# Top

**URL:** https://discuss.elastic.co/top.md?page=93&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 94

---

## [JSON parsing question - Elasticsearch+Kibana+Logstash 6.5](https://discuss.elastic.co/t/json-parsing-question-elasticsearch-kibana-logstash-6-5/163255)

<div class="topic-metadata">

**Author:** [@thiagotankian](https://discuss.elastic.co/u/thiagotankian)\
**Replies:** 11\
**Last updated:** [January 11, 2019, 7:13pm UTC](https://discuss.elastic.co/t/json-parsing-question-elasticsearch-kibana-logstash-6-5/163255 "2019-01-11T19:13:00Z")

</div>

Hi, I'm a new user from Elastic and I'm trying to parse and index a json file using logstash, but so far I was able to do it but the fields were not indexed as expected - for example - all my fields were not indexed - I…

---

## [Delete by query in elasticsearch](https://discuss.elastic.co/t/delete-by-query-in-elasticsearch/91009)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 12\
**Last updated:** [July 5, 2017, 10:09am UTC](https://discuss.elastic.co/t/delete-by-query-in-elasticsearch/91009 "2017-07-05T10:09:57Z")

</div>

Hi, I'm using below code to delete my index data using curator. In my version 2.1 elasticsearch working fine but new version its showing some error. Please correct my curl file curl -XDELETE 'http://localhost:9200/logs…

---

## [Kibana is going slow](https://discuss.elastic.co/t/kibana-is-going-slow/326172)

<div class="topic-metadata">

**Author:** [@jdbcplusnet](https://discuss.elastic.co/u/jdbcplusnet)\
**Replies:** 11\
**Last updated:** [February 28, 2023, 3:27pm UTC](https://discuss.elastic.co/t/kibana-is-going-slow/326172 "2023-02-28T15:27:27Z")

</div>

Hi all We have some performance issues with Kibana and Elasticsearch. Both Elasticsearch and Kibana are 6.8.7 version. We have Elasticsearch Cluster with 3 nodes, one master and two slaves, 8GB for each node. We have …

---

## [How to convert the date string into datetime format](https://discuss.elastic.co/t/how-to-convert-the-date-string-into-datetime-format/192941)

<div class="topic-metadata">

**Author:** [@Karn\_Gusain](https://discuss.elastic.co/u/Karn_Gusain)\
**Replies:** 10\
**Last updated:** [July 31, 2019, 5:03am UTC](https://discuss.elastic.co/t/how-to-convert-the-date-string-into-datetime-format/192941 "2019-07-31T05:03:38Z")

</div>

Hello Folks, I have searched around all the possible elastic.co similar related posts and googled the possible stuff but did not get the answer to go with, i've below lrow og data which looks like below .. my-ldap-se…

---

## [Kibana Alerting won't create specified index](https://discuss.elastic.co/t/kibana-alerting-wont-create-specified-index/242738)

<div class="topic-metadata">

**Author:** [@knrdv](https://discuss.elastic.co/u/knrdv)\
**Replies:** 9\
**Last updated:** [September 16, 2020, 7:57am UTC](https://discuss.elastic.co/t/kibana-alerting-wont-create-specified-index/242738 "2020-09-16T07:57:46Z")

</div>

Hi, my problem is that when I set-up alerting using index alerting connector, no index gets created when alerts trigger. Could someone please help and write down the steps needed to set-up Kibana alerting to write to a s…

---

## [Filter with winlogbeat](https://discuss.elastic.co/t/filter-with-winlogbeat/324621)

<div class="topic-metadata">

**Author:** [@BeyondRAM](https://discuss.elastic.co/u/BeyondRAM)\
**Replies:** 13\
**Last updated:** [May 25, 2023, 5:10pm UTC](https://discuss.elastic.co/t/filter-with-winlogbeat/324621 "2023-05-25T17:10:40Z")

</div>

Hello I got winlogbeat on my file server which brings up specifics ressources from an file audit, 4663, 4670 and 4659 events, well file activy actually. I got an issue, I want to create a dashboard with the files the mo…

---

## [Automatic Index Creation](https://discuss.elastic.co/t/automatic-index-creation/361788)

<div class="topic-metadata">

**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\
**Replies:** 66\
**Last updated:** [July 24, 2024, 12:47pm UTC](https://discuss.elastic.co/t/automatic-index-creation/361788 "2024-07-24T12:47:44Z")

</div>

Hi Team, We had a requirement to create an index automatically by reading the content of the CSV files. Within the CSV files, there is a field named "timestamp" where data is received in epoch format. The objective is t…

---

## [\[CLOSED \]Logstash crash after service start logstash](https://discuss.elastic.co/t/closed-logstash-crash-after-service-start-logstash/51324)

<div class="topic-metadata">

**Author:** [@zendel](https://discuss.elastic.co/u/zendel)\
**Replies:** 10\
**Last updated:** [June 27, 2016, 3:31pm UTC](https://discuss.elastic.co/t/closed-logstash-crash-after-service-start-logstash/51324 "2016-06-27T15:31:02Z")

</div>

hello, i'm using logstash on ubuntu (14.04LTS) with logstash\_2.3.1-1\_all.deb After installation with dpkg, i'm trying to start logstash but logstash always stop after 30 secondes. I already check my conf file, it's OK.…

---

## [Filebeat Dashboard Setup is a Hassle!](https://discuss.elastic.co/t/filebeat-dashboard-setup-is-a-hassle/282468)

<div class="topic-metadata">

**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\
**Replies:** 16\
**Last updated:** [September 15, 2021, 9:11pm UTC](https://discuss.elastic.co/t/filebeat-dashboard-setup-is-a-hassle/282468 "2021-09-15T21:11:31Z")

</div>

I'm frustrated!!! It's such a hassle to load sample dashboards dashboards in Kibana, this should be an easy straight forward task. But somehow you guys managed to make it an hole day project. Sorry, but I'm pissed curren…

---

## [Conditionals in pipelines](https://discuss.elastic.co/t/conditionals-in-pipelines/294970)

<div class="topic-metadata">

**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\
**Replies:** 11\
**Last updated:** [January 24, 2022, 4:17pm UTC](https://discuss.elastic.co/t/conditionals-in-pipelines/294970 "2022-01-24T16:17:49Z")

</div>

Hi, We are in the process of recreating our logstash pipelines in kibana/elk to use Elasticsearch pipelines instead of logstash. However the lack of documentation on how to do this in Kibana is overwhelming. See the ac…

---

## [Watcher daily trigger doesn't work](https://discuss.elastic.co/t/watcher-daily-trigger-doesnt-work/61543)

<div class="topic-metadata">

**Author:** [@dan\_r](https://discuss.elastic.co/u/dan_r)\
**Replies:** 9\
**Last updated:** [October 20, 2016, 7:34am UTC](https://discuss.elastic.co/t/watcher-daily-trigger-doesnt-work/61543 "2016-10-20T07:34:46Z")

</div>

Hi I'm using ES 2.3.5 with the compatible watcher version (2.3.5 ...). I've been using watcher for a week now, and it works well, except one thing: Daily trigger does not work. The watch doesn't execute. The same wat…

---

## [Add Default Date Format on Mapping](https://discuss.elastic.co/t/add-default-date-format-on-mapping/289341)

<div class="topic-metadata">

**Author:** [@Mehmet\_Gencol](https://discuss.elastic.co/u/Mehmet_Gencol)\
**Replies:** 12\
**Last updated:** [November 18, 2021, 5:45pm UTC](https://discuss.elastic.co/t/add-default-date-format-on-mapping/289341 "2021-11-18T17:45:19Z")

</div>

I have a mapping that dynamically detects date and stores. Fields are dynamically created, and I don't have any configuration about date formatting. so dates are detected and stored as their formats. They are generally s…

---

## [Filter percolators before percolation query](https://discuss.elastic.co/t/filter-percolators-before-percolation-query/76050)

<div class="topic-metadata">

**Author:** [@frankkoornstra](https://discuss.elastic.co/u/frankkoornstra)\
**Replies:** 11\
**Last updated:** [March 20, 2017, 11:06am UTC](https://discuss.elastic.co/t/filter-percolators-before-percolation-query/76050 "2017-03-20T11:06:00Z")

</div>

Percolation changed a bit coming from 2.4 to 5.2. In 2.4 we had the opportunity to filter the percolators that were used before the percolation actually took place (see Additional supported query string options under Per…

---

## [Trying to parse this datefield](https://discuss.elastic.co/t/trying-to-parse-this-datefield/134331)

<div class="topic-metadata">

**Author:** [@TestCandidate](https://discuss.elastic.co/u/TestCandidate)\
**Replies:** 37\
**Last updated:** [June 9, 2018, 9:30am UTC](https://discuss.elastic.co/t/trying-to-parse-this-datefield/134331 "2018-06-09T09:30:23Z")

</div>

I have a CSV file with a date field as follows: May 31, 2018 09:35:45.979371597 EEST I am trying to parse it with logstash without any success (the field is still a string) Here's my logstash filter: filter { if \[t…

---

## [Not procesing logstash data to elasticsearch with error: \[org.logstash.instrument.metrics.gauge.LazyDelegatingGauge\]](https://discuss.elastic.co/t/not-procesing-logstash-data-to-elasticsearch-with-error-org-logstash-instrument-metrics-gauge-lazydelegatinggauge/194597)

<div class="topic-metadata">

**Author:** [@HikariNTB](https://discuss.elastic.co/u/HikariNTB)\
**Replies:** 10\
**Last updated:** [August 16, 2019, 8:38am UTC](https://discuss.elastic.co/t/not-procesing-logstash-data-to-elasticsearch-with-error-org-logstash-instrument-metrics-gauge-lazydelegatinggauge/194597 "2019-08-16T08:38:08Z")

</div>

Hi, I had installed ELK on a CentOS7 machine and then make my ELK work with more than 10GB data. After 2 weeks I stopped Logstash and clean all data and indices at Kibana. It took 3 more weeks until I didn't start it ag…

---

## [Problem using fingerprint for my documents stored in elasticsearch](https://discuss.elastic.co/t/problem-using-fingerprint-for-my-documents-stored-in-elasticsearch/295101)

<div class="topic-metadata">

**Author:** [@MKH](https://discuss.elastic.co/u/MKH)\
**Replies:** 16\
**Last updated:** [February 2, 2022, 9:23pm UTC](https://discuss.elastic.co/t/problem-using-fingerprint-for-my-documents-stored-in-elasticsearch/295101 "2022-02-02T21:23:23Z")

</div>

Hi, I want to provide a unique id for the data I store in Elasticsearch index using fingerprint. But when I feed a bulk of docs to logstash I only one of the documents is stored in the index. I have 9 docs (9 json dicti…

---

## [Logstash not executing the configs](https://discuss.elastic.co/t/logstash-not-executing-the-configs/80201)

<div class="topic-metadata">

**Author:** [@gmmurugan](https://discuss.elastic.co/u/gmmurugan)\
**Replies:** 15\
**Last updated:** [March 29, 2017, 5:33am UTC](https://discuss.elastic.co/t/logstash-not-executing-the-configs/80201 "2017-03-29T05:33:35Z")

</div>

I upgraded to logstash 5 from 2.4 and resolved the logstash.yml and the path for that file also. whatever i do, there is no result. just hangs at the statement even i run manually. what am i missing. bin/logstash --pat…

---

## [Logstash log4j2.properties logfiles are not deleting](https://discuss.elastic.co/t/logstash-log4j2-properties-logfiles-are-not-deleting/301549)

<div class="topic-metadata">

**Author:** [@kyle\_che](https://discuss.elastic.co/u/kyle_che)\
**Replies:** 9\
**Last updated:** [April 5, 2022, 7:25pm UTC](https://discuss.elastic.co/t/logstash-log4j2-properties-logfiles-are-not-deleting/301549 "2022-04-05T19:25:09Z")

</div>

Looking at the log4j2.properties documentation it says to make the following changes to the log4j2.properties files. I've made them but also made changes for being logstash instead of elastic but I do not see any logfil…

---

## [Mapping - transform: only for creating new and not for updating?](https://discuss.elastic.co/t/mapping-transform-only-for-creating-new-and-not-for-updating/27312)

<div class="topic-metadata">

**Author:** [@Sven\_Beauprez](https://discuss.elastic.co/u/Sven_Beauprez)\
**Replies:** 9\
**Last updated:** [August 13, 2015, 8:03pm UTC](https://discuss.elastic.co/t/mapping-transform-only-for-creating-new-and-not-for-updating/27312 "2015-08-13T20:03:26Z")

</div>

I tested follow mapping - transform script "mappings": { "tag": { "\_timestamp": { "enabled": true }, "transform": { "script": "ctx.\_source.counter = ctx.\_source.counter == null ? 1 : 2", "lang": "groovy" }, ..…

---

## [ELASTICSEARCH\_17 - Could not index '862' records: java.io.IOException: listener timeout after waiting for \[30000\] ms](https://discuss.elastic.co/t/elasticsearch-17-could-not-index-862-records-java-io-ioexception-listener-timeout-after-waiting-for-30000-ms/104604)

<div class="topic-metadata">

**Author:** [@Rakesh39](https://discuss.elastic.co/u/Rakesh39)\
**Replies:** 11\
**Last updated:** [October 22, 2017, 8:11am UTC](https://discuss.elastic.co/t/elasticsearch-17-could-not-index-862-records-java-io-ioexception-listener-timeout-after-waiting-for-30000-ms/104604 "2017-10-22T08:11:52Z")

</div>

Hi, We are having multiple issues with elastic search cluster. ELASTICSEARCH\_17 - Could not index '862' records: java.io.IOException: listener timeout after waiting for \[30000\] ms Continuously getting lot of above er…

---

## [Extracting filename from existing field (Source)?](https://discuss.elastic.co/t/extracting-filename-from-existing-field-source/155521)

<div class="topic-metadata">

**Author:** [@roly](https://discuss.elastic.co/u/roly)\
**Replies:** 11\
**Last updated:** [November 6, 2018, 11:27am UTC](https://discuss.elastic.co/t/extracting-filename-from-existing-field-source/155521 "2018-11-06T11:27:27Z")

</div>

how can i extract directory name from the below ? source path = "/var/log/companyname/servicename/jjds/smtgxyz/smtgabc.log" from the above i have to get "servicename" as an another field. can someone please provide the…

---

## [Logstash adding duplicate rows in every run](https://discuss.elastic.co/t/logstash-adding-duplicate-rows-in-every-run/100453)

<div class="topic-metadata">

**Author:** [@saafianihan](https://discuss.elastic.co/u/saafianihan)\
**Replies:** 12\
**Last updated:** [September 18, 2017, 11:36am UTC](https://discuss.elastic.co/t/logstash-adding-duplicate-rows-in-every-run/100453 "2017-09-18T11:36:34Z")

</div>

i am using Logstash to pull the date from MySQL database. I am using two different configuration files to create two indexes with different MySQL queries. I run the conf files as logstash -f path\\to\\bin\*.conf . While r…

---

## [How to monitor network traffic of specific URL by using packebeat](https://discuss.elastic.co/t/how-to-monitor-network-traffic-of-specific-url-by-using-packebeat/116818)

<div class="topic-metadata">

**Author:** [@babu.ganesh0708](https://discuss.elastic.co/u/babu.ganesh0708)\
**Replies:** 9\
**Last updated:** [February 2, 2018, 4:35pm UTC](https://discuss.elastic.co/t/how-to-monitor-network-traffic-of-specific-url-by-using-packebeat/116818 "2018-02-02T16:35:56Z")

</div>

Hi All, I am using packetbeat to monitor application server network traffic and building the dashboard based on the data captured. I would like to know is there any way in packetbeat to specify the URL (Ex:- https://ww…

---

## [Very often FileSystemException : Operation not permitted](https://discuss.elastic.co/t/very-often-filesystemexception-operation-not-permitted/271079)

<div class="topic-metadata">

**Author:** [@rzrucher](https://discuss.elastic.co/u/rzrucher)\
**Replies:** 12\
**Last updated:** [April 27, 2021, 11:17am UTC](https://discuss.elastic.co/t/very-often-filesystemexception-operation-not-permitted/271079 "2021-04-27T11:17:48Z")

</div>

Hello, I've a cluster of elasticsearch 6.1.2 and very often in the elasticsearch log I've : \[2021-04-15T01:03:38,388\]\[WARN \]\[o.e.c.a.s.ShardStateAction\] \[ELK1\] \[events-202104\]\[2\] received shard failed for shard…

---

## [How to add APM agent in .NET](https://discuss.elastic.co/t/how-to-add-apm-agent-in-net/280974)

<div class="topic-metadata">

**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\
**Replies:** 11\
**Last updated:** [August 11, 2021, 10:07pm UTC](https://discuss.elastic.co/t/how-to-add-apm-agent-in-net/280974 "2021-08-11T22:07:05Z")

</div>

hello, how are you? I have a problem adding the APM agent to my web application, I installed the agent from the NuGet, I created a class called 'Startup' as indicated in the documentation and also created the configurat…

---

## [SURICATA LOGS NOT SHOWING UP IN NETWORK EVENTS IN ELASTIC SIEM](https://discuss.elastic.co/t/suricata-logs-not-showing-up-in-network-events-in-elastic-siem/293176)

<div class="topic-metadata">

**Author:** [@mohammadawaisjavaid](https://discuss.elastic.co/u/mohammadawaisjavaid)\
**Replies:** 13\
**Last updated:** [January 14, 2022, 6:30am UTC](https://discuss.elastic.co/t/suricata-logs-not-showing-up-in-network-events-in-elastic-siem/293176 "2022-01-14T06:30:27Z")

</div>

Hi, I have installed elastic agent, on my host machine. I created a policy named suricata and I have added integrations of endpoint security and suricata. At the host end I have installed centos and have installed suric…

---

## [Multiple hosts monitoring](https://discuss.elastic.co/t/multiple-hosts-monitoring/57225)

<div class="topic-metadata">

**Author:** [@fdlprod](https://discuss.elastic.co/u/fdlprod)\
**Replies:** 9\
**Last updated:** [August 11, 2016, 10:28am UTC](https://discuss.elastic.co/t/multiple-hosts-monitoring/57225 "2016-08-11T10:28:11Z")

</div>

Hi i have 2 hosts with topbeat configured to send to another host (third) the problem is i can't disting 2 hosts on kibana dashboard, furthermore it takes all "-" in name as a new machine so i have 2 hosts to monitor, bu…

---

## [Fresh Install ECE Beta1](https://discuss.elastic.co/t/fresh-install-ece-beta1/77299)

<div class="topic-metadata">

**Author:** [@adelbot](https://discuss.elastic.co/u/adelbot)\
**Replies:** 17\
**Last updated:** [March 22, 2017, 2:05pm UTC](https://discuss.elastic.co/t/fresh-install-ece-beta1/77299 "2017-03-22T14:05:14Z")

</div>

I have some trouble. When i'm launch the installer : -- Verifying Prerequisites -- Checking host storage path... PASSED Checking docker version... PASSED Checking internal ip connectivity... PASSED Checking OS settings…

---

## [FileBeat as a service. After rebooting the system it starts automatically](https://discuss.elastic.co/t/filebeat-as-a-service-after-rebooting-the-system-it-starts-automatically/241075)

<div class="topic-metadata">

**Author:** [@TUSHAR\_Sinha](https://discuss.elastic.co/u/TUSHAR_Sinha)\
**Replies:** 12\
**Last updated:** [September 7, 2020, 3:04pm UTC](https://discuss.elastic.co/t/filebeat-as-a-service-after-rebooting-the-system-it-starts-automatically/241075 "2020-09-07T15:04:00Z")

</div>

Hi all, I want to know can we run filebeat as a service. So, whenever someone rebots the system it automatically starts running again. The system in which my filebeat is running, has access to different people sometimes…

---

## [Dramatic performance degradation on range queries after upgrade ES from 2.4 to 7.1](https://discuss.elastic.co/t/dramatic-performance-degradation-on-range-queries-after-upgrade-es-from-2-4-to-7-1/201132)

<div class="topic-metadata">

**Author:** [@einfoman](https://discuss.elastic.co/u/einfoman)\
**Replies:** 18\
**Last updated:** [October 7, 2019, 12:06pm UTC](https://discuss.elastic.co/t/dramatic-performance-degradation-on-range-queries-after-upgrade-es-from-2-4-to-7-1/201132 "2019-10-07T12:06:43Z")

</div>

Hi, I have an elasticsearch cluster of version 2.4 (lucene version 5.5.4). Near I installed a new cluster of version 7.1 (lucene version 8.1.0) and indexed all data (~2.7 billion documents). Both of cluster use Java 1.8…

---

## [Logstash configuration input error with if statement](https://discuss.elastic.co/t/logstash-configuration-input-error-with-if-statement/246019)

<div class="topic-metadata">

**Author:** [@anon56147639](https://discuss.elastic.co/u/anon56147639)\
**Replies:** 10\
**Last updated:** [August 24, 2020, 9:11am UTC](https://discuss.elastic.co/t/logstash-configuration-input-error-with-if-statement/246019 "2020-08-24T09:11:25Z")

</div>

Hi everyone, I'm trying to create a pipeline in logstash which receives CEF events and other input from Filebeat. Since not all input is in CEF format, I created an IF-statement. My logstash.conf looks like this: b…

---

## [Connection timeout to master for new nodes](https://discuss.elastic.co/t/connection-timeout-to-master-for-new-nodes/156059)

<div class="topic-metadata">

**Author:** [@jazz](https://discuss.elastic.co/u/jazz)\
**Replies:** 10\
**Last updated:** [November 9, 2018, 8:46pm UTC](https://discuss.elastic.co/t/connection-timeout-to-master-for-new-nodes/156059 "2018-11-09T20:46:24Z")

</div>

I have a cluster on version 2.4.1, and some nodes cannot connect to the master. The error log is: \[WARN \]\[discovery.zen \] \[...\] failed to connect to master \[...\] retrying... org.elasticsearch.transport.Conne…

---

## [Unable to get Metricbeat to communicate with Elasticsearch](https://discuss.elastic.co/t/unable-to-get-metricbeat-to-communicate-with-elasticsearch/346747)

<div class="topic-metadata">

**Author:** [@james\_fourth](https://discuss.elastic.co/u/james_fourth)\
**Replies:** 17\
**Last updated:** [November 10, 2023, 1:47am UTC](https://discuss.elastic.co/t/unable-to-get-metricbeat-to-communicate-with-elasticsearch/346747 "2023-11-10T01:47:01Z")

</div>

I'm working on upgrading the Elastic stack to the current version for my company. So, I'm testing the deployment of Elasticsearch, Kibana, Logstash, and Metricbeat. Each component is in a separate docker container but al…

---

## [Almost 4 hour delay in documents being received and showing up in Kibana Discover](https://discuss.elastic.co/t/almost-4-hour-delay-in-documents-being-received-and-showing-up-in-kibana-discover/175067)

<div class="topic-metadata">

**Author:** [@xq1xq1xq1](https://discuss.elastic.co/u/xq1xq1xq1)\
**Replies:** 16\
**Last updated:** [April 24, 2019, 7:17pm UTC](https://discuss.elastic.co/t/almost-4-hour-delay-in-documents-being-received-and-showing-up-in-kibana-discover/175067 "2019-04-24T19:17:54Z")

</div>

Kibana: Version: 5.6.13 ElasticSearch: 5.6.13 Ubuntu 18.04 CPUs: 4 Memory: 28 GB This is running inside a QEMU KVM VM and the box is not heavily taxed. I ingesting live packets into elasticsearch using tshark. W…

---

## [NoNodeException Error when trying to create a transport client for Elasticsearch](https://discuss.elastic.co/t/nonodeexception-error-when-trying-to-create-a-transport-client-for-elasticsearch/37067)

<div class="topic-metadata">

**Author:** [@Isra](https://discuss.elastic.co/u/Isra)\
**Replies:** 9\
**Last updated:** [December 15, 2015, 9:10am UTC](https://discuss.elastic.co/t/nonodeexception-error-when-trying-to-create-a-transport-client-for-elasticsearch/37067 "2015-12-15T09:10:48Z")

</div>

I am running Elasticsearch 2.1.0 on localhost:9200. What I need to do is read from an index using Java for ES, without having to create a node, because I care about the speed of my application. The following is my code: …

---

## [Need some help with Geo Enrichment - SOLVED](https://discuss.elastic.co/t/need-some-help-with-geo-enrichment-solved/42340)

<div class="topic-metadata">

**Author:** [@Wayne\_Taylor](https://discuss.elastic.co/u/Wayne_Taylor)\
**Replies:** 11\
**Last updated:** [June 27, 2016, 1:28pm UTC](https://discuss.elastic.co/t/need-some-help-with-geo-enrichment-solved/42340 "2016-06-27T13:28:33Z")

</div>

Hi All, I have a logstash configuration which is getting sales activity from a JDBC connection. This data has a locatorID. My configuration looks like: \`input { jdbc { jdbc\_connection\_string =\> "…

---

## [CORS Error while using the Elastic Enterprise Search](https://discuss.elastic.co/t/cors-error-while-using-the-elastic-enterprise-search/263601)

<div class="topic-metadata">

**Author:** [@anuragchoudhary01](https://discuss.elastic.co/u/anuragchoudhary01)\
**Replies:** 12\
**Last updated:** [September 7, 2021, 12:50pm UTC](https://discuss.elastic.co/t/cors-error-while-using-the-elastic-enterprise-search/263601 "2021-09-07T12:50:59Z")

</div>

Hi, I have deployed the Enterprise Search using docker and when I am trying to access it, using react-js client(@elastic/search-ui-app-search-connector). I am getting CORS Error as the URL for both are different. Just …

---

## [Terms query is not working in Elasticsearch 7.1.0 and 7.2.0](https://discuss.elastic.co/t/terms-query-is-not-working-in-elasticsearch-7-1-0-and-7-2-0/189749)

<div class="topic-metadata">

**Author:** [@KRISHNA\_SINHA](https://discuss.elastic.co/u/KRISHNA_SINHA)\
**Replies:** 10\
**Last updated:** [July 10, 2019, 5:17pm UTC](https://discuss.elastic.co/t/terms-query-is-not-working-in-elasticsearch-7-1-0-and-7-2-0/189749 "2019-07-10T17:17:31Z")

</div>

The terms query does not give any output. However, it does not give any error message as well. Sample Query GET filebeat\*/\_search { "query" : { "bool": { "must": \[ {"terms": { "model": \["CM5","(null)"\] } } \] }…

---

## [Modification of term weight](https://discuss.elastic.co/t/modification-of-term-weight/3318)

<div class="topic-metadata">

**Author:** [@Michael\_Korbakov](https://discuss.elastic.co/u/Michael_Korbakov)\
**Replies:** 9\
**Last updated:** [September 23, 2010, 9:09pm UTC](https://discuss.elastic.co/t/modification-of-term-weight/3318 "2010-09-23T21:09:20Z")

</div>

Hi everybody. Is there any way to change term weight in the context of one particular document? Or, other words, to change TF value of specific term for specific document? I need this trick to promote specific docu…

---

## [Multiline codec](https://discuss.elastic.co/t/multiline-codec/41260)

<div class="topic-metadata">

**Author:** [@marcmga](https://discuss.elastic.co/u/marcmga)\
**Replies:** 14\
**Last updated:** [February 15, 2016, 5:59pm UTC](https://discuss.elastic.co/t/multiline-codec/41260 "2016-02-15T17:59:56Z")

</div>

Hi, I'm using multiline codec in my input configuration in order to merge lines in one "message". This lines are from a tomcat log. But as most of times it works, others doesn't. It mix logs from other "non-tomcat" log…

---

## [Fleet Server Setup failing](https://discuss.elastic.co/t/fleet-server-setup-failing/341380)

<div class="topic-metadata">

**Author:** [@sai\_kiran1](https://discuss.elastic.co/u/sai_kiran1)\
**Replies:** 11\
**Last updated:** [August 25, 2023, 4:00pm UTC](https://discuss.elastic.co/t/fleet-server-setup-failing/341380 "2023-08-25T16:00:55Z")

</div>

Hello, Trying to enroll fleet in docker env and the enroll is not happening with the below continuous log messages. \[root@eicillp949 ~\]# docker logs --since 10m -f elastic-agent Policy selected for enrollment: fleet-s…

---

## [Salesforce EventLogFIle Object impossible to retreive](https://discuss.elastic.co/t/salesforce-eventlogfile-object-impossible-to-retreive/85716)

<div class="topic-metadata">

**Author:** [@saversano](https://discuss.elastic.co/u/saversano)\
**Replies:** 13\
**Last updated:** [May 30, 2017, 8:35am UTC](https://discuss.elastic.co/t/salesforce-eventlogfile-object-impossible-to-retreive/85716 "2017-05-30T08:35:30Z")

</div>

Hello Team,, i'm trying to retreive Logfiles from EventLogFile using Logstash and Salesforce plugin for logstash on my sandbox. I am able to retreive some objects (as per Opportunity, Account, Contact, etc.) but not Eve…

---

## [How to add Date in mutate add field](https://discuss.elastic.co/t/how-to-add-date-in-mutate-add-field/251601)

<div class="topic-metadata">

**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Replies:** 10\
**Last updated:** [October 15, 2020, 5:46am UTC](https://discuss.elastic.co/t/how-to-add-date-in-mutate-add-field/251601 "2020-10-15T05:46:21Z")

</div>

Hi Team I am using logstash v7.8 to extract data from ES v7.8 index and inserting respective records to ES v7.8 index-2. While doing so , I want to use filter --\> mutate --\> add\_field ==\> { "doc\_date" =\> "now-1d" } Ho…

---

## [Nombre de shard dans un index](https://discuss.elastic.co/t/nombre-de-shard-dans-un-index/144993)

<div class="topic-metadata">

**Author:** [@lebilien](https://discuss.elastic.co/u/lebilien)\
**Replies:** 15\
**Last updated:** [August 22, 2018, 12:29pm UTC](https://discuss.elastic.co/t/nombre-de-shard-dans-un-index/144993 "2018-08-22T12:29:11Z")

</div>

bonjour, sur un index il y a un nombre max de shard à mette ou pas . Actuellement j'ai mis 10 shard et j'ai 7 million de documents actuellement . Sur une requête avec une aggs Terms et dedans une sous aggs SUM je trouve…

---

## [Debian repository checksum mismatch](https://discuss.elastic.co/t/debian-repository-checksum-mismatch/370425)

<div class="topic-metadata">

**Author:** [@lisuml](https://discuss.elastic.co/u/lisuml)\
**Replies:** 20\
**Last updated:** [November 22, 2024, 10:19am UTC](https://discuss.elastic.co/t/debian-repository-checksum-mismatch/370425 "2024-11-22T10:19:31Z")

</div>

I'm getting the following error when trying to add the elastic repository to my Debian 12 box: E: Failed to fetch https://artifacts.elastic.co/packages/8.x/apt/dists/stable/main/binary-amd64/Packages.bz2 File has unexp…

---

## [Not able to create index with the same name](https://discuss.elastic.co/t/not-able-to-create-index-with-the-same-name/24063)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 10\
**Last updated:** [April 20, 2016, 11:53am UTC](https://discuss.elastic.co/t/not-able-to-create-index-with-the-same-name/24063 "2016-04-20T11:53:01Z")

</div>

Hi Experts, I am using ES 1.6.0 and LS 1.5.0 . I am parsing CSV file and store it to ES. Since I am in Dev environment so I am changing my LS conf file regularly, e.g applying different filters , mutate etc. Now every …

---

## [Missing repodata/filelists.xml in yum repo causes repo sync to fail](https://discuss.elastic.co/t/missing-repodata-filelists-xml-in-yum-repo-causes-repo-sync-to-fail/374168)

<div class="topic-metadata">

**Author:** [@sobjerke](https://discuss.elastic.co/u/sobjerke)\
**Replies:** 35\
**Last updated:** [August 15, 2025, 7:47am UTC](https://discuss.elastic.co/t/missing-repodata-filelists-xml-in-yum-repo-causes-repo-sync-to-fail/374168 "2025-08-15T07:47:56Z")

</div>

We are using Red Hat Satellite server to distribute rpm packages to our servers. It synchronizes the Elasticsearch 8.x yum repository (https://artifacts.elastic.co/packages/8.x/yum) only downloading repository metadata a…

---

## [Getting error while starting server](https://discuss.elastic.co/t/getting-error-while-starting-server/21361)

<div class="topic-metadata">

**Author:** [@Vijayakumari\_B\_N](https://discuss.elastic.co/u/Vijayakumari_B_N)\
**Replies:** 15\
**Last updated:** [January 1, 2015, 4:25pm UTC](https://discuss.elastic.co/t/getting-error-while-starting-server/21361 "2015-01-01T16:25:26Z")

</div>

Hi, I get the below error when i tried to restart my jboss server after integrating with elastic server. I am using elastic search 1.4 version. Can some one let me know where i am doing wrong. Elastic server absol…

---

## [No data on graphs](https://discuss.elastic.co/t/no-data-on-graphs/53919)

<div class="topic-metadata">

**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\
**Replies:** 13\
**Last updated:** [July 1, 2016, 8:50am UTC](https://discuss.elastic.co/t/no-data-on-graphs/53919 "2016-07-01T08:50:36Z")

</div>

My marvel plugin was working fine until the license was 2 days from expiring. I installed the trial license from the web page and everything was great. Then I noticed the graphs were no longer generating and I was not …

---

## [Writing to dynamic/multi-resources not working with Pig and ES-Hadoop 2.2](https://discuss.elastic.co/t/writing-to-dynamic-multi-resources-not-working-with-pig-and-es-hadoop-2-2/40046)

<div class="topic-metadata">

**Author:** [@cjuste](https://discuss.elastic.co/u/cjuste)\
**Replies:** 14\
**Last updated:** [March 15, 2016, 1:40pm UTC](https://discuss.elastic.co/t/writing-to-dynamic-multi-resources-not-working-with-pig-and-es-hadoop-2-2/40046 "2016-03-15T13:40:19Z")

</div>

Hello, I'm trying ES-Hadoop to integrate it in our process. I'm using ES 2.1, Pig 0.14 and the version 2.2.0-rc1 of ES-Hadoop. I need to write on multiple indexes/types at the time. I'm reading a file with the curren…

[Previous page](https://discuss.elastic.co/top.md?page=92&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=94&per_page=50&period=all)
