# Top **URL:** https://discuss.elastic.co/top.md?page=878&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 879 --- ## [Elasticsearch create index with wrong fields types](https://discuss.elastic.co/t/elasticsearch-create-index-with-wrong-fields-types/87562)
**Author:** [@chelius](https://discuss.elastic.co/u/chelius)\ **Replies:** 1\ **Last updated:** [May 30, 2017, 2:18pm UTC](https://discuss.elastic.co/t/elasticsearch-create-index-with-wrong-fields-types/87562 "2017-05-30T14:18:23Z")
Hi all! I want to get my haproxy logs and visualize there with Kibana, but i have problem. I make config for logstash input { file { path =\> "/var/log/haproxy.log" start\_position =\> "end" stat\_interval =\> 1 disco… --- ## [Kibana 4 / 5: how to show single events of mutltiple selected log files?](https://discuss.elastic.co/t/kibana-4-5-how-to-show-single-events-of-mutltiple-selected-log-files/62382)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [October 7, 2016, 7:39pm UTC](https://discuss.elastic.co/t/kibana-4-5-how-to-show-single-events-of-mutltiple-selected-log-files/62382 "2016-10-07T19:39:33Z")
Hi, I am quite new to kibana 4 or 5. We are currently using the nagios logserver in production which is based on kibana 3. Now I want to get familar with kibana 4 / 5 for considering about switching to kibana 5 when it… --- ## [Elasticsearch 7.4.2 run as service in Linux environment](https://discuss.elastic.co/t/elasticsearch-7-4-2-run-as-service-in-linux-environment/213552)
**Author:** [@abhishek1989](https://discuss.elastic.co/u/abhishek1989)\ **Replies:** 5\ **Last updated:** [January 6, 2020, 9:58am UTC](https://discuss.elastic.co/t/elasticsearch-7-4-2-run-as-service-in-linux-environment/213552 "2020-01-06T09:58:58Z")
Hi, I have installed elasticsearch 7.4.2 .zip in centos system but after running elasticsearch i got error in console which has mentioned below Error in status : elasticsearch-7.4.2.service - Elasticsearch-7.4.2 Loa… --- ## [Update using Elasticsearch restlevel client 7.5.1 is failing on Elasticsearch 6.8 AWS cluster](https://discuss.elastic.co/t/update-using-elasticsearch-restlevel-client-7-5-1-is-failing-on-elasticsearch-6-8-aws-cluster/214231)
**Author:** [@Aishwarya\_Gopikrishn](https://discuss.elastic.co/u/Aishwarya_Gopikrishn)\ **Replies:** 6\ **Last updated:** [January 21, 2020, 8:19am UTC](https://discuss.elastic.co/t/update-using-elasticsearch-restlevel-client-7-5-1-is-failing-on-elasticsearch-6-8-aws-cluster/214231 "2020-01-21T08:19:54Z")
Hi Team, We do own 2 AWS Elasticsearch clusters, out of which one got upgraded to 7.1 version while the latter is still on 6.8 version. We did scala code changes to accommodate this upgradation(as our existing jobs wer… --- ## [Watcher email body message to send some parameters in anomaly explorer](https://discuss.elastic.co/t/watcher-email-body-message-to-send-some-parameters-in-anomaly-explorer/213114)
**Author:** [@vishnuvardhan](https://discuss.elastic.co/u/vishnuvardhan)\ **Replies:** 6\ **Last updated:** [January 2, 2020, 5:50pm UTC](https://discuss.elastic.co/t/watcher-email-body-message-to-send-some-parameters-in-anomaly-explorer/213114 "2020-01-02T17:50:13Z")
Hi Team, i need to send email to the customer any anomaly reaches 75% above critical. in email body included parameters like ("job id, actual,typical values and probability ,anomaly score , influencers ")shown in image… --- ## [Importing palo alto logs, " failed to parse " error on time](https://discuss.elastic.co/t/importing-palo-alto-logs-failed-to-parse-error-on-time/41660)
**Author:** [@Alex\_Mendez](https://discuss.elastic.co/u/Alex_Mendez)\ **Replies:** 6\ **Last updated:** [August 2, 2016, 4:11pm UTC](https://discuss.elastic.co/t/importing-palo-alto-logs-failed-to-parse-error-on-time/41660 "2016-08-02T16:11:15Z")
I'm trying to import palo alto logs, and there are two fields ReceiveTime and GenerateTime, with time stamp as below "ReceiveTime" =\> "2016/02/12 19:03:09", "GenerateTime" =\> "2016/02/12 19:03:09", in… --- ## [Index Template getting overwritten on when indexing first document](https://discuss.elastic.co/t/index-template-getting-overwritten-on-when-indexing-first-document/24580)
**Author:** [@Donnie\_McNeal](https://discuss.elastic.co/u/Donnie_McNeal)\ **Replies:** 6\ **Last updated:** [June 30, 2015, 3:08am UTC](https://discuss.elastic.co/t/index-template-getting-overwritten-on-when-indexing-first-document/24580 "2015-06-30T03:08:26Z")
I'm seeing a strange issue with my index templates in elasticsearch where Elasticsearch is overwriting the index templates I have defined with it's default mappings. I have a index template for all of my rpt\_\* indicies. … --- ## [Update \_id field](https://discuss.elastic.co/t/update-id-field/299320)
**Author:** [@gunjankum](https://discuss.elastic.co/u/gunjankum)\ **Replies:** 2\ **Last updated:** [March 10, 2022, 10:45am UTC](https://discuss.elastic.co/t/update-id-field/299320 "2022-03-10T10:45:11Z")
Can we update \_id field of a doc. POST /test\_region/\_doc/01 { "id":"222", "userName":"Kumar", "region":"DelhiNew" } Doc value :slight\_smile: { "\_index" : "test\_region", "\_type" : "\_doc", "\_id" : "01", "\_score… --- ## [ElasticSearch SAML license requirement?](https://discuss.elastic.co/t/elasticsearch-saml-license-requirement/269257)
**Author:** [@ehfdub](https://discuss.elastic.co/u/ehfdub)\ **Replies:** 2\ **Last updated:** [April 5, 2021, 8:18pm UTC](https://discuss.elastic.co/t/elasticsearch-saml-license-requirement/269257 "2021-04-05T20:18:18Z")
Hello, I'm looking to implement SAML single-signon in ELK stack. I've been following this guide Configuring SAML single-sign-on on the Elastic Stack | Elasticsearch Guide \[7.12\] | Elastic. The guide does not mention a… --- ## [Kibana not Loading in Chrome and no error in Console](https://discuss.elastic.co/t/kibana-not-loading-in-chrome-and-no-error-in-console/230889)
**Author:** [@abhir83](https://discuss.elastic.co/u/abhir83)\ **Replies:** 2\ **Last updated:** [May 4, 2020, 7:42am UTC](https://discuss.elastic.co/t/kibana-not-loading-in-chrome-and-no-error-in-console/230889 "2020-05-04T07:42:18Z")
I am trying to open Kibana in Chrome(On Windows).It does not open.There is no Error in Console.The message "Change in Connection" is displayed on Chrome.I started the kibana.bat file to start Kibana.Is it Mandatory?After… --- ## [How to get the List of highlighted fields attached per rule in Alerts flyout in Security Analytics](https://discuss.elastic.co/t/how-to-get-the-list-of-highlighted-fields-attached-per-rule-in-alerts-flyout-in-security-analytics/377423)
**Author:** [@Sergie](https://discuss.elastic.co/u/Sergie)\ **Replies:** 7\ **Last updated:** [May 27, 2025, 8:33pm UTC](https://discuss.elastic.co/t/how-to-get-the-list-of-highlighted-fields-attached-per-rule-in-alerts-flyout-in-security-analytics/377423 "2025-05-27T20:33:19Z")
For my use case I want to understand, is there an API associated, which gives the highlighted fields section in the alerts flyout in Security Plugin in Kibana. The highlighted fields which gets generated in the alert fl… --- ## [Replace the empty fields in csv](https://discuss.elastic.co/t/replace-the-empty-fields-in-csv/122396)
**Author:** [@TechGeek](https://discuss.elastic.co/u/TechGeek)\ **Replies:** 4\ **Last updated:** [March 5, 2018, 1:19pm UTC](https://discuss.elastic.co/t/replace-the-empty-fields-in-csv/122396 "2018-03-05T13:19:25Z")
While ingesting data (which include 20+ columns in csv), it throwing an error while creating pipeline to solve this I convert the file in .txt and ingest. It did well, though certain columns information overlap or exchan… --- ## [Parse docker logs with logstash](https://discuss.elastic.co/t/parse-docker-logs-with-logstash/92972)
**Author:** [@DevOpsRoot](https://discuss.elastic.co/u/DevOpsRoot)\ **Replies:** 4\ **Last updated:** [July 13, 2017, 9:43am UTC](https://discuss.elastic.co/t/parse-docker-logs-with-logstash/92972 "2017-07-13T09:43:58Z")
Hello all, I want to parse logs lines like this one : 2017-07-12T12:50:37.944779015Z \[2017-07-12T12:50:37,944\]\[INFO \]\[logstash.pipeline \] Pipeline main started How can i do that ? with grok ? wich plug-in… --- ## [DISSECT FILTER, field not always specified](https://discuss.elastic.co/t/dissect-filter-field-not-always-specified/88109)
**Author:** [@Vinuja1](https://discuss.elastic.co/u/Vinuja1)\ **Replies:** 4\ **Last updated:** [June 12, 2017, 11:22am UTC](https://discuss.elastic.co/t/dissect-filter-field-not-always-specified/88109 "2017-06-12T11:22:16Z")
I was using a grok filter until i had the " Timeout executing grok : Value too large to output" message. In order to solve this issue, I would like to try a dissect filter. I have big files and sometimes, some field ar… --- ## [Keep hierarchy in json data](https://discuss.elastic.co/t/keep-hierarchy-in-json-data/31881)
**Author:** [@Ducheol\_Kim](https://discuss.elastic.co/u/Ducheol_Kim)\ **Replies:** 4\ **Last updated:** [October 9, 2015, 6:34pm UTC](https://discuss.elastic.co/t/keep-hierarchy-in-json-data/31881 "2015-10-09T18:34:21Z")
Hi All. I try to parse the hierarchical json data. Problem is there are same field in different level like below. {"id":"TEST","level2":{"id":"Level2 id"}} In above case, final appeared id is overwrite previous one a… --- ## [Conditionals in Canvas](https://discuss.elastic.co/t/conditionals-in-canvas/168796)
**Author:** [@rozling](https://discuss.elastic.co/u/rozling)\ **Replies:** 1\ **Last updated:** [February 18, 2019, 10:29am UTC](https://discuss.elastic.co/t/conditionals-in-canvas/168796 "2019-02-18T10:29:57Z")
Hi, I'm creating a Canvas dashboard using data from the Heartbeat plugin, and using the opportunity to learn Canvas syntax. I'm using an SQL query to pull the data from Heartbeat like so: filters | essql query="SEL… --- ## [Multiple inputs](https://discuss.elastic.co/t/multiple-inputs/143102)
**Author:** [@Raghuveer\_SJ](https://discuss.elastic.co/u/Raghuveer_SJ)\ **Replies:** 1\ **Last updated:** [August 8, 2018, 6:35am UTC](https://discuss.elastic.co/t/multiple-inputs/143102 "2018-08-08T06:35:12Z")
I am testing filebeat to see if it can read multiple files based on log\_type i can make decision as to which index the logs have to go in elasticsearch from logstash. filebeat.prospectors: - input\_type: log enabled: … --- ## [Kibana Plugin for xlsx import](https://discuss.elastic.co/t/kibana-plugin-for-xlsx-import/139921)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 7\ **Last updated:** [July 13, 2018, 1:56pm UTC](https://discuss.elastic.co/t/kibana-plugin-for-xlsx-import/139921 "2018-07-13T13:56:04Z")
Hi All, Have found this git page which searching for xlsx import This explains that we can import xlsx file directly from kibana if we install this plugin, have to trying to install it and getting errors Error: Clie… --- ## [ML calculates wrong averages on pre-aggregated data](https://discuss.elastic.co/t/ml-calculates-wrong-averages-on-pre-aggregated-data/104916)
**Author:** [@guysmoilov](https://discuss.elastic.co/u/guysmoilov)\ **Replies:** 7\ **Last updated:** [October 24, 2017, 12:17pm UTC](https://discuss.elastic.co/t/ml-calculates-wrong-averages-on-pre-aggregated-data/104916 "2017-10-24T12:17:52Z")
Hi everyone, I would like some help or an explanation regarding how to work using pre-aggregated data for ML. Scenario: We’re indexing pre-aggregated data to Elasticsearch. Each document has the following (relevant) fie… --- ## [ElasticSearch Index Mapping with Java Client](https://discuss.elastic.co/t/elasticsearch-index-mapping-with-java-client/177993)
**Author:** [@thebuleon29](https://discuss.elastic.co/u/thebuleon29)\ **Replies:** 3\ **Last updated:** [April 26, 2019, 10:12am UTC](https://discuss.elastic.co/t/elasticsearch-index-mapping-with-java-client/177993 "2019-04-26T10:12:42Z")
Hi, I want to use ElasticSearch 6.6 as a Time Series Database and need to map the timestamp as a date to plot the data in Grafana. I am stuck at the index creation because Java keeps throwing the same exception : org.e… --- ## [ES 6.0 timeout on cluster](https://discuss.elastic.co/t/es-6-0-timeout-on-cluster/112434)
**Author:** [@Rakotobe](https://discuss.elastic.co/u/Rakotobe)\ **Replies:** 8\ **Last updated:** [December 21, 2017, 3:37am UTC](https://discuss.elastic.co/t/es-6-0-timeout-on-cluster/112434 "2017-12-21T03:37:20Z")
Hello, I've 3 differents server with 1 instance of ES 6.0 on each and another server with nodejs, to query on. On each server I just changed : discovery.zen.ping.unicast.hosts : \[ LIST\_ES\_IP \] discovery.zen.minimum\_m… --- ## [How to change the menu order in Kibana Display](https://discuss.elastic.co/t/how-to-change-the-menu-order-in-kibana-display/80789)
**Author:** [@PrabakarKaruppasamy](https://discuss.elastic.co/u/PrabakarKaruppasamy)\ **Replies:** 3\ **Last updated:** [April 19, 2017, 2:31pm UTC](https://discuss.elastic.co/t/how-to-change-the-menu-order-in-kibana-display/80789 "2017-04-19T14:31:27Z")
Hello, I want to change the menu order from it default displaying From the Order 1. Discover 2. Visualize 3. Dashboard 4. Management To the Order of 1. Visualize 2. Management 3. Dashboard 4. Discover Is the… --- ## [6.0.0-beta2 Reindex from remote getProxySelector AccessControlException](https://discuss.elastic.co/t/6-0-0-beta2-reindex-from-remote-getproxyselector-accesscontrolexception/99864)
**Author:** [@loren](https://discuss.elastic.co/u/loren)\ **Replies:** 3\ **Last updated:** [September 14, 2017, 8:56pm UTC](https://discuss.elastic.co/t/6-0-0-beta2-reindex-from-remote-getproxyselector-accesscontrolexception/99864 "2017-09-14T20:56:14Z")
I'm not sure why the JSM is complaining when I try to reindex to a local 6.0.0-beta2 instance from a remote cluster that I access via an SSH tunnel on another localhost port. I have this in my elasticsearch.yaml file: r… --- ## [How to check for 1 of 2 fields to exist in record](https://discuss.elastic.co/t/how-to-check-for-1-of-2-fields-to-exist-in-record/185246)
**Author:** [@cjokinen](https://discuss.elastic.co/u/cjokinen)\ **Replies:** 2\ **Last updated:** [June 11, 2019, 6:37pm UTC](https://discuss.elastic.co/t/how-to-check-for-1-of-2-fields-to-exist-in-record/185246 "2019-06-11T18:37:37Z")
I am having an issue getting a result where 1 or 2 fields exist. either is fine but the best I can figure is how to require both using the below query for ES6.5. { "version":"2017-02-28", "operation":"GET", "path"… --- ## [The \[string\] field is deprecated](https://discuss.elastic.co/t/the-string-field-is-deprecated/87034)
**Author:** [@Callahan](https://discuss.elastic.co/u/Callahan)\ **Replies:** 2\ **Last updated:** [May 25, 2017, 6:46pm UTC](https://discuss.elastic.co/t/the-string-field-is-deprecated/87034 "2017-05-25T18:46:17Z")
Hi, I've spent most of the day trying to nail down this problem. I have a conf file and a template set up for our firewall. It works well enough, logs are entering ES and I can use Kibana to query logs and display grap… --- ## [使用 highlight 的 boundary\_chars参数后仍然从非边界字符截断](https://discuss.elastic.co/t/highlight-boundary-chars/57805)
**Author:** [@wpzdm](https://discuss.elastic.co/u/wpzdm)\ **Replies:** 2\ **Last updated:** [September 12, 2016, 9:42am UTC](https://discuss.elastic.co/t/highlight-boundary-chars/57805 "2016-09-12T09:42:11Z")
已使用 highlight 的 boundary\_chars参数，但有时仍然从非边界字符截断。 测试数据如下： PUT wpz\_2 PUT wpz\_2/\_mapping/test { "properties": { "test": { "analyzer": "index\_ansj", "type": "string", "term\_vector": "with\_positi… --- ## [How can I pattern match a sequence of events?](https://discuss.elastic.co/t/how-can-i-pattern-match-a-sequence-of-events/253246)
**Author:** [@marcosvrrs](https://discuss.elastic.co/u/marcosvrrs)\ **Replies:** 5\ **Last updated:** [October 30, 2020, 1:36pm UTC](https://discuss.elastic.co/t/how-can-i-pattern-match-a-sequence-of-events/253246 "2020-10-30T13:36:47Z")
Hi guys, I'am having a steep learning curve with the syntax. I have a sequence of transactions with timestamps, and when a transaction comes with some values in certain fields, I need to check if in the next 30 seconds … --- ## [Changing field format into proper date format that has date as TEXT](https://discuss.elastic.co/t/changing-field-format-into-proper-date-format-that-has-date-as-text/192736)
**Author:** [@zatom](https://discuss.elastic.co/u/zatom)\ **Replies:** 5\ **Last updated:** [July 29, 2019, 6:31pm UTC](https://discuss.elastic.co/t/changing-field-format-into-proper-date-format-that-has-date-as-text/192736 "2019-07-29T18:31:06Z")
hi, I currently have a field that is in this text format ( some field has "2019/03/25 00:00:00.000" and some docs in same field has "20190619"). I changed the mapping for the field as DATE (yyyy/MM/dd HH:mm:ss.SSSZZ), bu… --- ## [How to use array variable in regex. Painless scripted field](https://discuss.elastic.co/t/how-to-use-array-variable-in-regex-painless-scripted-field/116527)
**Author:** [@dr\_dob](https://discuss.elastic.co/u/dr_dob)\ **Replies:** 5\ **Last updated:** [January 25, 2018, 3:33pm UTC](https://discuss.elastic.co/t/how-to-use-array-variable-in-regex-painless-scripted-field/116527 "2018-01-25T15:33:56Z")
Hi How can I use an array value in a regex? Such as: String returnValue = ""; String\[\] listarray; listarray = new String\[2\]; listarray\[0\] = "Movies"; listarray\[1\] = "PG13"; for( int i = 0; i \< listarray.size(); i … --- ## [Issues with multiline](https://discuss.elastic.co/t/issues-with-multiline/93355)
**Author:** [@Ron\_Sevet](https://discuss.elastic.co/u/Ron_Sevet)\ **Replies:** 5\ **Last updated:** [July 20, 2017, 6:23am UTC](https://discuss.elastic.co/t/issues-with-multiline/93355 "2017-07-20T06:23:51Z")
Hi, I'm trying to use multiline on filebeat, here is the config - filebeat.prospectors: - input\_type: log paths: #- /var/log/\*.log - c:\\inetpub\\logs\\LogFiles\\W3SVC161606440\\\* document\_type: iis-il2 - i… --- ## [Filebeat Module For Tomcat?](https://discuss.elastic.co/t/filebeat-module-for-tomcat/179222)
**Author:** [@Tony\_Chirillo](https://discuss.elastic.co/u/Tony_Chirillo)\ **Replies:** 1\ **Last updated:** [May 2, 2019, 8:20am UTC](https://discuss.elastic.co/t/filebeat-module-for-tomcat/179222 "2019-05-02T08:20:43Z")
I have found there is a Filebeat module to parse Apache logs, but is there a module that will parse Apache Tomcat logs? -Tony --- ## [Increase log level for output plugin only](https://discuss.elastic.co/t/increase-log-level-for-output-plugin-only/104320)
**Author:** [@keithn](https://discuss.elastic.co/u/keithn)\ **Replies:** 1\ **Last updated:** [October 18, 2017, 5:14am UTC](https://discuss.elastic.co/t/increase-log-level-for-output-plugin-only/104320 "2017-10-18T05:14:44Z")
"Previously, you could only set a log level that applied to the entire Logstash product. Starting with 5.0, you can configure logging for a particular subsystem in Logstash." https://www.elastic.co/guide/en/logstash/curr… --- ## [Docker proxy cache registry for docker.elastic.co](https://discuss.elastic.co/t/docker-proxy-cache-registry-for-docker-elastic-co/100283)
**Author:** [@otep.fabales](https://discuss.elastic.co/u/otep.fabales)\ **Replies:** 1\ **Last updated:** [September 18, 2017, 2:16am UTC](https://discuss.elastic.co/t/docker-proxy-cache-registry-for-docker-elastic-co/100283 "2017-09-18T02:16:03Z")
Hi, We have a docker proxy cache configured which points to docker hub's registry but since elasticsearch is now officially on docker.elastic.co, how can we configure the proxy cache to connect to elastic.co's docker re… --- ## [How many concurrent writes does a Elasticsearch single node count as normal?](https://discuss.elastic.co/t/how-many-concurrent-writes-does-a-elasticsearch-single-node-count-as-normal/86552)
**Author:** [@willdx](https://discuss.elastic.co/u/willdx)\ **Replies:** 1\ **Last updated:** [May 21, 2017, 6:30am UTC](https://discuss.elastic.co/t/how-many-concurrent-writes-does-a-elasticsearch-single-node-count-as-normal/86552 "2017-05-21T06:30:30Z")
How many concurrent writes does a Elasticsearch single node count as normal? Environment : ELK 5 Machine performance: 4 core /16GB/SSD hard disk Problem 1: Elasticsearch single node write speed (concurrent quantity) ho… --- ## [Set the color of charts in Kibana 4](https://discuss.elastic.co/t/set-the-color-of-charts-in-kibana-4/26036)
**Author:** [@Surbhi\_Agarwal](https://discuss.elastic.co/u/Surbhi_Agarwal)\ **Replies:** 1\ **Last updated:** [July 22, 2015, 5:43am UTC](https://discuss.elastic.co/t/set-the-color-of-charts-in-kibana-4/26036 "2015-07-22T05:43:59Z")
How could i change the color of charts in Kibana 4 ? --- ## [Visualize Group by result](https://discuss.elastic.co/t/visualize-group-by-result/262793)
**Author:** [@deeksha39](https://discuss.elastic.co/u/deeksha39)\ **Replies:** 4\ **Last updated:** [February 2, 2021, 11:00am UTC](https://discuss.elastic.co/t/visualize-group-by-result/262793 "2021-02-02T11:00:52Z")
Hi, I am working on a large dataset with 20000 rows and 40 columns, I want to group by my data based on 10 categorical columns, then I want to create a histogram and percentiles graph to make a comparison between the to… --- ## [Excess shards](https://discuss.elastic.co/t/excess-shards/24162)
**Author:** [@vassav](https://discuss.elastic.co/u/vassav)\ **Replies:** 4\ **Last updated:** [June 25, 2015, 9:00am UTC](https://discuss.elastic.co/t/excess-shards/24162 "2015-06-25T09:00:39Z")
Bug or bad config ? Claster configured on 2 nodes for: index.number\_of\_shards: 5 index.number\_of\_replicas: 2 Ok, logstash create index and work ok (purged late) logstash-2015.06.16 0 r STARTED 0 144b 10.1.1.9 … --- ## [Can unix timestamp be used as field in date histogram?](https://discuss.elastic.co/t/can-unix-timestamp-be-used-as-field-in-date-histogram/8357)
**Author:** [@komaln](https://discuss.elastic.co/u/komaln)\ **Replies:** 4\ **Last updated:** [July 11, 2012, 5:11am UTC](https://discuss.elastic.co/t/can-unix-timestamp-be-used-as-field-in-date-histogram/8357 "2012-07-11T05:11:15Z")
Hi, I am building a log analysis tool and want to create the timeline series graph of the number of log entries logged. I wish to use the date histogram feature for it. A query like: "facets" : { "h… --- ## [To understand the analysis process](https://discuss.elastic.co/t/to-understand-the-analysis-process/26565)
**Author:** [@terrasacer](https://discuss.elastic.co/u/terrasacer)\ **Replies:** 6\ **Last updated:** [September 26, 2015, 2:37pm UTC](https://discuss.elastic.co/t/to-understand-the-analysis-process/26565 "2015-09-26T14:37:16Z")
Hi all. I'm trying to understand the analysis process. Especially during query time. For example we have a field configured to be not analyzed. The value of this field is Albert Einstein. If I search "Albert" does … --- ## [Filebeat Auto discover config check failed for config - stopped harvesting data](https://discuss.elastic.co/t/filebeat-auto-discover-config-check-failed-for-config-stopped-harvesting-data/253675)
**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\ **Replies:** 3\ **Last updated:** [October 30, 2020, 2:51pm UTC](https://discuss.elastic.co/t/filebeat-auto-discover-config-check-failed-for-config-stopped-harvesting-data/253675 "2020-10-30T14:51:19Z")
I harvest logs from gitlab runners created in kubernetes namespace. I implement the opciton to store elastic index in pod annotation. So all my gitlab runners has elastic.index: runner-jobs annotation. This is my autods… --- ## [Elasticsearch Automatic Snapshots - Curator?](https://discuss.elastic.co/t/elasticsearch-automatic-snapshots-curator/165382)
**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\ **Replies:** 3\ **Last updated:** [January 23, 2019, 2:10pm UTC](https://discuss.elastic.co/t/elasticsearch-automatic-snapshots-curator/165382 "2019-01-23T14:10:19Z")
Hi, I'm looking to snapshot indexes on my local windows system(single node). I am capable of creating snapshots based on indexes and restore them after deleting. Although, this is done manually using Snapshot and Rest… --- ## [Failed to execute on node while the cluster running about 20 minutes later](https://discuss.elastic.co/t/failed-to-execute-on-node-while-the-cluster-running-about-20-minutes-later/162751)
**Author:** [@liming8519](https://discuss.elastic.co/u/liming8519)\ **Replies:** 3\ **Last updated:** [January 3, 2019, 9:35am UTC](https://discuss.elastic.co/t/failed-to-execute-on-node-while-the-cluster-running-about-20-minutes-later/162751 "2019-01-03T09:35:18Z")
Hi, i'm new using Elastic, I'm facing the issue that my Elasticsearch master nodes got ReceiveTimeoutTransportException after running about 20 minutes. Elasticsearch version - 6.3.2 Ram - 8gb Heap size - 4gb Document… --- ## [Tags index with logstash and filebeat](https://discuss.elastic.co/t/tags-index-with-logstash-and-filebeat/44682)
**Author:** [@stefanocog](https://discuss.elastic.co/u/stefanocog)\ **Replies:** 3\ **Last updated:** [June 14, 2016, 3:08pm UTC](https://discuss.elastic.co/t/tags-index-with-logstash-and-filebeat/44682 "2016-06-14T15:08:34Z")
I actually use logstash-forwarder and logstash and create a dinamic index with tag with thus configuration: /etc/logstash/conf.d/10-output.conf output { elasticsearch { hosts =\> "localhost:9200" manage\_template =\> … --- ## [Beat's newfound love for kafka should (also) be synchronous](https://discuss.elastic.co/t/beats-newfound-love-for-kafka-should-also-be-synchronous/45113)
**Author:** [@trixpan](https://discuss.elastic.co/u/trixpan)\ **Replies:** 3\ **Last updated:** [March 22, 2016, 3:50pm UTC](https://discuss.elastic.co/t/beats-newfound-love-for-kafka-should-also-be-synchronous/45113 "2016-03-22T15:50:59Z")
I didn't raise a github issue but I was reviewing beats newly implemented kafka output and noticed its use of Sarama's async producer. This is great but I have the strong suspicion it will cause message loss when agent… --- ## [Trend line size](https://discuss.elastic.co/t/trend-line-size/28765)
**Author:** [@peterbergman](https://discuss.elastic.co/u/peterbergman)\ **Replies:** 3\ **Last updated:** [September 7, 2015, 10:22am UTC](https://discuss.elastic.co/t/trend-line-size/28765 "2015-09-07T10:22:41Z")
Hi, I use a trend line visualization to trend different values over time. I have set the size to 5, but the legend shows more entries than just the top 5. See attached screenshot. Shouldn't the size property limit it to… --- ## [Add mapping with Java API](https://discuss.elastic.co/t/add-mapping-with-java-api/8560)
**Author:** [@tullio0106](https://discuss.elastic.co/u/tullio0106)\ **Replies:** 3\ **Last updated:** [July 30, 2012, 1:12pm UTC](https://discuss.elastic.co/t/add-mapping-with-java-api/8560 "2012-07-30T13:12:05Z")
I need to add some mappings after the index was created. I can't figure how I can I do that using Java API. Could someone provide an example ? Is there a Javadoc about Java api? Tks Tullio --- ## [Could not run Logstash as Service](https://discuss.elastic.co/t/could-not-run-logstash-as-service/117024)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 2\ **Last updated:** [January 26, 2018, 5:04am UTC](https://discuss.elastic.co/t/could-not-run-logstash-as-service/117024 "2018-01-26T05:04:31Z")
I installed logstash using rpm. When i run the logstash in command line, my filebeat can connect to it. But when i try to run it using the same config and settings file, its not working. I can verify that the service … --- ## [Beat for oracle database](https://discuss.elastic.co/t/beat-for-oracle-database/84258)
**Author:** [@Daniel\_DNP](https://discuss.elastic.co/u/Daniel_DNP)\ **Replies:** 2\ **Last updated:** [May 9, 2017, 8:46am UTC](https://discuss.elastic.co/t/beat-for-oracle-database/84258 "2017-05-09T08:46:59Z")
I don't want to span the issue "1935" on github (Metricbeat: Oracle Module · Issue #1935 · elastic/beats · GitHub) therefor I opened this topic. @andrewkroh and @ruflin recommended me to write a module for metricbeat. I… --- ## [Kibana logging configuration](https://discuss.elastic.co/t/kibana-logging-configuration/52381)
**Author:** [@erempel](https://discuss.elastic.co/u/erempel)\ **Replies:** 2\ **Last updated:** [June 10, 2016, 6:52pm UTC](https://discuss.elastic.co/t/kibana-logging-configuration/52381 "2016-06-10T18:52:58Z")
Is there any way to configure kibana to write its logs to syslog? If there is, is there configuration settings to control the log line format? Thanks for any help. --- ## [Import CSV file to Logstash on windows](https://discuss.elastic.co/t/import-csv-file-to-logstash-on-windows/74979)
**Author:** [@Uma\_Ananthu](https://discuss.elastic.co/u/Uma_Ananthu)\ **Replies:** 1\ **Last updated:** [February 14, 2017, 8:11am UTC](https://discuss.elastic.co/t/import-csv-file-to-logstash-on-windows/74979 "2017-02-14T08:11:03Z")
Hi, I am trying to import CSV file to Logstash and pass to elastic search. I am using the below config input { file { path =\> \["D:/AnalyticsTool/Exe/logstash-5.2.0/logstash-5.2.0/bin/GWT\_new.CSV"\] type =\> "c… [Previous page](https://discuss.elastic.co/top.md?page=877&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=879&per_page=50&period=all)