# Top **URL:** https://discuss.elastic.co/top.md?page=796&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 797 --- ## [Logstash not showing output](https://discuss.elastic.co/t/logstash-not-showing-output/174803)
**Author:** [@peter.tu](https://discuss.elastic.co/u/peter.tu)\ **Replies:** 5\ **Last updated:** [April 1, 2019, 6:28pm UTC](https://discuss.elastic.co/t/logstash-not-showing-output/174803 "2019-04-01T18:28:40Z")
Hey guys, So I'm just trying to create a simple pipeline in logstash to produce a simple output in the 'output' file based on data entered in the 'input' file. The pipeline seems to be fine with no errors, but it's not… --- ## [ElasticSearch aggregate on a scripted nested field](https://discuss.elastic.co/t/elasticsearch-aggregate-on-a-scripted-nested-field/298841)
**Author:** [@doogyatnesta](https://discuss.elastic.co/u/doogyatnesta)\ **Replies:** 2\ **Last updated:** [March 6, 2022, 10:32am UTC](https://discuss.elastic.co/t/elasticsearch-aggregate-on-a-scripted-nested-field/298841 "2022-03-06T10:32:30Z")
I have the following mapping in my Elasticsearch index (simplified as the other fields are irrelevant: { "test": { "mappings": { "properties": { "name": { "type": "keyword" }, … --- ## [Visualize top 5 errors as table](https://discuss.elastic.co/t/visualize-top-5-errors-as-table/133628)
**Author:** [@DrMeta](https://discuss.elastic.co/u/DrMeta)\ **Replies:** 2\ **Last updated:** [May 29, 2018, 11:35pm UTC](https://discuss.elastic.co/t/visualize-top-5-errors-as-table/133628 "2018-05-29T23:35:20Z")
Hello Community, I am relatively new to ELK Stack and I hope you can help me with my issue. I want to visualize / display the top 5 error messages ordered by their occurence as a table view. Is there a way I can manag… --- ## [How to control content of accounting requests circuit breaker](https://discuss.elastic.co/t/how-to-control-content-of-accounting-requests-circuit-breaker/147359)
**Author:** [@DmitriV](https://discuss.elastic.co/u/DmitriV)\ **Replies:** 6\ **Last updated:** [September 5, 2018, 11:38am UTC](https://discuss.elastic.co/t/how-to-control-content-of-accounting-requests-circuit-breaker/147359 "2018-09-05T11:38:45Z")
Hi, I am running into issues with circuit breakers during indexing-heavy operations: it seems the accounting circuit breaker is filling up and not getting cleaned quickly enough. \[2018-09-04T12:19:05,954\]\[WARN \]\[r.supp… --- ## [Elasticsearch \< 7.0.0 is obsoleted by elasticsearch-0:7.0.1-1.x86\_64](https://discuss.elastic.co/t/elasticsearch-7-0-0-is-obsoleted-by-elasticsearch-0-7-0-1-1-x86-64/180071)
**Author:** [@kiyokat](https://discuss.elastic.co/u/kiyokat)\ **Replies:** 1\ **Last updated:** [May 8, 2019, 11:16pm UTC](https://discuss.elastic.co/t/elasticsearch-7-0-0-is-obsoleted-by-elasticsearch-0-7-0-1-1-x86-64/180071 "2019-05-08T23:16:37Z")
Hi all, I am trying to upgrade elasticsearch from 6.3.2 to 7.0.1 on CentOS (CentOS Linux release 7.6.1810 (Core)). I am getting "elasticsearch \< 7.0.0 is obsoleted by elasticsearch-0:7.0.1-1.x86\_64" error when I try to… --- ## [Fleet API vs Fleet UI](https://discuss.elastic.co/t/fleet-api-vs-fleet-ui/283918)
**Author:** [@weberr13](https://discuss.elastic.co/u/weberr13)\ **Replies:** 6\ **Last updated:** [September 15, 2021, 3:15pm UTC](https://discuss.elastic.co/t/fleet-api-vs-fleet-ui/283918 "2021-09-15T15:15:35Z")
I have been using the fleet openapi spec (Swagger UI) to programmatically control our agent polices. I have seen 2 issues (I found a work around for one, at a loss for the second). creating an Endpoint policy ignores … --- ## [Elastic Agent, System Integration, Processors](https://discuss.elastic.co/t/elastic-agent-system-integration-processors/308236)
**Author:** [@fran\_hernandez](https://discuss.elastic.co/u/fran_hernandez)\ **Replies:** 8\ **Last updated:** [June 29, 2022, 8:49am UTC](https://discuss.elastic.co/t/elastic-agent-system-integration-processors/308236 "2022-06-29T08:49:30Z")
Hello, I am trying to get the hostname of a given IP in a field (source.ip), I am doing this for an agent deployed within a system integration, I have defined some processors in the "processors" field some drop\_event. B… --- ## [Limit search return to exact match for URL](https://discuss.elastic.co/t/limit-search-return-to-exact-match-for-url/165670)
**Author:** [@MarkStewart](https://discuss.elastic.co/u/MarkStewart)\ **Replies:** 3\ **Last updated:** [January 25, 2019, 1:22pm UTC](https://discuss.elastic.co/t/limit-search-return-to-exact-match-for-url/165670 "2019-01-25T13:22:04Z")
I have an index I am searching that has a field under \_source called request\_path. This field has some similar URLs saved in over 38,000 documents. in the format (under \_source) "request\_path": "/v1/api-portal/teams… --- ## [Operator AND for match queries doesn't work](https://discuss.elastic.co/t/operator-and-for-match-queries-doesnt-work/152461)
**Author:** [@cmenendez](https://discuss.elastic.co/u/cmenendez)\ **Replies:** 8\ **Last updated:** [October 16, 2018, 9:31am UTC](https://discuss.elastic.co/t/operator-and-for-match-queries-doesnt-work/152461 "2018-10-16T09:31:01Z")
I'm using elaticsearch 6.2.3., a index with a field call text where the analyzer has the filters: lowercase, dutch\_stopwords and synonyms and it has a field call stemmer: "text": { "type": "text", … --- ## [ELK 5.3.2 with X-Pack - don't have "Monitoring" menu in Kibana](https://discuss.elastic.co/t/elk-5-3-2-with-x-pack-dont-have-monitoring-menu-in-kibana/84529)
**Author:** [@Vitaly\_il](https://discuss.elastic.co/u/Vitaly_il)\ **Replies:** 8\ **Last updated:** [May 4, 2017, 11:32am UTC](https://discuss.elastic.co/t/elk-5-3-2-with-x-pack-dont-have-monitoring-menu-in-kibana/84529 "2017-05-04T11:32:12Z")
I don't see "Monitoring" menu in Kibana at all. I added "xpack.monitoring.enabled: true" into Kibana/Elastic configs, I do see monitoring indices green open .monitoring-data-2 E25MaWstS\_KsKn7m2Fp3iw 1… --- ## [Load balancing Kibana](https://discuss.elastic.co/t/load-balancing-kibana/284932)
**Author:** [@vee](https://discuss.elastic.co/u/vee)\ **Replies:** 5\ **Last updated:** [September 28, 2021, 9:50am UTC](https://discuss.elastic.co/t/load-balancing-kibana/284932 "2021-09-28T09:50:24Z")
Hi - we have 3 clusters in our prod spread across three diff Data centers. Each cluster setup: One instance of Kibana -\> 2 client nodes for load balancing -\> data nodes Since dashboards and visualizations are local to… --- ## [Change the labels on Pie in Canvas](https://discuss.elastic.co/t/change-the-labels-on-pie-in-canvas/269458)
**Author:** [@EduardoM](https://discuss.elastic.co/u/EduardoM)\ **Replies:** 5\ **Last updated:** [April 14, 2021, 1:52pm UTC](https://discuss.elastic.co/t/change-the-labels-on-pie-in-canvas/269458 "2021-04-14T13:52:05Z")
How can I change the labels on Pie in Cavas. and I want to have "car" and "bus" instead of 1 and 2. I should change this's : filters | essql query="SELECT SUM(Produced) AS Production,typ FROM \\"data\*\\" WHERE QUE… --- ## [Timelion won't allow for splits greater than a certain size](https://discuss.elastic.co/t/timelion-wont-allow-for-splits-greater-than-a-certain-size/186758)
**Author:** [@lhoang](https://discuss.elastic.co/u/lhoang)\ **Replies:** 5\ **Last updated:** [July 1, 2019, 8:56am UTC](https://discuss.elastic.co/t/timelion-wont-allow-for-splits-greater-than-a-certain-size/186758 "2019-07-01T08:56:04Z")
I noticed that Timelion will give me this error: Timelion: Error: in cell #1: \[search\_phase\_execution\_exception\] in all of my queries if I enter a value into the split field that is larger than some arbitrary threshold… --- ## [Grok pattern when last field can be multiline](https://discuss.elastic.co/t/grok-pattern-when-last-field-can-be-multiline/26906)
**Author:** [@FrankC](https://discuss.elastic.co/u/FrankC)\ **Replies:** 5\ **Last updated:** [August 6, 2015, 4:58pm UTC](https://discuss.elastic.co/t/grok-pattern-when-last-field-can-be-multiline/26906 "2015-08-06T16:58:25Z")
I am trying to come up with a solution for a log file that is pipe delimited with the last field could be a multiline. Example: a|b|this is multiline c|d|no mutliline Any pointers would be appreciated. Also, since … --- ## [Replace string within a pattern in ruby](https://discuss.elastic.co/t/replace-string-within-a-pattern-in-ruby/113232)
**Author:** [@elk\_chaser](https://discuss.elastic.co/u/elk_chaser)\ **Replies:** 2\ **Last updated:** [December 31, 2017, 2:52pm UTC](https://discuss.elastic.co/t/replace-string-within-a-pattern-in-ruby/113232 "2017-12-31T14:52:01Z")
Trying to find out a way on how to replace a substring within nested curly brackets my input string in a single line: {"service": "service-2bc902c2", "report\_timestamp": "2017-12-18T12:58:32.545191", "service\_engine": … --- ## [Time Field (Hours/Minutes) Format "HH:mm"](https://discuss.elastic.co/t/time-field-hours-minutes-format-hh-mm/68448)
**Author:** [@mehdi-aouadi](https://discuss.elastic.co/u/mehdi-aouadi)\ **Replies:** 2\ **Last updated:** [December 12, 2016, 10:13am UTC](https://discuss.elastic.co/t/time-field-hours-minutes-format-hh-mm/68448 "2016-12-12T10:13:11Z")
I need a field with HH:mm format. I mapped it in the index usgin a HH:mm Format : "hour\_start" : { "type" : "date", "format" : "HH:mm" } I retrieve the values from a semicolon separated values file : valueA;valu… --- ## [ES 5.0 - op\_type=create ERROR](https://discuss.elastic.co/t/es-5-0-op-type-create-error/64423)
**Author:** [@Bobo\_the\_Monkey](https://discuss.elastic.co/u/Bobo_the_Monkey)\ **Replies:** 2\ **Last updated:** [October 31, 2016, 1:56pm UTC](https://discuss.elastic.co/t/es-5-0-op-type-create-error/64423 "2016-10-31T13:56:54Z")
Hello everybody, First of all my setup: ES 5 (upgraded from 2.4) My node.js app is accessing ES using the JavaScript API documents IDs are autogenerated by elastic When running ES 2.4 issuing a create call such as… --- ## [How to change row color depending on value on discover?](https://discuss.elastic.co/t/how-to-change-row-color-depending-on-value-on-discover/45254)
**Author:** [@bilguuna](https://discuss.elastic.co/u/bilguuna)\ **Replies:** 2\ **Last updated:** [March 23, 2016, 5:56pm UTC](https://discuss.elastic.co/t/how-to-change-row-color-depending-on-value-on-discover/45254 "2016-03-23T17:56:18Z")
Hello? I'd like to change row colors on Discover tab of Kibana such as if it's in error level, a row should be in red etc. Is there any way to accomplish that? I'm using Kibana 4.4.0. Thanks --- ## [Issue installing plugin - Could not resolve placeholder 'WRAPPER\_HOSTNAME'](https://discuss.elastic.co/t/issue-installing-plugin-could-not-resolve-placeholder-wrapper-hostname/9657)
**Author:** [@ppearcy](https://discuss.elastic.co/u/ppearcy)\ **Replies:** 2\ **Last updated:** [November 12, 2012, 3:33pm UTC](https://discuss.elastic.co/t/issue-installing-plugin-could-not-resolve-placeholder-wrapper-hostname/9657 "2012-11-12T15:33:58Z")
Running 0.19.3. The machine has connectivity to the outside world and I get this with any plugin, here's an example error: sudo bin/plugin -install jprante/elasticsearch-analysis-hunspell/1.1.1 Exception in thread … --- ## [Logstash logs configuration](https://discuss.elastic.co/t/logstash-logs-configuration/77614)
**Author:** [@emilio](https://discuss.elastic.co/u/emilio)\ **Replies:** 0\ **Last updated:** [March 7, 2017, 8:38am UTC](https://discuss.elastic.co/t/logstash-logs-configuration/77614 "2017-03-07T08:38:57Z")
Dear all, I need your advice. I would like to place all logstash logs on the same location - /data01/logstash/logs Where i should configure it? I need all levels of logging: info, warn, error. Currently my log… --- ## [Logstash is unable to connect to ES for Monitoring due to bad certificate](https://discuss.elastic.co/t/logstash-is-unable-to-connect-to-es-for-monitoring-due-to-bad-certificate/215841)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 1\ **Last updated:** [January 21, 2020, 9:38am UTC](https://discuss.elastic.co/t/logstash-is-unable-to-connect-to-es-for-monitoring-due-to-bad-certificate/215841 "2020-01-21T09:38:52Z")
Hi guys, I cannot see my logstash node in Kibana because it cannot connect to elasticsearch due to bad certificate: \[2020-01-21T08:26:01,246\]\[ERROR\]\[logstash.licensechecker.licensereader\] Unable to retrieve license inf… --- ## [\[Solved\] Logstash 5 alpha3 not starting](https://discuss.elastic.co/t/solved-logstash-5-alpha3-not-starting/51641)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 4\ **Last updated:** [June 2, 2016, 5:33pm UTC](https://discuss.elastic.co/t/solved-logstash-5-alpha3-not-starting/51641 "2016-06-02T17:33:51Z")
Hello, I am trying to configure logstah 5.0.0 apha3 and when I start the logstash init I get the following message: "Logstash has a new settings file which defines start up time settings. This file is typically locat… --- ## [Elasticsearch for Sensitive Data (Bank Data)](https://discuss.elastic.co/t/elasticsearch-for-sensitive-data-bank-data/18574)
**Author:** [@vijuitech](https://discuss.elastic.co/u/vijuitech)\ **Replies:** 4\ **Last updated:** [July 10, 2014, 2:47pm UTC](https://discuss.elastic.co/t/elasticsearch-for-sensitive-data-bank-data/18574 "2014-07-10T14:47:12Z")
Hi, Can Elasticsearch can be used for the following use cases in Bank Scenario, 1) Money Transactions. 2) Handling Bank related information. Please Explain why it can/cannot be used? Thanks, George -… --- ## [Parsing an array of KV pairs](https://discuss.elastic.co/t/parsing-an-array-of-kv-pairs/165591)
**Author:** [@Ash\_Powell](https://discuss.elastic.co/u/Ash_Powell)\ **Replies:** 1\ **Last updated:** [January 24, 2019, 1:49pm UTC](https://discuss.elastic.co/t/parsing-an-array-of-kv-pairs/165591 "2019-01-24T13:49:04Z")
I am trying to parse some new data through Logstash, it comes through as an array of KV pairs "custom.fields": \[ { "Field\_A": "Value A" }, { "Field\_B": "Value B" }, { "Field\_C": "Value C" }, { "Field\_D": "Val… --- ## [How to add parameters to URL in Markdown](https://discuss.elastic.co/t/how-to-add-parameters-to-url-in-markdown/268224)
**Author:** [@Dvir\_Alony](https://discuss.elastic.co/u/Dvir_Alony)\ **Replies:** 6\ **Last updated:** [April 7, 2021, 10:36am UTC](https://discuss.elastic.co/t/how-to-add-parameters-to-url-in-markdown/268224 "2021-04-07T10:36:20Z")
Hi, I created a dashboard with two TSVB visualization, one control/filter and one markdown. I defined a URL in Markdown visualization (see 4 in png) I want to add tree parameters to the URL first control/filter fiel… --- ## [Can Kibana Basic license be used in a commercial product?](https://discuss.elastic.co/t/can-kibana-basic-license-be-used-in-a-commercial-product/168495)
**Author:** [@0x41414141](https://discuss.elastic.co/u/0x41414141)\ **Replies:** 6\ **Last updated:** [February 22, 2019, 6:18pm UTC](https://discuss.elastic.co/t/can-kibana-basic-license-be-used-in-a-commercial-product/168495 "2019-02-22T18:18:13Z")
Assuming that no modifications have been made to the proprietary components, can a company use the Kibana Basic edition in a product that they are selling? For example, imagine they are selling a data visualization tool,… --- ## [Nested json imposible to parse](https://discuss.elastic.co/t/nested-json-imposible-to-parse/88669)
**Author:** [@fernando\_martinez](https://discuss.elastic.co/u/fernando_martinez)\ **Replies:** 6\ **Last updated:** [June 8, 2017, 12:08pm UTC](https://discuss.elastic.co/t/nested-json-imposible-to-parse/88669 "2017-06-08T12:08:08Z")
Hi, I have a nested json in a field like this: { .... "host" =\> "repo1.server.io", "source" =\> "/mnt/centralizedlogs/logstash/netsec/48851f14d3e9/2017-06-08.txt", "message" =\> "{\\"@timestamp\\"=\>\\"2017-06-08T07:06:13.… --- ## [Aggregation of multiple arrays into single one](https://discuss.elastic.co/t/aggregation-of-multiple-arrays-into-single-one/47998)
**Author:** [@Manuel](https://discuss.elastic.co/u/Manuel)\ **Replies:** 6\ **Last updated:** [April 21, 2016, 1:36pm UTC](https://discuss.elastic.co/t/aggregation-of-multiple-arrays-into-single-one/47998 "2016-04-21T13:36:19Z")
Hi, I want to use Elasticsearch as a timeseries database where I store an array of 850 sensor values every hour. The database will store data for several years. Now I want to query all the documents within a given time… --- ## [Kibana - Nginx 502 Bad Gateway](https://discuss.elastic.co/t/kibana-nginx-502-bad-gateway/304709)
**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\ **Replies:** 1\ **Last updated:** [May 13, 2022, 7:54pm UTC](https://discuss.elastic.co/t/kibana-nginx-502-bad-gateway/304709 "2022-05-13T19:54:33Z")
I tried logging into Kibana and was greeted with a 502 Bad Gateway error. Our setup is a single server hosting elastic, logstash and kibana. On the server, I got a 302 redirect when running curl -i http://localhost:5601.… --- ## [Strict Dynamic Mappings With Dynamic Templates](https://discuss.elastic.co/t/strict-dynamic-mappings-with-dynamic-templates/211629)
**Author:** [@phivos](https://discuss.elastic.co/u/phivos)\ **Replies:** 1\ **Last updated:** [December 14, 2019, 12:37pm UTC](https://discuss.elastic.co/t/strict-dynamic-mappings-with-dynamic-templates/211629 "2019-12-14T12:37:15Z")
Hi Is it possible to apply strict dynamic mappings using dynamic templates with patterns? The goal is to allow structured strict dynamic mappings. Example: PUT \_template/test-template { "index\_patterns": \[ … --- ## [Kibana, Zero for null values](https://discuss.elastic.co/t/kibana-zero-for-null-values/136856)
**Author:** [@Ahmed\_Akram](https://discuss.elastic.co/u/Ahmed_Akram)\ **Replies:** 1\ **Last updated:** [June 21, 2018, 7:19pm UTC](https://discuss.elastic.co/t/kibana-zero-for-null-values/136856 "2018-06-21T19:19:29Z")
I have a simple question, I'm using ELK stack to plot some graphs with data from my logs. Now if the metrics I'm logging stopped sending to Elasticsearch and the queries are getting no values for certain time-windows, th… --- ## [Nested: CorruptIndexException\[failed engine (reason: \[corrupt file (source: \[index\])](https://discuss.elastic.co/t/nested-corruptindexexception-failed-engine-reason-corrupt-file-source-index/126178)
**Author:** [@law](https://discuss.elastic.co/u/law)\ **Replies:** 1\ **Last updated:** [March 30, 2018, 6:36am UTC](https://discuss.elastic.co/t/nested-corruptindexexception-failed-engine-reason-corrupt-file-source-index/126178 "2018-03-30T06:36:30Z")
Hi everyone， My ES node has a index which has a shard with status UNASSIGNED, when i perform cluster reroute using this command: curl -uuser:passwd -XPOST 'localhost:19200/\_cluster/reroute?pretty' -d '{ "comman… --- ## [Distinct Values from Elasticsearch](https://discuss.elastic.co/t/distinct-values-from-elasticsearch/69964)
**Author:** [@ashit\_pupu](https://discuss.elastic.co/u/ashit_pupu)\ **Replies:** 5\ **Last updated:** [December 26, 2016, 9:32pm UTC](https://discuss.elastic.co/t/distinct-values-from-elasticsearch/69964 "2016-12-26T21:32:05Z")
Hi Everyone, I am indexing documents to index which is having the following structure. Providing an example below :- {"content" : "xyz", "id" : "1234" , "iterationid" : "678001"} {"content" : "xyz", "id" : "1234" , "… --- ## [Filebeat 7.10.1 and 7.11.0 not able to send the logs from windows servers to logstash and getting stuck at \[Api Webserver\] agent - Successfully started Logstash API endpoint {:port=\>9600}](https://discuss.elastic.co/t/filebeat-7-10-1-and-7-11-0-not-able-to-send-the-logs-from-windows-servers-to-logstash-and-getting-stuck-at-api-webserver-agent-successfully-started-logstash-api-endpoint-port-9600/266420)
**Author:** [@Patr123](https://discuss.elastic.co/u/Patr123)\ **Replies:** 8\ **Last updated:** [March 11, 2021, 3:06am UTC](https://discuss.elastic.co/t/filebeat-7-10-1-and-7-11-0-not-able-to-send-the-logs-from-windows-servers-to-logstash-and-getting-stuck-at-api-webserver-agent-successfully-started-logstash-api-endpoint-port-9600/266420 "2021-03-11T03:06:26Z")
I installed filebeat v7.10.1 on a windows 2016 server. I am trying to send a log file from that server to logstash server and I am using the beats plugin to parse the data. When I am running the beats config file it get… --- ## [Metricbeat: TLS Verification Disabled: certificate signed by unknown authority](https://discuss.elastic.co/t/metricbeat-tls-verification-disabled-certificate-signed-by-unknown-authority/324751)
**Author:** [@Cactus7600](https://discuss.elastic.co/u/Cactus7600)\ **Replies:** 4\ **Last updated:** [February 12, 2023, 4:19pm UTC](https://discuss.elastic.co/t/metricbeat-tls-verification-disabled-certificate-signed-by-unknown-authority/324751 "2023-02-12T16:19:32Z")
Hi. I disabled certificate validation within Metricbeat, yet it's still throwing untrusted certificate errors when hitting Elasticsearch. I'm using these versions: Elasticsearch: 7.16.2 Metricbeat: 7.16.1 I have the… --- ## [Indexing office documents](https://discuss.elastic.co/t/indexing-office-documents/4564)
**Author:** [@Slava\_G](https://discuss.elastic.co/u/Slava_G)\ **Replies:** 4\ **Last updated:** [June 10, 2011, 12:30am UTC](https://discuss.elastic.co/t/indexing-office-documents/4564 "2011-06-10T00:30:28Z")
Hi, Is there any convenient way to index office documents rather then parse them by-myself (using Tika or Aperture) and the to feed the elasticsearch with the parsed data ? If yes, some reference to java API will be … --- ## [Exclude/NOT Query or Filter With Wildcard](https://discuss.elastic.co/t/exclude-not-query-or-filter-with-wildcard/198782)
**Author:** [@TManson](https://discuss.elastic.co/u/TManson)\ **Replies:** 1\ **Last updated:** [September 10, 2019, 5:58am UTC](https://discuss.elastic.co/t/exclude-not-query-or-filter-with-wildcard/198782 "2019-09-10T05:58:19Z")
I am trying to create a saved search that excludes certain root domains in DNS queries. For example, if I don't want to see any hits on any of Google's subdomains, I create a query like "NOT query: "\*.google.com." Howe… --- ## [How can i log http response body in apm](https://discuss.elastic.co/t/how-can-i-log-http-response-body-in-apm/138114)
**Author:** [@umapati](https://discuss.elastic.co/u/umapati)\ **Replies:** 1\ **Last updated:** [July 2, 2018, 7:32am UTC](https://discuss.elastic.co/t/how-can-i-log-http-response-body-in-apm/138114 "2018-07-02T07:32:37Z")
my current apm configuration is as follows: config.apm = { serviceName: 'MyService', secretToken: '', serverUrl: 'localhost:5601', captureBody: 'all', instrument: 'true', errorOnAbortedRequests: 'true' }; var ap… --- ## [Unassigned replica shards after creation of an index, even though there is enough space](https://discuss.elastic.co/t/unassigned-replica-shards-after-creation-of-an-index-even-though-there-is-enough-space/98729)
**Author:** [@bviz](https://discuss.elastic.co/u/bviz)\ **Replies:** 1\ **Last updated:** [August 30, 2017, 1:32am UTC](https://discuss.elastic.co/t/unassigned-replica-shards-after-creation-of-an-index-even-though-there-is-enough-space/98729 "2017-08-30T01:32:01Z")
Hey, I’ve been having a problem lately, first with ES 1.7X, and then with ES 5.4X, which didn’t solve the problem. Sometimes, when I create an index (more likely when I create a few indices in a row), I get unassigned … --- ## [A little help needed on parsing xml](https://discuss.elastic.co/t/a-little-help-needed-on-parsing-xml/83784)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 7\ **Last updated:** [April 27, 2017, 7:33am UTC](https://discuss.elastic.co/t/a-little-help-needed-on-parsing-xml/83784 "2017-04-27T07:33:30Z")
Hi, I might need a few ideas here to start off with Logstash. I am pulling data from Microsoft SQL server. And one of the fields returned is an XML. This is a representation of the xml. \ **Author:** [@simroo](https://discuss.elastic.co/u/simroo)\ **Replies:** 1\ **Last updated:** [January 18, 2016, 3:55pm UTC](https://discuss.elastic.co/t/cant-connect-to-localhost/39465 "2016-01-18T15:55:58Z") Hello im trying to set up ELK, on a Centos, but i cant seem to get kibana to work. When running curl -XGET http://localhost:5601 i get Failed connect to localhost:5601; also service kibana status Redirecting to /bin/sy… --- ## [Timestamp Difference between two fields](https://discuss.elastic.co/t/timestamp-difference-between-two-fields/138169)
**Author:** [@Berin](https://discuss.elastic.co/u/Berin)\ **Replies:** 3\ **Last updated:** [July 10, 2018, 3:20pm UTC](https://discuss.elastic.co/t/timestamp-difference-between-two-fields/138169 "2018-07-10T15:20:47Z")
Hi Team, I am new to this Elastic search/ Kibana , we need to calculate the timestamp difference between two fields, In fact i even tired with scripted fields , using painless scripts "doc\['startTime'\].value - doc\['End… --- ## [Stop elasticsearch from updating automatically](https://discuss.elastic.co/t/stop-elasticsearch-from-updating-automatically/128331)
**Author:** [@nevilleonline](https://discuss.elastic.co/u/nevilleonline)\ **Replies:** 2\ **Last updated:** [April 18, 2018, 8:47am UTC](https://discuss.elastic.co/t/stop-elasticsearch-from-updating-automatically/128331 "2018-04-18T08:47:42Z")
Hi , I am having a weird problem. My elasticsearch is getting updated every night from 1.5.2 to 1.7.3 in my azure VM. Can you help me stop this. I need to make it work with 1.5.2 for application compatibility. This is … --- ## [Question: How to compile plugins with gradle](https://discuss.elastic.co/t/question-how-to-compile-plugins-with-gradle/2991)
**Author:** [@Yatir\_Ben\_Shlomo\_3](https://discuss.elastic.co/u/Yatir_Ben_Shlomo_3)\ **Replies:** 2\ **Last updated:** [June 2, 2010, 1:37pm UTC](https://discuss.elastic.co/t/question-how-to-compile-plugins-with-gradle/2991 "2010-06-02T13:37:23Z")
Hi, I am trying to figure out how to directly compile the existing plugins (I will later need to write one) what is the correct syntax? trying this gradle -d -S in elasticsearch\\plugins\\analysis\\icu five me t… --- ## [Fleet server stuck upgrading 8.5.3 -\> 8.6.0](https://discuss.elastic.co/t/fleet-server-stuck-upgrading-8-5-3-8-6-0/323204)
**Author:** [@rossw](https://discuss.elastic.co/u/rossw)\ **Replies:** 5\ **Last updated:** [January 19, 2023, 8:01pm UTC](https://discuss.elastic.co/t/fleet-server-stuck-upgrading-8-5-3-8-6-0/323204 "2023-01-19T20:01:33Z")
Our fleet server runs on our kibana server, with about 20 agents connected. We upgrade our Elastic cluster from 8.5.3 to 8.6.0 and the upgrade popped up in the fleet UI just fine. Selected the fleet server for the upgra… --- ## [Error executing Watcher Email Action](https://discuss.elastic.co/t/error-executing-watcher-email-action/75798)
**Author:** [@nielsoncr](https://discuss.elastic.co/u/nielsoncr)\ **Replies:** 5\ **Last updated:** [February 21, 2017, 4:29pm UTC](https://discuss.elastic.co/t/error-executing-watcher-email-action/75798 "2017-02-21T16:29:46Z")
I'm having trouble with a watch action that executes an email on a single node cluster that works just fine on other clusters (all version 2.1.2) The action looks like this "actions":{ "send\_email\_notificati… --- ## [Logstash 1.5.3 issue with elasticsearch 1.6.1/1.7.0 "undefined method"](https://discuss.elastic.co/t/logstash-1-5-3-issue-with-elasticsearch-1-6-1-1-7-0-undefined-method/26566)
**Author:** [@m1k3ga](https://discuss.elastic.co/u/m1k3ga)\ **Replies:** 5\ **Last updated:** [August 12, 2015, 3:14pm UTC](https://discuss.elastic.co/t/logstash-1-5-3-issue-with-elasticsearch-1-6-1-1-7-0-undefined-method/26566 "2015-08-12T15:14:50Z")
hi there, yesterday we tried to update our production system. we have N logstash instances (as shipper) to a few redis instances. Then there are a few logstash indexer pulling from redis and putting them into the elast… --- ## [Time Zone](https://discuss.elastic.co/t/time-zone/6713)
**Author:** [@Yehuda\_Zargarov](https://discuss.elastic.co/u/Yehuda_Zargarov)\ **Replies:** 5\ **Last updated:** [February 19, 2012, 4:14pm UTC](https://discuss.elastic.co/t/time-zone/6713 "2012-02-19T16:14:28Z")
Hi, I'm trying to use the time zone option within a date histogram, since the hour I get is greater than the hour saved in elastic (by 2 hours). I'm using 0.18.7. This is my query: {"query":{"filtered":{"query":… --- ## [Trying to ingest MongoDB collection to ES with mongo id](https://discuss.elastic.co/t/trying-to-ingest-mongodb-collection-to-es-with-mongo-id/110285)
**Author:** [@lorenzoc](https://discuss.elastic.co/u/lorenzoc)\ **Replies:** 1\ **Last updated:** [December 5, 2017, 11:34am UTC](https://discuss.elastic.co/t/trying-to-ingest-mongodb-collection-to-es-with-mongo-id/110285 "2017-12-05T11:34:12Z")
Hello, I am trying to use logstash to ingest a mongodb collection into ES6, but I'm facing a problem with mongo's \_Id field. I've found that many people just solve this issue by removing that id and letting ES generate… --- ## [Sending logs from logstash to syslog-ng](https://discuss.elastic.co/t/sending-logs-from-logstash-to-syslog-ng/104309)
**Author:** [@Lakshman\_Mukkamalla](https://discuss.elastic.co/u/Lakshman_Mukkamalla)\ **Replies:** 4\ **Last updated:** [November 2, 2017, 12:15pm UTC](https://discuss.elastic.co/t/sending-logs-from-logstash-to-syslog-ng/104309 "2017-11-02T12:15:03Z")
Hi, I have a setup where i am able to send the logs from Log Files -\> Filebeat -\> Logstash -\> rsyslog server. But the customer has a syslog-ng as the server, have tried to work with the above pipeline with the logstash… [Previous page](https://discuss.elastic.co/top.md?page=795&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=797&per_page=50&period=all)