# Top **URL:** https://discuss.elastic.co/top.md?page=986&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 987 --- ## [What is elastic search bounded by? Is it cpu, memory etc](https://discuss.elastic.co/t/what-is-elastic-search-bounded-by-is-it-cpu-memory-etc/21029)
**Author:** [@rmadd](https://discuss.elastic.co/u/rmadd)\ **Replies:** 2\ **Last updated:** [December 4, 2014, 5:32pm UTC](https://discuss.elastic.co/t/what-is-elastic-search-bounded-by-is-it-cpu-memory-etc/21029 "2014-12-04T17:32:12Z")
I am running elastic search in my personal box. Memory: 6GB Processor: Intel® Core™ i3-3120M CPU @ 2.50GHz × 4 OS: Ubuntu 12.04 - 64-bit ElasticSearch Settings: Only running locally Version : 1.2.2 ES\_M… --- ## [Need a tip on disks partitioning](https://discuss.elastic.co/t/need-a-tip-on-disks-partitioning/73852)
**Author:** [@John16](https://discuss.elastic.co/u/John16)\ **Replies:** 1\ **Last updated:** [February 3, 2017, 2:31pm UTC](https://discuss.elastic.co/t/need-a-tip-on-disks-partitioning/73852 "2017-02-03T14:31:20Z")
Hello, I am setting up a multi-node ES cluster. Each node has 6 SATA HDDs. What is the recommended disk partitioning for ES? 1) create RAID5 and use it as a single path.data? 2) create RAID0 and use it as a single p… --- ## [How to get date difference in weeks between today and date\_timestamp field](https://discuss.elastic.co/t/how-to-get-date-difference-in-weeks-between-today-and-date-timestamp-field/266378)
**Author:** [@Rakesh\_Rayabarapu](https://discuss.elastic.co/u/Rakesh_Rayabarapu)\ **Replies:** 4\ **Last updated:** [March 9, 2021, 7:36am UTC](https://discuss.elastic.co/t/how-to-get-date-difference-in-weeks-between-today-and-date-timestamp-field/266378 "2021-03-09T07:36:56Z")
Hello Team, could any one help me to write scripted field to get date difference in weeks between current datetime and doc\['timestamp'\]. to get current date time used datetime.new date().getTime() Used this script. (… --- ## [Heartbeat monitor auto reloading does now work](https://discuss.elastic.co/t/heartbeat-monitor-auto-reloading-does-now-work/248306)
**Author:** [@tterranigma](https://discuss.elastic.co/u/tterranigma)\ **Replies:** 4\ **Last updated:** [September 16, 2020, 1:22am UTC](https://discuss.elastic.co/t/heartbeat-monitor-auto-reloading-does-now-work/248306 "2020-09-16T01:22:19Z")
According to heartbeat documentation, heartbeat supports automatically reloading the monitor files periodically. In my installation of heartbeat, I have enabled this: heartbeat: config: monitors: path: /etc/… --- ## [Custom index names with an ILM policy](https://discuss.elastic.co/t/custom-index-names-with-an-ilm-policy/241852)
**Author:** [@michielM](https://discuss.elastic.co/u/michielM)\ **Replies:** 4\ **Last updated:** [July 27, 2020, 8:35am UTC](https://discuss.elastic.co/t/custom-index-names-with-an-ilm-policy/241852 "2020-07-27T08:35:36Z")
Hi all, I am trying to setup my elk stack and beats in a way that I can have an ILM policy in combination with custom index names. For example: I want to have the index name filebeat-department-01/01/2000 and have it … --- ## [Unable to index csv to elasticsearch (MalformedCSVError: Unclosed quoted field)](https://discuss.elastic.co/t/unable-to-index-csv-to-elasticsearch-malformedcsverror-unclosed-quoted-field/211422)
**Author:** [@SHUBHAM\_KADAM](https://discuss.elastic.co/u/SHUBHAM_KADAM)\ **Replies:** 4\ **Last updated:** [January 3, 2020, 9:01am UTC](https://discuss.elastic.co/t/unable-to-index-csv-to-elasticsearch-malformedcsverror-unclosed-quoted-field/211422 "2020-01-03T09:01:03Z")
Hi, I have been trying to index csv file to elasticsearch using logstash. But, due to issue related to the csv file, I am unable to do so. Sample data: file,id,Last-Updated,SubmittedOn,Engg,Des /path/to/file.c,id21,4… --- ## [Add notes to data points](https://discuss.elastic.co/t/add-notes-to-data-points/144521)
**Author:** [@gregpaskal](https://discuss.elastic.co/u/gregpaskal)\ **Replies:** 4\ **Last updated:** [August 21, 2018, 7:49pm UTC](https://discuss.elastic.co/t/add-notes-to-data-points/144521 "2018-08-21T19:49:05Z")
I would like to find a way to add analysis notes to visualized data points. In the mockup below, I show an example of what would be awesome to have along with our visualized data, notations regarding the analysis of the … --- ## [Pushing logs over Lumberjack protocol from Node.js](https://discuss.elastic.co/t/pushing-logs-over-lumberjack-protocol-from-node-js/104574)
**Author:** [@jthomas](https://discuss.elastic.co/u/jthomas)\ **Replies:** 4\ **Last updated:** [October 31, 2017, 3:55pm UTC](https://discuss.elastic.co/t/pushing-logs-over-lumberjack-protocol-from-node-js/104574 "2017-10-31T15:55:27Z")
I'm trying to send logs to Logstash using the Lumberjack protocol from Node.js. I've found this NPM module which implements a client library for the protocol but I can't seem to get it working with an instance of ELK I'm… --- ## [About performance using has\_child query for filtering](https://discuss.elastic.co/t/about-performance-using-has-child-query-for-filtering/98197)
**Author:** [@toka](https://discuss.elastic.co/u/toka)\ **Replies:** 4\ **Last updated:** [September 6, 2017, 1:25am UTC](https://discuss.elastic.co/t/about-performance-using-has-child-query-for-filtering/98197 "2017-09-06T01:25:26Z")
Hi guys, I have to filter users that already interacted with each other, so they don’t appear in search anymore. I’m planning to do this filtering using a has\_child query. The main user document will be the parent, and… --- ## [Please help about clear ES cache](https://discuss.elastic.co/t/please-help-about-clear-es-cache/93723)
**Author:** [@palmer](https://discuss.elastic.co/u/palmer)\ **Replies:** 4\ **Last updated:** [July 26, 2017, 2:29am UTC](https://discuss.elastic.co/t/please-help-about-clear-es-cache/93723 "2017-07-26T02:29:45Z")
Hi , i'm a tester, by use ES 5.3, testing the search result used time; original search use about 20s, after cache search use 2s; but don't know how to correct clear the cache , (have tried command "curl -XPOST '127.0.… --- ## [Copying and renaming a cluster](https://discuss.elastic.co/t/copying-and-renaming-a-cluster/4259)
**Author:** [@Mike\_Gaffney](https://discuss.elastic.co/u/Mike_Gaffney)\ **Replies:** 4\ **Last updated:** [May 31, 2016, 6:40am UTC](https://discuss.elastic.co/t/copying-and-renaming-a-cluster/4259 "2016-05-31T06:40:44Z")
I've got a production cluster that I would like to mirror down to development intact. I'd like to rename the cluster so I don't get confused and things don't conflict. What would I need to do to do this. My gateway is… --- ## [Exception when exporting documents org.elasticsearch.xpack.monitoring.exporter.ExportException: failed to flush export bulks](https://discuss.elastic.co/t/exception-when-exporting-documents-org-elasticsearch-xpack-monitoring-exporter-exportexception-failed-to-flush-export-bulks/66796)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 0\ **Last updated:** [November 21, 2016, 11:32pm UTC](https://discuss.elastic.co/t/exception-when-exporting-documents-org-elasticsearch-xpack-monitoring-exporter-exportexception-failed-to-flush-export-bulks/66796 "2016-11-21T23:32:27Z")
ELK 5.0 Monitoring errors: Status: Red kibana Heap Total (MB) 99.50 Heap Used (MB) 79.85 Load 0.96, 1.17, 1.27 Response Time Avg (ms) 4836.32 Response Time Max (ms) 7803.75 Requests Per Second 0.42 Status Breakdown ID … --- ## [Same index pattern but different index template](https://discuss.elastic.co/t/same-index-pattern-but-different-index-template/342018)
**Author:** [@Cruz](https://discuss.elastic.co/u/Cruz)\ **Replies:** 5\ **Last updated:** [September 4, 2023, 11:24am UTC](https://discuss.elastic.co/t/same-index-pattern-but-different-index-template/342018 "2023-09-04T11:24:33Z")
Good day! I just have a question regarding on Index Template is it possible to create a different index template but same index pattern? What I am going to do is to create a index template but same name on the index p… --- ## [Use ElasticSearch percolator (reverse query) in Enterprise Search](https://discuss.elastic.co/t/use-elasticsearch-percolator-reverse-query-in-enterprise-search/264301)
**Author:** [@Suxsem](https://discuss.elastic.co/u/Suxsem)\ **Replies:** 5\ **Last updated:** [February 18, 2021, 9:48pm UTC](https://discuss.elastic.co/t/use-elasticsearch-percolator-reverse-query-in-enterprise-search/264301 "2021-02-18T21:48:07Z")
I'm VERY new to elasticsearch. I installed elasticsearch along with enterprisesearch in order to use it to implement a search feature in my mobile app. I think it's working great. Now, one of my requirements is to impl… --- ## [Kibana 5.6 unable to load licence](https://discuss.elastic.co/t/kibana-5-6-unable-to-load-licence/100342)
**Author:** [@hio77](https://discuss.elastic.co/u/hio77)\ **Replies:** 5\ **Last updated:** [September 15, 2017, 10:41am UTC](https://discuss.elastic.co/t/kibana-5-6-unable-to-load-licence/100342 "2017-09-15T10:41:38Z")
Not sure how to resolve this one... After updating to 5.6.0 i seem to be unable to load into kibana. \[image\] Have tried removing x-pack on both, Kibana loads up happily after this. Also double checked my licence with… --- ## [Logstash abysmal performance from 2.2.0 to 2.3.1](https://discuss.elastic.co/t/logstash-abysmal-performance-from-2-2-0-to-2-3-1/47638)
**Author:** [@KlavsKlavsen](https://discuss.elastic.co/u/KlavsKlavsen)\ **Replies:** 5\ **Last updated:** [April 25, 2016, 12:21pm UTC](https://discuss.elastic.co/t/logstash-abysmal-performance-from-2-2-0-to-2-3-1/47638 "2016-04-25T12:21:23Z")
Hi guys, We are running logstash 2.2.0 (against elasticsearch 2.3.1) and it can index \>1.2mill docs/minute. If we then upgrade to logstash-2.3.1 - it peaks at 200k docs/min.. 1/6 of the performance. There's nothing i… --- ## [Hit a log only all specific keyword exists?](https://discuss.elastic.co/t/hit-a-log-only-all-specific-keyword-exists/37323)
**Author:** [@Hacksign](https://discuss.elastic.co/u/Hacksign)\ **Replies:** 5\ **Last updated:** [December 16, 2015, 2:23pm UTC](https://discuss.elastic.co/t/hit-a-log-only-all-specific-keyword-exists/37323 "2015-12-16T14:23:29Z")
I have a search statement like this: { "size" : 10, "query" : { "bool" : { "must" : \[ { "match" : { "log.\_kv\_" : { … --- ## [Getting 5 - 6 hours of data delay while extracting data from elastic search into kibana dev tools/console](https://discuss.elastic.co/t/getting-5-6-hours-of-data-delay-while-extracting-data-from-elastic-search-into-kibana-dev-tools-console/213990)
**Author:** [@suraj888](https://discuss.elastic.co/u/suraj888)\ **Replies:** 6\ **Last updated:** [January 14, 2020, 8:12pm UTC](https://discuss.elastic.co/t/getting-5-6-hours-of-data-delay-while-extracting-data-from-elastic-search-into-kibana-dev-tools-console/213990 "2020-01-14T20:12:31Z")
Dear All, I am new to ELK and i apologize in advance for my question. I am trying to extract data from one of the index of elasticsearch to kibana dev tools, through query but i am getting data delay for nearly about … --- ## [Customizing data table visualization column](https://discuss.elastic.co/t/customizing-data-table-visualization-column/179511)
**Author:** [@imen\_mersani](https://discuss.elastic.co/u/imen_mersani)\ **Replies:** 6\ **Last updated:** [May 10, 2019, 12:51pm UTC](https://discuss.elastic.co/t/customizing-data-table-visualization-column/179511 "2019-05-10T12:51:37Z")
How can i customize data table visualization in kibana ? it is possible to customize data table header color and style with kibana 6.6.0 ? --- ## [Exception at startup: failed to send ping request over multicast](https://discuss.elastic.co/t/exception-at-startup-failed-to-send-ping-request-over-multicast/3671)
**Author:** [@cabal](https://discuss.elastic.co/u/cabal)\ **Replies:** 6\ **Last updated:** [December 21, 2010, 3:51am UTC](https://discuss.elastic.co/t/exception-at-startup-failed-to-send-ping-request-over-multicast/3671 "2010-12-21T03:51:51Z")
Hi, I'm new here and I hope I'm in the right place. I'm on Linux, Ubuntu 10.10. I have downloaded elasticsearch 0.13.1, and when I start it up with bin/elasticsearch -f this is what happens: \[2010-12-16 12:12… --- ## [Groovy to painless](https://discuss.elastic.co/t/groovy-to-painless/75503)
**Author:** [@living\_jordi](https://discuss.elastic.co/u/living_jordi)\ **Replies:** 2\ **Last updated:** [February 20, 2017, 7:21am UTC](https://discuss.elastic.co/t/groovy-to-painless/75503 "2017-02-20T07:21:31Z")
I'm strugling with this compilation code: \[esn1\] failed to load/compile script \[day\]: { "type" : "script\_exception", "reason" : "compile error", "caused\_by" : { "type" : "illegal\_argument\_exception", … --- ## [Reducing Heap memory from 32 GB to less than 30.5 GB](https://discuss.elastic.co/t/reducing-heap-memory-from-32-gb-to-less-than-30-5-gb/45282)
**Author:** [@vilas](https://discuss.elastic.co/u/vilas)\ **Replies:** 7\ **Last updated:** [March 23, 2016, 9:01pm UTC](https://discuss.elastic.co/t/reducing-heap-memory-from-32-gb-to-less-than-30-5-gb/45282 "2016-03-23T21:01:16Z")
Hi, I have my cluster setup with 32 GB per node with 5 nodes in ES 1.5 cluster. But now I read in the Elasticsearch documentation that heap memory is recommended to be 30.5 GB or less so that ES would use 32 bit addres… --- ## [Logstash stuck at Successfully started Logstash API](https://discuss.elastic.co/t/logstash-stuck-at-successfully-started-logstash-api/179097)
**Author:** [@Chaitra\_Muniyappa](https://discuss.elastic.co/u/Chaitra_Muniyappa)\ **Replies:** 3\ **Last updated:** [May 2, 2019, 7:31pm UTC](https://discuss.elastic.co/t/logstash-stuck-at-successfully-started-logstash-api/179097 "2019-05-02T19:31:33Z")
HI, I am trying to load a CSV file into Elastic Search using logstash. I previously loaded it but deleted the index and loading with document type field. But now i am stuck at Successfully started Logstash API endpoint… --- ## [SSL error received even though "ssl" is set to "false"](https://discuss.elastic.co/t/ssl-error-received-even-though-ssl-is-set-to-false/176163)
**Author:** [@Miao](https://discuss.elastic.co/u/Miao)\ **Replies:** 3\ **Last updated:** [April 10, 2019, 11:51am UTC](https://discuss.elastic.co/t/ssl-error-received-even-though-ssl-is-set-to-false/176163 "2019-04-10T11:51:04Z")
Here is the input segment of my logstash.conf: input { http { host =\> "127.0.0.1" port =\> 31311 ssl =\> false } } I have an index named twitter\_new. I want to send a DELETE request via cURL to remove the entire… --- ## [How to use json input field?](https://discuss.elastic.co/t/how-to-use-json-input-field/138304)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 3\ **Last updated:** [July 5, 2018, 2:44am UTC](https://discuss.elastic.co/t/how-to-use-json-input-field/138304 "2018-07-05T02:44:00Z")
Hi, I got a metric with various SUM of bytes. Now I want to use the json input field to separate the SUM per subnet (e.g. 192..., 172...) . However I have no clue how the json format is supposed to look. The documentat… --- ## [Analyzeされたワードの一部を取得することはできますか？](https://discuss.elastic.co/t/analyze/121980)
**Author:** [@mkokui](https://discuss.elastic.co/u/mkokui)\ **Replies:** 3\ **Last updated:** [March 12, 2018, 5:17am UTC](https://discuss.elastic.co/t/analyze/121980 "2018-03-12T05:17:42Z")
使用しているのは、Elasticsearch6.2です。 次のようなデータから名詞単語のSuggest機能を作れないか検討しています。 例えば、「役割」というインプット文字列を渡すと、「役割等級」「役割等級制度」というような単語が返ってくるような動きを期待しています。 Elasticsearchの知見がまだまだ浅いため、理解できていないところが多いのですが、 データをPutしたときに下例ですと「質問」に「SampleData」の… --- ## [Ruby string test](https://discuss.elastic.co/t/ruby-string-test/64299)
**Author:** [@Gregs](https://discuss.elastic.co/u/Gregs)\ **Replies:** 3\ **Last updated:** [October 31, 2016, 9:04am UTC](https://discuss.elastic.co/t/ruby-string-test/64299 "2016-10-31T09:04:33Z")
Logstash 2.3.4: Here the case infos "clientip" =\> \[ \[0\] "151.38.152.143", \[1\] "-" \], ruby { code =\> 'event\["clientip"\].each { |k,v| if v == "-" event\["clientip2"\]\[k\] = v end } ' } Bu… --- ## [Filebeat: output to 2 redis servers impossible](https://discuss.elastic.co/t/filebeat-output-to-2-redis-servers-impossible/54128)
**Author:** [@VuokkoVuorinnen](https://discuss.elastic.co/u/VuokkoVuorinnen)\ **Replies:** 3\ **Last updated:** [June 28, 2016, 11:00am UTC](https://discuss.elastic.co/t/filebeat-output-to-2-redis-servers-impossible/54128 "2016-06-28T11:00:13Z")
OS: Centos 6.7 Filebeat: filebeat-1.2.3-x86\_64.rpm Configuration: output: redis: hosts: \["172.20.0.232:6379", "172.20.0.233:6379"\] index: logstash When starting filebeat with debug info, it gives me this: … --- ## [Historical data vs Last](https://discuss.elastic.co/t/historical-data-vs-last/41552)
**Author:** [@rob.chartier](https://discuss.elastic.co/u/rob.chartier)\ **Replies:** 3\ **Last updated:** [February 12, 2016, 9:04pm UTC](https://discuss.elastic.co/t/historical-data-vs-last/41552 "2016-02-12T21:04:05Z")
Hi All, We are trying to model an IoT scenario and find that we may have two needs for most of our sensor indices and I wanted to throw it out there to see what others think and if they have already solved this issue. … --- ## [Failed to list \*v1.ReplicaSet: replicasets.apps is forbidden: User "system:serviceaccount:es-common:elastic-agent"](https://discuss.elastic.co/t/failed-to-list-v1-replicaset-replicasets-apps-is-forbidden-user-systemes-common-elastic-agent/342444)
**Author:** [@tirelibirefe](https://discuss.elastic.co/u/tirelibirefe)\ **Replies:** 1\ **Last updated:** [October 13, 2023, 10:53am UTC](https://discuss.elastic.co/t/failed-to-list-v1-replicaset-replicasets-apps-is-forbidden-user-systemes-common-elastic-agent/342444 "2023-10-13T10:53:42Z")
Hello, I have installed ES, Kibana 8.9.1 on EKS 1.27 and struggling with fleet. I get following error messages fleet-server-agent pod logs: {"log.level":"error","@timestamp":"2023-09-06T12:16:07.511Z","message":"E0906… --- ## [Kibana 8.8 Watcher vs Alerts](https://discuss.elastic.co/t/kibana-8-8-watcher-vs-alerts/338813)
**Author:** [@perfecto25](https://discuss.elastic.co/u/perfecto25)\ **Replies:** 1\ **Last updated:** [July 19, 2023, 6:41pm UTC](https://discuss.elastic.co/t/kibana-8-8-watcher-vs-alerts/338813 "2023-07-19T18:41:00Z")
Hello all, Im a bit confused re alerting, I recently upgraded my elk stack from 7.2 \> 8.8 we had bunch of Alerts rules configured to notify a slack channel for example if some index log file has a string "Error" I dont… --- ## [Watch is stuck at error, always needs a manual restart](https://discuss.elastic.co/t/watch-is-stuck-at-error-always-needs-a-manual-restart/249778)
**Author:** [@Shubhangi](https://discuss.elastic.co/u/Shubhangi)\ **Replies:** 4\ **Last updated:** [September 28, 2020, 8:13am UTC](https://discuss.elastic.co/t/watch-is-stuck-at-error-always-needs-a-manual-restart/249778 "2020-09-28T08:13:11Z")
Hi, I'm using Elastic Stack 7.8. I've enable a watcher. Every night it shows error: connection timeout for webhook action. And the action status in But only when I edit the watch(I'm not actually changing any thing, rea… --- ## [How to create Scripted field to create a column in Geo json format?](https://discuss.elastic.co/t/how-to-create-scripted-field-to-create-a-column-in-geo-json-format/207887)
**Author:** [@Ramya\_Tanikanti](https://discuss.elastic.co/u/Ramya_Tanikanti)\ **Replies:** 4\ **Last updated:** [November 18, 2019, 1:47am UTC](https://discuss.elastic.co/t/how-to-create-scripted-field-to-create-a-column-in-geo-json-format/207887 "2019-11-18T01:47:59Z")
Hi, I have created an index with field location of type Geo\_point in the Kibana console. I do not want to configure the logstash config file to create the location filed in geo json format. Instead I want to create a sc… --- ## [Does not using -oss flavour means i have to pay for elasticseach?](https://discuss.elastic.co/t/does-not-using-oss-flavour-means-i-have-to-pay-for-elasticseach/178953)
**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\ **Replies:** 4\ **Last updated:** [April 30, 2019, 8:09pm UTC](https://discuss.elastic.co/t/does-not-using-oss-flavour-means-i-have-to-pay-for-elasticseach/178953 "2019-04-30T20:09:56Z")
I'm upgrading elk stack from 5.x to 7.0 and i saw that now there are two flavors of docker images. I'm confused which one to use. I disabled xpack in my current ELK stack. So should i go with non-oss flavor and disable… --- ## [Web Server Recipies](https://discuss.elastic.co/t/web-server-recipies/24615)
**Author:** [@bdunbar](https://discuss.elastic.co/u/bdunbar)\ **Replies:** 4\ **Last updated:** [July 7, 2015, 10:57am UTC](https://discuss.elastic.co/t/web-server-recipies/24615 "2015-07-07T10:57:18Z")
I've got logstash shoving my log files into elasticsearch, got a stable cluster, status is green. Kibana4 is up and running. Huzzah! I'm not quiet sure how to turn this data into useful graphs and pictures. Oh I get… --- ## [Question: Regarding the Maximum Shard Size](https://discuss.elastic.co/t/question-regarding-the-maximum-shard-size/21353)
**Author:** [@costya](https://discuss.elastic.co/u/costya)\ **Replies:** 1\ **Last updated:** [December 22, 2014, 7:00pm UTC](https://discuss.elastic.co/t/question-regarding-the-maximum-shard-size/21353 "2014-12-22T19:00:20Z")
Hello, We keep data in monthly indices that grew to be about 800 GB with 4.5 Million Documents each month. Each index is built from 6 shards and we use 1 replica. What should be the Average Shard size in an in… --- ## [How to calculate "net expansion factor"](https://discuss.elastic.co/t/how-to-calculate-net-expansion-factor/230824)
**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\ **Replies:** 2\ **Last updated:** [May 2, 2020, 6:44pm UTC](https://discuss.elastic.co/t/how-to-calculate-net-expansion-factor/230824 "2020-05-02T18:44:51Z")
Hi , I'm trying to figure out how to calculate "net expansion factor" , from reading a few notes I understand that net expansion factor = JSON Factor \* Indexing Factor \* Compression Factor but how can I calculate JS… --- ## [LogstashでFilebeatの送信ファイル名を取得する](https://discuss.elastic.co/t/logstash-filebeat/218434)
**Author:** [@echo](https://discuss.elastic.co/u/echo)\ **Replies:** 2\ **Last updated:** [February 9, 2020, 3:51pm UTC](https://discuss.elastic.co/t/logstash-filebeat/218434 "2020-02-09T15:51:54Z")
Logstash.conf で Filebeat から送信されたファイル名を grok で取得したいのですが、 下記で出来ませんでした。(バージョン7.5.2) 6.3.1 では出来ていて、ドキュメントを読んでも同様の動作が 可能な方法が見つからない状況です。 Filebeatの送信ファイルパスは、/var/log/2.log です。 どなたかご教示いただければと思います。 input { beats { por… --- ## [Filebeat for zLinux (IBM mainframe zOS Linux)](https://discuss.elastic.co/t/filebeat-for-zlinux-ibm-mainframe-zos-linux/191662)
**Author:** [@jiawang](https://discuss.elastic.co/u/jiawang)\ **Replies:** 2\ **Last updated:** [July 25, 2019, 5:25pm UTC](https://discuss.elastic.co/t/filebeat-for-zlinux-ibm-mainframe-zos-linux/191662 "2019-07-25T17:25:34Z")
We want to use filebeat to get some app logs on zLinux which is linux mainframe version provided by IBM zOS. It is not intel based system, it is IBM S/390 machine. what we did was the follow two steps (which worked with… --- ## [ECE Install Fail](https://discuss.elastic.co/t/ece-install-fail/116397)
**Author:** [@oil](https://discuss.elastic.co/u/oil)\ **Replies:** 2\ **Last updated:** [January 25, 2018, 9:35am UTC](https://discuss.elastic.co/t/ece-install-fail/116397 "2018-01-25T09:35:40Z")
Hi, Having followed: https://www.elastic.co/guide/en/cloud-enterprise/current/ece-configure-hosts.html#ece-configure-hosts-rhel-centos I'm cannot install ECE on CentOS 7.4 (with Kernel 4.4.111-1.el7.elrepo.x86\_64) C… --- ## [Versioning with version\_type external](https://discuss.elastic.co/t/versioning-with-version-type-external/98446)
**Author:** [@Lukas\_Tilch](https://discuss.elastic.co/u/Lukas_Tilch)\ **Replies:** 2\ **Last updated:** [August 28, 2017, 1:11pm UTC](https://discuss.elastic.co/t/versioning-with-version-type-external/98446 "2017-08-28T13:11:05Z")
Hello, I want to use an external versioning system with logstash so a document only gets updated when the version is GTE The config looks like this output { stdout { codec =\> rubydebug } elasticsearch { hosts =\> … --- ## [How to post multiple records to same index via curl](https://discuss.elastic.co/t/how-to-post-multiple-records-to-same-index-via-curl/95218)
**Author:** [@KeninHouston](https://discuss.elastic.co/u/KeninHouston)\ **Replies:** 2\ **Last updated:** [July 31, 2017, 7:04pm UTC](https://discuss.elastic.co/t/how-to-post-multiple-records-to-same-index-via-curl/95218 "2017-07-31T19:04:21Z")
Hi, I am trying to write multiple records to the same index using curl. I can write one entry successfully, but I get a syntax error saying , unexpected when I try and add the second one. I found a posting which says I … --- ## [Average Aggregation](https://discuss.elastic.co/t/average-aggregation/67826)
**Author:** [@c0ng111](https://discuss.elastic.co/u/c0ng111)\ **Replies:** 2\ **Last updated:** [December 5, 2016, 9:01pm UTC](https://discuss.elastic.co/t/average-aggregation/67826 "2016-12-05T21:01:17Z")
Hi, Is there a way to aggregate the average with filtering the 0 values? eg. time - 1 time - 0 time - 2 time - 1 time - 3 time - 2 time - 0 on Kibana i see that getting the average would be below computation : … --- ## [Elasticsearch not returning larger results (not total result size/length, but size of individual hit](https://discuss.elastic.co/t/elasticsearch-not-returning-larger-results-not-total-result-size-length-but-size-of-individual-hit/319242)
**Author:** [@NickIsWorking](https://discuss.elastic.co/u/NickIsWorking)\ **Replies:** 5\ **Last updated:** [November 22, 2022, 10:59pm UTC](https://discuss.elastic.co/t/elasticsearch-not-returning-larger-results-not-total-result-size-length-but-size-of-individual-hit/319242 "2022-11-22T22:59:25Z")
Hello. I have an Elasticsearch instance, storing objects that contain really large strings. I am trying to make a request to retrieve those objects from elasticsearch, but for whatever reason, elasticsearch will not retu… --- ## [Kibana in docker while elasticsearch in host machine - is it possible? - please help](https://discuss.elastic.co/t/kibana-in-docker-while-elasticsearch-in-host-machine-is-it-possible-please-help/228917)
**Author:** [@Venkatesh\_Murthy](https://discuss.elastic.co/u/Venkatesh_Murthy)\ **Replies:** 5\ **Last updated:** [April 22, 2020, 7:30pm UTC](https://discuss.elastic.co/t/kibana-in-docker-while-elasticsearch-in-host-machine-is-it-possible-please-help/228917 "2020-04-22T19:30:44Z")
i Pulled Docker image for Kibana 7.6.2. Is there a way the kibana connects to host machine elasticsearch ? if yes what parameter should i give in the docker run command ? i tried docker run -d --name kibana761 -e ELAST… --- ## [Kibana NPM](https://discuss.elastic.co/t/kibana-npm/120816)
**Author:** [@dilipchiru](https://discuss.elastic.co/u/dilipchiru)\ **Replies:** 5\ **Last updated:** [February 23, 2018, 4:40pm UTC](https://discuss.elastic.co/t/kibana-npm/120816 "2018-02-23T16:40:39Z")
Hi , I have downloaded the kibana latest version " kibana-5.6.5-linux-x86\_64.tar.gz " for linux machine . Where when i untar in the windows i am not able to see the node/bin/npm does not have the data inside the npm fi… --- ## [How to query or filter by geo distance range in elastic 5.x?](https://discuss.elastic.co/t/how-to-query-or-filter-by-geo-distance-range-in-elastic-5-x/76758)
**Author:** [@NeoCN](https://discuss.elastic.co/u/NeoCN)\ **Replies:** 5\ **Last updated:** [March 12, 2017, 4:13am UTC](https://discuss.elastic.co/t/how-to-query-or-filter-by-geo-distance-range-in-elastic-5-x/76758 "2017-03-12T04:13:05Z")
hi guys, help wanted! I just want to know is there anyway to query or filter by geo distance range in elastic 5.x ? Geo Distance Range Query is Deprecated in 5.0.0, Distance aggregations or sorting can not used to fi… --- ## [Shards not distributed amongst nodes](https://discuss.elastic.co/t/shards-not-distributed-amongst-nodes/37481)
**Author:** [@yehosef](https://discuss.elastic.co/u/yehosef)\ **Replies:** 5\ **Last updated:** [December 17, 2015, 4:49pm UTC](https://discuss.elastic.co/t/shards-not-distributed-amongst-nodes/37481 "2015-12-17T16:49:27Z")
We have an ES cluster - started with 3 machines and we recently added 2 more. We are processing user aggregation data. We had an index called users-v6 and when we added the new machines it distributed across them. We … --- ## [Disable Fuzziness in Query](https://discuss.elastic.co/t/disable-fuzziness-in-query/280073)
**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\ **Replies:** 3\ **Last updated:** [August 3, 2021, 9:11am UTC](https://discuss.elastic.co/t/disable-fuzziness-in-query/280073 "2021-08-03T09:11:07Z")
I am fetching results with the following query where search is being done on Strings (Recipe name): let body2 = { size: 200, from: 0, sort : \[ { "@timestamp" : {"order": "desc", "form… --- ## [How to start multiple instances of filebeat in same host (Windows Server)?](https://discuss.elastic.co/t/how-to-start-multiple-instances-of-filebeat-in-same-host-windows-server/219827)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 3\ **Last updated:** [February 18, 2020, 4:07pm UTC](https://discuss.elastic.co/t/how-to-start-multiple-instances-of-filebeat-in-same-host-windows-server/219827 "2020-02-18T16:07:06Z")
I have downloaded the filebeat-7.6.0-windows-x86\_64.zip file. Do I need to unzip the file in two different directories with a different name? Do I need to change the name of one of the executables (filebeat.exe, filebe… [Previous page](https://discuss.elastic.co/top.md?page=985&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=987&per_page=50&period=all)