# Top **URL:** https://discuss.elastic.co/top.md?page=988&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 989 --- ## [Does ECK support local persistent disks and is it a good idea?](https://discuss.elastic.co/t/does-eck-support-local-persistent-disks-and-is-it-a-good-idea/223515)
**Author:** [@weeco](https://discuss.elastic.co/u/weeco)\ **Replies:** 3\ **Last updated:** [April 2, 2020, 12:53pm UTC](https://discuss.elastic.co/t/does-eck-support-local-persistent-disks-and-is-it-a-good-idea/223515 "2020-04-02T12:53:41Z")
Hello, I am using GKE and we'd like to build several Elasticsearch Clusters using ECK. Some of them will be rather big (10+ TB) and have a decent throughput (1+ TB per day), others are smaller. We are wondering whether… --- ## [集群查询变慢](https://discuss.elastic.co/t/topic/110732)
**Author:** [@Zhengcong\_Yin](https://discuss.elastic.co/u/Zhengcong_Yin)\ **Replies:** 3\ **Last updated:** [January 15, 2018, 2:50am UTC](https://discuss.elastic.co/t/topic/110732 "2018-01-15T02:50:18Z")
43G数据， 4个主分片，没有副本。 集群1： 单节点 集群2： 3个主节点，4个数据节点，1个客户节点。 2种查询： sort by distance; match query 同步发送请求，计算平均的took值。 发现集群2 took值大于集群1. 如何测试水平扩展性？用什么指标及工具？ 谢谢 --- ## [Elasticsearch one shard of the index keeps going into initialization](https://discuss.elastic.co/t/elasticsearch-one-shard-of-the-index-keeps-going-into-initialization/44947)
**Author:** [@wal](https://discuss.elastic.co/u/wal)\ **Replies:** 3\ **Last updated:** [April 4, 2016, 7:22am UTC](https://discuss.elastic.co/t/elasticsearch-one-shard-of-the-index-keeps-going-into-initialization/44947 "2016-04-04T07:22:23Z")
Hi, Every now and again one shard of an index goes into initialization, no message in the log that indicate there is a problem. /var/log/elasticsearch/elasticsearch.log:\[2016-03-21 10:59:56,301\]\[INFO \]\[cluster.metada… --- ## [How to create teasers in elastic search like in FAST esp](https://discuss.elastic.co/t/how-to-create-teasers-in-elastic-search-like-in-fast-esp/45027)
**Author:** [@YaroDakyau](https://discuss.elastic.co/u/YaroDakyau)\ **Replies:** 3\ **Last updated:** [April 1, 2016, 8:58am UTC](https://discuss.elastic.co/t/how-to-create-teasers-in-elastic-search-like-in-fast-esp/45027 "2016-04-01T08:58:45Z")
A search in fast which includes highlight field as shown bellow: { "query" : { "multi\_match" : { "query" : "quick brown fox", .... } } "highlight:" { "fields" : { "fi… --- ## [Security module access - bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll](https://discuss.elastic.co/t/security-module-access-bundles-kbn-ui-shared-deps-npm-kbn-ui-shared-deps-npm-dll/321133)
**Author:** [@Lamis](https://discuss.elastic.co/u/Lamis)\ **Replies:** 5\ **Last updated:** [December 27, 2022, 12:58pm UTC](https://discuss.elastic.co/t/security-module-access-bundles-kbn-ui-shared-deps-npm-kbn-ui-shared-deps-npm-dll/321133 "2022-12-27T12:58:38Z")
Hi I am getting this error when trying to access security module, // \`\`\` { "name": "Error", "body": { "message": "undefined: undefined", "status\_code": 400 }, "message": "Bad Request", "stack": "o@http://192.16… --- ## [What is my error?](https://discuss.elastic.co/t/what-is-my-error/193502)
**Author:** [@JANGGILYONG](https://discuss.elastic.co/u/JANGGILYONG)\ **Replies:** 5\ **Last updated:** [August 14, 2019, 7:41am UTC](https://discuss.elastic.co/t/what-is-my-error/193502 "2019-08-14T07:41:48Z")
Sorry, It is my second notebook for testing the server. So I couldn't copy the scripts. --- ## [How to config discovery.zen.ping.unicast.hosts in command agruments](https://discuss.elastic.co/t/how-to-config-discovery-zen-ping-unicast-hosts-in-command-agruments/89859)
**Author:** [@lekhasy](https://discuss.elastic.co/u/lekhasy)\ **Replies:** 2\ **Last updated:** [June 19, 2017, 3:35pm UTC](https://discuss.elastic.co/t/how-to-config-discovery-zen-ping-unicast-hosts-in-command-agruments/89859 "2017-06-19T15:35:25Z")
So, as the title, here's what i have tried: ./elasticsearch -E cluster.name=my\_cluster -E node.name=node\_master -E http.port=9200 -E discovery.zen.ping.unicast.hosts=\["127.0.0.1:9201-9209"\] the reason for this is i wan… --- ## [Natural sort](https://discuss.elastic.co/t/natural-sort/67646)
**Author:** [@iti\_netapp.com](https://discuss.elastic.co/u/iti_netapp.com)\ **Replies:** 2\ **Last updated:** [December 7, 2016, 6:41pm UTC](https://discuss.elastic.co/t/natural-sort/67646 "2016-12-07T18:41:12Z")
Does ES 5.0 provide natural sorting out of box? I am using Transport client. I was wondering if I could feed a custom comparator to fields that I want sorted in a specific way? I had looked at the natural sort pl… --- ## [Elasticsearch-rest-high-level-client \_bulk compression](https://discuss.elastic.co/t/elasticsearch-rest-high-level-client-bulk-compression/139290)
**Author:** [@nicolas-f](https://discuss.elastic.co/u/nicolas-f)\ **Replies:** 1\ **Last updated:** [July 19, 2018, 6:48am UTC](https://discuss.elastic.co/t/elasticsearch-rest-high-level-client-bulk-compression/139290 "2018-07-19T06:48:09Z")
Hi, We will use the java high level client over a gsm connection. Using ngrep I see that POST content is not compressed. How to enable the compression mechanism in the java rest high level client for index request ? Th… --- ## [Optimize elastic 2.x for fast searches as much as possible, on a relatively small index - what are the best practices?](https://discuss.elastic.co/t/optimize-elastic-2-x-for-fast-searches-as-much-as-possible-on-a-relatively-small-index-what-are-the-best-practices/39096)
**Author:** [@Jayme](https://discuss.elastic.co/u/Jayme)\ **Replies:** 6\ **Last updated:** [January 14, 2016, 4:59pm UTC](https://discuss.elastic.co/t/optimize-elastic-2-x-for-fast-searches-as-much-as-possible-on-a-relatively-small-index-what-are-the-best-practices/39096 "2016-01-14T16:59:17Z")
Hi, I'm using elastic 1.3.1 in production atm and want to migrate all the servers to 2.1. Running 2.1 on a test server at the moment with SSD's and 24 cores, 64GB RAM. The index running there is around +/- 80M rows, … --- ## [Using payloads for scoring](https://discuss.elastic.co/t/using-payloads-for-scoring/219476)
**Author:** [@divyanshumarwah](https://discuss.elastic.co/u/divyanshumarwah)\ **Replies:** 0\ **Last updated:** [February 15, 2020, 12:13pm UTC](https://discuss.elastic.co/t/using-payloads-for-scoring/219476 "2020-02-15T12:13:06Z")
I am working on a research project in which I need to use some specific term weights for relevance score calculation. I have indexed the term weights as payloads along with the text and looks something like this : "Amer… --- ## [How to capture docker logs](https://discuss.elastic.co/t/how-to-capture-docker-logs/107228)
**Author:** [@obodard](https://discuss.elastic.co/u/obodard)\ **Replies:** 0\ **Last updated:** [November 10, 2017, 6:29pm UTC](https://discuss.elastic.co/t/how-to-capture-docker-logs/107228 "2017-11-10T18:29:13Z")
I have Docker containers deployed under Kubernetes. I need to capture the Docker logs which are sent to its console, and I would like to avoid dumping those logs in a file for each container. What is the best way to cap… --- ## [Logstash disable Stdout](https://discuss.elastic.co/t/logstash-disable-stdout/229479)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 4\ **Last updated:** [April 28, 2020, 11:51am UTC](https://discuss.elastic.co/t/logstash-disable-stdout/229479 "2020-04-28T11:51:58Z")
Hi I'm having below code in output section { hosts =\> \["localhost:9200"\] document\_id =\> "%{authsid}" index =\> "dashboard\_write" action =\> "delete" } … --- ## [How to use ruby script file with parameter?](https://discuss.elastic.co/t/how-to-use-ruby-script-file-with-parameter/117537)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 4\ **Last updated:** [January 30, 2018, 7:14am UTC](https://discuss.elastic.co/t/how-to-use-ruby-script-file-with-parameter/117537 "2018-01-30T07:14:09Z")
Hi, sometimes I used ruby as logstash filter plugin - only the inline functionality until now. Additionally I have to admit, that I am not really fond of ruby. Now I wanna outsource the code to a script file, but I do … --- ## [Run Logstash manually without interrupting logstash service and logstash Scheduler](https://discuss.elastic.co/t/run-logstash-manually-without-interrupting-logstash-service-and-logstash-scheduler/326036)
**Author:** [@Rakhshunda\_Noorein\_J](https://discuss.elastic.co/u/Rakhshunda_Noorein_J)\ **Replies:** 8\ **Last updated:** [March 1, 2023, 6:25am UTC](https://discuss.elastic.co/t/run-logstash-manually-without-interrupting-logstash-service-and-logstash-scheduler/326036 "2023-03-01T06:25:43Z")
Hello, I have a configuration file with http\_poller plugins, where I have some scheduler which on the given schedule pull the data and enter it into my elastic db. But to manually run lagstash instantly, What I have to… --- ## [Updating the kibana.yml to increate max size of CSV export](https://discuss.elastic.co/t/updating-the-kibana-yml-to-increate-max-size-of-csv-export/300906)
**Author:** [@Matt.Wash](https://discuss.elastic.co/u/Matt.Wash)\ **Replies:** 3\ **Last updated:** [March 30, 2022, 10:37am UTC](https://discuss.elastic.co/t/updating-the-kibana-yml-to-increate-max-size-of-csv-export/300906 "2022-03-30T10:37:32Z")
this might be a silly question, but if i am running the cloud instance of Kibana, where can i access the Kibana.yml from to adjust the limit on the max size when exporting to csv? the video tutorials show how to do it w… --- ## [Filebeatモジュールの作成について](https://discuss.elastic.co/t/filebeat/209448)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 3\ **Last updated:** [November 27, 2019, 5:25am UTC](https://discuss.elastic.co/t/filebeat/209448 "2019-11-27T05:25:12Z")
filebeat v7.4を使用しております 以下のマニュアルを参考に、filebeatのモジュールを作成しようとしております。 https://www.elastic.co/guide/en/beats/devguide/7.4/filebeat-modules-devguide.html マニュアルに従い、モジュール作成するにあたって以下のコマンドを実行したところ、エラーとなりました。 原因をご教示頂けないでしょうか $ … --- ## [ElasticSearch SAML AuthNRequest with embedded signature](https://discuss.elastic.co/t/elasticsearch-saml-authnrequest-with-embedded-signature/183958)
**Author:** [@vapetri](https://discuss.elastic.co/u/vapetri)\ **Replies:** 8\ **Last updated:** [June 4, 2019, 8:10am UTC](https://discuss.elastic.co/t/elasticsearch-saml-authnrequest-with-embedded-signature/183958 "2019-06-04T08:10:57Z")
Hi Guys, is there a way to add the saml sign inside the saml authnrequest xml? Here is my SAML token example: \ **Author:** [@imaad](https://discuss.elastic.co/u/imaad)\ **Replies:** 3\ **Last updated:** [July 13, 2018, 9:12am UTC](https://discuss.elastic.co/t/exclude-or-replace-a-specific-date-value-with-null-value/139803 "2018-07-13T09:12:07Z") I'm using a jms input to index data from queues, some fields contains two values ("2018-07-12T23:30:00.000+0000" and "2018-07-12T00:00:00.000+0000") that I have to replace with null value. How can I resolve this? Thank … --- ## [Negative MongoDB responsetime](https://discuss.elastic.co/t/negative-mongodb-responsetime/28157)
**Author:** [@Augustin\_Chen](https://discuss.elastic.co/u/Augustin_Chen)\ **Replies:** 3\ **Last updated:** [September 1, 2015, 5:24am UTC](https://discuss.elastic.co/t/negative-mongodb-responsetime/28157 "2015-09-01T05:24:54Z")
Hi, I install the packetbeat-1.0.0-beta2-x86\_64.rpm in my MongoDB instance. I notice the negative response time in the kibana. Any ideas of this? --- ## [Detection Rules \_Severity override based on multiple values](https://discuss.elastic.co/t/detection-rules-severity-override-based-on-multiple-values/304010)
**Author:** [@sbianco1978](https://discuss.elastic.co/u/sbianco1978)\ **Replies:** 2\ **Last updated:** [May 9, 2022, 6:31am UTC](https://discuss.elastic.co/t/detection-rules-severity-override-based-on-multiple-values/304010 "2022-05-09T06:31:50Z")
Hello, I hope this is the correct section. I need an advice. When creating some detection rules I would need to perform a severity override based on differents "source field" values, for istance: Default severity: Me… --- ## [Unable to use variable in curl bash script](https://discuss.elastic.co/t/unable-to-use-variable-in-curl-bash-script/240003)
**Author:** [@Jose\_H](https://discuss.elastic.co/u/Jose_H)\ **Replies:** 2\ **Last updated:** [July 9, 2020, 11:03am UTC](https://discuss.elastic.co/t/unable-to-use-variable-in-curl-bash-script/240003 "2020-07-09T11:03:30Z")
Hi guys. I've been trying to use a variable called "Time Period Variable" in my bash script, but im unable to make it work: #!/bin/bash ES EVENT Threshold number=10 Time Period Variable es\_period=now-1d Elasticsearc… --- ## [Suricata logs to Filebeat to Kafka topics, by event-type](https://discuss.elastic.co/t/suricata-logs-to-filebeat-to-kafka-topics-by-event-type/215179)
**Author:** [@driekhof](https://discuss.elastic.co/u/driekhof)\ **Replies:** 2\ **Last updated:** [January 15, 2020, 11:01pm UTC](https://discuss.elastic.co/t/suricata-logs-to-filebeat-to-kafka-topics-by-event-type/215179 "2020-01-15T23:01:32Z")
Hello, new to Filebeat. I have a simplified case working: Suricata to Filebeat to Kafka if I hard code one kafka topic name in filebeat.yml. But I'd like to make Filebeat dynamically route events to different topics b… --- ## [How to multiselect in kibana visualizations](https://discuss.elastic.co/t/how-to-multiselect-in-kibana-visualizations/106856)
**Author:** [@sandesh\_patil](https://discuss.elastic.co/u/sandesh_patil)\ **Replies:** 2\ **Last updated:** [November 9, 2017, 10:12am UTC](https://discuss.elastic.co/t/how-to-multiselect-in-kibana-visualizations/106856 "2017-11-09T10:12:07Z")
Hi, I want to multi select values in pie chart visualization. Ex if i have a pie chart with State wise documents count, then if i want to select multiple states from that pie chart how to achieve it in kibana. Also if … --- ## [Python dsl script\_fields example](https://discuss.elastic.co/t/python-dsl-script-fields-example/94147)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 2\ **Last updated:** [July 21, 2017, 7:21pm UTC](https://discuss.elastic.co/t/python-dsl-script-fields-example/94147 "2017-07-21T19:21:25Z")
I've tried to pass a script\_fields to using the python DSL but can't figure it out, does anyone have an example? Thanks --- ## [What is expression in script field in Kibana and How to use it?](https://discuss.elastic.co/t/what-is-expression-in-script-field-in-kibana-and-how-to-use-it/84939)
**Author:** [@kartikeya\_sharma\_13](https://discuss.elastic.co/u/kartikeya_sharma_13)\ **Replies:** 2\ **Last updated:** [May 9, 2017, 12:38pm UTC](https://discuss.elastic.co/t/what-is-expression-in-script-field-in-kibana-and-how-to-use-it/84939 "2017-05-09T12:38:19Z")
I am wondering what is the usage of expression in the drop down of script field in lang option and how can i leverage that option . --- ## [I have to combine certain aggregation and query to extract data from elastic search . Can someone help with this following query](https://discuss.elastic.co/t/i-have-to-combine-certain-aggregation-and-query-to-extract-data-from-elastic-search-can-someone-help-with-this-following-query/239746)
**Author:** [@charvi23](https://discuss.elastic.co/u/charvi23)\ **Replies:** 7\ **Last updated:** [July 3, 2020, 10:01am UTC](https://discuss.elastic.co/t/i-have-to-combine-certain-aggregation-and-query-to-extract-data-from-elastic-search-can-someone-help-with-this-following-query/239746 "2020-07-03T10:01:38Z")
From a set of documents do the following: Extract documents which match the following criteria: a. date\_field \> given certain date and b. second\_date\_field \< given certain date From the above extracted documents,… --- ## [Xxx.com:443 failed to respond", :class=\>"Manticore::ClientProtocolException](https://discuss.elastic.co/t/xxx-com-443-failed-to-respond-class-manticore-clientprotocolexception/170826)
**Author:** [@jeraldsm](https://discuss.elastic.co/u/jeraldsm)\ **Replies:** 1\ **Last updated:** [March 5, 2019, 6:41am UTC](https://discuss.elastic.co/t/xxx-com-443-failed-to-respond-class-manticore-clientprotocolexception/170826 "2019-03-05T06:41:24Z")
We are observing intermittent connectivity issues from logstash to elasticsearch: Following error is seen in the logstash logs intermittently: {:timestamp=\>"2019-03-05T05:27:32.888000+0100", :message=\>"Attempted to se… --- ## [How to filter in message this value "${date:"](https://discuss.elastic.co/t/how-to-filter-in-message-this-value-date/292313)
**Author:** [@Roccof97](https://discuss.elastic.co/u/Roccof97)\ **Replies:** 5\ **Last updated:** [December 22, 2021, 2:54pm UTC](https://discuss.elastic.co/t/how-to-filter-in-message-this-value-date/292313 "2021-12-22T14:54:52Z")
Hi, is it possible to search for this string ${date: including the symbol '${:' in the message field? to date I have not succeeded . I have tried this: message:"${date:" but excludes ${: who can help me? Thanks! --- ## [Something went wrong on start http://localhost:5601](https://discuss.elastic.co/t/something-went-wrong-on-start-http-localhost-5601/256272)
**Author:** [@kaibox-git](https://discuss.elastic.co/u/kaibox-git)\ **Replies:** 5\ **Last updated:** [November 25, 2020, 2:51pm UTC](https://discuss.elastic.co/t/something-went-wrong-on-start-http-localhost-5601/256272 "2020-11-25T14:51:26Z")
Windows 10 Google Chrome 86.0.4240.193 Elasticsearch just installed, ver 7.10 as a service. Kibana ver.7.10 When I go to http://localhost:5601 Clicking on button "Clear your session" has no effect. Page is reloa… --- ## [Is ELK the right tool for tracking business metrics from a RDBMS?](https://discuss.elastic.co/t/is-elk-the-right-tool-for-tracking-business-metrics-from-a-rdbms/125248)
**Author:** [@omeugdoj](https://discuss.elastic.co/u/omeugdoj)\ **Replies:** 5\ **Last updated:** [March 22, 2018, 8:15pm UTC](https://discuss.elastic.co/t/is-elk-the-right-tool-for-tracking-business-metrics-from-a-rdbms/125248 "2018-03-22T20:15:09Z")
I am new to the ELK stack and I'm wondering if it is the right tool for tracking business metrics. I understand it's great at DevOps, crunching logs, and monitoring application status. But what about tracking revenue ov… --- ## [URL Check page in subdirectory](https://discuss.elastic.co/t/url-check-page-in-subdirectory/75572)
**Author:** [@misabel](https://discuss.elastic.co/u/misabel)\ **Replies:** 5\ **Last updated:** [February 21, 2017, 2:28pm UTC](https://discuss.elastic.co/t/url-check-page-in-subdirectory/75572 "2017-02-21T14:28:40Z")
I'm getting a 404 when testing for a page that's not at the root of a site. For instance, this URL works: http://host:80 While this doesn't: http://host:80/application/Default.aspx The result of the check is a … --- ## [Get parents whose none of children matches](https://discuss.elastic.co/t/get-parents-whose-none-of-children-matches/54222)
**Author:** [@jondeandres](https://discuss.elastic.co/u/jondeandres)\ **Replies:** 5\ **Last updated:** [July 12, 2016, 3:32pm UTC](https://discuss.elastic.co/t/get-parents-whose-none-of-children-matches/54222 "2016-07-12T15:32:12Z")
Hi, having a parent doc\_type A and children doc\_type B. Is there a way to query "all the A documents where NONE/ALL of their Bs children matches some filters"? Having: A1 B1.foo = 200 B2.foo = 100 A2 B3. foo … --- ## [Getting Kibana Up and Running](https://discuss.elastic.co/t/getting-kibana-up-and-running/39307)
**Author:** [@Hilal](https://discuss.elastic.co/u/Hilal)\ **Replies:** 5\ **Last updated:** [January 15, 2016, 1:44pm UTC](https://discuss.elastic.co/t/getting-kibana-up-and-running/39307 "2016-01-15T13:44:15Z")
Hi I am using Elasticsearch 2.1.1 on CENTOS. I want to install Kibana 4.3.1 wget https://download.elastic.co/kibana/kibana/kibana-4.3.1-linux-x64.tar.gz after yum install kibana-4.3.1-linux-x64.tar.gz My error: … --- ## [Internal server error: /api/kibana/suggestions/values/Default](https://discuss.elastic.co/t/internal-server-error-api-kibana-suggestions-values-default/249725)
**Author:** [@aqiank](https://discuss.elastic.co/u/aqiank)\ **Replies:** 4\ **Last updated:** [September 24, 2020, 8:58am UTC](https://discuss.elastic.co/t/internal-server-error-api-kibana-suggestions-values-default/249725 "2020-09-24T08:58:09Z")
Hi, my Kibana instance seems to be encountering this internal server error from time to time. Does anyone know why? { "type": "error", "@timestamp": "2020-09-24T01:37:50Z", "tags": \[\], "pid": 846, "level": "er… --- ## [One or more required cgroup files or directories not found: /proc/self/cgroup](https://discuss.elastic.co/t/one-or-more-required-cgroup-files-or-directories-not-found-proc-self-cgroup/183510)
**Author:** [@Aizaz\_Syed](https://discuss.elastic.co/u/Aizaz_Syed)\ **Replies:** 1\ **Last updated:** [May 30, 2019, 12:34pm UTC](https://discuss.elastic.co/t/one-or-more-required-cgroup-files-or-directories-not-found-proc-self-cgroup/183510 "2019-05-30T12:34:24Z")
I have configured the logstash configuration as below to read the logs generated by spring boot to push into elastic search, but index is not creating even the logstash started successfully, Please let me know how to fi… --- ## ["The processor action grok does not exist" in FileBeat. Why ? (Custom Logs Integration)](https://discuss.elastic.co/t/the-processor-action-grok-does-not-exist-in-filebeat-why-custom-logs-integration/332756)
**Author:** [@mehdi-lamrani](https://discuss.elastic.co/u/mehdi-lamrani)\ **Replies:** 3\ **Last updated:** [May 8, 2023, 4:00pm UTC](https://discuss.elastic.co/t/the-processor-action-grok-does-not-exist-in-filebeat-why-custom-logs-integration/332756 "2023-05-08T16:00:17Z")
I am a bit confused here. Grok is available in Ingest Processors but not in Filebeat processors May I ask why ? :thinking: I was hoping to do this , but it breaks, as I am getting the following error : \[elastic\_a… --- ## [Issues with certbot certificates and kibana](https://discuss.elastic.co/t/issues-with-certbot-certificates-and-kibana/282270)
**Author:** [@noobthenoob](https://discuss.elastic.co/u/noobthenoob)\ **Replies:** 3\ **Last updated:** [August 24, 2021, 7:09pm UTC](https://discuss.elastic.co/t/issues-with-certbot-certificates-and-kibana/282270 "2021-08-24T19:09:43Z")
\[MY\_DOMAIN\] = My externally accessable url such as "asdf.dk" \[MY\_LOCAL\_SERVER\_IP\] = My servers local IP address such as 192.168.1.2 Hello everyone, I have some issues with kibana & certbot certificates. Let me elabor… --- ## [Logstash crashes when I run .bat file from powershell](https://discuss.elastic.co/t/logstash-crashes-when-i-run-bat-file-from-powershell/280245)
**Author:** [@realj4ke](https://discuss.elastic.co/u/realj4ke)\ **Replies:** 4\ **Last updated:** [August 8, 2021, 4:59pm UTC](https://discuss.elastic.co/t/logstash-crashes-when-i-run-bat-file-from-powershell/280245 "2021-08-08T16:59:05Z")
Below is the error that I get when I try to run logstash after downloading the .zip file from the official website. .\\logstash.bat -f logstash.conf Using JAVA\_HOME defined java: C:\\P… --- ## [Filebeat dissect processed logs not appearing in Kibana](https://discuss.elastic.co/t/filebeat-dissect-processed-logs-not-appearing-in-kibana/245065)
**Author:** [@MANI\_M](https://discuss.elastic.co/u/MANI_M)\ **Replies:** 4\ **Last updated:** [August 18, 2020, 2:34pm UTC](https://discuss.elastic.co/t/filebeat-dissect-processed-logs-not-appearing-in-kibana/245065 "2020-08-18T14:34:54Z")
Hi , I've used dissect in order to process the log outputs of our application. And then I've renamed the message by dropping it and renaming other field. The log seems to be processing fine and I've verified it using o… --- ## [Query on Incremental backups using snapshots](https://discuss.elastic.co/t/query-on-incremental-backups-using-snapshots/229597)
**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\ **Replies:** 4\ **Last updated:** [April 27, 2020, 5:56pm UTC](https://discuss.elastic.co/t/query-on-incremental-backups-using-snapshots/229597 "2020-04-27T17:56:49Z")
Hi, We use elasticsearch snapshot API to take backup of ES data daily and also regularly copy the entire content from the snapshot repository to another remote system. Now that we have huge amount of data in ES (in TBs… --- ## [Null error with greater-than comparison on an integer field](https://discuss.elastic.co/t/null-error-with-greater-than-comparison-on-an-integer-field/194313)
**Author:** [@datawrangler](https://discuss.elastic.co/u/datawrangler)\ **Replies:** 4\ **Last updated:** [August 15, 2019, 6:21pm UTC](https://discuss.elastic.co/t/null-error-with-greater-than-comparison-on-an-integer-field/194313 "2019-08-15T18:21:06Z")
Hello All, I am getting an error which suggests that my if-statement is trying to do a \> (greater-than) expression comparison against a null value. When I comment out the if-statement everything works as expected. Here… --- ## [Kibana show wrong date](https://discuss.elastic.co/t/kibana-show-wrong-date/185160)
**Author:** [@simple\_commentateur](https://discuss.elastic.co/u/simple_commentateur)\ **Replies:** 4\ **Last updated:** [June 11, 2019, 2:34pm UTC](https://discuss.elastic.co/t/kibana-show-wrong-date/185160 "2019-06-11T14:34:14Z")
Hello, When I store a date at Paris timezone like 11/06/2019 11:40:00, kibana add 2h and show 11/06/2019 13:40:00. It look like kibana understand that I store date at UTC timezone and he bring it to my kibana timezone … --- ## [Watcher not sending email to alert on disk space](https://discuss.elastic.co/t/watcher-not-sending-email-to-alert-on-disk-space/135742)
**Author:** [@StillReclaim](https://discuss.elastic.co/u/StillReclaim)\ **Replies:** 4\ **Last updated:** [June 27, 2018, 7:11am UTC](https://discuss.elastic.co/t/watcher-not-sending-email-to-alert-on-disk-space/135742 "2018-06-27T07:11:22Z")
Hello, I wrote a watch to send an email and make a log output if the disk space on any host goes over 90% usage. It has run a bunch of times and I know that the indexes have hosts that have over 90% usage, but the watch… --- ## [TSVB values summarized with large numbers?](https://discuss.elastic.co/t/tsvb-values-summarized-with-large-numbers/98929)
**Author:** [@slashdoom](https://discuss.elastic.co/u/slashdoom)\ **Replies:** 4\ **Last updated:** [August 31, 2017, 7:56pm UTC](https://discuss.elastic.co/t/tsvb-values-summarized-with-large-numbers/98929 "2017-08-31T19:56:27Z")
Hello. I’ve been playing with TSVB and noticing something weird. I’m sending SNMP counters to Logstash which is converting the counter to a float and storing to ES in a field called “metric”. This seems to visualize f… --- ## [Logstash Ruby code](https://discuss.elastic.co/t/logstash-ruby-code/51712)
**Author:** [@sharma.shilpy](https://discuss.elastic.co/u/sharma.shilpy)\ **Replies:** 4\ **Last updated:** [June 6, 2016, 4:35pm UTC](https://discuss.elastic.co/t/logstash-ruby-code/51712 "2016-06-06T16:35:30Z")
Hi guys, I am trying to convert time: HH:mm:ss into seconds using ruby code inside the logstash configuration file and getting error message: \_ Ruby exception occurred: uninitialized constant LogStash::Time {:level=\>:… --- ## [Reindexing of data after 1.6 -\> 2.2 upgrade](https://discuss.elastic.co/t/reindexing-of-data-after-1-6-2-2-upgrade/42431)
**Author:** [@ronchalant](https://discuss.elastic.co/u/ronchalant)\ **Replies:** 4\ **Last updated:** [February 23, 2016, 6:29pm UTC](https://discuss.elastic.co/t/reindexing-of-data-after-1-6-2-2-upgrade/42431 "2016-02-23T18:29:32Z")
TL;DR: will data nodes be offline during reindexing after a major upgrade (1.x -\> 2.x)? Long story: Our DEV cluster has 4 nodes - 2 pure data nodes, 1 master and 1 client-only node. I understand that after upgrading … --- ## [Logstash Custom Filter: How to access, fields of csv being uploaded in a custom filter](https://discuss.elastic.co/t/logstash-custom-filter-how-to-access-fields-of-csv-being-uploaded-in-a-custom-filter/38098)
**Author:** [@krushnat\_khawale](https://discuss.elastic.co/u/krushnat_khawale)\ **Replies:** 4\ **Last updated:** [January 1, 2016, 9:47am UTC](https://discuss.elastic.co/t/logstash-custom-filter-how-to-access-fields-of-csv-being-uploaded-in-a-custom-filter/38098 "2016-01-01T09:47:53Z")
Logstash Custom Filter: How to access, fields of csv being uploaded in a custom filter I am uploading a csv and I'm creating a custom filter to perform the operations on fields in CSV. I have no idea of accessing field… --- ## [Issue in Kibana 4 loading](https://discuss.elastic.co/t/issue-in-kibana-4-loading/28191)
**Author:** [@asgawali](https://discuss.elastic.co/u/asgawali)\ **Replies:** 4\ **Last updated:** [September 1, 2015, 8:11am UTC](https://discuss.elastic.co/t/issue-in-kibana-4-loading/28191 "2015-09-01T08:11:22Z")
Hi, I have elasticsearch,logstash and kibana 4 installed. but when I hit Kibana 4 url like \[kibana IP:5601\], I get following shard failure errors from kibana 4 discover page. Any pointers why this is happening? Than… --- ## [Filter Active Directory logs](https://discuss.elastic.co/t/filter-active-directory-logs/124145)
**Author:** [@Hanen](https://discuss.elastic.co/u/Hanen)\ **Replies:** 2\ **Last updated:** [March 15, 2018, 7:43pm UTC](https://discuss.elastic.co/t/filter-active-directory-logs/124145 "2018-03-15T19:43:39Z")
Hello, I would like to send only active directory logs with specific Id from logstash to Elasticsearch. Please! What config do I need to do at logstash configuration file to achieve this? example of event\_Id:"4625"==… [Previous page](https://discuss.elastic.co/top.md?page=987&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=989&per_page=50&period=all)