# Top **URL:** https://discuss.elastic.co/top.md?page=912&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 913 --- ## [How to remove /n characters from index](https://discuss.elastic.co/t/how-to-remove-n-characters-from-index/153828)
**Author:** [@anveshdd](https://discuss.elastic.co/u/anveshdd)\ **Replies:** 3\ **Last updated:** [October 24, 2018, 4:17pm UTC](https://discuss.elastic.co/t/how-to-remove-n-characters-from-index/153828 "2018-10-24T16:17:38Z")
Hi, I am working on ES 6.3.X and I am using a external web crawler to crawl the data and when I check the index it has a lot of new line characters. Is there any suggestions to avoid the new line characters. … --- ## [GROK pattern to collect whole exception stacktrace](https://discuss.elastic.co/t/grok-pattern-to-collect-whole-exception-stacktrace/208295)
**Author:** [@gyana\_nayak](https://discuss.elastic.co/u/gyana_nayak)\ **Replies:** 1\ **Last updated:** [November 19, 2019, 3:45pm UTC](https://discuss.elastic.co/t/grok-pattern-to-collect-whole-exception-stacktrace/208295 "2019-11-19T15:45:11Z")
Hi All, Below config file not capturing complete stacktrace, it is only collecting single line. Any suggestion how can collect whole stacktrace. filter { #If log line contains tab character followed by 'at' then… --- ## [Unable to integrate Spark on EMR with Amazon ELasticsearch](https://discuss.elastic.co/t/unable-to-integrate-spark-on-emr-with-amazon-elasticsearch/73071)
**Author:** [@RuchikaAWS](https://discuss.elastic.co/u/RuchikaAWS)\ **Replies:** 1\ **Last updated:** [February 2, 2017, 7:53pm UTC](https://discuss.elastic.co/t/unable-to-integrate-spark-on-emr-with-amazon-elasticsearch/73071 "2017-02-02T19:53:01Z")
I have tried several different way and I am not able to get a Spark 2.0 cluster interact with Amazon Elasticsearch cluster using ES-Hadoop (recent version 5.1.2). Please check the settings and see if you can spot anythin… --- ## [FQDN for whitelisting in firewall for pulling filebeat docker image](https://discuss.elastic.co/t/fqdn-for-whitelisting-in-firewall-for-pulling-filebeat-docker-image/238069)
**Author:** [@manav](https://discuss.elastic.co/u/manav)\ **Replies:** 0\ **Last updated:** [June 22, 2020, 10:55am UTC](https://discuss.elastic.co/t/fqdn-for-whitelisting-in-firewall-for-pulling-filebeat-docker-image/238069 "2020-06-22T10:55:02Z")
Hi All, I'm trying to deploy filebeat docker image in an network restricting egress traffic. The outbound traffic of the network is locked down to only allowed domains. I'm going to pull filebeat docker official reposi… --- ## [Visualize two time series with nested objects](https://discuss.elastic.co/t/visualize-two-time-series-with-nested-objects/284171)
**Author:** [@maccn](https://discuss.elastic.co/u/maccn)\ **Replies:** 6\ **Last updated:** [September 15, 2021, 9:18am UTC](https://discuss.elastic.co/t/visualize-two-time-series-with-nested-objects/284171 "2021-09-15T09:18:40Z")
Hello everyone, I am trying to visualize two time series in Kibana reading the data from Elasticsearch. The structure of my document is the following: { "sensorName": "Sensor1", "values": \[ { "feature": … --- ## [Visualizing count differences](https://discuss.elastic.co/t/visualizing-count-differences/199331)
**Author:** [@wfaulk-bw](https://discuss.elastic.co/u/wfaulk-bw)\ **Replies:** 6\ **Last updated:** [September 26, 2019, 3:17pm UTC](https://discuss.elastic.co/t/visualizing-count-differences/199331 "2019-09-26T15:17:34Z")
I have a visualization that is showing me the top 25 clients for a particular DNS query. I'm interested in clients that are preferring one of our DNS servers over the other, so right now, I just have a Split Series, spli… --- ## [getting UnavailableShardsException on PUT, and NoShardAvailableActionException on Get](https://discuss.elastic.co/t/getting-unavailableshardsexception-on-put-and-noshardavailableactionexception-on-get/8675)
**Author:** [@ryaker](https://discuss.elastic.co/u/ryaker)\ **Replies:** 6\ **Last updated:** [August 8, 2012, 4:57pm UTC](https://discuss.elastic.co/t/getting-unavailableshardsexception-on-put-and-noshardavailableactionexception-on-get/8675 "2012-08-08T16:57:31Z")
--- ## [How to solve hard and soft limit machine learning jobs](https://discuss.elastic.co/t/how-to-solve-hard-and-soft-limit-machine-learning-jobs/268933)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 2\ **Last updated:** [April 1, 2021, 9:28am UTC](https://discuss.elastic.co/t/how-to-solve-hard-and-soft-limit-machine-learning-jobs/268933 "2021-04-01T09:28:18Z")
Hello; I have created a machine learning job to detect port scanner using the packetbeat-\* index. type of job: Population Population field: destination.ip metric: distinct count(destination port) influencers: destin… --- ## [Canvas Pie chart](https://discuss.elastic.co/t/canvas-pie-chart/171958)
**Author:** [@fedwe](https://discuss.elastic.co/u/fedwe)\ **Replies:** 2\ **Last updated:** [March 13, 2019, 8:03am UTC](https://discuss.elastic.co/t/canvas-pie-chart/171958 "2019-03-13T08:03:44Z")
I want to add a pie chart to the canvas, i added the same one to the dashboard. First problem is that it is ignoring small values for example 80000 to 50, the 50 doesn't appear on the chart or even the label. My second… --- ## [문서의 revision 관리 문제입니다. (es의 revision이 아닙니다.)](https://discuss.elastic.co/t/revision-es-revision/24525)
**Author:** [@11185](https://discuss.elastic.co/u/11185)\ **Replies:** 2\ **Last updated:** [June 30, 2015, 8:59am UTC](https://discuss.elastic.co/t/revision-es-revision/24525 "2015-06-30T08:59:17Z")
es에서는 문서의 history 기능을 지원하지 않는걸로 알고 있습니다. 그래서 직업 구현하려 합니다. {:\_id 1 :docid 1 :name jh1 :my-rev 1} \[:\_id 2 :docid 1 :name jh2 :my-rev 2} \[:\_id 3 :docid 3 :name park :my-rev 1} \_id1의 내용을 변경해서 \_id2를 새로 만들었습니다. 문서는 총 3개가 E… --- ## [Filebeat container is starting listening UDP need to change to TCP](https://discuss.elastic.co/t/filebeat-container-is-starting-listening-udp-need-to-change-to-tcp/156908)
**Author:** [@Ranjith\_M](https://discuss.elastic.co/u/Ranjith_M)\ **Replies:** 4\ **Last updated:** [November 20, 2018, 10:49am UTC](https://discuss.elastic.co/t/filebeat-container-is-starting-listening-udp-need-to-change-to-tcp/156908 "2018-11-20T10:49:41Z")
Filebeat Version : 6.5 We need to know how can configure the haproxy module for filebeat . Currently the filebeat container is starting listening UDP connections in localhost:9001, we need to know how change the protoco… --- ## [Multi-tenant design](https://discuss.elastic.co/t/multi-tenant-design/268278)
**Author:** [@abhishekc92](https://discuss.elastic.co/u/abhishekc92)\ **Replies:** 7\ **Last updated:** [March 25, 2021, 5:07am UTC](https://discuss.elastic.co/t/multi-tenant-design/268278 "2021-03-25T05:07:20Z")
Hi, I'm currently in the process of designing a multi-tenant indexing strategy for my system. I'm generally aware of the approaches commonly used in such cases - Index per tenant Shared index across tenants Some variat… --- ## [How to improve the speed of Logstash output to Elasticsearch?](https://discuss.elastic.co/t/how-to-improve-the-speed-of-logstash-output-to-elasticsearch/206254)
**Author:** [@StruggleYang](https://discuss.elastic.co/u/StruggleYang)\ **Replies:** 7\ **Last updated:** [November 3, 2019, 10:10am UTC](https://discuss.elastic.co/t/how-to-improve-the-speed-of-logstash-output-to-elasticsearch/206254 "2019-11-03T10:10:46Z")
I have a lot of application logs to collect, and data conversion is like, filebeat =\> kafka =\> logstash =\> elasticsearch ,Everything is smooth, But sometimes the application log will suddenly increase, such as when the u… --- ## [IllegalArgumentException - DocValuesField appears more than once in this document](https://discuss.elastic.co/t/illegalargumentexception-docvaluesfield-appears-more-than-once-in-this-document/42538)
**Author:** [@mpowers](https://discuss.elastic.co/u/mpowers)\ **Replies:** 1\ **Last updated:** [March 8, 2016, 9:28am UTC](https://discuss.elastic.co/t/illegalargumentexception-docvaluesfield-appears-more-than-once-in-this-document/42538 "2016-03-08T09:28:55Z")
I am seeing a strange problem. I am running Elasticsearch version 1.7.5. I have created a mapping: { "ali-development": { "mappings": { "lead": { "dynamic": "false", "propertie… --- ## [Multiple Logstash Docker containers sharing an S3 input](https://discuss.elastic.co/t/multiple-logstash-docker-containers-sharing-an-s3-input/36077)
**Author:** [@Paul\_Kavanagh](https://discuss.elastic.co/u/Paul_Kavanagh)\ **Replies:** 1\ **Last updated:** [December 1, 2015, 6:01pm UTC](https://discuss.elastic.co/t/multiple-logstash-docker-containers-sharing-an-s3-input/36077 "2015-12-01T18:01:30Z")
This is one of those "I can't be the first one" kinda questions. We're running Logstash server in Docker. We run anywhere between 3 and 6, depending on the logging volume. Our current input is just a Redis box (Elastic… --- ## [Uneven load distribution for search](https://discuss.elastic.co/t/uneven-load-distribution-for-search/144742)
**Author:** [@stimur](https://discuss.elastic.co/u/stimur)\ **Replies:** 5\ **Last updated:** [August 17, 2018, 2:59am UTC](https://discuss.elastic.co/t/uneven-load-distribution-for-search/144742 "2018-08-17T02:59:31Z")
Hello! I have weird issue after migrating from 2.4 to 6.3. My cluster consists of 10 nodes: 3 master nodes, (m3.medium, 1CPU/4GB RAM) 3 client nodes running ES, Logstash and Kibana. (c5.xlarge 4xCPU/8GB RAM) 4 data … --- ## [How to prevent other nodes from joining my cluster?](https://discuss.elastic.co/t/how-to-prevent-other-nodes-from-joining-my-cluster/326096)
**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\ **Replies:** 3\ **Last updated:** [February 21, 2023, 7:25pm UTC](https://discuss.elastic.co/t/how-to-prevent-other-nodes-from-joining-my-cluster/326096 "2023-02-21T19:25:02Z")
How can I prevent other elasticsearch nodes from joining my cluster. Let's say I initiate a single node elastic cluster like this: (Notice I am using letsencrypt ssl certificates) cluster.initial\_master\_nodes: \["node1… --- ## [Filebeat template with authentication](https://discuss.elastic.co/t/filebeat-template-with-authentication/124989)
**Author:** [@tommy.walker](https://discuss.elastic.co/u/tommy.walker)\ **Replies:** 2\ **Last updated:** [March 22, 2018, 8:57pm UTC](https://discuss.elastic.co/t/filebeat-template-with-authentication/124989 "2018-03-22T20:57:39Z")
I have just stood up separate elastic, logstash and kibana servers. All running 6.2. I have filebeats 6.2 running on windows 2016 server running iis v10. I have the iis logs successfully sending to logstash and i can s… --- ## [Java errors on Kibana dashboard load](https://discuss.elastic.co/t/java-errors-on-kibana-dashboard-load/39276)
**Author:** [@lallen](https://discuss.elastic.co/u/lallen)\ **Replies:** 2\ **Last updated:** [January 14, 2016, 9:35pm UTC](https://discuss.elastic.co/t/java-errors-on-kibana-dashboard-load/39276 "2016-01-14T21:35:00Z")
The issue is with Kibana not loading content in the page, but the errors come from ElasticSearch's logs. CentOS 7 machine Kibana: - version 4.2.1 - Unpacked to /opt/kibana4 - systemd service enabled ElasticSe… --- ## [How to take "average count on a field" as a metric?](https://discuss.elastic.co/t/how-to-take-average-count-on-a-field-as-a-metric/601)
**Author:** [@huangyg11](https://discuss.elastic.co/u/huangyg11)\ **Replies:** 2\ **Last updated:** [May 15, 2015, 5:53am UTC](https://discuss.elastic.co/t/how-to-take-average-count-on-a-field-as-a-metric/601 "2015-05-15T05:53:37Z")
My records look like this: ( uri, uniqid) Each records represents one database visit in a specific request on the uri. For example: (/home, 1) (/home, 1) (/home, 2) means A request on /home , and visit twice on … --- ## [How to dump last 15 minutes of logstash data from elasticsearch?](https://discuss.elastic.co/t/how-to-dump-last-15-minutes-of-logstash-data-from-elasticsearch/16976)
**Author:** [@nyaqua](https://discuss.elastic.co/u/nyaqua)\ **Replies:** 2\ **Last updated:** [April 21, 2014, 2:32pm UTC](https://discuss.elastic.co/t/how-to-dump-last-15-minutes-of-logstash-data-from-elasticsearch/16976 "2014-04-21T14:32:01Z")
Greetings all, I'm a novice elasticsearch user (I've recently begun monitoring a cluster with logstash, elasticsearch and kibana. I'd like to be able, via cron, to dump the last 15 minutes of logging data received… --- ## [Hierarchical topology in Kibana Graph - Is it possible to construct a hierarchical topology?](https://discuss.elastic.co/t/hierarchical-topology-in-kibana-graph-is-it-possible-to-construct-a-hierarchical-topology/321522)
**Author:** [@Dimple.P](https://discuss.elastic.co/u/Dimple.P)\ **Replies:** 2\ **Last updated:** [December 19, 2022, 8:46am UTC](https://discuss.elastic.co/t/hierarchical-topology-in-kibana-graph-is-it-possible-to-construct-a-hierarchical-topology/321522 "2022-12-19T08:46:35Z")
Is it possible to construct a hierarchical topology, and if so, how do users pass data for that? --- ## [Composite aggregations track\_total\_hits](https://discuss.elastic.co/t/composite-aggregations-track-total-hits/180500)
**Author:** [@klaus82](https://discuss.elastic.co/u/klaus82)\ **Replies:** 2\ **Last updated:** [May 12, 2019, 1:07pm UTC](https://discuss.elastic.co/t/composite-aggregations-track-total-hits/180500 "2019-05-12T13:07:44Z")
Hi all, For me is not clear what are the differences and when use: track\_total\_hits, search.max\_buckets and size in particular for composite aggregations. Can someone help? Thanks in advance --- ## [Spring Boot with Native Query does not return Nested Objects](https://discuss.elastic.co/t/spring-boot-with-native-query-does-not-return-nested-objects/267565)
**Author:** [@Philip2020](https://discuss.elastic.co/u/Philip2020)\ **Replies:** 1\ **Last updated:** [March 17, 2021, 7:17pm UTC](https://discuss.elastic.co/t/spring-boot-with-native-query-does-not-return-nested-objects/267565 "2021-03-17T19:17:47Z")
Hi There, Fairly new to ES and I'm hoping someone can help me and stop me from pulling my hair out :slight\_smile: I have a fairly basic Rest API which allows users to store college projects details, once created I stor… --- ## [How to transform indexed fields that appear in UTF-8 to unicode?](https://discuss.elastic.co/t/how-to-transform-indexed-fields-that-appear-in-utf-8-to-unicode/154756)
**Author:** [@abuameen](https://discuss.elastic.co/u/abuameen)\ **Replies:** 1\ **Last updated:** [October 31, 2018, 9:03am UTC](https://discuss.elastic.co/t/how-to-transform-indexed-fields-that-appear-in-utf-8-to-unicode/154756 "2018-10-31T09:03:30Z")
Hi, were using Bro IDS with elastic-search and kafka. however some indexed fields are in arabic but they appear in a utf-8 format like this. قس٠التعيين - إدارة الإختيار والتعيين is ther… --- ## [Elasticsearch timezone issue](https://discuss.elastic.co/t/elasticsearch-timezone-issue/40658)
**Author:** [@Rahul](https://discuss.elastic.co/u/Rahul)\ **Replies:** 1\ **Last updated:** [February 4, 2016, 4:22pm UTC](https://discuss.elastic.co/t/elasticsearch-timezone-issue/40658 "2016-02-04T16:22:09Z")
We are facing one time zone issue which is impacting all our Kibana dashboards and visualizations where Kibana as well uses query string query for the time we choose on upper right corner using "now" keyword. After dri… --- ## [Metricbeat - Socket summary TCP established filtered by port](https://discuss.elastic.co/t/metricbeat-socket-summary-tcp-established-filtered-by-port/275902)
**Author:** [@IT\_Sniper](https://discuss.elastic.co/u/IT_Sniper)\ **Replies:** 8\ **Last updated:** [June 18, 2021, 4:41pm UTC](https://discuss.elastic.co/t/metricbeat-socket-summary-tcp-established-filtered-by-port/275902 "2021-06-18T16:41:30Z")
Hello everyone, I have a ELK stack server which receives metrics from several servers, but one of them has a specific application that listens on port TCP/8443. Im aware of the system module of Metricbeats, which suppor… --- ## [Conditional update based on priority in Elasticsearch](https://discuss.elastic.co/t/conditional-update-based-on-priority-in-elasticsearch/262036)
**Author:** [@Ahmed\_Sharara](https://discuss.elastic.co/u/Ahmed_Sharara)\ **Replies:** 8\ **Last updated:** [January 25, 2021, 4:15am UTC](https://discuss.elastic.co/t/conditional-update-based-on-priority-in-elasticsearch/262036 "2021-01-25T04:15:54Z")
Hello, I'm using logstash to index data from Kafka to Elasticsearch. There are multiple events with the same id. I'm using upsert in logstash to update existing documents with the new values based on the \_id. sample in… --- ## [Elastic-Agent enrollment problem](https://discuss.elastic.co/t/elastic-agent-enrollment-problem/246426)
**Author:** [@bernhard.fluehmann](https://discuss.elastic.co/u/bernhard.fluehmann)\ **Replies:** 8\ **Last updated:** [August 31, 2020, 6:17pm UTC](https://discuss.elastic.co/t/elastic-agent-enrollment-problem/246426 "2020-08-31T18:17:49Z")
I am trying to test elastic-agent and ingest-mangement, unfortunately without success so far. The agent is installed on linux machines (centos-7/8) and enrolled like described in the manuals. The agents show up in kiba… --- ## [Reduce the amount of shards of index (Elasticsearch)](https://discuss.elastic.co/t/reduce-the-amount-of-shards-of-index-elasticsearch/178109)
**Author:** [@zolthar-z](https://discuss.elastic.co/u/zolthar-z)\ **Replies:** 8\ **Last updated:** [May 23, 2019, 7:16pm UTC](https://discuss.elastic.co/t/reduce-the-amount-of-shards-of-index-elasticsearch/178109 "2019-05-23T19:16:53Z")
Hi All Right now I have a elk configuration where filebeat send logs to logstash and logstash applied a filter and send the information to elasticsearch, this configurations is generating to many shards on each index an… --- ## [How do I implement exact full text search on an index created by fscrawler](https://discuss.elastic.co/t/how-do-i-implement-exact-full-text-search-on-an-index-created-by-fscrawler/206617)
**Author:** [@Denn](https://discuss.elastic.co/u/Denn)\ **Replies:** 6\ **Last updated:** [November 6, 2019, 1:39pm UTC](https://discuss.elastic.co/t/how-do-i-implement-exact-full-text-search-on-an-index-created-by-fscrawler/206617 "2019-11-06T13:39:59Z")
I have an index that I created with fscrawler... How do I do a full text search on the content so that it matches words exactly even the cases? if ($q2 == '') { $params = \[ 'index' =\> 'trial2', 'body' =\> \[ 'quer… --- ## [No graph/response after search](https://discuss.elastic.co/t/no-graph-response-after-search/49165)
**Author:** [@xyz1](https://discuss.elastic.co/u/xyz1)\ **Replies:** 6\ **Last updated:** [May 5, 2016, 8:41am UTC](https://discuss.elastic.co/t/no-graph-response-after-search/49165 "2016-05-05T08:41:12Z")
Getting no result after searching for a term. --- ## [How can I migrate my v6 dashboards to v7](https://discuss.elastic.co/t/how-can-i-migrate-my-v6-dashboards-to-v7/218587)
**Author:** [@stephen.palfreyman](https://discuss.elastic.co/u/stephen.palfreyman)\ **Replies:** 4\ **Last updated:** [February 10, 2020, 5:15pm UTC](https://discuss.elastic.co/t/how-can-i-migrate-my-v6-dashboards-to-v7/218587 "2020-02-10T17:15:01Z")
In kibana 6.8.0 saved visualizations have an element called uiStateJSON, which has been deprecated in kibana 7 (in https://github.com/elastic/kibana/issues/15204 & https://github.com/elastic/kibana/pull/14949). However,… --- ## [Logstash geoip](https://discuss.elastic.co/t/logstash-geoip/101255)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 4\ **Last updated:** [September 21, 2017, 12:23pm UTC](https://discuss.elastic.co/t/logstash-geoip/101255 "2017-09-21T12:23:30Z")
Hello, I am trying to get the geoip working with my firewall Logstash config, relevant part udp { tags =\> "cisco-asa" type =\> "cisco-asa" port =\> 5047 } geoip { source =\> "dst\_ip" target =\> "ge… --- ## [\[Logstash\] sincedbファイルに unknown 履歴が挿入されることに関して](https://discuss.elastic.co/t/logstash-sincedb-unknown/155972)
**Author:** [@drifting\_school](https://discuss.elastic.co/u/drifting_school)\ **Replies:** 3\ **Last updated:** [November 20, 2018, 11:39pm UTC](https://discuss.elastic.co/t/logstash-sincedb-unknown/155972 "2018-11-20T23:39:35Z")
■環境 ・Windows10 ・Logstash6.4.2 Logstashのinput-fileプラグインでファイルの監視中に \[2018-11-09T12:16:50,332\]\[WARN \]\[filewatch.tailmode.processor\] \>\>\> Rotation In Progress - inode change detected and original content is not fully read… --- ## [Querying nested objects using Dataframes in Spark](https://discuss.elastic.co/t/querying-nested-objects-using-dataframes-in-spark/49958)
**Author:** [@Cyril\_Scetbon](https://discuss.elastic.co/u/Cyril_Scetbon)\ **Replies:** 3\ **Last updated:** [May 24, 2016, 10:21am UTC](https://discuss.elastic.co/t/querying-nested-objects-using-dataframes-in-spark/49958 "2016-05-24T10:21:31Z")
Hi, I have the following mapping : "mappings": { "locations": { "properties": { "addresses": { "type": "nested", "properties": { "id": { "type": "string" }, … --- ## [Updating enrich index for pipeline](https://discuss.elastic.co/t/updating-enrich-index-for-pipeline/339732)
**Author:** [@veryelastic](https://discuss.elastic.co/u/veryelastic)\ **Replies:** 7\ **Last updated:** [August 12, 2023, 7:50pm UTC](https://discuss.elastic.co/t/updating-enrich-index-for-pipeline/339732 "2023-08-12T19:50:27Z")
Hello, I have an 8.8.1 cluster, and am running documents through a series of ingest pipelines. One of these pipelines is an enrich stage. This data which is used to enrich the documents is sourced from an index via an… --- ## [How can i accelerate the queue output speed in logstash](https://discuss.elastic.co/t/how-can-i-accelerate-the-queue-output-speed-in-logstash/113881)
**Author:** [@antony.y](https://discuss.elastic.co/u/antony.y)\ **Replies:** 7\ **Last updated:** [January 8, 2018, 6:11am UTC](https://discuss.elastic.co/t/how-can-i-accelerate-the-queue-output-speed-in-logstash/113881 "2018-01-08T06:11:44Z")
We encountered an network failure yesterday,and before that we enable the persist queue .So after the network became normal,we can see my queue is full, but this cause i can not see the real-time data in my kibana, -rw… --- ## [Logstash - File mentioned in last\_run\_metadata\_path is not getting created](https://discuss.elastic.co/t/logstash-file-mentioned-in-last-run-metadata-path-is-not-getting-created/96989)
**Author:** [@vincentmarian](https://discuss.elastic.co/u/vincentmarian)\ **Replies:** 1\ **Last updated:** [August 16, 2017, 2:07pm UTC](https://discuss.elastic.co/t/logstash-file-mentioned-in-last-run-metadata-path-is-not-getting-created/96989 "2017-08-16T14:07:07Z")
I am using Logstash 5.4 File mentioned in last\_run\_metadata\_path is not getting created after starting Logstash. Logstash config file: input { jdbc { jdbc\_driver\_library =\> "/app/logstash/dbdrivers/mariadb/mariadb… --- ## [Elasticsearch as replicator of CouchDB](https://discuss.elastic.co/t/elasticsearch-as-replicator-of-couchdb/65937)
**Author:** [@sonpv1](https://discuss.elastic.co/u/sonpv1)\ **Replies:** 7\ **Last updated:** [November 14, 2016, 8:51am UTC](https://discuss.elastic.co/t/elasticsearch-as-replicator-of-couchdb/65937 "2016-11-14T08:51:01Z")
Hi all, I'm working on one project where we need to sync up data from couchdb to elasticsearch. I know that we already had river to do that before. But currently river has been deprecated. I'm using logstash to resolve… --- ## [Elasticsearch scripting: Invoke custom script from plugin](https://discuss.elastic.co/t/elasticsearch-scripting-invoke-custom-script-from-plugin/45835)
**Author:** [@Thanh\_Hai\_Ngo](https://discuss.elastic.co/u/Thanh_Hai_Ngo)\ **Replies:** 7\ **Last updated:** [April 1, 2016, 2:59pm UTC](https://discuss.elastic.co/t/elasticsearch-scripting-invoke-custom-script-from-plugin/45835 "2016-04-01T14:59:25Z")
If we defined native script in plugin: com.test.nativescript.TestScript, can we invoke that package inside another groovy script and create new instance ? Ex: inside config/scripts/test.groovy: import com.test.na… --- ## [Multiple lumberjack input in single logstash instance](https://discuss.elastic.co/t/multiple-lumberjack-input-in-single-logstash-instance/28792)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 2\ **Last updated:** [September 8, 2015, 3:31am UTC](https://discuss.elastic.co/t/multiple-lumberjack-input-in-single-logstash-instance/28792 "2015-09-08T03:31:12Z")
Is multiple lumberjack inputs (in different ports) supported in a single logstash instance? The config as follow:- input { # stdin { codec =\> json {} } lumberjack { port =\> 6782 codec =\> json {} ssl\_certificate … --- ## [Confused about Java API GetRequest and SearchRequest](https://discuss.elastic.co/t/confused-about-java-api-getrequest-and-searchrequest/13994)
**Author:** [@Alexander\_Kley](https://discuss.elastic.co/u/Alexander_Kley)\ **Replies:** 2\ **Last updated:** [October 18, 2013, 7:07am UTC](https://discuss.elastic.co/t/confused-about-java-api-getrequest-and-searchrequest/13994 "2013-10-18T07:07:39Z")
Hi all, we will store searchable data into the \_source field. So there isn't stored a classic known document like pdf or so. Additionally we will store the database primary key in the \_scource field like this: \_… --- ## [Canvas: Filters not applied after switching page](https://discuss.elastic.co/t/canvas-filters-not-applied-after-switching-page/152829)
**Author:** [@tarkin67](https://discuss.elastic.co/u/tarkin67)\ **Replies:** 5\ **Last updated:** [October 22, 2018, 6:31am UTC](https://discuss.elastic.co/t/canvas-filters-not-applied-after-switching-page/152829 "2018-10-22T06:31:22Z")
Dear Canvas Team, I noticed an issue with canvas workpads that have multiple pages. Say the workpad has two pages, and either page contains a dropdownControl element (or any other element that applies a filter on the wo… --- ## [Refresh x-pack monitoring stats](https://discuss.elastic.co/t/refresh-x-pack-monitoring-stats/117870)
**Author:** [@LogBabel](https://discuss.elastic.co/u/LogBabel)\ **Replies:** 5\ **Last updated:** [February 2, 2018, 5:49pm UTC](https://discuss.elastic.co/t/refresh-x-pack-monitoring-stats/117870 "2018-02-02T17:49:50Z")
Hello all, Is there a way to easily reset the x-pack monitoring stats ? Is it as easy as deleting the indexes ? I suspect something is off regarding x-pack monitoring because today I found the error message below on t… --- ## [Super slow bool query with terms filter array](https://discuss.elastic.co/t/super-slow-bool-query-with-terms-filter-array/156549)
**Author:** [@Teddis](https://discuss.elastic.co/u/Teddis)\ **Replies:** 6\ **Last updated:** [November 26, 2018, 5:11pm UTC](https://discuss.elastic.co/t/super-slow-bool-query-with-terms-filter-array/156549 "2018-11-26T17:11:20Z")
My query is running insanely slow. This one is over 1.3 seconds with just one should matches and I need 3-4 more which can take it up to 14-15 seconds! First I run a store search to yield a set of menuIds to filter again… --- ## [Javax.mail.internet.AddressException while using logstash kafka input/output plugin](https://discuss.elastic.co/t/javax-mail-internet-addressexception-while-using-logstash-kafka-input-output-plugin/40183)
**Author:** [@biswajit86](https://discuss.elastic.co/u/biswajit86)\ **Replies:** 6\ **Last updated:** [January 28, 2016, 2:04am UTC](https://discuss.elastic.co/t/javax-mail-internet-addressexception-while-using-logstash-kafka-input-output-plugin/40183 "2016-01-28T02:04:36Z")
Hi, While using logstash kafka input/output plugins , i am getting an exception in my logs before logstash starts up. This isi a brief snippet of the error Caused by: java.lang.ClassNotFoundException: javax.mail.inter… --- ## [Log type Filebeat deprectaed and Filestream multiline doesn't works](https://discuss.elastic.co/t/log-type-filebeat-deprectaed-and-filestream-multiline-doesnt-works/297577)
**Author:** [@retina](https://discuss.elastic.co/u/retina)\ **Replies:** 1\ **Last updated:** [February 18, 2022, 8:08pm UTC](https://discuss.elastic.co/t/log-type-filebeat-deprectaed-and-filestream-multiline-doesnt-works/297577 "2022-02-18T20:08:03Z")
I upgrade one filebeat to 7.16.3 version. When i config my filebeat as always with this config: - type: log enabled: true paths: - xx/yy.log - xx/yy.log - xx/yy.log tags: \["1","2"\] encoding: ISO-8… --- ## [Filebeat custom module for nodejs logs](https://discuss.elastic.co/t/filebeat-custom-module-for-nodejs-logs/142626)
**Author:** [@Jogendra\_Jangid](https://discuss.elastic.co/u/Jogendra_Jangid)\ **Replies:** 1\ **Last updated:** [August 1, 2018, 7:08pm UTC](https://discuss.elastic.co/t/filebeat-custom-module-for-nodejs-logs/142626 "2018-08-01T19:08:31Z")
Hi All, I trying to write a custom module for file beat that can send Nodejs application logs directory to elasticsearch. It's showing me below error on the execution using the plugin. 2018-08-01T22:05:12.348+0530 ERRO… --- ## [Using filebeat syslog input for PANW. Logs not publishing to Kibana](https://discuss.elastic.co/t/using-filebeat-syslog-input-for-panw-logs-not-publishing-to-kibana/204565)
**Author:** [@ablanco722](https://discuss.elastic.co/u/ablanco722)\ **Replies:** 4\ **Last updated:** [October 29, 2019, 6:13pm UTC](https://discuss.elastic.co/t/using-filebeat-syslog-input-for-panw-logs-not-publishing-to-kibana/204565 "2019-10-29T18:13:00Z")
So I am trying to get the PANW module for filebeats running. Currently its configured to receive palo alto logs via UDP. When I set filebeat to run in debug I am seeing logs being parsed but yet its not showing up in kib… [Previous page](https://discuss.elastic.co/top.md?page=911&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=913&per_page=50&period=all)