# Top **URL:** https://discuss.elastic.co/top.md?page=913&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 914 --- ## [Unable to install elasticsearch-plugin](https://discuss.elastic.co/t/unable-to-install-elasticsearch-plugin/149379)
**Author:** [@fpervil](https://discuss.elastic.co/u/fpervil)\ **Replies:** 4\ **Last updated:** [September 21, 2018, 10:17pm UTC](https://discuss.elastic.co/t/unable-to-install-elasticsearch-plugin/149379 "2018-09-21T22:17:41Z")
When I tried to perform a elasticsearch-plugin install ingest-geoip, I get the following error: Exception in thread "main" javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path buildi… --- ## [Winlogbeat - Logs for Windows 7/10 and X-pack](https://discuss.elastic.co/t/winlogbeat-logs-for-windows-7-10-and-x-pack/133134)
**Author:** [@peson79](https://discuss.elastic.co/u/peson79)\ **Replies:** 1\ **Last updated:** [May 24, 2018, 5:42pm UTC](https://discuss.elastic.co/t/winlogbeat-logs-for-windows-7-10-and-x-pack/133134 "2018-05-24T17:42:16Z")
Hi Im in a little bit of hurry. We are in a procurement process, handling the solution today 23.59. The customer have the demand to monitor Windows OS logs and especially the Security logs. I've been looking at Winlo… --- ## [Call to "DocumentExists" triggers an exception (NEST / C#)](https://discuss.elastic.co/t/call-to-documentexists-triggers-an-exception-nest-c/67928)
**Author:** [@ThomasD3](https://discuss.elastic.co/u/ThomasD3)\ **Replies:** 4\ **Last updated:** [December 7, 2016, 5:07pm UTC](https://discuss.elastic.co/t/call-to-documentexists-triggers-an-exception-nest-c/67928 "2016-12-07T17:07:50Z")
I have the following call: var Exists = Driver.DocumentExists\(Id).Exists; It checks if a document exists with the Id passed as a parameter. The call behaves as expected, however it throws some exceptions that … --- ## [Can't see data on kibana which store on es](https://discuss.elastic.co/t/cant-see-data-on-kibana-which-store-on-es/38801)
**Author:** [@LiorK](https://discuss.elastic.co/u/LiorK)\ **Replies:** 4\ **Last updated:** [January 10, 2016, 12:23pm UTC](https://discuss.elastic.co/t/cant-see-data-on-kibana-which-store-on-es/38801 "2016-01-10T12:23:07Z")
i mapped the index before throw sense and when running in sense the query GET /test-me-again/\_search I get the result: { "took" : 30, "timed\_out" : false, "\_shards" : { "total" : 5, "successful" : 5, "failed" :… --- ## [Logstash failing to build with custom java Plugin after log4j issue fix in 7.16.1 build](https://discuss.elastic.co/t/logstash-failing-to-build-with-custom-java-plugin-after-log4j-issue-fix-in-7-16-1-build/292316)
**Author:** [@Rahulkumar\_Pawar](https://discuss.elastic.co/u/Rahulkumar_Pawar)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 1:50pm UTC](https://discuss.elastic.co/t/logstash-failing-to-build-with-custom-java-plugin-after-log4j-issue-fix-in-7-16-1-build/292316 "2021-12-17T13:50:03Z")
I upgraded logstash source with 7.16.1 to have log4j vulnerability fix. Followed below steps Downloaded source code -- GitHub - elastic/logstash at v7.16.1 for source repo, ran ./gradlew assemble followed by rake … --- ## [Rally 2.0.1 released](https://discuss.elastic.co/t/rally-2-0-1-released/243697)
**Author:** [@dliappis](https://discuss.elastic.co/u/dliappis)\ **Replies:** 0\ **Last updated:** [August 4, 2020, 11:26am UTC](https://discuss.elastic.co/t/rally-2-0-1-released/243697 "2020-08-04T11:26:15Z")
We have just released Rally 2.0.1. This is mostly a bug fix release also adding a few enhancements: With 2.0.0 the offline package failed to install on Linux. There is now a Linux specific artifact available for offlin… --- ## [Delete and insert to elastic from logstash](https://discuss.elastic.co/t/delete-and-insert-to-elastic-from-logstash/227399)
**Author:** [@krishna\_bhargav](https://discuss.elastic.co/u/krishna_bhargav)\ **Replies:** 0\ **Last updated:** [April 9, 2020, 7:51pm UTC](https://discuss.elastic.co/t/delete-and-insert-to-elastic-from-logstash/227399 "2020-04-09T19:51:31Z")
We have intraday updates to our records, so we need to delete and insert all child records. logstash output : This is not deleting and insert , it's insert or update. output { elasticsearch{ hosts =\> \[ "xxxxxx" \] in… --- ## [NEST v7 backwards compatibility](https://discuss.elastic.co/t/nest-v7-backwards-compatibility/186420)
**Author:** [@olid](https://discuss.elastic.co/u/olid)\ **Replies:** 0\ **Last updated:** [June 19, 2019, 9:22am UTC](https://discuss.elastic.co/t/nest-v7-backwards-compatibility/186420 "2019-06-19T09:22:47Z")
We have some C# client code that currently talks to two clusters using NEST, both of which are on ElasticSearch 6.x, however we want to upgrade one of the clusters to ES 7. From searches on this forum it looks like NEST… --- ## [Logstash not working](https://discuss.elastic.co/t/logstash-not-working/314123)
**Author:** [@sta02](https://discuss.elastic.co/u/sta02)\ **Replies:** 8\ **Last updated:** [September 13, 2022, 12:23pm UTC](https://discuss.elastic.co/t/logstash-not-working/314123 "2022-09-13T12:23:07Z")
Hello, My logstash instance which is integrated with Azure Sentinel was working well with out any error (All the pipelines were functional, and the events were received at Azure Sentinel). A while ago, I made a couple o… --- ## [Log\_ecs\_reformatting not reformatting all logfiles](https://discuss.elastic.co/t/log-ecs-reformatting-not-reformatting-all-logfiles/276532)
**Author:** [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\ **Replies:** 8\ **Last updated:** [July 12, 2021, 11:54am UTC](https://discuss.elastic.co/t/log-ecs-reformatting-not-reformatting-all-logfiles/276532 "2021-07-12T11:54:31Z")
Hi all, I have upgraded to the latest Java agent version 1.24.0 today and I wanted to try the log\_ecs\_reformatting feature in our testsystem. It kinda works but it seems to ignore the logback over Slf4j logs: I have a … --- ## [Unable to add my JSON file to elasticsearch get error "Can't merge a non object mapping"](https://discuss.elastic.co/t/unable-to-add-my-json-file-to-elasticsearch-get-error-cant-merge-a-non-object-mapping/226562)
**Author:** [@zebulyon](https://discuss.elastic.co/u/zebulyon)\ **Replies:** 3\ **Last updated:** [April 5, 2020, 6:33pm UTC](https://discuss.elastic.co/t/unable-to-add-my-json-file-to-elasticsearch-get-error-cant-merge-a-non-object-mapping/226562 "2020-04-05T18:33:53Z")
Hello, I'm currently running the ELK-stack through the official docker containers version 7.6.0. I have some json files generated by using tshark to convert pcap files to JSON. As per this guide: Now I'm trying to a… --- ## [Logstash launching issue imput file](https://discuss.elastic.co/t/logstash-launching-issue-imput-file/189776)
**Author:** [@luc1](https://discuss.elastic.co/u/luc1)\ **Replies:** 8\ **Last updated:** [July 10, 2019, 3:15pm UTC](https://discuss.elastic.co/t/logstash-launching-issue-imput-file/189776 "2019-07-10T15:15:14Z")
I'm trying to use logstash on json files but after running the following command : sudo /usr/share/logstash/bin/logstash -f lucasFilter.conf the command seems correct I get this error : \[ERROR\] 2019-07-10 13:10:55.6… --- ## [Setting index.max\_terms\_count has no effect?](https://discuss.elastic.co/t/setting-index-max-terms-count-has-no-effect/166532)
**Author:** [@hariso](https://discuss.elastic.co/u/hariso)\ **Replies:** 0\ **Last updated:** [January 31, 2019, 10:39am UTC](https://discuss.elastic.co/t/setting-index-max-terms-count-has-no-effect/166532 "2019-01-31T10:39:25Z")
Hello! I'm experimenting with index.max\_terms\_count. I've tried executing a terms query with over 65 536 terms in it, and I was surprised to see it actually gets executed, because I read the warning here: Executing a … --- ## [Time series visualization for sub-millisecond resolution](https://discuss.elastic.co/t/time-series-visualization-for-sub-millisecond-resolution/164054)
**Author:** [@roybenhayun](https://discuss.elastic.co/u/roybenhayun)\ **Replies:** 3\ **Last updated:** [January 15, 2019, 7:35am UTC](https://discuss.elastic.co/t/time-series-visualization-for-sub-millisecond-resolution/164054 "2019-01-15T07:35:23Z")
Hi, How can we build a visualization for time series data which is in microseconds resolution? Seems there are two challenges: ElasticSearch: Elastic seems to use only ms-since-epoch timestamps. Could not find yet ho… --- ## [Request \_cat/shards display index\_closed\_exception](https://discuss.elastic.co/t/request-cat-shards-display-index-closed-exception/161992)
**Author:** [@test987654123](https://discuss.elastic.co/u/test987654123)\ **Replies:** 8\ **Last updated:** [December 27, 2018, 8:18am UTC](https://discuss.elastic.co/t/request-cat-shards-display-index-closed-exception/161992 "2018-12-27T08:18:26Z")
Hi, My Cluster version is 6.4.2 ， I closed part of the index for storage reasons。 When I request this api, Response request is index\_closed\_exception 。 --- ## [Not able to access Kibana](https://discuss.elastic.co/t/not-able-to-access-kibana/133553)
**Author:** [@abhat](https://discuss.elastic.co/u/abhat)\ **Replies:** 8\ **Last updated:** [May 28, 2018, 2:16pm UTC](https://discuss.elastic.co/t/not-able-to-access-kibana/133553 "2018-05-28T14:16:14Z")
Hi Team, I have installed ELK stack on the Cent OS system. Now I am trying to login to Kibana but I am seeing below page - \[image\] Used below URL - http://HOSTNAME:5601/ Also used elastic stack domain that I used i… --- ## [How HighlightBuilder work on wildcardQuery](https://discuss.elastic.co/t/how-highlightbuilder-work-on-wildcardquery/108838)
**Author:** [@dearnero](https://discuss.elastic.co/u/dearnero)\ **Replies:** 3\ **Last updated:** [November 24, 2017, 6:13am UTC](https://discuss.elastic.co/t/how-highlightbuilder-work-on-wildcardquery/108838 "2017-11-24T06:13:48Z")
i have a field(not\_analyzed) now i want to use wildcardQuery work on this field. for example： i use 'hell\*' to query, and expect ‘hello,world’ not ‘hello,world’ --- ## [Connecting to secured AWS elasticsearch cluster using es-hadoop](https://discuss.elastic.co/t/connecting-to-secured-aws-elasticsearch-cluster-using-es-hadoop/51359)
**Author:** [@manc](https://discuss.elastic.co/u/manc)\ **Replies:** 3\ **Last updated:** [June 2, 2016, 10:37am UTC](https://discuss.elastic.co/t/connecting-to-secured-aws-elasticsearch-cluster-using-es-hadoop/51359 "2016-06-02T10:37:39Z")
I am having permission issues when connecting to secured AWS elasticsearch cluster using the es-hadoop library. If I keep the cluster policies open to all, I am able to successfully push data into elasticsearch. When the… --- ## [Matching patterns from existing older templates ... will take precedence during new index creation](https://discuss.elastic.co/t/matching-patterns-from-existing-older-templates-will-take-precedence-during-new-index-creation/273764)
**Author:** [@6NMgfDwZ3](https://discuss.elastic.co/u/6NMgfDwZ3)\ **Replies:** 2\ **Last updated:** [May 28, 2021, 4:38pm UTC](https://discuss.elastic.co/t/matching-patterns-from-existing-older-templates-will-take-precedence-during-new-index-creation/273764 "2021-05-28T16:38:27Z")
Hello, Environment: Elasticsearch 7.12.1 (Basic License) Kibana 7.12.1 (Basic License) Filebeat 7.12.1 (Basic License) Ubuntu 21.04 I have an index template named myapp the index pattern myapp-\*. This index template… --- ## [Event\_data.param# instead of the correct fields](https://discuss.elastic.co/t/event-data-param-instead-of-the-correct-fields/146805)
**Author:** [@Badb0y](https://discuss.elastic.co/u/Badb0y)\ **Replies:** 5\ **Last updated:** [September 6, 2018, 3:45am UTC](https://discuss.elastic.co/t/event-data-param-instead-of-the-correct-fields/146805 "2018-09-06T03:45:49Z")
Hi, On kibana when I forwarded the logs I don't see like message id or message fields and a parsed fields, I just see this event\_data.param. How can I send in the proper format? This is the raw json. Our flow loks li… --- ## [Accessing a flattened field in Kibana-VegaLite](https://discuss.elastic.co/t/accessing-a-flattened-field-in-kibana-vegalite/310253)
**Author:** [@InesCM](https://discuss.elastic.co/u/InesCM)\ **Replies:** 7\ **Last updated:** [July 27, 2022, 9:27am UTC](https://discuss.elastic.co/t/accessing-a-flattened-field-in-kibana-vegalite/310253 "2022-07-27T09:27:46Z")
Hi there! I'm successfully being able to flatten a nested field in VegaLite (several nestings, by the way). However, even if the flattened field is recognized, I get undefined when accessing the fields. Any ideas why … --- ## [Using Xpath Dynamically](https://discuss.elastic.co/t/using-xpath-dynamically/166903)
**Author:** [@erdo](https://discuss.elastic.co/u/erdo)\ **Replies:** 7\ **Last updated:** [February 8, 2019, 6:44am UTC](https://discuss.elastic.co/t/using-xpath-dynamically/166903 "2019-02-08T06:44:04Z")
I want to use xpath in logstash with dynamic way My log file: \ \ **Author:** [@Bob\_Metelsky](https://discuss.elastic.co/u/Bob_Metelsky)\ **Replies:** 7\ **Last updated:** [March 16, 2017, 12:30am UTC](https://discuss.elastic.co/t/elasticsearch-plugin-consistently-installs-plugins-earlier-than-my-version/78626 "2017-03-16T00:30:07Z") I have a ES 5.2 cluster I would think there would be some version checking so the application does NOT install incompatible versions. Why does elasticsearch-plugin installer do this? Also it seems the documentation… --- ## [Update mappings all the time](https://discuss.elastic.co/t/update-mappings-all-the-time/5411)
**Author:** [@James\_Cook](https://discuss.elastic.co/u/James_Cook)\ **Replies:** 7\ **Last updated:** [September 22, 2011, 6:37pm UTC](https://discuss.elastic.co/t/update-mappings-all-the-time/5411 "2011-09-22T18:37:34Z")
It seems that every time I index a document, I get the update mapping log statements. Indexing document, index \[ppkc\], type \[activities\], key \[5260d986257c472db42d405f91158062\] \[Stacy X\] processing \[update-mappin… --- ## [Confused and concerned](https://discuss.elastic.co/t/confused-and-concerned/120500)
**Author:** [@QuizzyRascal](https://discuss.elastic.co/u/QuizzyRascal)\ **Replies:** 1\ **Last updated:** [February 26, 2018, 5:11pm UTC](https://discuss.elastic.co/t/confused-and-concerned/120500 "2018-02-26T17:11:18Z")
Hi all, I spent my weekend building a CentOS 7 ELK (6.2.1) implementation to collect syslogs (redirecting 514 udp/tcp up to 5000). Everything in the end was bullet proof and I came into work feeling great. It didn't la… --- ## [There are no external requests known to support wildcards that don't support replacing their indices](https://discuss.elastic.co/t/there-are-no-external-requests-known-to-support-wildcards-that-dont-support-replacing-their-indices/94574)
**Author:** [@burnzoire](https://discuss.elastic.co/u/burnzoire)\ **Replies:** 1\ **Last updated:** [July 27, 2017, 12:20am UTC](https://discuss.elastic.co/t/there-are-no-external-requests-known-to-support-wildcards-that-dont-support-replacing-their-indices/94574 "2017-07-27T00:20:33Z")
I'm trying to log to an elastic cloud cluster but my logstash server keeps throwing this error whenever it receives logs: \[2017-07-26T06:42:27,934\]\[INFO \]\[logstash.outputs.elasticsearch\] retrying failed action with re… --- ## [Unable to use scripted field in TSVB sum aggregation..Please help](https://discuss.elastic.co/t/unable-to-use-scripted-field-in-tsvb-sum-aggregation-please-help/244026)
**Author:** [@Ashima\_Sachdeva](https://discuss.elastic.co/u/Ashima_Sachdeva)\ **Replies:** 2\ **Last updated:** [September 23, 2021, 11:32am UTC](https://discuss.elastic.co/t/unable-to-use-scripted-field-in-tsvb-sum-aggregation-please-help/244026 "2021-09-23T11:32:14Z")
unable to use scripted field in TSVB sum aggregation...only index pattern fields are coming in drop down. --- ## [Max number of Multiple Pipelines per Logstash instance](https://discuss.elastic.co/t/max-number-of-multiple-pipelines-per-logstash-instance/138074)
**Author:** [@omor](https://discuss.elastic.co/u/omor)\ **Replies:** 2\ **Last updated:** [July 1, 2018, 9:39am UTC](https://discuss.elastic.co/t/max-number-of-multiple-pipelines-per-logstash-instance/138074 "2018-07-01T09:39:02Z")
Is there a recommendation for the number of pipelines configured per LS instance? Will it be logical to configure 60 different pipelines? --- ## [特定のデータをElasticsearchに投入できない](https://discuss.elastic.co/t/elasticsearch/73450)
**Author:** [@s-hatanaka](https://discuss.elastic.co/u/s-hatanaka)\ **Replies:** 2\ **Last updated:** [February 7, 2017, 10:06am UTC](https://discuss.elastic.co/t/elasticsearch/73450 "2017-02-07T10:06:54Z")
MSOfficeで記載された数千ファイルをIngestAttachmentPluginを利用して、Elasticsearchへ投入し、検索するという用途で利用しています。 ただ下記の添付ファイルに限ってはElasticsearchのプロセスが強制終了し、Elasticsearchのログは何も出力されないという現象になってしまいます。バージョンは下記のとおりです。該当ファイルを用いると、必ずこの現象が発生します。ご確認いただけますでしょう… --- ## [Filebeat: sync.go:85: ERR Failed to publish events caused by: EOF](https://discuss.elastic.co/t/filebeat-sync-go-85-err-failed-to-publish-events-caused-by-eof/59700)
**Author:** [@muradm](https://discuss.elastic.co/u/muradm)\ **Replies:** 2\ **Last updated:** [September 5, 2016, 2:03pm UTC](https://discuss.elastic.co/t/filebeat-sync-go-85-err-failed-to-publish-events-caused-by-eof/59700 "2016-09-05T14:03:46Z")
Tried latest alpha filebeat 5.0.0-alpha5. Everything seems fine.. but logs on one of servers are flooded with at random periods: sync.go:85: ERR Failed to publish events caused by: EOF Any idea? --- ## [Could not index event to Elasticsearch. status: 404](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-status-404/322312)
**Author:** [@shubham.s](https://discuss.elastic.co/u/shubham.s)\ **Replies:** 3\ **Last updated:** [January 3, 2023, 4:34am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-status-404/322312 "2023-01-03T04:34:45Z")
refer to /etc/logstash/conf.d/pipeline.conf input { file { path =\> "/var/log/secure" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } } filter { grok { match =\> { "message" =\> ""%{IPV4:i… --- ## [Current token (VALUE\_TRUE) not numeric, can not use numeric value accessors](https://discuss.elastic.co/t/current-token-value-true-not-numeric-can-not-use-numeric-value-accessors/156238)
**Author:** [@muyuqj](https://discuss.elastic.co/u/muyuqj)\ **Replies:** 0\ **Last updated:** [November 12, 2018, 7:02am UTC](https://discuss.elastic.co/t/current-token-value-true-not-numeric-can-not-use-numeric-value-accessors/156238 "2018-11-12T07:02:31Z")
In mysql, the status field type is tinyint, but when retrieved from jdbc, it becomes boolean, with only true and false This status field has several values, not only 0 and 1, but also 2.My configuration is： { "templat… --- ## [Hide the menu sidebar from url param](https://discuss.elastic.co/t/hide-the-menu-sidebar-from-url-param/75438)
**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\ **Replies:** 3\ **Last updated:** [February 18, 2017, 3:43am UTC](https://discuss.elastic.co/t/hide-the-menu-sidebar-from-url-param/75438 "2017-02-18T03:43:30Z")
any way that I can hide the menu sidebar by one url param --- ## [Error on X-Pack installation in Kibana](https://discuss.elastic.co/t/error-on-x-pack-installation-in-kibana/55764)
**Author:** [@kr0k](https://discuss.elastic.co/u/kr0k)\ **Replies:** 3\ **Last updated:** [July 21, 2016, 11:09am UTC](https://discuss.elastic.co/t/error-on-x-pack-installation-in-kibana/55764 "2016-07-21T11:09:48Z")
When i try to install X-Pack to Kibana i got a problem. \[root@elastic-kibana-01 kibana\]# bin/kibana-plugin install x-pack Found previous install attempt. Deleting... Attempting to transfer from x-pack Attempting to … --- ## [Missing filter to check the existence of field and null\_value](https://discuss.elastic.co/t/missing-filter-to-check-the-existence-of-field-and-null-value/10292)
**Author:** [@ovamsikrishna](https://discuss.elastic.co/u/ovamsikrishna)\ **Replies:** 3\ **Last updated:** [January 15, 2013, 5:51am UTC](https://discuss.elastic.co/t/missing-filter-to-check-the-existence-of-field-and-null-value/10292 "2013-01-15T05:51:35Z")
Hi All, My Mapping example: include Tire::Model::Search Tire.index('account\_1') do create( :mappings =\> { :user =\> { :properties =\> { :name =\> { :type =\> :string, … --- ## [Connection error to a secured Elasticsearch: unable to authenticate user](https://discuss.elastic.co/t/connection-error-to-a-secured-elasticsearch-unable-to-authenticate-user/264919)
**Author:** [@oferbar00](https://discuss.elastic.co/u/oferbar00)\ **Replies:** 4\ **Last updated:** [February 21, 2021, 4:07pm UTC](https://discuss.elastic.co/t/connection-error-to-a-secured-elasticsearch-unable-to-authenticate-user/264919 "2021-02-21T16:07:24Z")
Hello, I am trying to create a track from an Elasticsearch node (v7.5.2) that is running on a Windows server 2019 VM and using TLS with basic authentication. From the rally (v2.0.4) machine I am able to curl to it jus… --- ## [Is is possible to partially update a dest doc with transforms?](https://discuss.elastic.co/t/is-is-possible-to-partially-update-a-dest-doc-with-transforms/209808)
**Author:** [@kostistsaprailis](https://discuss.elastic.co/u/kostistsaprailis)\ **Replies:** 4\ **Last updated:** [November 28, 2019, 10:26am UTC](https://discuss.elastic.co/t/is-is-possible-to-partially-update-a-dest-doc-with-transforms/209808 "2019-11-28T10:26:01Z")
Hello all, I'm trying to figure out if it's possible to update only some fields of a document with dataframe transforms similar to the way the index document update API works (https://www.elastic.co/guide/en/elasticsear… --- ## [Slow performance of Logstash elasticsearch filter plugin](https://discuss.elastic.co/t/slow-performance-of-logstash-elasticsearch-filter-plugin/201609)
**Author:** [@msk\_76](https://discuss.elastic.co/u/msk_76)\ **Replies:** 4\ **Last updated:** [October 1, 2019, 6:30am UTC](https://discuss.elastic.co/t/slow-performance-of-logstash-elasticsearch-filter-plugin/201609 "2019-10-01T06:30:54Z")
I have around 4.5Million records in my input data of logstash to which I am doing a lookup of an existing index in ES using following ES filter plugin. This is just like adding department information to a user\_name field… --- ## [Logstash date parse failure for jdbc input](https://discuss.elastic.co/t/logstash-date-parse-failure-for-jdbc-input/92713)
**Author:** [@Bernie](https://discuss.elastic.co/u/Bernie)\ **Replies:** 4\ **Last updated:** [July 13, 2017, 11:37am UTC](https://discuss.elastic.co/t/logstash-date-parse-failure-for-jdbc-input/92713 "2017-07-13T11:37:10Z")
Hi there, I currently encounter a strange problem while trying to get my Oracle-\>ES transfer working. Input is pretty much only jdbc and a "select event\_timestamp from table" where the column in the database is a "TI… --- ## [Csv file not reading last row from file input](https://discuss.elastic.co/t/csv-file-not-reading-last-row-from-file-input/83452)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 4\ **Last updated:** [April 25, 2017, 8:20am UTC](https://discuss.elastic.co/t/csv-file-not-reading-last-row-from-file-input/83452 "2017-04-25T08:20:16Z")
Hi All i am using csv file as input, using file plugin. After couple of trials i realized, it is not reading only the last line Any idea how this can be fixed? Thanks! --- ## [Elastic Search Request Body search by \_type](https://discuss.elastic.co/t/elastic-search-request-body-search-by--type/28698)
**Author:** [@inderjeet26](https://discuss.elastic.co/u/inderjeet26)\ **Replies:** 4\ **Last updated:** [September 5, 2015, 7:13pm UTC](https://discuss.elastic.co/t/elastic-search-request-body-search-by--type/28698 "2015-09-05T19:13:11Z")
I am doing a query like so: curl -XGET localhost:9200/logstash\*/\_search { "query": { "match": { "\_type": "xxx" } } } I have deleted all the documents of type xxx, by curl -XDELETE localhost:9200/logs… --- ## [Filebeat: Template Creation Error](https://discuss.elastic.co/t/filebeat-template-creation-error/177222)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 1\ **Last updated:** [April 17, 2019, 4:33pm UTC](https://discuss.elastic.co/t/filebeat-template-creation-error/177222 "2019-04-17T16:33:24Z")
Hi, I'm testing filebeat 6.7.1 and am testing creation of custom template and index names. My config looks like this: setup.template: enabled: true name: "beats-logs-%{\[agent.version\]}" pattern: "beats-logs-\*" … --- ## [Can't filter for/from value in dashboard](https://discuss.elastic.co/t/cant-filter-for-from-value-in-dashboard/58614)
**Author:** [@ronmckown](https://discuss.elastic.co/u/ronmckown)\ **Replies:** 2\ **Last updated:** [August 23, 2016, 9:45pm UTC](https://discuss.elastic.co/t/cant-filter-for-from-value-in-dashboard/58614 "2016-08-23T21:45:18Z")
When I am in the Discover screen, I can click on "filter for value" and "filter from value" by clicking the little graphic next to field. Works great. However, when I'm in the Dasboard and looking at data via a saved … --- ## [How to change to desc without sorts in es?](https://discuss.elastic.co/t/how-to-change-to-desc-without-sorts-in-es/298801)
**Author:** [@ifree-zm](https://discuss.elastic.co/u/ifree-zm)\ **Replies:** 8\ **Last updated:** [March 4, 2022, 4:40am UTC](https://discuss.elastic.co/t/how-to-change-to-desc-without-sorts-in-es/298801 "2022-03-04T04:40:45Z")
Sort Orderedit The order option can have the following values: asc Sort in ascending order desc Sort in descending order The order defaults to desc when sorting on the \_score , and defaults to asc when sortin… --- ## [Configuring Spaces - Identifying Permissions for Role Access](https://discuss.elastic.co/t/configuring-spaces-identifying-permissions-for-role-access/285107)
**Author:** [@tthiry](https://discuss.elastic.co/u/tthiry)\ **Replies:** 5\ **Last updated:** [September 28, 2021, 12:11am UTC](https://discuss.elastic.co/t/configuring-spaces-identifying-permissions-for-role-access/285107 "2021-09-28T00:11:04Z")
Hello, Short time reader, first time caller... I am new to Elasticsearch and I am stumbling around. I am following the best practice of creating separate spaces for different user groups. For example I have a space for… --- ## [Logstash http\_poller で 取得したデータのfilter方法について](https://discuss.elastic.co/t/logstash-http-poller-filter/248426)
**Author:** [@unisuke](https://discuss.elastic.co/u/unisuke)\ **Replies:** 5\ **Last updated:** [September 19, 2020, 2:46pm UTC](https://discuss.elastic.co/t/logstash-http-poller-filter/248426 "2020-09-19T14:46:20Z")
こんにちは。 http\_poller pluginで取得したデータをfilterしたいと思っています。 http\_pollerで得たデータは下記としまして、 "content" =\> \[ \[0\] { "AList" =\> \[ \[0\] { "name" =\> "X", }, \[1\] { "name" =\> "Y, } \], "… --- ## [Kibana visualization with two fields from prometheus data](https://discuss.elastic.co/t/kibana-visualization-with-two-fields-from-prometheus-data/225099)
**Author:** [@jf11](https://discuss.elastic.co/u/jf11)\ **Replies:** 5\ **Last updated:** [March 30, 2020, 7:53am UTC](https://discuss.elastic.co/t/kibana-visualization-with-two-fields-from-prometheus-data/225099 "2020-03-30T07:53:52Z")
Hello, I'm not sure whether this is possible or not but really hoping for some way to use sub-buckets on the Y-axis when doing a visualization. I've got a setup where metric beat collects prometheus metrics from various… --- ## [\[Logstash\] CSP-REPORT - URI non parsé](https://discuss.elastic.co/t/logstash-csp-report-uri-non-parse/105930)
**Author:** [@David\_ROELANDT](https://discuss.elastic.co/u/David_ROELANDT)\ **Replies:** 5\ **Last updated:** [November 6, 2017, 8:47am UTC](https://discuss.elastic.co/t/logstash-csp-report-uri-non-parse/105930 "2017-11-06T08:47:01Z")
Bonjour ! Le contexte : J'importe actuellement un log de rapport CSP dans Elasticseach. Je cherche à splitter le domaine de l'url (URI) Voici un exemple de JSON importé : {"csp-report":{ "blocked-uri":"self", "docume… --- ## [Elastic search service failing - java.lang.IllegalArgumentException: Plugin \[delete-by-query\] is incompatible with Elasticsearch \[2.4.5\]. Was designed for version \[2.4.4\]](https://discuss.elastic.co/t/elastic-search-service-failing-java-lang-illegalargumentexception-plugin-delete-by-query-is-incompatible-with-elasticsearch-2-4-5-was-designed-for-version-2-4-4/88903)
**Author:** [@bibinvenugopal](https://discuss.elastic.co/u/bibinvenugopal)\ **Replies:** 5\ **Last updated:** [June 12, 2017, 8:32am UTC](https://discuss.elastic.co/t/elastic-search-service-failing-java-lang-illegalargumentexception-plugin-delete-by-query-is-incompatible-with-elasticsearch-2-4-5-was-designed-for-version-2-4-4/88903 "2017-06-12T08:32:33Z")
java.lang.IllegalArgumentException: Plugin \[delete-by-query\] is incompatible with Elasticsearch \[2.4.5\]. Was designed for version \[2.4.4\] at org.elasticsearch.plugins.PluginInfo.readFromProperties(PluginInfo.java:118) at… --- ## [Unclear about routing required mapping when deleting](https://discuss.elastic.co/t/unclear-about-routing-required-mapping-when-deleting/41680)
**Author:** [@jks](https://discuss.elastic.co/u/jks)\ **Replies:** 1\ **Last updated:** [February 14, 2016, 5:56am UTC](https://discuss.elastic.co/t/unclear-about-routing-required-mapping-when-deleting/41680 "2016-02-14T05:56:32Z")
The docs state: Many times, the routing value is not known when deleting a document. For those cases, when specifying the \_routing mapping as required, and no routing value is specified, the delete will be broadcast … [Previous page](https://discuss.elastic.co/top.md?page=912&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=914&per_page=50&period=all)