# Top **URL:** https://discuss.elastic.co/top.md?page=810&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 811 --- ## [Range Query in Elasticsearch Doesn't Filter on Certain Number Fields](https://discuss.elastic.co/t/range-query-in-elasticsearch-doesnt-filter-on-certain-number-fields/102363)
**Author:** [@schoffelman](https://discuss.elastic.co/u/schoffelman)\ **Replies:** 4\ **Last updated:** [October 1, 2017, 5:14am UTC](https://discuss.elastic.co/t/range-query-in-elasticsearch-doesnt-filter-on-certain-number-fields/102363 "2017-10-01T05:14:26Z")
I'm running the following query against my ES instance 5.4. My year range and postal code works great, but as soon as I add in the price or millage range, it returns zero results. Here's the cURL statement (I converted i… --- ## [入力データに後から連番を付与する方法について](https://discuss.elastic.co/t/topic/87203)
**Author:** [@abu001](https://discuss.elastic.co/u/abu001)\ **Replies:** 4\ **Last updated:** [May 30, 2017, 7:23am UTC](https://discuss.elastic.co/t/topic/87203 "2017-05-30T07:23:22Z")
お世話になります。 Kibanaで、棒グラフを作成するさいに、連続した番号毎に値を表示させたいと思っています。 前提条件として、インプットデータは連番情報をもっていません。そのため、logstashの設定で後から付与できないかアドバイス頂きたいです。add\_fieldなどを駆使して、実現できないか調べていたのですが、なかなか解にたどり着きません。宜しくお願い致します。 --- ## [GeoIP2 plugin install throws an error on LS 5.0](https://discuss.elastic.co/t/geoip2-plugin-install-throws-an-error-on-ls-5-0/64328)
**Author:** [@brian.jones](https://discuss.elastic.co/u/brian.jones)\ **Replies:** 4\ **Last updated:** [November 5, 2016, 10:00am UTC](https://discuss.elastic.co/t/geoip2-plugin-install-throws-an-error-on-ls-5-0/64328 "2016-11-05T10:00:46Z")
After upgrading to Logstash 5 I am unable to install the geoip2 plugin (to handle IPv6 addresses). Any help would be great. Error output: ./logstash-plugin install logstash-filter-geoip2 Validating logstash-fil… --- ## [Filebeat docker input type with different paths](https://discuss.elastic.co/t/filebeat-docker-input-type-with-different-paths/293495)
**Author:** [@sahinguler](https://discuss.elastic.co/u/sahinguler)\ **Replies:** 3\ **Last updated:** [January 6, 2022, 6:05am UTC](https://discuss.elastic.co/t/filebeat-docker-input-type-with-different-paths/293495 "2022-01-06T06:05:02Z")
Hi everyone, I use filebeat for storing docker logs. My docker containers logs path is /home/docker/containers/${data.docker.container.id}/\*.log. But filebeat scans /var/lib/docker/containers/${data.docker.container.id… --- ## [Sincedb doesn't updated until tail reaches the end of the file](https://discuss.elastic.co/t/sincedb-doesnt-updated-until-tail-reaches-the-end-of-the-file/36116)
**Author:** [@no\_jihun](https://discuss.elastic.co/u/no_jihun)\ **Replies:** 3\ **Last updated:** [September 9, 2016, 10:30am UTC](https://discuss.elastic.co/t/sincedb-doesnt-updated-until-tail-reaches-the-end-of-the-file/36116 "2016-09-09T10:30:35Z")
hello. it seems sincedb updating does not occur until TAIL reaches the end of the file. with this configuration input { file { path =\> "/home1/.logstash/json\_input/deco.json.\*" codec =\> … --- ## [Spark ElasticSearch](https://discuss.elastic.co/t/spark-elasticsearch/49595)
**Author:** [@gauravprasad](https://discuss.elastic.co/u/gauravprasad)\ **Replies:** 3\ **Last updated:** [May 18, 2016, 6:46am UTC](https://discuss.elastic.co/t/spark-elasticsearch/49595 "2016-05-18T06:46:34Z")
While Fetching the record from ElasticSearch using spark I m getting bellow error. Caused by: org.apache.spark.util.TaskCompletionListenerException: ActionRequestValidationException\[Validation Failed: 1: no scroll ids… --- ## [FSCrawler giving File does not exist issue](https://discuss.elastic.co/t/fscrawler-giving-file-does-not-exist-issue/234377)
**Author:** [@Umesh\_S\_Bhimani](https://discuss.elastic.co/u/Umesh_S_Bhimani)\ **Replies:** 5\ **Last updated:** [May 27, 2020, 4:47am UTC](https://discuss.elastic.co/t/fscrawler-giving-file-does-not-exist-issue/234377 "2020-05-27T04:47:25Z")
Hi, I am trying to work on indexing attachments through fscrwaler using SSH (22). I have elastic search installed on one machine & trying to read through data from other machine in the same network, but getting a file … --- ## [Figuring out the optimal number of shards](https://discuss.elastic.co/t/figuring-out-the-optimal-number-of-shards/4677)
**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\ **Replies:** 5\ **Last updated:** [June 24, 2011, 9:54am UTC](https://discuss.elastic.co/t/figuring-out-the-optimal-number-of-shards/4677 "2011-06-24T09:54:44Z")
Hello, Is the following the correct (and complete!) thinking one should apply when considering how many shards to specify when creating an index? Set the number of shards to a high number if you think the number o… --- ## [How to increase disk size for Elastic search](https://discuss.elastic.co/t/how-to-increase-disk-size-for-elastic-search/249925)
**Author:** [@pnamburi](https://discuss.elastic.co/u/pnamburi)\ **Replies:** 1\ **Last updated:** [September 28, 2020, 3:44am UTC](https://discuss.elastic.co/t/how-to-increase-disk-size-for-elastic-search/249925 "2020-09-28T03:44:25Z")
I just executed the below command which returned the elastic search disk space GET \_cat/nodes?v&h=id,diskTotal,diskUsed,diskAvail,diskUsedPercent Output: id diskTotal diskUsed diskAvail diskUsedPercent qzxs 9.6gb 8.7… --- ## [Failed to execute \[org.elasticsearch.action.search.SearchRequest@31e1eed3\] lastShard \[true\]](https://discuss.elastic.co/t/failed-to-execute-org-elasticsearch-action-search-searchrequest-31e1eed3-lastshard-true/110156)
**Author:** [@yedukondalu](https://discuss.elastic.co/u/yedukondalu)\ **Replies:** 1\ **Last updated:** [December 4, 2017, 3:48pm UTC](https://discuss.elastic.co/t/failed-to-execute-org-elasticsearch-action-search-searchrequest-31e1eed3-lastshard-true/110156 "2017-12-04T15:48:14Z")
\[2017-12-04 14:04:48,600\]\[DEBUG\]\[action.search.type \] \[Morgan Le Fay\] \[cms-2017-w41\]\[0\], node\[b2Jk8MLcR9evD012hWulmg\], \[P\], s\[STARTED\]: Failed to execute \[org.elasticsearch.action.search.SearchRequest@5ff4c8aa\] las… --- ## [How to do case insensitive sort in ES 5.1+?](https://discuss.elastic.co/t/how-to-do-case-insensitive-sort-in-es-5-1/69481)
**Author:** [@tlovett1](https://discuss.elastic.co/u/tlovett1)\ **Replies:** 1\ **Last updated:** [December 20, 2016, 10:42am UTC](https://discuss.elastic.co/t/how-to-do-case-insensitive-sort-in-es-5-1/69481 "2016-12-20T10:42:23Z")
Hello, previously I used a text field with lowercase analyzer. This is no longer possible apparently as I get a field data warning. What is the best way to achieve this? Thanks! --- ## [Aggregation on boolean](https://discuss.elastic.co/t/aggregation-on-boolean/19187)
**Author:** [@Fabian\_Kostring](https://discuss.elastic.co/u/Fabian_Kostring)\ **Replies:** 1\ **Last updated:** [August 11, 2014, 8:51am UTC](https://discuss.elastic.co/t/aggregation-on-boolean/19187 "2014-08-11T08:51:21Z")
Hey there! I got one index with two types. I want to do a aggragtion query. This is my query. GET index1/type1,type2/\_search { "query": { "match\_all": {} }, "size" : 0, "aggs": { "… --- ## [After X-pack installation lost the indexes from kibana](https://discuss.elastic.co/t/after-x-pack-installation-lost-the-indexes-from-kibana/134921)
**Author:** [@vishnuduttpv](https://discuss.elastic.co/u/vishnuduttpv)\ **Replies:** 8\ **Last updated:** [July 9, 2018, 5:00am UTC](https://discuss.elastic.co/t/after-x-pack-installation-lost-the-indexes-from-kibana/134921 "2018-07-09T05:00:55Z")
Hi, Recently I have installed the X-Pack in the Kibana AWA in Elastic Search. Following is my Platform, OS - CentOS 7.4 Kibana - 6.2 Logstash - 6.2 ES - 6.2 X-Pack - 6.2 Previously before x-pack installation all … --- ## [Beats starting kit](https://discuss.elastic.co/t/beats-starting-kit/33640)
**Author:** [@mrkschan](https://discuss.elastic.co/u/mrkschan)\ **Replies:** 8\ **Last updated:** [November 9, 2015, 3:54pm UTC](https://discuss.elastic.co/t/beats-starting-kit/33640 "2015-11-09T15:54:10Z")
Hey beats team, I'm really happy to hear the concept of Sysbeat at https://discuss.elastic.co/t/is-there-interest-in-something-like-a-monitbeat/32316/2?u=mrkschan. Though, before that we may need to have more specific … --- ## [Data Archival in Elastic Search](https://discuss.elastic.co/t/data-archival-in-elastic-search/304442)
**Author:** [@Nikhil\_Ray5](https://discuss.elastic.co/u/Nikhil_Ray5)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 11:18pm UTC](https://discuss.elastic.co/t/data-archival-in-elastic-search/304442 "2022-05-11T23:18:28Z")
Can you help me with how to archive data in Elasticsearch. that I don't know what is curator and data shrink. I am fresher to Elasticsearch. from where I have to start studying and what all things I have to do? --- ## [Sql Query vs Dsl Query](https://discuss.elastic.co/t/sql-query-vs-dsl-query/247048)
**Author:** [@Nupur](https://discuss.elastic.co/u/Nupur)\ **Replies:** 2\ **Last updated:** [September 10, 2020, 1:32pm UTC](https://discuss.elastic.co/t/sql-query-vs-dsl-query/247048 "2020-09-10T13:32:07Z")
querying through sql access api or querying through dsl .. which is faster in searching . Is there is performance difference in both. --- ## [Request Serialization in NEST 6](https://discuss.elastic.co/t/request-serialization-in-nest-6/147615)
**Author:** [@thespatt](https://discuss.elastic.co/u/thespatt)\ **Replies:** 2\ **Last updated:** [September 8, 2018, 3:36am UTC](https://discuss.elastic.co/t/request-serialization-in-nest-6/147615 "2018-09-08T03:36:26Z")
I used to be able to log the output of the old Client.Serializer and paste it right into Dev Tools in Kibana 5.x and earlier. Now SourceSerializer.SerializeToString outputs all possible fields with null values and pasti… --- ## [How does connection pooling internally work with logstash http plugin](https://discuss.elastic.co/t/how-does-connection-pooling-internally-work-with-logstash-http-plugin/143891)
**Author:** [@Sruthi\_Grace](https://discuss.elastic.co/u/Sruthi_Grace)\ **Replies:** 2\ **Last updated:** [September 2, 2018, 10:27am UTC](https://discuss.elastic.co/t/how-does-connection-pooling-internally-work-with-logstash-http-plugin/143891 "2018-09-02T10:27:38Z")
The default pool max for http output plugin is 50 connections . What happens if all the 50 connections to send out are occupied and there are more logs lines coming into the logstash but all the 50 out connections are st… --- ## [Logstash Redshift JDBC input plugin drivers](https://discuss.elastic.co/t/logstash-redshift-jdbc-input-plugin-drivers/134999)
**Author:** [@bharath\_naidu](https://discuss.elastic.co/u/bharath_naidu)\ **Replies:** 2\ **Last updated:** [June 9, 2018, 4:29pm UTC](https://discuss.elastic.co/t/logstash-redshift-jdbc-input-plugin-drivers/134999 "2018-06-09T16:29:40Z")
Hi All, Can any one help me with setting up of Logstash JDBC drivers for Redshift DB? Use case: I need to pipeline the data from AWS Redshift database to Logstash-elasticsearch. Any help on this will be appreciated. R… --- ## [Logstash line break](https://discuss.elastic.co/t/logstash-line-break/32511)
**Author:** [@Erik\_Parienty](https://discuss.elastic.co/u/Erik_Parienty)\ **Replies:** 2\ **Last updated:** [October 20, 2015, 3:00pm UTC](https://discuss.elastic.co/t/logstash-line-break/32511 "2015-10-20T15:00:39Z")
i have this config with a long line grok { match =\> { "message" =\> "%{DATESTAMP:LogDate},%{NUMBER:RamUsedPercent:float},%{NUMBER:CpuPercent:float},%{NUMBER:DiskFreePercentC:float},%{NUMBER:DiskFreePercentD:float}… --- ## [Remove instance from ECE cluster on ECE 2.4](https://discuss.elastic.co/t/remove-instance-from-ece-cluster-on-ece-2-4/218005)
**Author:** [@tazikm](https://discuss.elastic.co/u/tazikm)\ **Replies:** 4\ **Last updated:** [February 6, 2020, 9:28pm UTC](https://discuss.elastic.co/t/remove-instance-from-ece-cluster-on-ece-2-4/218005 "2020-02-06T21:28:14Z")
Hi, I want to remove definively an instance from one of my cluster on ECE 2.4 please let know how to complete this thanks in advance Kamal --- ## [REST interface for logstash input plugin](https://discuss.elastic.co/t/rest-interface-for-logstash-input-plugin/73915)
**Author:** [@mkelkar](https://discuss.elastic.co/u/mkelkar)\ **Replies:** 4\ **Last updated:** [February 8, 2017, 4:03pm UTC](https://discuss.elastic.co/t/rest-interface-for-logstash-input-plugin/73915 "2017-02-08T16:03:05Z")
Hi All, I am trying to create a REST interface for my logstash input plugin to interact with it. I want to expose some REST endpoints so that I can index documents in logstash through my input plugin. I am using… --- ## [Heatmap color scale](https://discuss.elastic.co/t/heatmap-color-scale/86843)
**Author:** [@fanus](https://discuss.elastic.co/u/fanus)\ **Replies:** 6\ **Last updated:** [May 24, 2017, 8:18am UTC](https://discuss.elastic.co/t/heatmap-color-scale/86843 "2017-05-24T08:18:25Z")
Please help - I need to control the heatmap geopoint color (in a Kibana Tilemap) based on the value of a field in each document. For example (for integer values) if the value is 1, the plotted heat map geopoint must be d… --- ## [Move all @metadata fields at once](https://discuss.elastic.co/t/move-all-metadata-fields-at-once/175331)
**Author:** [@gruselglatz](https://discuss.elastic.co/u/gruselglatz)\ **Replies:** 3\ **Last updated:** [April 4, 2019, 11:42am UTC](https://discuss.elastic.co/t/move-all-metadata-fields-at-once/175331 "2019-04-04T11:42:09Z")
Hi, is there a way to move all @metadata fields at once so i can preserve it over multiple logstash instances until it gets to ES? Maybe something like a recursive mutate { rename =\> { "@metadata" =\> "meta" } } becau… --- ## [Messages grok parse failure](https://discuss.elastic.co/t/messages-grok-parse-failure/91806)
**Author:** [@mvelez83](https://discuss.elastic.co/u/mvelez83)\ **Replies:** 3\ **Last updated:** [July 5, 2017, 9:33am UTC](https://discuss.elastic.co/t/messages-grok-parse-failure/91806 "2017-07-05T09:33:58Z")
Hello, I'm very new to creating Grok filters and I was going to create one for /var/log/messages (For named). Here is my logstash configuration I attempted to use: input { redis { host =\> "redis01.nyc.aevtech.net" … --- ## [How to change the Base URL of Kibana](https://discuss.elastic.co/t/how-to-change-the-base-url-of-kibana/80662)
**Author:** [@PrabakarKaruppasamy](https://discuss.elastic.co/u/PrabakarKaruppasamy)\ **Replies:** 3\ **Last updated:** [March 31, 2017, 1:17pm UTC](https://discuss.elastic.co/t/how-to-change-the-base-url-of-kibana/80662 "2017-03-31T13:17:42Z")
Can we change the base URL of Kibana? http://localhost:5601/app/kibana#/management/kibana/index/?\_g=() Can we change the kibana text into some other? http://localhost:5601/app/xyz#/management/kibana/index/?\_g=() --- ## [Logstash replace: contatenate string with other field values](https://discuss.elastic.co/t/logstash-replace-contatenate-string-with-other-field-values/66731)
**Author:** [@slinky](https://discuss.elastic.co/u/slinky)\ **Replies:** 5\ **Last updated:** [November 25, 2016, 3:02pm UTC](https://discuss.elastic.co/t/logstash-replace-contatenate-string-with-other-field-values/66731 "2016-11-25T15:02:21Z")
In the docs there is this replace example: filter { mutate { replace =\> { "message" =\> "%{source\_host}: My new message" } } } Now I wanna do something like this: filter { mutate { replace =\> { "autono… --- ## [How to run beats in linux 64 bit machine](https://discuss.elastic.co/t/how-to-run-beats-in-linux-64-bit-machine/39873)
**Author:** [@rajkamalkool6](https://discuss.elastic.co/u/rajkamalkool6)\ **Replies:** 5\ **Last updated:** [March 21, 2016, 11:57am UTC](https://discuss.elastic.co/t/how-to-run-beats-in-linux-64-bit-machine/39873 "2016-03-21T11:57:29Z")
I am trying to start the packet beat in my linux machine(64bit). I am using the below command , ./packetbeat -e -c packetbeat.yml. The system is waiting silently without throwing any error or any message. Am I doing … --- ## [Kibanaでのデータテーブル表示について](https://discuss.elastic.co/t/kibana/292955)
**Author:** [@takadev](https://discuss.elastic.co/u/takadev)\ **Replies:** 2\ **Last updated:** [December 27, 2021, 9:27am UTC](https://discuss.elastic.co/t/kibana/292955 "2021-12-27T09:27:06Z")
kibanaを利用して、ElasitcSearchに保存されているデータを表形式で表示できないか確認を行っております。 Visualizeのdatatableにてテーブル表示できないか確認してみましたが、集約されて表示されるため、期待する結果となりませんでした。 データをレコード毎に表示する方法をご教示頂けませんでしょうか。 目的 データ例(6件)をレコード毎にテーブル表示し、ダッシュボードを共有したい。 index構… --- ## [Query & filter return no result](https://discuss.elastic.co/t/query-filter-return-no-result/26982)
**Author:** [@Frederic\_Laurent](https://discuss.elastic.co/u/Frederic_Laurent)\ **Replies:** 1\ **Last updated:** [August 7, 2015, 7:38am UTC](https://discuss.elastic.co/t/query-filter-return-no-result/26982 "2015-08-07T07:38:57Z")
Hello all, I'm trying to make requests (very simples) on a very small dataset : 4 documents available here What I want (for the beginning) : unclosed units with title or name contains CARDIO The idea is to f… --- ## [Watcher Webhook s\_s\_l\_handshake\_exception](https://discuss.elastic.co/t/watcher-webhook-s-s-l-handshake-exception/278551)
**Author:** [@yoli1888](https://discuss.elastic.co/u/yoli1888)\ **Replies:** 4\ **Last updated:** [July 19, 2021, 5:52pm UTC](https://discuss.elastic.co/t/watcher-webhook-s-s-l-handshake-exception/278551 "2021-07-19T17:52:20Z")
I am using 7.9.1. Kibana is running in a docker container. Trying to setup a Webhook action in Watcher with the following code: "webhook\_2" : { "webhook" : { "scheme" : "https", "host" : "e… --- ## [Number of nodes for primary and replicas required for resilience](https://discuss.elastic.co/t/number-of-nodes-for-primary-and-replicas-required-for-resilience/223377)
**Author:** [@jkhere](https://discuss.elastic.co/u/jkhere)\ **Replies:** 4\ **Last updated:** [March 12, 2020, 5:16pm UTC](https://discuss.elastic.co/t/number-of-nodes-for-primary-and-replicas-required-for-resilience/223377 "2020-03-12T17:16:50Z")
I am building a large elasticsearch cluster. I will have probably have around 100 to 150 primary shards. Since the dataset is very large, I am planning to limit the number of shards per node to max of 3. So for 100 prim… --- ## [Filebeat - IIS Module - No geopoint](https://discuss.elastic.co/t/filebeat-iis-module-no-geopoint/149000)
**Author:** [@Mudasar\_Ellahi](https://discuss.elastic.co/u/Mudasar_Ellahi)\ **Replies:** 4\ **Last updated:** [September 19, 2018, 6:09am UTC](https://discuss.elastic.co/t/filebeat-iis-module-no-geopoint/149000 "2018-09-19T06:09:49Z")
Hi everyone, I am trying to send IIS logs of one server to elasticsearch for which I am using Filebeat IIS module. I am able to send IIS logs to elasticsearch directly only problem is Index mapping, I have location fie… --- ## [Elasticsearch stats aggregation corrupt float number precision](https://discuss.elastic.co/t/elasticsearch-stats-aggregation-corrupt-float-number-precision/232926)
**Author:** [@JavaDeveloper](https://discuss.elastic.co/u/JavaDeveloper)\ **Replies:** 3\ **Last updated:** [May 21, 2020, 3:18pm UTC](https://discuss.elastic.co/t/elasticsearch-stats-aggregation-corrupt-float-number-precision/232926 "2020-05-21T15:18:32Z")
Hi everyone. I'm using stats aggregation (max, min, avg) over some documents with float number fields. These float numbers are saved with two decimal point in documents (for example 69.43). But the stats aggregation ou… --- ## [String field to date, parsing from xpath](https://discuss.elastic.co/t/string-field-to-date-parsing-from-xpath/80872)
**Author:** [@daian.martinho](https://discuss.elastic.co/u/daian.martinho)\ **Replies:** 3\ **Last updated:** [April 3, 2017, 2:49am UTC](https://discuss.elastic.co/t/string-field-to-date-parsing-from-xpath/80872 "2017-04-03T02:49:26Z")
Hi, I'm trying to parse string field as date. i got the value from an xml using xpath.. xpath =\>\[ "/ReportHost/HostProperties/tag\[@name='HOST\_START'\]/text()","report\_host\_start"… --- ## [Float numbers with comma as a decimal](https://discuss.elastic.co/t/float-numbers-with-comma-as-a-decimal/181619)
**Author:** [@humartinez](https://discuss.elastic.co/u/humartinez)\ **Replies:** 1\ **Last updated:** [May 17, 2019, 8:58pm UTC](https://discuss.elastic.co/t/float-numbers-with-comma-as-a-decimal/181619 "2019-05-17T20:58:34Z")
Hi there, I've got an issue with elastic while ingesting some date. {"error":{"root\_cause":\[{"type":"mapper\_parsing\_exception","reason":"failed to parse field \[costo\_hora\_empleado\] of type \[integer\]"}\],"type":"mapper\_p… --- ## [How can I remove a service?](https://discuss.elastic.co/t/how-can-i-remove-a-service/136904)
**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\ **Replies:** 1\ **Last updated:** [June 21, 2018, 3:46pm UTC](https://discuss.elastic.co/t/how-can-i-remove-a-service/136904 "2018-06-21T15:46:47Z")
I renamed a service and now I have the new name and the old name. How can I remove the old service name? --- ## [Logstash sending same message to multiple indexes in ES](https://discuss.elastic.co/t/logstash-sending-same-message-to-multiple-indexes-in-es/92464)
**Author:** [@Zeal\_Vora](https://discuss.elastic.co/u/Zeal_Vora)\ **Replies:** 1\ **Last updated:** [July 12, 2017, 12:29pm UTC](https://discuss.elastic.co/t/logstash-sending-same-message-to-multiple-indexes-in-es/92464 "2017-07-12T12:29:35Z")
Hi We are using Logstash to send application logs to respective index in ElasticSearch. We have 2 applications which are sending logs to Logstash from filebeat. Each filebeat configuration for application has a resp… --- ## [ElasticSearch and RabbitMQ as data source](https://discuss.elastic.co/t/elasticsearch-and-rabbitmq-as-data-source/12659)
**Author:** [@11124](https://discuss.elastic.co/u/11124)\ **Replies:** 7\ **Last updated:** [June 10, 2014, 3:13pm UTC](https://discuss.elastic.co/t/elasticsearch-and-rabbitmq-as-data-source/12659 "2014-06-10T15:13:03Z")
Hi all, I am new to RabbitMQ and ElasticSearch. I am trying to create a setup where RabbitMQ collects messages from some sources and publish then in ElasticSearch for indexing. What I have done so far: Install… --- ## [Getting logs from application and service log on the event viewer](https://discuss.elastic.co/t/getting-logs-from-application-and-service-log-on-the-event-viewer/169226)
**Author:** [@yaharin\_ben\_ayon](https://discuss.elastic.co/u/yaharin_ben_ayon)\ **Replies:** 2\ **Last updated:** [February 20, 2019, 3:12pm UTC](https://discuss.elastic.co/t/getting-logs-from-application-and-service-log-on-the-event-viewer/169226 "2019-02-20T15:12:19Z")
Hey guys, can i get logs from the folder "application and service log" on the event viewer and to transfer them with winlogbeat? i can see it only gets logs from the folder windows logs. --- ## [type":"date\_time\_exception","reason":"Invalid date 'February 29' as '1970' is not a leap year"}](https://discuss.elastic.co/t/type-date-time-exception-reason-invalid-date-february-29-as-1970-is-not-a-leap-year/205570)
**Author:** [@GeoffreyCutaia](https://discuss.elastic.co/u/GeoffreyCutaia)\ **Replies:** 5\ **Last updated:** [October 31, 2019, 12:42pm UTC](https://discuss.elastic.co/t/type-date-time-exception-reason-invalid-date-february-29-as-1970-is-not-a-leap-year/205570 "2019-10-31T12:42:30Z")
Hi, We have some issues trying to index documents with date fields set on the 29 of February. Below an example : {"type":"mapper\_parsing\_exception","reason":"failed to parse field \[date\_updated\] of type \[date\] in docu… --- ## [Use ${hostname} in var.paths](https://discuss.elastic.co/t/use-hostname-in-var-paths/155451)
**Author:** [@shiv94](https://discuss.elastic.co/u/shiv94)\ **Replies:** 5\ **Last updated:** [November 8, 2018, 3:25pm UTC](https://discuss.elastic.co/t/use-hostname-in-var-paths/155451 "2018-11-08T15:25:55Z")
Having 3 nodes in a cluster, enabled elasticsearch module and setting the var.paths to elasticsearch logs path. In these 3 nodes logs are at /var/log/elasticsearch/{hostname}/\*.log. Trying to replace the var.paths in all… --- ## [Vega not rendering Word Cloud](https://discuss.elastic.co/t/vega-not-rendering-word-cloud/192793)
**Author:** [@crazyphil](https://discuss.elastic.co/u/crazyphil)\ **Replies:** 3\ **Last updated:** [July 31, 2019, 12:08pm UTC](https://discuss.elastic.co/t/vega-not-rendering-word-cloud/192793 "2019-07-31T12:08:02Z")
I'm trying to build a word cloud using Vega and running into an issue where I can't seem to get at the data that I know is loaded. I'm not sure what value I use for the "field" references, I may also need a transform in… --- ## [Indexing eml File](https://discuss.elastic.co/t/indexing-eml-file/177791)
**Author:** [@vaibhav8600](https://discuss.elastic.co/u/vaibhav8600)\ **Replies:** 4\ **Last updated:** [April 22, 2019, 7:46am UTC](https://discuss.elastic.co/t/indexing-eml-file/177791 "2019-04-22T07:46:08Z")
i am Trying to index eml file can anybody help me ... how to index eml file....? --- ## [Bigint values in elasticsearch](https://discuss.elastic.co/t/bigint-values-in-elasticsearch/72786)
**Author:** [@vinodMS](https://discuss.elastic.co/u/vinodMS)\ **Replies:** 1\ **Last updated:** [January 25, 2017, 3:30pm UTC](https://discuss.elastic.co/t/bigint-values-in-elasticsearch/72786 "2017-01-25T15:30:05Z")
currently I am using logstash to query the mysql db and index data in elasticsearch. I currently see the following error, @data={"id"=\>592753, "source"=\>"Add new address", "target"=\>"加入新的地址", "lastmodified"=\>"2008-04-0… --- ## [Show / Hide Global Filter Bar in Kibana](https://discuss.elastic.co/t/show-hide-global-filter-bar-in-kibana/240646)
**Author:** [@jeeva](https://discuss.elastic.co/u/jeeva)\ **Replies:** 2\ **Last updated:** [July 16, 2020, 12:20pm UTC](https://discuss.elastic.co/t/show-hide-global-filter-bar-in-kibana/240646 "2020-07-16T12:20:15Z")
Hi Team, We would like to hide Global Filter Bar( KQL Search and Calendar controls) in all our dashboard to end-users , we have tried to do in filter bar styles but it's not working. Can you please help to use attain t… --- ## [Logstash Input ElasticSearch "End of file" error -- Cannot reindex](https://discuss.elastic.co/t/logstash-input-elasticsearch-end-of-file-error-cannot-reindex/51072)
**Author:** [@ddidier](https://discuss.elastic.co/u/ddidier)\ **Replies:** 2\ **Last updated:** [September 5, 2016, 3:14pm UTC](https://discuss.elastic.co/t/logstash-input-elasticsearch-end-of-file-error-cannot-reindex/51072 "2016-09-05T15:14:00Z")
Hi, I'm quite new to ELK and I'm trying to re-index logs with Logstash. I'm using the ES input plugin to read from an existing index, do some transformations, then write to a new index with the ES output plugin. Ver… --- ## [RPM repositories mirroring](https://discuss.elastic.co/t/rpm-repositories-mirroring/18467)
**Author:** [@Dominic\_DePasquale](https://discuss.elastic.co/u/Dominic_DePasquale)\ **Replies:** 2\ **Last updated:** [August 17, 2016, 8:52am UTC](https://discuss.elastic.co/t/rpm-repositories-mirroring/18467 "2016-08-17T08:52:22Z")
Can someone point me in the right direction for running a local mirror of the elasticsearch RPM repositories? Specifically, is there an rsync connection available? Thanks! -- You received this message because… --- ## [8.4.2: "incompatible encodings: CP850 and UTF-8" - Issue sending DB records to Elastic after upgrade to Elastic 8.4.2 from 8.3.2](https://discuss.elastic.co/t/8-4-2-incompatible-encodings-cp850-and-utf-8-issue-sending-db-records-to-elastic-after-upgrade-to-elastic-8-4-2-from-8-3-2/315697)
**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\ **Replies:** 4\ **Last updated:** [November 8, 2022, 8:59am UTC](https://discuss.elastic.co/t/8-4-2-incompatible-encodings-cp850-and-utf-8-issue-sending-db-records-to-elastic-after-upgrade-to-elastic-8-4-2-from-8-3-2/315697 "2022-11-08T08:59:40Z")
Hi All, I've been running the 8.3.2 Elastic products for some months (ELK), using logstash to poll an MSSQL DB regularly and pull the data into Elasticsearch. This has been working without any significant problems. I … --- ## [How is log4j-1.2.17 jar being installed on my system](https://discuss.elastic.co/t/how-is-log4j-1-2-17-jar-being-installed-on-my-system/312971)
**Author:** [@brilong](https://discuss.elastic.co/u/brilong)\ **Replies:** 1\ **Last updated:** [August 26, 2022, 1:10am UTC](https://discuss.elastic.co/t/how-is-log4j-1-2-17-jar-being-installed-on-my-system/312971 "2022-08-26T01:10:16Z")
I am not very familiar with logstash but I am trying to determine why the file /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-log4j-3.1.3-java/vendor/jar-dependencies/runtime-jars/log4j-1.2.17.jar exis… [Previous page](https://discuss.elastic.co/top.md?page=809&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=811&per_page=50&period=all)