# Top **URL:** https://discuss.elastic.co/top.md?page=902&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 903 --- ## [Facebook input for logstash](https://discuss.elastic.co/t/facebook-input-for-logstash/23965)
**Author:** [@Dan](https://discuss.elastic.co/u/Dan)\ **Replies:** 1\ **Last updated:** [June 25, 2015, 7:22pm UTC](https://discuss.elastic.co/t/facebook-input-for-logstash/23965 "2015-06-25T19:22:47Z")
Hi All, Is their any input api available to import facebook data to elastic search?? Please give me step by step procedure to get data from facebook to logstash. Thanks, Dan --- ## [Filebeatでインデックス名を任意に作成する方法](https://discuss.elastic.co/t/filebeat/193921)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 2\ **Last updated:** [August 6, 2019, 7:00am UTC](https://discuss.elastic.co/t/filebeat/193921 "2019-08-06T07:00:50Z")
filebeat.ymlにインデックス名の設定をしてElasticSearchからファイルを転送したのですが、デフォルトのインデックス名(filebeat-%{\[agent.version\]}-%{+yyyy.MM.dd})で作成されてしまいます。インデックスを任意に指定する方法を教えて下さい ■filebeat.yml設定内容(抜粋) #==================== Elasticsearch template set… --- ## [Uninstall marvel: stubborn](https://discuss.elastic.co/t/uninstall-marvel-stubborn/51626)
**Author:** [@yahoo](https://discuss.elastic.co/u/yahoo)\ **Replies:** 2\ **Last updated:** [June 2, 2016, 12:38am UTC](https://discuss.elastic.co/t/uninstall-marvel-stubborn/51626 "2016-06-02T00:38:28Z")
Hi I uninstalled marvel from elasticsearch 2.1.1 and kibana 4.3.1 as described in https://www.elastic.co/guide/en/marvel/2.3/installing-marvel.html#uninstalling-marvel and it confirmed that the plugin was removed. I res… --- ## [Splunk Elasticsearch integration](https://discuss.elastic.co/t/splunk-elasticsearch-integration/21384)
**Author:** [@eperry](https://discuss.elastic.co/u/eperry)\ **Replies:** 0\ **Last updated:** [December 24, 2014, 3:09pm UTC](https://discuss.elastic.co/t/splunk-elasticsearch-integration/21384 "2014-12-24T15:09:11Z")
Folks, I wanted to let you know, I have been working on a "search command" for splunk that allows me to use the SPLUNK GUI but query data in elasticsearch. I just wanted to let you know it was out there as I … --- ## [Set config via command line '-E' option is still possible in ES 6.x?](https://discuss.elastic.co/t/set-config-via-command-line-e-option-is-still-possible-in-es-6-x/160005)
**Author:** [@no\_jihun](https://discuss.elastic.co/u/no_jihun)\ **Replies:** 2\ **Last updated:** [December 10, 2018, 1:48am UTC](https://discuss.elastic.co/t/set-config-via-command-line-e-option-is-still-possible-in-es-6-x/160005 "2018-12-10T01:48:02Z")
With my current es 5.2 cluster, I set many configs by command line option '-E' syntax, such as -Enode.master=false -Ecluster.name=xxx -Epath.logs=yyy -Epath.repo=kkk -Ebootstrap.memory\_locak=true -Expack.security.e… --- ## [Windows Server 2025 Support](https://discuss.elastic.co/t/windows-server-2025-support/371325)
**Author:** [@oed-brosentd](https://discuss.elastic.co/u/oed-brosentd)\ **Replies:** 3\ **Last updated:** [March 6, 2025, 8:25am UTC](https://discuss.elastic.co/t/windows-server-2025-support/371325 "2025-03-06T08:25:41Z")
Hi there, we're currently evaluating the use of Winlog/Filebeat on Microsofts latest Major Release Windows Server 2025. As it's not yet in the Support Matrix: Is there any information on when Elastic will officially sup… --- ## [Kibana loading loop with .kibana-event-log has is\_hidden set to true on indices](https://discuss.elastic.co/t/kibana-loading-loop-with-kibana-event-log-has-is-hidden-set-to-true-on-indices/298088)
**Author:** [@kevb](https://discuss.elastic.co/u/kevb)\ **Replies:** 3\ **Last updated:** [February 24, 2022, 10:00pm UTC](https://discuss.elastic.co/t/kibana-loading-loop-with-kibana-event-log-has-is-hidden-set-to-true-on-indices/298088 "2022-02-24T22:00:20Z")
Hello everyone, I will try to get some help on the forum before trying a last update or crash something more. Here is my situation : I had a cluster elastic with rpm on 7.10.1 and I upgraded nearly 2 months ago in 7.1… --- ## [Curl -XGET 'http://127.0.0.1:9200'](https://discuss.elastic.co/t/curl-xget-http-127-0-0-1-9200/285645)
**Author:** [@sandy12](https://discuss.elastic.co/u/sandy12)\ **Replies:** 3\ **Last updated:** [October 2, 2021, 12:27pm UTC](https://discuss.elastic.co/t/curl-xget-http-127-0-0-1-9200/285645 "2021-10-02T12:27:40Z")
When I am running this command curl -XGET 'http://127.0.0.1:9200' getting below error Request on loopback from external IP Request on loopback from external IP Description: Your request is prohibited because the reque… --- ## [Serial Diff two metrics](https://discuss.elastic.co/t/serial-diff-two-metrics/244978)
**Author:** [@Shyrine](https://discuss.elastic.co/u/Shyrine)\ **Replies:** 3\ **Last updated:** [August 14, 2020, 2:53pm UTC](https://discuss.elastic.co/t/serial-diff-two-metrics/244978 "2020-08-14T14:53:39Z")
Hi, I am wondering if it is possible to have a serial diff in aggregation between two metrics.... ?? What I am trying to do is having an other bar or line, calculating the difference between the two bars (green and ora… --- ## [Cannot create any visualization](https://discuss.elastic.co/t/cannot-create-any-visualization/89620)
**Author:** [@namankhator](https://discuss.elastic.co/u/namankhator)\ **Replies:** 3\ **Last updated:** [June 16, 2017, 8:04am UTC](https://discuss.elastic.co/t/cannot-create-any-visualization/89620 "2017-06-16T08:04:39Z")
Every time I get this error: No Compatible Fields: The "sample" index pattern does not contain any of the following field types: number, boolean, date, ip or string This is my index. Also, whenever I run: curl 'loc… --- ## [Editing field values in index?](https://discuss.elastic.co/t/editing-field-values-in-index/70216)
**Author:** [@mos](https://discuss.elastic.co/u/mos)\ **Replies:** 3\ **Last updated:** [December 29, 2016, 3:55pm UTC](https://discuss.elastic.co/t/editing-field-values-in-index/70216 "2016-12-29T15:55:54Z")
Kibana is a great tool. We are using the "Discover" function a lot for doing quick and simple searches in our index. From time to time we need to change a field value (e.g. correcting some original values). Is there … --- ## [Logstash duplicating log events?](https://discuss.elastic.co/t/logstash-duplicating-log-events/36933)
**Author:** [@zombie101](https://discuss.elastic.co/u/zombie101)\ **Replies:** 3\ **Last updated:** [February 22, 2016, 8:39pm UTC](https://discuss.elastic.co/t/logstash-duplicating-log-events/36933 "2016-02-22T20:39:16Z")
hi -- I have a fairly simple logstash setup: logstash runs on a web server, and sends events to redis logstash running on another server takes the events from redis and outputs them into ES. I am occasionally, but n… --- ## [JVM crashes when trying to run elasticsearch](https://discuss.elastic.co/t/jvm-crashes-when-trying-to-run-elasticsearch/5091)
**Author:** [@ulizama](https://discuss.elastic.co/u/ulizama)\ **Replies:** 3\ **Last updated:** [August 9, 2011, 2:02pm UTC](https://discuss.elastic.co/t/jvm-crashes-when-trying-to-run-elasticsearch/5091 "2011-08-09T14:02:44Z")
Hello, I'm trying to configure ES on a server running CentOS 5.6 x86\_64. Whenever I run elasticsearch the JVM dies with the error I'm attaching below. I would really appreciate any help, I have tried with Java 6 an… --- ## [Version conflict on update\_by\_query](https://discuss.elastic.co/t/version-conflict-on-update-by-query/243762)
**Author:** [@redec](https://discuss.elastic.co/u/redec)\ **Replies:** 1\ **Last updated:** [August 5, 2020, 4:00pm UTC](https://discuss.elastic.co/t/version-conflict-on-update-by-query/243762 "2020-08-05T16:00:49Z")
I'm seeing some behavior that I can't explain...and all the googling I've done indicates it should not be possible. I have a single client application, issuing an update\_by\_query which updates a few thousand documents..… --- ## [ES7.4 returns unsupported symbol in geohash](https://discuss.elastic.co/t/es7-4-returns-unsupported-symbol-in-geohash/206306)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 1\ **Last updated:** [November 4, 2019, 8:10am UTC](https://discuss.elastic.co/t/es7-4-returns-unsupported-symbol-in-geohash/206306 "2019-11-04T08:10:44Z")
Mapping defined as this: "source": { "properties": { "address": { "type": "keyword", "fields": { "text": { "type" : "text" } } }, "ip": { "type": "ip" }, "… --- ## [I cannot start logstash](https://discuss.elastic.co/t/i-cannot-start-logstash/167720)
**Author:** [@Murr](https://discuss.elastic.co/u/Murr)\ **Replies:** 1\ **Last updated:** [February 9, 2019, 3:06pm UTC](https://discuss.elastic.co/t/i-cannot-start-logstash/167720 "2019-02-09T15:06:53Z")
1.I tried to do this sudo /usr/share/logstash/bin/system-install /etc/logstash/startup.options systemd The output is Using provided startup.options file: /etc/logstash/startup.options Manually creating startup for spe… --- ## [ElasticSearch - search\_after pagination sort](https://discuss.elastic.co/t/elasticsearch-search-after-pagination-sort/334502)
**Author:** [@VJ052023](https://discuss.elastic.co/u/VJ052023)\ **Replies:** 4\ **Last updated:** [May 29, 2023, 4:52am UTC](https://discuss.elastic.co/t/elasticsearch-search-after-pagination-sort/334502 "2023-05-29T04:52:32Z")
I am trying to fetch results from Elasticsearch API using search\_after for pagination. However, in order to iterate to the subsequent data I am using a sort in the request Body of the API call as shown below "sort": \[ … --- ## [Kibana Discover Filter "There aren't any options available"](https://discuss.elastic.co/t/kibana-discover-filter-there-arent-any-options-available/296821)
**Author:** [@WookWook](https://discuss.elastic.co/u/WookWook)\ **Replies:** 4\ **Last updated:** [February 11, 2022, 8:29am UTC](https://discuss.elastic.co/t/kibana-discover-filter-there-arent-any-options-available/296821 "2022-02-11T08:29:45Z")
Hi, I created a new role to seperate access to see only filebeat logs from specific Openshift namespaces. So far so good. The user with the role can only see logs from the granted namespaces. Granted Kibana privileg… --- ## [co.elastic.clients.json.JsonpMappingException: Error deserializing co.elastic.clients.elasticsearch.\_types.mapping.VersionProperty: Unknown field 'index'](https://discuss.elastic.co/t/co-elastic-clients-json-jsonpmappingexception-error-deserializing-co-elastic-clients-elasticsearch-types-mapping-versionproperty-unknown-field-index/323316)
**Author:** [@sundar.s](https://discuss.elastic.co/u/sundar.s)\ **Replies:** 2\ **Last updated:** [January 18, 2023, 12:17pm UTC](https://discuss.elastic.co/t/co-elastic-clients-json-jsonpmappingexception-error-deserializing-co-elastic-clients-elasticsearch-types-mapping-versionproperty-unknown-field-index/323316 "2023-01-18T12:17:04Z")
Hi, When I tried to create an index containing a field of type: "version" or "geo\_point" with 'index' : true/false (sample input below) through the Java API client (7.17.7), I am getting the following exception. Could… --- ## [Kibana Pie Chart Replace Value Names](https://discuss.elastic.co/t/kibana-pie-chart-replace-value-names/277659)
**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\ **Replies:** 2\ **Last updated:** [July 2, 2021, 3:48pm UTC](https://discuss.elastic.co/t/kibana-pie-chart-replace-value-names/277659 "2021-07-02T15:48:50Z")
Hi team!, I have a Pie chart that displays severity values. The values go from 1-3. Would it be possible from within the JSON input to replace the numbered values with names. Say 1 = Low, 2 = Medium, 3 = High Thanks in… --- ## [Filebeat dashboard : No results found](https://discuss.elastic.co/t/filebeat-dashboard-no-results-found/97524)
**Author:** [@Durgaprasad](https://discuss.elastic.co/u/Durgaprasad)\ **Replies:** 2\ **Last updated:** [August 20, 2017, 1:34am UTC](https://discuss.elastic.co/t/filebeat-dashboard-no-results-found/97524 "2017-08-20T01:34:03Z")
Hi Team, I have a 2 Servers ( one is EL and other is Kibana and filebeat ) both are Ubuntu Server 16.04 LTS. I have installed Elasticsearch, Logstash in 1st Server. & Kibana, filebeat, metricbeat and packetbeat in the … --- ## [Need best practices for: Proxmox cluster + iSCSI LVM shared storage + elasticsearch cluster](https://discuss.elastic.co/t/need-best-practices-for-proxmox-cluster-iscsi-lvm-shared-storage-elasticsearch-cluster/370554)
**Author:** [@GiciorMan](https://discuss.elastic.co/u/GiciorMan)\ **Replies:** 5\ **Last updated:** [November 16, 2024, 12:12am UTC](https://discuss.elastic.co/t/need-best-practices-for-proxmox-cluster-iscsi-lvm-shared-storage-elasticsearch-cluster/370554 "2024-11-16T00:12:02Z")
I have 3 servers in proxmox cluster with configured iSCSI LVM shared storage , I was planning to setup 3 node elasticsearch cluster , but I don't know what will be the best configuration here. At first I tried create 1 v… --- ## [Ignore\_older is not pushing the latest logs](https://discuss.elastic.co/t/ignore-older-is-not-pushing-the-latest-logs/239632)
**Author:** [@aolvikash](https://discuss.elastic.co/u/aolvikash)\ **Replies:** 5\ **Last updated:** [July 9, 2020, 6:51pm UTC](https://discuss.elastic.co/t/ignore-older-is-not-pushing-the-latest-logs/239632 "2020-07-09T18:51:30Z")
Hi All, I have configured ignore\_older into filebeat \[version 6.6\] so that only new logs should push into ELK, here is the ignore\_older and other related configs: ignore\_older: 1h close\_older: 24h close\_inactive: 30… --- ## [How quick can I get message that the system is down or shutting down?](https://discuss.elastic.co/t/how-quick-can-i-get-message-that-the-system-is-down-or-shutting-down/131368)
**Author:** [@phil.zac](https://discuss.elastic.co/u/phil.zac)\ **Replies:** 5\ **Last updated:** [May 22, 2018, 8:24am UTC](https://discuss.elastic.co/t/how-quick-can-i-get-message-that-the-system-is-down-or-shutting-down/131368 "2018-05-22T08:24:33Z")
Hi, I am wondering how quick can I get the message that the remote system is down or shutting down. I am using 6.2.2 for all versions of ELK and Beats. Another question I have one system that is always "on" state (not… --- ## [Max\_result\_window](https://discuss.elastic.co/t/max-result-window/90463)
**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\ **Replies:** 5\ **Last updated:** [June 25, 2017, 8:06am UTC](https://discuss.elastic.co/t/max-result-window/90463 "2017-06-25T08:06:58Z")
I have a problem where in some rare cases I am asked to bring results with parameters "from":"10000", "size":"1000". Of course, it fails on max\_result\_window. Unfortunately, the "from" also could be much bigger... Should… --- ## [Enable Kerberos realm in Elastic docker container for Kibana authentication](https://discuss.elastic.co/t/enable-kerberos-realm-in-elastic-docker-container-for-kibana-authentication/245924)
**Author:** [@Michal\_Stefanec](https://discuss.elastic.co/u/Michal_Stefanec)\ **Replies:** 7\ **Last updated:** [August 24, 2020, 2:01pm UTC](https://discuss.elastic.co/t/enable-kerberos-realm-in-elastic-docker-container-for-kibana-authentication/245924 "2020-08-24T14:01:30Z")
Hello, we have ELK stack (7.8.0) deployed on our on-premise server. We user docker-compose deployment and currently we are using Trial license. We would like to authenticate domain users when logging in Kibana. Kerbero… --- ## [Bar width in canvas chart](https://discuss.elastic.co/t/bar-width-in-canvas-chart/181982)
**Author:** [@Borivoj\_Vlk](https://discuss.elastic.co/u/Borivoj_Vlk)\ **Replies:** 1\ **Last updated:** [May 21, 2019, 8:09pm UTC](https://discuss.elastic.co/t/bar-width-in-canvas-chart/181982 "2019-05-21T20:09:41Z")
Hi all, this is a follow-up to my question Timeline bar chart in kibana. I'm creating a timeline bar chart. Since there is no direct way to do this in kibana/canvas I've used a workaround - plot a series of bars with f… --- ## [Error to run logstash](https://discuss.elastic.co/t/error-to-run-logstash/57957)
**Author:** [@rai](https://discuss.elastic.co/u/rai)\ **Replies:** 7\ **Last updated:** [August 15, 2016, 9:45pm UTC](https://discuss.elastic.co/t/error-to-run-logstash/57957 "2016-08-15T21:45:59Z")
indent preformatted text by 4 spacesI got following error on console when tried to start the logstash. root@111:/opt/logstash/bin# /opt/logstash/bin/logstash -f /etc/logstash/conf.d/10-syslog-filter.conf --configtest E… --- ## [Kibana 7.17.29, 8.17.8, 8.18.3, 9.0.3 Security Update (ESA-2025-10)](https://discuss.elastic.co/t/kibana-7-17-29-8-17-8-8-18-3-9-0-3-security-update-esa-2025-10/379444)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [June 24, 2025, 5:01pm UTC](https://discuss.elastic.co/t/kibana-7-17-29-8-17-8-8-18-3-9-0-3-security-update-esa-2025-10/379444 "2025-06-24T17:01:48Z")
Kibana Open Redirect (ESA-2025-10) URL redirection to an untrusted site ('Open Redirect') in Kibana can lead to sending a user to an arbitrary site and server-side request forgery via a specially crafted URL. Affected … --- ## [Filebeat for OS Solaris?](https://discuss.elastic.co/t/filebeat-for-os-solaris/292037)
**Author:** [@DKalin0789e](https://discuss.elastic.co/u/DKalin0789e)\ **Replies:** 3\ **Last updated:** [January 5, 2022, 8:31pm UTC](https://discuss.elastic.co/t/filebeat-for-os-solaris/292037 "2022-01-05T20:31:32Z")
Hello, can you recommend any officially supported tool/agent/alternative for OS Solaris, like Filebeat, Fluentd, FluentBit, etc. which allows parsing log files, please? We use "collectd" at the moment. It works fine, but… --- ## [Kibana SIEM "External Alert"](https://discuss.elastic.co/t/kibana-siem-external-alert/220643)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 3\ **Last updated:** [March 19, 2020, 11:11am UTC](https://discuss.elastic.co/t/kibana-siem-external-alert/220643 "2020-03-19T11:11:43Z")
Hello, I was wondering how we can use the 'External Alert' functionality in Kibana SIEM 7.6.0? The documentation is rather sparse (https://www.elastic.co/guide/en/siem/guide/current/detection-engine-overview.html#\_signa… --- ## [\[Logstash\] multiline codecで処理したファイルを削除した際のエラーについて](https://discuss.elastic.co/t/logstash-multiline-codec/154815)
**Author:** [@drifting\_school](https://discuss.elastic.co/u/drifting_school)\ **Replies:** 3\ **Last updated:** [November 13, 2018, 8:59am UTC](https://discuss.elastic.co/t/logstash-multiline-codec/154815 "2018-11-13T08:59:35Z")
■環境 Windows10 Pro 64bit メモリ : 64GB logstash-6.4.2 特定のフォルダにxmlファイルがコピーされたことをトリガーに内容をフィルタリングし elasticsearchへ送信するパイプラインの実装を進めています。 input, filter, outputの実装が完了しテストを繰り返しているのですが logstashのagent起動中に終端(eof)まで読み終わったxmlファイルを削… --- ## [How does the X-Pack license work?](https://discuss.elastic.co/t/how-does-the-x-pack-license-work/153256)
**Author:** [@KajMagnus](https://discuss.elastic.co/u/KajMagnus)\ **Replies:** 3\ **Last updated:** [October 22, 2018, 3:20pm UTC](https://discuss.elastic.co/t/how-does-the-x-pack-license-work/153256 "2018-10-22T15:20:36Z")
Can I ask how does the X-Pack license work? Is there perhaps an asymmetric encryption public key bundled with ElasticSearch? And if one buys an enterprise plan subscription, then Elastic-the-company creates a license, an… --- ## [Filter in metrics](https://discuss.elastic.co/t/filter-in-metrics/94222)
**Author:** [@Padmavathy](https://discuss.elastic.co/u/Padmavathy)\ **Replies:** 3\ **Last updated:** [July 25, 2017, 3:48pm UTC](https://discuss.elastic.co/t/filter-in-metrics/94222 "2017-07-25T15:48:26Z")
I need to filter out time specified in format HH:mm:ss. I need to filter out values greater than a particular time say 9 am and get the count of those in metric graph. How can this be achieved in kibana --- ## [Discover: "field" is a required parameter](https://discuss.elastic.co/t/discover-field-is-a-required-parameter/90146)
**Author:** [@DanMa](https://discuss.elastic.co/u/DanMa)\ **Replies:** 3\ **Last updated:** [June 22, 2017, 7:24am UTC](https://discuss.elastic.co/t/discover-field-is-a-required-parameter/90146 "2017-06-22T07:24:00Z")
Hello, i want to see my logs, but i get everytime this messages: Perhaps my filter clearifies it? filter { if \[type\] == "cisco-asa" { grok { match =\> \["message", "%{CISCO\_TAGGED\_SYSLOG} %{GR… --- ## [Elastic dump creates index, but index not found in elastic search](https://discuss.elastic.co/t/elastic-dump-creates-index-but-index-not-found-in-elastic-search/246830)
**Author:** [@Rahul\_Seetharaman](https://discuss.elastic.co/u/Rahul_Seetharaman)\ **Replies:** 2\ **Last updated:** [August 29, 2020, 10:55pm UTC](https://discuss.elastic.co/t/elastic-dump-creates-index-but-index-not-found-in-elastic-search/246830 "2020-08-29T22:55:11Z")
I am using the elastic dump command to push my data to Elasticsearch running locally on port 9200. While elasticdump command itself does not give any error, while doing curl localhost:9200/{index\_name} I get the follo… --- ## [Cannot generate CSV on nested field](https://discuss.elastic.co/t/cannot-generate-csv-on-nested-field/214062)
**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\ **Replies:** 2\ **Last updated:** [January 8, 2020, 7:02pm UTC](https://discuss.elastic.co/t/cannot-generate-csv-on-nested-field/214062 "2020-01-08T19:02:35Z")
Hello, I have a nested field (Vulnerability Advisories) and I cannot generate a CSV unless I flatten the field out by converting it to a string. The problem with converting it, is it is no longer indexed. I'd like to ma… --- ## [Problem with duplicate data in field](https://discuss.elastic.co/t/problem-with-duplicate-data-in-field/92598)
**Author:** [@ahongyun](https://discuss.elastic.co/u/ahongyun)\ **Replies:** 2\ **Last updated:** [July 13, 2017, 1:10am UTC](https://discuss.elastic.co/t/problem-with-duplicate-data-in-field/92598 "2017-07-13T01:10:45Z")
Hi all I have an issue with the data that is passed into elasticsearch from logstash below is my logstash config. if \[type\] == "coreservices-fs" or "coreservices-net" { grok { match =\> { "message" =\> \[ "^%{TIMESTA… --- ## [Max field count and performances impact](https://discuss.elastic.co/t/max-field-count-and-performances-impact/76751)
**Author:** [@dao](https://discuss.elastic.co/u/dao)\ **Replies:** 2\ **Last updated:** [March 2, 2017, 8:35am UTC](https://discuss.elastic.co/t/max-field-count-and-performances-impact/76751 "2017-03-02T08:35:05Z")
I am trying several mappings for my documents, and it turned out that the most convenient one is a data model with thousand of fields on my document. MAPPING#1 The mapping \[{param:ALT, value:40000}, {param:LON, value:1… --- ## [(C#) NEST search using GET instead of POST?](https://discuss.elastic.co/t/c-nest-search-using-get-instead-of-post/24128)
**Author:** [@Neverwhere](https://discuss.elastic.co/u/Neverwhere)\ **Replies:** 2\ **Last updated:** [September 18, 2015, 2:48pm UTC](https://discuss.elastic.co/t/c-nest-search-using-get-instead-of-post/24128 "2015-09-18T14:48:19Z")
Hi, I'm wondering if someone knows how to make the ElasticSearch C# package (NEST) use the HTTP GET method instead of HTTP POST or if someone can point me in that direction. I see from the source code that I need to … --- ## [High-Level Rest Client | Response Issue](https://discuss.elastic.co/t/high-level-rest-client-response-issue/129249)
**Author:** [@Divya\_Dua](https://discuss.elastic.co/u/Divya_Dua)\ **Replies:** 4\ **Last updated:** [April 26, 2018, 5:26am UTC](https://discuss.elastic.co/t/high-level-rest-client-response-issue/129249 "2018-04-26T05:26:23Z")
Ciao, I am using High-level rest client to connect with Elasticsearch service and I am successfully able to insert the data in Elasticsearch. When I am inserting the data for the first time, it is showing 'created' in … --- ## [Logstash 5.0 alpha4 issues with Kafka 0.9](https://discuss.elastic.co/t/logstash-5-0-alpha4-issues-with-kafka-0-9/55272)
**Author:** [@Mick\_Mahoney](https://discuss.elastic.co/u/Mick_Mahoney)\ **Replies:** 4\ **Last updated:** [July 13, 2016, 4:59pm UTC](https://discuss.elastic.co/t/logstash-5-0-alpha4-issues-with-kafka-0-9/55272 "2016-07-13T16:59:21Z")
Having an issue connecting to Kafka 0.9 from 5.0 alpha4 release Getting following error: "Exception in thread "Ruby-0-Thread-13: /usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-kafka-5.0.0/lib/logstash/… --- ## [ELK Stack upgraded, and logstash is not sending data to elasticsearch](https://discuss.elastic.co/t/elk-stack-upgraded-and-logstash-is-not-sending-data-to-elasticsearch/48993)
**Author:** [@bsmitty111](https://discuss.elastic.co/u/bsmitty111)\ **Replies:** 4\ **Last updated:** [May 3, 2016, 2:33pm UTC](https://discuss.elastic.co/t/elk-stack-upgraded-and-logstash-is-not-sending-data-to-elasticsearch/48993 "2016-05-03T14:33:02Z")
Hello, I am very new to ELK, and inherited this environment. this is not rolled out to production. I have the following servers: logstash index server version 2.3 logstash shipping server version 2.3 elasticserach cl… --- ## [Report a bug of winlogbeat-5.0.0-alpha1-windows-32](https://discuss.elastic.co/t/report-a-bug-of-winlogbeat-5-0-0-alpha1-windows-32/47550)
**Author:** [@tuankun](https://discuss.elastic.co/u/tuankun)\ **Replies:** 4\ **Last updated:** [April 26, 2016, 11:04pm UTC](https://discuss.elastic.co/t/report-a-bug-of-winlogbeat-5-0-0-alpha1-windows-32/47550 "2016-04-26T23:04:35Z")
@andrewkroh Hi andrew, I ran winlogbeat-5.0.0-alpha1-windows-32 on windows server 2003 R2 SP2 32bit and encountered some error, need your verification. thanks. --- ## [Dashboard Chart Sizes](https://discuss.elastic.co/t/dashboard-chart-sizes/37600)
**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\ **Replies:** 4\ **Last updated:** [December 21, 2015, 1:16am UTC](https://discuss.elastic.co/t/dashboard-chart-sizes/37600 "2015-12-21T01:16:40Z")
Well I've started my painful upgrade from Kibana 3 to apparently Kibana 5 as I couldn't find a version of Kibana 4.4 for download, which includes the color palette fix github link. That being said, here's an image of my… --- ## [How to get counts of array item in KQL?](https://discuss.elastic.co/t/how-to-get-counts-of-array-item-in-kql/229802)
**Author:** [@chandler](https://discuss.elastic.co/u/chandler)\ **Replies:** 1\ **Last updated:** [May 3, 2020, 9:48pm UTC](https://discuss.elastic.co/t/how-to-get-counts-of-array-item-in-kql/229802 "2020-05-03T21:48:42Z")
Is there any way to count how many item in the items field ? In the following case is 3. I would like to filter docs with more than one item within items. Thanks. { "grocery\_name": "Elastic Eats", "items": \[ { "nam… --- ## [Create Snapshots using curator](https://discuss.elastic.co/t/create-snapshots-using-curator/88597)
**Author:** [@owenbutt](https://discuss.elastic.co/u/owenbutt)\ **Replies:** 1\ **Last updated:** [June 14, 2017, 10:46pm UTC](https://discuss.elastic.co/t/create-snapshots-using-curator/88597 "2017-06-14T22:46:01Z")
Hi Guys, New to using curator and have been able to successfully setup and install it. Now when I run it, I'm getting the following error message: \[root@localhost ~\]# curator --config /root/config.yml --dry-run snapsho… --- ## [Capturing Comprehensive Kibana Audit Logs for User Activities](https://discuss.elastic.co/t/capturing-comprehensive-kibana-audit-logs-for-user-activities/370954)
**Author:** [@Akarsh\_Shaw](https://discuss.elastic.co/u/Akarsh_Shaw)\ **Replies:** 8\ **Last updated:** [November 29, 2024, 6:09am UTC](https://discuss.elastic.co/t/capturing-comprehensive-kibana-audit-logs-for-user-activities/370954 "2024-11-29T06:09:47Z")
Hello Elastic Community, I am looking to implement comprehensive Kibana audit logging to monitor user activities effectively. Specifically, I want to capture the following events: User Login and Logout: I need to log … --- ## [Ad hoc query regex (this time with sample data)](https://discuss.elastic.co/t/ad-hoc-query-regex-this-time-with-sample-data/112015)
**Author:** [@brandondash](https://discuss.elastic.co/u/brandondash)\ **Replies:** 8\ **Last updated:** [December 16, 2017, 11:07am UTC](https://discuss.elastic.co/t/ad-hoc-query-regex-this-time-with-sample-data/112015 "2017-12-16T11:07:59Z")
Here is all the consolidated information from the many splintered threads I've posted over the last week or two: Here are my software versions: logstash-5.2.2-1.noarch elasticsearch-5.2.1-1.noarch kibana-5.2.1-1.x86\_6… --- ## [Reindexing 1.7 to 2.4.4 fails](https://discuss.elastic.co/t/reindexing-1-7-to-2-4-4-fails/94702)
**Author:** [@Marjana](https://discuss.elastic.co/u/Marjana)\ **Replies:** 8\ **Last updated:** [July 27, 2017, 10:44am UTC](https://discuss.elastic.co/t/reindexing-1-7-to-2-4-4-fails/94702 "2017-07-27T10:44:40Z")
Hi, I am using migration plugin to reindex 1.7.1 indices to 2.4.4, so we can migrate to 5.x. I managed to reindex some indices but most of them are failing. New index gets created but reindex fails. I tried to do it ma… [Previous page](https://discuss.elastic.co/top.md?page=901&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=903&per_page=50&period=all)