# Top **URL:** https://discuss.elastic.co/top.md?page=790&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 791 --- ## [Reduce Number of Segments](https://discuss.elastic.co/t/reduce-number-of-segments/19440)
**Author:** [@Chris\_Decker](https://discuss.elastic.co/u/Chris_Decker)\ **Replies:** 7\ **Last updated:** [August 28, 2014, 8:31pm UTC](https://discuss.elastic.co/t/reduce-number-of-segments/19440 "2014-08-28T20:31:40Z")
All, I’m looking for advice on how to reduce the number of segments for my indices because in my use case (log analysis), quick searches are more important than real-time access to data. I've turned many of the "… --- ## [Ec2 discovery does not work with ES 6.0.0](https://discuss.elastic.co/t/ec2-discovery-does-not-work-with-es-6-0-0/108439)
**Author:** [@nkoothrappahli](https://discuss.elastic.co/u/nkoothrappahli)\ **Replies:** 3\ **Last updated:** [November 23, 2017, 1:57pm UTC](https://discuss.elastic.co/t/ec2-discovery-does-not-work-with-es-6-0-0/108439 "2017-11-23T13:57:10Z")
I have setup a VPC with 3 subnets in 3 availibility zones and a autoscaling group. All instances has a IAM role which allows to describe the instances (like suggested in the docs). From aws cli this works fine. Then i sc… --- ## [Metricbeat not creating Index correctly](https://discuss.elastic.co/t/metricbeat-not-creating-index-correctly/285863)
**Author:** [@mhare](https://discuss.elastic.co/u/mhare)\ **Replies:** 4\ **Last updated:** [October 8, 2021, 2:36pm UTC](https://discuss.elastic.co/t/metricbeat-not-creating-index-correctly/285863 "2021-10-08T14:36:25Z")
I am running Stack version 7.13.4 with Metricbeat Everything seemed to be working fine, then we wanted to remove all the metricbeat data and start over. So we stopped metricbeat, and deleted all of the Metricbeat indexe… --- ## [Error opening zip file or JAR manifest missing : elastic-apm-agent-1.12.0.jar](https://discuss.elastic.co/t/error-opening-zip-file-or-jar-manifest-missing-elastic-apm-agent-1-12-0-jar/268991)
**Author:** [@Stud21](https://discuss.elastic.co/u/Stud21)\ **Replies:** 4\ **Last updated:** [April 4, 2021, 1:20pm UTC](https://discuss.elastic.co/t/error-opening-zip-file-or-jar-manifest-missing-elastic-apm-agent-1-12-0-jar/268991 "2021-04-04T13:20:57Z")
I am getting an error trying to run the following command in linux to run the APM application agent: sudo java -javaagent:elastic-apm-agent-1.12.0.jar The error is as follows: Error opening zip file or JAR manifest mi… --- ## [Plugin installation failure](https://discuss.elastic.co/t/plugin-installation-failure/63422)
**Author:** [@rlonberg](https://discuss.elastic.co/u/rlonberg)\ **Replies:** 4\ **Last updated:** [October 20, 2016, 4:40pm UTC](https://discuss.elastic.co/t/plugin-installation-failure/63422 "2016-10-20T16:40:19Z")
So this is weird... I am trying to install a custom plugin located on a local directory to kibana. When I attempt to install using './kibana plugin --install'. I get the following: \[lma@qthlmwbtt02 bin\]$ ./kibana pl… --- ## [Redundancy in logging "Flushing buffer at interval"](https://discuss.elastic.co/t/redundancy-in-logging-flushing-buffer-at-interval/43888)
**Author:** [@NiteshBarnwal](https://discuss.elastic.co/u/NiteshBarnwal)\ **Replies:** 4\ **Last updated:** [March 15, 2016, 8:21am UTC](https://discuss.elastic.co/t/redundancy-in-logging-flushing-buffer-at-interval/43888 "2016-03-15T08:21:30Z")
I am seeing below logs being displayed continuously in debug mode. What may be the issue? Flushing buffer at interval {:instance=\>"#\ **Author:** [@111148](https://discuss.elastic.co/u/111148)\ **Replies:** 2\ **Last updated:** [March 8, 2017, 10:21pm UTC](https://discuss.elastic.co/t/elk-plugin-for-azure-eventhub/77756 "2017-03-08T22:21:02Z") Hello again , guys. I am still trying setup windows azure logs parsing in ELK. Still no luck. Tried azureblob plugin, and exec command variant. Both work with issues. Found 3-d variant, ( an article) that it can be done … --- ## [I want to send logs from a windows machine to windows elk server](https://discuss.elastic.co/t/i-want-to-send-logs-from-a-windows-machine-to-windows-elk-server/55452)
**Author:** [@dubul](https://discuss.elastic.co/u/dubul)\ **Replies:** 1\ **Last updated:** [July 14, 2016, 1:46am UTC](https://discuss.elastic.co/t/i-want-to-send-logs-from-a-windows-machine-to-windows-elk-server/55452 "2016-07-14T01:46:36Z")
my logs are located in d:\\app\\logs in a windows machine. i want to send logs to elk server. I tried using file beat. I dont see any errors and could'nt see any logs on elk server. Can anyone provide me configs for filebe… --- ## [Creating a watcher to compare a float value](https://discuss.elastic.co/t/creating-a-watcher-to-compare-a-float-value/204578)
**Author:** [@Shan\_Chathusanda](https://discuss.elastic.co/u/Shan_Chathusanda)\ **Replies:** 6\ **Last updated:** [October 22, 2019, 10:46am UTC](https://discuss.elastic.co/t/creating-a-watcher-to-compare-a-float-value/204578 "2019-10-22T10:46:24Z")
Hi, Currently I am working on a watcher in Kibana 7.x. In here I need to compare a field (which is a float value) and perform an action. I am using a advanced watch for this requirement. Here I extract the field that I … --- ## [Configuring LDAP with Elasticsearch 6.2.3](https://discuss.elastic.co/t/configuring-ldap-with-elasticsearch-6-2-3/137896)
**Author:** [@Devesh\_Pandey](https://discuss.elastic.co/u/Devesh_Pandey)\ **Replies:** 4\ **Last updated:** [June 29, 2018, 1:10pm UTC](https://discuss.elastic.co/t/configuring-ldap-with-elasticsearch-6-2-3/137896 "2018-06-29T13:10:11Z")
Hi there, I am trying to build infrastructure for elastic. I was able to setup elastic and kibana with x-pack. I am facing issue while configuring ldap, and here is what I have done till now. Step 1- used open\_ssl to … --- ## [\[Solved\] Can't get logstash to catch cowrie filebeat](https://discuss.elastic.co/t/solved-cant-get-logstash-to-catch-cowrie-filebeat/165866)
**Author:** [@jonsag](https://discuss.elastic.co/u/jonsag)\ **Replies:** 3\ **Last updated:** [January 26, 2019, 10:07pm UTC](https://discuss.elastic.co/t/solved-cant-get-logstash-to-catch-cowrie-filebeat/165866 "2019-01-26T22:07:07Z")
Can't get it working with cowrie-\>filebeat-\>logstash-\>elasticsearch-\>kibana My cowrie logs to file, which is read by filebeat. Filebeat version $ /usr/share/filebeat/bin/filebeat version filebeat version 6.1.1 (arm), … --- ## [The line char date histogram different metrics are mis-aligned in the x-axis date](https://discuss.elastic.co/t/the-line-char-date-histogram-different-metrics-are-mis-aligned-in-the-x-axis-date/139103)
**Author:** [@guanghaofan](https://discuss.elastic.co/u/guanghaofan)\ **Replies:** 8\ **Last updated:** [July 11, 2018, 3:16am UTC](https://discuss.elastic.co/t/the-line-char-date-histogram-different-metrics-are-mis-aligned-in-the-x-axis-date/139103 "2018-07-11T03:16:17Z")
while changing Metrics Test Qty type to 'bar' the bar char adds 2 dummy point before the date point. while changing the type to 'line', all the metrics point are aligned --- ## [KV filter trim with regex](https://discuss.elastic.co/t/kv-filter-trim-with-regex/73437)
**Author:** [@flalar](https://discuss.elastic.co/u/flalar)\ **Replies:** 3\ **Last updated:** [February 4, 2017, 11:29am UTC](https://discuss.elastic.co/t/kv-filter-trim-with-regex/73437 "2017-02-04T11:29:08Z")
Given the example filter inputs "\[Key1:/app/segment/confirm.jsp\] 21:50:00 \[Key2:3\] \[Key3:93\] \[Key4:392\] \[Key5:210\] \[Key6:144\] \[Key7:93\] \[Key8:392\] Some more text that should not be included in key value" I need to ext… --- ## [Slow aggregation queries, only after data change (ES 2.3)](https://discuss.elastic.co/t/slow-aggregation-queries-only-after-data-change-es-2-3/66398)
**Author:** [@Yoni\_Dor](https://discuss.elastic.co/u/Yoni_Dor)\ **Replies:** 8\ **Last updated:** [November 28, 2016, 10:01pm UTC](https://discuss.elastic.co/t/slow-aggregation-queries-only-after-data-change-es-2-3/66398 "2016-11-28T22:01:38Z")
Hi. We are trying to analyze an issue we have, where we occasionally get slow responses for a query that is usually quick. Our queries are aggregating on a certain field entityId, which is a not-analyzed string value… --- ## [Would Kibana5 support pipeline aggregations?](https://discuss.elastic.co/t/would-kibana5-support-pipeline-aggregations/56707)
**Author:** [@Morriaty](https://discuss.elastic.co/u/Morriaty)\ **Replies:** 3\ **Last updated:** [August 1, 2016, 7:53am UTC](https://discuss.elastic.co/t/would-kibana5-support-pipeline-aggregations/56707 "2016-08-01T07:53:35Z")
Hi Timelion helps us a lot for calculating and plotting time series data, but the shortage is that X-axis can only be time series. So when we do some calculations like this, neither Kibana nor timelion works. \[gon… --- ## [Filebeat http stats: number of events in queue](https://discuss.elastic.co/t/filebeat-http-stats-number-of-events-in-queue/159190)
**Author:** [@sergeyarl](https://discuss.elastic.co/u/sergeyarl)\ **Replies:** 5\ **Last updated:** [December 7, 2018, 12:40am UTC](https://discuss.elastic.co/t/filebeat-http-stats-number-of-events-in-queue/159190 "2018-12-07T00:40:37Z")
Hi! What parameter in filebeat stats which are exposed via http (http://localhost:5066/stats?pretty) shows the amount of existing events in spool queue ? We are sending logs from filebeats to logstash and want to monit… --- ## [Elasticsearch 2.0 unicast discovery via load balancer](https://discuss.elastic.co/t/elasticsearch-2-0-unicast-discovery-via-load-balancer/35210)
**Author:** [@jimmidyson](https://discuss.elastic.co/u/jimmidyson)\ **Replies:** 5\ **Last updated:** [November 23, 2015, 11:20am UTC](https://discuss.elastic.co/t/elasticsearch-2-0-unicast-discovery-via-load-balancer/35210 "2015-11-23T11:20:26Z")
If I have all my elasticsearch instances automatically joined to a load balancer pool (actually a kubernetes service) on start up, would it cause any problems to point the unicast discovery hosts to just the load balance… --- ## [3 node cluster behind F5 VIP, how to configure?](https://discuss.elastic.co/t/3-node-cluster-behind-f5-vip-how-to-configure/243296)
**Author:** [@wardallen](https://discuss.elastic.co/u/wardallen)\ **Replies:** 4\ **Last updated:** [August 3, 2020, 4:03am UTC](https://discuss.elastic.co/t/3-node-cluster-behind-f5-vip-how-to-configure/243296 "2020-08-03T04:03:15Z")
I have a 3 node cluster, and I'm wondering how to configure the network settings in the nodes now that an F5 VIP has entered the picture. The hosts: node1 - 10.1.1.1 node2 - 10.1.1.2 node3 - 10.1.1.3 The F5 VIP is s… --- ## [Logstash-filter-elasticsearch URI parsing error when ssl set to true](https://discuss.elastic.co/t/logstash-filter-elasticsearch-uri-parsing-error-when-ssl-set-to-true/163814)
**Author:** [@zhaider](https://discuss.elastic.co/u/zhaider)\ **Replies:** 4\ **Last updated:** [January 27, 2019, 6:07pm UTC](https://discuss.elastic.co/t/logstash-filter-elasticsearch-uri-parsing-error-when-ssl-set-to-true/163814 "2019-01-27T18:07:17Z")
This is my plugin config: elasticsearch { hosts =\> \[ "${LS\_ES\_HOST1}" \] user =\> "${LS\_ES\_USER}" password =\> "${LS\_ES\_PASSWORD}" ssl =\> true ca\_file =\> "${LS\_ES\_CACER… --- ## [Scrolling or slicing?](https://discuss.elastic.co/t/scrolling-or-slicing/80274)
**Author:** [@Shira\_Bendor](https://discuss.elastic.co/u/Shira_Bendor)\ **Replies:** 4\ **Last updated:** [March 30, 2017, 1:49pm UTC](https://discuss.elastic.co/t/scrolling-or-slicing/80274 "2017-03-30T13:49:08Z")
Hi, I'm using queries that can return many documents. In my UI I would like to split it into "pages" so each page contains a manageable amount of documents. I read the documentation of scrolling, but if I understand co… --- ## [Split JSON array into multiple events using ingest pipelines?](https://discuss.elastic.co/t/split-json-array-into-multiple-events-using-ingest-pipelines/238519)
**Author:** [@ianmuscat](https://discuss.elastic.co/u/ianmuscat)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 9:33am UTC](https://discuss.elastic.co/t/split-json-array-into-multiple-events-using-ingest-pipelines/238519 "2020-06-25T09:33:46Z")
I have some logs being forwarded using Filebeat to Elasticsearch which contain a JSON array. { "docs": \[ { "\_source": { ... "snapshot": \[ { "address": "127.0.0.1", … --- ## [Snapshots don't get compressed](https://discuss.elastic.co/t/snapshots-dont-get-compressed/19868)
**Author:** [@Tomcsanyi\_Domonkos](https://discuss.elastic.co/u/Tomcsanyi_Domonkos)\ **Replies:** 7\ **Last updated:** [September 29, 2014, 11:42am UTC](https://discuss.elastic.co/t/snapshots-dont-get-compressed/19868 "2014-09-29T11:42:07Z")
Hi Everyone, I just started experimenting with the cool snapshot feature of ES (using ES 1.3.2 on Ubuntu 14.04) using curator. I created a new repository on a mounted NFS storage, using only the default options (c… --- ## [Unable to start logstash using docker compose](https://discuss.elastic.co/t/unable-to-start-logstash-using-docker-compose/187651)
**Author:** [@nila](https://discuss.elastic.co/u/nila)\ **Replies:** 2\ **Last updated:** [June 26, 2019, 11:10pm UTC](https://discuss.elastic.co/t/unable-to-start-logstash-using-docker-compose/187651 "2019-06-26T23:10:37Z")
Hello, I am trying to configure logstash with docker compose. Here is my configuration. From the logs, it shows it is bringing up my pipeline but crashes after that. can someone please help what went wrong? docker-comp… --- ## [Is document\_type in filebeat same as type in logstash filter?](https://discuss.elastic.co/t/is-document-type-in-filebeat-same-as-type-in-logstash-filter/114624)
**Author:** [@elkcurious](https://discuss.elastic.co/u/elkcurious)\ **Replies:** 2\ **Last updated:** [January 9, 2018, 7:34pm UTC](https://discuss.elastic.co/t/is-document-type-in-filebeat-same-as-type-in-logstash-filter/114624 "2018-01-09T19:34:54Z")
Hi, In 5.2.2 (filebeat & logstash), is the document\_type setting in filebeat accessible as the type in the logstash filter? I tried this based on the documentation and few other threads, but the logstash fingerprint blo… --- ## [Metricbeat system.memory.actual.free - is it accurate?](https://discuss.elastic.co/t/metricbeat-system-memory-actual-free-is-it-accurate/80650)
**Author:** [@simonl](https://discuss.elastic.co/u/simonl)\ **Replies:** 2\ **Last updated:** [March 30, 2017, 3:53pm UTC](https://discuss.elastic.co/t/metricbeat-system-memory-actual-free-is-it-accurate/80650 "2017-03-30T15:53:34Z")
Hello, I want to replace all my home grown & Nagios plugins with the marvelous metricbeat, but I don't trust the Linux memory figures ie. I rely on avail memory to alert on when a system is going to swap. For older ker… --- ## [Documents still exist after index deletion](https://discuss.elastic.co/t/documents-still-exist-after-index-deletion/45352)
**Author:** [@iliasse](https://discuss.elastic.co/u/iliasse)\ **Replies:** 2\ **Last updated:** [March 24, 2016, 2:29pm UTC](https://discuss.elastic.co/t/documents-still-exist-after-index-deletion/45352 "2016-03-24T14:29:16Z")
Hi, I'm running into a problem. I'm deleting multiple indices using a REST call in sense DELETE index But i am still finding some "legacy" files when i check the disk partition where elasticsearch stores its data. … --- ## [Alert on logs error](https://discuss.elastic.co/t/alert-on-logs-error/285772)
**Author:** [@alfredo.deluca](https://discuss.elastic.co/u/alfredo.deluca)\ **Replies:** 6\ **Last updated:** [October 4, 2021, 7:44pm UTC](https://discuss.elastic.co/t/alert-on-logs-error/285772 "2021-10-04T19:44:32Z")
Hi all. I have scripts that run every night to back up gitlab and and at the end it logs a file with the result of that backup. The logs are sent to our Elastic cloud account and from there I want to create an alert wh… --- ## [SSL certificate renewal](https://discuss.elastic.co/t/ssl-certificate-renewal/115762)
**Author:** [@albbapm](https://discuss.elastic.co/u/albbapm)\ **Replies:** 3\ **Last updated:** [January 19, 2018, 3:59pm UTC](https://discuss.elastic.co/t/ssl-certificate-renewal/115762 "2018-01-19T15:59:42Z")
I currently have SSL working between Winlogbeat 6.1.1 on a Windows 10 x64 computer and logstash 6.1.1 running on CentOS 7. The way I set it up was to request a new certificate from the local computer certificate store a… --- ## [Filebeat connection error](https://discuss.elastic.co/t/filebeat-connection-error/67103)
**Author:** [@txisme](https://discuss.elastic.co/u/txisme)\ **Replies:** 3\ **Last updated:** [November 25, 2016, 10:10am UTC](https://discuss.elastic.co/t/filebeat-connection-error/67103 "2016-11-25T10:10:45Z")
Hey, using filebeat 5.0 for the first time. Using filebeat.yml that i used for version 2.4 but it s not working filebeatlog: 2016-11-24T11:24:40Z INFO Starting prospector of type: log 2016-11-24T11:24:40Z INFO Sta… --- ## [Filebeat -\> logstash 순서 보장](https://discuss.elastic.co/t/filebeat-logstash/52590)
**Author:** [@Donovan](https://discuss.elastic.co/u/Donovan)\ **Replies:** 1\ **Last updated:** [July 18, 2016, 12:18am UTC](https://discuss.elastic.co/t/filebeat-logstash/52590 "2016-07-18T00:18:43Z")
현재 filebeat으로 log file을 읽어서 logstash로 보내고 logstash에서 s3와 kafka로 전송하는 간단한 스트림을 구성했습니다. file beat 설정은 아래와 같고 # List of prospectors to fetch data. prospectors: - paths: - D:\\\*.log input\_type: … --- ## [How to add action buttons to a Kibana DashBoard table?](https://discuss.elastic.co/t/how-to-add-action-buttons-to-a-kibana-dashboard-table/328437)
**Author:** [@LucasE](https://discuss.elastic.co/u/LucasE)\ **Replies:** 4\ **Last updated:** [March 27, 2023, 2:19pm UTC](https://discuss.elastic.co/t/how-to-add-action-buttons-to-a-kibana-dashboard-table/328437 "2023-03-27T14:19:57Z")
Hello everyone, I currently have a Kibana ( 8.3.3 ) DashBoard that uses data from Elastic Search ( Data View ). In this DashBoard I have a table that shows flows, the number of messages sent through each flow etc. I w… --- ## [Losgtash Ruby extract JSON Array Key Value](https://discuss.elastic.co/t/losgtash-ruby-extract-json-array-key-value/240909)
**Author:** [@lueneburger](https://discuss.elastic.co/u/lueneburger)\ **Replies:** 4\ **Last updated:** [July 13, 2020, 11:06am UTC](https://discuss.elastic.co/t/losgtash-ruby-extract-json-array-key-value/240909 "2020-07-13T11:06:13Z")
Hi Everyone, i was looking last week for 2 days for this and i found a solution to my first use case, but i can't get it working for my second one :confused: also its the first time doing something with ruby, so maybe i… --- ## [Problem Using 'must\_not' to Exclude Matches](https://discuss.elastic.co/t/problem-using-must-not-to-exclude-matches/223531)
**Author:** [@stephencr](https://discuss.elastic.co/u/stephencr)\ **Replies:** 4\ **Last updated:** [March 13, 2020, 3:52pm UTC](https://discuss.elastic.co/t/problem-using-must-not-to-exclude-matches/223531 "2020-03-13T15:52:25Z")
I'm trying to add a feature to my search where I can exclude users that contain certain hashtags from the result . My code for including users that contain all of the given hashtags works, and is the same as the code be… --- ## [Kibana hits are different from docs.count](https://discuss.elastic.co/t/kibana-hits-are-different-from-docs-count/63819)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 4\ **Last updated:** [October 29, 2016, 1:16am UTC](https://discuss.elastic.co/t/kibana-hits-are-different-from-docs-count/63819 "2016-10-29T01:16:11Z")
I'm using Elasticsearch, Logstash, Kibana (ELK) Docker image (elk-docker) and while accessing Kibana "hits" count shows less of the number then docs.count via (http://127.0.0.1:9200/\_cat/indices?v). I selected "Last 5 ye… --- ## [Elasticsearch not accepting data for geoip.location where the latitude is above \[-90.0\]](https://discuss.elastic.co/t/elasticsearch-not-accepting-data-for-geoip-location-where-the-latitude-is-above-90-0/40058)
**Author:** [@Rahul](https://discuss.elastic.co/u/Rahul)\ **Replies:** 4\ **Last updated:** [January 27, 2016, 8:14pm UTC](https://discuss.elastic.co/t/elasticsearch-not-accepting-data-for-geoip-location-where-the-latitude-is-above-90-0/40058 "2016-01-27T20:14:32Z")
We are trying to load the webserver logs to ElasticSearch version: 2.1.1. where we have created proper template and able to index data. However, we are having issue with the latitude value which are above \[-90.0\] for g… --- ## [Filebeat large files](https://discuss.elastic.co/t/filebeat-large-files/38573)
**Author:** [@Raggyman](https://discuss.elastic.co/u/Raggyman)\ **Replies:** 4\ **Last updated:** [January 7, 2016, 8:43am UTC](https://discuss.elastic.co/t/filebeat-large-files/38573 "2016-01-07T08:43:37Z")
Using Filebeats 1.0.0 but have tested using the nightly release of 1.2 but doesn't seem to have fixed the issue. Have a bit of an issue when a file gets over 2Gb where the log file no longer seems to be processed. The… --- ## [Delete Watch by Java API get NPE](https://discuss.elastic.co/t/delete-watch-by-java-api-get-npe/33136)
**Author:** [@Enniu\_51](https://discuss.elastic.co/u/Enniu_51)\ **Replies:** 4\ **Last updated:** [December 29, 2015, 8:42am UTC](https://discuss.elastic.co/t/delete-watch-by-java-api-get-npe/33136 "2015-12-29T08:42:15Z")
In org.elasticsearch.client.transport.support: public \\> void execute(final… --- ## [Proble with Spring-Elasticsearch: transportClient](https://discuss.elastic.co/t/proble-with-spring-elasticsearch-transportclient/11430)
**Author:** [@yahia](https://discuss.elastic.co/u/yahia)\ **Replies:** 5\ **Last updated:** [April 3, 2013, 4:19pm UTC](https://discuss.elastic.co/t/proble-with-spring-elasticsearch-transportclient/11430 "2013-04-03T16:19:27Z")
hi all, I want to use in my application a transport client whith spring-elasticsearch, so in my applicationcontext file I wrote, but when i start up the server i have the following error: org.springframew… --- ## [Grok on source field](https://discuss.elastic.co/t/grok-on-source-field/120800)
**Author:** [@Dykan\_P](https://discuss.elastic.co/u/Dykan_P)\ **Replies:** 2\ **Last updated:** [February 21, 2018, 10:33am UTC](https://discuss.elastic.co/t/grok-on-source-field/120800 "2018-02-21T10:33:21Z")
Hello, I'm beginner on stack ELK 5.6 and I have a problem : I try to recover my virtualhost and put it in a new field but my grok is false. The data I want is in source but she has different form : /var/www/clients/cl… --- ## [Elastic Cloud On kubernetes](https://discuss.elastic.co/t/elastic-cloud-on-kubernetes/247484)
**Author:** [@Vineeth\_varma](https://discuss.elastic.co/u/Vineeth_varma)\ **Replies:** 8\ **Last updated:** [October 6, 2020, 9:19am UTC](https://discuss.elastic.co/t/elastic-cloud-on-kubernetes/247484 "2020-10-06T09:19:15Z")
Hi .., I am giving a try on Elastic cloud on Kubernetes, I have deployed the operator, Elasticsearch and Kibana. Everything is up and running fine. Now I want to implement openid connect to kibana using Keycloak, On do… --- ## [Exclamation Triangle errors intermittently](https://discuss.elastic.co/t/exclamation-triangle-errors-intermittently/209552)
**Author:** [@kevinpd](https://discuss.elastic.co/u/kevinpd)\ **Replies:** 8\ **Last updated:** [December 3, 2019, 9:17pm UTC](https://discuss.elastic.co/t/exclamation-triangle-errors-intermittently/209552 "2019-12-03T21:17:13Z")
I have a Canvas display running in Chrome in kiosk mode. It runs 24/7. I have it refreshed every 15 seconds. The Canvas has about 60 expressions that it displays. Some text, a few image reveals, a few lines. The display… --- ## [Multi\_match bool query, error](https://discuss.elastic.co/t/multi-match-bool-query-error/134620)
**Author:** [@matteo.lavaggi](https://discuss.elastic.co/u/matteo.lavaggi)\ **Replies:** 7\ **Last updated:** [June 6, 2018, 8:31am UTC](https://discuss.elastic.co/t/multi-match-bool-query-error/134620 "2018-06-06T08:31:15Z")
Hi dear, any one can tell me where is the mistake in this sintax? i'm tryng to query different fields with different match type to get better result with no luck { "\_source": { }, "query": { "bool": { "… --- ## [Elasticsearch puppet module issue](https://discuss.elastic.co/t/elasticsearch-puppet-module-issue/111567)
**Author:** [@AYakimenko](https://discuss.elastic.co/u/AYakimenko)\ **Replies:** 7\ **Last updated:** [December 19, 2017, 6:56pm UTC](https://discuss.elastic.co/t/elasticsearch-puppet-module-issue/111567 "2017-12-19T18:56:14Z")
Hi All, I'm trying to install Elasticsearch 6.0 via Puppet Enterprise 2016.5.x using the mod 'elastic-elasticsearch', '6.0.0' (with all necessary dependencies). In the manifest I'm calling: class { 'elasticsearch': … --- ## [Auto Classification](https://discuss.elastic.co/t/auto-classification/11463)
**Author:** [@kuwar\_sahani\_2](https://discuss.elastic.co/u/kuwar_sahani_2)\ **Replies:** 7\ **Last updated:** [May 27, 2016, 12:55pm UTC](https://discuss.elastic.co/t/auto-classification/11463 "2016-05-27T12:55:26Z")
I'm working on a model where i will have the input data in AVRO format and index the data into ES. Before indexing I would like to add catagories to the data i.e Auto-\* Classification\*. eg: the data contains books. … --- ## [Network config for cluster behind proxy - clarifying documentation](https://discuss.elastic.co/t/network-config-for-cluster-behind-proxy-clarifying-documentation/49799)
**Author:** [@Fran\_Fabrizio](https://discuss.elastic.co/u/Fran_Fabrizio)\ **Replies:** 3\ **Last updated:** [May 12, 2016, 2:14am UTC](https://discuss.elastic.co/t/network-config-for-cluster-behind-proxy-clarifying-documentation/49799 "2016-05-12T02:14:22Z")
I just spent an hour going down the wrong rabbit hole because of some misleading documentation, so I thought I'd post this here in hopes of helping others. If you have multiple nodes, and you're trying to put your clus… --- ## [Searchable snapshots](https://discuss.elastic.co/t/searchable-snapshots/310598)
**Author:** [@Morez](https://discuss.elastic.co/u/Morez)\ **Replies:** 6\ **Last updated:** [August 15, 2022, 5:49am UTC](https://discuss.elastic.co/t/searchable-snapshots/310598 "2022-08-15T05:49:36Z")
As mentioned in the Elasticsearch documentation, searchable snapshot is created typically by ILM, when index reaches to the cold or frozen data tier. Some times ago, it was mentioned that frozen data tier is deprecated … --- ## [Winlogbeat events not showing in AWS Elasticsearch](https://discuss.elastic.co/t/winlogbeat-events-not-showing-in-aws-elasticsearch/144572)
**Author:** [@fionamacd](https://discuss.elastic.co/u/fionamacd)\ **Replies:** 6\ **Last updated:** [August 16, 2018, 8:09pm UTC](https://discuss.elastic.co/t/winlogbeat-events-not-showing-in-aws-elasticsearch/144572 "2018-08-16T20:09:49Z")
Hi, I am just starting out with ELK and setting it up on AWS and using AWS ElasticSearch Service. I have configured Filebeat to send files from my AWS Windows instance to an AWS Ubuntu instance running Logstash on it. … --- ## [Elasticsearch Java Client](https://discuss.elastic.co/t/elasticsearch-java-client/64723)
**Author:** [@mvenkat\_in](https://discuss.elastic.co/u/mvenkat_in)\ **Replies:** 6\ **Last updated:** [November 4, 2016, 12:16pm UTC](https://discuss.elastic.co/t/elasticsearch-java-client/64723 "2016-11-04T12:16:41Z")
I am trying to write my first java client to query the index and aggregate and store the result in another index. I have downloaded the ES 5.0 and the lib inside that. Can a Build a simple project (a standalone java … --- ## [Check if index exists](https://discuss.elastic.co/t/check-if-index-exists/3818)
**Author:** [@Karussell1](https://discuss.elastic.co/u/Karussell1)\ **Replies:** 2\ **Last updated:** [January 23, 2011, 4:43pm UTC](https://discuss.elastic.co/t/check-if-index-exists/3818 "2011-01-23T16:43:58Z")
Hi, I would like to create a new index if not already there with Java API. The appended way does not work because the map doesn't contain the index even if it exists!? Also the following index map is empty: map … --- ## [Elastic Search query that matches all elements in nested document](https://discuss.elastic.co/t/elastic-search-query-that-matches-all-elements-in-nested-document/307395)
**Author:** [@Zedson.Sagar](https://discuss.elastic.co/u/Zedson.Sagar)\ **Replies:** 4\ **Last updated:** [June 17, 2022, 5:22am UTC](https://discuss.elastic.co/t/elastic-search-query-that-matches-all-elements-in-nested-document/307395 "2022-06-17T05:22:33Z")
I have an index with nested document structure as below - { "firstindex": { "mappings": { "properties": { "Name": { "type": "text" }, "SecurityCo… [Previous page](https://discuss.elastic.co/top.md?page=789&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=791&per_page=50&period=all)