# Top **URL:** https://discuss.elastic.co/top.md?page=797&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 798 --- ## [Elasticsearch query to group on different parameter and max of different parameter](https://discuss.elastic.co/t/elasticsearch-query-to-group-on-different-parameter-and-max-of-different-parameter/55612)
**Author:** [@siddharthgoel88](https://discuss.elastic.co/u/siddharthgoel88)\ **Replies:** 2\ **Last updated:** [July 18, 2016, 9:29am UTC](https://discuss.elastic.co/t/elasticsearch-query-to-group-on-different-parameter-and-max-of-different-parameter/55612 "2016-07-18T09:29:13Z")
I want to write an Elasticsearch query to group by document on an attribute (say attr1), get only the top 10 result of this group by sorted by another attibute (say attr2) and in this result of 10 documents I need to fin… --- ## [Error nested exception is java.lang.NoSuchMethodError: org.elasticsearch.search.SearchHits.getTotalHits()](https://discuss.elastic.co/t/error-nested-exception-is-java-lang-nosuchmethoderror-org-elasticsearch-search-searchhits-gettotalhits/200774)
**Author:** [@luongky06](https://discuss.elastic.co/u/luongky06)\ **Replies:** 3\ **Last updated:** [October 1, 2019, 8:57am UTC](https://discuss.elastic.co/t/error-nested-exception-is-java-lang-nosuchmethoderror-org-elasticsearch-search-searchhits-gettotalhits/200774 "2019-10-01T08:57:10Z")
Hi guys, I'm using spring boot 2.1.1 connect to Elasticsearch 7.3.4 (elastic was run on docker). Spring application startup and connected to the Elasticsearch but when I try to search may document on Elastic I got the … --- ## [Using Logstash to get Postfix Logs](https://discuss.elastic.co/t/using-logstash-to-get-postfix-logs/177389)
**Author:** [@matheusribeirogarcia](https://discuss.elastic.co/u/matheusribeirogarcia)\ **Replies:** 3\ **Last updated:** [April 18, 2019, 8:50am UTC](https://discuss.elastic.co/t/using-logstash-to-get-postfix-logs/177389 "2019-04-18T08:50:17Z")
Hello everyone, i've been trying to use Logstash to parse data of Post Fix Logs, but I've had several problems with Docker Containers in this proccess. Now it seems like my containers are up, but i'm still getting some e… --- ## [Field not showing in "Available fields" unless I un-check "Hide missing fields"](https://discuss.elastic.co/t/field-not-showing-in-available-fields-unless-i-un-check-hide-missing-fields/271826)
**Author:** [@Jody\_McIvor](https://discuss.elastic.co/u/Jody_McIvor)\ **Replies:** 1\ **Last updated:** [April 30, 2021, 6:54pm UTC](https://discuss.elastic.co/t/field-not-showing-in-available-fields-unless-i-un-check-hide-missing-fields/271826 "2021-04-30T18:54:30Z")
Hi Everyone! I'm newish to the forums but have been running multiple stacks for my workplace for a couple years now, although my comfort level is still pretty low when it comes to usage, I can build/deploy ELK stacks bli… --- ## [Was the icu\_tokenizer renamed?](https://discuss.elastic.co/t/was-the-icu-tokenizer-renamed/231798)
**Author:** [@pushshift](https://discuss.elastic.co/u/pushshift)\ **Replies:** 1\ **Last updated:** [May 8, 2020, 8:40pm UTC](https://discuss.elastic.co/t/was-the-icu-tokenizer-renamed/231798 "2020-05-08T20:40:25Z")
I'm getting the following error after performing: (I have installed the analyzer-icu plugin under ES 7.6.x) curl -H "content-type: application/json" -XPUT localhost:9200/icu\_sample -d @icu\_tokenizer icu\_tokenizer file: … --- ## [Optimisation temps de réponse requête](https://discuss.elastic.co/t/optimisation-temps-de-reponse-requete/134859)
**Author:** [@lfourny](https://discuss.elastic.co/u/lfourny)\ **Replies:** 7\ **Last updated:** [June 8, 2018, 12:29pm UTC](https://discuss.elastic.co/t/optimisation-temps-de-reponse-requete/134859 "2018-06-08T12:29:05Z")
Bonjour, Je travail actuellement à la conception d'une interface qui récupère des données dans une instance ElasticCloud de notre client. Notre client indéxe des logs via filebeat. Plusieurs index par jour et par natu… --- ## [Performance for 5 node cluster](https://discuss.elastic.co/t/performance-for-5-node-cluster/55089)
**Author:** [@iremmats](https://discuss.elastic.co/u/iremmats)\ **Replies:** 7\ **Last updated:** [July 10, 2016, 10:47pm UTC](https://discuss.elastic.co/t/performance-for-5-node-cluster/55089 "2016-07-10T22:47:58Z")
Hi, Having a 5 node cluster. 3 master-data nodes 2 data nodes Master-data nodes are 8 cores 28gb ram. Data-nodes are 4 cores 14gb ram. Approx 120 million docs and 250gb data. Mostly used for logs (log4net). My fi… --- ## [Read\\Write paths](https://discuss.elastic.co/t/read-write-paths/3437)
**Author:** [@Keidi](https://discuss.elastic.co/u/Keidi)\ **Replies:** 6\ **Last updated:** [October 14, 2010, 2:45pm UTC](https://discuss.elastic.co/t/read-write-paths/3437 "2010-10-14T14:45:33Z")
Hi, I'm new to ElasticSearch but from what I have seen so far I couldn't figure out whether it can support a read\\write path architecture. Thanks! --- ## [ES - Amazon EMR - Pig](https://discuss.elastic.co/t/es-amazon-emr-pig/26212)
**Author:** [@ayan\_guha](https://discuss.elastic.co/u/ayan_guha)\ **Replies:** 2\ **Last updated:** [September 23, 2016, 10:25am UTC](https://discuss.elastic.co/t/es-amazon-emr-pig/26212 "2016-09-23T10:25:14Z")
Hi I am using Pig to connect to ES for both reading and writing data. \[hadoop mapreduce\]$ hadoop version Hadoop 2.4.0-amzn-4 Subversion http://aws.amazon.com/elasticmapreduce/ -r 8aaaf366c7fe8ea6d8c37e76c2cc8caa10e1… --- ## [Visualization Editor: Request to Elasticsearch failed:](https://discuss.elastic.co/t/visualization-editor-request-to-elasticsearch-failed/67749)
**Author:** [@logger](https://discuss.elastic.co/u/logger)\ **Replies:** 4\ **Last updated:** [December 13, 2016, 4:04pm UTC](https://discuss.elastic.co/t/visualization-editor-request-to-elasticsearch-failed/67749 "2016-12-13T16:04:31Z")
Hi, I am not able to save/overwrite Dashboards or visualisation. I get: Visualization Editor: Request to Elasticsearch failed: "Request Timeout after 30000ms" I use Kibana: Version: 4.6.3 Build: 10154 Elasticsearch … --- ## [XML or Json into elasticasearch](https://discuss.elastic.co/t/xml-or-json-into-elasticasearch/311931)
**Author:** [@kim\_frederiksen](https://discuss.elastic.co/u/kim_frederiksen)\ **Replies:** 3\ **Last updated:** [August 31, 2022, 2:01pm UTC](https://discuss.elastic.co/t/xml-or-json-into-elasticasearch/311931 "2022-08-31T14:01:39Z")
Hi everybody, I think we are doing something wrong here and I really need your help because we are stuck. We have several systems where we pass documents(xml/json) through. We want pass these document on to ELK so we c… --- ## [Automate Deletion of Docs from an Index that are older than 10 days](https://discuss.elastic.co/t/automate-deletion-of-docs-from-an-index-that-are-older-than-10-days/293826)
**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\ **Replies:** 3\ **Last updated:** [January 21, 2022, 11:20am UTC](https://discuss.elastic.co/t/automate-deletion-of-docs-from-an-index-that-are-older-than-10-days/293826 "2022-01-21T11:20:33Z")
Hi, Currently, I am deleting docs using DSL queries that are older than 10 days. I am having a 1P shard on a single node with No replicas or nodes for this env. DSL query- POST index\_name/\_delete\_by\_query { "query": … --- ## [Filebeat is SLOW?](https://discuss.elastic.co/t/filebeat-is-slow/171564)
**Author:** [@filebeater](https://discuss.elastic.co/u/filebeater)\ **Replies:** 3\ **Last updated:** [March 14, 2019, 1:25pm UTC](https://discuss.elastic.co/t/filebeat-is-slow/171564 "2019-03-14T13:25:20Z")
Hello, Filebeat developers and users, I am wondering what is your experience with filebeat output throughput? If I interpret the following filebeat log correctly, filebeat throughput to kafka is only 53KBps. we pin fil… --- ## [How to filter Filebeat input in Logstash from different log?](https://discuss.elastic.co/t/how-to-filter-filebeat-input-in-logstash-from-different-log/148480)
**Author:** [@Rahmat\_Agung\_W](https://discuss.elastic.co/u/Rahmat_Agung_W)\ **Replies:** 1\ **Last updated:** [September 14, 2018, 6:14am UTC](https://discuss.elastic.co/t/how-to-filter-filebeat-input-in-logstash-from-different-log/148480 "2018-09-14T06:14:06Z")
So, I have a VPS and have 2 json log from 2 different services. I used Filebeat to forward my log to ELK Stack Server. This is my filebeat.yml: filebeat.inputs: - type: log paths: - /home/cowrie/cowrie/log/cowrie.… --- ## [Filebeat cut multiline on 500 line](https://discuss.elastic.co/t/filebeat-cut-multiline-on-500-line/104086)
**Author:** [@Dees7](https://discuss.elastic.co/u/Dees7)\ **Replies:** 1\ **Last updated:** [October 16, 2017, 11:43am UTC](https://discuss.elastic.co/t/filebeat-cut-multiline-on-500-line/104086 "2017-10-16T11:43:51Z")
I use Filebeat to send logs to remote logstash. I use multiline - input\_type: log paths: - /production\_xml.log multiline.pattern: '^Response\_id|^Request\_id' multiline.negate: true multiline.match: after My… --- ## [Ingestion pipeline](https://discuss.elastic.co/t/ingestion-pipeline/79122)
**Author:** [@shane\_lee](https://discuss.elastic.co/u/shane_lee)\ **Replies:** 8\ **Last updated:** [March 22, 2017, 2:09am UTC](https://discuss.elastic.co/t/ingestion-pipeline/79122 "2017-03-22T02:09:02Z")
Hi, I am looking at ingestion pipeline using logstash into elasticsearch. Source data comes from sql database (MySQL) I have used the jdbc input plugin for logstash which is fantastic. I have a question: I want t… --- ## [N-Level Category Tree Mapping](https://discuss.elastic.co/t/n-level-category-tree-mapping/174410)
**Author:** [@datslegne217](https://discuss.elastic.co/u/datslegne217)\ **Replies:** 2\ **Last updated:** [April 1, 2019, 9:47pm UTC](https://discuss.elastic.co/t/n-level-category-tree-mapping/174410 "2019-04-01T21:47:43Z")
I have an ElasticSearch document mapping that is designed to support an n-level category tree, is there an alternate recommendation or best practice to accomplish n-level trees within a mapping structure? We are using t… --- ## [Elastice Search dynatrace intergration using protobuf protocol](https://discuss.elastic.co/t/elastice-search-dynatrace-intergration-using-protobuf-protocol/41952)
**Author:** [@aftabalam01](https://discuss.elastic.co/u/aftabalam01)\ **Replies:** 2\ **Last updated:** [August 31, 2016, 5:58pm UTC](https://discuss.elastic.co/t/elastice-search-dynatrace-intergration-using-protobuf-protocol/41952 "2016-08-31T17:58:57Z")
Hi dynatrace APm tool stream data using protobuf. there is splunk app to ingest this data in splunk. I am wondering if we have any ES plugin that we can use for this. https://community.dynatrace.com/community/display/DL/… --- ## [Grok filter if condition issue](https://discuss.elastic.co/t/grok-filter-if-condition-issue/28619)
**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\ **Replies:** 2\ **Last updated:** [September 4, 2015, 9:01am UTC](https://discuss.elastic.co/t/grok-filter-if-condition-issue/28619 "2015-09-04T09:01:47Z")
Hi All, how we can use if command in grok some logs contain tag method ex : "method" =\> "get" // I am able to parse the log I want to add another field , if I am getting the log which is having tag called method I … --- ## [Hot and Warm architecture](https://discuss.elastic.co/t/hot-and-warm-architecture/87570)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 0\ **Last updated:** [May 30, 2017, 1:15pm UTC](https://discuss.elastic.co/t/hot-and-warm-architecture/87570 "2017-05-30T13:15:03Z")
I am testing the hot and warm node configuration. Have single server with 2 elasticsearch nodes. I do see the latest documents are being indexed into the hot node. But when I move the 3 days old documents to the warm nod… --- ## [Curl call for PUT and GET query on multi-node es cluster](https://discuss.elastic.co/t/curl-call-for-put-and-get-query-on-multi-node-es-cluster/284942)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 7\ **Last updated:** [September 27, 2021, 12:01am UTC](https://discuss.elastic.co/t/curl-call-for-put-and-get-query-on-multi-node-es-cluster/284942 "2021-09-27T00:01:40Z")
Hi Team, I would like to know on a multi-node Elasticsearch cluster (3 nodes), to which node we can send PUT curl call (say for creating ILM policy) or to fetch some results (by running query)? In a single node cluste… --- ## [Kibana 7.1.0 HTTPS No Living Connections](https://discuss.elastic.co/t/kibana-7-1-0-https-no-living-connections/183646)
**Author:** [@Min\_Mah](https://discuss.elastic.co/u/Min_Mah)\ **Replies:** 1\ **Last updated:** [May 31, 2019, 10:17pm UTC](https://discuss.elastic.co/t/kibana-7-1-0-https-no-living-connections/183646 "2019-05-31T22:17:13Z")
Hi I have a problem to connect ES From Kibana my system is CentOs 7, ES-7.1.0, Kibana-7.1.0 my elasticsearch.yml # ------------------------------------ Node ------------------------------------ # # Use a descriptive … --- ## [Java High Level REST Client how to solve index\_not\_found\_exception to elasticsearch](https://discuss.elastic.co/t/java-high-level-rest-client-how-to-solve-index-not-found-exception-to-elasticsearch/133143)
**Author:** [@xiaojiang](https://discuss.elastic.co/u/xiaojiang)\ **Replies:** 1\ **Last updated:** [May 25, 2018, 6:37am UTC](https://discuss.elastic.co/t/java-high-level-rest-client-how-to-solve-index-not-found-exception-to-elasticsearch/133143 "2018-05-25T06:37:54Z")
I refer to this url to start my code: https://www.elastic.co/guide/en/elasticsearch/client/java-rest/master/java-rest-high.html But I got a exception: ElasticsearchStatusException\[Elasticsearch exception \[type=index\_… --- ## [How can I parse nested JSON strings to JSON objects?](https://discuss.elastic.co/t/how-can-i-parse-nested-json-strings-to-json-objects/287944)
**Author:** [@dudwell](https://discuss.elastic.co/u/dudwell)\ **Replies:** 6\ **Last updated:** [October 31, 2021, 2:50pm UTC](https://discuss.elastic.co/t/how-can-i-parse-nested-json-strings-to-json-objects/287944 "2021-10-31T14:50:37Z")
Could some possibly provide some guidance on how to parse out an array of JSON strings into individual JSON objects with Logstash json parser??? My logstash filter look as follows... filter { grok { add\_tag =\> \[… --- ## [Conditionally add a new field to existing data in elastic search](https://discuss.elastic.co/t/conditionally-add-a-new-field-to-existing-data-in-elastic-search/193456)
**Author:** [@feb](https://discuss.elastic.co/u/feb)\ **Replies:** 6\ **Last updated:** [August 6, 2019, 10:05am UTC](https://discuss.elastic.co/t/conditionally-add-a-new-field-to-existing-data-in-elastic-search/193456 "2019-08-06T10:05:03Z")
Hello there. New to Elastic Search. Kindly suggest a solution to add a new field conditionally to my document current data in ElasticSearch "\_index": "test", "\_type": "logs", "\_id": "AWDgIKFCvg3odC71dRbc", "\_score":… --- ## [Source hostname instead of source\_ip](https://discuss.elastic.co/t/source-hostname-instead-of-source-ip/76852)
**Author:** [@kmroz](https://discuss.elastic.co/u/kmroz)\ **Replies:** 6\ **Last updated:** [March 1, 2017, 4:37pm UTC](https://discuss.elastic.co/t/source-hostname-instead-of-source-ip/76852 "2017-03-01T16:37:10Z")
Hello, is there any way to have a source\_hostname instead of source\_ip. I am looking to monitor traffic data and it seems there is only a choice by IP but hostname would be more useful since we wouldn't have to keep trac… --- ## [What does "OK" mean for a rule?](https://discuss.elastic.co/t/what-does-ok-mean-for-a-rule/278536)
**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\ **Replies:** 5\ **Last updated:** [July 26, 2021, 12:28pm UTC](https://discuss.elastic.co/t/what-does-ok-mean-for-a-rule/278536 "2021-07-26T12:28:15Z")
Dear all =) What does it mean that a rule is "ok" as seen on this screenshot? I suppose I don't want anything but "Active"? Hugs, Sandra =) --- ## [Regexp in searching for aliases](https://discuss.elastic.co/t/regexp-in-searching-for-aliases/117269)
**Author:** [@m.hashemian](https://discuss.elastic.co/u/m.hashemian)\ **Replies:** 5\ **Last updated:** [January 30, 2018, 2:08pm UTC](https://discuss.elastic.co/t/regexp-in-searching-for-aliases/117269 "2018-01-30T14:08:51Z")
Hi, I have multiple indices and each index has multiple aliases. Is there a way to search for aliases using regexp? For example, I can use this query: curl -XGET 'localhost:9200/\_alias/2016\*?pretty' to get all aliase… --- ## [Logstash stalls with grok pattern with optional match](https://discuss.elastic.co/t/logstash-stalls-with-grok-pattern-with-optional-match/47215)
**Author:** [@kerk1v](https://discuss.elastic.co/u/kerk1v)\ **Replies:** 5\ **Last updated:** [July 4, 2016, 1:53pm UTC](https://discuss.elastic.co/t/logstash-stalls-with-grok-pattern-with-optional-match/47215 "2016-07-04T13:53:34Z")
Hi there, Got the following error when trying to match an optional part in the logs. Seems related to Ruby, here is the full log I get when i hit Ctrl+c when Logstash stalls and starts taking every bit of CPU on my 4-… --- ## [How to search Multiple dense vector fields, including nested filelds](https://discuss.elastic.co/t/how-to-search-multiple-dense-vector-fields-including-nested-filelds/326119)
**Author:** [@shijithp007](https://discuss.elastic.co/u/shijithp007)\ **Replies:** 3\ **Last updated:** [February 22, 2023, 12:58pm UTC](https://discuss.elastic.co/t/how-to-search-multiple-dense-vector-fields-including-nested-filelds/326119 "2023-02-22T12:58:04Z")
I am working on semantic search, where i try to save processed results of scraped website data. Website has title, summary, sub\_section\_headings and sub\_section\_data. i am storing title & summary as dense vectors and sub… --- ## [Ruby syntax error after updating Logstash to 5.6.7](https://discuss.elastic.co/t/ruby-syntax-error-after-updating-logstash-to-5-6-7/118028)
**Author:** [@vicpav](https://discuss.elastic.co/u/vicpav)\ **Replies:** 3\ **Last updated:** [February 2, 2018, 7:11am UTC](https://discuss.elastic.co/t/ruby-syntax-error-after-updating-logstash-to-5-6-7/118028 "2018-02-02T07:11:54Z")
To compensate the logging schema violations and to get Elasticsearch indexing happy I am trying to catch log lines where the field message\_json.msgObject.products is an array of strings instead of array of hashes. In suc… --- ## [The Best Practice to Updates Lot of Documents](https://discuss.elastic.co/t/the-best-practice-to-updates-lot-of-documents/72143)
**Author:** [@deerawan](https://discuss.elastic.co/u/deerawan)\ **Replies:** 3\ **Last updated:** [January 23, 2017, 9:11am UTC](https://discuss.elastic.co/t/the-best-practice-to-updates-lot-of-documents/72143 "2017-01-23T09:11:36Z")
Hi guys, need suggestion and recommendation. I have documents with this body and items is nested object. { "subtotal": 1000, "multiplier": 2, "total": 2000, "items": \[ { "subtotal": 100, … --- ## [Example for ingest attachment plug in with CBOR format for indexing documents](https://discuss.elastic.co/t/example-for-ingest-attachment-plug-in-with-cbor-format-for-indexing-documents/66443)
**Author:** [@radsan84](https://discuss.elastic.co/u/radsan84)\ **Replies:** 3\ **Last updated:** [November 18, 2016, 8:48am UTC](https://discuss.elastic.co/t/example-for-ingest-attachment-plug-in-with-cbor-format-for-indexing-documents/66443 "2016-11-18T08:48:33Z")
Hi, I would like to index pdf documents. I installed ealsticsearch 5.0.1 and ingest attachment plug-in. I dont want to do base64 encode while indexing. So found that there is a CBOR format, in which base64 encode is no… --- ## [Kibana Docker Login issues](https://discuss.elastic.co/t/kibana-docker-login-issues/233462)
**Author:** [@Darryn\_Cornish](https://discuss.elastic.co/u/Darryn_Cornish)\ **Replies:** 4\ **Last updated:** [June 23, 2020, 6:38pm UTC](https://discuss.elastic.co/t/kibana-docker-login-issues/233462 "2020-06-23T18:38:32Z")
I seem to be having a redirect issue with my kibana's login page on my elk stack. Below is my yml for the docker-compose. After starting this up I added myself as a user on the elasticsearch api and the user exists. Wh… --- ## [Filter for a minus value in kibana](https://discuss.elastic.co/t/filter-for-a-minus-value-in-kibana/201652)
**Author:** [@smerzlyakov](https://discuss.elastic.co/u/smerzlyakov)\ **Replies:** 4\ **Last updated:** [October 10, 2019, 9:58am UTC](https://discuss.elastic.co/t/filter-for-a-minus-value-in-kibana/201652 "2019-10-10T09:58:59Z")
I try to filter for a "-" in winlog.event\_data.SidHistory field (logs from winlogbeat). I have 7.2 ELK Stack. Filtering with filters from graphical interface simply doesn't work I try to escape - with \\ and it seems,… --- ## [Pooled storage vs individual mountpoints](https://discuss.elastic.co/t/pooled-storage-vs-individual-mountpoints/123540)
**Author:** [@aidofitz](https://discuss.elastic.co/u/aidofitz)\ **Replies:** 1\ **Last updated:** [March 12, 2018, 12:13pm UTC](https://discuss.elastic.co/t/pooled-storage-vs-individual-mountpoints/123540 "2018-03-12T12:13:18Z")
Hi, I'm setting up a new ES cluster on a set of RHEL servers, each of which 5 x 1Tb disks. I'm trying to work out the best way to configure the storage. Our RHEL admin has described two main options: Mount each of th… --- ## [Out\_of\_memory\_error reason Java heap space](https://discuss.elastic.co/t/out-of-memory-error-reason-java-heap-space/106391)
**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\ **Replies:** 4\ **Last updated:** [November 5, 2017, 12:10am UTC](https://discuss.elastic.co/t/out-of-memory-error-reason-java-heap-space/106391 "2017-11-05T00:10:01Z")
Hi Everyone, I have a multi-core system with 32 GB of RAM and 16GB is assigned to the ES\_HEAP\_SIZE. The problem is that when i am trying to upload a file of 1GB it just fails with out of memory java heap space error. I … --- ## [Work with output and metrics](https://discuss.elastic.co/t/work-with-output-and-metrics/40464)
**Author:** [@marcmga](https://discuss.elastic.co/u/marcmga)\ **Replies:** 4\ **Last updated:** [February 2, 2016, 7:58am UTC](https://discuss.elastic.co/t/work-with-output-and-metrics/40464 "2016-02-02T07:58:51Z")
Hi, I'm working with metrics. Here's my code, which in meter i use the hostname to isolate metrics. metrics { meter =\> \[ "%{host}" \] flush\_interval =\> 60 clear\_interval =\> 300 } In kibana i'm able to see the me… --- ## [Deleting nested field object with hyphens via inline scripting](https://discuss.elastic.co/t/deleting-nested-field-object-with-hyphens-via-inline-scripting/164648)
**Author:** [@kamharrah](https://discuss.elastic.co/u/kamharrah)\ **Replies:** 1\ **Last updated:** [February 4, 2019, 1:38pm UTC](https://discuss.elastic.co/t/deleting-nested-field-object-with-hyphens-via-inline-scripting/164648 "2019-02-04T13:38:18Z")
This is an issue I am running into with our v2.4 cluster (using groovy), but I can also reproduce the error in v5.6 (using painless). When I delete fields inside of an object, I send a request to the Update API with an … --- ## [How to disable the query cache](https://discuss.elastic.co/t/how-to-disable-the-query-cache/150404)
**Author:** [@bluelullaby](https://discuss.elastic.co/u/bluelullaby)\ **Replies:** 1\ **Last updated:** [September 29, 2018, 6:38am UTC](https://discuss.elastic.co/t/how-to-disable-the-query-cache/150404 "2018-09-29T06:38:58Z")
Recently, I have noticed that searching by Elasticsearch had been performed a bit slowly. So I want to test the performance among the varied query circumstances. Since Elasticsearch can cache the query result, I need to… --- ## [\_primary\_term](https://discuss.elastic.co/t/primary-term/109734)
**Author:** [@sshling](https://discuss.elastic.co/u/sshling)\ **Replies:** 1\ **Last updated:** [November 30, 2017, 12:18pm UTC](https://discuss.elastic.co/t/primary-term/109734 "2017-11-30T12:18:28Z")
What does it mean? --- ## [How Can I See the Inside of my Logstash Event Object in a Ruby Script?](https://discuss.elastic.co/t/how-can-i-see-the-inside-of-my-logstash-event-object-in-a-ruby-script/197415)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 2\ **Last updated:** [August 30, 2019, 8:15pm UTC](https://discuss.elastic.co/t/how-can-i-see-the-inside-of-my-logstash-event-object-in-a-ruby-script/197415 "2019-08-30T20:15:50Z")
Hi Logstash Jedi Masters, I’m building my first Logstash service. I want my filter to be able to do a little processing based on the data flowing through LS. My LS setup is pretty basic. Here’s my LS config file, sim… --- ## [Translate plugin using csv](https://discuss.elastic.co/t/translate-plugin-using-csv/174762)
**Author:** [@Mickael\_Humphreys](https://discuss.elastic.co/u/Mickael_Humphreys)\ **Replies:** 2\ **Last updated:** [April 2, 2019, 10:40am UTC](https://discuss.elastic.co/t/translate-plugin-using-csv/174762 "2019-04-02T10:40:12Z")
Hello, I'm trying to parse all the columns of a CSV file (except the first one, obviously). The plugin only get the second column as result of the filter. All the other column are ignored. It should be possible, acco… --- ## [Is there anything "free of cost" in X-Pack?](https://discuss.elastic.co/t/is-there-anything-free-of-cost-in-x-pack/65304)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 2\ **Last updated:** [November 8, 2016, 6:30am UTC](https://discuss.elastic.co/t/is-there-anything-free-of-cost-in-x-pack/65304 "2016-11-08T06:30:06Z")
Following up my question https://discuss.elastic.co/t/how-to-install-and-use-a-community-beat/65189 I would like to monitor my elastic cluster using X-Pack. Is there anything free to achieve this? Are all X-Pack featur… --- ## [Treat string as JSON](https://discuss.elastic.co/t/treat-string-as-json/56091)
**Author:** [@dwjvaughan](https://discuss.elastic.co/u/dwjvaughan)\ **Replies:** 2\ **Last updated:** [July 21, 2016, 2:11pm UTC](https://discuss.elastic.co/t/treat-string-as-json/56091 "2016-07-21T14:11:17Z")
I have JSON stored in an Oracle database as a CLOB (serialised JSON string). I'd like to get this into Elasticsearch as a JSON object. I have the input specified as jdbc (with the oracle connection string etc) and the… --- ## [Translate Plugin Installation](https://discuss.elastic.co/t/translate-plugin-installation/44997)
**Author:** [@Navarro](https://discuss.elastic.co/u/Navarro)\ **Replies:** 2\ **Last updated:** [March 22, 2016, 8:11am UTC](https://discuss.elastic.co/t/translate-plugin-installation/44997 "2016-03-22T08:11:29Z")
I have a server in a network without Internet connection with ELK. I'm trying to install the translate plugin but its not possible with the command ./plugin install logstash-filter-translate but i cant find a way to d… --- ## [Daily Snapshot script question](https://discuss.elastic.co/t/daily-snapshot-script-question/108762)
**Author:** [@nsur1](https://discuss.elastic.co/u/nsur1)\ **Replies:** 3\ **Last updated:** [November 22, 2017, 9:01pm UTC](https://discuss.elastic.co/t/daily-snapshot-script-question/108762 "2017-11-22T21:01:29Z")
I have a snapshot repository in which I would like to have backups of my daily indices. I wanted to automate this process by creating a snapshot of the previous day's index daily. My script thus far is: yesterday="$(da… --- ## [Update with script and upsert issues](https://discuss.elastic.co/t/update-with-script-and-upsert-issues/90693)
**Author:** [@kbridburg](https://discuss.elastic.co/u/kbridburg)\ **Replies:** 3\ **Last updated:** [June 27, 2017, 1:31am UTC](https://discuss.elastic.co/t/update-with-script-and-upsert-issues/90693 "2017-06-27T01:31:22Z")
I'm trying to send the following {"update":{"\_index":"indexName","\_type":"textt","\_id":"2"}} {"script":{"inline":"if(ctx.\_source.version\ "field" is a required parameter](https://discuss.elastic.co/t/metricbeat-kibana-dashboards-esaggs-field-is-a-required-parameter/225860)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 5\ **Last updated:** [April 1, 2020, 5:41pm UTC](https://discuss.elastic.co/t/metricbeat-kibana-dashboards-esaggs-field-is-a-required-parameter/225860 "2020-04-01T17:41:03Z")
Hello, I've just deployed a cluster in the Elastic Cloud and configured a metricbeat agent to send metrics to that cluster. Here is my metricbeat.yml: name: "xyz.acme.co" tags: \["ACME", "acme.co"\] setup.ilm.check\_ex… --- ## [Limited access user : role 'kibana\_user' can still manage spaces](https://discuss.elastic.co/t/limited-access-user-role-kibana-user-can-still-manage-spaces/227616)
**Author:** [@laurentml](https://discuss.elastic.co/u/laurentml)\ **Replies:** 7\ **Last updated:** [April 15, 2020, 9:51pm UTC](https://discuss.elastic.co/t/limited-access-user-role-kibana-user-can-still-manage-spaces/227616 "2020-04-15T21:51:41Z")
Hi all, and thx a lot for those wonderful ELK tools. I'm trying to configure a limited-access user, able to only create visualizations for a given space, limited to a specific index, with ELK 7.6.0. User shall not be ab… [Previous page](https://discuss.elastic.co/top.md?page=796&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=798&per_page=50&period=all)