# Top **URL:** https://discuss.elastic.co/top.md?page=904&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 905 --- ## [Archive logs from elasticsearch to s3 in a readable format](https://discuss.elastic.co/t/archive-logs-from-elasticsearch-to-s3-in-a-readable-format/231219)
**Author:** [@Ilan\_Peretz](https://discuss.elastic.co/u/Ilan_Peretz)\ **Replies:** 0\ **Last updated:** [May 5, 2020, 8:44pm UTC](https://discuss.elastic.co/t/archive-logs-from-elasticsearch-to-s3-in-a-readable-format/231219 "2020-05-05T20:44:53Z")
hello, i need to archive data from elasticsearch to s3, like there is in logz.io. the thing is, in logz.io the data get to S3 in a readable format (json), and then i can manipulate it however i need. when i do a snaps… --- ## [Service Metricset for Unix](https://discuss.elastic.co/t/service-metricset-for-unix/151303)
**Author:** [@armsepehr](https://discuss.elastic.co/u/armsepehr)\ **Replies:** 8\ **Last updated:** [October 12, 2018, 6:27pm UTC](https://discuss.elastic.co/t/service-metricset-for-unix/151303 "2018-10-12T18:27:14Z")
Hello lovely community, I am looking for a module in Metricbeat to send the status for each service in the client to the elasticsearch, and create such a dashboard. After googling, I found windows module in metricbeat… --- ## [Date fields comparison](https://discuss.elastic.co/t/date-fields-comparison/272724)
**Author:** [@g\_k\_b](https://discuss.elastic.co/u/g_k_b)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 12:32pm UTC](https://discuss.elastic.co/t/date-fields-comparison/272724 "2021-05-12T12:32:58Z")
Hi There! I would desire to create a scripted field comparing 2 date fields in Kibana, in particular: I want to use current date ( new Date().getTime() ) and a date field I indexed already (named expiring date). The co… --- ## [Logstash using grok filter to modify values](https://discuss.elastic.co/t/logstash-using-grok-filter-to-modify-values/97193)
**Author:** [@mulgar](https://discuss.elastic.co/u/mulgar)\ **Replies:** 2\ **Last updated:** [August 17, 2017, 7:24am UTC](https://discuss.elastic.co/t/logstash-using-grok-filter-to-modify-values/97193 "2017-08-17T07:24:29Z")
I haven’t used grok filter before and having a little trouble getting the results I need. Ultimately I’m pulling some data into ElasticSearch from a database query using Logstash and the JDBC input plugin. Mostly irrelev… --- ## [Fail to assign shards after restarting ES](https://discuss.elastic.co/t/fail-to-assign-shards-after-restarting-es/90357)
**Author:** [@diegoorellanaga](https://discuss.elastic.co/u/diegoorellanaga)\ **Replies:** 2\ **Last updated:** [June 21, 2017, 8:41pm UTC](https://discuss.elastic.co/t/fail-to-assign-shards-after-restarting-es/90357 "2017-06-21T20:41:52Z")
Hi, I'm trying to start my ES but as soon as it reach 80% (assigned shards) it goes back to around 50% and keep doing that indefinitely. It also take hours to reach 80% of assigned shards. As the logs told us that w… --- ## [Terms aggregation + Cardinality Aggregation performance](https://discuss.elastic.co/t/terms-aggregation-cardinality-aggregation-performance/87365)
**Author:** [@jonyadamit](https://discuss.elastic.co/u/jonyadamit)\ **Replies:** 2\ **Last updated:** [May 29, 2017, 9:25am UTC](https://discuss.elastic.co/t/terms-aggregation-cardinality-aggregation-performance/87365 "2017-05-29T09:25:31Z")
My terms aggregation (on a high cardinality field) with an inner cardinality aggregation takes about 23 seconds to complete (one node, one shard, 300,000 documents, keyword fields). The equivalent SQL query using SQL ser… --- ## [New to Elastic - Netflow Data Analysis](https://discuss.elastic.co/t/new-to-elastic-netflow-data-analysis/316073)
**Author:** [@bigverm23](https://discuss.elastic.co/u/bigverm23)\ **Replies:** 1\ **Last updated:** [October 10, 2022, 7:03am UTC](https://discuss.elastic.co/t/new-to-elastic-netflow-data-analysis/316073 "2022-10-10T07:03:28Z")
good morning all. I am very new to Elastic and am looking for resources/insight on ingesting netflow from firewall logs and help with analysis. We are ingesting a few million events per day and I'd like to get to a poi… --- ## [Error in Logstash Pipeline](https://discuss.elastic.co/t/error-in-logstash-pipeline/267930)
**Author:** [@caitlyn.carlisle](https://discuss.elastic.co/u/caitlyn.carlisle)\ **Replies:** 4\ **Last updated:** [March 30, 2021, 3:32am UTC](https://discuss.elastic.co/t/error-in-logstash-pipeline/267930 "2021-03-30T03:32:55Z")
I am getting this error when trying to run my Logstash pipeline. I would appreciate any help!! Thanks so much! \[2021-03-21T22:02:58,827\]\[WARN \]\[logstash.config.source.multilocal\] Ignoring the 'pipelines.yml' file becaus… --- ## [How to send LogStash parse errors to ElasticSearch](https://discuss.elastic.co/t/how-to-send-logstash-parse-errors-to-elasticsearch/190292)
**Author:** [@Joe\_Still](https://discuss.elastic.co/u/Joe_Still)\ **Replies:** 4\ **Last updated:** [July 12, 2019, 7:24pm UTC](https://discuss.elastic.co/t/how-to-send-logstash-parse-errors-to-elasticsearch/190292 "2019-07-12T19:24:56Z")
Hello, I am running into issues where my JSON logs being sent to Logstash are sometimes failing to be parsed. The parse failure is just me sending bad data. However, Logstash does log that it failed to parse it: "error"… --- ## [How to search in Elasticsearch when same field is present multiple times?](https://discuss.elastic.co/t/how-to-search-in-elasticsearch-when-same-field-is-present-multiple-times/305385)
**Author:** [@Vipul\_Kumar](https://discuss.elastic.co/u/Vipul_Kumar)\ **Replies:** 7\ **Last updated:** [May 24, 2022, 6:30am UTC](https://discuss.elastic.co/t/how-to-search-in-elasticsearch-when-same-field-is-present-multiple-times/305385 "2022-05-24T06:30:41Z")
I'm trying to figure out how do I search an index when same field is present multiple times. Look at the below example: "\_source" : { "field1" : "value1", "field\_list" : \[ { … --- ## [XML Filter :How to create array of objects using xml filter (xpath)](https://discuss.elastic.co/t/xml-filter-how-to-create-array-of-objects-using-xml-filter-xpath/144143)
**Author:** [@Muhammed\_Aboobacker](https://discuss.elastic.co/u/Muhammed_Aboobacker)\ **Replies:** 3\ **Last updated:** [August 13, 2018, 6:20pm UTC](https://discuss.elastic.co/t/xml-filter-how-to-create-array-of-objects-using-xml-filter-xpath/144143 "2018-08-13T18:20:39Z")
I am new to logstash. I am trying push XML (generated as the output of http polling) in logstash. I want to have the XML elements attributes convert to json objects.I am using xpath for parsing xml data.But i am getting… --- ## [Using boost in a match query](https://discuss.elastic.co/t/using-boost-in-a-match-query/109539)
**Author:** [@jettro](https://discuss.elastic.co/u/jettro)\ **Replies:** 3\ **Last updated:** [November 29, 2017, 11:57am UTC](https://discuss.elastic.co/t/using-boost-in-a-match-query/109539 "2017-11-29T11:57:46Z")
Hi, I am trying to find documentation about the boost feature of a match query like in the following sample: { "match": { "name": { "query": "sony", "boost": 10, "\_name": "match sony" } } … --- ## [Case insensitive keyword Search Kibana 5.4.1](https://discuss.elastic.co/t/case-insensitive-keyword-search-kibana-5-4-1/94381)
**Author:** [@Louie\_Hernandez](https://discuss.elastic.co/u/Louie_Hernandez)\ **Replies:** 3\ **Last updated:** [July 24, 2017, 7:07pm UTC](https://discuss.elastic.co/t/case-insensitive-keyword-search-kibana-5-4-1/94381 "2017-07-24T19:07:05Z")
Is this possible? I've tried something like this in the Dev Tools. I know the Data Table only displays aggregations, but is there a way to make the Data Table visualization case Insensitive? --- ## [Run a simple sql group by query in kibana 4](https://discuss.elastic.co/t/run-a-simple-sql-group-by-query-in-kibana-4/21211)
**Author:** [@PMOPMO](https://discuss.elastic.co/u/PMOPMO)\ **Replies:** 3\ **Last updated:** [May 24, 2017, 6:18am UTC](https://discuss.elastic.co/t/run-a-simple-sql-group-by-query-in-kibana-4/21211 "2017-05-24T06:18:04Z")
Hello all, I want to run a simple \*sql group by query\* in kibana 4 "Discover" page. Each record in my elastic search index represent a log and has 3 columns: process\_id (not unique value), log\_time, log\_message. e… --- ## [Query elasticearch from kibana visualization](https://discuss.elastic.co/t/query-elasticearch-from-kibana-visualization/80704)
**Author:** [@bouboune](https://discuss.elastic.co/u/bouboune)\ **Replies:** 3\ **Last updated:** [March 31, 2017, 1:12pm UTC](https://discuss.elastic.co/t/query-elasticearch-from-kibana-visualization/80704 "2017-03-31T13:12:39Z")
Hello, 1 - Is there a way to query elasticsearch instead of aggregation from a visualization? 2 - Is it possible to get the input of the search bar and query elasticsearch with it ? 3 - How can i perform query wit… --- ## [How to capture regex groups with /g?](https://discuss.elastic.co/t/how-to-capture-regex-groups-with-g/55858)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 3\ **Last updated:** [September 8, 2016, 10:46am UTC](https://discuss.elastic.co/t/how-to-capture-regex-groups-with-g/55858 "2016-09-08T10:46:53Z")
Hi, I have following excerpt of a log line: ... \[NO SORT\], #0...#4000 (PageSize: 4001), , Fetched: 13, 687 ms0...END (PageSize: INFINITE), , Fetched: 147, 15 ms0...END (PageSize: INFINITE), , Fetched: 147, 16 ms0...E… --- ## [Error opening zip file or JAR manifest missing : /opt/build/workspace/elastic-apm-agent-1.38.0.jar](https://discuss.elastic.co/t/error-opening-zip-file-or-jar-manifest-missing-opt-build-workspace-elastic-apm-agent-1-38-0-jar/334276)
**Author:** [@nupur\_srivastava](https://discuss.elastic.co/u/nupur_srivastava)\ **Replies:** 5\ **Last updated:** [May 31, 2023, 7:18am UTC](https://discuss.elastic.co/t/error-opening-zip-file-or-jar-manifest-missing-opt-build-workspace-elastic-apm-agent-1-38-0-jar/334276 "2023-05-31T07:18:15Z")
Hi, We have multiple microservices running on docker, I have installed Elastic APM -Java "elastic-apm-agent-1.38.0.jar" into my project directory /opt/build/workspace/ and run the same with changes made in docker file b… --- ## [Configuring filebeat.yml](https://discuss.elastic.co/t/configuring-filebeat-yml/273775)
**Author:** [@jasieltego](https://discuss.elastic.co/u/jasieltego)\ **Replies:** 5\ **Last updated:** [May 24, 2021, 7:49am UTC](https://discuss.elastic.co/t/configuring-filebeat-yml/273775 "2021-05-24T07:49:59Z")
Hi, I'm following instructions on the documentation provided on this site to configure filebeat.yml file. filebeat.inputs: - type: log paths: - /path/to/file/logstash-tutorial.log output.logstash: hosts: \["loc… --- ## [Stream live not updating](https://discuss.elastic.co/t/stream-live-not-updating/163734)
**Author:** [@aviator](https://discuss.elastic.co/u/aviator)\ **Replies:** 5\ **Last updated:** [January 10, 2019, 3:53pm UTC](https://discuss.elastic.co/t/stream-live-not-updating/163734 "2019-01-10T15:53:02Z")
Hi When using the Stream Live feature the logs do not get updated in realtime, the logs are there because a page refresh displays them. I think the key is that each time I load up the Logs app the newest/latest entry i… --- ## [Regarding elasticsearch data folder](https://discuss.elastic.co/t/regarding-elasticsearch-data-folder/57707)
**Author:** [@gayathri](https://discuss.elastic.co/u/gayathri)\ **Replies:** 5\ **Last updated:** [August 11, 2016, 5:45pm UTC](https://discuss.elastic.co/t/regarding-elasticsearch-data-folder/57707 "2016-08-11T17:45:46Z")
Hi Team, In my elasticsearch.yml, I have: index.number\_of\_shards: 3 index.number\_of\_replicas: 1 I only have "0" named folder inside : /opt/elasticsearch/elasticsearch-2.3.3/data/inde… --- ## [New Tab to kibana Page](https://discuss.elastic.co/t/new-tab-to-kibana-page/42238)
**Author:** [@sreenivasu](https://discuss.elastic.co/u/sreenivasu)\ **Replies:** 5\ **Last updated:** [March 16, 2016, 5:57am UTC](https://discuss.elastic.co/t/new-tab-to-kibana-page/42238 "2016-03-16T05:57:45Z")
How to add new tab to existing kibana? Eg: Discover,Visualize,Dashboard, etc... --- ## [Multilevel Vega Sankey Paths Not Lining Up](https://discuss.elastic.co/t/multilevel-vega-sankey-paths-not-lining-up/308691)
**Author:** [@m.hanna](https://discuss.elastic.co/u/m.hanna)\ **Replies:** 2\ **Last updated:** [September 22, 2024, 3:39pm UTC](https://discuss.elastic.co/t/multilevel-vega-sankey-paths-not-lining-up/308691 "2024-09-22T15:39:46Z")
I am trying to create some multilevel sankey diagrams in Kibana using Vega. I have it almost done, but the paths do not align on the center stack when highlighting one of the outside stacks. See image. I don't know i… --- ## [Having multiple parsing (dissect) conditions chained](https://discuss.elastic.co/t/having-multiple-parsing-dissect-conditions-chained/202570)
**Author:** [@Vincent\_Maury](https://discuss.elastic.co/u/Vincent_Maury)\ **Replies:** 2\ **Last updated:** [October 8, 2019, 6:47am UTC](https://discuss.elastic.co/t/having-multiple-parsing-dissect-conditions-chained/202570 "2019-10-08T06:47:15Z")
Hi I'm using Logstash 7.4. I would like to try dissecting my logs (in this example apache logs) with multiple patterns, each having possibly its own mutations (renaming, formatting, etc). I thought about the configura… --- ## [Use minimum\_should\_match in search with java client](https://discuss.elastic.co/t/use-minimum-should-match-in-search-with-java-client/115244)
**Author:** [@roi\_adadi](https://discuss.elastic.co/u/roi_adadi)\ **Replies:** 2\ **Last updated:** [January 12, 2018, 10:50am UTC](https://discuss.elastic.co/t/use-minimum-should-match-in-search-with-java-client/115244 "2018-01-12T10:50:56Z")
looking all over, I couldn't find a way to include minimum\_should\_match param our match query when using the java client. we are running on elastic search 2.4. this become a major need now in our system and reindexing/c… --- ## [How to use Google Maps with Kibana 4.4.2](https://discuss.elastic.co/t/how-to-use-google-maps-with-kibana-4-4-2/67568)
**Author:** [@Miguel\_Bessa](https://discuss.elastic.co/u/Miguel_Bessa)\ **Replies:** 2\ **Last updated:** [December 4, 2016, 2:12am UTC](https://discuss.elastic.co/t/how-to-use-google-maps-with-kibana-4-4-2/67568 "2016-12-04T02:12:36Z")
Hello everyone, The version 4.4.2 of Kibana support tile map, but when I create a new visualization of this type a get an error: "As of July 11 2016, direct tile access has been discontinued". I think replace the Map… --- ## [CPU Spikes to more than 100% during bulk indexing](https://discuss.elastic.co/t/cpu-spikes-to-more-than-100-during-bulk-indexing/25038)
**Author:** [@Bhavani\_Ananth](https://discuss.elastic.co/u/Bhavani_Ananth)\ **Replies:** 2\ **Last updated:** [July 8, 2015, 4:17am UTC](https://discuss.elastic.co/t/cpu-spikes-to-more-than-100-during-bulk-indexing/25038 "2015-07-08T04:17:23Z")
Hello, I am having two Ubuntu systems in Amazon with the following configurations Memory - 62.9GB Hard Disk - 197GB Hard Disk Available - 184GB ard Disk Type: SSD CPU - 8 Core Oe ubuntu system has the ES setup. Th… --- ## [How use JAVA API of Elasticsearch](https://discuss.elastic.co/t/how-use-java-api-of-elasticsearch/50464)
**Author:** [@Vincent\_Vost](https://discuss.elastic.co/u/Vincent_Vost)\ **Replies:** 6\ **Last updated:** [June 15, 2016, 8:09am UTC](https://discuss.elastic.co/t/how-use-java-api-of-elasticsearch/50464 "2016-06-15T08:09:53Z")
Hello \[:slight\_smile:\] I'm trying to use ELS in a JAVA application and do some machine learning after.. But I have some trouble, do you have some exemple how use ELS with the JAVA API ? Do some search in java ? I searc… --- ## [Unrecognized service](https://discuss.elastic.co/t/unrecognized-service/126231)
**Author:** [@nadine](https://discuss.elastic.co/u/nadine)\ **Replies:** 4\ **Last updated:** [March 30, 2018, 6:13pm UTC](https://discuss.elastic.co/t/unrecognized-service/126231 "2018-03-30T18:13:35Z")
I'm a begginer in ELK. When i execute " service logstash configtest " I get this error message: "logstash: unrecognized service" Although the logstash in already running. This is my configuration : input { file { p… --- ## [How to get the apache log file in X-Pack Machine Learning Video?](https://discuss.elastic.co/t/how-to-get-the-apache-log-file-in-x-pack-machine-learning-video/101572)
**Author:** [@rockybean](https://discuss.elastic.co/u/rockybean)\ **Replies:** 4\ **Last updated:** [September 25, 2017, 4:51pm UTC](https://discuss.elastic.co/t/how-to-get-the-apache-log-file-in-x-pack-machine-learning-video/101572 "2017-09-25T16:51:16Z")
I want to follow the instruction in the training video to analyze the apache logs. But I don't know where to download the log file. Any advice? Thanks! @nzamecnik --- ## [Unable to receive connection: http://localhost:9200/](https://discuss.elastic.co/t/unable-to-receive-connection-http-localhost-9200/65307)
**Author:** [@perrylu21](https://discuss.elastic.co/u/perrylu21)\ **Replies:** 1\ **Last updated:** [November 8, 2016, 8:20pm UTC](https://discuss.elastic.co/t/unable-to-receive-connection-http-localhost-9200/65307 "2016-11-08T20:20:47Z")
I use ELK 5.0.0 stack on windows 7(32-bits). logstash-5.0.0 elasticsearch-5.0.0 kibana-5.0.0-windows-x86 logstash and elasticsearch can start without error. But when I start kibana, it always shows \[elasticse… --- ## [Installing plugin](https://discuss.elastic.co/t/installing-plugin/255999)
**Author:** [@omerf](https://discuss.elastic.co/u/omerf)\ **Replies:** 8\ **Last updated:** [November 24, 2020, 10:36am UTC](https://discuss.elastic.co/t/installing-plugin/255999 "2020-11-24T10:36:45Z")
I have a plugin generated with the dev version, and I want to install it to kibana 7.8.0. I ran the scripts and it installed fine. This is the error when opening Kibana after the installation. I built the plugin with… --- ## [Drop filter not working](https://discuss.elastic.co/t/drop-filter-not-working/55940)
**Author:** [@nishant\_goel](https://discuss.elastic.co/u/nishant_goel)\ **Replies:** 3\ **Last updated:** [July 20, 2016, 9:53pm UTC](https://discuss.elastic.co/t/drop-filter-not-working/55940 "2016-07-20T21:53:05Z")
I have multiple log messages in a file which I am processing using logstash filter plugins. Then, the filtered logs are getting sent to elasticsearch. There is one field called addID in a log message. I want to drop al… --- ## [Logstash 2.1.1 behind ELB](https://discuss.elastic.co/t/logstash-2-1-1-behind-elb/46458)
**Author:** [@digitalageexperts](https://discuss.elastic.co/u/digitalageexperts)\ **Replies:** 3\ **Last updated:** [April 13, 2016, 2:15am UTC](https://discuss.elastic.co/t/logstash-2-1-1-behind-elb/46458 "2016-04-13T02:15:39Z")
We're trying to put a logstash cluster behind an ELB, the server only has logstash on it and is listening to filebeat for input. The issue is there's no port for the ELB to listen to for health check, 5044 (the port we'… --- ## [Kibana failed to load CA: PEM routines:get\_name:no start line](https://discuss.elastic.co/t/kibana-failed-to-load-ca-pem-routinesno-start-line/305228)
**Author:** [@rileghft](https://discuss.elastic.co/u/rileghft)\ **Replies:** 2\ **Last updated:** [May 20, 2022, 7:11pm UTC](https://discuss.elastic.co/t/kibana-failed-to-load-ca-pem-routinesno-start-line/305228 "2022-05-20T19:11:54Z")
I setup an Elasticsearch cluster, and the cluster health is green. Elasticsearch cluster can be reached on kibana server, but kibana failed to start, showing PEM error. Environment: OS: Almalinux 8.6 Kibana version: … --- ## [Elastic Search does not get logs from fluentbit](https://discuss.elastic.co/t/elastic-search-does-not-get-logs-from-fluentbit/289276)
**Author:** [@merveyil](https://discuss.elastic.co/u/merveyil)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 7:11am UTC](https://discuss.elastic.co/t/elastic-search-does-not-get-logs-from-fluentbit/289276 "2021-11-17T07:11:58Z")
Hi, i am newbie on Elasticsearch. I installed Elasticsearch and tried to send logs from fluentbit to elastic. I have script that generates 60 mb logs per minute. I read these logs with fluentbit and try to send them to e… --- ## [Using logstash filters to convert stdin message to be the json written to elasticsearch](https://discuss.elastic.co/t/using-logstash-filters-to-convert-stdin-message-to-be-the-json-written-to-elasticsearch/33821)
**Author:** [@iamthealex](https://discuss.elastic.co/u/iamthealex)\ **Replies:** 2\ **Last updated:** [November 12, 2015, 3:04pm UTC](https://discuss.elastic.co/t/using-logstash-filters-to-convert-stdin-message-to-be-the-json-written-to-elasticsearch/33821 "2015-11-12T15:04:50Z")
Newbie alert. Today is my first day reading through elasticsearch, logstash and kibana. Goal: post a chunked stream of json strings to an http server that converts each json chunk to be the message inserted into elast… --- ## [Auto-configuration of ssl certificate](https://discuss.elastic.co/t/auto-configuration-of-ssl-certificate/300306)
**Author:** [@itsecworks](https://discuss.elastic.co/u/itsecworks)\ **Replies:** 1\ **Last updated:** [March 22, 2022, 10:05am UTC](https://discuss.elastic.co/t/auto-configuration-of-ssl-certificate/300306 "2022-03-22T10:05:30Z")
I dont find the CA private key of the transport layer that has been generated by Elasticsearch at first start. I can find the CA private key of the http layer its in the generated http.p12 file, I would expect the simil… --- ## [Fleet Server - Error - x509: certificate signed by unknown authority](https://discuss.elastic.co/t/fleet-server-error-x509-certificate-signed-by-unknown-authority/283168)
**Author:** [@JimG](https://discuss.elastic.co/u/JimG)\ **Replies:** 1\ **Last updated:** [September 6, 2021, 1:52pm UTC](https://discuss.elastic.co/t/fleet-server-error-x509-certificate-signed-by-unknown-authority/283168 "2021-09-06T13:52:13Z")
Hi everyone :slight\_smile: Im trying to make a test setup with a Ubuntu 20.04 , running with docker. I use docker-compose to make elastic agent/fleet server, but i cant make it work with a self signed certificate for f… --- ## [Problems Migrating to Multiline Codec from Multiline Filter](https://discuss.elastic.co/t/problems-migrating-to-multiline-codec-from-multiline-filter/48727)
**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\ **Replies:** 7\ **Last updated:** [May 23, 2016, 3:02pm UTC](https://discuss.elastic.co/t/problems-migrating-to-multiline-codec-from-multiline-filter/48727 "2016-05-23T15:02:01Z")
I am currently trying to migrate to the multiline codec from the multiline filter because the filter is not thread-safe (I had been experiencing problems with lost log lines due to this). However I've been having a pro… --- ## [Turn messages into fields - querying in kibana](https://discuss.elastic.co/t/turn-messages-into-fields-querying-in-kibana/45259)
**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\ **Replies:** 7\ **Last updated:** [March 23, 2016, 8:20pm UTC](https://discuss.elastic.co/t/turn-messages-into-fields-querying-in-kibana/45259 "2016-03-23T20:20:29Z")
Hello, I am trying to analyze some access and report logs in kibana..I want to be able to query on the message I receive on kibana...Basically I want to turn the messages onto fields to be able to query on them. How can… --- ## [How To: Back-fill Elasticsearch without losing data](https://discuss.elastic.co/t/how-to-back-fill-elasticsearch-without-losing-data/29793)
**Author:** [@cpattonj](https://discuss.elastic.co/u/cpattonj)\ **Replies:** 1\ **Last updated:** [September 22, 2015, 5:41pm UTC](https://discuss.elastic.co/t/how-to-back-fill-elasticsearch-without-losing-data/29793 "2015-09-22T17:41:45Z")
I want to import from my existing log file as a new file input like so to back-fill my old data: input { path =\> \[ '/path\_local\_to\_es/file'\] start\_position =\> 'beginning' } AND Continue to capture the tail of th… --- ## [I/O reactor has been shut down](https://discuss.elastic.co/t/i-o-reactor-has-been-shut-down/134716)
**Author:** [@Ishant\_Agarwal](https://discuss.elastic.co/u/Ishant_Agarwal)\ **Replies:** 0\ **Last updated:** [June 6, 2018, 4:00am UTC](https://discuss.elastic.co/t/i-o-reactor-has-been-shut-down/134716 "2018-06-06T04:00:58Z")
Hi All, My problem is if lot of timeout happens after that I simply keep on getting. java.lang.IllegalStateException: Request cannot be executed; I/O reactor status: STOPPED So basically first I get the following stac… --- ## [Limit number of slices in pie chart](https://discuss.elastic.co/t/limit-number-of-slices-in-pie-chart/260049)
**Author:** [@kasun](https://discuss.elastic.co/u/kasun)\ **Replies:** 5\ **Last updated:** [January 5, 2021, 8:49am UTC](https://discuss.elastic.co/t/limit-number-of-slices-in-pie-chart/260049 "2021-01-05T08:49:17Z")
I have created a pie chart and split the slices using filter aggregation. There are over 5 filters but I want to display only the top 5 values in the pie chart. I can do this if I use the terms as the aggregation. But i… --- ## [Minimal logstash pipeline for beats (6.x)](https://discuss.elastic.co/t/minimal-logstash-pipeline-for-beats-6-x/131729)
**Author:** [@pas](https://discuss.elastic.co/u/pas)\ **Replies:** 5\ **Last updated:** [May 16, 2018, 8:32am UTC](https://discuss.elastic.co/t/minimal-logstash-pipeline-for-beats-6-x/131729 "2018-05-16T08:32:42Z")
Hi, I am currently in the beginning of learning the ELK-stack, so have me excused for asking for the basics. My first goal is to set up a functional beats(winlogbeat and filebeat), logstash, kibana and elasticsearch en… --- ## [Sizing master nodes](https://discuss.elastic.co/t/sizing-master-nodes/21957)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 5\ **Last updated:** [February 4, 2015, 2:17pm UTC](https://discuss.elastic.co/t/sizing-master-nodes/21957 "2015-02-04T14:17:16Z")
Hi I read bunch of things on master nodes etc... So I have some decent machines 4x 32core 128GB RAM and 6x960GB SSDS (RAID 5 so 4.3 TB) So all 4 machines will be data nodes configured to 32GB. I was also think… --- ## [How to display Tenants tab on Kibana?](https://discuss.elastic.co/t/how-to-display-tenants-tab-on-kibana/206749)
**Author:** [@jaytran](https://discuss.elastic.co/u/jaytran)\ **Replies:** 4\ **Last updated:** [November 8, 2019, 12:36am UTC](https://discuss.elastic.co/t/how-to-display-tenants-tab-on-kibana/206749 "2019-11-08T00:36:14Z")
Hi all, I'm new one, currently I want to configure multi-tenancy for my plugin, but I can not find out Tenants tab on kibana?(I'm using elastic/kibana7.1.0). anyone please tell me know how to enable Multi-Tenancy featur… --- ## [PipeLine-\> Filters-\> (tags?)-\> Is it possible to parse message by specific keywords after pattern parsing log message](https://discuss.elastic.co/t/pipeline-filters-tags-is-it-possible-to-parse-message-by-specific-keywords-after-pattern-parsing-log-message/169973)
**Author:** [@DanaDascalu](https://discuss.elastic.co/u/DanaDascalu)\ **Replies:** 4\ **Last updated:** [February 27, 2019, 1:18pm UTC](https://discuss.elastic.co/t/pipeline-filters-tags-is-it-possible-to-parse-message-by-specific-keywords-after-pattern-parsing-log-message/169973 "2019-02-27T13:18:54Z")
Hi, I new to using ELK stack, and need to create dashboards of meaningful data from our log files. Currently i'm using filebeat to read log files, then parsing the messages using LogStash, and later on view the data in… --- ## [Datafeed is encountering errors extracting data](https://discuss.elastic.co/t/datafeed-is-encountering-errors-extracting-data/93064)
**Author:** [@Lean](https://discuss.elastic.co/u/Lean)\ **Replies:** 4\ **Last updated:** [July 18, 2017, 11:43am UTC](https://discuss.elastic.co/t/datafeed-is-encountering-errors-extracting-data/93064 "2017-07-18T11:43:07Z")
Hello all, I created an advanced job in ML to analyze low\_varp anomalies over AZ and EL fields of a sat dish. This is supposed -as far as I understood the concept- to give me a measure of anomalies if variance is lower … --- ## [Searching or filtering on a multi value field](https://discuss.elastic.co/t/searching-or-filtering-on-a-multi-value-field/88364)
**Author:** [@boCyrill](https://discuss.elastic.co/u/boCyrill)\ **Replies:** 4\ **Last updated:** [June 6, 2017, 11:16am UTC](https://discuss.elastic.co/t/searching-or-filtering-on-a-multi-value-field/88364 "2017-06-06T11:16:12Z")
Hello Everyone, I have a MySQL database with a table that contains 2 importants fields title and age\_range. That table saves documents like this 45;60 for documents designed for users between 45 and 60 years old, 18… --- ## [Logstash crashes after failed dns lookup](https://discuss.elastic.co/t/logstash-crashes-after-failed-dns-lookup/55223)
**Author:** [@renevdm](https://discuss.elastic.co/u/renevdm)\ **Replies:** 4\ **Last updated:** [August 4, 2016, 11:24am UTC](https://discuss.elastic.co/t/logstash-crashes-after-failed-dns-lookup/55223 "2016-08-04T11:24:13Z")
Every now and then my logstash crashes randomly. having a look at the logs, it seems to be related to a failed DNS lookup. {:timestamp=\>"2016-07-11T20:30:04.574000+0200", :message=\>"Exception in pipelineworker, the pip… [Previous page](https://discuss.elastic.co/top.md?page=903&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=905&per_page=50&period=all)