# Top

**URL:** https://discuss.elastic.co/top.md?page=840&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 841

---

## [Message Format problem for logstash](https://discuss.elastic.co/t/message-format-problem-for-logstash/54612)

<div class="topic-metadata">

**Author:** [@axil\_76](https://discuss.elastic.co/u/axil_76)\
**Replies:** 3\
**Last updated:** [July 5, 2016, 9:59am UTC](https://discuss.elastic.co/t/message-format-problem-for-logstash/54612 "2016-07-05T09:59:13Z")

</div>

hello, I installed filebeat in a container and another container I have installed logstash, and I put myself in debug mode, I perceive myself as the original message does not have the correct format, config entry into lo…

---

## [Support for Spark 3.0 connector](https://discuss.elastic.co/t/support-for-spark-3-0-connector/239029)

<div class="topic-metadata">

**Author:** [@Swapnil\_Nawale](https://discuss.elastic.co/u/Swapnil_Nawale)\
**Replies:** 0\
**Last updated:** [June 28, 2020, 8:10pm UTC](https://discuss.elastic.co/t/support-for-spark-3-0-connector/239029 "2020-06-28T20:10:40Z")

</div>

Is there a plan to support elasticsearch-spark connector for Apache Spark 3.0 ? If yes, is there an ETA on the same ?

---

## [How to iterate through json array and print a formatted string?](https://discuss.elastic.co/t/how-to-iterate-through-json-array-and-print-a-formatted-string/319676)

<div class="topic-metadata">

**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\
**Replies:** 1\
**Last updated:** [November 23, 2022, 6:27pm UTC](https://discuss.elastic.co/t/how-to-iterate-through-json-array-and-print-a-formatted-string/319676 "2022-11-23T18:27:47Z")

</div>

I'm learning how to use logstash and I got things to mostly work. But I want to learn how to iterate through a json array and print a formatted result set. For example, I created a file called /root/test.log with the fo…

---

## [Squid Module: Splitting multiple logs which are combined as a single message in Kibana](https://discuss.elastic.co/t/squid-module-splitting-multiple-logs-which-are-combined-as-a-single-message-in-kibana/258609)

<div class="topic-metadata">

**Author:** [@ron\_g](https://discuss.elastic.co/u/ron_g)\
**Replies:** 4\
**Last updated:** [December 17, 2020, 3:24pm UTC](https://discuss.elastic.co/t/squid-module-splitting-multiple-logs-which-are-combined-as-a-single-message-in-kibana/258609 "2020-12-17T15:24:09Z")

</div>

We have the problem that all logs which are send from our Squid server over Filebeat with the Squid module are combined as single messages in Kibana. The message contains 5 up to 15 entrys which are in fact single log l…

---

## [Automated raw CSV export of visualization \[Kibana 4\]](https://discuss.elastic.co/t/automated-raw-csv-export-of-visualization-kibana-4/115869)

<div class="topic-metadata">

**Author:** [@xenoid](https://discuss.elastic.co/u/xenoid)\
**Replies:** 4\
**Last updated:** [January 18, 2018, 2:17pm UTC](https://discuss.elastic.co/t/automated-raw-csv-export-of-visualization-kibana-4/115869 "2018-01-18T14:17:09Z")

</div>

I want to automate the generation of a csv file that usually would be downloaded by clicking on the "Raw" button on the bottom of the page. \[image\] It would be as simple as //Folding up the menu (in Javascript) $("i.f…

---

## [Logstash JDBC document\_id not reading latest](https://discuss.elastic.co/t/logstash-jdbc-document-id-not-reading-latest/115610)

<div class="topic-metadata">

**Author:** [@bhrtjoshi](https://discuss.elastic.co/u/bhrtjoshi)\
**Replies:** 4\
**Last updated:** [January 17, 2018, 5:42pm UTC](https://discuss.elastic.co/t/logstash-jdbc-document-id-not-reading-latest/115610 "2018-01-17T17:42:13Z")

</div>

Hello There, I am referring this article https://www.elastic.co/blog/logstash-jdbc-input-plugin to ingest data from Oracle table. I need to get Oracle result set from some huge queries but before I do that I am playing …

---

## [Migrating the Kibana index](https://discuss.elastic.co/t/migrating-the-kibana-index/107749)

<div class="topic-metadata">

**Author:** [@Maekee](https://discuss.elastic.co/u/Maekee)\
**Replies:** 4\
**Last updated:** [November 16, 2017, 3:14pm UTC](https://discuss.elastic.co/t/migrating-the-kibana-index/107749 "2017-11-16T15:14:49Z")

</div>

Hello, Am upgrading my ELK-stack to 6.0e but get stuck on migrating the .kibana index to the .kibana-6 described here: https://www.elastic.co/guide/en/kibana/6.0/migrating-6.0-index.html My Q is.. how do run create th…

---

## [Get stem for word in elastic](https://discuss.elastic.co/t/get-stem-for-word-in-elastic/28599)

<div class="topic-metadata">

**Author:** [@edeak](https://discuss.elastic.co/u/edeak)\
**Replies:** 4\
**Last updated:** [September 7, 2015, 1:01pm UTC](https://discuss.elastic.co/t/get-stem-for-word-in-elastic/28599 "2015-09-07T13:01:00Z")

</div>

Hi! I'd like to pass a sentence to Elastic and want the word's root/etymon/stem (don't know how to call). I'm using the latest elastic and if it's possible I'd do it through the REST api. Thanks!

---

## [How to configure elasticsearch to sort the scored documents on a field after score for documents is calculated?](https://discuss.elastic.co/t/how-to-configure-elasticsearch-to-sort-the-scored-documents-on-a-field-after-score-for-documents-is-calculated/15338)

<div class="topic-metadata">

**Author:** [@dark\_shadow](https://discuss.elastic.co/u/dark_shadow)\
**Replies:** 4\
**Last updated:** [January 29, 2014, 8:41am UTC](https://discuss.elastic.co/t/how-to-configure-elasticsearch-to-sort-the-scored-documents-on-a-field-after-score-for-documents-is-calculated/15338 "2014-01-29T08:41:33Z")

</div>

Hi, I want to configure the ElasticSearch so that it after calculating the score of each document corresponding to a user query, it sorts those score documents by some other field and then give the response. There…

---

## [Unable to fet ch data from kibana\_settings collector](https://discuss.elastic.co/t/unable-to-fet-ch-data-from-kibana-settings-collector/124624)

<div class="topic-metadata">

**Author:** [@vaishali1](https://discuss.elastic.co/u/vaishali1)\
**Replies:** 2\
**Last updated:** [March 23, 2018, 5:18pm UTC](https://discuss.elastic.co/t/unable-to-fet-ch-data-from-kibana-settings-collector/124624 "2018-03-23T17:18:18Z")

</div>

Hi, Can anyone explain me this Warning? I installed X-pack-6.2.2 for elasticsearch and kibana. When i try to run Kibana.bat. I can login to "localhost:9200" Config: Error 503 Service Unavailable: Request Timeout aft…

---

## [Watcher Hits in Script Params](https://discuss.elastic.co/t/watcher-hits-in-script-params/101533)

<div class="topic-metadata">

**Author:** [@luke.snyder](https://discuss.elastic.co/u/luke.snyder)\
**Replies:** 2\
**Last updated:** [October 2, 2017, 3:44pm UTC](https://discuss.elastic.co/t/watcher-hits-in-script-params/101533 "2017-10-02T15:44:13Z")

</div>

I am attempting to pass some fields from the hits generated by a watch to a painless script so I can index a subset of the fields. Ultimately I would like to be able to pass n number of parameters to the script and have …

---

## [Calculating the avg time between two time stamps](https://discuss.elastic.co/t/calculating-the-avg-time-between-two-time-stamps/18833)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 2\
**Last updated:** [July 24, 2014, 1:14pm UTC](https://discuss.elastic.co/t/calculating-the-avg-time-between-two-time-stamps/18833 "2014-07-24T13:14:09Z")

</div>

Using ES 1.2.2 The below aggregation will give me my average requests per second and the average response times for each second. Is this the only way to do it or is there better way? Since scripting is a bit sl…

---

## [Kibana Visualize Lens not showing nested fields](https://discuss.elastic.co/t/kibana-visualize-lens-not-showing-nested-fields/322691)

<div class="topic-metadata">

**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\
**Replies:** 3\
**Last updated:** [January 16, 2023, 3:47pm UTC](https://discuss.elastic.co/t/kibana-visualize-lens-not-showing-nested-fields/322691 "2023-01-16T15:47:26Z")

</div>

I'm not sure what I did wrong, but Kibana Lenses aren't showing me the nested field inventory.equipment. In terms of what I did, I set up an index and added a document with this script: PUT warehouse POST warehouse/\_ma…

---

## [The CustomResourceDefinition "elasticsearches.elasticsearch.k8s.elastic.co" is invalid](https://discuss.elastic.co/t/the-customresourcedefinition-elasticsearches-elasticsearch-k8s-elastic-co-is-invalid/218557)

<div class="topic-metadata">

**Author:** [@Abhilash\_B](https://discuss.elastic.co/u/Abhilash_B)\
**Replies:** 3\
**Last updated:** [February 12, 2020, 2:52pm UTC](https://discuss.elastic.co/t/the-customresourcedefinition-elasticsearches-elasticsearch-k8s-elastic-co-is-invalid/218557 "2020-02-12T14:52:54Z")

</div>

I apply this command on my kubernetes cluster kubectl delete -f https://download.elastic.co/downloads/eck/0.9.0/all-in-one.yaml I get this error: The CustomResourceDefinition "elasticsearches.elasticsearch.k8s.elastic…

---

## [How can I do log analysis using kibana](https://discuss.elastic.co/t/how-can-i-do-log-analysis-using-kibana/49613)

<div class="topic-metadata">

**Author:** [@nitesh](https://discuss.elastic.co/u/nitesh)\
**Replies:** 3\
**Last updated:** [May 10, 2016, 8:50pm UTC](https://discuss.elastic.co/t/how-can-i-do-log-analysis-using-kibana/49613 "2016-05-10T20:50:09Z")

</div>

Hello Team, Till now what I have implemented. Filebeat(logs)---\>Logstash-----\>Elasticsearch-----\>Kibana I can see these logs on kibana dashboard when I make a search \* in discover. Can you please help me how can I …

---

## [Extend built-in analyzers](https://discuss.elastic.co/t/extend-built-in-analyzers/134778)

<div class="topic-metadata">

**Author:** [@yansal](https://discuss.elastic.co/u/yansal)\
**Replies:** 7\
**Last updated:** [June 7, 2018, 2:19pm UTC](https://discuss.elastic.co/t/extend-built-in-analyzers/134778 "2018-06-07T14:19:52Z")

</div>

My use case is to add the html\_strip char\_filter to an existing language analyzer. For example, I would like to create an index like this one: PUT /myindex { "settings": { "analysis": { "analyze…

---

## [Metricbeat - Docker Container stats in Mesos DCOS](https://discuss.elastic.co/t/metricbeat-docker-container-stats-in-mesos-dcos/98131)

<div class="topic-metadata">

**Author:** [@jruzicka](https://discuss.elastic.co/u/jruzicka)\
**Replies:** 7\
**Last updated:** [August 30, 2017, 2:38pm UTC](https://discuss.elastic.co/t/metricbeat-docker-container-stats-in-mesos-dcos/98131 "2017-08-30T14:38:34Z")

</div>

Does anyone have best practice for sending Elastic Docker stats from containers running in DCOS on CentOS? I’m running Elastic 5.2.2. I see some discussion with using filebeat, but i’m interested in the cpu & mem usag…

---

## [Decode json in \_source into fields](https://discuss.elastic.co/t/decode-json-in--source-into-fields/92137)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 1\
**Last updated:** [July 24, 2017, 5:47pm UTC](https://discuss.elastic.co/t/decode-json-in--source-into-fields/92137 "2017-07-24T17:47:46Z")

</div>

Hello, I'm using Filebeat and Logstash to analyze logs from Wazuh, the logs are json files where each line is a json string, I can read the log correctly and push it into Elasticsearch, through Logstash, and it correctl…

---

## [Error using nested query: "child query must only match non-parent docs"](https://discuss.elastic.co/t/error-using-nested-query-child-query-must-only-match-non-parent-docs/67815)

<div class="topic-metadata">

**Author:** [@jpblair](https://discuss.elastic.co/u/jpblair)\
**Replies:** 1\
**Last updated:** [December 9, 2016, 7:33pm UTC](https://discuss.elastic.co/t/error-using-nested-query-child-query-must-only-match-non-parent-docs/67815 "2016-12-09T19:33:01Z")

</div>

I'm trying to run a nested query in filter context, but when I do, I get the error below. I only get this error in 2.x. In 1.x, it works as expected (I'm currently migrating from 1.x to 2.x). The nested query refer…

---

## [Keeping ES in sync with MySQL changes - JDBC River?](https://discuss.elastic.co/t/keeping-es-in-sync-with-mysql-changes-jdbc-river/14778)

<div class="topic-metadata">

**Author:** [@Justin\_Doles](https://discuss.elastic.co/u/Justin_Doles)\
**Replies:** 7\
**Last updated:** [December 10, 2013, 1:23pm UTC](https://discuss.elastic.co/t/keeping-es-in-sync-with-mysql-changes-jdbc-river/14778 "2013-12-10T13:23:58Z")

</div>

I'm using ES 0.90.7 along with JDBC River 2.2.3. I'm attempting to find a mechanic to periodically update ES from a MySQL table. I need to ensure that I have every row from MySQL indexed into ES. Below is my test …

---

## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/299872)

<div class="topic-metadata">

**Author:** [@juliano.maciel](https://discuss.elastic.co/u/juliano.maciel)\
**Replies:** 6\
**Last updated:** [March 16, 2022, 8:10pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/299872 "2022-03-16T20:10:15Z")

</div>

Hi, i'am tring to conifg Elastic Stack 7.16.2 with a windows server. My configs: Elasticsearch APM-server Kibana When i try to acess Kibana, is show the message at the browser

---

## [Index.blocks.read\_only\_allow\_delete becomes true even if water mark is reached in one of the node in the cluster](https://discuss.elastic.co/t/index-blocks-read-only-allow-delete-becomes-true-even-if-water-mark-is-reached-in-one-of-the-node-in-the-cluster/174048)

<div class="topic-metadata">

**Author:** [@Hari\_Prasad](https://discuss.elastic.co/u/Hari_Prasad)\
**Replies:** 6\
**Last updated:** [March 27, 2019, 1:09pm UTC](https://discuss.elastic.co/t/index-blocks-read-only-allow-delete-becomes-true-even-if-water-mark-is-reached-in-one-of-the-node-in-the-cluster/174048 "2019-03-27T13:09:43Z")

</div>

I have multiple data nodes in my cluster with uneven disk capacities. While the data is being continuously being indexed, some nodes reach the 90% watermark (other nodes in the cluster do have sufficient remaining disk s…

---

## [SAML role mapping with wildcard](https://discuss.elastic.co/t/saml-role-mapping-with-wildcard/233107)

<div class="topic-metadata">

**Author:** [@raphperrin](https://discuss.elastic.co/u/raphperrin)\
**Replies:** 4\
**Last updated:** [May 19, 2020, 6:18am UTC](https://discuss.elastic.co/t/saml-role-mapping-with-wildcard/233107 "2020-05-19T06:18:10Z")

</div>

Hi I am configuring role mapping on my cluster. As the user has multiple roles/groupes, I am trying to map the role with wildcard. How should I do it ? From the API : POST /\_xpack/security/role\_mapping/plateform-admi…

---

## [EsHadoopInvalidRequest after updating to Elasticsearch 5.5](https://discuss.elastic.co/t/eshadoopinvalidrequest-after-updating-to-elasticsearch-5-5/93735)

<div class="topic-metadata">

**Author:** [@simonlucalandi](https://discuss.elastic.co/u/simonlucalandi)\
**Replies:** 2\
**Last updated:** [July 20, 2017, 6:10am UTC](https://discuss.elastic.co/t/eshadoopinvalidrequest-after-updating-to-elasticsearch-5-5/93735 "2017-07-20T06:10:58Z")

</div>

I have some issues saving an RDD after upgrading to ES 5.5.0 Libraries used are: libraryDependencies += "org.apache.spark" %% "spark-core" % "2.2.0" libraryDependencies += "org.elasticsearch" % "elasticsearch-spark-20\_…

---

## [Can't just use email?](https://discuss.elastic.co/t/cant-just-use-email/608)

<div class="topic-metadata">

**Author:** [@Norberto\_Meijome](https://discuss.elastic.co/u/Norberto_Meijome)\
**Replies:** 2\
**Last updated:** [May 13, 2015, 1:08pm UTC](https://discuss.elastic.co/t/cant-just-use-email/608 "2015-05-13T13:08:26Z")

</div>

Hello! so i tried sending an email from my gmail account directly, to discuss+elasticsearch@discuss.co , as per https://discuss.elastic.co/t/email-only-interaction-with-the-forums/106 . I got twice an email back sta…

---

## [The license: a stab in the dark](https://discuss.elastic.co/t/the-license-a-stab-in-the-dark/69158)

<div class="topic-metadata">

**Author:** [@Gamer](https://discuss.elastic.co/u/Gamer)\
**Replies:** 5\
**Last updated:** [January 17, 2017, 7:42am UTC](https://discuss.elastic.co/t/the-license-a-stab-in-the-dark/69158 "2017-01-17T07:42:41Z")

</div>

Hello! I'd like to complain. I deployed an ELK stack and set up a Filebeat client. Then I happily tested for a month, until totally unexpected got a 'license expired' message. What the hell. I mean ,guys, why is it tha…

---

## [Logout button for kibana with backend saml realm](https://discuss.elastic.co/t/logout-button-for-kibana-with-backend-saml-realm/191298)

<div class="topic-metadata">

**Author:** [@Jathin](https://discuss.elastic.co/u/Jathin)\
**Replies:** 3\
**Last updated:** [July 23, 2019, 2:54pm UTC](https://discuss.elastic.co/t/logout-button-for-kibana-with-backend-saml-realm/191298 "2019-07-23T14:54:57Z")

</div>

Our security team recommends to provide a means for user to effectively logout and clear the session. We have configured saml sso login thru saml auth realm plugin in elasticsearch backend. I am looking for a way to enab…

---

## [Logstash fails to auto generate column names from CSV file](https://discuss.elastic.co/t/logstash-fails-to-auto-generate-column-names-from-csv-file/185265)

<div class="topic-metadata">

**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\
**Replies:** 3\
**Last updated:** [June 11, 2019, 9:06pm UTC](https://discuss.elastic.co/t/logstash-fails-to-auto-generate-column-names-from-csv-file/185265 "2019-06-11T21:06:06Z")

</div>

Hi everyone, I used the following Logstash configuration, but sometimes Logstash auto generates the column names from the CSV file, and sometimes its not (According to the pictures). Could you please clarify what is the…

---

## [Filebeat Keystore broken](https://discuss.elastic.co/t/filebeat-keystore-broken/173802)

<div class="topic-metadata">

**Author:** [@Alive](https://discuss.elastic.co/u/Alive)\
**Replies:** 3\
**Last updated:** [March 26, 2019, 9:34am UTC](https://discuss.elastic.co/t/filebeat-keystore-broken/173802 "2019-03-26T09:34:00Z")

</div>

Hi All, seems that if I add a keystore and the password used has a comma (example: HDiwmdei,dd\*d ), the keystore doesn't work. The error at the startup is: filebeat test config Exiting: error initializing publisher: …

---

## [Comma as delimiter in grok and null values](https://discuss.elastic.co/t/comma-as-delimiter-in-grok-and-null-values/68604)

<div class="topic-metadata">

**Author:** [@Miguel\_Bessa](https://discuss.elastic.co/u/Miguel_Bessa)\
**Replies:** 3\
**Last updated:** [December 12, 2016, 11:33pm UTC](https://discuss.elastic.co/t/comma-as-delimiter-in-grok-and-null-values/68604 "2016-12-12T23:33:34Z")

</div>

Hello everyone, I have a txt file with a log structure like this: field1,field2,field3,field4,field5,field6,field7,field8,field9,field10,field11,field12, field13,field14 As you can see, every field is delimited by c…

---

## [Running Python script without printing results](https://discuss.elastic.co/t/running-python-script-without-printing-results/271678)

<div class="topic-metadata">

**Author:** [@Felipe\_Fuller](https://discuss.elastic.co/u/Felipe_Fuller)\
**Replies:** 2\
**Last updated:** [May 15, 2021, 8:40pm UTC](https://discuss.elastic.co/t/running-python-script-without-printing-results/271678 "2021-05-15T20:40:28Z")

</div>

Hi Community! I hope that you're doing great! I've been involved in a project, and we have to process data with a python script and then insert it with Logstash into Elasticsearch. Having that said, I use the exec plugi…

---

## [Questions about breaking changes re: .yml setting changes between ES 1.7.2 and ES 5.x](https://discuss.elastic.co/t/questions-about-breaking-changes-re-yml-setting-changes-between-es-1-7-2-and-es-5-x/71297)

<div class="topic-metadata">

**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\
**Replies:** 2\
**Last updated:** [January 12, 2017, 8:21pm UTC](https://discuss.elastic.co/t/questions-about-breaking-changes-re-yml-setting-changes-between-es-1-7-2-and-es-5-x/71297 "2017-01-12T20:21:00Z")

</div>

Hi, We're spinning up a new 5.0 cluster to migrate our data to. Our current cluster is a 1.7.2 cluster. We're going to use the reindex from remote option. While spinning up the new VMs, we ran into some breaking ch…

---

## [Elasticsearch 7.3.2 not starting with security enabled](https://discuss.elastic.co/t/elasticsearch-7-3-2-not-starting-with-security-enabled/200458)

<div class="topic-metadata">

**Author:** [@fchiorascu](https://discuss.elastic.co/u/fchiorascu)\
**Replies:** 6\
**Last updated:** [October 18, 2019, 11:46am UTC](https://discuss.elastic.co/t/elasticsearch-7-3-2-not-starting-with-security-enabled/200458 "2019-10-18T11:46:34Z")

</div>

Dear all, Elasticsearch: \[root@fchiorascu-2 ~\]# cat /etc/elasticsearch/elasticsearch.yml cluster.name: fchiorascu-efk node.name: fchiorascu-2 path.data: /data/elasticsearch/fchiorascu-2 path.logs: /var/log/elastic…

---

## [How to add a elasticsearch datanode within Apache Metron](https://discuss.elastic.co/t/how-to-add-a-elasticsearch-datanode-within-apache-metron/104729)

<div class="topic-metadata">

**Author:** [@freemonj](https://discuss.elastic.co/u/freemonj)\
**Replies:** 6\
**Last updated:** [October 25, 2017, 8:34pm UTC](https://discuss.elastic.co/t/how-to-add-a-elasticsearch-datanode-within-apache-metron/104729 "2017-10-25T20:34:09Z")

</div>

Hello, Can anyone provide a reference on how to add ElasticSearch data nodes to an existing cluster using either of the following: Ambari via command line (CLI) FYI all nodes are already configured for the cluster an…

---

## [Node based storage vs external storage](https://discuss.elastic.co/t/node-based-storage-vs-external-storage/72408)

<div class="topic-metadata">

**Author:** [@kopacko](https://discuss.elastic.co/u/kopacko)\
**Replies:** 6\
**Last updated:** [January 24, 2017, 12:07am UTC](https://discuss.elastic.co/t/node-based-storage-vs-external-storage/72408 "2017-01-24T00:07:19Z")

</div>

I currently have 2 clusters, each with 4 data nodes. All nodes are VMs, running Ubuntu 16.04. Each data node has a 2TB disk allocated to it. Would it be better to setup one logical LUN for all the nodes to talk to,…

---

## [Group and filter results](https://discuss.elastic.co/t/group-and-filter-results/55775)

<div class="topic-metadata">

**Author:** [@PhilippC](https://discuss.elastic.co/u/PhilippC)\
**Replies:** 6\
**Last updated:** [July 19, 2016, 9:46am UTC](https://discuss.elastic.co/t/group-and-filter-results/55775 "2016-07-19T09:46:21Z")

</div>

I have an index of DocumentVersions - different versions of a document. {versionId: 1, documentId:1, ...}, {versionId: 2, documentId:1, ...}, {versionId: 3, documentId:2, ...}, {versionId: 4, documentId:2, ...}, ... B…

---

## [Approach for incorporating recency in search](https://discuss.elastic.co/t/approach-for-incorporating-recency-in-search/185209)

<div class="topic-metadata">

**Author:** [@nikita.jain](https://discuss.elastic.co/u/nikita.jain)\
**Replies:** 1\
**Last updated:** [June 12, 2019, 1:09am UTC](https://discuss.elastic.co/t/approach-for-incorporating-recency-in-search/185209 "2019-06-12T01:09:47Z")

</div>

Hi, I'm trying to improve the relevance of search results using user's recent activity, in order to personalize the search experience. I have the data of the user's recent activity, in addition to an exhaustive databas…

---

## [Logstash input dynamodb plugin](https://discuss.elastic.co/t/logstash-input-dynamodb-plugin/109194)

<div class="topic-metadata">

**Author:** [@dangal](https://discuss.elastic.co/u/dangal)\
**Replies:** 4\
**Last updated:** [November 27, 2017, 11:59am UTC](https://discuss.elastic.co/t/logstash-input-dynamodb-plugin/109194 "2017-11-27T11:59:54Z")

</div>

Hi all, why this logstash input dynamodb plugin is not published for 5.x and 6.x i am able to install that plugin successfully in 2.3 and 2.4 why can't i in 5.x and 6.x ? please respond to my question Thank you

---

## [Config for JMS Plugin for Logstash](https://discuss.elastic.co/t/config-for-jms-plugin-for-logstash/46411)

<div class="topic-metadata">

**Author:** [@parthu](https://discuss.elastic.co/u/parthu)\
**Replies:** 4\
**Last updated:** [April 8, 2016, 2:15pm UTC](https://discuss.elastic.co/t/config-for-jms-plugin-for-logstash/46411 "2016-04-08T14:15:20Z")

</div>

I could install the input JMS Plugin for Logstash and started it up on the command line using this config: bin/logstash -e 'input {jms {destination =\> output\_queue} } output {stdout {codec =\> rubydebug}}' And I get thi…

---

## [Es service not starting up due to error](https://discuss.elastic.co/t/es-service-not-starting-up-due-to-error/302154)

<div class="topic-metadata">

**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\
**Replies:** 7\
**Last updated:** [April 26, 2022, 8:34am UTC](https://discuss.elastic.co/t/es-service-not-starting-up-due-to-error/302154 "2022-04-26T08:34:15Z")

</div>

Hi Team, My cluster was working fine but all of sudden i am getting below errors in elastic log. es service is not getting failed. \[T06:13:20,213\]\[ERROR\]\[o.e.x.s.a.e.ReservedRealm\] \[es\_1\] failed to retrieve password ha…

---

## [Capture all traces & spans and custom configuration doubt](https://discuss.elastic.co/t/capture-all-traces-spans-and-custom-configuration-doubt/204362)

<div class="topic-metadata">

**Author:** [@gopikrishnan](https://discuss.elastic.co/u/gopikrishnan)\
**Replies:** 7\
**Last updated:** [October 23, 2019, 7:52am UTC](https://discuss.elastic.co/t/capture-all-traces-spans-and-custom-configuration-doubt/204362 "2019-10-23T07:52:31Z")

</div>

Hi All, Am totally new to elastic apm and elastic search as well and am trying to evaluate elastic apm and its capabilities. Can someone please help to answer below queries how to capture trace and spans for all the …

---

## [How to access Elasticsearch auto-generated password on windows](https://discuss.elastic.co/t/how-to-access-elasticsearch-auto-generated-password-on-windows/263544)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 5\
**Last updated:** [February 9, 2021, 2:00am UTC](https://discuss.elastic.co/t/how-to-access-elasticsearch-auto-generated-password-on-windows/263544 "2021-02-09T02:00:03Z")

</div>

Hi all, When i'm running elasticsearch on my UBUNTU system, i'm able to access auto generated passwords of my security enabled elasticsearch. How can i access auto generated passwords of my elastic instance such as apm…

---

## [Painless (Elasticsearch) can't use keyword - script error](https://discuss.elastic.co/t/painless-elasticsearch-cant-use-keyword-script-error/213878)

<div class="topic-metadata">

**Author:** [@Matthias\_Seidl](https://discuss.elastic.co/u/Matthias_Seidl)\
**Replies:** 5\
**Last updated:** [January 7, 2020, 5:02pm UTC](https://discuss.elastic.co/t/painless-elasticsearch-cant-use-keyword-script-error/213878 "2020-01-07T17:02:09Z")

</div>

I'm trying to create a scripted field in Kibana, which checks whether the field "Direction" is "I" or not. if (doc\['Direction'\].value != "I") {return 1;} else {return 0;} But for some reason, it won't work. With all ot…

---

## [Class NetworkPlugin has not found- Elasticsearch 6.1.1](https://discuss.elastic.co/t/class-networkplugin-has-not-found-elasticsearch-6-1-1/116335)

<div class="topic-metadata">

**Author:** [@alien777](https://discuss.elastic.co/u/alien777)\
**Replies:** 5\
**Last updated:** [January 21, 2018, 10:15am UTC](https://discuss.elastic.co/t/class-networkplugin-has-not-found-elasticsearch-6-1-1/116335 "2018-01-21T10:15:12Z")

</div>

Application throws java.lang.ClassNotFoundException: org.elasticsearch.plugins.NetworkPlugin. In the pom I added two dependencies: \<dependency\> \<groupId\>org.elasticsearch\</groupId\> \<artifactId\>elasticsearch\</art…

---

## [How to make an own timestamp from old log file](https://discuss.elastic.co/t/how-to-make-an-own-timestamp-from-old-log-file/99543)

<div class="topic-metadata">

**Author:** [@Muhammad\_Rizky](https://discuss.elastic.co/u/Muhammad_Rizky)\
**Replies:** 5\
**Last updated:** [September 8, 2017, 8:46am UTC](https://discuss.elastic.co/t/how-to-make-an-own-timestamp-from-old-log-file/99543 "2017-09-08T08:46:53Z")

</div>

Hello, i want to store my own log file to logstash, then i use grok to mapping the date from log file to a field. But, in kibana, that field cannot read as a timestamp, so i can not use the real time stamp in timelion. …

---

## [Csv file no reading?](https://discuss.elastic.co/t/csv-file-no-reading/61064)

<div class="topic-metadata">

**Author:** [@Allie\_Yang](https://discuss.elastic.co/u/Allie_Yang)\
**Replies:** 5\
**Last updated:** [September 25, 2016, 7:17pm UTC](https://discuss.elastic.co/t/csv-file-no-reading/61064 "2016-09-25T19:17:45Z")

</div>

i am trying to read cvs file. i see similar post but see no definite answer. is it the pointer issue that cvs file does not have pointer? If so, logstash doesn't work for static cvs file? my config below: input { …

---

## [Logstash doesn't catch severity/loglevel from Jboss log using rsyslog](https://discuss.elastic.co/t/logstash-doesnt-catch-severity-loglevel-from-jboss-log-using-rsyslog/57847)

<div class="topic-metadata">

**Author:** [@lplinux](https://discuss.elastic.co/u/lplinux)\
**Replies:** 5\
**Last updated:** [August 12, 2016, 3:58pm UTC](https://discuss.elastic.co/t/logstash-doesnt-catch-severity-loglevel-from-jboss-log-using-rsyslog/57847 "2016-08-12T15:58:59Z")

</div>

Hello everybody. I'm starting with ELK and I was able to configure a lot of filters and other stuff. Right now I'm trying to configure JBoss log, but I couldn't configure logstash to match the correct severity. It's alw…

---

## [Illegal\_argument\_exception reject mapping update category in ES 7.6](https://discuss.elastic.co/t/illegal-argument-exception-reject-mapping-update-category-in-es-7-6/230761)

<div class="topic-metadata">

**Author:** [@Ketan\_Chachad](https://discuss.elastic.co/u/Ketan_Chachad)\
**Replies:** 3\
**Last updated:** [May 4, 2020, 3:44pm UTC](https://discuss.elastic.co/t/illegal-argument-exception-reject-mapping-update-category-in-es-7-6/230761 "2020-05-04T15:44:18Z")

</div>

Hi, I have created an index in elasticsearch 7.6. The mapping is as follows: { "employee\_202005011710": { "mappings": { "properties": { "employee": { "properties": { "name": { …

---

## [Logstash/Beats tagging not working?](https://discuss.elastic.co/t/logstash-beats-tagging-not-working/118019)

<div class="topic-metadata">

**Author:** [@Amgryptio](https://discuss.elastic.co/u/Amgryptio)\
**Replies:** 3\
**Last updated:** [February 1, 2018, 9:04pm UTC](https://discuss.elastic.co/t/logstash-beats-tagging-not-working/118019 "2018-02-01T21:04:08Z")

</div>

Hi, I'm attempting to add tags via beats input into logstash using: input { beats { host =\> "192.168.1.20" port =\> 5045 client\_inactivity\_timeout =\> 0 …

---

## [\-httpprof host:port gets me a tcp listen, but always a 404](https://discuss.elastic.co/t/httpprof-host-port-gets-me-a-tcp-listen-but-always-a-404/49917)

<div class="topic-metadata">

**Author:** [@kwmullet](https://discuss.elastic.co/u/kwmullet)\
**Replies:** 2\
**Last updated:** [May 12, 2016, 8:45pm UTC](https://discuss.elastic.co/t/httpprof-host-port-gets-me-a-tcp-listen-but-always-a-404/49917 "2016-05-12T20:45:05Z")

</div>

What page do I request to get the profiling information? I'm using filebeat, but as I understand it, the -httpprof switch is available to all the beats.

[Previous page](https://discuss.elastic.co/top.md?page=839&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=841&per_page=50&period=all)
