# Top **URL:** https://discuss.elastic.co/top.md?page=939&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 940 --- ## [Some field is not showing in ML](https://discuss.elastic.co/t/some-field-is-not-showing-in-ml/112354)
**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\ **Replies:** 6\ **Last updated:** [December 22, 2017, 4:53am UTC](https://discuss.elastic.co/t/some-field-is-not-showing-in-ml/112354 "2017-12-22T04:53:23Z")
Im testing in Kibana + ES 6.1 Im following guide in this blog https://www.elastic.co/blog/machine-learning-for-nginx-logs - Use Case 2: Changes in Website Behaviour But i cant see field "nginx.access.response" .. and t… --- ## [Is Elasticsearch GPLv3 compatible?](https://discuss.elastic.co/t/is-elasticsearch-gplv3-compatible/89706)
**Author:** [@mysticmode](https://discuss.elastic.co/u/mysticmode)\ **Replies:** 6\ **Last updated:** [June 16, 2017, 1:32pm UTC](https://discuss.elastic.co/t/is-elasticsearch-gplv3-compatible/89706 "2017-06-16T13:32:25Z")
Hello, I'm new to licensing.. Please be gentle with me :slight\_smile: I'm working on an ebook reader software which is licensed under GPLv3. I'm using ES with Apache Tika for full-text search on PDFs and EPUBs. I'… --- ## [Is there a Beat that reads from DynamoDB?](https://discuss.elastic.co/t/is-there-a-beat-that-reads-from-dynamodb/66434)
**Author:** [@teebu](https://discuss.elastic.co/u/teebu)\ **Replies:** 6\ **Last updated:** [November 18, 2016, 6:05pm UTC](https://discuss.elastic.co/t/is-there-a-beat-that-reads-from-dynamodb/66434 "2016-11-18T18:05:44Z")
I am currently using logstash plugin to sync data from AWS dynamodb, is it possible to use one of the beats products to accomplish the same thing? --- ## [How to index large text string data?](https://discuss.elastic.co/t/how-to-index-large-text-string-data/246848)
**Author:** [@sandeep\_rana](https://discuss.elastic.co/u/sandeep_rana)\ **Replies:** 3\ **Last updated:** [August 31, 2020, 4:47am UTC](https://discuss.elastic.co/t/how-to-index-large-text-string-data/246848 "2020-08-31T04:47:58Z")
Why max\_bytes\_length\_exceeded\_exception while insert a doc with some large text field data.. ? --- ## [Segmentation violation and other errors with Go 1.13.6 - Beats 7.5.1](https://discuss.elastic.co/t/segmentation-violation-and-other-errors-with-go-1-13-6-beats-7-5-1/215208)
**Author:** [@Rishi\_Misra](https://discuss.elastic.co/u/Rishi_Misra)\ **Replies:** 8\ **Last updated:** [January 17, 2020, 3:26pm UTC](https://discuss.elastic.co/t/segmentation-violation-and-other-errors-with-go-1-13-6-beats-7-5-1/215208 "2020-01-17T15:26:22Z")
Hi there, I am in the process of porting Beats on s390x architecture and noticed that there are multiple segmentation violation when running test cases (Most of the beats - for example Filebeat, Packetbeat, Heartbeat ha… --- ## [How does PercolatorQuery work when query extraction failed](https://discuss.elastic.co/t/how-does-percolatorquery-work-when-query-extraction-failed/200884)
**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\ **Replies:** 8\ **Last updated:** [September 26, 2019, 2:49pm UTC](https://discuss.elastic.co/t/how-does-percolatorquery-work-when-query-extraction-failed/200884 "2019-09-26T14:49:57Z")
Let me explain you our percolator architecture Our percolator docs look like this { "domain": \<\>, "query": { .. } } We have around 100K percolators registered. The number of percolators between domains can vary… --- ## [Certgen instances.yaml](https://discuss.elastic.co/t/certgen-instances-yaml/114769)
**Author:** [@aaron.lang](https://discuss.elastic.co/u/aaron.lang)\ **Replies:** 3\ **Last updated:** [January 12, 2018, 10:15am UTC](https://discuss.elastic.co/t/certgen-instances-yaml/114769 "2018-01-12T10:15:22Z")
Hello, If I run certgen in silent mode and set all my nodes up in the instances.yaml file is that all I need to do to get the inter-node communication encrypted in the cluster? Do I only need to run certgen on a single… --- ## [Logstash 5 stops event output after some time](https://discuss.elastic.co/t/logstash-5-stops-event-output-after-some-time/93407)
**Author:** [@Joaquim\_Freitas](https://discuss.elastic.co/u/Joaquim_Freitas)\ **Replies:** 3\ **Last updated:** [July 18, 2017, 4:40pm UTC](https://discuss.elastic.co/t/logstash-5-stops-event-output-after-some-time/93407 "2017-07-18T16:40:04Z")
Hi everyone, I'm struggling with a strange problem with a Logstash 5 that I'm running on a Windows 2012 x64.... Logstash seems to miss the output of some events, or sometimes it stops outputting events entirely. My L… --- ## [Sorted scroll internal workings for performance optimizations](https://discuss.elastic.co/t/sorted-scroll-internal-workings-for-performance-optimizations/23866)
**Author:** [@lisak](https://discuss.elastic.co/u/lisak)\ **Replies:** 3\ **Last updated:** [June 19, 2015, 11:29am UTC](https://discuss.elastic.co/t/sorted-scroll-internal-workings-for-performance-optimizations/23866 "2015-06-19T11:29:43Z")
Hi, could please anybody confirm my hypothesis regarding sorted scroll? 1) I assume that normal sorted search : - loads all fields we sort on into memory in case of fieldData, in case of doc\_values we are just not li… --- ## [Priority On Data Nodes In Elastic Search](https://discuss.elastic.co/t/priority-on-data-nodes-in-elastic-search/239804)
**Author:** [@Kumar\_Ashish](https://discuss.elastic.co/u/Kumar_Ashish)\ **Replies:** 5\ **Last updated:** [July 14, 2020, 4:52am UTC](https://discuss.elastic.co/t/priority-on-data-nodes-in-elastic-search/239804 "2020-07-14T04:52:23Z")
We have a self-hosted cluster on Kubernetes (EKS) with 1 master node and 2 master-data nodes. To get the performance, we have used NVMe instances. But if both the data node dies, the cluster gets corrupt and we have a lo… --- ## [Logstash outputs elasticsearch: Marking url as dead](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-marking-url-as-dead/138204)
**Author:** [@anton-xqz](https://discuss.elastic.co/u/anton-xqz)\ **Replies:** 1\ **Last updated:** [July 4, 2018, 6:36pm UTC](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-marking-url-as-dead/138204 "2018-07-04T18:36:55Z")
Hello, We are running ELK cluster on ec2 instance. Elasticsearch cluster in docker on ec2 instances in 3 regions. 33 nodes at total (i3.2xlarge for hot nodes and m5.4xlarge for warm nodes, 25TB data at total, ~2TB data… --- ## [Can logstash log event when parsing error?](https://discuss.elastic.co/t/can-logstash-log-event-when-parsing-error/45410)
**Author:** [@okwap](https://discuss.elastic.co/u/okwap)\ **Replies:** 1\ **Last updated:** [March 25, 2016, 10:15am UTC](https://discuss.elastic.co/t/can-logstash-log-event-when-parsing-error/45410 "2016-03-25T10:15:25Z")
Hi all, To explain my question, assume the following scenario: I use logstash to handle huge logs, and I notice that /var/log/logstash/logstash.log has an parsing error message: {:timestamp=\>"2016-03-25T10:00:21… --- ## [Elasticsearch 8.19.8, 9.1.8, and 9.2.2 Security Update (ESA-2025-27)](https://discuss.elastic.co/t/elasticsearch-8-19-8-9-1-8-and-9-2-2-security-update-esa-2025-27/384063)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [December 15, 2025, 10:14am UTC](https://discuss.elastic.co/t/elasticsearch-8-19-8-9-1-8-and-9-2-2-security-update-esa-2025-27/384063 "2025-12-15T10:14:49Z")
Elasticsearch Improper Authentication (ESA-2025-27) Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a… --- ## [Bootstrap.password for first installation with scripting](https://discuss.elastic.co/t/bootstrap-password-for-first-installation-with-scripting/342611)
**Author:** [@pepite](https://discuss.elastic.co/u/pepite)\ **Replies:** 5\ **Last updated:** [September 11, 2023, 1:32pm UTC](https://discuss.elastic.co/t/bootstrap-password-for-first-installation-with-scripting/342611 "2023-09-11T13:32:19Z")
Hi everybody, I need test for a script to change passwords of the built-in users. I test on a single-node cluster. I understand that i have to stop service on the node create bootstrap.password printf "tititi" … --- ## [Master node fail when unexpected error while indexing document](https://discuss.elastic.co/t/master-node-fail-when-unexpected-error-while-indexing-document/194788)
**Author:** [@Jehutywong](https://discuss.elastic.co/u/Jehutywong)\ **Replies:** 5\ **Last updated:** [August 12, 2019, 7:25am UTC](https://discuss.elastic.co/t/master-node-fail-when-unexpected-error-while-indexing-document/194788 "2019-08-12T07:25:45Z")
Elasticsearch version: 7.0.1 Master nodes: 3 Datanodes: 31 When one of my index fail to initiate primary shard (in my case its the .monitoring-es-7-2019.08.12 index). The leader master will fail in some minutes. The … --- ## [Issue with Installing X-Pack on ELK - Security Exception Error](https://discuss.elastic.co/t/issue-with-installing-x-pack-on-elk-security-exception-error/115002)
**Author:** [@thelonestargeek](https://discuss.elastic.co/u/thelonestargeek)\ **Replies:** 5\ **Last updated:** [January 11, 2018, 6:47am UTC](https://discuss.elastic.co/t/issue-with-installing-x-pack-on-elk-security-exception-error/115002 "2018-01-11T06:47:16Z")
I'm trying to install the X-Pack on ELK, but I'm having difficulty. Here is where I'm at: The elasticsearch and kibana installs have completed without issue I've installed X-Pack on logstash Issue #1: the instru… --- ## [Why one node has no shard at all](https://discuss.elastic.co/t/why-one-node-has-no-shard-at-all/204348)
**Author:** [@Nee\_Defeng](https://discuss.elastic.co/u/Nee_Defeng)\ **Replies:** 2\ **Last updated:** [October 20, 2019, 8:53pm UTC](https://discuss.elastic.co/t/why-one-node-has-no-shard-at-all/204348 "2019-10-20T20:53:59Z")
One index was created as Unassigned: /localhost:9200/\_cat/shards?v index shard prirep state docs store ip node .kibana\_task\_manager\_1 0 p STARTED 2 46.1kb… --- ## [Messing with "Umlaute" and how to manage Ö = ö Ü = ü Ä = ä á & ó = á é = é](https://discuss.elastic.co/t/messing-with-umlaute-and-how-to-manage-o-a-u-a-a-a-a-o-a-e-a/165790)
**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\ **Replies:** 2\ **Last updated:** [January 26, 2019, 1:14pm UTC](https://discuss.elastic.co/t/messing-with-umlaute-and-how-to-manage-o-a-u-a-a-a-a-o-a-e-a/165790 "2019-01-26T13:14:24Z")
Hi there, I have some issues with Ö Ü Ä ö ü ä á ó é etc. Codec plain is installed! log = csv by log4j2 standard charset ISO-8859-1 My Config: Filebeat: - type: log encoding: ISO-8859-1 Logstash: input { beats… --- ## [ECE - Unable to use base\_path in snapshot repository configuration](https://discuss.elastic.co/t/ece-unable-to-use-base-path-in-snapshot-repository-configuration/116316)
**Author:** [@benb](https://discuss.elastic.co/u/benb)\ **Replies:** 2\ **Last updated:** [January 30, 2018, 5:03pm UTC](https://discuss.elastic.co/t/ece-unable-to-use-base-path-in-snapshot-repository-configuration/116316 "2018-01-30T17:03:03Z")
When attempting to configure an S3 snapshot repository in ECE I'm unable to specify a base\_path like: { "type": "s3", "settings": { "bucket": "backups", "base\_path": "ece" } } When attemptin… --- ## [Kibana LDAP authentication Realm problem](https://discuss.elastic.co/t/kibana-ldap-authentication-realm-problem/95350)
**Author:** [@ashok\_n](https://discuss.elastic.co/u/ashok_n)\ **Replies:** 2\ **Last updated:** [August 2, 2017, 11:23am UTC](https://discuss.elastic.co/t/kibana-ldap-authentication-realm-problem/95350 "2017-08-02T11:23:07Z")
Hi, I would like to integrate Kibana with LDAP authentication, I followed the xpack realm configuration from official documentation but its throwing following error. Can some one help me by sharing kibana.yml with work… --- ## [Errors upon searching in Elasticsearch using PHP](https://discuss.elastic.co/t/errors-upon-searching-in-elasticsearch-using-php/88292)
**Author:** [@SamA](https://discuss.elastic.co/u/SamA)\ **Replies:** 2\ **Last updated:** [June 5, 2017, 7:40pm UTC](https://discuss.elastic.co/t/errors-upon-searching-in-elasticsearch-using-php/88292 "2017-06-05T19:40:34Z")
I am trying to search through my index using PHP. I have downloaded the vendor files and I have built the connection successfully. However, I am receiving some errors. These errors don't always occur though. If I refresh… --- ## [Does filebeat work with logrotation using compress mode?](https://discuss.elastic.co/t/does-filebeat-work-with-logrotation-using-compress-mode/81692)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 2\ **Last updated:** [April 11, 2017, 2:23am UTC](https://discuss.elastic.co/t/does-filebeat-work-with-logrotation-using-compress-mode/81692 "2017-04-11T02:23:25Z")
Hello. I am planning to use the filebeat to collect logs. All the logs will be rotated using logrotate command for linux Reading the posts I understood that filebeat keeps track of data by inode. However, if the lo… --- ## [Histogram Aggregation: With minimum doc count and extended bounds](https://discuss.elastic.co/t/histogram-aggregation-with-minimum-doc-count-and-extended-bounds/58495)
**Author:** [@mark2](https://discuss.elastic.co/u/mark2)\ **Replies:** 2\ **Last updated:** [September 19, 2016, 12:06pm UTC](https://discuss.elastic.co/t/histogram-aggregation-with-minimum-doc-count-and-extended-bounds/58495 "2016-09-19T12:06:16Z")
Hi There, I'm running ES 2.3.3 and have a question regarding Date Histograms with min doc count and extended bounds. I would like to return all buckets within a given date range (e.g. one month) including buckets with n… --- ## [Can't create snapshot repository on Windows cluster](https://discuss.elastic.co/t/cant-create-snapshot-repository-on-windows-cluster/624)
**Author:** [@SamJudson](https://discuss.elastic.co/u/SamJudson)\ **Replies:** 2\ **Last updated:** [May 13, 2016, 3:26pm UTC](https://discuss.elastic.co/t/cant-create-snapshot-repository-on-windows-cluster/624 "2016-05-13T15:26:04Z")
Hi I posted this a while back to the mailing list but didn't get a helpful response unfortunately, and I think I need to try again. I am trying to create a snapshot repository on a 3 node windows cluster: PUT \_snap… --- ## [Fetch Last 15 minute of data](https://discuss.elastic.co/t/fetch-last-15-minute-of-data/314695)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 4\ **Last updated:** [September 20, 2022, 6:56am UTC](https://discuss.elastic.co/t/fetch-last-15-minute-of-data/314695 "2022-09-20T06:56:58Z")
Here is my query for fetching the result of today last 15 minutes { "query": { "bool": { "filter": \[ { "bool": { "should": \[ { "match\_phrase": { … --- ## [System Down alert on Kibana](https://discuss.elastic.co/t/system-down-alert-on-kibana/282860)
**Author:** [@grumpypant](https://discuss.elastic.co/u/grumpypant)\ **Replies:** 4\ **Last updated:** [September 1, 2021, 4:41pm UTC](https://discuss.elastic.co/t/system-down-alert-on-kibana/282860 "2021-09-01T16:41:41Z")
New to ELK I'm trying to setup rules for alerting on Kibana. One of them would be "Host Down". Trying to use the system.uptime.duration.ms metricset to tell me if a Host is down for more than 5 mins. So far, below ima… --- ## [Grok until first period](https://discuss.elastic.co/t/grok-until-first-period/193909)
**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\ **Replies:** 4\ **Last updated:** [August 6, 2019, 6:05pm UTC](https://discuss.elastic.co/t/grok-until-first-period/193909 "2019-08-06T18:05:10Z")
Hi, new to creating parsing rules so bear with me. I need to parse up until the first period but can't seem to make it work. Below is what I'm trying to parse. GlobalProtect gateway user authentication succeeded. Login … --- ## [Painless: is it possible for a def variable to contain nested objects?](https://discuss.elastic.co/t/painless-is-it-possible-for-a-def-variable-to-contain-nested-objects/162668)
**Author:** [@scarabas](https://discuss.elastic.co/u/scarabas)\ **Replies:** 4\ **Last updated:** [January 3, 2019, 5:49pm UTC](https://discuss.elastic.co/t/painless-is-it-possible-for-a-def-variable-to-contain-nested-objects/162668 "2019-01-03T17:49:20Z")
I'm trying to store a nested key/value object in a variable, but it doesn't seem to be storing anything. In a for loop, where "i" is the index: def ratio = params\['\_source'\]\['ratios'\]\[i\] ...def will be null. Is it no… --- ## [Kibana reporting, Cannot read property 'payload' of undefined](https://discuss.elastic.co/t/kibana-reporting-cannot-read-property-payload-of-undefined/133818)
**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\ **Replies:** 4\ **Last updated:** [May 30, 2018, 7:37pm UTC](https://discuss.elastic.co/t/kibana-reporting-cannot-read-property-payload-of-undefined/133818 "2018-05-30T19:37:46Z")
Hi All, I have some issues generating a report. The GUI reports the following error: There was an error generating your report for the "imp\_actions" visualization: HeadlessError: Phantom Process died Having turned on … --- ## [Packetbeat crashes](https://discuss.elastic.co/t/packetbeat-crashes/40024)
**Author:** [@ironbeast](https://discuss.elastic.co/u/ironbeast)\ **Replies:** 4\ **Last updated:** [January 26, 2016, 5:35am UTC](https://discuss.elastic.co/t/packetbeat-crashes/40024 "2016-01-26T05:35:51Z")
Hi All, I have an issue with packetbeat... I installed packetbeat and wanted to monitor my mysql traffic. From the moment packetbeat records a transaction. It crashed and stopped the service. No transactions where made… --- ## [Is there a way to configure Multiple Log Streams by distinct Index Name?](https://discuss.elastic.co/t/is-there-a-way-to-configure-multiple-log-streams-by-distinct-index-name/281823)
**Author:** [@vijay.sangha](https://discuss.elastic.co/u/vijay.sangha)\ **Replies:** 3\ **Last updated:** [August 20, 2021, 7:48am UTC](https://discuss.elastic.co/t/is-there-a-way-to-configure-multiple-log-streams-by-distinct-index-name/281823 "2021-08-20T07:48:16Z")
I have been using logtrail till version 7.9.0, but the plugin provider didn't re-wrote the code to comply with the latest version. As there is a streams availabe within Kibana now, is there a way to define multiple stre… --- ## [Unable to access Kibana dashboard from my browser even after setting server.host as 0.0.0.0 in kibana.yml file](https://discuss.elastic.co/t/unable-to-access-kibana-dashboard-from-my-browser-even-after-setting-server-host-as-0-0-0-0-in-kibana-yml-file/225648)
**Author:** [@venkata.kodapaka](https://discuss.elastic.co/u/venkata.kodapaka)\ **Replies:** 3\ **Last updated:** [April 2, 2020, 11:52am UTC](https://discuss.elastic.co/t/unable-to-access-kibana-dashboard-from-my-browser-even-after-setting-server-host-as-0-0-0-0-in-kibana-yml-file/225648 "2020-04-02T11:52:06Z")
Hi Team, I've setup latest Elasticsearch and Kibana dashboards on my linux machine by downloading latest versions(7.6.1) .tar.gz files. I'm able to see that Elasticsearch is up and running fine by using command 'curl h… --- ## [How do I change the width of the bars on a bar chart?](https://discuss.elastic.co/t/how-do-i-change-the-width-of-the-bars-on-a-bar-chart/156262)
**Author:** [@emma1](https://discuss.elastic.co/u/emma1)\ **Replies:** 3\ **Last updated:** [November 16, 2018, 6:01pm UTC](https://discuss.elastic.co/t/how-do-i-change-the-width-of-the-bars-on-a-bar-chart/156262 "2018-11-16T18:01:44Z")
How do I change the width of the bars on a bar chart ? --- ## [Uninstall/Install Elastic-Endpoint. Endpoint stays after uninstall](https://discuss.elastic.co/t/uninstall-install-elastic-endpoint-endpoint-stays-after-uninstall/247014)
**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\ **Replies:** 1\ **Last updated:** [September 1, 2020, 2:10pm UTC](https://discuss.elastic.co/t/uninstall-install-elastic-endpoint-endpoint-stays-after-uninstall/247014 "2020-09-01T14:10:54Z")
To not high jack an existing thread about another subject see " https://discuss.elastic.co/t/elastic-endpoint-overwrites-configuration-file/246531/6 " Uninstall goes like this. Open power shell as admin. Run uninstall-s… --- ## [C# NEST 5 Search with template](https://discuss.elastic.co/t/c-nest-5-search-with-template/104074)
**Author:** [@Itay\_Itzhaki](https://discuss.elastic.co/u/Itay_Itzhaki)\ **Replies:** 1\ **Last updated:** [October 18, 2017, 12:58pm UTC](https://discuss.elastic.co/t/c-nest-5-search-with-template/104074 "2017-10-18T12:58:23Z")
how can i use the ElasticClient SearchTemplateAsync method with skip, size, aggregations , and so forth.. in the latest c# driver searching with templates is based on the method SearchTemplateAsync rather than SearchAsy… --- ## [Watcher - Groovy User Guide](https://discuss.elastic.co/t/watcher-groovy-user-guide/98832)
**Author:** [@vincentmarian](https://discuss.elastic.co/u/vincentmarian)\ **Replies:** 7\ **Last updated:** [September 5, 2017, 11:35am UTC](https://discuss.elastic.co/t/watcher-groovy-user-guide/98832 "2017-09-05T11:35:54Z")
We have created a Watcher script to calculate daily summary of details in our log and stored the output in a new index. This newly created index is not readable by Kibana. After some googling I came to know that we need… --- ## [Unable to send alert with watcher email configuration](https://discuss.elastic.co/t/unable-to-send-alert-with-watcher-email-configuration/62251)
**Author:** [@sahilarora0928](https://discuss.elastic.co/u/sahilarora0928)\ **Replies:** 1\ **Last updated:** [October 5, 2016, 10:03am UTC](https://discuss.elastic.co/t/unable-to-send-alert-with-watcher-email-configuration/62251 "2016-10-05T10:03:11Z")
Hi, I am getting following exception when trying to send a gmail message as alert: .\]). \[2016-10-05 15:10:06,845\]\[ERROR\]\[watcher.actions.email \] \[Aries\] failed to execute action \[event\_critical\_watch/email\_admin\] ja… --- ## [Snapshot - Repository S3 (Strategy)](https://discuss.elastic.co/t/snapshot-repository-s3-strategy/103184)
**Author:** [@lazam](https://discuss.elastic.co/u/lazam)\ **Replies:** 6\ **Last updated:** [October 10, 2017, 2:33pm UTC](https://discuss.elastic.co/t/snapshot-repository-s3-strategy/103184 "2017-10-10T14:33:01Z")
Hi! I'm doing a backup in our S3. So far we're using a monthly index, but we're planning to do a daily backup using curator. Versions: Elasticsearch 5.6.1 Curator 5.2 Here are some questions: Is it good to do a da… --- ## [Forcing Filebeat to drop events when files deleted](https://discuss.elastic.co/t/forcing-filebeat-to-drop-events-when-files-deleted/86599)
**Author:** [@kjtsanaktsidis](https://discuss.elastic.co/u/kjtsanaktsidis)\ **Replies:** 6\ **Last updated:** [June 2, 2017, 10:51pm UTC](https://discuss.elastic.co/t/forcing-filebeat-to-drop-events-when-files-deleted/86599 "2017-06-02T22:51:33Z")
I'm trying to use Filebeat to ingest our rsyslogd logfiles and send them to logstash. Unfortunately we can send quite a large volume of logs sometimes, and have relatively small disks. We have logrotate configured to rot… --- ## [Filestream not processing new log messages](https://discuss.elastic.co/t/filestream-not-processing-new-log-messages/330830)
**Author:** [@yohny](https://discuss.elastic.co/u/yohny)\ **Replies:** 0\ **Last updated:** [April 26, 2023, 11:40am UTC](https://discuss.elastic.co/t/filestream-not-processing-new-log-messages/330830 "2023-04-26T11:40:30Z")
Hi all, I have a filebeat configured to consume log files using filestream and send them to kibana like this: filebeat.inputs: - type: filestream id: my-stream enabled: true paths: - C:\\my-app\\log… --- ## [Combine normal and nested fields with query\_string](https://discuss.elastic.co/t/combine-normal-and-nested-fields-with-query-string/315502)
**Author:** [@Antonio\_Antovski](https://discuss.elastic.co/u/Antonio_Antovski)\ **Replies:** 0\ **Last updated:** [September 29, 2022, 8:54pm UTC](https://discuss.elastic.co/t/combine-normal-and-nested-fields-with-query-string/315502 "2022-09-29T20:54:18Z")
I have a document which contains both normal and nested fields. I'm trying to find all the documents that contain all the words from a regex query in any of the fields of interest. Since I'm using a regex query and tryin… --- ## [Logstash-input-imap plugin error](https://discuss.elastic.co/t/logstash-input-imap-plugin-error/115166)
**Author:** [@sliu](https://discuss.elastic.co/u/sliu)\ **Replies:** 0\ **Last updated:** [January 11, 2018, 7:52pm UTC](https://discuss.elastic.co/t/logstash-input-imap-plugin-error/115166 "2018-01-11T19:52:07Z")
We use logstash 5.4.1. Following the example here: https://qbox.io/blog/indexing-emails-to-elasticsearch-logstash-imap, I got this error: \[2018-01-11T14:22:38,062\]\[ERROR\]\[logstash.pipeline \] A plugin had an unre… --- ## [How do you report error logs?](https://discuss.elastic.co/t/how-do-you-report-error-logs/148105)
**Author:** [@TheSmartMonkey](https://discuss.elastic.co/u/TheSmartMonkey)\ **Replies:** 2\ **Last updated:** [September 11, 2018, 1:53pm UTC](https://discuss.elastic.co/t/how-do-you-report-error-logs/148105 "2018-09-11T13:53:06Z")
for a while I'm looking for a way to easily send error report in CSV or any other document type but I never fined an easy way and a clean document with multiple log to retrieve the errors. I've post this topic on github… --- ## [Kibana index patterns and date math](https://discuss.elastic.co/t/kibana-index-patterns-and-date-math/127968)
**Author:** [@mrkita](https://discuss.elastic.co/u/mrkita)\ **Replies:** 2\ **Last updated:** [April 13, 2018, 6:15pm UTC](https://discuss.elastic.co/t/kibana-index-patterns-and-date-math/127968 "2018-04-13T18:15:50Z")
Maybe it's already possible, but it doesn't seem so to me. I want to create an index pattern in Kibana that slices my elastic search data to the last X number of days (something like the last 3). I know that I can creat… --- ## [Query DSL to retrieve from index specific fields like a Select in SQL](https://discuss.elastic.co/t/query-dsl-to-retrieve-from-index-specific-fields-like-a-select-in-sql/167812)
**Author:** [@bard0x](https://discuss.elastic.co/u/bard0x)\ **Replies:** 1\ **Last updated:** [February 11, 2019, 9:59am UTC](https://discuss.elastic.co/t/query-dsl-to-retrieve-from-index-specific-fields-like-a-select-in-sql/167812 "2019-02-11T09:59:12Z")
Hi guys, I would to get from my index a specific fields like a simply select query in SQL with a DSL query... Thank's in advance for the replies! --- ## [Renaming an existing field in a nested object](https://discuss.elastic.co/t/renaming-an-existing-field-in-a-nested-object/228667)
**Author:** [@waynesmallman](https://discuss.elastic.co/u/waynesmallman)\ **Replies:** 5\ **Last updated:** [April 23, 2020, 12:29am UTC](https://discuss.elastic.co/t/renaming-an-existing-field-in-a-nested-object/228667 "2020-04-23T00:29:41Z")
Hi! I need to rename an existing field in a nested object: "shared": { "type": "nested", "properties": { "user\_id": { "type": "long" }, "creation": { "type": "date", "format": "date\_hour\_minute\_second"… --- ## [Trying to setup Logstash for Syslog input but having weird problems](https://discuss.elastic.co/t/trying-to-setup-logstash-for-syslog-input-but-having-weird-problems/167207)
**Author:** [@snovak](https://discuss.elastic.co/u/snovak)\ **Replies:** 5\ **Last updated:** [February 6, 2019, 8:26pm UTC](https://discuss.elastic.co/t/trying-to-setup-logstash-for-syslog-input-but-having-weird-problems/167207 "2019-02-06T20:26:32Z")
Trying to configure logstash to accept syslog messages and then place those into Elastic Search / Kibana but having several weird issues. The first is that actual syslog messages are being rejected with this type of mes… --- ## [Kibana is extremely slow (Loading graphs)](https://discuss.elastic.co/t/kibana-is-extremely-slow-loading-graphs/345694)
**Author:** [@Saili\_Bakalkar](https://discuss.elastic.co/u/Saili_Bakalkar)\ **Replies:** 3\ **Last updated:** [October 31, 2023, 11:18am UTC](https://discuss.elastic.co/t/kibana-is-extremely-slow-loading-graphs/345694 "2023-10-31T11:18:57Z")
Hello everyone, I'm encountering significant performance issues with my Kibana setup, and I'm seeking guidance to improve its responsiveness. I've attached images to provide insights into the current state of our cluste… --- ## [Logstash 6 not working after fresh service install](https://discuss.elastic.co/t/logstash-6-not-working-after-fresh-service-install/108236)
**Author:** [@Tomschi](https://discuss.elastic.co/u/Tomschi)\ **Replies:** 3\ **Last updated:** [November 25, 2017, 4:43pm UTC](https://discuss.elastic.co/t/logstash-6-not-working-after-fresh-service-install/108236 "2017-11-25T16:43:24Z")
I installed Logstash 6 on a CentOS 7 using the repo variant. After starting Logstash over systemd as service the logstash process consumes over 100% CPU and is not running correctly. OS: CentOS 7 Java: openjdk 8 I al… --- ## [Send metricbeat via logstash as datastream](https://discuss.elastic.co/t/send-metricbeat-via-logstash-as-datastream/325628)
**Author:** [@A\_Mightiev](https://discuss.elastic.co/u/A_Mightiev)\ **Replies:** 4\ **Last updated:** [February 15, 2023, 4:41pm UTC](https://discuss.elastic.co/t/send-metricbeat-via-logstash-as-datastream/325628 "2023-02-15T16:41:24Z")
Hi I'm trying to send metricbeat data to logstash then store it as datastream into elasticsearch. I already have an datastream in elasticsearch "metricbeat-8.6.1", in my dashboards I'm using "metricbeat\*" index pattern … [Previous page](https://discuss.elastic.co/top.md?page=938&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=940&per_page=50&period=all)