# Top **URL:** https://discuss.elastic.co/top.md?page=833&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 834 --- ## [Is it possible to split discovery message field?](https://discuss.elastic.co/t/is-it-possible-to-split-discovery-message-field/96376)
**Author:** [@abu.sayeed](https://discuss.elastic.co/u/abu.sayeed)\ **Replies:** 2\ **Last updated:** [August 13, 2017, 9:20am UTC](https://discuss.elastic.co/t/is-it-possible-to-split-discovery-message-field/96376 "2017-08-13T09:20:56Z")
Elasticsearch version 5.5.1 kibana version 5.5.1 Logstash version 5.5.1 Beats version 5.5.1 my message field: message:\[INFO \] Status =\> SENT | client : \[IPDC\] | cell : \[1746710009\] | message-delivery-time : \[2017-08… --- ## [How to send data to elasticsearch using logstash?](https://discuss.elastic.co/t/how-to-send-data-to-elasticsearch-using-logstash/71193)
**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Replies:** 2\ **Last updated:** [January 11, 2017, 9:34am UTC](https://discuss.elastic.co/t/how-to-send-data-to-elasticsearch-using-logstash/71193 "2017-01-11T09:34:27Z")
HI , I want to send a txt.file which contains some documents into elasticsearch using logstash . So, how can i configure my .config file in such a way that it sends the data to elasticsearch.. Thanks --- ## [Thread\_pool \[management\]](https://discuss.elastic.co/t/thread-pool-management/98628)
**Author:** [@nestorbolivar](https://discuss.elastic.co/u/nestorbolivar)\ **Replies:** 6\ **Last updated:** [September 5, 2017, 9:38am UTC](https://discuss.elastic.co/t/thread-pool-management/98628 "2017-09-05T09:38:30Z")
Could anyone explain what this thread does?! It seems that only this thread is consuming the most resources on my cluster yet I can’t find how to tune it. --- ## [Extracting values from log body](https://discuss.elastic.co/t/extracting-values-from-log-body/48781)
**Author:** [@dandrestor](https://discuss.elastic.co/u/dandrestor)\ **Replies:** 6\ **Last updated:** [May 3, 2016, 12:24pm UTC](https://discuss.elastic.co/t/extracting-values-from-log-body/48781 "2016-05-03T12:24:15Z")
Hi there, Suppose I am getting a log message through logstash, with some custom format of the form FIELD1=VALUE1 etc. I am still quite a bit in the dark here, but I've been playing a little with visualizations. What I … --- ## [Elasticsearch shuts down for no reason](https://discuss.elastic.co/t/elasticsearch-shuts-down-for-no-reason/19422)
**Author:** [@Eitan\_Vesely](https://discuss.elastic.co/u/Eitan_Vesely)\ **Replies:** 6\ **Last updated:** [August 30, 2014, 10:42am UTC](https://discuss.elastic.co/t/elasticsearch-shuts-down-for-no-reason/19422 "2014-08-30T10:42:25Z")
Hi Guys, i've installed ES a month ago and its working just fine. today, for some reason, ES just went down for no visible reason: here is what i see in the log file : \[2014-08-23 16:47:11,272\]\[DEBUG\]\[action.s… --- ## [Wrong argument type string expected Timestamp](https://discuss.elastic.co/t/wrong-argument-type-string-expected-timestamp/216229)
**Author:** [@morpheus](https://discuss.elastic.co/u/morpheus)\ **Replies:** 1\ **Last updated:** [January 23, 2020, 1:53pm UTC](https://discuss.elastic.co/t/wrong-argument-type-string-expected-timestamp/216229 "2020-01-23T13:53:51Z")
Greetings, I have seen other similar threads to this but not able to solve my problem, I am getting the error: \[2020-01-22T10:45:38,409\]\[WARN \]\[logstash.inputs.gelf \] Gelf (tcp): client socket failed. {:exception=\>… --- ## [ILM : illegal\_argument\_exception: source alias \[elastiflow-3.4.1-alias\] does not point to a write index](https://discuss.elastic.co/t/ilm-illegal-argument-exception-source-alias-elastiflow-3-4-1-alias-does-not-point-to-a-write-index/174288)
**Author:** [@mayer](https://discuss.elastic.co/u/mayer)\ **Replies:** 1\ **Last updated:** [April 15, 2019, 3:20pm UTC](https://discuss.elastic.co/t/ilm-illegal-argument-exception-source-alias-elastiflow-3-4-1-alias-does-not-point-to-a-write-index/174288 "2019-04-15T15:20:34Z")
Dear All, My environment: ELK 6.6.1 with elastiflow 3.4.1 As disk space is limited I tried to setup an Index Lifecycle Policy. Initially I failed with the following type of error. illegal\_argument\_exception: index.lif… --- ## [ElasticSearch query to perform case-insensitive search with aggregations to get matching column counts](https://discuss.elastic.co/t/elasticsearch-query-to-perform-case-insensitive-search-with-aggregations-to-get-matching-column-counts/77326)
**Author:** [@annanyan](https://discuss.elastic.co/u/annanyan)\ **Replies:** 1\ **Last updated:** [March 3, 2017, 2:56pm UTC](https://discuss.elastic.co/t/elasticsearch-query-to-perform-case-insensitive-search-with-aggregations-to-get-matching-column-counts/77326 "2017-03-03T14:56:47Z")
We are using ElasticSearch 5.0.0. Please let us know if there is any regex or any other way to perform case insensitive search. Please find data in movies index in ElasticSearch in attachment. Please find aggregatio… --- ## [Use cases for Weblogic with ELK stack](https://discuss.elastic.co/t/use-cases-for-weblogic-with-elk-stack/38599)
**Author:** [@harshal\_shah](https://discuss.elastic.co/u/harshal_shah)\ **Replies:** 1\ **Last updated:** [January 7, 2016, 12:04pm UTC](https://discuss.elastic.co/t/use-cases-for-weblogic-with-elk-stack/38599 "2016-01-07T12:04:05Z")
I'm evaluating ELK stack to implement log centralization so that developers do not need to log on to unix boxes. All logs should be available on a single GUI tagged with host, JVM name. We already have weblogic JVM mon… --- ## [Elasticsearch cluster UUID is not available after version upgrade](https://discuss.elastic.co/t/elasticsearch-cluster-uuid-is-not-available-after-version-upgrade/294441)
**Author:** [@learning\_fun](https://discuss.elastic.co/u/learning_fun)\ **Replies:** 4\ **Last updated:** [January 15, 2022, 10:27am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-uuid-is-not-available-after-version-upgrade/294441 "2022-01-15T10:27:13Z")
Hi There, we use only Elasticsearch and upgraded it from 6.7.0 to 7.16.2 . we run the Elasticsearch in kubernetes and after version upgrade, cluster UUID is not available. We have one master node , 3 data nodes, 1 coord… --- ## [Get data from elasticsearch and visualize it using python](https://discuss.elastic.co/t/get-data-from-elasticsearch-and-visualize-it-using-python/249221)
**Author:** [@atiqah\_yusri](https://discuss.elastic.co/u/atiqah_yusri)\ **Replies:** 4\ **Last updated:** [September 19, 2020, 9:08pm UTC](https://discuss.elastic.co/t/get-data-from-elasticsearch-and-visualize-it-using-python/249221 "2020-09-19T21:08:49Z")
Hi, currently, I have to develop a data analytics dashboard on a web platform. It is possible if I load my datasets to elasticsearch using logstash without using kibana for the visualisation? Because I prefer to use pyth… --- ## [Watcher is Giving 401 Status Errors When Trying to Execute 'email' Action](https://discuss.elastic.co/t/watcher-is-giving-401-status-errors-when-trying-to-execute-email-action/194273)
**Author:** [@nfielder](https://discuss.elastic.co/u/nfielder)\ **Replies:** 4\ **Last updated:** [August 8, 2019, 1:16pm UTC](https://discuss.elastic.co/t/watcher-is-giving-401-status-errors-when-trying-to-execute-email-action/194273 "2019-08-08T13:16:29Z")
Hi all, I am trying to set up a Watcher to automatically send an email with a PDF of a dashboard. I have been following the documentation here. However I am getting an error when the 'email' action is executed. I can't… --- ## [How often metricbeat system process sends data in elasticsearch?](https://discuss.elastic.co/t/how-often-metricbeat-system-process-sends-data-in-elasticsearch/159672)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 1\ **Last updated:** [December 6, 2018, 4:21pm UTC](https://discuss.elastic.co/t/how-often-metricbeat-system-process-sends-data-in-elasticsearch/159672 "2018-12-06T16:21:03Z")
Hi, i wanted to know if there are some sort of configuration in metricbeat.yml where we can send the system process say every 10 seconds? --- ## [Trial license restriction](https://discuss.elastic.co/t/trial-license-restriction/33567)
**Author:** [@us3r](https://discuss.elastic.co/u/us3r)\ **Replies:** 4\ **Last updated:** [November 2, 2015, 10:16pm UTC](https://discuss.elastic.co/t/trial-license-restriction/33567 "2015-11-02T22:16:13Z")
Is there any restriction related with the TRIAL License? I'm asking because If I have only node - everything is working fine: curl -u es\_admin http://127.0.0.1:9200/\_shield Enter host password for user 'es\_admin… --- ## [Scrolling performance](https://discuss.elastic.co/t/scrolling-performance/5958)
**Author:** [@Josh\_Holtzman](https://discuss.elastic.co/u/Josh_Holtzman)\ **Replies:** 4\ **Last updated:** [December 16, 2011, 12:24am UTC](https://discuss.elastic.co/t/scrolling-performance/5958 "2011-12-16T00:24:44Z")
I'm trying to implement an index exporter by doing a "match\_all" query and scrolling through the entire index, 100 or 1000 documents at a time. I'm seeing a significant slowdown in scrolling over time. The first scr… --- ## [Unexpected state reading from file - stale NFS handle errors](https://discuss.elastic.co/t/unexpected-state-reading-from-file-stale-nfs-handle-errors/227853)
**Author:** [@msunilreddy](https://discuss.elastic.co/u/msunilreddy)\ **Replies:** 3\ **Last updated:** [April 14, 2020, 6:02am UTC](https://discuss.elastic.co/t/unexpected-state-reading-from-file-stale-nfs-handle-errors/227853 "2020-04-14T06:02:37Z")
Hi Team, We have deployed filebeat as docker container for reading log files by volume mounting of logs files from NFS server. We are getting stale NFS handle errors. Could you please help us how to resolve this issue.… --- ## [All threads hanged and not responding anymore](https://discuss.elastic.co/t/all-threads-hanged-and-not-responding-anymore/80645)
**Author:** [@Yogesh\_BG](https://discuss.elastic.co/u/Yogesh_BG)\ **Replies:** 3\ **Last updated:** [April 3, 2017, 8:05am UTC](https://discuss.elastic.co/t/all-threads-hanged-and-not-responding-anymore/80645 "2017-04-03T08:05:42Z")
Elasticsearch version: 2.4.1 Plugins installed: \[\] JVM version: 1.8 OS version: Linux Description of the problem including expected versus actual behavior: I am running the es searh queries using transport client. Afte… --- ## [Field mapping with "index":"no" causes error (ES2.0)](https://discuss.elastic.co/t/field-mapping-with-index-no-causes-error-es2-0/33977)
**Author:** [@aliaspooryorik](https://discuss.elastic.co/u/aliaspooryorik)\ **Replies:** 3\ **Last updated:** [March 17, 2016, 6:47am UTC](https://discuss.elastic.co/t/field-mapping-with-index-no-causes-error-es2-0/33977 "2016-03-17T06:47:13Z")
Hi, This might be a n00bie error, but I have a mapping of: "mappings": { "myindex": { "properties": { "json": { "type": "string", "index": "no" } … --- ## [How to extract JSON content in message to top level](https://discuss.elastic.co/t/how-to-extract-json-content-in-message-to-top-level/190422)
**Author:** [@justAbeginner](https://discuss.elastic.co/u/justAbeginner)\ **Replies:** 5\ **Last updated:** [July 16, 2019, 7:50am UTC](https://discuss.elastic.co/t/how-to-extract-json-content-in-message-to-top-level/190422 "2019-07-16T07:50:17Z")
Sorry if it is a duplicated post. I have been searching google and the forum for answer, however I still could not find it. It would be nice if someone can direct me to the answer if it is duplicated. I am currently u… --- ## [Wildcard searches](https://discuss.elastic.co/t/wildcard-searches/137594)
**Author:** [@Rakesh\_Shiriyara](https://discuss.elastic.co/u/Rakesh_Shiriyara)\ **Replies:** 5\ **Last updated:** [July 3, 2018, 10:37am UTC](https://discuss.elastic.co/t/wildcard-searches/137594 "2018-07-03T10:37:44Z")
Currently i use below wildcard search for my service, { "query": { "bool": { "must": \[ { "wildcard": { "PRODUCT\_DESCRIPTION": "\\\*collaboration\\\*services\\\*shiriyara\\\*" … --- ## [WinlogBeat -\> LogStash XML filter](https://discuss.elastic.co/t/winlogbeat-logstash-xml-filter/119422)
**Author:** [@florianmulatz](https://discuss.elastic.co/u/florianmulatz)\ **Replies:** 5\ **Last updated:** [March 2, 2018, 6:15am UTC](https://discuss.elastic.co/t/winlogbeat-logstash-xml-filter/119422 "2018-03-02T06:15:28Z")
Hey Guys, Just asking myself how to configure the XML-Filter in logstash but not for a file input but a winlogbeat input. Background: We're logging the ADFS Audit from our Win-ADFS Servers via Winlogbeat to elastic. T… --- ## [Logstash java.lang.unsupportedOperationException](https://discuss.elastic.co/t/logstash-java-lang-unsupportedoperationexception/32057)
**Author:** [@supermario](https://discuss.elastic.co/u/supermario)\ **Replies:** 7\ **Last updated:** [October 13, 2015, 8:14am UTC](https://discuss.elastic.co/t/logstash-java-lang-unsupportedoperationexception/32057 "2015-10-13T08:14:57Z")
I think through the TCP protocol to logstash from nxlog write log. But, i get some exceptions,excemple 'Exception in thread "\>elasticsearch.4 " java.lang.unsupportedoperationexception'. I try to reduce flush\_size in log… --- ## [IDs with special characters](https://discuss.elastic.co/t/ids-with-special-characters/167701)
**Author:** [@kjamesb](https://discuss.elastic.co/u/kjamesb)\ **Replies:** 1\ **Last updated:** [February 11, 2019, 4:32pm UTC](https://discuss.elastic.co/t/ids-with-special-characters/167701 "2019-02-11T16:32:22Z")
I'm setting up elasticsearch with my java spring app. When I'm attempting to get records, I'm having an issue with retrieval and it seems to be due to the ID's of my records. For example, here's an Id of a record: "GD+… --- ## [ScrollAll Timeout](https://discuss.elastic.co/t/scrollall-timeout/196418)
**Author:** [@bo.clifton](https://discuss.elastic.co/u/bo.clifton)\ **Replies:** 6\ **Last updated:** [August 30, 2019, 10:25pm UTC](https://discuss.elastic.co/t/scrollall-timeout/196418 "2019-08-30T22:25:44Z")
I'm running into timeouts using ScrollAll. Code is below. I have a large index (160mil items in this index) and need to be planning for substantially larger indices. We will routinely need to perform a scroll search t… --- ## [Unexpected ES shut down - nothing there in logs to identify the problem](https://discuss.elastic.co/t/unexpected-es-shut-down-nothing-there-in-logs-to-identify-the-problem/8166)
**Author:** [@jagdeep](https://discuss.elastic.co/u/jagdeep)\ **Replies:** 6\ **Last updated:** [June 25, 2012, 12:06pm UTC](https://discuss.elastic.co/t/unexpected-es-shut-down-nothing-there-in-logs-to-identify-the-problem/8166 "2012-06-25T12:06:59Z")
I am facing a very unexpected shutdown of ES data node. It dumps the memory and automatically getting shut(even console is getting closed). I have already dealt with memory related issues but this one is pretty weird … --- ## [Mocking RestHighLevelClient](https://discuss.elastic.co/t/mocking-resthighlevelclient/201211)
**Author:** [@DevShan](https://discuss.elastic.co/u/DevShan)\ **Replies:** 2\ **Last updated:** [September 26, 2019, 4:57pm UTC](https://discuss.elastic.co/t/mocking-resthighlevelclient/201211 "2019-09-26T16:57:51Z")
I'm trying to use groovy to write Junit, for a class that uses RestHighLevelClient to call ES and get the search results. I am not able to mock the client using GroovyMock or normal mock. Please let me know how to appr… --- ## [Logstash won't pick up logs over port 514](https://discuss.elastic.co/t/logstash-wont-pick-up-logs-over-port-514/185477)
**Author:** [@johnbchron](https://discuss.elastic.co/u/johnbchron)\ **Replies:** 2\ **Last updated:** [June 13, 2019, 4:38pm UTC](https://discuss.elastic.co/t/logstash-wont-pick-up-logs-over-port-514/185477 "2019-06-13T16:38:05Z")
Hello All, So my logstash installation (full elastic stack running on one machine, ubuntu 19) is configured to accept syslogs from our firewall over UDP on port 514. I can use tcpdump to see that there is indeed traffic… --- ## [Query result with jQuery differs from cURL result](https://discuss.elastic.co/t/query-result-with-jquery-differs-from-curl-result/13057)
**Author:** [@Oliver\_B\_Fischer](https://discuss.elastic.co/u/Oliver_B_Fischer)\ **Replies:** 2\ **Last updated:** [August 3, 2013, 10:32pm UTC](https://discuss.elastic.co/t/query-result-with-jquery-differs-from-curl-result/13057 "2013-08-03T22:32:03Z")
Hi, I try to send queries I tested successfully with cURL with jQuery to ES, but the result differs from the result with cURL. After a Wireshark session I found out, that jQuery sends my query as URL parameters… --- ## [Elastisearch doesn't create .security index after loss of data](https://discuss.elastic.co/t/elastisearch-doesnt-create-security-index-after-loss-of-data/335123)
**Author:** [@Savva\_Morozov](https://discuss.elastic.co/u/Savva_Morozov)\ **Replies:** 4\ **Last updated:** [June 4, 2023, 2:30pm UTC](https://discuss.elastic.co/t/elastisearch-doesnt-create-security-index-after-loss-of-data/335123 "2023-06-04T14:30:40Z")
Hello! We are using Elasticsearch and Kibana on Kubernetes deployed via Helm charts and recently we occasionaly deleted all the data from persistent volumes that our two nodes Elasticsearch cluster uses. Since then we ca… --- ## [Use user.name.keyword field in a kibana visualisation](https://discuss.elastic.co/t/use-user-name-keyword-field-in-a-kibana-visualisation/225638)
**Author:** [@eoli3n](https://discuss.elastic.co/u/eoli3n)\ **Replies:** 4\ **Last updated:** [March 31, 2020, 8:39am UTC](https://discuss.elastic.co/t/use-user-name-keyword-field-in-a-kibana-visualisation/225638 "2020-03-31T08:39:15Z")
Hi, I want to be able to unique.count on user.name field from filebeat-\* indexes with system auth module enabled. When i do this, i get a kibana error "\* of \* shards failed", and when i go to "response" tab, i can read … --- ## [Security Audit logs not printing to console with docker](https://discuss.elastic.co/t/security-audit-logs-not-printing-to-console-with-docker/119307)
**Author:** [@aaronloesattv](https://discuss.elastic.co/u/aaronloesattv)\ **Replies:** 4\ **Last updated:** [March 1, 2018, 5:02am UTC](https://discuss.elastic.co/t/security-audit-logs-not-printing-to-console-with-docker/119307 "2018-03-01T05:02:58Z")
Our ES docker container ran out of disk because of the security audit logs being written to file. I found this issue on github (https://github.com/elastic/elasticsearch-docker/issues/78) and went to verify that our docke… --- ## [Is it possible to pass arbitrary headers to Elasticsearch from Kibana?](https://discuss.elastic.co/t/is-it-possible-to-pass-arbitrary-headers-to-elasticsearch-from-kibana/40144)
**Author:** [@kmoe](https://discuss.elastic.co/u/kmoe)\ **Replies:** 4\ **Last updated:** [January 24, 2017, 12:08am UTC](https://discuss.elastic.co/t/is-it-possible-to-pass-arbitrary-headers-to-elasticsearch-from-kibana/40144 "2017-01-24T00:08:06Z")
Note that I've forked Kibana 4.3 and am very prepared to mess with the internals, so the answer to my question is almost certainly "yes", but I'm not sure how difficult it will be. Our setup requires that we pass an Au… --- ## [検索の精度を上げるアプローチの仕方](https://discuss.elastic.co/t/topic/61728)
**Author:** [@eng\_toshiki](https://discuss.elastic.co/u/eng_toshiki)\ **Replies:** 4\ **Last updated:** [October 14, 2016, 6:51am UTC](https://discuss.elastic.co/t/topic/61728 "2016-10-14T06:51:37Z")
お世話になっております。 現在ElasticCloudを利用し、全文検索の構築を行っております。 掲題の通り、検索の精度についての質問です。 ex) 探したいワード：渋谷ヒカリエ 上記にでヒットすることがきる検索ワード ・渋谷 ・ヒカリ ・エ トークナイズ(kuromoji)の結果が上のように分割されているため ヒカリエ という検索ワードでヒットさせてことができません。 渋谷ヒカリエはほんの例で、最近の言葉や… --- ## [Move documents from one index to another](https://discuss.elastic.co/t/move-documents-from-one-index-to-another/201172)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 5\ **Last updated:** [October 2, 2019, 8:43am UTC](https://discuss.elastic.co/t/move-documents-from-one-index-to-another/201172 "2019-10-02T08:43:37Z")
Hi guys, I have the index where I store data. My question is whether I can restore the data that meet some conditions to a new index by using script reindexing so I can visualize the data properly. Basically I'm thinki… --- ## [Page not found error in stack monitoring page](https://discuss.elastic.co/t/page-not-found-error-in-stack-monitoring-page/238551)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 8\ **Last updated:** [June 25, 2020, 8:30pm UTC](https://discuss.elastic.co/t/page-not-found-error-in-stack-monitoring-page/238551 "2020-06-25T20:30:37Z")
I am getting 404 - "page not found" while clicking on specific node inside stack management. I am able to get details about other nodes. Here is the URL: logstash/node/3cba9882-7c93-48d6-ae7c-2c599b01abfa?\_g=(cluster… --- ## [Discovery.seed\_hosts and cluster.initial\_master\_nodes](https://discuss.elastic.co/t/discovery-seed-hosts-and-cluster-initial-master-nodes/330945)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 2\ **Last updated:** [April 27, 2023, 4:43pm UTC](https://discuss.elastic.co/t/discovery-seed-hosts-and-cluster-initial-master-nodes/330945 "2023-04-27T16:43:40Z")
I'm struggling to understand the discovery settings now that discovery.zen.minimum\_master\_nodes has gone away. (where current is 8.7) says that discovery.seed\_hosts Provides a list of the addresses of the master-el… --- ## [Logstashのmultiple pipelineでの、同一input](https://discuss.elastic.co/t/logstash-multiple-pipeline-input/149932)
**Author:** [@hogehuga](https://discuss.elastic.co/u/hogehuga)\ **Replies:** 2\ **Last updated:** [September 26, 2018, 8:44am UTC](https://discuss.elastic.co/t/logstash-multiple-pipeline-input/149932 "2018-09-26T08:44:25Z")
Logstashでmultiple pipelineを利用したいと考えています。 通常はisolateするためにinputは異なるようにするものだと思っていますが、同一inputの場合はパフォーマンス等で有意になることは有るのでしょうか。 本来は、例えばsyslog転送やrsyncでファイルとして回収した上で、inputをファイルとして取り込むのが一番良さそうだと思ってはいます。 各サーバにfilebeatを配置し、logtype… --- ## [Fuzzy search with space](https://discuss.elastic.co/t/fuzzy-search-with-space/31685)
**Author:** [@kodermax](https://discuss.elastic.co/u/kodermax)\ **Replies:** 2\ **Last updated:** [October 6, 2015, 6:56pm UTC](https://discuss.elastic.co/t/fuzzy-search-with-space/31685 "2015-10-06T18:56:48Z")
How can i search with space my query: $params = \[ 'index' =\> 'port', 'type' =\> 'contact', 'size' =\> 50, 'body' =\> \[ 'query' =\> \[ … --- ## [How to customise the kibana UI?](https://discuss.elastic.co/t/how-to-customise-the-kibana-ui/70179)
**Author:** [@RajeshAJ](https://discuss.elastic.co/u/RajeshAJ)\ **Replies:** 1\ **Last updated:** [December 30, 2016, 6:00pm UTC](https://discuss.elastic.co/t/how-to-customise-the-kibana-ui/70179 "2016-12-30T18:00:03Z")
i need to customise the tile-map in kibana visualization.i successfully created a tile-map UI in kibana but when I click on it,it will show only the no of counts (i attach the cover shot of the output in kibana),i want w… --- ## [S3 output using iam roles that gives access to aws security credentials](https://discuss.elastic.co/t/s3-output-using-iam-roles-that-gives-access-to-aws-security-credentials/29302)
**Author:** [@trekr5](https://discuss.elastic.co/u/trekr5)\ **Replies:** 1\ **Last updated:** [September 30, 2015, 2:56am UTC](https://discuss.elastic.co/t/s3-output-using-iam-roles-that-gives-access-to-aws-security-credentials/29302 "2015-09-30T02:56:28Z")
Hello, I really would appreciate assistance regarding this matter. I'm using Logstash 1.5 on Ubuntu 14.04 and am trying to configure my logstash installation to upload data to an s3 bucket via an iam role. Currentl… --- ## [Having trouble posting json event using logstash http output plugin](https://discuss.elastic.co/t/having-trouble-posting-json-event-using-logstash-http-output-plugin/235208)
**Author:** [@Gangadhar\_Mahadevan](https://discuss.elastic.co/u/Gangadhar_Mahadevan)\ **Replies:** 6\ **Last updated:** [June 3, 2020, 4:18pm UTC](https://discuss.elastic.co/t/having-trouble-posting-json-event-using-logstash-http-output-plugin/235208 "2020-06-03T16:18:53Z")
I am building a logstash runner that reads input from kafka topic converts the message in specific json format that a webhook accepts using filter.conf and uses logstash http output plugin to send the event to webhook ur… --- ## [Calculating with Document Frequency, not Inverse Document Frequency](https://discuss.elastic.co/t/calculating-with-document-frequency-not-inverse-document-frequency/12479)
**Author:** [@Tomas\_Petulik](https://discuss.elastic.co/u/Tomas_Petulik)\ **Replies:** 6\ **Last updated:** [June 25, 2013, 9:06am UTC](https://discuss.elastic.co/t/calculating-with-document-frequency-not-inverse-document-frequency/12479 "2013-06-25T09:06:17Z")
Hello, I have gist https://gist.github.com/anonymous/5813541 where I search for 'small'. But result where 'small' is just once is higher then the result where 'small' is twice. I want the results where the more… --- ## [Match multiple values into one field](https://discuss.elastic.co/t/match-multiple-values-into-one-field/181115)
**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\ **Replies:** 3\ **Last updated:** [May 15, 2019, 12:45pm UTC](https://discuss.elastic.co/t/match-multiple-values-into-one-field/181115 "2019-05-15T12:45:21Z")
Hi, We want to match multiple values into one field from a single Document/Message. For example, the following message: "Testlog, Field1=value1,asdasda,asdasd,asdasd,Field2=value2" With the following grok patterns: "… --- ## [Ruby/Mutate: converting to double](https://discuss.elastic.co/t/ruby-mutate-converting-to-double/125250)
**Author:** [@chuchurocket27](https://discuss.elastic.co/u/chuchurocket27)\ **Replies:** 3\ **Last updated:** [March 22, 2018, 8:24pm UTC](https://discuss.elastic.co/t/ruby-mutate-converting-to-double/125250 "2018-03-22T20:24:28Z")
Based on the documentation for the mutate filter it looks like I cannot convert a value to a double, only a float. Is there a way with a Ruby filter to convert to a double instead? --- ## [Kibana Visual builder Math expression error](https://discuss.elastic.co/t/kibana-visual-builder-math-expression-error/188718)
**Author:** [@ravitandur](https://discuss.elastic.co/u/ravitandur)\ **Replies:** 4\ **Last updated:** [July 5, 2019, 2:50pm UTC](https://discuss.elastic.co/t/kibana-visual-builder-math-expression-error/188718 "2019-07-05T14:50:11Z")
I am creating a line visualisation using Kibana Visual builder. I defined two SUM aggregations on fields ingestedsize and primarystore. Based on these two values I want to display % line. For this I used Math aggregat… --- ## [The 2022 Elastic Community Conference starts very soon!](https://discuss.elastic.co/t/the-2022-elastic-community-conference-starts-very-soon/296917)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 0\ **Last updated:** [February 10, 2022, 11:55pm UTC](https://discuss.elastic.co/t/the-2022-elastic-community-conference-starts-very-soon/296917 "2022-02-10T23:55:22Z")
The 2022 Elastic Community Conference starts very soon! Check out the full schedule right here. You can also head directly to our YouTube channel to follow the specific language tracks using the links below. ElasticCC: … --- ## [ENvironmental variable hostname in logstash.yml and pipelines.yml or logstash.conf](https://discuss.elastic.co/t/environmental-variable-hostname-in-logstash-yml-and-pipelines-yml-or-logstash-conf/207508)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 1\ **Last updated:** [November 13, 2019, 11:50am UTC](https://discuss.elastic.co/t/environmental-variable-hostname-in-logstash-yml-and-pipelines-yml-or-logstash-conf/207508 "2019-11-13T11:50:11Z")
I have pipeline id in pipelines.yml=\> pipe-common I want to give id as pipe-common\_ So the hostname should be dynamic from the environmentla variables of OS level. I can use ${hostname} variable in shell script. same … --- ## [Spark.es.nodes config setting in Spark not getting picked up](https://discuss.elastic.co/t/spark-es-nodes-config-setting-in-spark-not-getting-picked-up/54191)
**Author:** [@David\_Kincaid](https://discuss.elastic.co/u/David_Kincaid)\ **Replies:** 1\ **Last updated:** [June 30, 2016, 7:23pm UTC](https://discuss.elastic.co/t/spark-es-nodes-config-setting-in-spark-not-getting-picked-up/54191 "2016-06-30T19:23:45Z")
Using Spark 1.6 with pyspark and TargetHolding/pyspark-elastic 0.4.2 and can't figure out how to tell it which ES node to use. The docs for pyspark-elastic say to set --conf spark.es.nodes=\ but for some reason it'… --- ## [Keyword mapping is not working](https://discuss.elastic.co/t/keyword-mapping-is-not-working/169286)
**Author:** [@clrnd](https://discuss.elastic.co/u/clrnd)\ **Replies:** 2\ **Last updated:** [February 22, 2019, 1:46pm UTC](https://discuss.elastic.co/t/keyword-mapping-is-not-working/169286 "2019-02-22T13:46:29Z")
Hi! First of all thanks to everyone in the community, so far I'm very pleased with the stack! Now, I'm having an issue which is just driving me mad. I have this index template: GET /\_template/filebeat-6.5.4 { "filebe… --- ## [Importing Dashboards Issue](https://discuss.elastic.co/t/importing-dashboards-issue/101509)
**Author:** [@CDR](https://discuss.elastic.co/u/CDR)\ **Replies:** 2\ **Last updated:** [October 12, 2017, 2:35pm UTC](https://discuss.elastic.co/t/importing-dashboards-issue/101509 "2017-10-12T14:35:57Z")
I am having an error importing dashboards. I was running old versions of the ELK Stack (5.5.2) and upgraded to 5.6.1. I had dashboards and visualizations that I wanted to carry over to the new version of ELK. When I expo… [Previous page](https://discuss.elastic.co/top.md?page=832&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=834&per_page=50&period=all)