# Top

**URL:** https://discuss.elastic.co/top.md?page=890&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 891

---

## [Shard allocation with Hot warm architecture and Vertical scaling?](https://discuss.elastic.co/t/shard-allocation-with-hot-warm-architecture-and-vertical-scaling/50882)

<div class="topic-metadata">

**Author:** [@anhlqn](https://discuss.elastic.co/u/anhlqn)\
**Replies:** 3\
**Last updated:** [May 25, 2016, 5:36am UTC](https://discuss.elastic.co/t/shard-allocation-with-hot-warm-architecture-and-vertical-scaling/50882 "2016-05-25T05:36:05Z")

</div>

Hi All, Just curious how do you route shards from hot to warm nodes and prevent same shard allocation on a physical server in a Vertical scaling model where each physical servers 2 or more hot ES nodes with data on …

---

## [ElasticSearch geo search vs Solr geo search performance?](https://discuss.elastic.co/t/elasticsearch-geo-search-vs-solr-geo-search-performance/6324)

<div class="topic-metadata">

**Author:** [@Maxim\_Veksler](https://discuss.elastic.co/u/Maxim_Veksler)\
**Replies:** 3\
**Last updated:** [January 10, 2012, 9:00am UTC](https://discuss.elastic.co/t/elasticsearch-geo-search-vs-solr-geo-search-performance/6324 "2012-01-10T09:00:01Z")

</div>

Hello to everyone and Shay, As a new comer to the full text search world I see that there are 2 main implementations for geo proximity search on top of Lucene: Solr and ES. Could you please shed some light on the…

---

## [Show bar chart value above each bar or piechart](https://discuss.elastic.co/t/show-bar-chart-value-above-each-bar-or-piechart/111353)

<div class="topic-metadata">

**Author:** [@mad-max](https://discuss.elastic.co/u/mad-max)\
**Replies:** 1\
**Last updated:** [December 12, 2017, 8:01pm UTC](https://discuss.elastic.co/t/show-bar-chart-value-above-each-bar-or-piechart/111353 "2017-12-12T20:01:24Z")

</div>

Hello everyone, I wanted to ask you kindly if it is possible in some way in kibana 6.0 to have the values ​​written on the bars of the barchart or on the pie chart for each sector. An workaround, waiting for a permanent …

---

## [How to get a range of documents before and after \_id](https://discuss.elastic.co/t/how-to-get-a-range-of-documents-before-and-after-id/194086)

<div class="topic-metadata">

**Author:** [@nolatone](https://discuss.elastic.co/u/nolatone)\
**Replies:** 0\
**Last updated:** [August 6, 2019, 6:51pm UTC](https://discuss.elastic.co/t/how-to-get-a-range-of-documents-before-and-after-id/194086 "2019-08-06T18:51:06Z")

</div>

Hello all, I'm investigating using Elasticsearch (and other parts of the ELK stack) for the data source for log analysis tools my team is developing. We're currently working with logs loaded into a postgres DB. One of …

---

## [Unable to parse private key for saml encryption](https://discuss.elastic.co/t/unable-to-parse-private-key-for-saml-encryption/182902)

<div class="topic-metadata">

**Author:** [@Ronnie16](https://discuss.elastic.co/u/Ronnie16)\
**Replies:** 3\
**Last updated:** [May 28, 2019, 4:41am UTC](https://discuss.elastic.co/t/unable-to-parse-private-key-for-saml-encryption/182902 "2019-05-28T04:41:19Z")

</div>

Hi, I'm using SAML for kibana. SAML is working fine without enabling encryption from IDP end. I want to test now with encryption enabled and have generated saml cert and key using:- bin/x-pack/certutil cert -pem -days…

---

## [Automated install for X-Pack License (drop license.json into the container filesystem)?](https://discuss.elastic.co/t/automated-install-for-x-pack-license-drop-license-json-into-the-container-filesystem/88888)

<div class="topic-metadata">

**Author:** [@divideby0](https://discuss.elastic.co/u/divideby0)\
**Replies:** 3\
**Last updated:** [June 9, 2017, 9:22pm UTC](https://discuss.elastic.co/t/automated-install-for-x-pack-license-drop-license-json-into-the-container-filesystem/88888 "2017-06-09T21:22:35Z")

</div>

Hi, We have a commercial license for X-Pack and are looking to setup our cluster nodes to run in Docker/Kubernetes. We're currently getting tripped up on the license installation phase, as the only documented way to in…

---

## [Filebeat sends json to kafka instead of raw content of log file](https://discuss.elastic.co/t/filebeat-sends-json-to-kafka-instead-of-raw-content-of-log-file/68984)

<div class="topic-metadata">

**Author:** [@antimion](https://discuss.elastic.co/u/antimion)\
**Replies:** 3\
**Last updated:** [December 16, 2016, 12:34pm UTC](https://discuss.elastic.co/t/filebeat-sends-json-to-kafka-instead-of-raw-content-of-log-file/68984 "2016-12-16T12:34:25Z")

</div>

Hi , i have installed filebeat but i have problem. I need to send only raw content of log file to kafka/logstash without additional information from beats. How to do that? filebeat config file filebeat.prospectors: -…

---

## [ELK node leaves and rejoin the cluster every hour](https://discuss.elastic.co/t/elk-node-leaves-and-rejoin-the-cluster-every-hour/37233)

<div class="topic-metadata">

**Author:** [@yodog](https://discuss.elastic.co/u/yodog)\
**Replies:** 3\
**Last updated:** [December 17, 2015, 11:39am UTC](https://discuss.elastic.co/t/elk-node-leaves-and-rejoin-the-cluster-every-hour/37233 "2015-12-17T11:39:34Z")

</div>

Something is not right and i would like some help figuring out what/why. I have 3 ELK nodes (E 2.1.0 ; L 2.1.1), and every hour the KOPF plugin shows that they leave the cluster and rejoin after a few seconds. They don…

---

## [Elasticsearch host](https://discuss.elastic.co/t/elasticsearch-host/202736)

<div class="topic-metadata">

**Author:** [@j888](https://discuss.elastic.co/u/j888)\
**Replies:** 4\
**Last updated:** [October 9, 2019, 1:34pm UTC](https://discuss.elastic.co/t/elasticsearch-host/202736 "2019-10-09T13:34:29Z")

</div>

For an Elasticsearch cluster with 3 master only nodes and 2 data nodes, do I point elasticsearch.hosts in kibana.yml at the data nodes or the master only nodes (or both)?

---

## [Any APM JAVA agent update now?](https://discuss.elastic.co/t/any-apm-java-agent-update-now/117143)

<div class="topic-metadata">

**Author:** [@Nick\_Peng](https://discuss.elastic.co/u/Nick_Peng)\
**Replies:** 4\
**Last updated:** [February 7, 2018, 3:58am UTC](https://discuss.elastic.co/t/any-apm-java-agent-update-now/117143 "2018-02-07T03:58:43Z")

</div>

Dear, thanks for your contribution on elastic. Please let me know do you have any update on Java agent?I am sure many people take an eye on this. Thanks! Nick Peng

---

## [JSON Parse error: Illegal unquoted character](https://discuss.elastic.co/t/json-parse-error-illegal-unquoted-character/286894)

<div class="topic-metadata">

**Author:** [@geetika\_gopi](https://discuss.elastic.co/u/geetika_gopi)\
**Replies:** 1\
**Last updated:** [October 16, 2021, 4:08pm UTC](https://discuss.elastic.co/t/json-parse-error-illegal-unquoted-character/286894 "2021-10-16T16:08:31Z")

</div>

Hello, I am using rsyslog to send my auditd logs to logstash. Before reaching logstash, an rsyslog template is applied for better formatting. I run into an error here jsonlines - JSON parse error, original data now in…

---

## [Kibana Visuals - count number of customers with more than X buys](https://discuss.elastic.co/t/kibana-visuals-count-number-of-customers-with-more-than-x-buys/271107)

<div class="topic-metadata">

**Author:** [@cjabrantes](https://discuss.elastic.co/u/cjabrantes)\
**Replies:** 7\
**Last updated:** [April 29, 2021, 2:38pm UTC](https://discuss.elastic.co/t/kibana-visuals-count-number-of-customers-with-more-than-x-buys/271107 "2021-04-29T14:38:26Z")

</div>

Hi all, Image that i have in elastic something like: Customer id Product I need to create a metric that tells me the number of customers that bought the product Y more than X time. Example number of customer that bo…

---

## [Adding fields when using autodiscovery](https://discuss.elastic.co/t/adding-fields-when-using-autodiscovery/157135)

<div class="topic-metadata">

**Author:** [@Daniel\_Jensen](https://discuss.elastic.co/u/Daniel_Jensen)\
**Replies:** 1\
**Last updated:** [November 19, 2018, 5:19pm UTC](https://discuss.elastic.co/t/adding-fields-when-using-autodiscovery/157135 "2018-11-19T17:19:42Z")

</div>

I have been trying to add custom fields to logs being picked up by filebeat when running in kubernetes using a DaemonSet. My logging provider requires this and I'm having quite a bit of trouble simply adding fields base…

---

## [How to use Regex in Logstash config file to capture unidentified weblogicLogErrors](https://discuss.elastic.co/t/how-to-use-regex-in-logstash-config-file-to-capture-unidentified-weblogiclogerrors/137626)

<div class="topic-metadata">

**Author:** [@snehabh](https://discuss.elastic.co/u/snehabh)\
**Replies:** 1\
**Last updated:** [June 27, 2018, 7:29pm UTC](https://discuss.elastic.co/t/how-to-use-regex-in-logstash-config-file-to-capture-unidentified-weblogiclogerrors/137626 "2018-06-27T19:29:25Z")

</div>

Hi All, My requirement is to identify all unknown Error present in log file\[or may occur in future\] for which i am capturing all known Error logs and trying to achieve it using regex along with conditional if. Problem …

---

## [Can i use \_source field inside aggregations?](https://discuss.elastic.co/t/can-i-use--source-field-inside-aggregations/74773)

<div class="topic-metadata">

**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\
**Replies:** 1\
**Last updated:** [February 14, 2017, 3:09am UTC](https://discuss.elastic.co/t/can-i-use--source-field-inside-aggregations/74773 "2017-02-14T03:09:57Z")

</div>

Hi, I have documents with some many fields, i want to find the count of documents that are inserted after certain hour which can be done by using range query but among all documents fields i want only Timestamp field s…

---

## [How to use watcher to send the alert using teams connector](https://discuss.elastic.co/t/how-to-use-watcher-to-send-the-alert-using-teams-connector/286771)

<div class="topic-metadata">

**Author:** [@Patr123](https://discuss.elastic.co/u/Patr123)\
**Replies:** 6\
**Last updated:** [October 19, 2021, 6:19pm UTC](https://discuss.elastic.co/t/how-to-use-watcher-to-send-the-alert-using-teams-connector/286771 "2021-10-19T18:19:29Z")

</div>

Hello, I have a watcher which is working as expected if I use the email action in it. I need to know how can I use that watcher to send the alerts using the teams connector that I created in alerts and actions tab. Tha…

---

## [Geo location distance sorting by proximity boost](https://discuss.elastic.co/t/geo-location-distance-sorting-by-proximity-boost/270749)

<div class="topic-metadata">

**Author:** [@bskade](https://discuss.elastic.co/u/bskade)\
**Replies:** 6\
**Last updated:** [May 4, 2021, 7:03pm UTC](https://discuss.elastic.co/t/geo-location-distance-sorting-by-proximity-boost/270749 "2021-05-04T19:03:21Z")

</div>

Hi, we tried some kind of distance sorting by boosting the distance score impact. pseudo code options\["boosts"\] = { location: { type: "proximity", function: "exponential", center: options.facets.location.center, …

---

## [Kibana 空白のスペースの選択と表示される](https://discuss.elastic.co/t/kibana/253968)

<div class="topic-metadata">

**Author:** [@mo-ri](https://discuss.elastic.co/u/mo-ri)\
**Replies:** 6\
**Last updated:** [November 2, 2020, 8:01am UTC](https://discuss.elastic.co/t/kibana/253968 "2020-11-02T08:01:55Z")

</div>

初めて投稿致します。 elasticsearch 、kibanaを使って数ヶ月しか使っていない素人です。 環境は、AWSのEC2上にelasticsearch7.9.2、kibana7.9.2をインストールしています。 先週まで Webにて/5601にてkibanaの画面が表示され、 AWSからのデータの投入も確認でき、visualizeやDashboardも作成しておりました。 平日は問題なく、kibanaのhome画面が表…

---

## [Mounting a nfs drive for snapshot](https://discuss.elastic.co/t/mounting-a-nfs-drive-for-snapshot/241218)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 6\
**Last updated:** [July 16, 2020, 6:30am UTC](https://discuss.elastic.co/t/mounting-a-nfs-drive-for-snapshot/241218 "2020-07-16T06:30:17Z")

</div>

Hi all i have a case that i really dont know how to solve. I have a nfs share server that i mount an external drive in, and then i share that specific drive for my elastic cluster to takke snapshot in. The problems is …

---

## [Creating Table for Disk Usage using Visual Builder](https://discuss.elastic.co/t/creating-table-for-disk-usage-using-visual-builder/153491)

<div class="topic-metadata">

**Author:** [@johncam](https://discuss.elastic.co/u/johncam)\
**Replies:** 6\
**Last updated:** [October 24, 2018, 10:05am UTC](https://discuss.elastic.co/t/creating-table-for-disk-usage-using-visual-builder/153491 "2018-10-24T10:05:11Z")

</div>

I'm attempting to create a table visualisation to display disk usage for all logical volumes for all monitored servers. This will take the form of a row for each server with a column per logical volume. 5 volumes will b…

---

## [What does ES-Hadoop do?](https://discuss.elastic.co/t/what-does-es-hadoop-do/43724)

<div class="topic-metadata">

**Author:** [@Kramer\_Li](https://discuss.elastic.co/u/Kramer_Li)\
**Replies:** 6\
**Last updated:** [August 31, 2016, 7:50am UTC](https://discuss.elastic.co/t/what-does-es-hadoop-do/43724 "2016-08-31T07:50:01Z")

</div>

In what situation you need ES-Hadoop? ES can be used as a search engine, analyze engine and even storage. Why we need ES-hadoop? Can you give some very specific example please?

---

## [Yum repo doesn't work](https://discuss.elastic.co/t/yum-repo-doesnt-work/278404)

<div class="topic-metadata">

**Author:** [@loposk](https://discuss.elastic.co/u/loposk)\
**Replies:** 2\
**Last updated:** [July 12, 2021, 11:41am UTC](https://discuss.elastic.co/t/yum-repo-doesnt-work/278404 "2021-07-12T11:41:05Z")

</div>

Added a repository according to the instructions Install Elasticsearch with RPM | Elasticsearch Guide \[7.13\] | Elastic When yum trying download https://artifacts.elastic.co/packages/7.x/yum/repodata/filelists.xml.gz I g…

---

## [How to view Log File in Kibana](https://discuss.elastic.co/t/how-to-view-log-file-in-kibana/149732)

<div class="topic-metadata">

**Author:** [@JawadKM](https://discuss.elastic.co/u/JawadKM)\
**Replies:** 2\
**Last updated:** [September 25, 2018, 1:47pm UTC](https://discuss.elastic.co/t/how-to-view-log-file-in-kibana/149732 "2018-09-25T13:47:04Z")

</div>

Hi, I am having a problem viewing the Log File in Kibana, as in I am unable to identify which log was written in which file. i.e need to know the Log file name. I am using syslog-ng to push logs into Elasticsearch. A…

---

## [Kibana limit number of alerts](https://discuss.elastic.co/t/kibana-limit-number-of-alerts/297243)

<div class="topic-metadata">

**Author:** [@siginigin](https://discuss.elastic.co/u/siginigin)\
**Replies:** 4\
**Last updated:** [February 23, 2022, 12:21pm UTC](https://discuss.elastic.co/t/kibana-limit-number-of-alerts/297243 "2022-02-23T12:21:51Z")

</div>

Hello, Is it possible to limit number of alerts on rule match? I created custom query to that matches ~ 100 events per one hour, but I want to have only one alert for this and all the events shoud be connected to this a…

---

## [Painlessの配列の使用方法について](https://discuss.elastic.co/t/painless/282804)

<div class="topic-metadata">

**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\
**Replies:** 4\
**Last updated:** [September 13, 2021, 1:24am UTC](https://discuss.elastic.co/t/painless/282804 "2021-09-13T01:24:04Z")

</div>

painlessで以下のようなデータを扱っています。 { "\_shards": { "total": 6, "failed": 0, "successful": 6, "skipped": 0 }, "hits": { "hits": \[ { "\_index": "test-2…

---

## [Convert String to IP Address - Hexidecimal](https://discuss.elastic.co/t/convert-string-to-ip-address-hexidecimal/223192)

<div class="topic-metadata">

**Author:** [@Jim\_Thunder](https://discuss.elastic.co/u/Jim_Thunder)\
**Replies:** 4\
**Last updated:** [March 13, 2020, 6:26pm UTC](https://discuss.elastic.co/t/convert-string-to-ip-address-hexidecimal/223192 "2020-03-13T18:26:56Z")

</div>

Hello! I have fields that contain long Hexidecimal numbers 000000000FFFF24CA110B The prefix is the 0's and the four F's. So the only needed characters are the last 8 (2 for each octet of the IP address). This number n…

---

## [Basic vs Open Source](https://discuss.elastic.co/t/basic-vs-open-source/148376)

<div class="topic-metadata">

**Author:** [@Steve\_Westergaard](https://discuss.elastic.co/u/Steve_Westergaard)\
**Replies:** 4\
**Last updated:** [September 13, 2018, 7:05am UTC](https://discuss.elastic.co/t/basic-vs-open-source/148376 "2018-09-13T07:05:40Z")

</div>

Can someone tell me what the difference between Basic vs Open Source licenses are, or is there a link describing the difference?

---

## [Filebeat: filebeat.config.prospectors is not working in 6.2.1](https://discuss.elastic.co/t/filebeat-filebeat-config-prospectors-is-not-working-in-6-2-1/122867)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 4\
**Last updated:** [March 21, 2018, 8:08am UTC](https://discuss.elastic.co/t/filebeat-filebeat-config-prospectors-is-not-working-in-6-2-1/122867 "2018-03-21T08:08:28Z")

</div>

I see the following message when the config\_dir is used. So when I configured filebeat.config.prospectors it is not working and I have to revert back to config\_dir itslef to get it working. DEPRECATED: config\_dir is dep…

---

## [Kibana-plugin API 4.n =\> 5.n; webpack errors when compiling tutorial plugin](https://discuss.elastic.co/t/kibana-plugin-api-4-n-5-n-webpack-errors-when-compiling-tutorial-plugin/98228)

<div class="topic-metadata">

**Author:** [@markchagers](https://discuss.elastic.co/u/markchagers)\
**Replies:** 4\
**Last updated:** [August 25, 2017, 11:14am UTC](https://discuss.elastic.co/t/kibana-plugin-api-4-n-5-n-webpack-errors-when-compiling-tutorial-plugin/98228 "2017-08-25T11:14:45Z")

</div>

I am trying to build a plugin for the curren ga version of Kibana (5.5.2) . To get me started I’m following Tim Roes’ tutorial: https://www.timroes.de/2016/02/17/writing-kibana-4-plugins-field-formatters/ Perhaps due to…

---

## [100% CPU after upgrade (7.1.1 to 7.3)](https://discuss.elastic.co/t/100-cpu-after-upgrade-7-1-1-to-7-3/194116)

<div class="topic-metadata">

**Author:** [@icheishvili](https://discuss.elastic.co/u/icheishvili)\
**Replies:** 3\
**Last updated:** [August 8, 2019, 3:09pm UTC](https://discuss.elastic.co/t/100-cpu-after-upgrade-7-1-1-to-7-3/194116 "2019-08-08T15:09:48Z")

</div>

After upgrading to 7.3 over the weekend, I now have a node that constantly sits at full CPU utilization. \_nodes/hot\_threads is empty. The cluster has 25 indices, 250 total shards, and is made of up 3 machines, with each …

---

## [Get number of unique results from multiple indices](https://discuss.elastic.co/t/get-number-of-unique-results-from-multiple-indices/271401)

<div class="topic-metadata">

**Author:** [@NLSVTN](https://discuss.elastic.co/u/NLSVTN)\
**Replies:** 2\
**Last updated:** [May 3, 2021, 7:37pm UTC](https://discuss.elastic.co/t/get-number-of-unique-results-from-multiple-indices/271401 "2021-05-03T19:37:21Z")

</div>

I have 5 indices: all of them with the same schema, so each one of them represents a dataset among many datasets. Each one of them is around 1Tb of size. I want to issue a query to all of the indices at the same time and…

---

## [Classification of String Data](https://discuss.elastic.co/t/classification-of-string-data/260194)

<div class="topic-metadata">

**Author:** [@Andrey\_Maksimov](https://discuss.elastic.co/u/Andrey_Maksimov)\
**Replies:** 2\
**Last updated:** [January 5, 2021, 12:19pm UTC](https://discuss.elastic.co/t/classification-of-string-data/260194 "2021-01-05T12:19:53Z")

</div>

hey there, i have a task to classify download stats (basically, that's URL + some minor but yet valuable fields like referring host, request country, etc) of open-source products our company provide into metadata like s…

---

## [Query -elastic search-Facet slor vs aggregation](https://discuss.elastic.co/t/query-elastic-search-facet-slor-vs-aggregation/137694)

<div class="topic-metadata">

**Author:** [@snigdharao](https://discuss.elastic.co/u/snigdharao)\
**Replies:** 5\
**Last updated:** [June 28, 2018, 6:39pm UTC](https://discuss.elastic.co/t/query-elastic-search-facet-slor-vs-aggregation/137694 "2018-06-28T18:39:26Z")

</div>

Hi Currently in solr we are using facets to implement autocomplete functionality and we are using title has the parameter also year for filtering the data. This looks something similar to this select title from tablen…

---

## [More Like This Query not giving any hits](https://discuss.elastic.co/t/more-like-this-query-not-giving-any-hits/39519)

<div class="topic-metadata">

**Author:** [@pewpewlasers](https://discuss.elastic.co/u/pewpewlasers)\
**Replies:** 5\
**Last updated:** [January 21, 2016, 10:27am UTC](https://discuss.elastic.co/t/more-like-this-query-not-giving-any-hits/39519 "2016-01-21T10:27:51Z")

</div>

I recently upgraded to 2.1 and I am trying to use the new more like this query without any luck. My code looks something like this: function\_score: { functions: \[...\], query: { bool: { …

---

## [Have Months displayed in chronological order](https://discuss.elastic.co/t/have-months-displayed-in-chronological-order/317346)

<div class="topic-metadata">

**Author:** [@wido](https://discuss.elastic.co/u/wido)\
**Replies:** 7\
**Last updated:** [October 28, 2022, 11:59am UTC](https://discuss.elastic.co/t/have-months-displayed-in-chronological-order/317346 "2022-10-28T11:59:02Z")

</div>

Hi there! We are indexing data in ES to create dashboards using Kibana. There is a field named Month that contains the names of the months indexed as strings to both text and keyword data types. Each month is represent…

---

## [Unable to load the base.rb file in my plugin](https://discuss.elastic.co/t/unable-to-load-the-base-rb-file-in-my-plugin/219)

<div class="topic-metadata">

**Author:** [@kebbkh](https://discuss.elastic.co/u/kebbkh)\
**Replies:** 7\
**Last updated:** [May 8, 2015, 7:01pm UTC](https://discuss.elastic.co/t/unable-to-load-the-base-rb-file-in-my-plugin/219 "2015-05-08T19:01:05Z")

</div>

Hello, Whenever I attempt to run logstash using the --configtest flag this is the message I keep getting: The error reported is: Couldn't find any codec plugin named 'transit'. Are you sure this is correct? Trying t…

---

## [File paths must be absolute, relative path specified error while running logstash on docker](https://discuss.elastic.co/t/file-paths-must-be-absolute-relative-path-specified-error-while-running-logstash-on-docker/270704)

<div class="topic-metadata">

**Author:** [@pradeep\_gadkari](https://discuss.elastic.co/u/pradeep_gadkari)\
**Replies:** 2\
**Last updated:** [April 21, 2021, 12:40pm UTC](https://discuss.elastic.co/t/file-paths-must-be-absolute-relative-path-specified-error-while-running-logstash-on-docker/270704 "2021-04-21T12:40:59Z")

</div>

I am running ELK stack on docker using deviantony/docker-elk from Github. When I try reading log files from my local machine, logstash stops with error \[2021-04-20T12:36:43,101\]\[ERROR\]\[logstash.javapipeline \]\[main\] Pipe…

---

## [Using Fortinet Integration in Logstash](https://discuss.elastic.co/t/using-fortinet-integration-in-logstash/270304)

<div class="topic-metadata">

**Author:** [@b0r1s](https://discuss.elastic.co/u/b0r1s)\
**Replies:** 2\
**Last updated:** [April 15, 2021, 10:17pm UTC](https://discuss.elastic.co/t/using-fortinet-integration-in-logstash/270304 "2021-04-15T22:17:28Z")

</div>

Hey everyone o/ I'm using that conf I found on this topic for parsing logs from FortigateFW with Logstash: input { udp { port =\> 514 type =\> "forti\_log" tags =\> \[""\] } } #THE BEGINNING DOESN'T FORMAT TO CODE …

---

## [If else ruby check for nil](https://discuss.elastic.co/t/if-else-ruby-check-for-nil/222681)

<div class="topic-metadata">

**Author:** [@samiujan](https://discuss.elastic.co/u/samiujan)\
**Replies:** 2\
**Last updated:** [March 10, 2020, 9:51am UTC](https://discuss.elastic.co/t/if-else-ruby-check-for-nil/222681 "2020-03-10T09:51:51Z")

</div>

Hi I am using a ruby codeblock to add values from redis for specific cases - I am getting some null values and want to log those - but this check for null values and isn't working, I get a complication error - looking a…

---

## [Max size reached](https://discuss.elastic.co/t/max-size-reached/194953)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 2\
**Last updated:** [August 14, 2019, 2:46am UTC](https://discuss.elastic.co/t/max-size-reached/194953 "2019-08-14T02:46:35Z")

</div>

Hello World! I've tried to configure xpack.reporting.csv.maxSizeBytes (CSV Setting @ X-Pack reporting settings in Kibana) however nothing other than default 10mb... via Management -\> Kibana -\> Reporting -\> Status, gett…

---

## [Logstash mutate split but maintain the separator character](https://discuss.elastic.co/t/logstash-mutate-split-but-maintain-the-separator-character/130338)

<div class="topic-metadata">

**Author:** [@safehouse](https://discuss.elastic.co/u/safehouse)\
**Replies:** 2\
**Last updated:** [May 3, 2018, 10:37am UTC](https://discuss.elastic.co/t/logstash-mutate-split-but-maintain-the-separator-character/130338 "2018-05-03T10:37:01Z")

</div>

I want to split a field into an array, but I want the array values to keep the separator characters. It seems that the way mutate split works is to remove the separator characters. Is there another way to accomplish thi…

---

## [Force Kibana url to be embedded always - deny if NOT embed=true](https://discuss.elastic.co/t/force-kibana-url-to-be-embedded-always-deny-if-not-embed-true/79531)

<div class="topic-metadata">

**Author:** [@cuneyt](https://discuss.elastic.co/u/cuneyt)\
**Replies:** 2\
**Last updated:** [March 23, 2017, 9:58pm UTC](https://discuss.elastic.co/t/force-kibana-url-to-be-embedded-always-deny-if-not-embed-true/79531 "2017-03-23T21:58:42Z")

</div>

I have set up a Node.JS website that shows dashboards in embedded iframe. It uses basic authentication and reverse proxy to Kibana 5 using NGINX. So it's secure. This website uses embedded iframes and looks pretty cool.…

---

## [Logstash if any array element exists in \[tags\]](https://discuss.elastic.co/t/logstash-if-any-array-element-exists-in-tags/77808)

<div class="topic-metadata">

**Author:** [@Exocomp](https://discuss.elastic.co/u/Exocomp)\
**Replies:** 2\
**Last updated:** [March 9, 2017, 5:38pm UTC](https://discuss.elastic.co/t/logstash-if-any-array-element-exists-in-tags/77808 "2017-03-09T17:38:04Z")

</div>

Hi, Is there a way to do a conditional check such that elements of any array element exists in \[tags\] ?, something like: if \["element1", "element2", "element3"\] in \[tags\] { } Thanks, E

---

## [Sql server db error log data export to logstash](https://discuss.elastic.co/t/sql-server-db-error-log-data-export-to-logstash/73340)

<div class="topic-metadata">

**Author:** [@prosenjit](https://discuss.elastic.co/u/prosenjit)\
**Replies:** 2\
**Last updated:** [February 3, 2017, 6:08am UTC](https://discuss.elastic.co/t/sql-server-db-error-log-data-export-to-logstash/73340 "2017-02-03T06:08:53Z")

</div>

Hi, I have a db table in sql server which logs the errors and maintains in a table. I want to be able to send it to elastic search after parsing it through logstash. Now the problem is the server points to a different po…

---

## [Kibana fails to start after increasing disk space!](https://discuss.elastic.co/t/kibana-fails-to-start-after-increasing-disk-space/52994)

<div class="topic-metadata">

**Author:** [@iqbal\_nazir](https://discuss.elastic.co/u/iqbal_nazir)\
**Replies:** 2\
**Last updated:** [June 17, 2016, 11:21am UTC](https://discuss.elastic.co/t/kibana-fails-to-start-after-increasing-disk-space/52994 "2016-06-17T11:21:12Z")

</div>

Hello, I am having problems with Kibana. My ELK stack was up and running smoothly, until I realized it was running out of disk space. Then after increasing the disk space, I see 502 Bad Gatewy. Now after checking the s…

---

## [Unicode characters and spaces in elasticsearch field names](https://discuss.elastic.co/t/unicode-characters-and-spaces-in-elasticsearch-field-names/21678)

<div class="topic-metadata">

**Author:** [@George](https://discuss.elastic.co/u/George)\
**Replies:** 2\
**Last updated:** [January 18, 2015, 10:22pm UTC](https://discuss.elastic.co/t/unicode-characters-and-spaces-in-elasticsearch-field-names/21678 "2015-01-18T22:22:20Z")

</div>

Hello everybody, I've researched a little bit what characters are allowed in elasticsearch field names. However, I couldn't find any official documentation only some posts which mentioned that '.', '#' and '…

---

## [Parse csv data wrapped in "message" from filebeat in logstash](https://discuss.elastic.co/t/parse-csv-data-wrapped-in-message-from-filebeat-in-logstash/216835)

<div class="topic-metadata">

**Author:** [@mohammad\_hasan\_dabba](https://discuss.elastic.co/u/mohammad_hasan_dabba)\
**Replies:** 6\
**Last updated:** [February 3, 2020, 7:22am UTC](https://discuss.elastic.co/t/parse-csv-data-wrapped-in-message-from-filebeat-in-logstash/216835 "2020-02-03T07:22:39Z")

</div>

Hi i'm using filebeat to send jmeter logs to logstash but i have a problem log data are wrapped in "message" key and the value is a csv formatted text i tried to unwrap data with CSV filter plugin in logstash. i can …

---

## [Rally error while running against custom track and custom data](https://discuss.elastic.co/t/rally-error-while-running-against-custom-track-and-custom-data/114963)

<div class="topic-metadata">

**Author:** [@dipanjan44](https://discuss.elastic.co/u/dipanjan44)\
**Replies:** 6\
**Last updated:** [January 12, 2018, 6:40am UTC](https://discuss.elastic.co/t/rally-error-while-running-against-custom-track-and-custom-data/114963 "2018-01-12T06:40:40Z")

</div>

INFO\] Writing logs to /Users/.rally/logs/rally\_out\_20180110T211006Z.log \[INFO\] Preparing for race ... \[INFO\] Rally will delete the benchmark candidate after the benchmark \[INFO\] Racing on track \[contactdata\], challeng…

---

## [Backup and store data in Elastic search](https://discuss.elastic.co/t/backup-and-store-data-in-elastic-search/103307)

<div class="topic-metadata">

**Author:** [@ramesh205](https://discuss.elastic.co/u/ramesh205)\
**Replies:** 6\
**Last updated:** [October 23, 2017, 2:20pm UTC](https://discuss.elastic.co/t/backup-and-store-data-in-elastic-search/103307 "2017-10-23T14:20:04Z")

</div>

Hi team,We are using ELK 5.5.2 stack in our organization in a windows machine had free space of 250 GB,please let me know how to take backup and restore data in Elastic search 5.5.2.

---

## [Query Regarding Warning Messages in Logstash Version 8.12.0](https://discuss.elastic.co/t/query-regarding-warning-messages-in-logstash-version-8-12-0/353242)

<div class="topic-metadata">

**Author:** [@Ramya\_Sababathi](https://discuss.elastic.co/u/Ramya_Sababathi)\
**Replies:** 1\
**Last updated:** [February 14, 2024, 6:44pm UTC](https://discuss.elastic.co/t/query-regarding-warning-messages-in-logstash-version-8-12-0/353242 "2024-02-14T18:44:32Z")

</div>

Issue Description: Upon upgrading to Logstash version 8.12.0, I have noticed the following warning messages appearing in the logs: /usr/share/logstash/vendor/bundle/jruby/3.1.0/gems/concurrent-ruby-1.1.9/lib/concurrent…

[Previous page](https://discuss.elastic.co/top.md?page=889&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=891&per_page=50&period=all)
