# Top **URL:** https://discuss.elastic.co/top.md?page=827&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 828 --- ## [Query to fetch data for current month](https://discuss.elastic.co/t/query-to-fetch-data-for-current-month/331034)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 7\ **Last updated:** [May 5, 2023, 1:33pm UTC](https://discuss.elastic.co/t/query-to-fetch-data-for-current-month/331034 "2023-05-05T13:33:04Z")
Hi all, I'm trying to fetch data only for current month of april 2023. For example, I have a query filter condition in my search bar in my kibana data table as configuredDate \> now-30d which gives me data for past 1… --- ## [Average over buckets doc\_count](https://discuss.elastic.co/t/average-over-buckets-doc-count/18355)
**Author:** [@Demetrius\_Nunes](https://discuss.elastic.co/u/Demetrius_Nunes)\ **Replies:** 1\ **Last updated:** [June 26, 2014, 5:40pm UTC](https://discuss.elastic.co/t/average-over-buckets-doc-count/18355 "2014-06-26T17:40:35Z")
Hi there, Is there a way to calculate the average over the doc\_count result of a bucket aggregation? For instance, I have this aggregation query: GET channel/Subscription/\_search { "size": 1, "aggs": {… --- ## [Can't find license webform for 5.6 (to upgrade)](https://discuss.elastic.co/t/cant-find-license-webform-for-5-6-to-upgrade/150504)
**Author:** [@paul\_m](https://discuss.elastic.co/u/paul_m)\ **Replies:** 5\ **Last updated:** [October 2, 2018, 6:05am UTC](https://discuss.elastic.co/t/cant-find-license-webform-for-5-6-to-upgrade/150504 "2018-10-02T06:05:24Z")
Hi there, I'm trying to upgrade our v5.6 ELK to v6.x, and the update assistant in Kibana is locked behind an expired xpack license. I remember getting the basic license through a webform, and the current documentation t… --- ## [Compare Two Indices using Watcher](https://discuss.elastic.co/t/compare-two-indices-using-watcher/84101)
**Author:** [@adonahoe](https://discuss.elastic.co/u/adonahoe)\ **Replies:** 5\ **Last updated:** [May 15, 2017, 9:07pm UTC](https://discuss.elastic.co/t/compare-two-indices-using-watcher/84101 "2017-05-15T21:07:59Z")
Hello All, I was wondering how I could possible compare two indices using watcher? For instance lets say I have one index with firewall data and I have another index that contains a blacklist. I was wondering how I cou… --- ## [RESOLVED: Select a grok pattern and add “my\_body” field](https://discuss.elastic.co/t/resolved-select-a-grok-pattern-and-add-my-body-field/69220)
**Author:** [@bo9354](https://discuss.elastic.co/u/bo9354)\ **Replies:** 5\ **Last updated:** [December 22, 2016, 11:44pm UTC](https://discuss.elastic.co/t/resolved-select-a-grok-pattern-and-add-my-body-field/69220 "2016-12-22T23:44:32Z")
I want to be able to select a grok pattern and add “my\_body” field to it to force an action later. I can get it to add multiple tags or no tags, but not a single tag. Below is the latest filter version of many iterations… --- ## [True embedded mode](https://discuss.elastic.co/t/true-embedded-mode/23204)
**Author:** [@Ted\_Smith](https://discuss.elastic.co/u/Ted_Smith)\ **Replies:** 5\ **Last updated:** [April 14, 2015, 8:48pm UTC](https://discuss.elastic.co/t/true-embedded-mode/23204 "2015-04-14T20:48:20Z")
Hello: I am running ES with one Node, one Shard in embedded Java app. Does Node client run in "true" embedded mode or is it still going through the client server data flow? If I create a Search Request, object a… --- ## ["term" query fails to match exact long integer; instead matches nearby long integer](https://discuss.elastic.co/t/term-query-fails-to-match-exact-long-integer-instead-matches-nearby-long-integer/16209)
**Author:** [@John\_Freeman](https://discuss.elastic.co/u/John_Freeman)\ **Replies:** 5\ **Last updated:** [March 7, 2014, 12:05am UTC](https://discuss.elastic.co/t/term-query-fails-to-match-exact-long-integer-instead-matches-nearby-long-integer/16209 "2014-03-07T00:05:49Z")
I've got a document with a long integer identifier: { "id": -6001495857799773000 } Trying to filter based on this identifier returns nothing: { "query": { "filtered": { "filter": {… --- ## [CLOSE\_WAIT Sockets](https://discuss.elastic.co/t/close-wait-sockets/3558)
**Author:** [@elasticsearcher](https://discuss.elastic.co/u/elasticsearcher)\ **Replies:** 5\ **Last updated:** [November 15, 2010, 6:53pm UTC](https://discuss.elastic.co/t/close-wait-sockets/3558 "2010-11-15T18:53:23Z")
Hi all, I'm running ElasticSearch backing up to HDFS with the following elasticsearch.yml: index: store: fs: memory: enabled: true gateway: type: hdfs … --- ## [Delete Kibana data with cURL](https://discuss.elastic.co/t/delete-kibana-data-with-curl/136739)
**Author:** [@mrbarret](https://discuss.elastic.co/u/mrbarret)\ **Replies:** 4\ **Last updated:** [June 20, 2018, 6:11pm UTC](https://discuss.elastic.co/t/delete-kibana-data-with-curl/136739 "2018-06-20T18:11:34Z")
Is there a curl command to delete all Kibana visualizations and dashboards? Maybe something like curl -XDELETE http://localhost:5601/kibana-int/dashboard/\* ? I am using ELK v 6.3.0. --- ## [Logstash @timestamp precision causing misordering of data](https://discuss.elastic.co/t/logstash-timestamp-precision-causing-misordering-of-data/75550)
**Author:** [@rbgeno7](https://discuss.elastic.co/u/rbgeno7)\ **Replies:** 4\ **Last updated:** [February 17, 2017, 6:43pm UTC](https://discuss.elastic.co/t/logstash-timestamp-precision-causing-misordering-of-data/75550 "2017-02-17T18:43:29Z")
I'm using filebeat and logstash to push Yarn Container Logs (specifically Spark) to Kinesis then ES and Kibana. I'm running these as SysV services on AWS Linux: Filebeat - 5.2.1 Logstash - 2.4.1 (Need the Kinesis Outp… --- ## [Update/delete index not work in Kibana Windows](https://discuss.elastic.co/t/update-delete-index-not-work-in-kibana-windows/39558)
**Author:** [@carmelom](https://discuss.elastic.co/u/carmelom)\ **Replies:** 4\ **Last updated:** [January 20, 2016, 3:16pm UTC](https://discuss.elastic.co/t/update-delete-index-not-work-in-kibana-windows/39558 "2016-01-20T15:16:19Z")
I am trying to update/delete index in Kibana Windows , and it is doesn't work ( it is working very well on Ubuntu) I tried to update the new indexes from Kibana-\> not feedback. I tried to delete index from Kibana pag… --- ## [Advent, 2018!](https://discuss.elastic.co/t/advent-2018/158433)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 0\ **Last updated:** [November 28, 2018, 12:08am UTC](https://discuss.elastic.co/t/advent-2018/158433 "2018-11-28T00:08:55Z")
:christmas\_tree::christmas\_tree::christmas\_tree: Following on from the awesomeness of last year, we will be posting another series of topics from the 1st until the 25th December with topics on the Elastic Stack, and in … --- ## [Best ways to prevent data lost in elastic](https://discuss.elastic.co/t/best-ways-to-prevent-data-lost-in-elastic/140055)
**Author:** [@hoey123](https://discuss.elastic.co/u/hoey123)\ **Replies:** 3\ **Last updated:** [July 23, 2018, 8:40am UTC](https://discuss.elastic.co/t/best-ways-to-prevent-data-lost-in-elastic/140055 "2018-07-23T08:40:53Z")
we decide to use Elasticsearch for our data store and handle different search scenarios with that. data is critical and should never lost. we should store it for 10 days. because data is time series we want to create i… --- ## [Logstash-output-file-as time based](https://discuss.elastic.co/t/logstash-output-file-as-time-based/128370)
**Author:** [@jawad846](https://discuss.elastic.co/u/jawad846)\ **Replies:** 3\ **Last updated:** [April 18, 2018, 7:50am UTC](https://discuss.elastic.co/t/logstash-output-file-as-time-based/128370 "2018-04-18T07:50:39Z")
Hi Folks, My output of logstash directed to the file called apache.log. This file needs to be generated in every hour. For Example: apache-2018-04-16-10:00.log or something similar to this. Here my configuration file … --- ## [Can we schedule and run multiple conf files simultaneously for Logstash?](https://discuss.elastic.co/t/can-we-schedule-and-run-multiple-conf-files-simultaneously-for-logstash/39865)
**Author:** [@Architha](https://discuss.elastic.co/u/Architha)\ **Replies:** 3\ **Last updated:** [December 9, 2016, 6:48am UTC](https://discuss.elastic.co/t/can-we-schedule-and-run-multiple-conf-files-simultaneously-for-logstash/39865 "2016-12-09T06:48:50Z")
Hi All, Can i schedule my logstash config files and run them ? Is there any tool for such purposes ? Please reply if you have a solution. Thanks in advance ! --- ## [ElasticSearch .NET Slow System.IO.MemoryStream:set\_Capacity](https://discuss.elastic.co/t/elasticsearch-net-slow-system-io-memorystream-set-capacity/191974)
**Author:** [@ajee\_siapno](https://discuss.elastic.co/u/ajee_siapno)\ **Replies:** 8\ **Last updated:** [July 29, 2019, 3:22pm UTC](https://discuss.elastic.co/t/elasticsearch-net-slow-system-io-memorystream-set-capacity/191974 "2019-07-29T15:22:17Z")
Hi, Have anyone using ElasticSearch 6.3 and ElasticSearch.NET and NEST libraries have experienced slow code on the following stack trace (with response time) Nest.ElasticClient:Search: Unknown (execution time: 0 ms of … --- ## [Elasticsearch resource calculation](https://discuss.elastic.co/t/elasticsearch-resource-calculation/341887)
**Author:** [@Ibrahim\_Can\_Duran](https://discuss.elastic.co/u/Ibrahim_Can_Duran)\ **Replies:** 5\ **Last updated:** [September 4, 2023, 7:40am UTC](https://discuss.elastic.co/t/elasticsearch-resource-calculation/341887 "2023-09-04T07:40:02Z")
I am trying to calculate the Resource requirements for an ELK system which will be deployed on k8s. The total load will be 4 TB and i will use 1 replica. Is it possible to have equations for required number of shard and… --- ## [Logstash JDBC Input not working, no error or output](https://discuss.elastic.co/t/logstash-jdbc-input-not-working-no-error-or-output/247154)
**Author:** [@netscape](https://discuss.elastic.co/u/netscape)\ **Replies:** 5\ **Last updated:** [September 7, 2020, 10:19am UTC](https://discuss.elastic.co/t/logstash-jdbc-input-not-working-no-error-or-output/247154 "2020-09-07T10:19:57Z")
Hi, I have some problem with JDBC input plugin. Database connection seem to work (no error), but I don´t get any output. In the Logstash logfile I only get the SQL Statement, but no error or output. The logstash log: … --- ## [How to modify output codec for logstash](https://discuss.elastic.co/t/how-to-modify-output-codec-for-logstash/201296)
**Author:** [@shazbot](https://discuss.elastic.co/u/shazbot)\ **Replies:** 7\ **Last updated:** [October 10, 2019, 5:53pm UTC](https://discuss.elastic.co/t/how-to-modify-output-codec-for-logstash/201296 "2019-10-10T17:53:45Z")
I'm not expecting a step by step on this. But here is the backstory and what I hope to achieve. I have logstash decoding netflow and putting it out using json\_lines This is working well, but it's very verbose and too … --- ## [Confusion Regarding Unstable Bucket-ing in Kibana Visualizations](https://discuss.elastic.co/t/confusion-regarding-unstable-bucket-ing-in-kibana-visualizations/117237)
**Author:** [@frankottey](https://discuss.elastic.co/u/frankottey)\ **Replies:** 7\ **Last updated:** [January 29, 2018, 8:52pm UTC](https://discuss.elastic.co/t/confusion-regarding-unstable-bucket-ing-in-kibana-visualizations/117237 "2018-01-29T20:52:16Z")
Hello everyone, I have been currently exploring Kibana visualizations of some test data, specifically horizontal bar charts. I had been attempting to bucket the x-axis by aggregation of terms when I was surprised to no… --- ## [Replica allocation control across a cluster](https://discuss.elastic.co/t/replica-allocation-control-across-a-cluster/11833)
**Author:** [@kgmodi](https://discuss.elastic.co/u/kgmodi)\ **Replies:** 7\ **Last updated:** [January 16, 2017, 5:07pm UTC](https://discuss.elastic.co/t/replica-allocation-control-across-a-cluster/11833 "2017-01-16T17:07:54Z")
Hello All, I am trying to run an ES cluster across two data centers. Lets say DC1 and DC2. I have 6 nodes in total (N0 … N5) where (N0 … N2) belongs to DC1 and (N3… N5) belong to DC2. I plan to have 12 s… --- ## [Getting accurate cardinality for a field in single shard index](https://discuss.elastic.co/t/getting-accurate-cardinality-for-a-field-in-single-shard-index/57302)
**Author:** [@BalaKumaran](https://discuss.elastic.co/u/BalaKumaran)\ **Replies:** 7\ **Last updated:** [August 29, 2016, 5:59am UTC](https://discuss.elastic.co/t/getting-accurate-cardinality-for-a-field-in-single-shard-index/57302 "2016-08-29T05:59:00Z")
Is there any way to get exact count of cardinality of a field in a single shard index. I have thought of taking terms aggregation and getting the number of buckets for cardinality for that field. But i fear about the mem… --- ## [Query Help search for $](https://discuss.elastic.co/t/query-help-search-for/57429)
**Author:** [@rhyse](https://discuss.elastic.co/u/rhyse)\ **Replies:** 6\ **Last updated:** [August 9, 2016, 8:10pm UTC](https://discuss.elastic.co/t/query-help-search-for/57429 "2016-08-09T20:10:37Z")
Hi I am trying to exclude a specific field containing a "$" sign, but am having very little luck. Basically trying to audit logon events for windows machines. (from winlogbeats 5 alpha) My query is event\_id:(4778… --- ## [Kibana dashboard import api fails](https://discuss.elastic.co/t/kibana-dashboard-import-api-fails/265603)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 4\ **Last updated:** [March 8, 2021, 8:41pm UTC](https://discuss.elastic.co/t/kibana-dashboard-import-api-fails/265603 "2021-03-08T20:41:11Z")
Dear team, We use export api to export dashboard with other visualisations. This api url is used to export it: GET \:\/s/\/api/kibana/dashboards/export?dashboard=dashboard\_id Export produces… --- ## [HEAP Memory usage over 90%](https://discuss.elastic.co/t/heap-memory-usage-over-90/264400)
**Author:** [@HammerZEIT](https://discuss.elastic.co/u/HammerZEIT)\ **Replies:** 4\ **Last updated:** [February 17, 2021, 11:46am UTC](https://discuss.elastic.co/t/heap-memory-usage-over-90/264400 "2021-02-17T11:46:04Z")
Hi everyone, I'm facing an issue with the memory usage of ES. We have a 5 nodes cluster to store our logs sent from graylog. I've searching and reading around for a week now I made some change on my configuration but … --- ## [Alternative search using “Scroll” API and “Search After” API for real-time queries](https://discuss.elastic.co/t/alternative-search-using-scroll-api-and-search-after-api-for-real-time-queries/196270)
**Author:** [@SuperSpike77](https://discuss.elastic.co/u/SuperSpike77)\ **Replies:** 4\ **Last updated:** [August 22, 2019, 9:35am UTC](https://discuss.elastic.co/t/alternative-search-using-scroll-api-and-search-after-api-for-real-time-queries/196270 "2019-08-22T09:35:17Z")
I need to send real-time queries for getting data from the dynamic index, that can be changed anytime. I speak about millions of docs in the index. The usage of Scroll API was useful to me, given that it stored state … --- ## [Embed Visualizations with authentication: CORS and preflight](https://discuss.elastic.co/t/embed-visualizations-with-authentication-cors-and-preflight/194053)
**Author:** [@apiras](https://discuss.elastic.co/u/apiras)\ **Replies:** 4\ **Last updated:** [August 21, 2019, 8:19am UTC](https://discuss.elastic.co/t/embed-visualizations-with-authentication-cors-and-preflight/194053 "2019-08-21T08:19:47Z")
Hi all, I read numerous post on authenticating in iframe-embedded Kibana dashboard but I did not found the solution of my problem. I'm using ES and Kibana 7.2.0. I set server.cors: true in config/kibana.yml. On the H… --- ## [\_cluster/health is returning 404](https://discuss.elastic.co/t/cluster-health-is-returning-404/170304)
**Author:** [@arvindan\_ta](https://discuss.elastic.co/u/arvindan_ta)\ **Replies:** 4\ **Last updated:** [February 28, 2019, 6:26pm UTC](https://discuss.elastic.co/t/cluster-health-is-returning-404/170304 "2019-02-28T18:26:07Z")
Hi, I have installed elasticsearch in ubuntu and have set the following http.host : 0.0.0.0 http.bind\_host: 0.0.0.0 http.cors.allow-origin: "\*" http.cors.enabled : true Am using \_cluster/health api When I do curl h… --- ## [Multiple ES-Hadoop versions detected in the classpath in Hue](https://discuss.elastic.co/t/multiple-es-hadoop-versions-detected-in-the-classpath-in-hue/120946)
**Author:** [@ebeb](https://discuss.elastic.co/u/ebeb)\ **Replies:** 4\ **Last updated:** [March 1, 2018, 10:31pm UTC](https://discuss.elastic.co/t/multiple-es-hadoop-versions-detected-in-the-classpath-in-hue/120946 "2018-03-01T22:31:38Z")
Hello, We are using Cloudera CDH5.12 and elasticsearch-hadoop-6.2.1 . We added the ES-hadoop jars path to Cloudera Manager-\>Clusters-\>Hive-\>Advanced and set the value of: Hive Auxiliary JARs Directory to the jar direct… --- ## [Design HA ES for 16 TB logs data | Is SAN storage a good idea?](https://discuss.elastic.co/t/design-ha-es-for-16-tb-logs-data-is-san-storage-a-good-idea/19058)
**Author:** [@sirkubax](https://discuss.elastic.co/u/sirkubax)\ **Replies:** 4\ **Last updated:** [August 4, 2014, 8:45am UTC](https://discuss.elastic.co/t/design-ha-es-for-16-tb-logs-data-is-san-storage-a-good-idea/19058 "2014-08-04T08:45:49Z")
Hi, I'm testing/planning implementation for 16 TB data logs (1 month, daily indexes about 530GB/day). Indexes are deleted after 1 month (TTL is 1 month). The documents size vary from few bytes to 1MB (averag… --- ## [Metricbeat docker compose environment variables](https://discuss.elastic.co/t/metricbeat-docker-compose-environment-variables/298009)
**Author:** [@TobiasSackmann](https://discuss.elastic.co/u/TobiasSackmann)\ **Replies:** 2\ **Last updated:** [March 1, 2022, 2:52pm UTC](https://discuss.elastic.co/t/metricbeat-docker-compose-environment-variables/298009 "2022-03-01T14:52:52Z")
Hi all, I am trying to set up stack monitoring using docker via docker compose. Here is a sample I found on the Internet that uses the ELASTICSEARCH\_HOSTS variable. I'd like to define more in this section like the modu… --- ## [Max Number of Elasticsearch Data nodes](https://discuss.elastic.co/t/max-number-of-elasticsearch-data-nodes/158133)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [November 26, 2018, 9:07am UTC](https://discuss.elastic.co/t/max-number-of-elasticsearch-data-nodes/158133 "2018-11-26T09:07:58Z")
Is there any limit on the number of data nodes which can be used in a elasticsearch cluster? Whether a cluster can have around 100 data nodes? --- ## [Is it possible to change doc\_count and key to something else](https://discuss.elastic.co/t/is-it-possible-to-change-doc-count-and-key-to-something-else/98856)
**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\ **Replies:** 3\ **Last updated:** [August 30, 2017, 2:15pm UTC](https://discuss.elastic.co/t/is-it-possible-to-change-doc-count-and-key-to-something-else/98856 "2017-08-30T14:15:27Z")
When i do a aggregation i got result as this Is it possible to change doc\_count and key to something else ? { “took”: 4, “timed\_out”: false, "\_shards": { “total”: 5, “successful”: 5, “failed”: 0 }, “hits”: { “… --- ## [Metricbeat -\> LS -\> ES, template error \[SOLVED\]](https://discuss.elastic.co/t/metricbeat-ls-es-template-error-solved/64671)
**Author:** [@gregoryo](https://discuss.elastic.co/u/gregoryo)\ **Replies:** 3\ **Last updated:** [December 5, 2016, 4:41am UTC](https://discuss.elastic.co/t/metricbeat-ls-es-template-error-solved/64671 "2016-12-05T04:41:02Z")
I have been successfully using Filebeat -\> LS -\> ES for a few months. I now want to add Metricbeat as another source. I started ingesting data fine, but continued reading docs. https://www.elastic.co/guide/en/beats/metri… --- ## [Why is this filer not working](https://discuss.elastic.co/t/why-is-this-filer-not-working/89761)
**Author:** [@ppierce01](https://discuss.elastic.co/u/ppierce01)\ **Replies:** 2\ **Last updated:** [June 19, 2017, 6:47pm UTC](https://discuss.elastic.co/t/why-is-this-filer-not-working/89761 "2017-06-19T18:47:09Z")
I am attempting to use this as a filter sector:\[1 to 3\]. sector is a text item within my index. All documentation I have read says this should work. However, when I attempt to apply the filter I get this error: Disc… --- ## [Not able to login into elastic enterprise search](https://discuss.elastic.co/t/not-able-to-login-into-elastic-enterprise-search/251379)
**Author:** [@Jaaved\_Ali\_Khan](https://discuss.elastic.co/u/Jaaved_Ali_Khan)\ **Replies:** 2\ **Last updated:** [October 11, 2020, 2:27pm UTC](https://discuss.elastic.co/t/not-able-to-login-into-elastic-enterprise-search/251379 "2020-10-11T14:27:59Z")
I am using elasticsearch and enterprise search version 7.9.2 I was able to successfully connect to app search without enabling elasticssearch security. Since workplace search requires security, after enabling I am not a… --- ## [Logstash config - JSON filter results with "\_jsonparsefailure"](https://discuss.elastic.co/t/logstash-config-json-filter-results-with-jsonparsefailure/149281)
**Author:** [@Ira](https://discuss.elastic.co/u/Ira)\ **Replies:** 5\ **Last updated:** [September 20, 2018, 5:17pm UTC](https://discuss.elastic.co/t/logstash-config-json-filter-results-with-jsonparsefailure/149281 "2018-09-20T17:17:01Z")
Hi, My log file is in JSON format. An example of a log line: {"@timestamp":"2018-09-18T10:36:27.135+03:00","@version":1,"message":{"apiMethodType": "GET","elapsedTime": 1136},"caller\_line\_number":94} I'm using Filebe… --- ## [Something is wrong with your configuration](https://discuss.elastic.co/t/something-is-wrong-with-your-configuration/66693)
**Author:** [@imperfection\_perfect](https://discuss.elastic.co/u/imperfection_perfect)\ **Replies:** 5\ **Last updated:** [November 21, 2016, 11:52am UTC](https://discuss.elastic.co/t/something-is-wrong-with-your-configuration/66693 "2016-11-21T11:52:47Z")
its difficult to post it on the phone but here is a link to stack overflow. http://stackoverflow.com/questions/40628896/reason-something-is-wrong-with-your-configuration-geoip-dat-mutate-logstash Can you please help. … --- ## [Filebeat is not sending Json data to Elasticsearch](https://discuss.elastic.co/t/filebeat-is-not-sending-json-data-to-elasticsearch/103627)
**Author:** [@tatha](https://discuss.elastic.co/u/tatha)\ **Replies:** 4\ **Last updated:** [October 12, 2017, 4:33pm UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-json-data-to-elasticsearch/103627 "2017-10-12T16:33:46Z")
I am trying to send a set of json data (basically logs in the format of json) to elasticsearch instance using filebeat. Here are my config file filebeat.prospectors: - paths: - ~/PIE/Logs/\*.json input\_type: log j… --- ## [Starting packetbeat: 2016/01/08 12:13:43.009060 packetbeat.go:195: CRIT Initializing sniffer failed: Error creating sniffer: Pfring sniffing is not compiled in](https://discuss.elastic.co/t/starting-packetbeat-2016-01-08-12-13-43-009060-packetbeat-go-195-crit-initializing-sniffer-failed-error-creating-sniffer-pfring-sniffing-is-not-compiled-in/38721)
**Author:** [@slourenco](https://discuss.elastic.co/u/slourenco)\ **Replies:** 4\ **Last updated:** [January 11, 2016, 2:06pm UTC](https://discuss.elastic.co/t/starting-packetbeat-2016-01-08-12-13-43-009060-packetbeat-go-195-crit-initializing-sniffer-failed-error-creating-sniffer-pfring-sniffing-is-not-compiled-in/38721 "2016-01-11T14:06:48Z")
I've installed the RPM version of packetbeat 1.0.1 (latest) and no pf\_ring module is compiled. Do you have a RPM version of it? Do I need to compile the project? If only compiled version is available do I need extra conf… --- ## [Elasticsearch-head - web console for your cluster](https://discuss.elastic.co/t/elasticsearch-head-web-console-for-your-cluster/4061)
**Author:** [@mobz\_2](https://discuss.elastic.co/u/mobz_2)\ **Replies:** 4\ **Last updated:** [March 9, 2011, 2:34pm UTC](https://discuss.elastic.co/t/elasticsearch-head-web-console-for-your-cluster/4061 "2011-03-09T14:34:12Z")
Hi, Introducing elasticsearch-head Actually this is not a new project - but might be new some of the users on this list. elasticsearch-head is a web based interface to an es cluster. eshead connect… --- ## [Logstash silently fails on trying to import csv](https://discuss.elastic.co/t/logstash-silently-fails-on-trying-to-import-csv/2651)
**Author:** [@juju](https://discuss.elastic.co/u/juju)\ **Replies:** 8\ **Last updated:** [June 18, 2015, 12:33am UTC](https://discuss.elastic.co/t/logstash-silently-fails-on-trying-to-import-csv/2651 "2015-06-18T00:33:50Z")
Hello, I'm trying to import a csv file into ELK and it fails silently even with output set to stdout/debug. $ cat /vagrant/sinkhole.csv | /opt/logstash/bin/logstash -f /vagrant/logstash-sinkhole.conf | tee log J… --- ## [Ingest Pipeline: drop processor: compile error](https://discuss.elastic.co/t/ingest-pipeline-drop-processor-compile-error/262548)
**Author:** [@asc-adean](https://discuss.elastic.co/u/asc-adean)\ **Replies:** 3\ **Last updated:** [January 28, 2021, 7:45pm UTC](https://discuss.elastic.co/t/ingest-pipeline-drop-processor-compile-error/262548 "2021-01-28T19:45:42Z")
As documented here https://www.elastic.co/guide/en/elasticsearch/reference/current/drop-processor.html I want to be able to drop a document when matching on a field, like so { "processors": \[ { "js… --- ## [Kibanaのelasticsearchサーバ設定について](https://discuss.elastic.co/t/kibana-elasticsearch/102394)
**Author:** [@mikeda](https://discuss.elastic.co/u/mikeda)\ **Replies:** 3\ **Last updated:** [October 3, 2017, 6:51am UTC](https://discuss.elastic.co/t/kibana-elasticsearch/102394 "2017-10-03T06:51:11Z")
kibanaサーバとは異なるelasticsearchサーバを使いたいと思っています。 192.168.0.100 サーバA(kibana\_A, elasticsearch\_A) 本番用 192.168.0.101 サーバB(kibana\_B, elasticsearch\_B) テスト用 kibana\_Bのデータベースとして、elasticsearch\_Aを使いたいと思っています。 そのために、kibana\_Bの/etc/kib… --- ## [After importing Dashboards in kibana, I got an issue " could not locate that visualizations I'd](https://discuss.elastic.co/t/after-importing-dashboards-in-kibana-i-got-an-issue-could-not-locate-that-visualizations-id/98329)
**Author:** [@Ayodhyam](https://discuss.elastic.co/u/Ayodhyam)\ **Replies:** 3\ **Last updated:** [August 25, 2017, 3:34pm UTC](https://discuss.elastic.co/t/after-importing-dashboards-in-kibana-i-got-an-issue-could-not-locate-that-visualizations-id/98329 "2017-08-25T15:34:02Z")
Could not locate that visualizations I’d after importing …in kibana…I created same index pattern in existing kibana ,& current … --- ## [Explain difference between Kibana "time ellapsed" and query "took"](https://discuss.elastic.co/t/explain-difference-between-kibana-time-ellapsed-and-query-took/250763)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 7\ **Last updated:** [October 5, 2020, 7:20am UTC](https://discuss.elastic.co/t/explain-difference-between-kibana-time-ellapsed-and-query-took/250763 "2020-10-05T07:20:01Z")
In Kibana dev-console, I see a big difference between ES query took time and Kibana ellapsed time. Why ? --- ## [Error : port 5601 is already in use.Another instance of kibana may be running](https://discuss.elastic.co/t/error-port-5601-is-already-in-use-another-instance-of-kibana-may-be-running/247001)
**Author:** [@Rahul0711](https://discuss.elastic.co/u/Rahul0711)\ **Replies:** 7\ **Last updated:** [September 7, 2020, 7:52am UTC](https://discuss.elastic.co/t/error-port-5601-is-already-in-use-another-instance-of-kibana-may-be-running/247001 "2020-09-07T07:52:18Z")
Hello Team I have installed the Kibana on the Win 10. while running the Kibana it gives the below error FATAL Error : port 5601 is already in use.Another instance of Kibana may be running. I tried checking if this po… --- ## [What is the best way to collect yarn application logs from hdfs?](https://discuss.elastic.co/t/what-is-the-best-way-to-collect-yarn-application-logs-from-hdfs/173641)
**Author:** [@Drahkar](https://discuss.elastic.co/u/Drahkar)\ **Replies:** 1\ **Last updated:** [April 5, 2019, 8:37pm UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-collect-yarn-application-logs-from-hdfs/173641 "2019-04-05T20:37:43Z")
We have a dynamic infrastructure for Hadoop, which means the yarn application logs only exist for a limited period of time. Currently we are using Splunk HadoopConnect to ingest those logs as a live feed into Splunk. Ho… --- ## [How to setup an alert for a failing livesness probe in kubernetes](https://discuss.elastic.co/t/how-to-setup-an-alert-for-a-failing-livesness-probe-in-kubernetes/125755)
**Author:** [@David\_Michael\_Gang](https://discuss.elastic.co/u/David_Michael_Gang)\ **Replies:** 1\ **Last updated:** [March 28, 2018, 9:38am UTC](https://discuss.elastic.co/t/how-to-setup-an-alert-for-a-failing-livesness-probe-in-kubernetes/125755 "2018-03-28T09:38:42Z")
Hi all, I installed metricbeats on kubernetes as explained here and get now a nice dashboard of the kubernetes status. In kubernetes i use liveness probes to see if a pod is down. Now i want to get alerted if liveness… --- ## [Optimize for minimal storage space with many tiny documents](https://discuss.elastic.co/t/optimize-for-minimal-storage-space-with-many-tiny-documents/35811)
**Author:** [@Andre\_Hansel](https://discuss.elastic.co/u/Andre_Hansel)\ **Replies:** 7\ **Last updated:** [March 18, 2016, 5:48pm UTC](https://discuss.elastic.co/t/optimize-for-minimal-storage-space-with-many-tiny-documents/35811 "2016-03-18T17:48:10Z")
I want to store a lot of data points to run aggregations on them. Here's my index definition: mappings: { datapoint: { properties: { timestamp: { type: 'date', format: 'date\_time'}, value: { type: 'fl… [Previous page](https://discuss.elastic.co/top.md?page=826&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=828&per_page=50&period=all)