# Top **URL:** https://discuss.elastic.co/top.md?page=859&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 860 --- ## [Upgrade Logstash : mutate filter is not working well](https://discuss.elastic.co/t/upgrade-logstash-mutate-filter-is-not-working-well/28090)
**Author:** [@Hornov](https://discuss.elastic.co/u/Hornov)\ **Replies:** 4\ **Last updated:** [October 27, 2015, 2:53pm UTC](https://discuss.elastic.co/t/upgrade-logstash-mutate-filter-is-not-working-well/28090 "2015-10-27T14:53:34Z")
Following the logstash migrating from 1.4.2 version to 1.5.3 version when I do an uppercase in the mutate filter on a field ending with numeric value the field becomes nil. Yet, before that worked. How can I fix it ? M… --- ## [Is it possible to implement a custom Search Box (text field) for filtering by entity\_labels with autocomplete](https://discuss.elastic.co/t/is-it-possible-to-implement-a-custom-search-box-text-field-for-filtering-by-entity-labels-with-autocomplete/295818)
**Author:** [@roman.bliztsv](https://discuss.elastic.co/u/roman.bliztsv)\ **Replies:** 7\ **Last updated:** [February 3, 2022, 2:20pm UTC](https://discuss.elastic.co/t/is-it-possible-to-implement-a-custom-search-box-text-field-for-filtering-by-entity-labels-with-autocomplete/295818 "2022-02-03T14:20:58Z")
Hi @JasonStoltz & others :slight\_smile: I have implemented a lot of filters already in our search ui, so that its possible to filter by search\_fields, date etc. Here is how it looks and it works great: However, I d… --- ## [Use of wait\_until for deleteByQuery in java rest client](https://discuss.elastic.co/t/use-of-wait-until-for-deletebyquery-in-java-rest-client/283923)
**Author:** [@douglm](https://discuss.elastic.co/u/douglm)\ **Replies:** 7\ **Last updated:** [September 11, 2021, 3:26am UTC](https://discuss.elastic.co/t/use-of-wait-until-for-deletebyquery-in-java-rest-client/283923 "2021-09-11T03:26:50Z")
I have the following code for a deletion (ES 7.13): final DeleteByQueryRequest delQreq = new DeleteByQueryRequest(targetIndex); final ESQueryFilter esq = getFilters(null); final QueryBuilder qb… --- ## [How Deleting Snapshots works?](https://discuss.elastic.co/t/how-deleting-snapshots-works/104952)
**Author:** [@Bruce\_Carey](https://discuss.elastic.co/u/Bruce_Carey)\ **Replies:** 1\ **Last updated:** [October 25, 2017, 3:21am UTC](https://discuss.elastic.co/t/how-deleting-snapshots-works/104952 "2017-10-25T03:21:49Z")
Hi All, I have a question about snapshot behavior based on the following from the 5.02 docs: "A snapshot can be deleted from the repository using the following command: DELETE /\_snapshot/my\_backup/snapshot\_1 When a s… --- ## [Interested in providing feedback? Let’s chat!](https://discuss.elastic.co/t/interested-in-providing-feedback-let-s-chat/299359)
**Author:** [@daphne](https://discuss.elastic.co/u/daphne)\ **Replies:** 0\ **Last updated:** [March 10, 2022, 5:15pm UTC](https://discuss.elastic.co/t/interested-in-providing-feedback-let-s-chat/299359 "2022-03-10T17:15:40Z")
Hi! My name is Daphne and I am a user experience researcher at Elastic. I’d love to hear from our users about pricing at Elastic. We are working on a few concepts to help you more precisely estimate your costs to use Ela… --- ## [Logstash stopped unexpectedly](https://discuss.elastic.co/t/logstash-stopped-unexpectedly/202823)
**Author:** [@Suresh\_Pal](https://discuss.elastic.co/u/Suresh_Pal)\ **Replies:** 0\ **Last updated:** [October 9, 2019, 11:41am UTC](https://discuss.elastic.co/t/logstash-stopped-unexpectedly/202823 "2019-10-09T11:41:21Z")
Hi team, My logstash service is stopping again and again after few time, giving below error. warning: thread "\[main\]\>worker1" terminated with exception (report\_on\_exception is true): java.lang.InterruptedException at… --- ## [Smart price aggregation](https://discuss.elastic.co/t/smart-price-aggregation/73925)
**Author:** [@diego.bernardes](https://discuss.elastic.co/u/diego.bernardes)\ **Replies:** 0\ **Last updated:** [February 4, 2017, 2:11am UTC](https://discuss.elastic.co/t/smart-price-aggregation/73925 "2017-02-04T02:11:17Z")
I'm working into a new search for a ecommerce and need to do a better aggregation on the price field. The current filter is just awful, we do a stats aggregation to know the lowest and bigger price, then we manually crea… --- ## [(APM java-agent) JMX metrics does not show up in apm-\* index](https://discuss.elastic.co/t/apm-java-agent-jmx-metrics-does-not-show-up-in-apm-index/224048)
**Author:** [@joek](https://discuss.elastic.co/u/joek)\ **Replies:** 5\ **Last updated:** [March 18, 2020, 11:20am UTC](https://discuss.elastic.co/t/apm-java-agent-jmx-metrics-does-not-show-up-in-apm-index/224048 "2020-03-18T11:20:18Z")
Kibana version: kibana-7.6.1-1.x86\_64 Elasticsearch version: elasticsearch-7.6.1-1.x86\_64 APM Server version: apm-server-7.6.1-1.x86\_64 APM Agent language and version: elastic-apm-agent-1.14.0.jar Browser version:… --- ## [Filebeat Windows | Time sync](https://discuss.elastic.co/t/filebeat-windows-time-sync/121513)
**Author:** [@adachi](https://discuss.elastic.co/u/adachi)\ **Replies:** 5\ **Last updated:** [June 13, 2018, 1:02pm UTC](https://discuss.elastic.co/t/filebeat-windows-time-sync/121513 "2018-06-13T13:02:19Z")
Hi! While using Filebeat on Windows Server 2008 R2 I've encountered problem with keeping time in sync. filebeat.yml: filebeat.prospectors: - type: log enabled: true paths: - E:\\logs\\log1\\\*.log - E:\\logs\\log… --- ## [CSV date parser failure while uploading it to logstash](https://discuss.elastic.co/t/csv-date-parser-failure-while-uploading-it-to-logstash/84722)
**Author:** [@Manjunath.premkumar](https://discuss.elastic.co/u/Manjunath.premkumar)\ **Replies:** 5\ **Last updated:** [May 8, 2017, 10:34am UTC](https://discuss.elastic.co/t/csv-date-parser-failure-while-uploading-it-to-logstash/84722 "2017-05-08T10:34:24Z")
Hi , I am stuck in parsing the date field in CSV and tried my best but no luck. CSV contains 2 fields, Data and Responsetime (separated by comma) and I want to plot graph in KIBANA with x axis as Date and response as Y… --- ## [Simulation of Master node Failure- Data Loss](https://discuss.elastic.co/t/simulation-of-master-node-failure-data-loss/26962)
**Author:** [@frazzle](https://discuss.elastic.co/u/frazzle)\ **Replies:** 5\ **Last updated:** [August 21, 2015, 9:37am UTC](https://discuss.elastic.co/t/simulation-of-master-node-failure-data-loss/26962 "2015-08-21T09:37:13Z")
Hi, I have been implementing an ELK setup for out logging platform and as part of this I decided to do some DR testing. I terminated our master node and it rebuilt automatically, however when it rebuilt it rejoined t… --- ## [Why Kibana in Docker container doesn't work out of the box?](https://discuss.elastic.co/t/why-kibana-in-docker-container-doesnt-work-out-of-the-box/247166)
**Author:** [@Alex\_Pravdin](https://discuss.elastic.co/u/Alex_Pravdin)\ **Replies:** 6\ **Last updated:** [September 2, 2020, 7:26am UTC](https://discuss.elastic.co/t/why-kibana-in-docker-container-doesnt-work-out-of-the-box/247166 "2020-09-02T07:26:48Z")
Hi, I'm trying to run Kibana for the first time. I'm using Docker. Here is my configuration: version: '3.7' services: elasticsearch: image: elasticsearch:5.6.4 ports: - 9200:9200 environment: … --- ## [ILM is not being disabled in Metricbeat 7.2.1 and 7.3.1](https://discuss.elastic.co/t/ilm-is-not-being-disabled-in-metricbeat-7-2-1-and-7-3-1/202034)
**Author:** [@George\_Wainwright](https://discuss.elastic.co/u/George_Wainwright)\ **Replies:** 6\ **Last updated:** [October 3, 2019, 6:41am UTC](https://discuss.elastic.co/t/ilm-is-not-being-disabled-in-metricbeat-7-2-1-and-7-3-1/202034 "2019-10-03T06:41:58Z")
I am trying to disable ILM in metricbeat 7.2.1 and 7.3.1 in output elasticsearch section but it doesn't work. metricbeat.config.modules: path: ${path.config}/modules.d/\*.yml output: elasticsearch: hosts:… --- ## [\[7.0.1\] Heap pressure - What are FST's used for?](https://discuss.elastic.co/t/7-0-1-heap-pressure-what-are-fsts-used-for/202297)
**Author:** [@gna](https://discuss.elastic.co/u/gna)\ **Replies:** 2\ **Last updated:** [October 4, 2019, 10:56am UTC](https://discuss.elastic.co/t/7-0-1-heap-pressure-what-are-fsts-used-for/202297 "2019-10-04T10:56:51Z")
Dear developers, please help me understand what FST's (Finite-state transducer) are and what they are actually used for. Context: My elasticsearch test instances are under a lot of heap pressure (75%+ even after FullG… --- ## [Why does event.tag inside ruby code throw an error?](https://discuss.elastic.co/t/why-does-event-tag-inside-ruby-code-throw-an-error/144824)
**Author:** [@Amlan\_Das](https://discuss.elastic.co/u/Amlan_Das)\ **Replies:** 2\ **Last updated:** [August 17, 2018, 7:01am UTC](https://discuss.elastic.co/t/why-does-event-tag-inside-ruby-code-throw-an-error/144824 "2018-08-17T07:01:36Z")
trying a simple code to add a ruby filter which adds a tag to the event ruby { code =\> " event.tag("test") " } gives the error : Expected one of #, {, } at line 31, column 20 (byte 473) everything works fine if I… --- ## [Such query 'curl localhost:9200/\_stats' returns an 500 error](https://discuss.elastic.co/t/such-query-curl-localhost-9200--stats-returns-an-500-error/2300)
**Author:** [@rafal\_n](https://discuss.elastic.co/u/rafal_n)\ **Replies:** 2\ **Last updated:** [June 12, 2015, 11:38am UTC](https://discuss.elastic.co/t/such-query-curl-localhost-9200--stats-returns-an-500-error/2300 "2015-06-12T11:38:31Z")
Hi, I have a question regarding statistics which can be shown using such query: 'curl localhost:9200/\_stats' It should return high level aggregation and index level stats for all indices. In my case it returns an error: {… --- ## [What does "docCount" mean in the Explain API?](https://discuss.elastic.co/t/what-does-doccount-mean-in-the-explain-api/136915)
**Author:** [@Sang-gon\_Lee](https://discuss.elastic.co/u/Sang-gon_Lee)\ **Replies:** 1\ **Last updated:** [June 29, 2018, 8:20pm UTC](https://discuss.elastic.co/t/what-does-doccount-mean-in-the-explain-api/136915 "2018-06-29T20:20:08Z")
This is a portion of the response that I got from sending an explain API: "\_explanation": { "value": 15.811229, "description": "sum of:", "details": \[ { "value": 1, "description": "ConstantScore(NormsFieldExi… --- ## [ElasticSearch 8.5 and Java Client Error ""com.fasterxml.jackson.core.JsonParseException: Unrecognized token 'Client'](https://discuss.elastic.co/t/elasticsearch-8-5-and-java-client-error-com-fasterxml-jackson-core-jsonparseexception-unrecognized-token-client/319700)
**Author:** [@AlwaysBatMan](https://discuss.elastic.co/u/AlwaysBatMan)\ **Replies:** 3\ **Last updated:** [December 10, 2022, 10:34am UTC](https://discuss.elastic.co/t/elasticsearch-8-5-and-java-client-error-com-fasterxml-jackson-core-jsonparseexception-unrecognized-token-client/319700 "2022-12-10T10:34:05Z")
I am trying to use Elasticsearch 8.5 and its associated RestClient.I am having some difficulties using it and I am not able to make sense of this as to why this error message will be thrown.Looking for some guidance on h… --- ## [How do I reference a field name that contains a dot in watcher logging action](https://discuss.elastic.co/t/how-do-i-reference-a-field-name-that-contains-a-dot-in-watcher-logging-action/266614)
**Author:** [@Emilio\_Vega](https://discuss.elastic.co/u/Emilio_Vega)\ **Replies:** 3\ **Last updated:** [July 9, 2021, 3:19pm UTC](https://discuss.elastic.co/t/how-do-i-reference-a-field-name-that-contains-a-dot-in-watcher-logging-action/266614 "2021-07-09T15:19:41Z")
An elastic template index got field names using dots ("property.name") and I am wondering if it is possible reference them using "ctx.payload.hits.hits.0.\_source" object. I did some different attempts without success. I… --- ## [Metricbeat 6.5 zookeeper modules problem](https://discuss.elastic.co/t/metricbeat-6-5-zookeeper-modules-problem/158112)
**Author:** [@sicute](https://discuss.elastic.co/u/sicute)\ **Replies:** 3\ **Last updated:** [November 27, 2018, 9:53am UTC](https://discuss.elastic.co/t/metricbeat-6-5-zookeeper-modules-problem/158112 "2018-11-27T09:53:01Z")
hi all , I try activate modules zookeeper . here zookeeper.yml :~$ cat /etc/metricbeat/modules.d/zookeeper.yml module: zookeeper enabled: true metricsets: \["mntr"\] period: 10s hosts: \["localhost:2181"\] ~$ an… --- ## [How does the ELK people earn money and support continuous development?](https://discuss.elastic.co/t/how-does-the-elk-people-earn-money-and-support-continuous-development/145319)
**Author:** [@groverjatin17](https://discuss.elastic.co/u/groverjatin17)\ **Replies:** 4\ **Last updated:** [August 23, 2018, 7:10am UTC](https://discuss.elastic.co/t/how-does-the-elk-people-earn-money-and-support-continuous-development/145319 "2018-08-23T07:10:10Z")
I am fairly new to this and i was asked this question by my manager and i had not answer. i have read few terms like paid elastic cloud subscription or plugins but can anyone please explain Who and How's of the various w… --- ## [Logstash CISCO ASA logs not parsing](https://discuss.elastic.co/t/logstash-cisco-asa-logs-not-parsing/143736)
**Author:** [@Samvid\_Kulkarni](https://discuss.elastic.co/u/Samvid_Kulkarni)\ **Replies:** 4\ **Last updated:** [August 9, 2018, 6:31pm UTC](https://discuss.elastic.co/t/logstash-cisco-asa-logs-not-parsing/143736 "2018-08-09T18:31:32Z")
I have log file which has entries like this 2018-07-30 09:50:30||20||6||172.16.1.4||%ASA-6-302014: Teardown TCP connection 597505728 for outside:40.97.142.8/443 to inside:192.168.5.120/50041 duration 0:00:00 bytes 0 TCP… --- ## [Beep actiontype](https://discuss.elastic.co/t/beep-actiontype/273851)
**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\ **Replies:** 4\ **Last updated:** [June 22, 2021, 6:39pm UTC](https://discuss.elastic.co/t/beep-actiontype/273851 "2021-06-22T18:39:03Z")
I have added a new actionType to my kibana source. I register it in both server and client side my action id is : .beep at this moment i log a message in file. but i want to play a beep sound in my kibana. how can… --- ## [Set up ES cluster on Azure (Discovery problem)](https://discuss.elastic.co/t/set-up-es-cluster-on-azure-discovery-problem/37195)
**Author:** [@Yongyao\_Jiang](https://discuss.elastic.co/u/Yongyao_Jiang)\ **Replies:** 8\ **Last updated:** [December 15, 2015, 7:03pm UTC](https://discuss.elastic.co/t/set-up-es-cluster-on-azure-discovery-problem/37195 "2015-12-15T19:03:47Z")
I have spend a few hours trying to set up a 2 nodes cluster on Azure cloud, but it looks like ES on these two VMs cannot find each other. Below are the thing I have done 1. Set up a virtual network 2. Create two vms in t… --- ## [Is there any Logstash filter to convert a log-line to json](https://discuss.elastic.co/t/is-there-any-logstash-filter-to-convert-a-log-line-to-json/87922)
**Author:** [@Pranav1](https://discuss.elastic.co/u/Pranav1)\ **Replies:** 2\ **Last updated:** [June 2, 2017, 12:10pm UTC](https://discuss.elastic.co/t/is-there-any-logstash-filter-to-convert-a-log-line-to-json/87922 "2017-06-02T12:10:25Z")
I am getting logs having a log line which has key value pair separated by pipe. Example- "apple=1 | banana= 3 | mango=5" or "apple=1 | banana= 3 | mango=5 | tiger=7 | elephant=1" I have to convert this log into a… --- ## [RabbitMQ output configuration - alternate-exchange - help needed](https://discuss.elastic.co/t/rabbitmq-output-configuration-alternate-exchange-help-needed/56601)
**Author:** [@vandamo](https://discuss.elastic.co/u/vandamo)\ **Replies:** 2\ **Last updated:** [August 1, 2016, 6:21am UTC](https://discuss.elastic.co/t/rabbitmq-output-configuration-alternate-exchange-help-needed/56601 "2016-08-01T06:21:39Z")
Hi, I'm trying out RabbitMQ (instead of Redis), and am typically creating the exchanges, bindings, queues in advance, then configuring logstash to match the existing config. There is one configuration I just tried now … --- ## [Some bar labels do not show up on dashboard](https://discuss.elastic.co/t/some-bar-labels-do-not-show-up-on-dashboard/122319)
**Author:** [@BruceLeroy](https://discuss.elastic.co/u/BruceLeroy)\ **Replies:** 5\ **Last updated:** [March 9, 2018, 2:19am UTC](https://discuss.elastic.co/t/some-bar-labels-do-not-show-up-on-dashboard/122319 "2018-03-09T02:19:42Z")
Here is a screen shot, the first column should have a label. \[image\] --- ## [\[Question\] Is output routing possible in Filebeat](https://discuss.elastic.co/t/question-is-output-routing-possible-in-filebeat/107419)
**Author:** [@Moep90](https://discuss.elastic.co/u/Moep90)\ **Replies:** 5\ **Last updated:** [November 15, 2017, 2:50pm UTC](https://discuss.elastic.co/t/question-is-output-routing-possible-in-filebeat/107419 "2017-11-15T14:50:52Z")
Hey there, currently I'm working on configuring an ELK Stack. Filebeat should put JSON oneliners ONLY into Logstash for parsing. Filebeat should put /var/log/secure, /var/log/yum.log, /var/log/audit/audit.log directly… --- ## [Geo\_point coming from geoip are not plotting in Kibana](https://discuss.elastic.co/t/geo-point-coming-from-geoip-are-not-plotting-in-kibana/103260)
**Author:** [@adam.stallard](https://discuss.elastic.co/u/adam.stallard)\ **Replies:** 3\ **Last updated:** [October 9, 2017, 9:05pm UTC](https://discuss.elastic.co/t/geo-point-coming-from-geoip-are-not-plotting-in-kibana/103260 "2017-10-09T21:05:43Z")
I have been tweaking my mappings and logstash pipeline configurations for days now trying to figure out hwo to plot GeoIPs to no avail. I have no idea what to do anymore. I have a template: { "template" : "httpd\*", … --- ## [Combine two function\_score queries in dis\_max](https://discuss.elastic.co/t/combine-two-function-score-queries-in-dis-max/70666)
**Author:** [@bender268](https://discuss.elastic.co/u/bender268)\ **Replies:** 3\ **Last updated:** [January 5, 2017, 4:26pm UTC](https://discuss.elastic.co/t/combine-two-function-score-queries-in-dis-max/70666 "2017-01-05T16:26:14Z")
Hello! I would like to make a query with two subqueries, each of them has it's own scoring based on function\_score with script. For example, this subquery { "query":{ "fun… --- ## [Elasticsearch Engineered Attack Vulnerability CVE-2015-4165](https://discuss.elastic.co/t/elasticsearch-engineered-attack-vulnerability-cve-2015-4165/2256)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 0\ **Last updated:** [June 9, 2015, 9:40pm UTC](https://discuss.elastic.co/t/elasticsearch-engineered-attack-vulnerability-cve-2015-4165/2256 "2015-06-09T21:40:28Z")
Summary: Elasticsearch versions 1.0.0 - 1.5.2 are vulnerable to an engineered attack on other applications on the system. The snapshot API may be used indirectly to place snapshot metadata files into locations that are … --- ## [Kibana Dashboard import from 7.x to 8.x](https://discuss.elastic.co/t/kibana-dashboard-import-from-7-x-to-8-x/304003)
**Author:** [@Aman\_Gupta1](https://discuss.elastic.co/u/Aman_Gupta1)\ **Replies:** 4\ **Last updated:** [May 6, 2022, 2:13pm UTC](https://discuss.elastic.co/t/kibana-dashboard-import-from-7-x-to-8-x/304003 "2022-05-06T14:13:30Z")
Hi Team, I have moved my ELK stack from 7.x to 8.x i have exported dashboards from 7.x but while uploading to 8.x it gives error. Not supported. As format is changed from .json to .ndjson. Is there any way to do this… --- ## [Embedding Kibana Dashboards in a custom AngluarJS/ReactJS Web Application](https://discuss.elastic.co/t/embedding-kibana-dashboards-in-a-custom-angluarjs-reactjs-web-application/292768)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 4\ **Last updated:** [February 3, 2022, 6:05am UTC](https://discuss.elastic.co/t/embedding-kibana-dashboards-in-a-custom-angluarjs-reactjs-web-application/292768 "2022-02-03T06:05:19Z")
Would like to know what is the best practice to embed the Kibana Dashboards in AngularJS/ReactJS web application without using iframe. It should display only the dashboards and not any controls which are present in Kiban… --- ## [What elasticsearch does when restarting a cluster?](https://discuss.elastic.co/t/what-elasticsearch-does-when-restarting-a-cluster/176793)
**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\ **Replies:** 4\ **Last updated:** [April 15, 2019, 8:03am UTC](https://discuss.elastic.co/t/what-elasticsearch-does-when-restarting-a-cluster/176793 "2019-04-15T08:03:31Z")
I have en elasticsearch cluster consisting 3 nodes, and a pretty big index (~1500 fields), and when it restarts, ether from a "clean" restart or forced shotdown, it takes a while to go back up, and it hoggs the JVM heap … --- ## [Nested aggregation empty bucket](https://discuss.elastic.co/t/nested-aggregation-empty-bucket/139722)
**Author:** [@zajca](https://discuss.elastic.co/u/zajca)\ **Replies:** 4\ **Last updated:** [July 20, 2018, 7:41pm UTC](https://discuss.elastic.co/t/nested-aggregation-empty-bucket/139722 "2018-07-20T19:41:39Z")
Hi, I have problem with aggregation, which return no bucket. (it's more complicated I did drop useless stuff for this example, thats why it's competence inside competence without any other field) my mapping: { "m… --- ## [ElasticSearch Curator](https://discuss.elastic.co/t/elasticsearch-curator/33843)
**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\ **Replies:** 4\ **Last updated:** [March 7, 2016, 7:15am UTC](https://discuss.elastic.co/t/elasticsearch-curator/33843 "2016-03-07T07:15:52Z")
Hi All, I have implemented elastic search curator and i have installed on my node1 for implementations.I am specifying ip and port of elastic search since local host is not reachable. The following is the command for… --- ## [Custom legend with for Vertical Bar Chart](https://discuss.elastic.co/t/custom-legend-with-for-vertical-bar-chart/219671)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [February 19, 2020, 9:36am UTC](https://discuss.elastic.co/t/custom-legend-with-for-vertical-bar-chart/219671 "2020-02-19T09:36:06Z")
Hello, Some thing I always disliked about Vertical Bar charts legends in kibana is the fact that the legend is half of the time not customizable and has always the same width. The result is that in a lot of graphs, all … --- ## [Sent Logs from Cisco ASA to ELK (OS Ubuntu 18.04)](https://discuss.elastic.co/t/sent-logs-from-cisco-asa-to-elk-os-ubuntu-18-04/183181)
**Author:** [@Gustavo\_Oliveira](https://discuss.elastic.co/u/Gustavo_Oliveira)\ **Replies:** 2\ **Last updated:** [May 29, 2019, 1:33pm UTC](https://discuss.elastic.co/t/sent-logs-from-cisco-asa-to-elk-os-ubuntu-18-04/183181 "2019-05-29T13:33:54Z")
Good afternoon, I have a server ELK (OS Ubuntu 18.04), the network gateway (CISCO ASA) store all logs and send to Gray LOG, but i want that these logs been sents to ELK (filebeat\>logstash\>elasticsearch\>kibana). How can … --- ## [Logstash filter plugin - Missing class name](https://discuss.elastic.co/t/logstash-filter-plugin-missing-class-name/80631)
**Author:** [@Conall\_Prendergast](https://discuss.elastic.co/u/Conall_Prendergast)\ **Replies:** 2\ **Last updated:** [March 31, 2017, 10:33pm UTC](https://discuss.elastic.co/t/logstash-filter-plugin-missing-class-name/80631 "2017-03-31T22:33:56Z")
Hi, I am trying to convert a logstash 2.4 plugin to be compatible with 5.x. I made the necessary updates and when I run "rspec", I get the below error. NameError: missing class name (\`org.apache.logging.log4j.Level')… --- ## [Load Balancing Kibana](https://discuss.elastic.co/t/load-balancing-kibana/43589)
**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\ **Replies:** 2\ **Last updated:** [March 7, 2016, 9:49pm UTC](https://discuss.elastic.co/t/load-balancing-kibana/43589 "2016-03-07T21:49:11Z")
I 'm trying to load balance 3 kibana nodes running on aws behind a load balancer. The load balancer needs a health check script in order to recognize the host as 'alive'. It then performs a round robin on the nodes th… --- ## [Fanotify vs inotify](https://discuss.elastic.co/t/fanotify-vs-inotify/275213)
**Author:** [@nwed](https://discuss.elastic.co/u/nwed)\ **Replies:** 0\ **Last updated:** [June 8, 2021, 12:15am UTC](https://discuss.elastic.co/t/fanotify-vs-inotify/275213 "2021-06-08T00:15:56Z")
Hello, on kube we currently leverage two iterations of the file\_integrity module. First, we monitor paths under /hostfs, this has been stable for us. Second, we use the auditbeat.autodiscover with containerd to monitor c… --- ## [\[Solved\] Logstash pattern issue](https://discuss.elastic.co/t/solved-logstash-pattern-issue/77772)
**Author:** [@raamee](https://discuss.elastic.co/u/raamee)\ **Replies:** 3\ **Last updated:** [March 15, 2017, 6:51am UTC](https://discuss.elastic.co/t/solved-logstash-pattern-issue/77772 "2017-03-15T06:51:07Z")
Hi, I came across a weird issue. I made a grok pattern that works well and matches my log in http://grokdebug.herokuapp.com, but when I use the same pattern in my logstash, its not working properly. I get a field misma… --- ## [Need help In Function Scoring](https://discuss.elastic.co/t/need-help-in-function-scoring/55825)
**Author:** [@Nisar\_Adappadathil](https://discuss.elastic.co/u/Nisar_Adappadathil)\ **Replies:** 8\ **Last updated:** [July 22, 2016, 6:19am UTC](https://discuss.elastic.co/t/need-help-in-function-scoring/55825 "2016-07-22T06:19:45Z")
POST: http://localhost:9200/myindex/type/\_search { "query": { "function\_score": { "functions": \[ { "gauss": { "b": { "origin": "0", "scale": "1000" … --- ## [Performance difference between REST and Java API](https://discuss.elastic.co/t/performance-difference-between-rest-and-java-api/21320)
**Author:** [@Marie\_Jacob](https://discuss.elastic.co/u/Marie_Jacob)\ **Replies:** 3\ **Last updated:** [December 19, 2014, 8:20am UTC](https://discuss.elastic.co/t/performance-difference-between-rest-and-java-api/21320 "2014-12-19T08:20:31Z")
I'm benchmarking results for an ES cluster, using both the REST api and native Java client. We're getting very different response times, between each of these (the REST api is doing approximately 50% better in the 9… --- ## [Script Query - Returning multiple values on aggregation](https://discuss.elastic.co/t/script-query-returning-multiple-values-on-aggregation/294095)
**Author:** [@hyun](https://discuss.elastic.co/u/hyun)\ **Replies:** 7\ **Last updated:** [January 13, 2022, 1:19pm UTC](https://discuss.elastic.co/t/script-query-returning-multiple-values-on-aggregation/294095 "2022-01-13T13:19:49Z")
Aggregation Result "aggregations": { "649": { "doc\_count\_error\_upper\_bound": 0, "sum\_other\_doc\_count": 0, "buckets": \[ { "key": "ALLOGENE THERAPEUTICS", … --- ## [Date time in index name, Kibana searching across non relevant indexes](https://discuss.elastic.co/t/date-time-in-index-name-kibana-searching-across-non-relevant-indexes/154669)
**Author:** [@amageek](https://discuss.elastic.co/u/amageek)\ **Replies:** 7\ **Last updated:** [November 1, 2018, 3:14pm UTC](https://discuss.elastic.co/t/date-time-in-index-name-kibana-searching-across-non-relevant-indexes/154669 "2018-11-01T15:14:16Z")
Hi, I've read so much on this, but dated information, and wondered if things have changed or anyone knows of a good way to handle this in kibana/elastic. So given an index name that has a date in it e.g events\_10\_2018 … --- ## [Shards stuck on initialising](https://discuss.elastic.co/t/shards-stuck-on-initialising/19608)
**Author:** [@eistconn](https://discuss.elastic.co/u/eistconn)\ **Replies:** 7\ **Last updated:** [September 9, 2015, 11:57pm UTC](https://discuss.elastic.co/t/shards-stuck-on-initialising/19608 "2015-09-09T23:57:53Z")
I have a two node cluster and after restarting them the cluster does not assign all the shards. On both nodes: elasticsearch 1.0.1 $ java -version java version "1.7.0\_55" OpenJDK Runtime Environment (IcedTea 2.… --- ## [Elasticsearch Output and the raw field](https://discuss.elastic.co/t/elasticsearch-output-and-the-raw-field/754)
**Author:** [@elvarb](https://discuss.elastic.co/u/elvarb)\ **Replies:** 1\ **Last updated:** [May 15, 2015, 10:11pm UTC](https://discuss.elastic.co/t/elasticsearch-output-and-the-raw-field/754 "2015-05-15T22:11:03Z")
Now that the elasticsearch output no longer gives you a message.raw field by default From the changelog Logstash does not create a "message.raw" by default whic is usually not\_analyzed; this helps save disk space (#… --- ## [Java API: Transforming, chaining ListenableActionFuture is tricky at best. How about extending Guava ListenableFuture to benefit from the featureset it provides?](https://discuss.elastic.co/t/java-api-transforming-chaining-listenableactionfuture-is-tricky-at-best-how-about-extending-guava-listenablefuture-to-benefit-from-the-featureset-it-provides/11609)
**Author:** [@Stephane\_Bastian](https://discuss.elastic.co/u/Stephane_Bastian)\ **Replies:** 7\ **Last updated:** [April 22, 2013, 2:25pm UTC](https://discuss.elastic.co/t/java-api-transforming-chaining-listenableactionfuture-is-tricky-at-best-how-about-extending-guava-listenablefuture-to-benefit-from-the-featureset-it-provides/11609 "2013-04-22T14:25:23Z")
Hi, I've been using ES for almost 2 years now and I'm very pleased with it. I am especially happy with the fact that everything is Asynchronous. However, the one thing that sometimes gets in the way is when the c… --- ## [From mysql to aws elasticsearch using logstash](https://discuss.elastic.co/t/from-mysql-to-aws-elasticsearch-using-logstash/157627)
**Author:** [@tripstore](https://discuss.elastic.co/u/tripstore)\ **Replies:** 5\ **Last updated:** [November 22, 2018, 5:12am UTC](https://discuss.elastic.co/t/from-mysql-to-aws-elasticsearch-using-logstash/157627 "2018-11-22T05:12:25Z")
Hi everyone, I'm new to ELK and I have never used AWS Elasticsearch before. I'm trying to migrate data from mysql server to aws elasticsearch using logstash. However, I got an error saying something like this: \[ERROR… [Previous page](https://discuss.elastic.co/top.md?page=858&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=860&per_page=50&period=all)