# Top **URL:** https://discuss.elastic.co/top.md?page=935&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 936 --- ## [How to import blob type from mysql to es using logstash](https://discuss.elastic.co/t/how-to-import-blob-type-from-mysql-to-es-using-logstash/106136)
**Author:** [@Canappeco](https://discuss.elastic.co/u/Canappeco)\ **Replies:** 5\ **Last updated:** [November 2, 2017, 10:05am UTC](https://discuss.elastic.co/t/how-to-import-blob-type-from-mysql-to-es-using-logstash/106136 "2017-11-02T10:05:11Z")
Hi all. I am importing data from mysql to es using logstash. I have a blob type in a table in mysql. Because I used to convert the array of double to binary and save as blob. Now I want to import this type of data to es… --- ## [Metricbeat not collecting memory info](https://discuss.elastic.co/t/metricbeat-not-collecting-memory-info/80145)
**Author:** [@francopp](https://discuss.elastic.co/u/francopp)\ **Replies:** 5\ **Last updated:** [March 27, 2017, 6:40pm UTC](https://discuss.elastic.co/t/metricbeat-not-collecting-memory-info/80145 "2017-03-27T18:40:53Z")
After some Swap configuration changes metricbeat stop sending memory info I got any other type but memory info. About an hour ago we made some changes in our server configuration and now we got this The changes we … --- ## [Snapshot with datetime in elasticsearch](https://discuss.elastic.co/t/snapshot-with-datetime-in-elasticsearch/52607)
**Author:** [@Surya](https://discuss.elastic.co/u/Surya)\ **Replies:** 5\ **Last updated:** [July 9, 2016, 4:12pm UTC](https://discuss.elastic.co/t/snapshot-with-datetime-in-elasticsearch/52607 "2016-07-09T16:12:51Z")
How to snapshot from a specific datetime. Is there any query to filter based on datetime. --- ## [Logstash with Kafka](https://discuss.elastic.co/t/logstash-with-kafka/37776)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 5\ **Last updated:** [January 10, 2016, 9:55pm UTC](https://discuss.elastic.co/t/logstash-with-kafka/37776 "2016-01-10T21:55:28Z")
Does logstash support kafka 0.9? I am not seeing anything about the Kafka version in the logstash-kafka doc. --- ## [Index lifecycle not working because of "FORBIDDEN/12/index read-only / allow delete"](https://discuss.elastic.co/t/index-lifecycle-not-working-because-of-forbidden-12-index-read-only-allow-delete/224074)
**Author:** [@dao](https://discuss.elastic.co/u/dao)\ **Replies:** 4\ **Last updated:** [March 18, 2020, 4:17pm UTC](https://discuss.elastic.co/t/index-lifecycle-not-working-because-of-forbidden-12-index-read-only-allow-delete/224074 "2020-03-18T16:17:42Z")
Hello, I am still struggling with the index lifecycle management on my elastic.co cluster. in the index management section of kibana, I have some errors: 3 indices have lifecycle errors I focus to one of them. Effect… --- ## [Logstash ignoring a particular pipeline defined in pipelines.yml :No configuration found in the configured sources](https://discuss.elastic.co/t/logstash-ignoring-a-particular-pipeline-defined-in-pipelines-yml-no-configuration-found-in-the-configured-sources/125272)
**Author:** [@Ongun](https://discuss.elastic.co/u/Ongun)\ **Replies:** 4\ **Last updated:** [March 27, 2018, 2:16am UTC](https://discuss.elastic.co/t/logstash-ignoring-a-particular-pipeline-defined-in-pipelines-yml-no-configuration-found-in-the-configured-sources/125272 "2018-03-27T02:16:09Z")
I am a new user of ELK Stack and my main purpose is visualizing data from SQL tables. The computer I use ELK on is running 64-bit Windows 10 Enterprise Edition. The installation consists of Elastic Search v 6.2.2, Logsta… --- ## [How the indexing requests will be routed to Data nodes from client node](https://discuss.elastic.co/t/how-the-indexing-requests-will-be-routed-to-data-nodes-from-client-node/73815)
**Author:** [@nethis](https://discuss.elastic.co/u/nethis)\ **Replies:** 4\ **Last updated:** [February 3, 2017, 10:26am UTC](https://discuss.elastic.co/t/how-the-indexing-requests-will-be-routed-to-data-nodes-from-client-node/73815 "2017-02-03T10:26:18Z")
Hi , I have cluster of 4 data nodes, 3 master and 1 client When I see the cat/threadpool, I could see the queue and active count only 2 nodes pre-dominently. 10.158.36.204 10.158.36.204 0 0 0 0 0 0 0 0 0 10.158.36… --- ## [MapperParsingException\[Field name \[@source.host\] cannot contain '.'\]](https://discuss.elastic.co/t/mapperparsingexception-field-name-source-host-cannot-contain/45859)
**Author:** [@sdselk](https://discuss.elastic.co/u/sdselk)\ **Replies:** 4\ **Last updated:** [April 1, 2016, 9:50pm UTC](https://discuss.elastic.co/t/mapperparsingexception-field-name-source-host-cannot-contain/45859 "2016-04-01T21:50:09Z")
I 'm running ELK stack on Redhat 6 and I'm getting the above error. Here are some details: ./elasticsearch --version Version: 2.2.1, Build: d045fc2/2016-03-09T09:38:54Z, JVM: 1.7.0\_95 ./logstash --version logstash… --- ## [Not able to login even after correct credentials in x-pack](https://discuss.elastic.co/t/not-able-to-login-even-after-correct-credentials-in-x-pack/317926)
**Author:** [@Murali\_Krishna2](https://discuss.elastic.co/u/Murali_Krishna2)\ **Replies:** 8\ **Last updated:** [November 17, 2022, 12:28am UTC](https://discuss.elastic.co/t/not-able-to-login-even-after-correct-credentials-in-x-pack/317926 "2022-11-17T00:28:54Z")
Hi Team, I am not able to login to elastic even after typing the correct username and password. Screenshot of the user details : In the above image, role is "viewer". We are able to login to those users whose role… --- ## [2 instance filebeat reading the same file](https://discuss.elastic.co/t/2-instance-filebeat-reading-the-same-file/243704)
**Author:** [@zeO](https://discuss.elastic.co/u/zeO)\ **Replies:** 3\ **Last updated:** [August 4, 2020, 3:07pm UTC](https://discuss.elastic.co/t/2-instance-filebeat-reading-the-same-file/243704 "2020-08-04T15:07:42Z")
Hi, I am using Elastic Kibana and filebeat to read and monitor my docker container (docker stack) logs. for compagnie policy reason I need to send the logs at 2 elasticsearch locations (the project instance and the compa… --- ## [Stemming not performed](https://discuss.elastic.co/t/stemming-not-performed/134609)
**Author:** [@roshni](https://discuss.elastic.co/u/roshni)\ **Replies:** 3\ **Last updated:** [June 5, 2018, 2:11pm UTC](https://discuss.elastic.co/t/stemming-not-performed/134609 "2018-06-05T14:11:06Z")
Hi , I am using elasticsearch v5.4.3 it seems it is not supporting stemming. \ curl -X PUT "localhost:9200/my\_index" -H 'Content-Type: application/json' -d' { "settings": { "analysis" : { "analyzer" : { "my\_ana… --- ## [How to use the fields collection in prospector with filter expression in logstash](https://discuss.elastic.co/t/how-to-use-the-fields-collection-in-prospector-with-filter-expression-in-logstash/119322)
**Author:** [@stephenpatten](https://discuss.elastic.co/u/stephenpatten)\ **Replies:** 8\ **Last updated:** [March 14, 2018, 6:45pm UTC](https://discuss.elastic.co/t/how-to-use-the-fields-collection-in-prospector-with-filter-expression-in-logstash/119322 "2018-03-14T18:45:14Z")
Hello, I'm running 6.1.2. Given this prospector: - type: log enabled: true multiline.pattern: '^\[0-9\]{4}-\[0-9\]{2}-\[0-9\]{2}' multiline.negate: true multiline.match: after ignore\_older: 24h fields: envir… --- ## [Troubleshooting ECE fail after restart](https://discuss.elastic.co/t/troubleshooting-ece-fail-after-restart/121012)
**Author:** [@D.J](https://discuss.elastic.co/u/D.J)\ **Replies:** 3\ **Last updated:** [February 26, 2018, 2:56pm UTC](https://discuss.elastic.co/t/troubleshooting-ece-fail-after-restart/121012 "2018-02-26T14:56:41Z")
Hi, I have installed ECE 1.1.3 , used the UI to create 3 nodes cluster. I wanted to check how it will behave after host failure (reboot). now, I see docker is up, in "docker ps" I see many containers running. I wa… --- ## [Попытка связать документы в разных индексах по полю](https://discuss.elastic.co/t/topic/44542)
**Author:** [@SKuzubov](https://discuss.elastic.co/u/SKuzubov)\ **Replies:** 3\ **Last updated:** [March 21, 2016, 4:14pm UTC](https://discuss.elastic.co/t/topic/44542 "2016-03-21T16:14:04Z")
Здравствуйте, коллеги. Представьте ситуацию когда есть три лог-файла (три индекса) которые импортируются в ES с использованием LS. Каждый лог-файл пишет независимое приложение. Лог-файлы представляют запись всех входящи… --- ## [3 Elasticsearch node cluster](https://discuss.elastic.co/t/3-elasticsearch-node-cluster/1701)
**Author:** [@HSVK](https://discuss.elastic.co/u/HSVK)\ **Replies:** 8\ **Last updated:** [June 3, 2015, 1:26pm UTC](https://discuss.elastic.co/t/3-elasticsearch-node-cluster/1701 "2015-06-03T13:26:10Z")
Hi, we were having 2 nodes one with master and data and the other with data and no master, now we have added an additional 3rd node into the cluster with data and no master. So what happened now is that the indices are c… --- ## [Logstash parse windows event nxlog](https://discuss.elastic.co/t/logstash-parse-windows-event-nxlog/303138)
**Author:** [@Chloe\_Boissavy](https://discuss.elastic.co/u/Chloe_Boissavy)\ **Replies:** 7\ **Last updated:** [May 4, 2022, 2:52pm UTC](https://discuss.elastic.co/t/logstash-parse-windows-event-nxlog/303138 "2022-05-04T14:52:15Z")
Hello, I am using nxlog to send windows data at my ELK. I would like to parse the "message" part. An example below : "message": \[ "2022-04-25 10:54:13 - DESKTOP-QMCS5UA - Security - INFO - 4672 - Privilèges… --- ## [A document doesn't have a value for a vector field](https://discuss.elastic.co/t/a-document-doesnt-have-a-value-for-a-vector-field/223564)
**Author:** [@dvisz-inf](https://discuss.elastic.co/u/dvisz-inf)\ **Replies:** 2\ **Last updated:** [March 16, 2020, 7:09pm UTC](https://discuss.elastic.co/t/a-document-doesnt-have-a-value-for-a-vector-field/223564 "2020-03-16T19:09:48Z")
Hi all, Not all of my documents have a value for a vector field, and I seem to get this error when trying to use dotProductSparse on such documents: A document doesn't have a value for a vector field It seems that tes… --- ## [Problem with tags field in Elasticsearch](https://discuss.elastic.co/t/problem-with-tags-field-in-elasticsearch/111323)
**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\ **Replies:** 2\ **Last updated:** [December 12, 2017, 3:28pm UTC](https://discuss.elastic.co/t/problem-with-tags-field-in-elasticsearch/111323 "2017-12-12T15:28:47Z")
Hi all, here is the issue when i take input from a file and enriching with jdbc streaming filter the below conf i used input { file { path =\> "/home/sgpl/ss" type =\> "end" sincedb\_path =\> "/tmp/titanickk" st… --- ## [Minute Interval aggregation](https://discuss.elastic.co/t/minute-interval-aggregation/87218)
**Author:** [@Skolty](https://discuss.elastic.co/u/Skolty)\ **Replies:** 2\ **Last updated:** [May 26, 2017, 12:19pm UTC](https://discuss.elastic.co/t/minute-interval-aggregation/87218 "2017-05-26T12:19:48Z")
Hi Guys ! I have installed ElasticSearch and it works well :slight\_smile: But I have a question concerning aggregates. I have data like this : Start Event : 2017-01-01T08:00:00 End Event : 2017-01-01T09:00:00 I'm… --- ## [Parsing nested key/value pairs with kv](https://discuss.elastic.co/t/parsing-nested-key-value-pairs-with-kv/33536)
**Author:** [@gogators](https://discuss.elastic.co/u/gogators)\ **Replies:** 2\ **Last updated:** [August 30, 2016, 7:59pm UTC](https://discuss.elastic.co/t/parsing-nested-key-value-pairs-with-kv/33536 "2016-08-30T19:59:53Z")
I'm trying to parse a log file that is composed of key/value pairs separated by '='. The problem I have is that some of the keys need to be interpreted as nested objects. For example a log line might look like this: 11… --- ## [Becoming ECS Compliant](https://discuss.elastic.co/t/becoming-ecs-compliant/340080)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 6\ **Last updated:** [August 4, 2023, 3:33pm UTC](https://discuss.elastic.co/t/becoming-ecs-compliant/340080 "2023-08-04T15:33:31Z")
I've been ingesting datasets from before ECS was a thing that now have an ECS mapping. What would be the most efficient means of ingesting data (moving forward) so that it is ECS compliant? Examples of datasets are For… --- ## [Backoff is not reset correctly after a correct ack is sent](https://discuss.elastic.co/t/backoff-is-not-reset-correctly-after-a-correct-ack-is-sent/51816)
**Author:** [@adioss](https://discuss.elastic.co/u/adioss)\ **Replies:** 4\ **Last updated:** [June 6, 2016, 6:47pm UTC](https://discuss.elastic.co/t/backoff-is-not-reset-correctly-after-a-correct-ack-is-sent/51816 "2016-06-06T18:47:31Z")
Hello! Using Filebeat v1.2.3: In case of error (no correct ACK received), filebeat retries to send the frame but before, the process is stopped during a computed duration: backoff (that is exponential until 1min) . Bu… --- ## [String Occurrences within a String](https://discuss.elastic.co/t/string-occurrences-within-a-string/177121)
**Author:** [@thalfast](https://discuss.elastic.co/u/thalfast)\ **Replies:** 1\ **Last updated:** [April 17, 2019, 11:38am UTC](https://discuss.elastic.co/t/string-occurrences-within-a-string/177121 "2019-04-17T11:38:56Z")
I am new to Elastic and Kibana. So far I have had very little issue in developing basic visualizations and searches. However I have come upon an issue that I have seen other people post about but cannot seem to resolve… --- ## [Unable to use nginx as reverse proxy in kibana](https://discuss.elastic.co/t/unable-to-use-nginx-as-reverse-proxy-in-kibana/178876)
**Author:** [@opensourcengineer](https://discuss.elastic.co/u/opensourcengineer)\ **Replies:** 5\ **Last updated:** [May 3, 2019, 1:55pm UTC](https://discuss.elastic.co/t/unable-to-use-nginx-as-reverse-proxy-in-kibana/178876 "2019-05-03T13:55:02Z")
I am unable to use the nginx as reverse proxy in kibana. kibana dashboard is working fine on 172.25.1.x:5601 kibana service is working fine server block in the /etc/nginx/nginx.conf are below: server { listen \*:8… --- ## [Having Kibana Spaces behind their own Reverse Proxy](https://discuss.elastic.co/t/having-kibana-spaces-behind-their-own-reverse-proxy/169500)
**Author:** [@attzonko](https://discuss.elastic.co/u/attzonko)\ **Replies:** 5\ **Last updated:** [March 7, 2019, 1:47pm UTC](https://discuss.elastic.co/t/having-kibana-spaces-behind-their-own-reverse-proxy/169500 "2019-03-07T13:47:43Z")
I am wondering if the following is possible to set up: Have a vanity url for different spaces. Lets say we have two spaces defined 'foo' and 'bar' in Kibana. What I would like to do is have an url like foo.example.com w… --- ## [Elasticsearch data deletion and performance](https://discuss.elastic.co/t/elasticsearch-data-deletion-and-performance/81582)
**Author:** [@zilva](https://discuss.elastic.co/u/zilva)\ **Replies:** 5\ **Last updated:** [April 10, 2017, 5:16am UTC](https://discuss.elastic.co/t/elasticsearch-data-deletion-and-performance/81582 "2017-04-10T05:16:57Z")
I would like to ask how to organize data in cluster so that optimal performance and stability could be achieved? My use case: Every day cluster is ingesting around 10GB of documents. Now it contains around 3TB of data(… --- ## [Kibana Authentication from an an external application](https://discuss.elastic.co/t/kibana-authentication-from-an-an-external-application/207371)
**Author:** [@vishal\_M](https://discuss.elastic.co/u/vishal_M)\ **Replies:** 3\ **Last updated:** [November 26, 2019, 6:30pm UTC](https://discuss.elastic.co/t/kibana-authentication-from-an-an-external-application/207371 "2019-11-26T18:30:41Z")
Hi Team, I have a requirement of integrating the Kibana dashboard into my react application. The dashboard may contain multiple charts(Pie, Time series, etc). And, the application will be used by many users. So, the dat… --- ## [Tolerance spelling](https://discuss.elastic.co/t/tolerance-spelling/83028)
**Author:** [@Maher\_Ben\_Taleb\_Ali](https://discuss.elastic.co/u/Maher_Ben_Taleb_Ali)\ **Replies:** 3\ **Last updated:** [May 4, 2017, 5:46am UTC](https://discuss.elastic.co/t/tolerance-spelling/83028 "2017-05-04T05:46:45Z")
Hi, I need help in optimizing the query to increase the number of matches without affecting the accuracy. What are the best options to tolerate some spelling mistakes? Thank you. --- ## [Multi\_match query with filters](https://discuss.elastic.co/t/multi-match-query-with-filters/35971)
**Author:** [@Juan\_Diego\_Calle](https://discuss.elastic.co/u/Juan_Diego_Calle)\ **Replies:** 0\ **Last updated:** [December 1, 2015, 12:44am UTC](https://discuss.elastic.co/t/multi-match-query-with-filters/35971 "2015-12-01T00:44:21Z")
I want to do a multi\_match query with filters and the only way I was able to do it was like this { "query": { "bool": { "should": \[ { "multi\_match": { "query": "auto bonito ro… --- ## [Watcher query current index by week](https://discuss.elastic.co/t/watcher-query-current-index-by-week/208750)
**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\ **Replies:** 6\ **Last updated:** [November 20, 2019, 9:10pm UTC](https://discuss.elastic.co/t/watcher-query-current-index-by-week/208750 "2019-11-20T21:10:55Z")
I'm trying to create a watcher that will query the current index and indexes are rolled over each week with a format of flows-2019.46. I'm having troubles trying to get that expression to work in a watcher and could use … --- ## [Multiline negation](https://discuss.elastic.co/t/multiline-negation/55447)
**Author:** [@Mormaii](https://discuss.elastic.co/u/Mormaii)\ **Replies:** 6\ **Last updated:** [July 15, 2016, 6:16am UTC](https://discuss.elastic.co/t/multiline-negation/55447 "2016-07-15T06:16:45Z")
This is the data I have (this is one entry each). "MAIN\_cache\_hit" =\> 1472612747 "MAIN\_client\_req" =\> 1524049030 "MAIN\_fetch\_1xx" =\> 0 "MAIN\_fetch\_204" =\> 0 I'm trying to group MAIN\_cache\_hit and MAIN\_client\_req on a … --- ## [Ривер и клиент](https://discuss.elastic.co/t/topic/27248)
**Author:** [@111](https://discuss.elastic.co/u/111)\ **Replies:** 6\ **Last updated:** [August 21, 2015, 7:03am UTC](https://discuss.elastic.co/t/topic/27248 "2015-08-21T07:03:22Z")
Добрый день! Возникла проблема с ривером следующего рода: при отправке запроса типа PutMappingRequest (при существующем индексе) ривер виснет. Пример кода: public class ObjectsRiver extends AbstractRiverComponent i… --- ## ["Message not fully read (response)" after upgrading 0.90.0 to 0.90.1](https://discuss.elastic.co/t/message-not-fully-read-response-after-upgrading-0-90-0-to-0-90-1/12860)
**Author:** [@Dave\_Konopka](https://discuss.elastic.co/u/Dave_Konopka)\ **Replies:** 6\ **Last updated:** [July 22, 2013, 3:52pm UTC](https://discuss.elastic.co/t/message-not-fully-read-response-after-upgrading-0-90-0-to-0-90-1/12860 "2013-07-22T15:52:44Z")
We recently updated a three node cluster from 0.90.0 to 0.90.1. Now one of the nodes is intermittently showing messages like these in the logs: \[transport.netty\] Message not fully read (response) for \[12652\] handler… --- ## [How can I add a ilm policy to an existing datastream index](https://discuss.elastic.co/t/how-can-i-add-a-ilm-policy-to-an-existing-datastream-index/316931)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 4\ **Last updated:** [November 4, 2022, 11:12pm UTC](https://discuss.elastic.co/t/how-can-i-add-a-ilm-policy-to-an-existing-datastream-index/316931 "2022-11-04T23:12:37Z")
Some how I have got an index (currently being written) in a data stream which does not have an ilm setting and therefore is not getting rolled over. It is unclear to me what I should do. When I tried to close the index… --- ## [Kibana watcher search results restricted to 10](https://discuss.elastic.co/t/kibana-watcher-search-results-restricted-to-10/145780)
**Author:** [@TheCodingKnight](https://discuss.elastic.co/u/TheCodingKnight)\ **Replies:** 4\ **Last updated:** [August 24, 2018, 11:29am UTC](https://discuss.elastic.co/t/kibana-watcher-search-results-restricted-to-10/145780 "2018-08-24T11:29:39Z")
I've setup a watcher in Kibana. The results out of this are restricted to the top 10. Is there a way to change/configure this value? Any pointers appreciated. --- ## [Parsing date without a time stamp](https://discuss.elastic.co/t/parsing-date-without-a-time-stamp/138777)
**Author:** [@jspeer](https://discuss.elastic.co/u/jspeer)\ **Replies:** 4\ **Last updated:** [July 5, 2018, 8:20pm UTC](https://discuss.elastic.co/t/parsing-date-without-a-time-stamp/138777 "2018-07-05T20:20:38Z")
We have a field that includes the date with no timestamp. When it's indexed into elastic it's set to UTC time, so the date displayed is always the previous date. Is there a way to set either a filter to convert the date … --- ## [Grok array of jsons](https://discuss.elastic.co/t/grok-array-of-jsons/87484)
**Author:** [@Kiranmai\_Reddy](https://discuss.elastic.co/u/Kiranmai_Reddy)\ **Replies:** 4\ **Last updated:** [June 7, 2017, 9:57am UTC](https://discuss.elastic.co/t/grok-array-of-jsons/87484 "2017-06-07T09:57:16Z")
how do I grok array of jsons eg: \[2017-05-29 02:17:18\] INFO – \[ActivityServiceRest:89\] – \[{“callId”:”kjwefkjweqkfb”},{“callId”:”nwekgwnkqgkqr”},{“callId”:”ohjiwnwbnwbrk”}\] I want to store all the callId's in a field ca… --- ## [Can't install cloud-aws plugin](https://discuss.elastic.co/t/cant-install-cloud-aws-plugin/7770)
**Author:** [@Eric\_Jain](https://discuss.elastic.co/u/Eric_Jain)\ **Replies:** 4\ **Last updated:** [May 19, 2012, 3:41am UTC](https://discuss.elastic.co/t/cant-install-cloud-aws-plugin/7770 "2012-05-19T03:41:08Z")
$ plugin -install elasticsearch/elasticsearch-cloud-aws/1.4.0 -\> Installing elasticsearch/elasticsearch-cloud-aws/1.4.0... Trying https://github.com/downloads/elasticsearch/elasticsearch-cloud-aws/elasticsearch-cloud-a… --- ## [Monitoring: Error 400 Bad Request: Unable to parse/serialize body](https://discuss.elastic.co/t/monitoring-error-400-bad-request-unable-to-parse-serialize-body/73827)
**Author:** [@dandrestor](https://discuss.elastic.co/u/dandrestor)\ **Replies:** 2\ **Last updated:** [February 6, 2017, 7:56am UTC](https://discuss.elastic.co/t/monitoring-error-400-bad-request-unable-to-parse-serialize-body/73827 "2017-02-06T07:56:13Z")
Hi there, I'm using ES 5.0.1 with X-Pack with only Monitoring activated on a basic license. In Kibana, if I go to Monitoring -\> My cluster -\> Elasticsearch -\> Indexes, I get the error in the title. I checked (briefly) … --- ## [Obtener un json de una entrada de log](https://discuss.elastic.co/t/obtener-un-json-de-una-entrada-de-log/166217)
**Author:** [@Lucas\_Fernandez](https://discuss.elastic.co/u/Lucas_Fernandez)\ **Replies:** 8\ **Last updated:** [January 29, 2019, 6:43pm UTC](https://discuss.elastic.co/t/obtener-un-json-de-una-entrada-de-log/166217 "2019-01-29T18:43:57Z")
Buenas!! necesitaria poder obtener un json de una entrada de log y poder convertir los campos de ese json a campos queryables (cabe destacar que esos campos pueden estar desordenados) en kibana a traves de elasticsearch. … --- ## [Logstash not pushing data to AWS Elastcisearch](https://discuss.elastic.co/t/logstash-not-pushing-data-to-aws-elastcisearch/137579)
**Author:** [@Shweta\_Priyadarshani](https://discuss.elastic.co/u/Shweta_Priyadarshani)\ **Replies:** 7\ **Last updated:** [June 27, 2018, 10:19am UTC](https://discuss.elastic.co/t/logstash-not-pushing-data-to-aws-elastcisearch/137579 "2018-06-27T10:19:45Z")
Hello everyone, I am trying to push logs from logstash to Elasticsearch but its giving below error Sending Logstash's logs to D:/shweta/ELK\_poc/logstash-6.3.0/logs which is now configured via log4j2.properties \[2018-0… --- ## [Upgrade to 6.0 with basic license](https://discuss.elastic.co/t/upgrade-to-6-0-with-basic-license/107690)
**Author:** [@Zsolt](https://discuss.elastic.co/u/Zsolt)\ **Replies:** 7\ **Last updated:** [November 17, 2017, 9:22am UTC](https://discuss.elastic.co/t/upgrade-to-6-0-with-basic-license/107690 "2017-11-17T09:22:04Z")
I'm on 5.6.3 and the upgrade assistant is telling me to reindex .watches and .triggered\_watches - but this fails with "current license is non-compliant for \[watcher\]". .triggered\_watches I just deleted, but .watches ind… --- ## [SNMP Dashboard - Can you select a 'field' with wildcard so that it can handle multiple vendors' OIDs?](https://discuss.elastic.co/t/snmp-dashboard-can-you-select-a-field-with-wildcard-so-that-it-can-handle-multiple-vendors-oids/100915)
**Author:** [@adnil](https://discuss.elastic.co/u/adnil)\ **Replies:** 1\ **Last updated:** [September 18, 2017, 8:02pm UTC](https://discuss.elastic.co/t/snmp-dashboard-can-you-select-a-field-with-wildcard-so-that-it-can-handle-multiple-vendors-oids/100915 "2017-09-18T20:02:28Z")
New to ELK and trying to create a dashboard that displays SNMP traps from multiple vendors' devices. Would like to create a general table that can display traps from all vendors. However, when the drop-down for 'field' … --- ## [Get latest log file](https://discuss.elastic.co/t/get-latest-log-file/48089)
**Author:** [@impiyush](https://discuss.elastic.co/u/impiyush)\ **Replies:** 7\ **Last updated:** [April 26, 2016, 4:47pm UTC](https://discuss.elastic.co/t/get-latest-log-file/48089 "2016-04-26T16:47:55Z")
I am trying to get logs from a SQL Server DB into ElasticSearch using LogStash. All the setup works fine and I am also able to see the logs in ES. As the DB is updated periodically, so I want to get the latest logs on an… --- ## [Multiply and adding fields in logstsh](https://discuss.elastic.co/t/multiply-and-adding-fields-in-logstsh/198767)
**Author:** [@Andrew22](https://discuss.elastic.co/u/Andrew22)\ **Replies:** 2\ **Last updated:** [September 9, 2019, 7:12pm UTC](https://discuss.elastic.co/t/multiply-and-adding-fields-in-logstsh/198767 "2019-09-09T19:12:03Z")
Hello, I am trying to convert three separate fields for hour minute and second to one in seconds so I have dome some research and found if \[hour\] and \[minute\] and \[second\] { ruby { c… --- ## [Refresh On Bulk Update is Good or bad](https://discuss.elastic.co/t/refresh-on-bulk-update-is-good-or-bad/94726)
**Author:** [@krishnaraj221193](https://discuss.elastic.co/u/krishnaraj221193)\ **Replies:** 2\ **Last updated:** [July 28, 2017, 1:28am UTC](https://discuss.elastic.co/t/refresh-on-bulk-update-is-good-or-bad/94726 "2017-07-28T01:28:39Z")
Hello Sir, We are finding a issue for search after bulk update as the data is not getting refresh immediately so search fails to get the latest data so we thought of using bulk update with refresh but since we have to r… --- ## [Confused about index health: active\_shards + unassigned\_shards = number\_of\_shards \* 2](https://discuss.elastic.co/t/confused-about-index-health-active-shards-unassigned-shards-number-of-shards-2/11270)
**Author:** [@Arne\_Claassen](https://discuss.elastic.co/u/Arne_Claassen)\ **Replies:** 2\ **Last updated:** [March 27, 2013, 11:26pm UTC](https://discuss.elastic.co/t/confused-about-index-health-active-shards-unassigned-shards-number-of-shards-2/11270 "2013-03-27T23:26:43Z")
I'm running elastic search on a single server right now with shards set to 6 for future addition of nodes. When i restart the server I always get roughtly as many unassigned shards as active shards and looking at each… --- ## [Study On Rejected Refactorings](https://discuss.elastic.co/t/study-on-rejected-refactorings/244725)
**Author:** [@jpantiuchina](https://discuss.elastic.co/u/jpantiuchina)\ **Replies:** 0\ **Last updated:** [August 12, 2020, 1:33pm UTC](https://discuss.elastic.co/t/study-on-rejected-refactorings/244725 "2020-08-12T13:33:52Z")
Dear developers, As part of a research team from Università della Svizzera italiana (Switzerland) and University of Sannio (Italy), we have analyzed refactoring pull requests in elastic/elasticsearch repository and are … --- ## [Lost indices after upgrade to 6.2.1 from 5.4.1](https://discuss.elastic.co/t/lost-indices-after-upgrade-to-6-2-1-from-5-4-1/121892)
**Author:** [@candrews](https://discuss.elastic.co/u/candrews)\ **Replies:** 0\ **Last updated:** [February 28, 2018, 4:35pm UTC](https://discuss.elastic.co/t/lost-indices-after-upgrade-to-6-2-1-from-5-4-1/121892 "2018-02-28T16:35:52Z")
Hi, I have recently upgraded my elastic stack from 5.4.1 to 6.2.1, using puppet to manage the upgrade, on a server in two different environments - development and staging. The development server upgrade went fine, noth… --- ## [Apache module and var.paths not working](https://discuss.elastic.co/t/apache-module-and-var-paths-not-working/231725)
**Author:** [@Hausmeister](https://discuss.elastic.co/u/Hausmeister)\ **Replies:** 3\ **Last updated:** [May 11, 2020, 5:48am UTC](https://discuss.elastic.co/t/apache-module-and-var-paths-not-working/231725 "2020-05-11T05:48:11Z")
All, I'm facing an issue with the apache module paths variable. When enabling the module without any customization, filebeat starts as expected sending the default access-log and error.log files to a logstash/eleastic … [Previous page](https://discuss.elastic.co/top.md?page=934&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=936&per_page=50&period=all)