado](https://discuss.elastic.co/u/riscado)\ **Replies:** 7\ **Last updated:** [February 1, 2017, 2:26pm UTC](https://discuss.elastic.co/t/load-testing-application-with-tcp-transport-client-blocked-threads/73303 "2017-02-01T14:26:49Z")
Hi, I'm performing load tests of 200-400 tps (jmeter) on an application written in vert.x 3 which uses a tcp transport client (singleton) for performing searches on elastic 1.7.0 After a couple of minutes the app bec… --- ## [Unable to negotiate with kerberos keytab file](https://discuss.elastic.co/t/unable-to-negotiate-with-kerberos-keytab-file/233633)
**Author:** [@lnitin12](https://discuss.elastic.co/u/lnitin12)\ **Replies:** 4\ **Last updated:** [May 21, 2020, 4:02pm UTC](https://discuss.elastic.co/t/unable-to-negotiate-with-kerberos-keytab-file/233633 "2020-05-21T16:02:02Z")
I'm unable to negotiate a user with kerberos keytab to URL i'm testing is curl --negotiate -u : https://localhost:9200/\_security/\_authenticate --verbose Although keytab user has superuser access it still shows Unauthor… --- ## [Having trouble with Marvel Installation recommended from the site](https://discuss.elastic.co/t/having-trouble-with-marvel-installation-recommended-from-the-site/51988)
**Author:** [@dal](https://discuss.elastic.co/u/dal)\ **Replies:** 4\ **Last updated:** [June 6, 2016, 7:59pm UTC](https://discuss.elastic.co/t/having-trouble-with-marvel-installation-recommended-from-the-site/51988 "2016-06-06T19:59:38Z")
I've been stuck on this for about a day. I downloaded and installed ElasticSearch 2.3.3 on my redhat vm. I am trying to follow the get started video on the site but not one of the installation commands from the video has… --- ## [Dec 14th, 2021: \[en\] Leverage your data to build better search faster with curations powered by adaptive relevance](https://discuss.elastic.co/t/dec-14th-2021-en-leverage-your-data-to-build-better-search-faster-with-curations-powered-by-adaptive-relevance/290470)
**Author:** [@isaacrlevin](https://discuss.elastic.co/u/isaacrlevin)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-14th-2021-en-leverage-your-data-to-build-better-search-faster-with-curations-powered-by-adaptive-relevance/290470 "2021-12-14T08:00:58Z")
The building blocks of building great search experiences Building a powerful search experience is a necessity for any applications that are built on top of data. Ensuring that the best results are delivered to users bas… --- ## [Error: fail to enroll: fail to execute request to fleet-server: x509: cannot validate certificate for X.X.X.X because it doesn't contain any IP SANs](https://discuss.elastic.co/t/error-fail-to-enroll-fail-to-execute-request-to-fleet-server-x509-cannot-validate-certificate-for-x-x-x-x-because-it-doesnt-contain-any-ip-sans/347124)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 5\ **Last updated:** [November 27, 2023, 12:03pm UTC](https://discuss.elastic.co/t/error-fail-to-enroll-fail-to-execute-request-to-fleet-server-x509-cannot-validate-certificate-for-x-x-x-x-because-it-doesnt-contain-any-ip-sans/347124 "2023-11-27T12:03:15Z")
Hi, i was using elastic 8.8.0 and all my agents were online green. Updating the stack went smooth but when came to upgrade the elastic agents from fleet to 8.9.1 i can see that the agents are offline but still getting d… --- ## [Add nested field with logstash and JDBC](https://discuss.elastic.co/t/add-nested-field-with-logstash-and-jdbc/145585)
**Author:** [@M.alsioufi](https://discuss.elastic.co/u/M.alsioufi)\ **Replies:** 5\ **Last updated:** [August 22, 2018, 4:21pm UTC](https://discuss.elastic.co/t/add-nested-field-with-logstash-and-jdbc/145585 "2018-08-22T16:21:00Z")
Hi, I am using Logstash to update my Elasticsearch index. I have index called my\_files, and I want to update its records with "metadata" field. "metadata" should be a nested field that contains some other fields I want … --- ## [Kibana is NOT running/working](https://discuss.elastic.co/t/kibana-is-not-running-working/76604)
**Author:** [@chrisCMCS](https://discuss.elastic.co/u/chrisCMCS)\ **Replies:** 5\ **Last updated:** [March 1, 2017, 9:05pm UTC](https://discuss.elastic.co/t/kibana-is-not-running-working/76604 "2017-03-01T21:05:24Z")
Kibana says its running but then after 30 mins stops. We are running this on a VM, It has 16gb ram and 10 Virtual Processors Ive had people say that its because of a garbage collector so its heavy on the ram etc.. ob… --- ## [Help parsing ndjson as json using json filter](https://discuss.elastic.co/t/help-parsing-ndjson-as-json-using-json-filter/356560)
**Author:** [@bibbidi](https://discuss.elastic.co/u/bibbidi)\ **Replies:** 8\ **Last updated:** [April 2, 2024, 12:18pm UTC](https://discuss.elastic.co/t/help-parsing-ndjson-as-json-using-json-filter/356560 "2024-04-02T12:18:56Z")
Hi, I am trying to use Winlogbeat to get a json file with Windows events. Winlogbeat produces ndjson, so I was trying to convert it to json like this: When I run logstash with this configuration file, it does not save a… --- ## [Are there any best practices for the migration of saved objects between different versions?](https://discuss.elastic.co/t/are-there-any-best-practices-for-the-migration-of-saved-objects-between-different-versions/236443)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 8\ **Last updated:** [June 17, 2020, 12:10am UTC](https://discuss.elastic.co/t/are-there-any-best-practices-for-the-migration-of-saved-objects-between-different-versions/236443 "2020-06-17T00:10:31Z")
I want to migrate the "saved objects" from ELK 7.6.2 version to 7.4.2 version. what data must be consistent? what needs attention? how to move safely, steadily and quickly? --- ## [How to pull the available fields in visualization](https://discuss.elastic.co/t/how-to-pull-the-available-fields-in-visualization/74553)
**Author:** [@Vivek\_Raj](https://discuss.elastic.co/u/Vivek_Raj)\ **Replies:** 3\ **Last updated:** [February 10, 2017, 3:29pm UTC](https://discuss.elastic.co/t/how-to-pull-the-available-fields-in-visualization/74553 "2017-02-10T15:29:22Z")
Hi Everyone, we have some of Available fields on kibana (discover). For creating visualization i need those fields on visualization Y axis fields but i'm not able to accomplish this can anyone help me on this. thanks … --- ## [How to measure performance of kibana?](https://discuss.elastic.co/t/how-to-measure-performance-of-kibana/47070)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 3\ **Last updated:** [April 12, 2016, 3:28pm UTC](https://discuss.elastic.co/t/how-to-measure-performance-of-kibana/47070 "2016-04-12T15:28:19Z")
Hi, I want to check how much time UI took to fetch records for the selected criteria. Where can I see the response time? Does kibana or ES logs this time? br, Sunil --- ## [Logstash instance slave failover](https://discuss.elastic.co/t/logstash-instance-slave-failover/76418)
**Author:** [@SuperbBug](https://discuss.elastic.co/u/SuperbBug)\ **Replies:** 6\ **Last updated:** [February 27, 2017, 1:48pm UTC](https://discuss.elastic.co/t/logstash-instance-slave-failover/76418 "2017-02-27T13:48:40Z")
Does someone knows how to scale Logstash? What do I mean by scaling? Let's say I have one instance of Logstash producing messages from jdbc to Kafka and lets say that node where Logstash service is installed and instance… --- ## [S3 repository plugin: Is it possible to restore a snapshot from a non-read-only repository using a read-only access\_key?](https://discuss.elastic.co/t/s3-repository-plugin-is-it-possible-to-restore-a-snapshot-from-a-non-read-only-repository-using-a-read-only-access-key/68289)
**Author:** [@jos](https://discuss.elastic.co/u/jos)\ **Replies:** 6\ **Last updated:** [December 8, 2016, 8:36am UTC](https://discuss.elastic.co/t/s3-repository-plugin-is-it-possible-to-restore-a-snapshot-from-a-non-read-only-repository-using-a-read-only-access-key/68289 "2016-12-08T08:36:08Z")
Hello all, I am trying to restore a snapshot from an s3 bucket created with Elasticsearch 2.2.1, using Elasticsearch 5.0.2. The bucket is not read-only, but the access\_key for AWS only has read-only access. When I t… --- ## [Error after upgrading 5.2 -\> 5.3 : "Unknown setting 'trim' for kv"](https://discuss.elastic.co/t/error-after-upgrading-5-2-5-3-unknown-setting-trim-for-kv/83616)
**Author:** [@dfinn](https://discuss.elastic.co/u/dfinn)\ **Replies:** 2\ **Last updated:** [April 25, 2017, 9:04pm UTC](https://discuss.elastic.co/t/error-after-upgrading-5-2-5-3-unknown-setting-trim-for-kv/83616 "2017-04-25T21:04:49Z")
Looks like I'm hitting this bug: Here's the pertinent part of my config that uses trim: # process key-value data is it exists if \[postfix\_keyvalue\_data\] { kv { source =\> "postfix\_keyvalue\_data" … --- ## [Missing index .siem-signals-default](https://discuss.elastic.co/t/missing-index-siem-signals-default/298452)
**Author:** [@slash24](https://discuss.elastic.co/u/slash24)\ **Replies:** 4\ **Last updated:** [March 7, 2022, 7:38pm UTC](https://discuss.elastic.co/t/missing-index-siem-signals-default/298452 "2022-03-07T19:38:50Z")
Having 7.16.3 properly licensed with Platinum, I cannot run some (tried five) ML-rules from Security due to: ".siem-signals-default" missing. I have Elastic Agent deployed with Security Endpoint activated and lots of d… --- ## [Any open source tools to index and search Windows File Server by using ElasticSearch](https://discuss.elastic.co/t/any-open-source-tools-to-index-and-search-windows-file-server-by-using-elasticsearch/124615)
**Author:** [@fengfly](https://discuss.elastic.co/u/fengfly)\ **Replies:** 4\ **Last updated:** [March 20, 2018, 6:30pm UTC](https://discuss.elastic.co/t/any-open-source-tools-to-index-and-search-windows-file-server-by-using-elasticsearch/124615 "2018-03-20T18:30:23Z")
Hello Expert, after some internet search, the best I found it this link: https://github.com/dadoonet/fscrawler. However from its own description, it is only for local file systems on Windows, It would be really appreci… --- ## [Exists scripted field](https://discuss.elastic.co/t/exists-scripted-field/95551)
**Author:** [@annizaki](https://discuss.elastic.co/u/annizaki)\ **Replies:** 4\ **Last updated:** [August 4, 2017, 7:50am UTC](https://discuss.elastic.co/t/exists-scripted-field/95551 "2017-08-04T07:50:26Z")
Hi all, I am monitoring a variety of components and have created visualisations to show whether the component is up, down or hasn't responded in a while. If the component is up or down, it sends a log to elastic search … --- ## [How to reindex distinct data in elasticsearch](https://discuss.elastic.co/t/how-to-reindex-distinct-data-in-elasticsearch/59943)
**Author:** [@gayathri](https://discuss.elastic.co/u/gayathri)\ **Replies:** 4\ **Last updated:** [September 14, 2016, 3:52pm UTC](https://discuss.elastic.co/t/how-to-reindex-distinct-data-in-elasticsearch/59943 "2016-09-14T15:52:54Z")
Hi Team, I am able to reindex the data in elasticsearch using: curl -XPOST http://localhost:9200/\_reindex?pretty -d' { "source": { "index": "old\_index" }, "dest": { "index": "new\_index" }, "script"… --- ## [OOM Error](https://discuss.elastic.co/t/oom-error/248154)
**Author:** [@Shreesha\_Gundmi](https://discuss.elastic.co/u/Shreesha_Gundmi)\ **Replies:** 7\ **Last updated:** [September 15, 2020, 2:44pm UTC](https://discuss.elastic.co/t/oom-error/248154 "2020-09-15T14:44:03Z")
Hi Team, I am using Elasticsearch 7.6.2, sometimes when we request query I am getting OOM (Out Of Memory) may I know how to tackle this issue? Hardware environment as follows: Server capacity vCPUs: 8 RAM: 32GB Sto… --- ## [Syslog message: Tag problem and bad facility and severity values in the output of logstash](https://discuss.elastic.co/t/syslog-message-tag-problem-and-bad-facility-and-severity-values-in-the-output-of-logstash/33647)
**Author:** [@thales\_jfc](https://discuss.elastic.co/u/thales_jfc)\ **Replies:** 1\ **Last updated:** [November 3, 2015, 6:27pm UTC](https://discuss.elastic.co/t/syslog-message-tag-problem-and-bad-facility-and-severity-values-in-the-output-of-logstash/33647 "2015-11-03T18:27:03Z")
Hi I have two virtual machines with centos 7 64 bits installed on it. One is used as a server for log messages. Logstach has been installed on it. nagioslogserver version is 2015r1.4. Here is the configuration file. … --- ## [Error parsing csv field message](https://discuss.elastic.co/t/error-parsing-csv-field-message/171360)
**Author:** [@drivera](https://discuss.elastic.co/u/drivera)\ **Replies:** 5\ **Last updated:** [March 7, 2019, 9:06pm UTC](https://discuss.elastic.co/t/error-parsing-csv-field-message/171360 "2019-03-07T21:06:41Z")
Recently upgraded to LS 5.6.15 and began receiving the error below. Is this a break in this version of LS? Do you see anything wrong with my config? Thanks. Error message: \[logstash.filters.csv \] Error parsing csv … --- ## [Default\_operator not working](https://discuss.elastic.co/t/default-operator-not-working/129872)
**Author:** [@tfe2012](https://discuss.elastic.co/u/tfe2012)\ **Replies:** 5\ **Last updated:** [May 2, 2018, 9:55am UTC](https://discuss.elastic.co/t/default-operator-not-working/129872 "2018-05-02T09:55:07Z")
Hi, I try run: oracle AND san AND francisco AND hadoop Get total of 1118 matches. Then I try: oracle san francisco hadoop I get total of 59 matches. Query looks like: \[ 'query' =\> \[ 'function\_score' =\> \[ '… --- ## [Logstash configuration error (wants to check if value is null)](https://discuss.elastic.co/t/logstash-configuration-error-wants-to-check-if-value-is-null/127801)
**Author:** [@PolterFox](https://discuss.elastic.co/u/PolterFox)\ **Replies:** 5\ **Last updated:** [April 13, 2018, 6:14am UTC](https://discuss.elastic.co/t/logstash-configuration-error-wants-to-check-if-value-is-null/127801 "2018-04-13T06:14:42Z")
Hey everybody, I have an error in my configuration-file. I still think that the problem is the check if the value of \[\_source\]\[machine\_name\] ist null, but i dont know why?! Logstash configuration fileinput { http { … --- ## [Is this \`discuss\` forum implemented with any kind of open source project?](https://discuss.elastic.co/t/is-this-discuss-forum-implemented-with-any-kind-of-open-source-project/53203)
**Author:** [@moryaden](https://discuss.elastic.co/u/moryaden)\ **Replies:** 5\ **Last updated:** [June 18, 2016, 7:53am UTC](https://discuss.elastic.co/t/is-this-discuss-forum-implemented-with-any-kind-of-open-source-project/53203 "2016-06-18T07:53:48Z")
Is this discuss forum implemented with any kind of open source project? I would appreciate if I can read and learn this fantastic one. --- ## [Additional Ruby Gems to use in Logstash's ruby filter](https://discuss.elastic.co/t/additional-ruby-gems-to-use-in-logstashs-ruby-filter/84004)
**Author:** [@davidS](https://discuss.elastic.co/u/davidS)\ **Replies:** 1\ **Last updated:** [April 28, 2017, 11:57am UTC](https://discuss.elastic.co/t/additional-ruby-gems-to-use-in-logstashs-ruby-filter/84004 "2017-04-28T11:57:18Z")
Hi all, how can I install additional ruby gems in Logstash 5.3 to use it by its ruby filter plugin? In Ruby i normally could do ./bundle with a new entry in the Gemfile or by type 'gem install GEM' I tried also this … --- ## [Create a new index to store alerts](https://discuss.elastic.co/t/create-a-new-index-to-store-alerts/241003)
**Author:** [@robertitox](https://discuss.elastic.co/u/robertitox)\ **Replies:** 8\ **Last updated:** [August 5, 2020, 4:24pm UTC](https://discuss.elastic.co/t/create-a-new-index-to-store-alerts/241003 "2020-08-05T16:24:39Z")
Dear all, I have an ELK 7.8.0 server running OK. I want to create some alerts for different events, and because I have the ELK open source version, I just can create two type of connectors: Index and Server Log. I'd lik… --- ## [How to send apm agent data to two different apm-servers](https://discuss.elastic.co/t/how-to-send-apm-agent-data-to-two-different-apm-servers/210602)
**Author:** [@Ashwin\_Iyer](https://discuss.elastic.co/u/Ashwin_Iyer)\ **Replies:** 3\ **Last updated:** [December 6, 2019, 1:30pm UTC](https://discuss.elastic.co/t/how-to-send-apm-agent-data-to-two-different-apm-servers/210602 "2019-12-06T13:30:30Z")
I am using apm.agent 1.5 to a run a simple java app (basically just prints out hello world when you curl at a few endpoints) and send that apm data to an apm-server 6.7.0. The apm-server forwards the data to two separate… --- ## [Determining reason for stuck grok filter](https://discuss.elastic.co/t/determining-reason-for-stuck-grok-filter/191257)
**Author:** [@victor73](https://discuss.elastic.co/u/victor73)\ **Replies:** 8\ **Last updated:** [July 20, 2019, 12:17am UTC](https://discuss.elastic.co/t/determining-reason-for-stuck-grok-filter/191257 "2019-07-20T00:17:22Z")
Hi all, I've tried using logstash versions 6.8.1, 7.0 and 7.2 and, regardless of version, logstash seems to stop it's processing and begin consuming all the available CPU. It seems to be stuck with the grok filter. I su… --- ## [How can I take count by status after a split?](https://discuss.elastic.co/t/how-can-i-take-count-by-status-after-a-split/64878)
**Author:** [@djvidov](https://discuss.elastic.co/u/djvidov)\ **Replies:** 3\ **Last updated:** [November 4, 2016, 2:30pm UTC](https://discuss.elastic.co/t/how-can-i-take-count-by-status-after-a-split/64878 "2016-11-04T14:30:52Z")
Hello, I want to create a report to show how many apps are in running status, how many apps are closed, etc My logs are event based. When an app has a new status it send to elk a message with the new status. Until now… --- ## [Why is has\_parent so slow? and can anything be done?](https://discuss.elastic.co/t/why-is-has-parent-so-slow-and-can-anything-be-done/22458)
**Author:** [@Perryn\_Fowler](https://discuss.elastic.co/u/Perryn_Fowler)\ **Replies:** 3\ **Last updated:** [March 4, 2015, 12:10am UTC](https://discuss.elastic.co/t/why-is-has-parent-so-slow-and-can-anything-be-done/22458 "2015-03-04T00:10:47Z")
Hello, I am writing an analytics application that makes heavy use of aggregations. My situation seems suited to parent/child. I have relatively few parents (hundreds) and a lot more children (tens of millions). … --- ## [Host Overview's System Navigation of CPU Usage Gauge is 0](https://discuss.elastic.co/t/host-overviews-system-navigation-of-cpu-usage-gauge-is-0/161451)
**Author:** [@lujiao](https://discuss.elastic.co/u/lujiao)\ **Replies:** 2\ **Last updated:** [December 20, 2018, 2:35am UTC](https://discuss.elastic.co/t/host-overviews-system-navigation-of-cpu-usage-gauge-is-0/161451 "2018-12-20T02:35:15Z")
Dear all I use metricbeat to collect metrics from my system,but in Kibana's Dashboard,all the metric of Host Overview's System Navigation is zero,include CPU Usage Gange,Memory Usage,Disk and so on,the in fact,they are … --- ## [Elasticsearch.yml email configuration error](https://discuss.elastic.co/t/elasticsearch-yml-email-configuration-error/96956)
**Author:** [@vinayak](https://discuss.elastic.co/u/vinayak)\ **Replies:** 2\ **Last updated:** [August 14, 2017, 11:48am UTC](https://discuss.elastic.co/t/elasticsearch-yml-email-configuration-error/96956 "2017-08-14T11:48:15Z")
Hi All, My elastic search configuration for is like this only: ======================== Elasticsearch Configuration ========================= ---------------------------------- Cluster --------------------------------… --- ## [IllegalArgumentException: Document contains at least one immense term in field=“abc”.(whose UTF8 encoding is longer than the max length 32766)](https://discuss.elastic.co/t/illegalargumentexception-document-contains-at-least-one-immense-term-in-field-abc-whose-utf8-encoding-is-longer-than-the-max-length-32766/96895)
**Author:** [@dimalini](https://discuss.elastic.co/u/dimalini)\ **Replies:** 2\ **Last updated:** [August 14, 2017, 5:53am UTC](https://discuss.elastic.co/t/illegalargumentexception-document-contains-at-least-one-immense-term-in-field-abc-whose-utf8-encoding-is-longer-than-the-max-length-32766/96895 "2017-08-14T05:53:29Z")
I have a field, the mapping of which looks like the following new TextProperty { Name = “allContent”, Analyzer = “contentanalyzer”, IndexOptions = IndexOptions.Offsets, Norms = false } The analyzer I am using is … --- ## [Field name length and ElasticSearch performance](https://discuss.elastic.co/t/field-name-length-and-elasticsearch-performance/6645)
**Author:** [@andym](https://discuss.elastic.co/u/andym)\ **Replies:** 1\ **Last updated:** [February 8, 2012, 7:31pm UTC](https://discuss.elastic.co/t/field-name-length-and-elasticsearch-performance/6645 "2012-02-08T19:31:07Z")
Hi, Will the size of the elastic search index decrease (and performance increase due to reduce memory footprint) if I were to shorten field names? I have many fields in index which have descriptive names (i.e. “… --- ## [Timestamp search between two fields](https://discuss.elastic.co/t/timestamp-search-between-two-fields/329048)
**Author:** [@Farah\_Bhr](https://discuss.elastic.co/u/Farah_Bhr)\ **Replies:** 4\ **Last updated:** [April 2, 2023, 11:32am UTC](https://discuss.elastic.co/t/timestamp-search-between-two-fields/329048 "2023-04-02T11:32:53Z")
In my use case, I created two fields for the values of start\_time and end\_time based on some indicators in the log lines with kibana discover , I want to search for all the log lines that their timestamp is between thes… --- ## [Auditbeat compared to Winlogbeat, Metricbeat](https://discuss.elastic.co/t/auditbeat-compared-to-winlogbeat-metricbeat/244779)
**Author:** [@fgjensen](https://discuss.elastic.co/u/fgjensen)\ **Replies:** 4\ **Last updated:** [August 19, 2020, 7:50pm UTC](https://discuss.elastic.co/t/auditbeat-compared-to-winlogbeat-metricbeat/244779 "2020-08-19T19:50:23Z")
On Windows Auditbeat the system module exposes the host and processes datasets. In this setup the file integrity module is not used. On the same MS servers Winlogbeat with the security module as well as Metricbeat and Pa… [Previous page](https://discuss.elastic.co/top.md?page=786&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=788&per_page=50&period=all)