# Top **URL:** https://discuss.elastic.co/top.md?page=910&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 911 --- ## [Graph with percent change between bucket](https://discuss.elastic.co/t/graph-with-percent-change-between-bucket/91204)
**Author:** [@matfiz](https://discuss.elastic.co/u/matfiz)\ **Replies:** 1\ **Last updated:** [June 28, 2017, 11:47pm UTC](https://discuss.elastic.co/t/graph-with-percent-change-between-bucket/91204 "2017-06-28T23:47:44Z")
I have an index with Elasticsearch which contains (inter alia) date and weight fields. I create a date histogram with bucket size year and I would like to calculate (in meta-language) sth like: sum(weight\[year\])/sum(weig… --- ## [Mapping for geo\_point-usage not working with twitter input](https://discuss.elastic.co/t/mapping-for-geo-point-usage-not-working-with-twitter-input/24545)
**Author:** [@dominikmueller](https://discuss.elastic.co/u/dominikmueller)\ **Replies:** 1\ **Last updated:** [October 12, 2015, 5:58pm UTC](https://discuss.elastic.co/t/mapping-for-geo-point-usage-not-working-with-twitter-input/24545 "2015-10-12T17:58:12Z")
Hi guys, i set up elasticsearch with kibana and logstash and i would like to analyze some Tweets with it. Currently my configuration looks like this: input { twitter { consumer\_key =\> mykey con… --- ## [How can I do intersection or union operation with two facets filter？](https://discuss.elastic.co/t/how-can-i-do-intersection-or-union-operation-with-two-facets-filter/18503)
**Author:** [@11157](https://discuss.elastic.co/u/11157)\ **Replies:** 2\ **Last updated:** [July 8, 2014, 2:05am UTC](https://discuss.elastic.co/t/how-can-i-do-intersection-or-union-operation-with-two-facets-filter/18503 "2014-07-08T02:05:00Z")
Dear All! I have some docs: {"field\_A":"aaa","field\_B":"bbb"} {"field\_A":"aaa","field\_B":"ccc"} {"field\_A":"bbb","field\_B":"bbb"} {"field\_A":"bbb","field\_B":"bbb"} {"field\_A":"bbb","field\_B":"eee"} {"field\_A":"aaa… --- ## [Cannot read input from file using Logstash](https://discuss.elastic.co/t/cannot-read-input-from-file-using-logstash/235329)
**Author:** [@NITISH\_GUPTA](https://discuss.elastic.co/u/NITISH_GUPTA)\ **Replies:** 8\ **Last updated:** [June 4, 2020, 6:04am UTC](https://discuss.elastic.co/t/cannot-read-input-from-file-using-logstash/235329 "2020-06-04T06:04:54Z")
Logstash is successfully starting and running but there is no update on the elasticsearch cluster. I also tried output to stdout but nothing was displayed. Below is the following config file of logstash. input { file… --- ## [Parsed JSON object/hash requires a target configuration option with json message](https://discuss.elastic.co/t/parsed-json-object-hash-requires-a-target-configuration-option-with-json-message/218472)
**Author:** [@richzw](https://discuss.elastic.co/u/richzw)\ **Replies:** 1\ **Last updated:** [February 9, 2020, 4:06pm UTC](https://discuss.elastic.co/t/parsed-json-object-hash-requires-a-target-configuration-option-with-json-message/218472 "2020-02-09T16:06:54Z")
We met the following warning message as below under logstash 7.3 Parsed JSON object/hash requires a target configuration option {:source=\>"message", :raw=\>"\[{\\"itemBefore\\":0,\\"itemAward\\":1,\\"itemType\\":\\"hint\\"}\]"} a… --- ## [Sleuth and Java APM Agent using the same Trace/Span ids](https://discuss.elastic.co/t/sleuth-and-java-apm-agent-using-the-same-trace-span-ids/191108)
**Author:** [@talenko](https://discuss.elastic.co/u/talenko)\ **Replies:** 1\ **Last updated:** [July 18, 2019, 7:13am UTC](https://discuss.elastic.co/t/sleuth-and-java-apm-agent-using-the-same-trace-span-ids/191108 "2019-07-18T07:13:43Z")
Hello, This might be a vague question, so please bare with me. I am trying to integrate APM with our current distributed tracing stack involving Spring Cloud Sleuth. Essentially, I registered an OpenTracing tracer bean … --- ## [Securing Elasticsearch Could not resolve placeholder](https://discuss.elastic.co/t/securing-elasticsearch-could-not-resolve-placeholder/187040)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 1\ **Last updated:** [June 24, 2019, 12:40pm UTC](https://discuss.elastic.co/t/securing-elasticsearch-could-not-resolve-placeholder/187040 "2019-06-24T12:40:17Z")
Testing TLS integration in a single node Elastic Stack setup. Ive run the following: ./bin/elasticsearch-keystore create ./bin/elasticsearch-keystore add certkey Then added the following lines to elasticsearch.yml xp… --- ## [Logstash connection to Cassandra](https://discuss.elastic.co/t/logstash-connection-to-cassandra/120739)
**Author:** [@jcoughlin](https://discuss.elastic.co/u/jcoughlin)\ **Replies:** 1\ **Last updated:** [February 21, 2018, 11:02pm UTC](https://discuss.elastic.co/t/logstash-connection-to-cassandra/120739 "2018-02-21T23:02:47Z")
I am trying to access a Cassandra database to connect to Elasticsearch/Kibana. I have the latest versions 6.2.1 of all and installed the logstash-input-jdbc I am getting the following error: \[2018-02-20T16:19:47,915\]\[E… --- ## [Unable to query select count(1) \ fails in hive](https://discuss.elastic.co/t/unable-to-query-select-count-1-table-fails-in-hive/52195)
**Author:** [@mohantnr](https://discuss.elastic.co/u/mohantnr)\ **Replies:** 1\ **Last updated:** [March 31, 2017, 5:39pm UTC](https://discuss.elastic.co/t/unable-to-query-select-count-1-table-fails-in-hive/52195 "2017-03-31T17:39:51Z")
OS: : CENTOS 6.5 JVM : java version "1.7.0\_67" Hadoop/Spark: CDH 5.5.x hive-common-1.1.0-cdh5.5.1.jar ES-Hadoop : elasticsearch-hadoop-2.3.2.jar ES : elasticsearch-2.3.3-1.noarch Query works are "Select \* from bel… --- ## [Elasticsearch Integration with Kafka, Zookeeper using filebeat](https://discuss.elastic.co/t/elasticsearch-integration-with-kafka-zookeeper-using-filebeat/74504)
**Author:** [@gauravbhutani30](https://discuss.elastic.co/u/gauravbhutani30)\ **Replies:** 1\ **Last updated:** [February 9, 2017, 3:18pm UTC](https://discuss.elastic.co/t/elasticsearch-integration-with-kafka-zookeeper-using-filebeat/74504 "2017-02-09T15:18:12Z")
Hi Everyone, I am have a Elastic cluster running with nodes spread across multiple datacenters. Now, I have to ensure the data synchronization across the nodes. I came across Kafka which is used to process large data a… --- ## [Remote Cluster Benchmark test run fails to start](https://discuss.elastic.co/t/remote-cluster-benchmark-test-run-fails-to-start/161212)
**Author:** [@ajay\_bh111](https://discuss.elastic.co/u/ajay_bh111)\ **Replies:** 3\ **Last updated:** [December 19, 2018, 3:53pm UTC](https://discuss.elastic.co/t/remote-cluster-benchmark-test-run-fails-to-start/161212 "2018-12-19T15:53:30Z")
ES cluster version 6.5.3. When trying to run benchmarking remote cluster with http\_logs, it fails with error: Command issued, error message, rally.ini and error logs are provided below. Thanks Command to run benchma… --- ## [Loading configmap in k8s has error "exec metricbeat no found"](https://discuss.elastic.co/t/loading-configmap-in-k8s-has-error-exec-metricbeat-no-found/99434)
**Author:** [@Yveseirean](https://discuss.elastic.co/u/Yveseirean)\ **Replies:** 3\ **Last updated:** [September 6, 2017, 11:09am UTC](https://discuss.elastic.co/t/loading-configmap-in-k8s-has-error-exec-metricbeat-no-found/99434 "2017-09-06T11:09:57Z")
I deployed the metricbeat docker on kubernetes, the metricbeat.yml is in configmap. When the pod starts, came across an CrashLoopBackOff error: "/usr/local/bin/docker-entrypoint: line 8: exec: metricbeat: not found" th… --- ## [Winlogbeat - drop\_event (multiple event ID's with specific rules)](https://discuss.elastic.co/t/winlogbeat-drop-event-multiple-event-ids-with-specific-rules/252822)
**Author:** [@0xf](https://discuss.elastic.co/u/0xf)\ **Replies:** 5\ **Last updated:** [October 21, 2020, 2:06pm UTC](https://discuss.elastic.co/t/winlogbeat-drop-event-multiple-event-ids-with-specific-rules/252822 "2020-10-21T14:06:06Z")
Okay so im having a hard time solving this puzzle. Tried almost everything and i cant really solve it by myself, any ideas? So i have 2 event ID's: winlog.event\_id: 4624 winlog.event\_id: 4672 What i want to do is i w… --- ## [Fields values under Metrics Aggregations were rounding to zero in Kibana Line Charts](https://discuss.elastic.co/t/fields-values-under-metrics-aggregations-were-rounding-to-zero-in-kibana-line-charts/113607)
**Author:** [@govinda.rao](https://discuss.elastic.co/u/govinda.rao)\ **Replies:** 5\ **Last updated:** [January 16, 2018, 5:01pm UTC](https://discuss.elastic.co/t/fields-values-under-metrics-aggregations-were-rounding-to-zero-in-kibana-line-charts/113607 "2018-01-16T17:01:25Z")
HI, I need your help, In line chart, Unable to generate lines in Y axis using same fields (processing time & Total delay) values. And X axis should be the Time filed. Please help how to achieve this without using ag… --- ## [How to show data in Local timezone?](https://discuss.elastic.co/t/how-to-show-data-in-local-timezone/169882)
**Author:** [@rohitjejurikar](https://discuss.elastic.co/u/rohitjejurikar)\ **Replies:** 2\ **Last updated:** [February 26, 2019, 2:07am UTC](https://discuss.elastic.co/t/how-to-show-data-in-local-timezone/169882 "2019-02-26T02:07:20Z")
Hello, all of my documents in elastic have @timestamp in UTC. however, while displaying/filtering data in Kibana I wanted to use Eastern time zone? is there any way to do that? Thanks in advance... --- ## [X-pack Watcher service : not able to send the mail](https://discuss.elastic.co/t/x-pack-watcher-service-not-able-to-send-the-mail/89731)
**Author:** [@kiranilla](https://discuss.elastic.co/u/kiranilla)\ **Replies:** 2\ **Last updated:** [June 21, 2017, 6:20am UTC](https://discuss.elastic.co/t/x-pack-watcher-service-not-able-to-send-the-mail/89731 "2017-06-21T06:20:39Z")
For mail configuration i have added the following piece of code in elasticsearch.yml at the end of the file: \> xpack.watcher.enabled: true xpack.notification.email.account: gmail\_account: … --- ## [How to put the aggregation value as query condition](https://discuss.elastic.co/t/how-to-put-the-aggregation-value-as-query-condition/375)
**Author:** [@goupeng212](https://discuss.elastic.co/u/goupeng212)\ **Replies:** 2\ **Last updated:** [May 11, 2015, 3:01am UTC](https://discuss.elastic.co/t/how-to-put-the-aggregation-value-as-query-condition/375 "2015-05-11T03:01:43Z")
I have one request that will calculate the average responsetime of the http request in a range time period. But I need make a filter only to get the ones which response times greater than a specific value. Here is the S… --- ## [LogStash not sending data to ElasticSearch](https://discuss.elastic.co/t/logstash-not-sending-data-to-elasticsearch/268597)
**Author:** [@ritika3799](https://discuss.elastic.co/u/ritika3799)\ **Replies:** 4\ **Last updated:** [March 28, 2021, 4:46pm UTC](https://discuss.elastic.co/t/logstash-not-sending-data-to-elasticsearch/268597 "2021-03-28T16:46:02Z")
input { file{ path =\> "C:/elastic\_stack/\*.csv" start\_position =\> "beginning" sincedb\_path =\> "null" } } filter { csv { separator =\> "," columns =\> \["name","mfr","type","calori… --- ## [Multiple grok pattern from ingest pipeline works but can't see the data in kibana](https://discuss.elastic.co/t/multiple-grok-pattern-from-ingest-pipeline-works-but-cant-see-the-data-in-kibana/103582)
**Author:** [@hungl99](https://discuss.elastic.co/u/hungl99)\ **Replies:** 6\ **Last updated:** [October 12, 2017, 7:27pm UTC](https://discuss.elastic.co/t/multiple-grok-pattern-from-ingest-pipeline-works-but-cant-see-the-data-in-kibana/103582 "2017-10-12T19:27:15Z")
Managed to get simulation works with multiple patterns but can't see the data in kibana. I added two new fields (log.controller & log.controllerMessage to index template. index pattern in kibana shows the 2 new fields b… --- ## [Filebeat.exe high RAM usage!](https://discuss.elastic.co/t/filebeat-exe-high-ram-usage/68071)
**Author:** [@Slava](https://discuss.elastic.co/u/Slava)\ **Replies:** 6\ **Last updated:** [December 14, 2016, 10:22am UTC](https://discuss.elastic.co/t/filebeat-exe-high-ram-usage/68071 "2016-12-14T10:22:00Z")
Original topic - https://discuss.elastic.co/t/filebeat-exe-high-ram-usage/62254 Can anyone advise? Regards, --- ## [Elastic Search Java API implementaion to get No of Hits(First time working on Elastic Search)](https://discuss.elastic.co/t/elastic-search-java-api-implementaion-to-get-no-of-hits-first-time-working-on-elastic-search/230794)
**Author:** [@abhir83](https://discuss.elastic.co/u/abhir83)\ **Replies:** 7\ **Last updated:** [May 3, 2020, 1:01pm UTC](https://discuss.elastic.co/t/elastic-search-java-api-implementaion-to-get-no-of-hits-first-time-working-on-elastic-search/230794 "2020-05-03T13:01:09Z")
Hi I am a Software tester trying to get the Number of Hits through Elastic Search for the first time. I have no idea about Ellastic Search.Please tell me if my approach is correct. Following are the dependencies in pom… --- ## [Exploring logs queuing application with Filebeat](https://discuss.elastic.co/t/exploring-logs-queuing-application-with-filebeat/103744)
**Author:** [@Nishant\_Hurnekar](https://discuss.elastic.co/u/Nishant_Hurnekar)\ **Replies:** 7\ **Last updated:** [October 16, 2017, 7:46am UTC](https://discuss.elastic.co/t/exploring-logs-queuing-application-with-filebeat/103744 "2017-10-16T07:46:40Z")
Hi, Is there any functionality available in Filebeat where filebeat application can send logs to some queuing application. We are exploring such option in Filebeat because our access logs are keep rotating on every 15 … --- ## [Can not install Lumberjack plugin offline on Ubuntu](https://discuss.elastic.co/t/can-not-install-lumberjack-plugin-offline-on-ubuntu/103167)
**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\ **Replies:** 7\ **Last updated:** [October 11, 2017, 11:11am UTC](https://discuss.elastic.co/t/can-not-install-lumberjack-plugin-offline-on-ubuntu/103167 "2017-10-11T11:11:51Z")
Hi, I am trying to install Lumberjack but it errors out, root@elknode2:/opt/logstash# ./bin/logstash-plugin install file:///opt/logstash-input-lumberjack-3.1.3.zip Validating file:///opt/logstash-input-lumberjack-3.1.3… --- ## [Filter empty line with just \\r in it](https://discuss.elastic.co/t/filter-empty-line-with-just-r-in-it/35938)
**Author:** [@pesetskyps](https://discuss.elastic.co/u/pesetskyps)\ **Replies:** 1\ **Last updated:** [November 30, 2015, 6:41pm UTC](https://discuss.elastic.co/t/filter-empty-line-with-just-r-in-it/35938 "2015-11-30T18:41:27Z")
Hi, there is a task to filter out the result with just "\\r" in json represenmtation I tried the following code to filter: if \[Message\] =~ /^\\r$/ { mutate { add\_field =\> { "new\_field" =\> "should be filtered" } } … --- ## [Elasticsearch keeps going into red status, and thinking I have more nodes than I do](https://discuss.elastic.co/t/elasticsearch-keeps-going-into-red-status-and-thinking-i-have-more-nodes-than-i-do/14202)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 7\ **Last updated:** [November 6, 2013, 5:33pm UTC](https://discuss.elastic.co/t/elasticsearch-keeps-going-into-red-status-and-thinking-i-have-more-nodes-than-i-do/14202 "2013-11-06T17:33:57Z")
For some reason, Elasticsearch keeps ending up in red status, and I have to restart to get it working again. As far as I can tell, restarting elasticsearch doesn't loose any data. As I've Googled and troubleshooted my … --- ## [Create an index with everyday GET /\_cat/indices?v](https://discuss.elastic.co/t/create-an-index-with-everyday-get-cat-indices-v/145888)
**Author:** [@lauralacarra](https://discuss.elastic.co/u/lauralacarra)\ **Replies:** 6\ **Last updated:** [September 4, 2018, 2:35am UTC](https://discuss.elastic.co/t/create-an-index-with-everyday-get-cat-indices-v/145888 "2018-09-04T02:35:43Z")
Hi!!!! I would like to create an index with everyday info that returns GET /\_cat/indices?v I don't have a clue how to do it. I am using Kibana for visualization. Thank you!!! --- ## [Calculate time difference between 2 date fields : scripted field](https://discuss.elastic.co/t/calculate-time-difference-between-2-date-fields-scripted-field/248730)
**Author:** [@xyz2](https://discuss.elastic.co/u/xyz2)\ **Replies:** 2\ **Last updated:** [September 15, 2020, 9:04pm UTC](https://discuss.elastic.co/t/calculate-time-difference-between-2-date-fields-scripted-field/248730 "2020-09-15T21:04:28Z")
HI, I need to calculate duration using 2 date fields in watcher API. I tried using painless script and to test using scripted field. But it is errors out stating invalid syntax. What is missing in below ? if (!doc.con… --- ## [Alerts by mail in ELK 7.8.1 stack with basic license](https://discuss.elastic.co/t/alerts-by-mail-in-elk-7-8-1-stack-with-basic-license/243751)
**Author:** [@jelocabral](https://discuss.elastic.co/u/jelocabral)\ **Replies:** 2\ **Last updated:** [August 4, 2020, 8:49pm UTC](https://discuss.elastic.co/t/alerts-by-mail-in-elk-7-8-1-stack-with-basic-license/243751 "2020-08-04T20:49:03Z")
Hi people, I have an ELK 7.8.1 stack with basic license. I heard that in the basic license there is no way to use alerts by emails, this is a feature from a paid license: Is there any way to have email alerts in ELK … --- ## [Elasticsearch NEST query on a list of attachments](https://discuss.elastic.co/t/elasticsearch-nest-query-on-a-list-of-attachments/155619)
**Author:** [@alina.frey](https://discuss.elastic.co/u/alina.frey)\ **Replies:** 2\ **Last updated:** [November 7, 2018, 5:01pm UTC](https://discuss.elastic.co/t/elasticsearch-nest-query-on-a-list-of-attachments/155619 "2018-11-07T17:01:31Z")
Using ingest-attachment plugin. Elasticsearch version: 5.5.1 NEST: 5.5 My goal is to be able to search the Content of a list of documents called PersonDocuments attached to IndexablePersonModel, and return the… --- ## [Change home page (kibana 6.2)](https://discuss.elastic.co/t/change-home-page-kibana-6-2/121693)
**Author:** [@zezz](https://discuss.elastic.co/u/zezz)\ **Replies:** 2\ **Last updated:** [February 28, 2018, 6:57am UTC](https://discuss.elastic.co/t/change-home-page-kibana-6-2/121693 "2018-02-28T06:57:57Z")
I know that lot (most?) of you are in SFO, but let's ask anyway :wink: Is it possible to (easily) change the kibana home that popped in 6.2 (localhost:5601/app/kibana#/home)? thx (have a great 2018 user conf, opening k… --- ## [Posting JSON data to kibana generating validation error](https://discuss.elastic.co/t/posting-json-data-to-kibana-generating-validation-error/35521)
**Author:** [@henil\_shah](https://discuss.elastic.co/u/henil_shah)\ **Replies:** 2\ **Last updated:** [November 25, 2015, 8:44pm UTC](https://discuss.elastic.co/t/posting-json-data-to-kibana-generating-validation-error/35521 "2015-11-25T20:44:01Z")
{ "error" : { "root\_cause" : \[ { "type" : "action\_request\_validation\_exception", "reason" : "Validation Failed: 1: no requests added;" } \], "type" : "action\_request\_validation\_exception", "r… --- ## [Erreur de démarrage Elasticsearch Ubuntu 15.04](https://discuss.elastic.co/t/erreur-de-demarrage-elasticsearch-ubuntu-15-04/23914)
**Author:** [@camilleabd](https://discuss.elastic.co/u/camilleabd)\ **Replies:** 2\ **Last updated:** [June 18, 2015, 7:03pm UTC](https://discuss.elastic.co/t/erreur-de-demarrage-elasticsearch-ubuntu-15-04/23914 "2015-06-18T19:03:51Z")
Bonjour, J'essaye d'installer elasticsearch 1.6 sur une ubuntu mais le service ne démarre pas \[smiley\] Lorsque je fait un status du service : service elasticsearch status juin 18 14:24:36 monip systemd\[1\]: elasticsea… --- ## [Document lost or not indexed during bulk index](https://discuss.elastic.co/t/document-lost-or-not-indexed-during-bulk-index/236795)
**Author:** [@nerd2000](https://discuss.elastic.co/u/nerd2000)\ **Replies:** 3\ **Last updated:** [June 25, 2020, 9:23am UTC](https://discuss.elastic.co/t/document-lost-or-not-indexed-during-bulk-index/236795 "2020-06-25T09:23:09Z")
Hi, Here's the context: I have a database with 1.5M rows of data with unique ids The elastic cluster has 3 nodes on elasticsearch 7.7 The index has 9 shards with1 replica I have a python script that get the data from… --- ## [Logstash java.lang.OutOfMemoryError when reading yml file](https://discuss.elastic.co/t/logstash-java-lang-outofmemoryerror-when-reading-yml-file/146014)
**Author:** [@blueren](https://discuss.elastic.co/u/blueren)\ **Replies:** 3\ **Last updated:** [August 27, 2018, 6:01pm UTC](https://discuss.elastic.co/t/logstash-java-lang-outofmemoryerror-when-reading-yml-file/146014 "2018-08-27T18:01:48Z")
I'm currently running logstash with elastiflow configured within a docker container. When logstash starts up, it attemps to read from ip\_rep\_basic.yml which is approx 48MB and 1559862 lines long. Logstash seems to get … --- ## [Problem launching Elasticsearch](https://discuss.elastic.co/t/problem-launching-elasticsearch/127737)
**Author:** [@soumya\_sahoo](https://discuss.elastic.co/u/soumya_sahoo)\ **Replies:** 1\ **Last updated:** [April 12, 2018, 6:03am UTC](https://discuss.elastic.co/t/problem-launching-elasticsearch/127737 "2018-04-12T06:03:53Z")
I get the following error log while launching elasticsearch. C:\\Users\\ssahoo\\Downloads\\elasticsearch-6.2.3\\bin\>elasticsearch \[2018-04-12T11:08:52,520\]\[INFO \]\[o.e.n.Node \] \[\] initializing ... \[2018-04-12T… --- ## [How to pass null filter in elastic search + PHP](https://discuss.elastic.co/t/how-to-pass-null-filter-in-elastic-search-php/106172)
**Author:** [@sanjay25](https://discuss.elastic.co/u/sanjay25)\ **Replies:** 1\ **Last updated:** [November 20, 2017, 7:38pm UTC](https://discuss.elastic.co/t/how-to-pass-null-filter-in-elastic-search-php/106172 "2017-11-20T19:38:34Z")
I want to filter search result. I want to search that if 'manuf\_id' is not specified than is should return all records. I also want to put AND condition in term. below is my search query in elastic. below is my code. $… --- ## [RUM agent for angular application not capturing page clicks events](https://discuss.elastic.co/t/rum-agent-for-angular-application-not-capturing-page-clicks-events/281525)
**Author:** [@pathfinder225](https://discuss.elastic.co/u/pathfinder225)\ **Replies:** 5\ **Last updated:** [August 19, 2021, 5:02pm UTC](https://discuss.elastic.co/t/rum-agent-for-angular-application-not-capturing-page-clicks-events/281525 "2021-08-19T17:02:49Z")
Hi We are trying out RUM agent for our angular web application Angular 10 applicaiton configured by adding script tag in the index.html of our SPA. We are checking the metrics being recorded and noticed that total page… --- ## [Display data with the latest date](https://discuss.elastic.co/t/display-data-with-the-latest-date/266196)
**Author:** [@jazzdorf](https://discuss.elastic.co/u/jazzdorf)\ **Replies:** 5\ **Last updated:** [March 8, 2021, 9:54pm UTC](https://discuss.elastic.co/t/display-data-with-the-latest-date/266196 "2021-03-08T21:54:04Z")
Hi, I'm new to Kibana and I'm trying out some things. Now, I have some dummy data set and I want to filter for some data by a query. How can I get a count for the latest date where data exists? I'm using a metric visu… --- ## [Logstash re-read full log after restart](https://discuss.elastic.co/t/logstash-re-read-full-log-after-restart/259796)
**Author:** [@msk\_76](https://discuss.elastic.co/u/msk_76)\ **Replies:** 5\ **Last updated:** [December 29, 2020, 5:33pm UTC](https://discuss.elastic.co/t/logstash-re-read-full-log-after-restart/259796 "2020-12-29T17:33:03Z")
I am facing an issue with logstash that it read the log from begin even after it has loaded the log file already. It happens only when i restart the logstash. Inside the .sincedb file the contents are : 1149101767 0 38 … --- ## [Dynamic Parsing with Grok](https://discuss.elastic.co/t/dynamic-parsing-with-grok/164295)
**Author:** [@HugoSousa](https://discuss.elastic.co/u/HugoSousa)\ **Replies:** 5\ **Last updated:** [January 16, 2019, 9:13am UTC](https://discuss.elastic.co/t/dynamic-parsing-with-grok/164295 "2019-01-16T09:13:30Z")
Hi I have the following log file sample: #Version: 1.0 #Fields: s-dns date time x-duration c-ip c-port c-vx-zone ac1.lg9ams1d1.cdn 2019-01-14 05:00:01 0.001 172.30.116.146 46684 … --- ## [Alerts on Missing heartbeats](https://discuss.elastic.co/t/alerts-on-missing-heartbeats/156556)
**Author:** [@jpresley](https://discuss.elastic.co/u/jpresley)\ **Replies:** 5\ **Last updated:** [November 15, 2018, 1:25am UTC](https://discuss.elastic.co/t/alerts-on-missing-heartbeats/156556 "2018-11-15T01:25:42Z")
We would like to alert when there is a heartbeat missing in our logs and we would like to create a visualization for the status of our connections. We know a heartbeat is successful when we log a string in our logs. Ther… --- ## [Is X\_Pack free license applicable for enterprises?](https://discuss.elastic.co/t/is-x-pack-free-license-applicable-for-enterprises/70265)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 5\ **Last updated:** [January 13, 2017, 6:57pm UTC](https://discuss.elastic.co/t/is-x-pack-free-license-applicable-for-enterprises/70265 "2017-01-13T18:57:46Z")
Hi, I would like to know if X-Pack free licensing (monitoring only) is applicable for both personal and enterprise production use. Thanks. --- ## [Logstash Input Eventlog](https://discuss.elastic.co/t/logstash-input-eventlog/66364)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 5\ **Last updated:** [November 18, 2016, 7:47am UTC](https://discuss.elastic.co/t/logstash-input-eventlog/66364 "2016-11-18T07:47:28Z")
Hi everyone, I have a trouble with Input Eventlog with Logstash 2.3.4 in Windows 2008 R2. My configuration: input { eventlog { type =\> "test" logfile =\> "Test Application Log" } } I am trying to obtain Test App… --- ## [关于Elasticsearch nightly benchmarks](https://discuss.elastic.co/t/elasticsearch-nightly-benchmarks/54020)
**Author:** [@jerry](https://discuss.elastic.co/u/jerry)\ **Replies:** 5\ **Last updated:** [July 21, 2016, 5:57am UTC](https://discuss.elastic.co/t/elasticsearch-nightly-benchmarks/54020 "2016-07-21T05:57:49Z")
怎么看出来测试的是那个版本？ https://benchmarks.elastic.co/index.html --- ## [Fastest way to extract \_id + fielddata](https://discuss.elastic.co/t/fastest-way-to-extract--id-fielddata/51241)
**Author:** [@Jacket](https://discuss.elastic.co/u/Jacket)\ **Replies:** 5\ **Last updated:** [May 30, 2016, 8:29am UTC](https://discuss.elastic.co/t/fastest-way-to-extract--id-fielddata/51241 "2016-05-30T08:29:44Z")
Hello, I have a cluster running on 3 nodes, each with 64GB RAM and 3TB of SSD storage. There's one index with the following properties: 20 shards 1 replica 8.3 billion documents 2.96TB only in primary shards (5.92TB… --- ## [Logstash- transfrom multiple log lines to one line](https://discuss.elastic.co/t/logstash-transfrom-multiple-log-lines-to-one-line/43376)
**Author:** [@Atul\_Patel](https://discuss.elastic.co/u/Atul_Patel)\ **Replies:** 5\ **Last updated:** [March 3, 2016, 12:46pm UTC](https://discuss.elastic.co/t/logstash-transfrom-multiple-log-lines-to-one-line/43376 "2016-03-03T12:46:16Z")
I have a situation where I am getting logs from forwarder in the below format: timestamp \ entry: ProcessAPI{AddEmployee} :hostname timestamp \ send: UserAPI{ValidateUser} :hostname timestamp \ **Author:** [@Ask\_Bjorn\_Hansen](https://discuss.elastic.co/u/Ask_Bjorn_Hansen)\ **Replies:** 4\ **Last updated:** [July 9, 2012, 11:13pm UTC](https://discuss.elastic.co/t/multi-datacenter-deployments/5039 "2012-07-09T23:13:32Z") Hi everyone, We're working on making one of our ES using applications run in multiple data centers (active/passive for now). The other data stores we have can replicate seamlessly and have some idea of "local" … --- ## [Why is my composite aggregation faster than a terms bucket aggregation for a high cardinality field?](https://discuss.elastic.co/t/why-is-my-composite-aggregation-faster-than-a-terms-bucket-aggregation-for-a-high-cardinality-field/230324)
**Author:** [@gideongrossman](https://discuss.elastic.co/u/gideongrossman)\ **Replies:** 0\ **Last updated:** [April 29, 2020, 7:32am UTC](https://discuss.elastic.co/t/why-is-my-composite-aggregation-faster-than-a-terms-bucket-aggregation-for-a-high-cardinality-field/230324 "2020-04-29T07:32:24Z")
I am creating a terms aggregation on a high cardinality field. It takes 4 seconds. That's too long. I notice that if I restructure the query as a composite aggregation, it takes way less time ~400ms. Why might this be? C… --- ## [Need assistance on setting up elastic search in PROD like environment](https://discuss.elastic.co/t/need-assistance-on-setting-up-elastic-search-in-prod-like-environment/66984)
**Author:** [@vinaykumar](https://discuss.elastic.co/u/vinaykumar)\ **Replies:** 0\ **Last updated:** [November 23, 2016, 2:04pm UTC](https://discuss.elastic.co/t/need-assistance-on-setting-up-elastic-search-in-prod-like-environment/66984 "2016-11-23T14:04:15Z")
Hi Team, I am a .NET developer and completely fell in love with Elasticsearch because of its performance. I downloaded elastic search and posted 100K records to elastic search. I used postman to query the data. Now i… --- ## [Adjust max\_header\_size because search fails if header exceeds 8kb](https://discuss.elastic.co/t/adjust-max-header-size-because-search-fails-if-header-exceeds-8kb/340458)
**Author:** [@ismaelalt](https://discuss.elastic.co/u/ismaelalt)\ **Replies:** 6\ **Last updated:** [September 18, 2023, 10:29am UTC](https://discuss.elastic.co/t/adjust-max-header-size-because-search-fails-if-header-exceeds-8kb/340458 "2023-09-18T10:29:21Z")
Hi, Question: Is there a way to adjust the parameter http.max\_header\_size (doc) from Elastic cloud? Context: I am using Elasticsearch through App Search. When I perform a search request with header exceeding 8kb, I … [Previous page](https://discuss.elastic.co/top.md?page=909&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=911&per_page=50&period=all)