# Top **URL:** https://discuss.elastic.co/top.md?page=865&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 866 --- ## [Elasticsearch.py with SSL and api key getting 401 unauthorized error](https://discuss.elastic.co/t/elasticsearch-py-with-ssl-and-api-key-getting-401-unauthorized-error/233808)
**Author:** [@TonyLuc](https://discuss.elastic.co/u/TonyLuc)\ **Replies:** 1\ **Last updated:** [May 28, 2020, 7:28pm UTC](https://discuss.elastic.co/t/elasticsearch-py-with-ssl-and-api-key-getting-401-unauthorized-error/233808 "2020-05-28T19:28:37Z")
Objectives: To perform search on ElasticSearch via Python. I have followed the example in https://elasticsearch-py.readthedocs.io/en/master/ section SSL and Authentication and I could not get it to work. I been staring… --- ## [Terms are not working with multilevel nested query](https://discuss.elastic.co/t/terms-are-not-working-with-multilevel-nested-query/306428)
**Author:** [@ravee1112](https://discuss.elastic.co/u/ravee1112)\ **Replies:** 6\ **Last updated:** [June 10, 2022, 12:31am UTC](https://discuss.elastic.co/t/terms-are-not-working-with-multilevel-nested-query/306428 "2022-06-10T00:31:58Z")
Below is my mapping for index: { "properties" : { "solutions" : { "type" : "nested", "properties" : { "deliverySkills" : { "type" : "nested", "properties" : { "m… --- ## [How to distribute shards to different AZ's for replication?](https://discuss.elastic.co/t/how-to-distribute-shards-to-different-azs-for-replication/46621)
**Author:** [@rahulcse](https://discuss.elastic.co/u/rahulcse)\ **Replies:** 6\ **Last updated:** [April 7, 2016, 5:54am UTC](https://discuss.elastic.co/t/how-to-distribute-shards-to-different-azs-for-replication/46621 "2016-04-07T05:54:22Z")
Hi, we are trying to distribute shards to 3 available Az's at Amazon. Please let me know how can we achieve this, for replication and availability. So we want shard1 to go in az1 and then to az2 and then to az3 etc. Th… --- ## [Logstash : High CPU usage and stop logging](https://discuss.elastic.co/t/logstash-high-cpu-usage-and-stop-logging/44534)
**Author:** [@yanpeipan](https://discuss.elastic.co/u/yanpeipan)\ **Replies:** 6\ **Last updated:** [March 25, 2016, 10:23am UTC](https://discuss.elastic.co/t/logstash-high-cpu-usage-and-stop-logging/44534 "2016-03-25T10:23:34Z")
my jsstack log: https://gist.github.com/yanpeipan/d9fd90f484d0cd0c9099#file-jsstack-txt my logstash config: https://gist.github.com/yanpeipan/d9fd90f484d0cd0c9099#file-logstash-nginx-conf This problem confuse me fo… --- ## [Can "action.write\_consistency" be updated dynamically on a running node?](https://discuss.elastic.co/t/can-action-write-consistency-be-updated-dynamically-on-a-running-node/14161)
**Author:** [@Ankush\_Jhalani](https://discuss.elastic.co/u/Ankush_Jhalani)\ **Replies:** 6\ **Last updated:** [November 1, 2013, 4:28pm UTC](https://discuss.elastic.co/t/can-action-write-consistency-be-updated-dynamically-on-a-running-node/14161 "2013-11-01T16:28:22Z")
I tried to update it dynamically but can't. curl -XPUT 'http://localhost:9201/\_cluster/nodes/\_local?pretty' -d ' { "settings.action.write\_consistency" : "all" } ' { "error" : "IndexMissingException\[\[\_cluster\] mis… --- ## [Performance difference between searching with one field against with two fields](https://discuss.elastic.co/t/performance-difference-between-searching-with-one-field-against-with-two-fields/35102)
**Author:** [@milodky](https://discuss.elastic.co/u/milodky)\ **Replies:** 5\ **Last updated:** [December 8, 2015, 8:11am UTC](https://discuss.elastic.co/t/performance-difference-between-searching-with-one-field-against-with-two-fields/35102 "2015-12-08T08:11:46Z")
Hi, I have two types of query as follow: 1) { "query":{ "filtered":{ "filter":{ "bool":{ "must":\[ { "term":{ "last\_name":"brown" }… --- ## [Java APM attached agent not launching](https://discuss.elastic.co/t/java-apm-attached-agent-not-launching/250657)
**Author:** [@Jose\_Angel\_Morena\_Si](https://discuss.elastic.co/u/Jose_Angel_Morena_Si)\ **Replies:** 8\ **Last updated:** [October 4, 2020, 12:04pm UTC](https://discuss.elastic.co/t/java-apm-attached-agent-not-launching/250657 "2020-10-04T12:04:01Z")
Hello there, I am trying to use the Automatic setup with apm-agent-attach-standalone.jar. I am running the agent with Oracle Java 8, and the java application I want to monitor is running with Java 7. Kibana version: 7… --- ## [Script filter slow query execution](https://discuss.elastic.co/t/script-filter-slow-query-execution/15455)
**Author:** [@vinamar](https://discuss.elastic.co/u/vinamar)\ **Replies:** 8\ **Last updated:** [January 31, 2014, 4:01pm UTC](https://discuss.elastic.co/t/script-filter-slow-query-execution/15455 "2014-01-31T16:01:09Z")
I'm trying to use script filter with filtered query as given below. The query execution takes around 20 to 30 secs for 70K matching facet results. How to speed up the query execution ? { "timeout": 30000, "h… --- ## [Deploying ES as a Windows Service](https://discuss.elastic.co/t/deploying-es-as-a-windows-service/4301)
**Author:** [@Nir\_Rubinstein](https://discuss.elastic.co/u/Nir_Rubinstein)\ **Replies:** 8\ **Last updated:** [May 1, 2011, 7:24am UTC](https://discuss.elastic.co/t/deploying-es-as-a-windows-service/4301 "2011-05-01T07:24:34Z")
Hello I downloaded the ES service host and put it in the location it should be. After running the .bat file and finding that it didn't work, I modified a few paths to their absolute location (namely, the configurat… --- ## [If else condition in ES query](https://discuss.elastic.co/t/if-else-condition-in-es-query/271319)
**Author:** [@Pallavibhushan](https://discuss.elastic.co/u/Pallavibhushan)\ **Replies:** 4\ **Last updated:** [April 27, 2021, 8:35am UTC](https://discuss.elastic.co/t/if-else-condition-in-es-query/271319 "2021-04-27T08:35:24Z")
Hi, I am trying to write a query for below data: sample data: { "\_index" : "target\_data", "\_type" : "\_doc", "\_id" : "Training\_2020", "\_score" : 1.0, "\_source" : { "year" : "2020", "date\_epoch" : 1577817000000, … --- ## [URL analysis](https://discuss.elastic.co/t/url-analysis/12091)
**Author:** [@dantuff](https://discuss.elastic.co/u/dantuff)\ **Replies:** 4\ **Last updated:** [May 23, 2013, 4:18pm UTC](https://discuss.elastic.co/t/url-analysis/12091 "2013-05-23T16:18:54Z")
Hi I have a URL that contains an ID. I would like extract the ID during analysis so that the ID part of the URL is searchable, I would like to it to have its own property in the index 'productId' and store it so … --- ## [\_grokparsefailure general exception handling?](https://discuss.elastic.co/t/-grokparsefailure-general-exception-handling/80143)
**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\ **Replies:** 1\ **Last updated:** [March 27, 2017, 6:08pm UTC](https://discuss.elastic.co/t/-grokparsefailure-general-exception-handling/80143 "2017-03-27T18:08:34Z")
I've perused the forum regarding \_grokparsefailure, but they all ask about solving specific log messages. I have a general question. As I form my Grok filters for one of our applications, I expect to get \_grokparsefail… --- ## [User in Kibana get 403](https://discuss.elastic.co/t/user-in-kibana-get-403/192818)
**Author:** [@Gidi\_Kalef](https://discuss.elastic.co/u/Gidi_Kalef)\ **Replies:** 3\ **Last updated:** [July 30, 2019, 4:24pm UTC](https://discuss.elastic.co/t/user-in-kibana-get-403/192818 "2019-07-30T16:24:01Z")
Hi Guys, i create a role with the following permissions and assigned it to user : "webrtmon" : { "cluster" : \[ \], "indices" : \[ { "names" : \[ "\*" \], "privileges" : \[ … --- ## [Index Alias for rotating time based indices](https://discuss.elastic.co/t/index-alias-for-rotating-time-based-indices/176743)
**Author:** [@justinw](https://discuss.elastic.co/u/justinw)\ **Replies:** 3\ **Last updated:** [May 9, 2019, 11:46pm UTC](https://discuss.elastic.co/t/index-alias-for-rotating-time-based-indices/176743 "2019-05-09T23:46:30Z")
Hi, The docs here (https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-aliases.html) are pretty explicit in that something like this: POST /\_aliases { "actions" : \[ { "add" : { "index" :… --- ## [ES-Hadoop 2.0.2 jars and INSERT OVERWRITE](https://discuss.elastic.co/t/es-hadoop-2-0-2-jars-and-insert-overwrite/24091)
**Author:** [@aken](https://discuss.elastic.co/u/aken)\ **Replies:** 3\ **Last updated:** [June 22, 2015, 1:54pm UTC](https://discuss.elastic.co/t/es-hadoop-2-0-2-jars-and-insert-overwrite/24091 "2015-06-22T13:54:32Z")
Are there known issues with the 2.0.2 jar and INSERT OVERWRITE? I have defined my external table and can insert into my ES index and everything works like a charm. However, I notice that even when I specify OVERWRITE t… --- ## [TimeLion Fill Colour options](https://discuss.elastic.co/t/timelion-fill-colour-options/188010)
**Author:** [@ek9boy](https://discuss.elastic.co/u/ek9boy)\ **Replies:** 1\ **Last updated:** [July 25, 2019, 9:27am UTC](https://discuss.elastic.co/t/timelion-fill-colour-options/188010 "2019-07-25T09:27:54Z")
Hi, I wanted to know if there is an option to have the line of the graph one colour e.g red showing the critical point however the fill below that line as yellow? Example Below: .es(q=sourcetype:Honda,index=ListedCars,… --- ## [Django logstash filter](https://discuss.elastic.co/t/django-logstash-filter/149246)
**Author:** [@esseti](https://discuss.elastic.co/u/esseti)\ **Replies:** 7\ **Last updated:** [October 22, 2018, 6:13pm UTC](https://discuss.elastic.co/t/django-logstash-filter/149246 "2018-10-22T18:13:33Z")
HI all, is there an "official" or standard-de-facto filter for logstash that can be used in Django? For what I know it should extend SocketHandler (TCP) or DatagramHandler (UDP), but I would love to build something fro… --- ## [Elasticsearch Java API from web application-error: java.lang.NoClassDefFoundError: Could not initialize class org.elasticsearch.threadpool.ThreadPool](https://discuss.elastic.co/t/elasticsearch-java-api-from-web-application-error-java-lang-noclassdeffounderror-could-not-initialize-class-org-elasticsearch-threadpool-threadpool/68163)
**Author:** [@doln](https://discuss.elastic.co/u/doln)\ **Replies:** 1\ **Last updated:** [December 6, 2016, 1:01pm UTC](https://discuss.elastic.co/t/elasticsearch-java-api-from-web-application-error-java-lang-noclassdeffounderror-could-not-initialize-class-org-elasticsearch-threadpool-threadpool/68163 "2016-12-06T13:01:11Z")
I have learned about elasticsearch. I have a problem as follow: I have installed elasticseach 2.4.1 on my project with maven: \ \org.elasticsearch\ \elasticsearch\ **Author:** [@Nybble](https://discuss.elastic.co/u/Nybble)\ **Replies:** 2\ **Last updated:** [July 11, 2019, 12:02am UTC](https://discuss.elastic.co/t/elastic-common-schema-generator-scripts/189835 "2019-07-11T00:02:05Z") Hello, I want to generate an ES mapping JSON file from my $fields.yml files with scripts on ECS Github (https://github.com/elastic/ecs/tree/master/scripts) but I can't figure out how to use these python scripts. Is it … --- ## [How to delete beat.name field?](https://discuss.elastic.co/t/how-to-delete-beat-name-field/74626)
**Author:** [@John16](https://discuss.elastic.co/u/John16)\ **Replies:** 2\ **Last updated:** [February 10, 2017, 10:30am UTC](https://discuss.elastic.co/t/how-to-delete-beat-name-field/74626 "2017-02-10T10:30:37Z")
Hello, I am using filebeat to store logs in ES. filebeat adds some beat.XXX fields and I want to remove them (in order to save space). I am using ES ingest pipeline to process my logs. I tried the following inges… --- ## [Elasticsearch output does not support parent-child indexing](https://discuss.elastic.co/t/elasticsearch-output-does-not-support-parent-child-indexing/1669)
**Author:** [@sumithub](https://discuss.elastic.co/u/sumithub)\ **Replies:** 2\ **Last updated:** [June 24, 2015, 8:54pm UTC](https://discuss.elastic.co/t/elasticsearch-output-does-not-support-parent-child-indexing/1669 "2015-06-24T20:54:39Z")
Hello, This issue is already opened in git https://github.com/logstash-plugins/logstash-output-elasticsearch/issues/129 I'm facing the issue while indexing child docs. I tried the code as mentioned by Vordoom in abov… --- ## [Problem with config?](https://discuss.elastic.co/t/problem-with-config/902)
**Author:** [@lesurfl](https://discuss.elastic.co/u/lesurfl)\ **Replies:** 2\ **Last updated:** [May 19, 2015, 2:10pm UTC](https://discuss.elastic.co/t/problem-with-config/902 "2015-05-19T14:10:12Z")
Hi, I've been testing out some grok patterns and I thought I had everything working but in production I get the following output: +---------------------------------------------------------+ | An unexpected error occu… --- ## [Winlogbeat as a docker sibling/sidecar container](https://discuss.elastic.co/t/winlogbeat-as-a-docker-sibling-sidecar-container/217409)
**Author:** [@zhammer](https://discuss.elastic.co/u/zhammer)\ **Replies:** 5\ **Last updated:** [February 6, 2020, 4:47am UTC](https://discuss.elastic.co/t/winlogbeat-as-a-docker-sibling-sidecar-container/217409 "2020-02-06T04:47:38Z")
i'd like to ship winlogbeat as a sibling/sidecar container to an app container to ship an app's event logs, rather than as a windows service running within the app container. this would fit well with a current setup wher… --- ## [Query from Uptime app causes OutOfMemory exception in Elasticsearch](https://discuss.elastic.co/t/query-from-uptime-app-causes-outofmemory-exception-in-elasticsearch/186206)
**Author:** [@Mattias\_Arbin](https://discuss.elastic.co/u/Mattias_Arbin)\ **Replies:** 5\ **Last updated:** [June 19, 2019, 8:24am UTC](https://discuss.elastic.co/t/query-from-uptime-app-causes-outofmemory-exception-in-elasticsearch/186206 "2019-06-19T08:24:06Z")
I have a three node ELK cluster with 500M documents in 900 indices. The cluster has been running without any memory-related issues for over a year. I recently started using heartbeat and the Uptime app. Version is 6.8.… --- ## [Email Search Fail. How to solve](https://discuss.elastic.co/t/email-search-fail-how-to-solve/181640)
**Author:** [@RaTheDev](https://discuss.elastic.co/u/RaTheDev)\ **Replies:** 5\ **Last updated:** [June 2, 2019, 1:40pm UTC](https://discuss.elastic.co/t/email-search-fail-how-to-solve/181640 "2019-06-02T13:40:45Z")
Having issue with my Email address field. I have email address stored in upper case and when I search for those IDs in lower case from Java it says there are no records found. Tried using Analyzer it doesnt help me. G… --- ## [Getting \_grokparsefailure as a tag](https://discuss.elastic.co/t/getting-grokparsefailure-as-a-tag/127263)
**Author:** [@student](https://discuss.elastic.co/u/student)\ **Replies:** 5\ **Last updated:** [April 25, 2018, 1:43pm UTC](https://discuss.elastic.co/t/getting-grokparsefailure-as-a-tag/127263 "2018-04-25T13:43:26Z")
Hi I was just wondering why i keep getting the tag \_grokparsefailure in my syslog messages? \[Capture\] My logstash config file looks like this input { tcp { port =\> 5000 type =\> syslog } udp { port =\>… --- ## [How to do a select on every objects in Elasticsearch](https://discuss.elastic.co/t/how-to-do-a-select-on-every-objects-in-elasticsearch/184106)
**Author:** [@franco.federico](https://discuss.elastic.co/u/franco.federico)\ **Replies:** 6\ **Last updated:** [June 6, 2019, 5:01pm UTC](https://discuss.elastic.co/t/how-to-do-a-select-on-every-objects-in-elasticsearch/184106 "2019-06-06T17:01:52Z")
Hi all I'm exploring the ES SQL and I need more information. I only read the getting start on the documentation about SQL. Is it possible to do a select on logstash or other index present in elastic? I read examples o… --- ## [Date range java api examples](https://discuss.elastic.co/t/date-range-java-api-examples/295505)
**Author:** [@nandan-g](https://discuss.elastic.co/u/nandan-g)\ **Replies:** 1\ **Last updated:** [January 27, 2022, 8:02pm UTC](https://discuss.elastic.co/t/date-range-java-api-examples/295505 "2022-01-27T20:02:33Z")
Hi, I am trying to search the documents using a date range filter along with some keywords. I couldn't find any java api samples to do so. Could you please help me. Normal search works with the following code: But am af… --- ## [Elasticsearch snapshot IN\_PROGRESS for a long time. The delete snapshot API is also not working](https://discuss.elastic.co/t/elasticsearch-snapshot-in-progress-for-a-long-time-the-delete-snapshot-api-is-also-not-working/202623)
**Author:** [@nisham](https://discuss.elastic.co/u/nisham)\ **Replies:** 1\ **Last updated:** [October 9, 2019, 9:13am UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-in-progress-for-a-long-time-the-delete-snapshot-api-is-also-not-working/202623 "2019-10-09T09:13:34Z")
Hello, I have a Elasticsearch cluster with following configuration. Elasticsearch version : 5.1.1 Number of Nodes : 10 A daily snapshot process is running in the Cluster. In which the last snapshot was created few da… --- ## [How to identify timefield of the index?](https://discuss.elastic.co/t/how-to-identify-timefield-of-the-index/156080)
**Author:** [@tshoeb](https://discuss.elastic.co/u/tshoeb)\ **Replies:** 1\ **Last updated:** [November 11, 2018, 2:43pm UTC](https://discuss.elastic.co/t/how-to-identify-timefield-of-the-index/156080 "2018-11-11T14:43:03Z")
Is there a query or some way to ask elasticsearch that which field is being used as timefield for the index? --- ## [Missing DNS requests on Windows machine](https://discuss.elastic.co/t/missing-dns-requests-on-windows-machine/286067)
**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\ **Replies:** 4\ **Last updated:** [October 8, 2021, 7:00am UTC](https://discuss.elastic.co/t/missing-dns-requests-on-windows-machine/286067 "2021-10-08T07:00:20Z")
Hey, I'm investigating outbound DNS connections from an Active Directory Domain Controller. It contacted the DNS server tm1.edgedns-tm.info which is apparently owned by Microsoft. Nothing overly suspicious, but I wante… --- ## [Joindre deux index sur Kibana](https://discuss.elastic.co/t/joindre-deux-index-sur-kibana/218978)
**Author:** [@fgomez17](https://discuss.elastic.co/u/fgomez17)\ **Replies:** 4\ **Last updated:** [February 12, 2020, 2:23pm UTC](https://discuss.elastic.co/t/joindre-deux-index-sur-kibana/218978 "2020-02-12T14:23:39Z")
Bonjour à tous, Je vous contacte car j'aimerais savoir si on pouvait joindre deux index en un index unique. Un peu comme une jointure en SQL. Voici mon exemple : Je travaille sur des données présentes dans un fichier E… --- ## [ILM parameters in config](https://discuss.elastic.co/t/ilm-parameters-in-config/212885)
**Author:** [@torten](https://discuss.elastic.co/u/torten)\ **Replies:** 4\ **Last updated:** [December 24, 2019, 12:03pm UTC](https://discuss.elastic.co/t/ilm-parameters-in-config/212885 "2019-12-24T12:03:06Z")
Good day, I want to set up ILM rollover\_alias and policy\_name parameters from the event fields, but no luck, all I got is errors like: \`ERROR instance/beat.go:878 Exiting: failed to read the ilm rollover … --- ## [Failed to format message from \*](https://discuss.elastic.co/t/failed-to-format-message-from/165728)
**Author:** [@Code](https://discuss.elastic.co/u/Code)\ **Replies:** 4\ **Last updated:** [January 28, 2019, 11:28am UTC](https://discuss.elastic.co/t/failed-to-format-message-from/165728 "2019-01-28T11:28:13Z")
I want to see the detail from my server's IIS logs , and I found that kibana cannot format the information of IIS logs. Pls tell what measure should i do ,so I can see the logs' detail. thank you --- ## [Logstash consuming Kafka Topic but don't output document](https://discuss.elastic.co/t/logstash-consuming-kafka-topic-but-dont-output-document/251026)
**Author:** [@Coyz](https://discuss.elastic.co/u/Coyz)\ **Replies:** 3\ **Last updated:** [October 9, 2020, 2:32pm UTC](https://discuss.elastic.co/t/logstash-consuming-kafka-topic-but-dont-output-document/251026 "2020-10-09T14:32:53Z")
Hello, I'm trying to get the stack working with Filebeat =\> Kafka \<= Logstash =\> Elasticsearch Sometimes the configuration is working but sometimes logstash is consuming the kafka topic but not sending the document to… --- ## [Configuration of SMTP in elastic cloud](https://discuss.elastic.co/t/configuration-of-smtp-in-elastic-cloud/223743)
**Author:** [@dbElastic](https://discuss.elastic.co/u/dbElastic)\ **Replies:** 3\ **Last updated:** [March 16, 2020, 2:44pm UTC](https://discuss.elastic.co/t/configuration-of-smtp-in-elastic-cloud/223743 "2020-03-16T14:44:49Z")
Hi , We are using this configuration in elastic cloud for smtp : xpack.notification.email.account: exchange\_account: profile: outlook email\_defaults: from: smtp: auth: true starttls.enable: true host: smtp.off… --- ## [Error loading integrations](https://discuss.elastic.co/t/error-loading-integrations/246643)
**Author:** [@grfneto](https://discuss.elastic.co/u/grfneto)\ **Replies:** 2\ **Last updated:** [August 31, 2020, 1:31pm UTC](https://discuss.elastic.co/t/error-loading-integrations/246643 "2020-08-31T13:31:06Z")
Hi everyone, after update of version 7.8 to 7.9 in Kibana doesn't visualization the Integration tab. When i try configuration showed the message error: Error connecting to package registry at https://epr-7-9.elastic.co… --- ## [How to use custom field type in mappings to achieve multiple type mappings within an index?](https://discuss.elastic.co/t/how-to-use-custom-field-type-in-mappings-to-achieve-multiple-type-mappings-within-an-index/219530)
**Author:** [@prasad98](https://discuss.elastic.co/u/prasad98)\ **Replies:** 2\ **Last updated:** [February 16, 2020, 6:39pm UTC](https://discuss.elastic.co/t/how-to-use-custom-field-type-in-mappings-to-achieve-multiple-type-mappings-within-an-index/219530 "2020-02-16T18:39:47Z")
Hi, I'm trying to migrate my elasticsearch from 2.4 to 7.5 I was working on fixing breaking changes in the mappings. This example here (for custom field type): https://www.elastic.co/guide/en/elasticsearch/reference/cur… --- ## [Call External REST API from Kibana Plugin - Server side](https://discuss.elastic.co/t/call-external-rest-api-from-kibana-plugin-server-side/173221)
**Author:** [@Mark\_Soules](https://discuss.elastic.co/u/Mark_Soules)\ **Replies:** 2\ **Last updated:** [March 21, 2019, 12:31pm UTC](https://discuss.elastic.co/t/call-external-rest-api-from-kibana-plugin-server-side/173221 "2019-03-21T12:31:17Z")
Hi, As the title states, I would like to make a request to an external API (that I don't own) on the server side of my plugin. The API I'm querying requires that I pass the key, certificate, and CA to it however, and wh… --- ## [Aggregating by count for a particular string field](https://discuss.elastic.co/t/aggregating-by-count-for-a-particular-string-field/122446)
**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\ **Replies:** 2\ **Last updated:** [March 8, 2018, 4:02am UTC](https://discuss.elastic.co/t/aggregating-by-count-for-a-particular-string-field/122446 "2018-03-08T04:02:57Z")
Hi, I have 2 separate indices across which I want to correlate few fields. I have created a data table visualization, added the required aggregated metrics and everything is working as expected. Now in this case, I… --- ## [Logstash jdbc plugin: SELECT count(\*) on startup](https://discuss.elastic.co/t/logstash-jdbc-plugin-select-count-on-startup/56376)
**Author:** [@lorello](https://discuss.elastic.co/u/lorello)\ **Replies:** 1\ **Last updated:** [November 16, 2016, 12:38pm UTC](https://discuss.elastic.co/t/logstash-jdbc-plugin-select-count-on-startup/56376 "2016-11-16T12:38:10Z")
I have a table on MySQL server that I want to push to ES. I can accomplish this with the jdbc plugin, but I found it a little heavy on the mysql server, each time it starts it run a SELECT count(\*) AS \`count\` FROM … --- ## [Run ELK with docker compose](https://discuss.elastic.co/t/run-elk-with-docker-compose/332969)
**Author:** [@Fatiha](https://discuss.elastic.co/u/Fatiha)\ **Replies:** 7\ **Last updated:** [May 12, 2023, 11:29pm UTC](https://discuss.elastic.co/t/run-elk-with-docker-compose/332969 "2023-05-12T23:29:56Z")
Hi everyone I want to run the ELK 8.7.0 using docker compose I create the docker-compose.yml file with this configuration : version: '3' services: mysql: container\_name: mysql hostname: mysql image: 'm… --- ## [Errors reindexing documents from version 6 to version 7](https://discuss.elastic.co/t/errors-reindexing-documents-from-version-6-to-version-7/256970)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 7\ **Last updated:** [November 30, 2020, 3:12am UTC](https://discuss.elastic.co/t/errors-reindexing-documents-from-version-6-to-version-7/256970 "2020-11-30T03:12:25Z")
I have a several hundred daily indexes indexed under versions 5 and 6. I have recently upgraded to 7.10 and now want to clean up and standardise my index mappings. I am attempting to reindex using a ruby program and th… --- ## [Logstash timestamp issue - the log line date is one hour ahead the actual date](https://discuss.elastic.co/t/logstash-timestamp-issue-the-log-line-date-is-one-hour-ahead-the-actual-date/244303)
**Author:** [@Muhammad\_Badawy](https://discuss.elastic.co/u/Muhammad_Badawy)\ **Replies:** 7\ **Last updated:** [August 9, 2020, 6:00pm UTC](https://discuss.elastic.co/t/logstash-timestamp-issue-the-log-line-date-is-one-hour-ahead-the-actual-date/244303 "2020-08-09T18:00:37Z")
Hello, I'm trying to read input from JDBC and applied date filter but logstash logs is one hour ahead the actual date. I don't where this difference came from. Logstash conf file input { jdbc { jdbc\_driver\_library =\> "… --- ## [To create a date field in logstash](https://discuss.elastic.co/t/to-create-a-date-field-in-logstash/175364)
**Author:** [@sagarleo](https://discuss.elastic.co/u/sagarleo)\ **Replies:** 1\ **Last updated:** [April 6, 2019, 8:55am UTC](https://discuss.elastic.co/t/to-create-a-date-field-in-logstash/175364 "2019-04-06T08:55:33Z")
I'm trying to create a date field using logstash filter . The field i created extracts time part from logs but when trying to visualize in kibana as date histograms. This newtimestamp field i created in logstash do not a… --- ## [Grok Timezone/DateTime parsing issues](https://discuss.elastic.co/t/grok-timezone-datetime-parsing-issues/137500)
**Author:** [@alilland](https://discuss.elastic.co/u/alilland)\ **Replies:** 1\ **Last updated:** [July 2, 2018, 7:47pm UTC](https://discuss.elastic.co/t/grok-timezone-datetime-parsing-issues/137500 "2018-07-02T19:47:37Z")
I have logs that are spitting out in the following format: \[2018-06-24 07:00:03 -0700\] DEBUG - CrewManagement::API - backbone:sync\_tokens - {\\"description\\":\\"Sync local tokens with Backbone-Auth - 114\\",\\"success\\":tru… --- ## [Kibana x-pack installation fails](https://discuss.elastic.co/t/kibana-x-pack-installation-fails/118015)
**Author:** [@Win](https://discuss.elastic.co/u/Win)\ **Replies:** 7\ **Last updated:** [March 8, 2018, 5:18am UTC](https://discuss.elastic.co/t/kibana-x-pack-installation-fails/118015 "2018-03-08T05:18:09Z")
When installing x-pack for Kibana I'll receive an error message which tells the directory named .phantom cannot be created. Seems like this is a Windows problem since I cannot create the directory with that name even us… --- ## [My Logstash Docker container cannot start normally, please help me analyze it](https://discuss.elastic.co/t/my-logstash-docker-container-cannot-start-normally-please-help-me-analyze-it/308778)
**Author:** [@ahong](https://discuss.elastic.co/u/ahong)\ **Replies:** 5\ **Last updated:** [July 5, 2022, 12:35am UTC](https://discuss.elastic.co/t/my-logstash-docker-container-cannot-start-normally-please-help-me-analyze-it/308778 "2022-07-05T00:35:24Z")
I deployed ELK in the Docker container (version 8.2.3), but the Docker container wouldn't start when logStash was configured. The log error is as follows: {"log":"\[2022-07-04T03:29:27,007\]\[INFO \]\[logstash.javapipeline … --- ## [Logstash to Logstash via TCP is slow/delayed/waiting for something](https://discuss.elastic.co/t/logstash-to-logstash-via-tcp-is-slow-delayed-waiting-for-something/173299)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 5\ **Last updated:** [March 28, 2019, 12:35pm UTC](https://discuss.elastic.co/t/logstash-to-logstash-via-tcp-is-slow-delayed-waiting-for-something/173299 "2019-03-28T12:35:30Z")
We process logfiles with filebeat into logstash (CONF1). If the log entry is marked as an error, we clone it and send it to another instance of logstash (CONF2) via the tcp output plugin. The problem is that while we se… --- ## [Simple Kibana React Plugin](https://discuss.elastic.co/t/simple-kibana-react-plugin/173161)
**Author:** [@Lino\_Capalbo](https://discuss.elastic.co/u/Lino_Capalbo)\ **Replies:** 2\ **Last updated:** [March 20, 2019, 2:37pm UTC](https://discuss.elastic.co/t/simple-kibana-react-plugin/173161 "2019-03-20T14:37:29Z")
Hi All, I need a simple template that create a visualization using React; this template should only (just for now...) draw a simple rectangle, I will enrich later the code with other stuff like linking it to metrics. C… [Previous page](https://discuss.elastic.co/top.md?page=864&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=866&per_page=50&period=all)