# Top **URL:** https://discuss.elastic.co/top.md?page=868&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 869 --- ## [How do I adding Suricata events to Elasticsearch](https://discuss.elastic.co/t/how-do-i-adding-suricata-events-to-elasticsearch/356827)
**Author:** [@rayobe4014](https://discuss.elastic.co/u/rayobe4014)\ **Replies:** 7\ **Last updated:** [April 9, 2024, 5:26am UTC](https://discuss.elastic.co/t/how-do-i-adding-suricata-events-to-elasticsearch/356827 "2024-04-09T05:26:56Z")
I just configuration Exebox with Elasticsearch and Suricata but Elasticsearch not get event from Suricata so how can I add Suricata event to Elasticsearch ? Please guide me how to add Suricata event to Elasticsearch. … --- ## [Ilm document count inconsistent rollover](https://discuss.elastic.co/t/ilm-document-count-inconsistent-rollover/229340)
**Author:** [@Michael\_Jackson1](https://discuss.elastic.co/u/Michael_Jackson1)\ **Replies:** 7\ **Last updated:** [April 23, 2020, 6:23am UTC](https://discuss.elastic.co/t/ilm-document-count-inconsistent-rollover/229340 "2020-04-23T06:23:05Z")
Testing a simple rollover on document count policy and am getting inconsistent results. 2 cpus, 8 GB ram, 1.9 GB heap, 2 nodes (a hot and warm), 0 replicas on a virtual machine note: I just starting looking into cluste… --- ## [Add elements in nested object with JAVA API 5.6 and painless](https://discuss.elastic.co/t/add-elements-in-nested-object-with-java-api-5-6-and-painless/129806)
**Author:** [@Uldax](https://discuss.elastic.co/u/Uldax)\ **Replies:** 1\ **Last updated:** [May 20, 2018, 8:21pm UTC](https://discuss.elastic.co/t/add-elements-in-nested-object-with-java-api-5-6-and-painless/129806 "2018-05-20T20:21:00Z")
Hi everyone, I’m trying to add elements on a nested array on an existing document using painless script . I’m using : elastic search server 5.6.9 org.elasticsearch.client:elasticsearch:5.6.9 org.elasticsearch.client:t… --- ## [Check for existence of a field / sub-field](https://discuss.elastic.co/t/check-for-existence-of-a-field-sub-field/71160)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 1\ **Last updated:** [January 11, 2017, 12:15am UTC](https://discuss.elastic.co/t/check-for-existence-of-a-field-sub-field/71160 "2017-01-11T00:15:52Z")
For my use case, I want to check the existence of a specific field translogid in log message and if it is not present, I want to discard it (Say raise \_grokparsefailure). I followed the steps at Event Dependent Configura… --- ## [Logstash configtest error](https://discuss.elastic.co/t/logstash-configtest-error/54547)
**Author:** [@dogelorde](https://discuss.elastic.co/u/dogelorde)\ **Replies:** 1\ **Last updated:** [July 1, 2016, 4:51pm UTC](https://discuss.elastic.co/t/logstash-configtest-error/54547 "2016-07-01T16:51:57Z")
Running an ELK Stack on Ubuntu Server 16 - Logstash 2.2.4 service is active, so it seems to load fine. When I run "sudo service logstash configtest", my output is this: Error: Expected one of #, input, filter, output at… --- ## [Users password expiration or blocked accounts](https://discuss.elastic.co/t/users-password-expiration-or-blocked-accounts/295086)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 6\ **Last updated:** [January 24, 2022, 6:35am UTC](https://discuss.elastic.co/t/users-password-expiration-or-blocked-accounts/295086 "2022-01-24T06:35:23Z")
Dears, In our Elastic cluster we have few local users which login to Kibana for browsing indexes with applications logs. Twice a week two users reports me problems with login to Kibana. After password reset these users… --- ## [BulkAll takes a long time to complete](https://discuss.elastic.co/t/bulkall-takes-a-long-time-to-complete/189848)
**Author:** [@CSharpBender](https://discuss.elastic.co/u/CSharpBender)\ **Replies:** 6\ **Last updated:** [July 19, 2019, 10:27am UTC](https://discuss.elastic.co/t/bulkall-takes-a-long-time-to-complete/189848 "2019-07-19T10:27:09Z")
Elasticsearch version : 5.6.5 C# Nest package: 5.5.0 JVM version ( java -version ): 9 OS version : Windows 10 Description of the problem including expected versus actual behavior : Sometimes BulkAll takes a long ti… --- ## [ELK Docker with Filebeat Dashboard Problem](https://discuss.elastic.co/t/elk-docker-with-filebeat-dashboard-problem/121199)
**Author:** [@Andre\_Vert](https://discuss.elastic.co/u/Andre_Vert)\ **Replies:** 6\ **Last updated:** [February 23, 2018, 7:48pm UTC](https://discuss.elastic.co/t/elk-docker-with-filebeat-dashboard-problem/121199 "2018-02-23T19:48:22Z")
Hello together, I'm trying to setup an ELK stack using the docker elk (https://github.com/deviantony/docker-elk). For testing purpose I use two virtual machines running ubuntu. One with the ELK docker and one sending t… --- ## [X-pack not installed for Kibana 6.1.0](https://discuss.elastic.co/t/x-pack-not-installed-for-kibana-6-1-0/111840)
**Author:** [@sadok-f](https://discuss.elastic.co/u/sadok-f)\ **Replies:** 6\ **Last updated:** [December 18, 2017, 12:29pm UTC](https://discuss.elastic.co/t/x-pack-not-installed-for-kibana-6-1-0/111840 "2017-12-18T12:29:04Z")
Hello, I'm trying to install X-pack for Kibana (version 6.1.0), but after extracting the plugin, the next step (Optimizing and caching browser bundles) takes forever and nothing happened. here the output: root@elk-u-n… --- ## [Elasticsearch Transport client performance vs. Sense plugin](https://discuss.elastic.co/t/elasticsearch-transport-client-performance-vs-sense-plugin/52908)
**Author:** [@ESDev17](https://discuss.elastic.co/u/ESDev17)\ **Replies:** 6\ **Last updated:** [October 3, 2016, 1:16pm UTC](https://discuss.elastic.co/t/elasticsearch-transport-client-performance-vs-sense-plugin/52908 "2016-10-03T13:16:37Z")
I am trying to understand why the performance of the response from my transport client execution in milliseconds is almost an entire order of magnitude slower than the response I get when executing the same query in the … --- ## [Source Filtering for all index patterns](https://discuss.elastic.co/t/source-filtering-for-all-index-patterns/214628)
**Author:** [@lantern77](https://discuss.elastic.co/u/lantern77)\ **Replies:** 4\ **Last updated:** [January 10, 2020, 6:41pm UTC](https://discuss.elastic.co/t/source-filtering-for-all-index-patterns/214628 "2020-01-10T18:41:23Z")
Hello, So we have a very large nested field that contains alot of objects, and on the "discover" page for kibana whenever it appears, the application crashes. I am aware that source filtering exists for index patterns h… --- ## [How do I load below Kibana logstash-\* dashboard Index-pattern](https://discuss.elastic.co/t/how-do-i-load-below-kibana-logstash-dashboard-index-pattern/105324)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 4\ **Last updated:** [October 31, 2017, 5:48pm UTC](https://discuss.elastic.co/t/how-do-i-load-below-kibana-logstash-dashboard-index-pattern/105324 "2017-10-31T17:48:24Z")
Hi Guys, Can someone please explain me or give me the exact command to load the kibana dashboard index-pattern? I am not sure how to load that. here is the path -\> https://github.com/Security-Onion-Solutions/elastic-t… --- ## [Remove old logs from elastic](https://discuss.elastic.co/t/remove-old-logs-from-elastic/87713)
**Author:** [@moorthyrajesh](https://discuss.elastic.co/u/moorthyrajesh)\ **Replies:** 4\ **Last updated:** [May 31, 2017, 10:20am UTC](https://discuss.elastic.co/t/remove-old-logs-from-elastic/87713 "2017-05-31T10:20:15Z")
I have written a query to load two months data to elasticsearch. I would like only two months data to be retained at any point of time. which means in the third month the first months data should not be shown. Is thi… --- ## [Kibana error when http](https://discuss.elastic.co/t/kibana-error-when-http/39670)
**Author:** [@simroo](https://discuss.elastic.co/u/simroo)\ **Replies:** 4\ **Last updated:** [January 22, 2016, 5:27am UTC](https://discuss.elastic.co/t/kibana-error-when-http/39670 "2016-01-22T05:27:10Z")
Hello I need some help with this installtion that iam doing. I have some problems when trying to access kibana via http. I get a error and kibana cant load. See the image and pastebin for the output. What do you think… --- ## [Get data from excel file into elasticsearch](https://discuss.elastic.co/t/get-data-from-excel-file-into-elasticsearch/255926)
**Author:** [@111411](https://discuss.elastic.co/u/111411)\ **Replies:** 1\ **Last updated:** [November 19, 2020, 5:49am UTC](https://discuss.elastic.co/t/get-data-from-excel-file-into-elasticsearch/255926 "2020-11-19T05:49:36Z")
hello. I'm try get data from excel file into elasticsearch. Message: Error: wrong number of arguments (given 0, expected 3) Exception: ArgumentError Stack: /Users/nguyenzuanbka/logstash-7.10.0/vendor/bundle/jruby/2.… --- ## [Help me to setup up Filebeat in AIX Server](https://discuss.elastic.co/t/help-me-to-setup-up-filebeat-in-aix-server/153567)
**Author:** [@jahaber\_sadhik](https://discuss.elastic.co/u/jahaber_sadhik)\ **Replies:** 1\ **Last updated:** [October 23, 2018, 9:58am UTC](https://discuss.elastic.co/t/help-me-to-setup-up-filebeat-in-aix-server/153567 "2018-10-23T09:58:30Z")
Hi, Am new to ELK. I would like to install Filebeat in AIX servers.. Any one guide me Thanks Sadhik --- ## [Increase LS\_OPEN\_FILES beyond 16384](https://discuss.elastic.co/t/increase-ls-open-files-beyond-16384/95478)
**Author:** [@mitabrev](https://discuss.elastic.co/u/mitabrev)\ **Replies:** 1\ **Last updated:** [August 2, 2017, 12:11pm UTC](https://discuss.elastic.co/t/increase-ls-open-files-beyond-16384/95478 "2017-08-02T12:11:17Z")
Hi guys, Hope my question isn’t too trivial but I can’t seem to find any other setting to increase this value. PID for logstash service is XXX and proc limits: cat /proc/XXX/limits Max open files 163… --- ## [How to resolve !map \[\]ConfigProspector error?](https://discuss.elastic.co/t/how-to-resolve-map-configprospector-error/43007)
**Author:** [@chandni007](https://discuss.elastic.co/u/chandni007)\ **Replies:** 3\ **Last updated:** [March 1, 2016, 5:21am UTC](https://discuss.elastic.co/t/how-to-resolve-map-configprospector-error/43007 "2016-03-01T05:21:47Z")
Hi all, I am new to filebeat . I have install filebeat 1.2.0 and have created a file called filebeat\_consol.yml as .. filebeat: prospectors: input\_type: stdin output: console: pretty: true and when i … --- ## [Worker loop initialization error](https://discuss.elastic.co/t/worker-loop-initialization-error/267609)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [March 18, 2021, 4:56pm UTC](https://discuss.elastic.co/t/worker-loop-initialization-error/267609 "2021-03-18T16:56:22Z")
I want to use multiple pipelines for logstash for example for input section i want to have pipeline.id: source\_input and for output and filter section i want to have pipeline.id: destination\_output But i am facing this… --- ## [Logstash Filter || Json Message to Split Fields](https://discuss.elastic.co/t/logstash-filter-json-message-to-split-fields/199713)
**Author:** [@deeps](https://discuss.elastic.co/u/deeps)\ **Replies:** 2\ **Last updated:** [September 16, 2019, 7:28pm UTC](https://discuss.elastic.co/t/logstash-filter-json-message-to-split-fields/199713 "2019-09-16T19:28:58Z")
Could someone suggest the best and easy way to split the message into separate fields? I have incoming messages in json format: ex: message {"scenarioName":"x","id":"x","type":"x","source":"x","transaction":"x","appId… --- ## [Winlogbeat to Logstash](https://discuss.elastic.co/t/winlogbeat-to-logstash/102890)
**Author:** [@p3y](https://discuss.elastic.co/u/p3y)\ **Replies:** 2\ **Last updated:** [October 5, 2017, 7:06pm UTC](https://discuss.elastic.co/t/winlogbeat-to-logstash/102890 "2017-10-05T19:06:26Z")
Hello, I am very new to ELK technology. I am trying to push windows Event logs to the Logstash server but i am unable to do it. I am using this documentation: https://www.elastic.co/guide/en/beats/winlogbeat/5.0/winlog… --- ## [Scripted field not showing in line chart of visualize](https://discuss.elastic.co/t/scripted-field-not-showing-in-line-chart-of-visualize/64508)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 2\ **Last updated:** [November 1, 2016, 11:49pm UTC](https://discuss.elastic.co/t/scripted-field-not-showing-in-line-chart-of-visualize/64508 "2016-11-01T23:49:04Z")
I am trying to configure scripted filed in kibana (kibana-5.0.0\_rc1-1.x86\_64) but the field does not show up in the list of fields for average aggregation of line chart. Field shows up in the discover so the setting… --- ## [Permission denied just after installation](https://discuss.elastic.co/t/permission-denied-just-after-installation/319568)
**Author:** [@Broot](https://discuss.elastic.co/u/Broot)\ **Replies:** 5\ **Last updated:** [November 24, 2022, 3:58pm UTC](https://discuss.elastic.co/t/permission-denied-just-after-installation/319568 "2022-11-24T15:58:35Z")
I'm trying to install and run Elasticsearch and Kibana and I can't do it because every time I try, I always get some Access Permission Denied. I'm on Ubuntu 20.04 thus installing via Debian for example : /usr/share/el… --- ## [Aggregation by the first character of field](https://discuss.elastic.co/t/aggregation-by-the-first-character-of-field/240307)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 5\ **Last updated:** [July 9, 2020, 11:48am UTC](https://discuss.elastic.co/t/aggregation-by-the-first-character-of-field/240307 "2020-07-09T11:48:49Z")
Dears, Is there any way to do doc aggregation on the first character instead of whole field? My query in case of whole field: GET /log-2020.07.07/\_search?size=0 { "aggs": { "TEXT1": { "terms": { "f… --- ## [Cant split rows in table](https://discuss.elastic.co/t/cant-split-rows-in-table/132698)
**Author:** [@Sebastian\_Herrera](https://discuss.elastic.co/u/Sebastian_Herrera)\ **Replies:** 5\ **Last updated:** [May 23, 2018, 1:55pm UTC](https://discuss.elastic.co/t/cant-split-rows-in-table/132698 "2018-05-23T13:55:18Z")
Hello i am trying to split the rows of my table in kibana, but when i do that i am having no record founds. I go back to discover in order to see if the field that i am spliting is with info and yes. Any idea? "le… --- ## [Scripted Field to check if the value of two attributes match or not](https://discuss.elastic.co/t/scripted-field-to-check-if-the-value-of-two-attributes-match-or-not/143494)
**Author:** [@Hugo\_Faria](https://discuss.elastic.co/u/Hugo_Faria)\ **Replies:** 1\ **Last updated:** [August 8, 2018, 7:37pm UTC](https://discuss.elastic.co/t/scripted-field-to-check-if-the-value-of-two-attributes-match-or-not/143494 "2018-08-08T19:37:53Z")
Hi there, I'm trying to create a scripted field to compare 2 values: doc\['incoming\_json\_dict.customer.correspondenceLanguage'\].value and doc\['result\_pack.detectedLanguage'\].value I tried out different way to check i… --- ## [How to round the sum of metric value on Scripted Field in Visualization?](https://discuss.elastic.co/t/how-to-round-the-sum-of-metric-value-on-scripted-field-in-visualization/110465)
**Author:** [@Shalvin\_Kumar](https://discuss.elastic.co/u/Shalvin_Kumar)\ **Replies:** 1\ **Last updated:** [December 6, 2017, 5:08pm UTC](https://discuss.elastic.co/t/how-to-round-the-sum-of-metric-value-on-scripted-field-in-visualization/110465 "2017-12-06T17:08:01Z")
Hello community, I have written a Scripted field where I am getting P&L of successful trades in a field that I'll later use in a visualization (sum of P&L of successful trades). Code in painless: if(doc\['Type.keyword'… --- ## [ES 5.4.1: Totally random cluster stalling (100% CPU) about 1-2 times per day: We're out of ideas](https://discuss.elastic.co/t/es-5-4-1-totally-random-cluster-stalling-100-cpu-about-1-2-times-per-day-were-out-of-ideas/88698)
**Author:** [@Dominik\_Raute](https://discuss.elastic.co/u/Dominik_Raute)\ **Replies:** 7\ **Last updated:** [June 23, 2017, 1:43pm UTC](https://discuss.elastic.co/t/es-5-4-1-totally-random-cluster-stalling-100-cpu-about-1-2-times-per-day-were-out-of-ideas/88698 "2017-06-23T13:43:15Z")
Hi all, this is a follow-up to the following issue we posted earlier last month: https://discuss.elastic.co/t/what-could-make-a-healthy-es5-3-1-cluster-go-oom-unresponsive-instantly/84730 Setup: Production cluster wit… --- ## [Heartbeat 8.5.0 mapper error workaround](https://discuss.elastic.co/t/heartbeat-8-5-0-mapper-error-workaround/318132)
**Author:** [@Andrew\_Cholakian1](https://discuss.elastic.co/u/Andrew_Cholakian1)\ **Replies:** 0\ **Last updated:** [November 3, 2022, 6:59pm UTC](https://discuss.elastic.co/t/heartbeat-8-5-0-mapper-error-workaround/318132 "2022-11-03T18:59:08Z")
Hi all, Andrew from Elastic here, Tech Lead for Heartbeat. We're sorry to report that Heartbeat 8.5.0 has a severe bug that will break indexing in most installs after ~30m of runtime. The good news is there's an easy wor… --- ## [Finding routes in the right direction](https://discuss.elastic.co/t/finding-routes-in-the-right-direction/52698)
**Author:** [@chopmo](https://discuss.elastic.co/u/chopmo)\ **Replies:** 0\ **Last updated:** [June 14, 2016, 7:56am UTC](https://discuss.elastic.co/t/finding-routes-in-the-right-direction/52698 "2016-06-14T07:56:21Z")
In my app, I index routes using the LineString geo shape. I am trying to query for partial routes going in the right direction. More formally, I need to find documents with a route that intersects two radii in a particu… --- ## [Timelion graph looks totally different when editing vs in a dashboard](https://discuss.elastic.co/t/timelion-graph-looks-totally-different-when-editing-vs-in-a-dashboard/83732)
**Author:** [@red888](https://discuss.elastic.co/u/red888)\ **Replies:** 6\ **Last updated:** [May 1, 2017, 2:49pm UTC](https://discuss.elastic.co/t/timelion-graph-looks-totally-different-when-editing-vs-in-a-dashboard/83732 "2017-05-01T14:49:32Z")
here is my expression (.es(index=myindex\*,metric=avg:time,split=myfield:10)).points().label(regex='.myfield:(.) \>.\*?$',label='mytimemetric $1') This is what I see when I am editing it: This is what I see when it is … --- ## [ES Admin cluster and Logging Cluster?](https://discuss.elastic.co/t/es-admin-cluster-and-logging-cluster/73867)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 6\ **Last updated:** [February 7, 2017, 6:22am UTC](https://discuss.elastic.co/t/es-admin-cluster-and-logging-cluster/73867 "2017-02-07T06:22:22Z")
I would like to ask question about the architecture described in document. There are actually three types of allocators. ES Admin cluster (Green one) ES Logging cluster (Green one) General cluster (Dark Blue one) Wh… --- ## [Watcher webhook action with bulk request](https://discuss.elastic.co/t/watcher-webhook-action-with-bulk-request/72333)
**Author:** [@diopib](https://discuss.elastic.co/u/diopib)\ **Replies:** 6\ **Last updated:** [January 26, 2017, 7:41pm UTC](https://discuss.elastic.co/t/watcher-webhook-action-with-bulk-request/72333 "2017-01-26T19:41:48Z")
Hello there, We would like to use watcher's webhook with a bulk request. For some reasons, we can't use the same data format indicated in the documentation here -- we get a 400 error. Do you know if it's actually pos… --- ## [Filebeat crashing with out of memory](https://discuss.elastic.co/t/filebeat-crashing-with-out-of-memory/163580)
**Author:** [@damianconnolly](https://discuss.elastic.co/u/damianconnolly)\ **Replies:** 4\ **Last updated:** [January 15, 2019, 1:00pm UTC](https://discuss.elastic.co/t/filebeat-crashing-with-out-of-memory/163580 "2019-01-15T13:00:22Z")
Hi, I'm trying to setup Beats for a new application, and Beats crashes after a few minutes of running, before any logs are even sent to Kafka. The log file I'm reading from is pretty huge (32GB) and I think the problem … --- ## [ES 6.2.1 Advice deleting old index after a reindex](https://discuss.elastic.co/t/es-6-2-1-advice-deleting-old-index-after-a-reindex/122392)
**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Replies:** 4\ **Last updated:** [March 4, 2018, 12:50am UTC](https://discuss.elastic.co/t/es-6-2-1-advice-deleting-old-index-after-a-reindex/122392 "2018-03-04T00:50:32Z")
Hi Team, I would like to compress indexes when they become old. The problem I have at the moment is I think the only way to compress an old index is to do a reindex to create a new index with best compression index cod… --- ## [Infinite extent for field "count": \[Infinity, -Infinity\]](https://discuss.elastic.co/t/infinite-extent-for-field-count-infinity-infinity/276333)
**Author:** [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)\ **Replies:** 2\ **Last updated:** [June 21, 2021, 2:26pm UTC](https://discuss.elastic.co/t/infinite-extent-for-field-count-infinity-infinity/276333 "2021-06-21T14:26:55Z")
I am building a bar chart in Vega visualization and it is getting created as expected. But when I change the time range or put some filter for which I don't have data, then ideally the chart should be blank and display n… --- ## [Logstash to PostgreSQL](https://discuss.elastic.co/t/logstash-to-postgresql/93545)
**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\ **Replies:** 2\ **Last updated:** [July 24, 2017, 9:18am UTC](https://discuss.elastic.co/t/logstash-to-postgresql/93545 "2017-07-24T09:18:50Z")
It there a way to send logs from logstash to postgresql? Thanks! :smiley: --- ## [Path to repo not working](https://discuss.elastic.co/t/path-to-repo-not-working/65620)
**Author:** [@xvschneider](https://discuss.elastic.co/u/xvschneider)\ **Replies:** 2\ **Last updated:** [November 11, 2016, 8:24am UTC](https://discuss.elastic.co/t/path-to-repo-not-working/65620 "2016-11-11T08:24:06Z")
Hello there. I'm experiencing some issues with backing up my documents - when the path.repo points to a fileshare location, ES won't start as a service. My setups is the following: 3 Windows Server 2012 R2 machines, on… --- ## [Create geo\_points using script fields](https://discuss.elastic.co/t/create-geo-points-using-script-fields/204630)
**Author:** [@AstroSlazak](https://discuss.elastic.co/u/AstroSlazak)\ **Replies:** 3\ **Last updated:** [October 23, 2019, 7:47am UTC](https://discuss.elastic.co/t/create-geo-points-using-script-fields/204630 "2019-10-23T07:47:55Z")
Hi, I'm working on problem where i get a message: "DateTime:22.10.2019 10.24.15,Longitude:10,3315497,Latitude:63,3504556,Bearing:0" and trying to get location from it and show it on map. But now i have a problem, i am … --- ## [Strange hanging/buffering behavior with tcp plugin](https://discuss.elastic.co/t/strange-hanging-buffering-behavior-with-tcp-plugin/33042)
**Author:** [@treehouse](https://discuss.elastic.co/u/treehouse)\ **Replies:** 3\ **Last updated:** [November 4, 2015, 12:29am UTC](https://discuss.elastic.co/t/strange-hanging-buffering-behavior-with-tcp-plugin/33042 "2015-11-04T00:29:47Z")
I am feeding one logstash output into the input of another logstash instance. I am using the tcp output plugin (in logstash A) for data output, and tcp input plugin for data input (logstash B). I'm seeing some strange be… --- ## [Search for similar documents](https://discuss.elastic.co/t/search-for-similar-documents/4778)
**Author:** [@konstantin](https://discuss.elastic.co/u/konstantin)\ **Replies:** 3\ **Last updated:** [July 6, 2011, 11:19am UTC](https://discuss.elastic.co/t/search-for-similar-documents/4778 "2011-07-06T11:19:37Z")
Hi guys, I have a task. Given document I have to find the set of similar documents. The document has title and content fields. I'd like to use some kind of cosine similarity. My current approach is to represent … --- ## [How to change kibana's password complexity setting](https://discuss.elastic.co/t/how-to-change-kibanas-password-complexity-setting/256209)
**Author:** [@shawn\_sun](https://discuss.elastic.co/u/shawn_sun)\ **Replies:** 1\ **Last updated:** [November 21, 2020, 2:51am UTC](https://discuss.elastic.co/t/how-to-change-kibanas-password-complexity-setting/256209 "2020-11-21T02:51:35Z")
Such as title, I need to improve the PASSWORD Complexity of the kibana user. my kibana is Basic license，if there have any method meet the need. defalt setting just 6 characters: --- ## [No processor type exists with name \[geoip\]](https://discuss.elastic.co/t/no-processor-type-exists-with-name-geoip/173174)
**Author:** [@Tim\_Rice](https://discuss.elastic.co/u/Tim_Rice)\ **Replies:** 1\ **Last updated:** [March 20, 2019, 3:21pm UTC](https://discuss.elastic.co/t/no-processor-type-exists-with-name-geoip/173174 "2019-03-20T15:21:45Z")
Hello, I am looking at elastic.co hosted services. I am trying to leverage geoip for an IP address, but I am not having any luck. When I try to add geoip to an existing pipeline, I receive a "No processor type exists … --- ## [Logstash filter to parse json --\> json deserialized string](https://discuss.elastic.co/t/logstash-filter-to-parse-json-json-deserialized-string/114445)
**Author:** [@akustic](https://discuss.elastic.co/u/akustic)\ **Replies:** 1\ **Last updated:** [January 8, 2018, 8:18am UTC](https://discuss.elastic.co/t/logstash-filter-to-parse-json-json-deserialized-string/114445 "2018-01-08T08:18:19Z")
I have some log files I want to parse and they are in the following format. {"log":"{"@timestamp":"2018-01-08T02:11:35.651+00:00","@version":1,"message":"\\u001B\[36mFinished \\u001B\[0m:get / for 139.162.106.181 in (1 ms) … --- ## [Help to GROK parse JBoss EAP 6 access log](https://discuss.elastic.co/t/help-to-grok-parse-jboss-eap-6-access-log/82306)
**Author:** [@bsl.lacerda](https://discuss.elastic.co/u/bsl.lacerda)\ **Replies:** 1\ **Last updated:** [April 13, 2017, 3:06pm UTC](https://discuss.elastic.co/t/help-to-grok-parse-jboss-eap-6-access-log/82306 "2017-04-13T15:06:34Z")
Greetings!!! I'm trying to parse JBoss Access Log Message without success. In the grok debugger, the regex works fine, but in the LOGSTASH 5.2.0 Grok Filter I'm getting the \_grokparsefailure. This is the LOGPATTERN: … --- ## [Can Kibana be used to visualize non aggregated data?](https://discuss.elastic.co/t/can-kibana-be-used-to-visualize-non-aggregated-data/31855)
**Author:** [@dita](https://discuss.elastic.co/u/dita)\ **Replies:** 1\ **Last updated:** [October 8, 2015, 9:25pm UTC](https://discuss.elastic.co/t/can-kibana-be-used-to-visualize-non-aggregated-data/31855 "2015-10-08T21:25:28Z")
Is it possible to make a visualization in Kibana 4 of data without aggregation? In other words: make a layed out list of content found in the Discover section without analyzing? One example could be a firewall log: All… --- ## [Multiple ingest pipeline in index template](https://discuss.elastic.co/t/multiple-ingest-pipeline-in-index-template/319793)
**Author:** [@kmz161](https://discuss.elastic.co/u/kmz161)\ **Replies:** 2\ **Last updated:** [December 2, 2022, 7:28am UTC](https://discuss.elastic.co/t/multiple-ingest-pipeline-in-index-template/319793 "2022-12-02T07:28:14Z")
Hello! I have index template and need attach 2 ingest pipelines to him. How I can do it? My current config { "index": { "default\_pipeline": "netflow-pipeline" } } --- ## [Problem creating a template 7.5](https://discuss.elastic.co/t/problem-creating-a-template-7-5/259397)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 2\ **Last updated:** [December 22, 2020, 3:00pm UTC](https://discuss.elastic.co/t/problem-creating-a-template-7-5/259397 "2020-12-22T15:00:54Z")
Hi, when I try to create an index template I get this error, I have checked multiple times and seems to be all ok. { "error": { "root\_cause": \[ { "type": "parse\_exception", "reason": "unknown… --- ## [Single letter term matches cause noise in search results](https://discuss.elastic.co/t/single-letter-term-matches-cause-noise-in-search-results/45698)
**Author:** [@jillesvangurp](https://discuss.elastic.co/u/jillesvangurp)\ **Replies:** 2\ **Last updated:** [March 29, 2016, 3:37pm UTC](https://discuss.elastic.co/t/single-letter-term-matches-cause-noise-in-search-results/45698 "2016-03-29T15:37:04Z")
I'm trying to implement name search using match, match\_phrase and match\_prefix. My data is messy and spread across name fields, first\_name, last\_name, etc. For the sake of simplicity, I've been trying to narrow down th… --- ## [S3 input with cloudtrail codec not working with gzipped files](https://discuss.elastic.co/t/s3-input-with-cloudtrail-codec-not-working-with-gzipped-files/44482)
**Author:** [@kevinpauli](https://discuss.elastic.co/u/kevinpauli)\ **Replies:** 2\ **Last updated:** [March 21, 2016, 10:04pm UTC](https://discuss.elastic.co/t/s3-input-with-cloudtrail-codec-not-working-with-gzipped-files/44482 "2016-03-21T22:04:07Z")
TL/DR: I can't seem to get the s3 input with cloudtrail codec working if the file is gzipped (which is the default for cloudtrail). It does work if I download the file, unzip it, and upload it back into a different S3 b… [Previous page](https://discuss.elastic.co/top.md?page=867&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=869&per_page=50&period=all)