# Top **URL:** https://discuss.elastic.co/top.md?page=951&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 952 --- ## [How to create multiple events in logstash to push multiple request in elasticsearch](https://discuss.elastic.co/t/how-to-create-multiple-events-in-logstash-to-push-multiple-request-in-elasticsearch/103732)
**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\ **Replies:** 1\ **Last updated:** [October 12, 2017, 1:36pm UTC](https://discuss.elastic.co/t/how-to-create-multiple-events-in-logstash-to-push-multiple-request-in-elasticsearch/103732 "2017-10-12T13:36:30Z")
I have logstash configuration. I want to take data from one event manipulate the data and create multiple events and push that events to elasticsearch. e.g. { "activity" : "meeting", "clientName" : "ABC/XYZ/LMN" "Du… --- ## [Query result differ / Scan and scroll result in very low performance using Python API](https://discuss.elastic.co/t/query-result-differ-scan-and-scroll-result-in-very-low-performance-using-python-api/97167)
**Author:** [@margies](https://discuss.elastic.co/u/margies)\ **Replies:** 1\ **Last updated:** [August 18, 2017, 2:20pm UTC](https://discuss.elastic.co/t/query-result-differ-scan-and-scroll-result-in-very-low-performance-using-python-api/97167 "2017-08-18T14:20:21Z")
Hi there! I am new to elasticsearch, so these might be stupid questions. The version in use is 2.3.5. The first problem I encountered is that I get different result by using Python API and by directly sending http req… --- ## [Does Logstash have any way of knowing what it's pid is?](https://discuss.elastic.co/t/does-logstash-have-any-way-of-knowing-what-its-pid-is/49809)
**Author:** [@David\_McClain](https://discuss.elastic.co/u/David_McClain)\ **Replies:** 1\ **Last updated:** [May 13, 2016, 6:05am UTC](https://discuss.elastic.co/t/does-logstash-have-any-way-of-knowing-what-its-pid-is/49809 "2016-05-13T06:05:30Z")
I'm trying to setup some lightweight healthchecks for my system for Logstash to get us by until 5.0 is prod ready and we can adopt it. My implementation is to use the heartbeat input plugin to generate some basic info … --- ## [ElasticSearch High Level Client ClassNotFoundError](https://discuss.elastic.co/t/elasticsearch-high-level-client-classnotfounderror/107778)
**Author:** [@pocguy](https://discuss.elastic.co/u/pocguy)\ **Replies:** 1\ **Last updated:** [November 15, 2017, 3:45pm UTC](https://discuss.elastic.co/t/elasticsearch-high-level-client-classnotfounderror/107778 "2017-11-15T15:45:56Z")
ElasticSearch Version: 5.6.4 JAVA JDK 1.8 Spring Boot 1.5.8 Caused by: java.lang.ClassNotFoundException: org.elasticsearch.action.main.MainRequest at java.net.URLClassLoader.findClass(URLClassLoader.java:381) at jav… --- ## [Invalid date 'February 29' as '1970' is not a leap year](https://discuss.elastic.co/t/invalid-date-february-29-as-1970-is-not-a-leap-year/221693)
**Author:** [@aviationfan](https://discuss.elastic.co/u/aviationfan)\ **Replies:** 5\ **Last updated:** [March 3, 2020, 3:03pm UTC](https://discuss.elastic.co/t/invalid-date-february-29-as-1970-is-not-a-leap-year/221693 "2020-03-03T15:03:04Z")
Posting here again as this has caused some real pain trying to figure out how to get this data into Elastic. Ultimately we will reconfigure this log file for the 1 day of the year to be a different date format that inclu… --- ## [Go to next page in Canvas](https://discuss.elastic.co/t/go-to-next-page-in-canvas/207145)
**Author:** [@Koen\_Wouters](https://discuss.elastic.co/u/Koen_Wouters)\ **Replies:** 5\ **Last updated:** [November 11, 2019, 5:21pm UTC](https://discuss.elastic.co/t/go-to-next-page-in-canvas/207145 "2019-11-11T17:21:55Z")
Is it possible to navigate from page to page by clicking on an element? For instance I am page 1 and if I click on a product image I can go to page 3 which contains more information? It seems like something that should b… --- ## [Elastic App Search Windows installation](https://discuss.elastic.co/t/elastic-app-search-windows-installation/192301)
**Author:** [@rajithsam](https://discuss.elastic.co/u/rajithsam)\ **Replies:** 5\ **Last updated:** [July 25, 2019, 7:12pm UTC](https://discuss.elastic.co/t/elastic-app-search-windows-installation/192301 "2019-07-25T19:12:46Z")
Is it possible to install elastic app search in windows? --- ## [Multi GET and sort](https://discuss.elastic.co/t/multi-get-and-sort/165616)
**Author:** [@tombee74](https://discuss.elastic.co/u/tombee74)\ **Replies:** 4\ **Last updated:** [January 27, 2019, 7:55pm UTC](https://discuss.elastic.co/t/multi-get-and-sort/165616 "2019-01-27T19:55:20Z")
Hello, I want to retrieve a list of documents of the same type based on document IDs - Multi GET API works great. Now, I would like to sort the documents based on a specific field of that type. Is it possible to sort … --- ## [Why does syslog create a user.log when filebeat is restarted?](https://discuss.elastic.co/t/why-does-syslog-create-a-user-log-when-filebeat-is-restarted/66134)
**Author:** [@ndarkness](https://discuss.elastic.co/u/ndarkness)\ **Replies:** 4\ **Last updated:** [November 17, 2016, 4:02pm UTC](https://discuss.elastic.co/t/why-does-syslog-create-a-user-log-when-filebeat-is-restarted/66134 "2016-11-17T16:02:54Z")
Hello, I have experienced something a bit weird for me. I have filebeat monitoring my rsyslog (syslog.log) file and sending it to my logstash. I have noticed that after restarting filebeat where syslog is running, sy… --- ## [Get Data in CSV or Excel format from Elastic Search](https://discuss.elastic.co/t/get-data-in-csv-or-excel-format-from-elastic-search/224060)
**Author:** [@Rabii47](https://discuss.elastic.co/u/Rabii47)\ **Replies:** 3\ **Last updated:** [March 19, 2020, 9:35am UTC](https://discuss.elastic.co/t/get-data-in-csv-or-excel-format-from-elastic-search/224060 "2020-03-19T09:35:09Z")
Hi, i am trying to get the data from ElasticSearch in my Spring Application in the format Excel or CSV. The size of my data is between 5000 and 10000 . What is the best way to accomplish that ? --- ## [Can we get 'Checksum' of an Index](https://discuss.elastic.co/t/can-we-get-checksum-of-an-index/217933)
**Author:** [@Prashant\_Sharma1](https://discuss.elastic.co/u/Prashant_Sharma1)\ **Replies:** 3\ **Last updated:** [February 5, 2020, 5:19pm UTC](https://discuss.elastic.co/t/can-we-get-checksum-of-an-index/217933 "2020-02-05T17:19:00Z")
In an upgrade Scenario where I need to verify data in ES Db after upgrade , Is there any API by which I can get Checksum of indexes for an ES Db .... --- ## [Curator need to add include\_global\_state in snapshot job?](https://discuss.elastic.co/t/curator-need-to-add-include-global-state-in-snapshot-job/89682)
**Author:** [@Narmatha](https://discuss.elastic.co/u/Narmatha)\ **Replies:** 3\ **Last updated:** [June 16, 2017, 10:44am UTC](https://discuss.elastic.co/t/curator-need-to-add-include-global-state-in-snapshot-job/89682 "2017-06-16T10:44:16Z")
Hi, I am using curator 4.2.6 to do the snapshot of my ES cluster . And in the snapshot action file i had seen flag include\_global\_state :True . It seems to store the ES cluster state . Questions: What this actually mea… --- ## [Errors with Logstash bulk load using CSV](https://discuss.elastic.co/t/errors-with-logstash-bulk-load-using-csv/29059)
**Author:** [@cburkins](https://discuss.elastic.co/u/cburkins)\ **Replies:** 3\ **Last updated:** [September 11, 2015, 9:58am UTC](https://discuss.elastic.co/t/errors-with-logstash-bulk-load-using-csv/29059 "2015-09-11T09:58:52Z")
I'm using Logstash to bulk load into ElasticSearch using a CSV template I'm getting lots of warnings like: retrying failed action with response code: 429 {:level=\>:warn} And lots of errors like: too many attempts … --- ## [Enable SSO in Elastic Cloud](https://discuss.elastic.co/t/enable-sso-in-elastic-cloud/253661)
**Author:** [@antony\_kavin](https://discuss.elastic.co/u/antony_kavin)\ **Replies:** 2\ **Last updated:** [October 30, 2020, 11:30am UTC](https://discuss.elastic.co/t/enable-sso-in-elastic-cloud/253661 "2020-10-30T11:30:09Z")
Hi team, I want to enable SSO in my Kibana dashboard. I am using Elasticsearch and Kibana version 7.9.2. I am currently in the Gold Plan. I went through the elasticsearch guide and it was not clear. I have the below que… --- ## [Kibana 6.8.8 - Monitoring Request Error](https://discuss.elastic.co/t/kibana-6-8-8-monitoring-request-error/228574)
**Author:** [@jwcw](https://discuss.elastic.co/u/jwcw)\ **Replies:** 2\ **Last updated:** [April 19, 2020, 6:25pm UTC](https://discuss.elastic.co/t/kibana-6-8-8-monitoring-request-error/228574 "2020-04-19T18:25:20Z")
I am receiving the following error on the Monitoring page in Kibana after configuring TLS to encrypt communications between nodes in the cluster. Monitoring Request Error \[transport\_exception\] handshake failed because… --- ## [Filebeat on Centos7 not properly starting or logging](https://discuss.elastic.co/t/filebeat-on-centos7-not-properly-starting-or-logging/184646)
**Author:** [@bdobsonbcm](https://discuss.elastic.co/u/bdobsonbcm)\ **Replies:** 2\ **Last updated:** [June 7, 2019, 3:46pm UTC](https://discuss.elastic.co/t/filebeat-on-centos7-not-properly-starting-or-logging/184646 "2019-06-07T15:46:59Z")
Filebeat Version 7.1.1 I have been using Filebeat, without issue on our CentOS6 machines and have started to roll it out to our CentOS7 machines. I have installed via the following repository: \[elasticsearch-7.x\] name… --- ## [Drop fields/Remove Fields in bulk is not working using mutate filter](https://discuss.elastic.co/t/drop-fields-remove-fields-in-bulk-is-not-working-using-mutate-filter/101710)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 2\ **Last updated:** [September 25, 2017, 3:38pm UTC](https://discuss.elastic.co/t/drop-fields-remove-fields-in-bulk-is-not-working-using-mutate-filter/101710 "2017-09-25T15:38:28Z")
Hi All I have almost 50 fields which starts with parsed.abc or \[parsed\]\[abc\] parsed.xyz OR \[parsed\]\[xyz\] parsed.dfg OR \[parsed\]\[dfg \] etc.... I need to drop all those using mutate. I am able to drop them one by on… --- ## [Output field in autocomplete suggestion](https://discuss.elastic.co/t/output-field-in-autocomplete-suggestion/70014)
**Author:** [@mlkmhd](https://discuss.elastic.co/u/mlkmhd)\ **Replies:** 2\ **Last updated:** [December 28, 2016, 7:33pm UTC](https://discuss.elastic.co/t/output-field-in-autocomplete-suggestion/70014 "2016-12-28T19:33:49Z")
Hi everyone, when I want to index a document in elasticsearch this problem occurring: message \[MapperParsingException\[failed to parse\]; nested: IllegalArgumentException\[unknown field name \[output\], must be one of \[inp… --- ## [GeoIP data not creating "location" field and duplicating data](https://discuss.elastic.co/t/geoip-data-not-creating-location-field-and-duplicating-data/303612)
**Author:** [@joshn](https://discuss.elastic.co/u/joshn)\ **Replies:** 7\ **Last updated:** [May 2, 2022, 8:29pm UTC](https://discuss.elastic.co/t/geoip-data-not-creating-location-field-and-duplicating-data/303612 "2022-05-02T20:29:39Z")
I'm ingesting logs from my firewall, and as part of that I thought it would be nice to look at geoip data. geoip { add\_tag =\> \[ "GeoIP" \] source =\> "src\_ip" } geoip { … --- ## [Value out of range](https://discuss.elastic.co/t/value-out-of-range/121302)
**Author:** [@jdambly](https://discuss.elastic.co/u/jdambly)\ **Replies:** 1\ **Last updated:** [February 23, 2018, 11:20pm UTC](https://discuss.elastic.co/t/value-out-of-range/121302 "2018-02-23T23:20:27Z")
using metric beat 6.2.1 and logstash 6.2.2 I am getting the following error. I this a metricbeat bug? It seems that the value is too large to fit into a long in ES? \[2018-02-23T23:09:43,469\]\[WARN \]\[logstash.outputs.elas… --- ## [Is it possible to use the old GeoIP format rather than the new GeoIP database format with Logstash 5?](https://discuss.elastic.co/t/is-it-possible-to-use-the-old-geoip-format-rather-than-the-new-geoip-database-format-with-logstash-5/65516)
**Author:** [@Justin\_Henderson](https://discuss.elastic.co/u/Justin_Henderson)\ **Replies:** 0\ **Last updated:** [November 9, 2016, 3:34pm UTC](https://discuss.elastic.co/t/is-it-possible-to-use-the-old-geoip-format-rather-than-the-new-geoip-database-format-with-logstash-5/65516 "2016-11-09T15:34:52Z")
In Logstash versions prior to 5 myself and others use the free geoipasnum.dat from MaxMind considerably. The main reason we haven't switched to version 5 is it seems Logstash 5.0 requires the new geoip database format w… --- ## [Delete file logstash](https://discuss.elastic.co/t/delete-file-logstash/302314)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 5\ **Last updated:** [April 21, 2022, 8:47am UTC](https://discuss.elastic.co/t/delete-file-logstash/302314 "2022-04-21T08:47:57Z")
Hi, I have a small problem i have logs and i read it with filebeat filebeat.yml - type: log enabled: true paths: - D:\\elastic\_stack\\LOGS\\CMS\_LOGS\\\* fields: kafka\_topic: "kafka-topic-cms-test1" mult… --- ## [Multi-field on CommandLine in Winlogbeat](https://discuss.elastic.co/t/multi-field-on-commandline-in-winlogbeat/113810)
**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\ **Replies:** 5\ **Last updated:** [January 16, 2018, 10:10pm UTC](https://discuss.elastic.co/t/multi-field-on-commandline-in-winlogbeat/113810 "2018-01-16T22:10:47Z")
I'm working with Winlogbeat and I need event\_data.CommandLine field to 'text' so I can run 'term' query on it and look for badness, I guess multi-fields is the way to go to add another field as text... Trying to get my … --- ## [Replacing SQL geography intersections with ElasticSearch](https://discuss.elastic.co/t/replacing-sql-geography-intersections-with-elasticsearch/58185)
**Author:** [@jamison17971](https://discuss.elastic.co/u/jamison17971)\ **Replies:** 5\ **Last updated:** [August 17, 2016, 7:30pm UTC](https://discuss.elastic.co/t/replacing-sql-geography-intersections-with-elasticsearch/58185 "2016-08-17T19:30:20Z")
Hello, I am looking for a solution to intersect data within ElasticSearch from two seperate indexes. Both indexes would contain documents that I want to intersect geographically and get a list of id's as a result of … --- ## [Create a custom id from a a database columns](https://discuss.elastic.co/t/create-a-custom-id-from-a-a-database-columns/161350)
**Author:** [@tunigas](https://discuss.elastic.co/u/tunigas)\ **Replies:** 8\ **Last updated:** [December 19, 2018, 10:21am UTC](https://discuss.elastic.co/t/create-a-custom-id-from-a-a-database-columns/161350 "2018-12-19T10:21:01Z")
Hello everyone, I'm new to logstash. Currently, I'm trying to create a custom document\_id from the concatenation of two database columns. My sql query inside the jdbc is as follows: statement =\> "SELECT TOP 10 name, a… --- ## [Filebeat 6.3.2 / Logstash 6.3.2](https://discuss.elastic.co/t/filebeat-6-3-2-logstash-6-3-2/142594)
**Author:** [@Tusune](https://discuss.elastic.co/u/Tusune)\ **Replies:** 8\ **Last updated:** [August 3, 2018, 2:27pm UTC](https://discuss.elastic.co/t/filebeat-6-3-2-logstash-6-3-2/142594 "2018-08-03T14:27:41Z")
Hello ! Today i've tried to make filebeat (that is on one of my servers) send logs to another server, that have logstash, elasticsearch and kibana. I've got some problems and one in particular that i can't find a solut… --- ## [Jar Hell for Unit testing with jboss projects](https://discuss.elastic.co/t/jar-hell-for-unit-testing-with-jboss-projects/86304)
**Author:** [@elastic\_boston](https://discuss.elastic.co/u/elastic_boston)\ **Replies:** 8\ **Last updated:** [May 24, 2017, 12:24pm UTC](https://discuss.elastic.co/t/jar-hell-for-unit-testing-with-jboss-projects/86304 "2017-05-24T12:24:38Z")
I an trying to set up some unit tests using ESIntegTestCase. It seems that RandomizedRunner uses jboss servlet jars. This is causing jar hell for me. Where is this dependency? I need to exclude it. java.lang.RuntimeExc… --- ## [ECS & Palo Alto Logs](https://discuss.elastic.co/t/ecs-palo-alto-logs/167542)
**Author:** [@davidhowell.tx](https://discuss.elastic.co/u/davidhowell.tx)\ **Replies:** 3\ **Last updated:** [February 27, 2019, 3:00am UTC](https://discuss.elastic.co/t/ecs-palo-alto-logs/167542 "2019-02-27T03:00:22Z")
Hello. I've seen some logstash pipelines for parsing Palo Alto logs by using CSV plugin. I'm curious if anyone has taken this a step further and aligned the fields with the Elastic Common Schema. I am working on doing … --- ## [Disk IO not configured properly](https://discuss.elastic.co/t/disk-io-not-configured-properly/168357)
**Author:** [@iamashutosh](https://discuss.elastic.co/u/iamashutosh)\ **Replies:** 3\ **Last updated:** [February 15, 2019, 3:59am UTC](https://discuss.elastic.co/t/disk-io-not-configured-properly/168357 "2019-02-15T03:59:33Z")
Hello Team, I'm trying to add disk IO to metricbeat in system.yml. I'm using AWS EC2. The only option that is causing the problem is DiskIO, when I comment it, metricbeat starts. Here is my config: - module: system … --- ## [ES 2.2 cluster - how to deal with data loss?](https://discuss.elastic.co/t/es-2-2-cluster-how-to-deal-with-data-loss/43646)
**Author:** [@mattb](https://discuss.elastic.co/u/mattb)\ **Replies:** 3\ **Last updated:** [March 9, 2016, 7:55am UTC](https://discuss.elastic.co/t/es-2-2-cluster-how-to-deal-with-data-loss/43646 "2016-03-09T07:55:17Z")
Hello, I recently started some cluster testing with ES: 3 nodes for ES (2.2) all nodes are master- and data nodes client: logstash, with ES output plugin Test scenario: - Continuous, significant load via logstash -… --- ## [How to make string aggregatable](https://discuss.elastic.co/t/how-to-make-string-aggregatable/210562)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 4\ **Last updated:** [December 4, 2019, 4:03pm UTC](https://discuss.elastic.co/t/how-to-make-string-aggregatable/210562 "2019-12-04T16:03:08Z")
Dear all, i have some question regarding the field mapping since i need some field in my index to be able to use in visualize i need to make it aggregatable, but i still need the ability of the text type to search part… --- ## [Long data type value corruption](https://discuss.elastic.co/t/long-data-type-value-corruption/73614)
**Author:** [@get2sanal](https://discuss.elastic.co/u/get2sanal)\ **Replies:** 4\ **Last updated:** [February 7, 2017, 2:04pm UTC](https://discuss.elastic.co/t/long-data-type-value-corruption/73614 "2017-02-07T14:04:28Z")
I am using Elasticsearch version 5.1.2. There is some kind of number overflow when I try to ingest long value close to Long.MAX\_SIZE. I have tried the same with ES 2.4 as well. Same issue again. PUT /library/books/1 { … --- ## [Issue with "Synced Flush" for Elasticsearch (ES) V 1.5.2](https://discuss.elastic.co/t/issue-with-synced-flush-for-elasticsearch-es-v-1-5-2/50237)
**Author:** [@vikram\_yerneni](https://discuss.elastic.co/u/vikram_yerneni)\ **Replies:** 4\ **Last updated:** [May 17, 2016, 4:21pm UTC](https://discuss.elastic.co/t/issue-with-synced-flush-for-elasticsearch-es-v-1-5-2/50237 "2016-05-17T16:21:21Z")
Folks, I am planning to upgrade my ES from 1.5.2 to 2.3.1 and I am going through regular upgrade process. I disabled the Shard allocation and I am getting an issue when I am trying to perform the Synced Flush (POST /\_flu… --- ## [When creating keyword field it gets changed to text field + .keyword?](https://discuss.elastic.co/t/when-creating-keyword-field-it-gets-changed-to-text-field-keyword/185599)
**Author:** [@kim\_huizing](https://discuss.elastic.co/u/kim_huizing)\ **Replies:** 2\ **Last updated:** [June 13, 2019, 11:02am UTC](https://discuss.elastic.co/t/when-creating-keyword-field-it-gets-changed-to-text-field-keyword/185599 "2019-06-13T11:02:01Z")
Hi, I am using Elasticsearch 6.5 . I have an existing index with a mapping. I want to add a field to this mapping called documentYear which is of type keyword. This field is not relevant for full-text search so I want i… --- ## [Elasticsearch command line option --path.repo - format for multiple directories](https://discuss.elastic.co/t/elasticsearch-command-line-option-path-repo-format-for-multiple-directories/88257)
**Author:** [@kimptoc](https://discuss.elastic.co/u/kimptoc)\ **Replies:** 2\ **Last updated:** [June 5, 2017, 4:32pm UTC](https://discuss.elastic.co/t/elasticsearch-command-line-option-path-repo-format-for-multiple-directories/88257 "2017-06-05T16:32:16Z")
Hi, Newbie here, apologies if this is obvious... I see the YAML format for this option supports multiple directories, via an array \["dir1","dir2"\]. But I am using the --path.repo command line option :slight\_smile: … --- ## [Different search result between REST API and Java Transport Client](https://discuss.elastic.co/t/different-search-result-between-rest-api-and-java-transport-client/67719)
**Author:** [@bluish\_penguin](https://discuss.elastic.co/u/bluish_penguin)\ **Replies:** 2\ **Last updated:** [December 2, 2016, 2:21am UTC](https://discuss.elastic.co/t/different-search-result-between-rest-api-and-java-transport-client/67719 "2016-12-02T02:21:52Z")
Hi, I would like to know how to query the same result by using Java transport client. In Elasticsearch Head: I fire the query below through POST API \_search: { "query": {}, "from": 100, "size": 20, "sort": \[ { … --- ## [Scripted field. Calculating percentage](https://discuss.elastic.co/t/scripted-field-calculating-percentage/66350)
**Author:** [@TSimkevicius](https://discuss.elastic.co/u/TSimkevicius)\ **Replies:** 2\ **Last updated:** [November 18, 2016, 6:28am UTC](https://discuss.elastic.co/t/scripted-field-calculating-percentage/66350 "2016-11-18T06:28:50Z")
Hello, I want to as how to write script to calculate percentage. I want to calculate percentage of every industry in every state. Main problem is that I don't know how to write specific industry in specific state in s… --- ## [Running ES 5 on a low-memory server for testing](https://discuss.elastic.co/t/running-es-5-on-a-low-memory-server-for-testing/65336)
**Author:** [@Cylindric](https://discuss.elastic.co/u/Cylindric)\ **Replies:** 2\ **Last updated:** [November 8, 2016, 2:24pm UTC](https://discuss.elastic.co/t/running-es-5-on-a-low-memory-server-for-testing/65336 "2016-11-08T14:24:18Z")
Hi folks. I'm seeing if I can get ES5 set up in a very limited environment (2Gb RAM) I have a clean install of Ubuntu 16.04, and have installed ES 5.0.0. I have configured ES to start with systemd. In /etc/elasticsear… --- ## [Shield cost](https://discuss.elastic.co/t/shield-cost/42139)
**Author:** [@chenbe2204](https://discuss.elastic.co/u/chenbe2204)\ **Replies:** 2\ **Last updated:** [February 18, 2016, 1:01pm UTC](https://discuss.elastic.co/t/shield-cost/42139 "2016-02-18T13:01:26Z")
Hi , If I installed shield version 1.3.2 on my server , Is is free of charge ? Is the license permanent or temporary ? BR, Chen --- ## [Randomly getting \_grokparsefailure error](https://discuss.elastic.co/t/randomly-getting--grokparsefailure-error/27413)
**Author:** [@Milind\_Gode](https://discuss.elastic.co/u/Milind_Gode)\ **Replies:** 2\ **Last updated:** [August 20, 2015, 2:36pm UTC](https://discuss.elastic.co/t/randomly-getting--grokparsefailure-error/27413 "2015-08-20T14:36:08Z")
I am using syslog plugin to get logs from remote servers. When I parse these logs using 'stdin' or 'file' plugin everything works fine. But when the same logs are provided to logstash through 'syslog' plugins sometime f… --- ## [Elastic/elasticsearch-php is gone](https://discuss.elastic.co/t/elastic-elasticsearch-php-is-gone/369722)
**Author:** [@Marwan\_Mustafa\_Fikra](https://discuss.elastic.co/u/Marwan_Mustafa_Fikra)\ **Replies:** 2\ **Last updated:** [October 29, 2024, 12:29pm UTC](https://discuss.elastic.co/t/elastic-elasticsearch-php-is-gone/369722 "2024-10-29T12:29:26Z")
The elastic/elasticsearch-php repository is gone with no obvious announcements or mentions of it anywhere. What happened? --- ## [Elastic Agent, single custom log to multiple indices via ingest pipeline](https://discuss.elastic.co/t/elastic-agent-single-custom-log-to-multiple-indices-via-ingest-pipeline/290002)
**Author:** [@rappersdelight](https://discuss.elastic.co/u/rappersdelight)\ **Replies:** 6\ **Last updated:** [November 24, 2021, 3:06am UTC](https://discuss.elastic.co/t/elastic-agent-single-custom-log-to-multiple-indices-via-ingest-pipeline/290002 "2021-11-24T03:06:13Z")
I am using elastic agent to capture the custom log from a pihole server, but I would like to split out the dns logs and the dhcp logs that are both found in pihole.log into different indexes. Things are working well, pr… --- ## [Invalid license found, requires a basic or a valid trial license and received Open source](https://discuss.elastic.co/t/invalid-license-found-requires-a-basic-or-a-valid-trial-license-and-received-open-source/266391)
**Author:** [@Charles100](https://discuss.elastic.co/u/Charles100)\ **Replies:** 6\ **Last updated:** [March 5, 2021, 7:10pm UTC](https://discuss.elastic.co/t/invalid-license-found-requires-a-basic-or-a-valid-trial-license-and-received-open-source/266391 "2021-03-05T19:10:05Z")
Hi, I followed this procedure to install ELK on Kubernetes (Deploy ECK in your Kubernetes cluster | Elastic Cloud on Kubernetes \[1.4\] | Elastic). Everything looks ok. Now, I want to use filebeat on my kubernetes host t… --- ## [Recommendations needed for large ELK system design](https://discuss.elastic.co/t/recommendations-needed-for-large-elk-system-design/18980)
**Author:** [@Alex\_6](https://discuss.elastic.co/u/Alex_6)\ **Replies:** 6\ **Last updated:** [August 13, 2014, 9:35am UTC](https://discuss.elastic.co/t/recommendations-needed-for-large-elk-system-design/18980 "2014-08-13T09:35:37Z")
Hello, We wish to set up an entire ELK system with the following features: - Input from Logstash shippers located on 400 Linux VMs. Only a handful of log sources on each VM. - Data retention for 30 days… --- ## [Elasticsearch.bat installation freeze](https://discuss.elastic.co/t/elasticsearch-bat-installation-freeze/328464)
**Author:** [@Shaakxuur](https://discuss.elastic.co/u/Shaakxuur)\ **Replies:** 7\ **Last updated:** [March 27, 2023, 10:15am UTC](https://discuss.elastic.co/t/elasticsearch-bat-installation-freeze/328464 "2023-03-27T10:15:59Z")
Hi all :slight\_smile: My main goal is to use Winlogbeat to visualize our Eventlogs. I can only use the self-managed version. -------------------------------------------------------------------------------------- Inst… --- ## [Elasticsearch Apply filters with results from aggregations](https://discuss.elastic.co/t/elasticsearch-apply-filters-with-results-from-aggregations/308744)
**Author:** [@Eddie\_Vuong](https://discuss.elastic.co/u/Eddie_Vuong)\ **Replies:** 7\ **Last updated:** [July 5, 2022, 8:53am UTC](https://discuss.elastic.co/t/elasticsearch-apply-filters-with-results-from-aggregations/308744 "2022-07-05T08:53:37Z")
Is there anyway I can using the results obtained from aggregations to filter out the final hits in the query? I want to obtain a list of users who have more than 2 devices and the list of their devices in the database. … --- ## [Convert string to object and finding average](https://discuss.elastic.co/t/convert-string-to-object-and-finding-average/123714)
**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\ **Replies:** 7\ **Last updated:** [March 13, 2018, 12:14pm UTC](https://discuss.elastic.co/t/convert-string-to-object-and-finding-average/123714 "2018-03-13T12:14:10Z")
Hi Having a data as follows \[ { "StudentId": 1, "Marks": \[ { "SubjectId": 1, "vResultAttribute": """{\\"TotalTasksCount\\":15,\\"Result\\":73.3,\\"TestObjectsCorrect\\":64,\\"TestMaxPoint\\":15}… --- ## [Connecting to Elasticsearch via Python with SSL and client certificate --\> CERTIFICATE\_VERIFY\_FAILED](https://discuss.elastic.co/t/connecting-to-elasticsearch-via-python-with-ssl-and-client-certificate-certificate-verify-failed/86159)
**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\ **Replies:** 1\ **Last updated:** [May 19, 2017, 7:00pm UTC](https://discuss.elastic.co/t/connecting-to-elasticsearch-via-python-with-ssl-and-client-certificate-certificate-verify-failed/86159 "2017-05-19T19:00:29Z")
I am finding an amazing lack of information on how exactly to configure this. I am using ES 2.3.2 and Python 3.2. My cluster is behind a reverse proxy, so I have an SSL endpoint that requires a client certificate. 1… --- ## [Bitbucket to Elasticsearch configuration using SSL](https://discuss.elastic.co/t/bitbucket-to-elasticsearch-configuration-using-ssl/69684)
**Author:** [@sjothi](https://discuss.elastic.co/u/sjothi)\ **Replies:** 1\ **Last updated:** [December 21, 2016, 11:05pm UTC](https://discuss.elastic.co/t/bitbucket-to-elasticsearch-configuration-using-ssl/69684 "2016-12-21T23:05:29Z")
Hi Folks, I am not sure whether this is the correct place to ask this question. Please apologize me if its not a correct place to ask this question. We are using DataCenter version of bitbucket and it requires remote… --- ## [Filebeat does not mount volume](https://discuss.elastic.co/t/filebeat-does-not-mount-volume/271269)
**Author:** [@ata](https://discuss.elastic.co/u/ata)\ **Replies:** 3\ **Last updated:** [April 27, 2021, 12:28pm UTC](https://discuss.elastic.co/t/filebeat-does-not-mount-volume/271269 "2021-04-27T12:28:06Z")
Hi, I was running filebeat 7.10.1 on EKS 1.18 and everything was fine, after the EKS upgrade of EKS to 1.19 filebeat container cannot mount its volume: MountVolume.SetUp failed for volume "docker-sock" : hostPath type … [Previous page](https://discuss.elastic.co/top.md?page=950&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=952&per_page=50&period=all)