# Top

**URL:** https://discuss.elastic.co/top.md?page=995&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 996

---

## [How to load data in elk by go language?](https://discuss.elastic.co/t/how-to-load-data-in-elk-by-go-language/121605)

<div class="topic-metadata">

**Author:** [@yuluopiaoyang](https://discuss.elastic.co/u/yuluopiaoyang)\
**Replies:** 3\
**Last updated:** [February 28, 2018, 2:57am UTC](https://discuss.elastic.co/t/how-to-load-data-in-elk-by-go-language/121605 "2018-02-28T02:57:52Z")

</div>

How to load data in elk by go language?Any example? Thank you!

---

## [Timeout when registering license](https://discuss.elastic.co/t/timeout-when-registering-license/94426)

<div class="topic-metadata">

**Author:** [@yangliping](https://discuss.elastic.co/u/yangliping)\
**Replies:** 3\
**Last updated:** [July 28, 2017, 8:47am UTC](https://discuss.elastic.co/t/timeout-when-registering-license/94426 "2017-07-28T08:47:31Z")

</div>

The one month xpack trial expired. So I register a basic license and try to update the license in the server. I got the following error. What should I do? $ curl -XPUT -u elastic 'http://localhost:9200/\_xpack/license?a…

---

## [Cross-Origin Request Blocked](https://discuss.elastic.co/t/cross-origin-request-blocked/181647)

<div class="topic-metadata">

**Author:** [@Presto](https://discuss.elastic.co/u/Presto)\
**Replies:** 2\
**Last updated:** [May 20, 2019, 5:12pm UTC](https://discuss.elastic.co/t/cross-origin-request-blocked/181647 "2019-05-20T17:12:40Z")

</div>

Hello, I am attempting to access data from elasticsearch for use in D3. I am running elasticsearch and kibana in docker containers with ports 9200 and 5601 mapped to localhost:9200 and 5601 respectively, and am testing …

---

## [Need to use bind variables for Oracle query in jdbc-input (using sql\_last\_value) in Logstash](https://discuss.elastic.co/t/need-to-use-bind-variables-for-oracle-query-in-jdbc-input-using-sql-last-value-in-logstash/163716)

<div class="topic-metadata">

**Author:** [@scotta](https://discuss.elastic.co/u/scotta)\
**Replies:** 2\
**Last updated:** [April 18, 2019, 1:12pm UTC](https://discuss.elastic.co/t/need-to-use-bind-variables-for-oracle-query-in-jdbc-input-using-sql-last-value-in-logstash/163716 "2019-04-18T13:12:59Z")

</div>

As per the jdbc-input-plugin documentation, we're using the 'sql\_last\_value' to only load data since the query was last run e.g. input { jdbc{ ... statement =\> "SELECT \* from schema.table WHERE updated\_date \>=…

---

## [Ingest pipeline: how to ignore log line based on condition](https://discuss.elastic.co/t/ingest-pipeline-how-to-ignore-log-line-based-on-condition/74812)

<div class="topic-metadata">

**Author:** [@John16](https://discuss.elastic.co/u/John16)\
**Replies:** 2\
**Last updated:** [February 13, 2017, 1:51pm UTC](https://discuss.elastic.co/t/ingest-pipeline-how-to-ignore-log-line-based-on-condition/74812 "2017-02-13T13:51:51Z")

</div>

Hello, I am delivering logs from filebeat into ES via Ingest pipeline. I want to drop log lines based on some condition (e.g. if (httpcode != 200) then ignore). Something like drop filter in LS. How can I achieve …

---

## [Filebeat output to existing index](https://discuss.elastic.co/t/filebeat-output-to-existing-index/284329)

<div class="topic-metadata">

**Author:** [@caraboy](https://discuss.elastic.co/u/caraboy)\
**Replies:** 6\
**Last updated:** [September 23, 2021, 12:47pm UTC](https://discuss.elastic.co/t/filebeat-output-to-existing-index/284329 "2021-09-23T12:47:30Z")

</div>

Hi everyone, I'm trying to configure a filebeat output to an existing index but apparently i can't correctly set the template name and pattern. output.elasticsearch.index: "sai5x" setup.template.name: "sai5x" setup.tem…

---

## [Optimisation d'une requete](https://discuss.elastic.co/t/optimisation-dune-requete/271489)

<div class="topic-metadata">

**Author:** [@fredo33](https://discuss.elastic.co/u/fredo33)\
**Replies:** 6\
**Last updated:** [May 5, 2021, 5:38pm UTC](https://discuss.elastic.co/t/optimisation-dune-requete/271489 "2021-05-05T17:38:20Z")

</div>

Bonjour , je cherche à optimiser cette requête avez vous une idée , je cherche à afficher toutes les adresses qui contiennent le libelle 61 rue du paradis avec comme option de recherche : AND et OR { "from": 0, "size"…

---

## [Sum of source bytes seems impossibly large](https://discuss.elastic.co/t/sum-of-source-bytes-seems-impossibly-large/219961)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 6\
**Last updated:** [March 26, 2020, 10:33am UTC](https://discuss.elastic.co/t/sum-of-source-bytes-seems-impossibly-large/219961 "2020-03-26T10:33:07Z")

</div>

Hello, Was browsing through Kibana SIEM on 7.5.2 and discovered some weird 'Bytes In', 'Bytes Out' metrics. After investigating, it seemd like some servers were sending huge amounts of traffic to my Elastic ingest nodes…

---

## [Is it possible to collect data from my website with logstash](https://discuss.elastic.co/t/is-it-possible-to-collect-data-from-my-website-with-logstash/185395)

<div class="topic-metadata">

**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\
**Replies:** 6\
**Last updated:** [June 19, 2019, 9:29am UTC](https://discuss.elastic.co/t/is-it-possible-to-collect-data-from-my-website-with-logstash/185395 "2019-06-19T09:29:14Z")

</div>

hi dears, i have a web site for selling products and i want to know if it possible to collect data from a website with logstash, if there is any example Thank you very much

---

## [Elasticsearch not starting up - ES 1.7/2.1 RHEL 6.4](https://discuss.elastic.co/t/elasticsearch-not-starting-up-es-1-7-2-1-rhel-6-4/37222)

<div class="topic-metadata">

**Author:** [@asatsi](https://discuss.elastic.co/u/asatsi)\
**Replies:** 6\
**Last updated:** [December 17, 2015, 8:31am UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-up-es-1-7-2-1-rhel-6-4/37222 "2015-12-17T08:31:33Z")

</div>

This is rather strange. It was working fine. But now it just doesn't get started and is stuck at \[2015-12-15 14:57:25,021\]\[INFO \]\[node \] \[Vertigo\] initializing ... \[2015-12-15 14:57:25,079\]\[INFO \]\[pl…

---

## [Winlogbeat not filtering event more than 21 sources](https://discuss.elastic.co/t/winlogbeat-not-filtering-event-more-than-21-sources/237740)

<div class="topic-metadata">

**Author:** [@kumarbn](https://discuss.elastic.co/u/kumarbn)\
**Replies:** 7\
**Last updated:** [June 22, 2020, 12:00pm UTC](https://discuss.elastic.co/t/winlogbeat-not-filtering-event-more-than-21-sources/237740 "2020-06-22T12:00:52Z")

</div>

unable to get alert on kafka if we mention more than 21 event source in winlogbeat yml file .

---

## [MongoDB to Elasticsearch?](https://discuss.elastic.co/t/mongodb-to-elasticsearch/336767)

<div class="topic-metadata">

**Author:** [@stephane\_chan](https://discuss.elastic.co/u/stephane_chan)\
**Replies:** 4\
**Last updated:** [July 5, 2023, 6:40am UTC](https://discuss.elastic.co/t/mongodb-to-elasticsearch/336767 "2023-07-05T06:40:52Z")

</div>

Is there a way to index data from mongoDB to elasticsearch? I've searched a bit but I haven't found any mongodb input on logstash i.e. part of the mongoDB collection by making an aggregation query and then storing the r…

---

## [Enable Elastic APM integration automatically](https://discuss.elastic.co/t/enable-elastic-apm-integration-automatically/323672)

<div class="topic-metadata">

**Author:** [@Hassan\_Malabeh](https://discuss.elastic.co/u/Hassan_Malabeh)\
**Replies:** 4\
**Last updated:** [January 30, 2023, 9:55pm UTC](https://discuss.elastic.co/t/enable-elastic-apm-integration-automatically/323672 "2023-01-30T21:55:24Z")

</div>

I've created a docker-compose file with some configurations that deploy Elasticsearch, Kibana, Elastic Agent all version 8.7.0. where in the Kibana configuration files I define the police I needed under xpack.fleet.agen…

---

## [Filebeat Syslog isn't Opening Port](https://discuss.elastic.co/t/filebeat-syslog-isnt-opening-port/272126)

<div class="topic-metadata">

**Author:** [@odin-bb](https://discuss.elastic.co/u/odin-bb)\
**Replies:** 4\
**Last updated:** [May 5, 2021, 11:59pm UTC](https://discuss.elastic.co/t/filebeat-syslog-isnt-opening-port/272126 "2021-05-05T23:59:37Z")

</div>

Good Afternoon, First off, thank you for whatever help/suggestions you provide. I recently posted in the r/elasticsearch trying to understand the difference between logstash and filebeat and was greatly helped by someo…

---

## [Enable\_position\_increments not working for phrase queries with stopwords](https://discuss.elastic.co/t/enable-position-increments-not-working-for-phrase-queries-with-stopwords/186323)

<div class="topic-metadata">

**Author:** [@theonlykai](https://discuss.elastic.co/u/theonlykai)\
**Replies:** 4\
**Last updated:** [June 29, 2019, 3:03pm UTC](https://discuss.elastic.co/t/enable-position-increments-not-working-for-phrase-queries-with-stopwords/186323 "2019-06-29T15:03:59Z")

</div>

I'm following this guide https://stackoverflow.com/questions/31719249/how-to-query-a-phrase-with-stopwords-in-elasticsearch to run phrase queries against text with stopwords removed, and the verified answer doesn't work …

---

## [\[pgsql\] Flow stop](https://discuss.elastic.co/t/pgsql-flow-stop/73536)

<div class="topic-metadata">

**Author:** [@kim\_85](https://discuss.elastic.co/u/kim_85)\
**Replies:** 4\
**Last updated:** [February 3, 2017, 4:12pm UTC](https://discuss.elastic.co/t/pgsql-flow-stop/73536 "2017-02-03T16:12:56Z")

</div>

Hi, I have many installation of packetbeat connected to elasticsearch. Sometimes on a few vm, the packetbeat flow stop with this mistake : 2017-01-30T06:39:30+01:00 ERR Pgsql invalid column\_length=4294967295, buffer\_l…

---

## [Nxlog - https - logstash error](https://discuss.elastic.co/t/nxlog-https-logstash-error/26159)

<div class="topic-metadata">

**Author:** [@quejinho](https://discuss.elastic.co/u/quejinho)\
**Replies:** 4\
**Last updated:** [July 24, 2015, 6:28am UTC](https://discuss.elastic.co/t/nxlog-https-logstash-error/26159 "2015-07-24T06:28:16Z")

</div>

So i have configured nxlog with https to talk with logstash. I got an error on nxlog side " ERROR unexpected data from server (64 bytes)" I looked it up and it looks like nxlog got https://github.com/lamby/pkg-nxlog-c…

---

## [Failed to query elasticsearch issue](https://discuss.elastic.co/t/failed-to-query-elasticsearch-issue/182216)

<div class="topic-metadata">

**Author:** [@sangeetha\_sankar](https://discuss.elastic.co/u/sangeetha_sankar)\
**Replies:** 2\
**Last updated:** [May 24, 2019, 4:52am UTC](https://discuss.elastic.co/t/failed-to-query-elasticsearch-issue/182216 "2019-05-24T04:52:34Z")

</div>

Below is the query i have written in logstash config file elasticsearch { hosts =\> \["localhost:9200"\] index =\> "restricteddata" query =\> "type:restricted AND acc\_number:%{\[acc\_id\]} AND corp\_id:%{\[corp\_code\]…

---

## [Vega-Lite Scroll bar](https://discuss.elastic.co/t/vega-lite-scroll-bar/173109)

<div class="topic-metadata">

**Author:** [@suhasgupta1](https://discuss.elastic.co/u/suhasgupta1)\
**Replies:** 2\
**Last updated:** [March 25, 2019, 11:46am UTC](https://discuss.elastic.co/t/vega-lite-scroll-bar/173109 "2019-03-25T11:46:12Z")

</div>

Hi All, I am beginner in kibana visualizatoin. I am trying to create a facit chart with stacked bar graphs. But I am unable to get scroll bars in the final graph. Kindly help me get scroll bars in vega-lite visualizatio…

---

## [ElasticSearchからPostgreのDBアクセス](https://discuss.elastic.co/t/elasticsearch-postgre-db/135079)

<div class="topic-metadata">

**Author:** [@m\_suga](https://discuss.elastic.co/u/m_suga)\
**Replies:** 2\
**Last updated:** [June 8, 2018, 8:10am UTC](https://discuss.elastic.co/t/elasticsearch-postgre-db/135079 "2018-06-08T08:10:41Z")

</div>

掲題の件ですが、 ElasticSearchからPostgreのDBへのアクセスは技術的に可能でしょうか。 ZOMBODBというPostgreのDBからElsticSearchのDBへのアクセスはできると思いますが、ElasticSearch機能からPosgreDBに接続してデータを取得できるかを確認したいです。 お手数ですが ご存知の方がいればご回答の程 何卒よろしくお願いいたします。

---

## [Use Google Maps as Tile map server for Kibana?](https://discuss.elastic.co/t/use-google-maps-as-tile-map-server-for-kibana/92655)

<div class="topic-metadata">

**Author:** [@danielbr](https://discuss.elastic.co/u/danielbr)\
**Replies:** 2\
**Last updated:** [July 16, 2017, 7:18am UTC](https://discuss.elastic.co/t/use-google-maps-as-tile-map-server-for-kibana/92655 "2017-07-16T07:18:00Z")

</div>

Hi, I've seen similar posts on this but nothing with a straight up answer. Can I use google maps as Kibana's map server? If so, what should be it's settings? If not, Can anyone recommend any other wms ? Daniel

---

## [Feature Request: Required Custom Fields for New Topic](https://discuss.elastic.co/t/feature-request-required-custom-fields-for-new-topic/86432)

<div class="topic-metadata">

**Author:** [@EddieTurizo](https://discuss.elastic.co/u/EddieTurizo)\
**Replies:** 2\
**Last updated:** [May 21, 2017, 2:52am UTC](https://discuss.elastic.co/t/feature-request-required-custom-fields-for-new-topic/86432 "2017-05-21T02:52:51Z")

</div>

Does the Discourse platform allow Elastic to create custom fields that are required as part of creating a new topic? The initial response to a new topic is usually something along the lines of "What is your Logstash vers…

---

## [Needs to restart everytime filebeat in order to send log to logstash](https://discuss.elastic.co/t/needs-to-restart-everytime-filebeat-in-order-to-send-log-to-logstash/63487)

<div class="topic-metadata">

**Author:** [@fferraro87](https://discuss.elastic.co/u/fferraro87)\
**Replies:** 2\
**Last updated:** [October 21, 2016, 7:01am UTC](https://discuss.elastic.co/t/needs-to-restart-everytime-filebeat-in-order-to-send-log-to-logstash/63487 "2016-10-21T07:01:37Z")

</div>

Hi i've same problem of this thread : Filebeat Need Restart To send Logs but i doesn't see solution on that thread, so i've this filebeat.yml : filebeat: prospectors: - paths: - /var/log/syslog -…

---

## [Returning count on field matches (on a query across all fields)](https://discuss.elastic.co/t/returning-count-on-field-matches-on-a-query-across-all-fields/14179)

<div class="topic-metadata">

**Author:** [@Saurabh\_Daftary](https://discuss.elastic.co/u/Saurabh_Daftary)\
**Replies:** 2\
**Last updated:** [November 1, 2013, 8:35pm UTC](https://discuss.elastic.co/t/returning-count-on-field-matches-on-a-query-across-all-fields/14179 "2013-11-01T20:35:48Z")

</div>

Given an example document mapping: { "users": { "properties": { "firstName": { "type": "string" }, "lastName": { "type": "string" }, "address": { "…

---

## [Fastest way to ingest CSV's with logstash to elasticsearch](https://discuss.elastic.co/t/fastest-way-to-ingest-csvs-with-logstash-to-elasticsearch/333118)

<div class="topic-metadata">

**Author:** [@Security\_Check](https://discuss.elastic.co/u/Security_Check)\
**Replies:** 8\
**Last updated:** [May 11, 2023, 3:19pm UTC](https://discuss.elastic.co/t/fastest-way-to-ingest-csvs-with-logstash-to-elasticsearch/333118 "2023-05-11T15:19:24Z")

</div>

I'm currently trying to ingest 100gb of csv files into elasticsearch through logstash. The issue is it's taking forever. I have narrowed down the columns I'm trying to filter for to 8 out of 71 but it still takes a long …

---

## [Can we Search only by one field (f.e. title, description etc.)?](https://discuss.elastic.co/t/can-we-search-only-by-one-field-f-e-title-description-etc/294681)

<div class="topic-metadata">

**Author:** [@roman.bliztsv](https://discuss.elastic.co/u/roman.bliztsv)\
**Replies:** 8\
**Last updated:** [January 20, 2022, 8:51am UTC](https://discuss.elastic.co/t/can-we-search-only-by-one-field-f-e-title-description-etc/294681 "2022-01-20T08:51:54Z")

</div>

I've created a config using your documentation. const config = { searchQuery: { result\_fields: { art\_title: { raw: {}}, cra\_url\_doc: { raw: {}}, art\_fulltext: { snippet: { size:…

---

## [Grok Failure with Logstash 6.0](https://discuss.elastic.co/t/grok-failure-with-logstash-6-0/108381)

<div class="topic-metadata">

**Author:** [@holiday-sunrise](https://discuss.elastic.co/u/holiday-sunrise)\
**Replies:** 8\
**Last updated:** [December 15, 2017, 9:00am UTC](https://discuss.elastic.co/t/grok-failure-with-logstash-6-0/108381 "2017-12-15T09:00:41Z")

</div>

hi i´m trying to filter MSReportserver logs. But i always get an "Grokfalure" library!WindowsService\_20!37d8!11/06/2017-11:00:13:: i INFO: Cleaned 0 batch records, 0 policies, 0 sessions, 0 cache entries, 0 snapshots, …

---

## [Overwriting auto-generated \_id value with existing value in doc body](https://discuss.elastic.co/t/overwriting-auto-generated-id-value-with-existing-value-in-doc-body/240865)

<div class="topic-metadata">

**Author:** [@Shachar0n](https://discuss.elastic.co/u/Shachar0n)\
**Replies:** 3\
**Last updated:** [July 13, 2020, 10:49am UTC](https://discuss.elastic.co/t/overwriting-auto-generated-id-value-with-existing-value-in-doc-body/240865 "2020-07-13T10:49:40Z")

</div>

Hi Guys, We are implementing discovery service over emails meta data for a large stream of emails, and we are trying to use some self-generated email ID as primary key for each doc in elasticsearch (overwrite the \_id fi…

---

## [FIXED: Removed marvel-plugin and license, cluster will not start](https://discuss.elastic.co/t/fixed-removed-marvel-plugin-and-license-cluster-will-not-start/56329)

<div class="topic-metadata">

**Author:** [@kawika](https://discuss.elastic.co/u/kawika)\
**Replies:** 3\
**Last updated:** [December 13, 2016, 3:59pm UTC](https://discuss.elastic.co/t/fixed-removed-marvel-plugin-and-license-cluster-will-not-start/56329 "2016-12-13T15:59:24Z")

</div>

I uninstalled marvel-plugin and license and now my cluster will not start. I don't have any other plugins. I get no known master, can't hit \_cluster/health or \_cat/\*. Cluster is pretty much doa. Do you have any tips …

---

## [Logstash elasticsearch output - data\_stream\_auto\_routing](https://discuss.elastic.co/t/logstash-elasticsearch-output-data-stream-auto-routing/297624)

<div class="topic-metadata">

**Author:** [@mybyte](https://discuss.elastic.co/u/mybyte)\
**Replies:** 1\
**Last updated:** [February 21, 2022, 10:58am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-output-data-stream-auto-routing/297624 "2022-02-21T10:58:42Z")

</div>

I'm a bit confused about the data\_stream\_auto\_routing option when using elasticsearch output to data streams in logstash. According to documentation: Automatically routes events by deriving the data stream name using …

---

## [Metricbeat: Not using docker but getting error: "Is the docker daemon running?"](https://discuss.elastic.co/t/metricbeat-not-using-docker-but-getting-error-is-the-docker-daemon-running/226696)

<div class="topic-metadata">

**Author:** [@Deny7](https://discuss.elastic.co/u/Deny7)\
**Replies:** 1\
**Last updated:** [April 6, 2020, 1:06pm UTC](https://discuss.elastic.co/t/metricbeat-not-using-docker-but-getting-error-is-the-docker-daemon-running/226696 "2020-04-06T13:06:57Z")

</div>

Hello, I just installed using rpm metricbeat 6.6.2. In /lib/systemd/system I have service metricbeat.service. When I want to run it using service metricbeat start I'm getting error: ERROR instance/beat.go:911 Ex…

---

## [Elasticsearch Cluster Yellow - Index Allocation "No Attempt"](https://discuss.elastic.co/t/elasticsearch-cluster-yellow-index-allocation-no-attempt/338492)

<div class="topic-metadata">

**Author:** [@ChestoOfGlen](https://discuss.elastic.co/u/ChestoOfGlen)\
**Replies:** 5\
**Last updated:** [July 20, 2023, 5:45am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-yellow-index-allocation-no-attempt/338492 "2023-07-20T05:45:49Z")

</div>

We are running several Elasticsearch clusters (v8.8.1) in Kubernetes (AWS EKS on v1.25) via Elastic Cloud on Kubernetes (ECK v2.8). We've had several of the clusters, after a high CPU load event on the K8s workers, not …

---

## [Filebeat nginx module](https://discuss.elastic.co/t/filebeat-nginx-module/320400)

<div class="topic-metadata">

**Author:** [@amir\_Bialek](https://discuss.elastic.co/u/amir_Bialek)\
**Replies:** 5\
**Last updated:** [December 5, 2022, 11:36pm UTC](https://discuss.elastic.co/t/filebeat-nginx-module/320400 "2022-12-05T23:36:21Z")

</div>

Hello, I am trying to use filebeat with nginx module to collect logs from nginx-ingress-controller and send directly to elasti but I keep getting an error: Provided Grok expressions do not match field value: \[172.17.0.…

---

## [How to aggregate based on another aggregation?](https://discuss.elastic.co/t/how-to-aggregate-based-on-another-aggregation/299947)

<div class="topic-metadata">

**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\
**Replies:** 5\
**Last updated:** [March 24, 2022, 8:34am UTC](https://discuss.elastic.co/t/how-to-aggregate-based-on-another-aggregation/299947 "2022-03-24T08:34:48Z")

</div>

Hi folks, I have a certain amount of user transactions per day. My final goal is to have the average of daily sums of transactions per week. What I have done so far is the first step (the easy one). I created a chart …

---

## [Elasticsearch deletes my index out of nowhere](https://discuss.elastic.co/t/elasticsearch-deletes-my-index-out-of-nowhere/270551)

<div class="topic-metadata">

**Author:** [@Nikolaj\_Karpov](https://discuss.elastic.co/u/Nikolaj_Karpov)\
**Replies:** 5\
**Last updated:** [April 19, 2021, 10:27am UTC](https://discuss.elastic.co/t/elasticsearch-deletes-my-index-out-of-nowhere/270551 "2021-04-19T10:27:18Z")

</div>

I have Elasticsearch server on AWS . And every now and then my Elasticsearch index is being somehow deleted without me doing anything. Below are the logs from my Elasticsearch server. \[2021-04-19T01:30:00,001\]\[INFO…

---

## [Unable to parse nested json using logstash json filter](https://discuss.elastic.co/t/unable-to-parse-nested-json-using-logstash-json-filter/199888)

<div class="topic-metadata">

**Author:** [@vj\_patnana](https://discuss.elastic.co/u/vj_patnana)\
**Replies:** 5\
**Last updated:** [September 18, 2019, 12:24pm UTC](https://discuss.elastic.co/t/unable-to-parse-nested-json-using-logstash-json-filter/199888 "2019-09-18T12:24:30Z")

</div>

Hello All, I am trying to parse logs which are in json format. I am trying to parse the message json field in the logs. I have tried using json plugin filter but it is not working as expected. Here is the log - { …

---

## [Can Kibana 7.x work with a higher version of node.js due to security fix in Node.js](https://discuss.elastic.co/t/can-kibana-7-x-work-with-a-higher-version-of-node-js-due-to-security-fix-in-node-js/198082)

<div class="topic-metadata">

**Author:** [@cspRules](https://discuss.elastic.co/u/cspRules)\
**Replies:** 5\
**Last updated:** [September 6, 2019, 12:42pm UTC](https://discuss.elastic.co/t/can-kibana-7-x-work-with-a-higher-version-of-node-js-due-to-security-fix-in-node-js/198082 "2019-09-06T12:42:30Z")

</div>

Hi, I am using Kibana 7.2.1 which bundled with node.js 10.15.2. But recently, Node.js has been found to have certain security violation (eg. cve-2019-9511): https://nodejs.org/en/blog/release/v10.16.3/ I would like t…

---

## [Preview Images for indexed documents](https://discuss.elastic.co/t/preview-images-for-indexed-documents/180404)

<div class="topic-metadata">

**Author:** [@sgwillett](https://discuss.elastic.co/u/sgwillett)\
**Replies:** 1\
**Last updated:** [May 9, 2019, 4:31pm UTC](https://discuss.elastic.co/t/preview-images-for-indexed-documents/180404 "2019-05-09T16:31:28Z")

</div>

I see the previews on your documentation and screen grabs. But I don't see any previews in my installation. Am I missing something in the configuration?

---

## [XMLHttpRequest is not working](https://discuss.elastic.co/t/xmlhttprequest-is-not-working/172610)

<div class="topic-metadata">

**Author:** [@danreut89](https://discuss.elastic.co/u/danreut89)\
**Replies:** 1\
**Last updated:** [March 16, 2019, 1:13am UTC](https://discuss.elastic.co/t/xmlhttprequest-is-not-working/172610 "2019-03-16T01:13:35Z")

</div>

I am new to the elasticsearch and JavaScript development. I am trying to use the code below, so I can do regular REST calls and get JSON back. Here is my code that I am using in section function myFunction() { var xh…

---

## [Filter limit in Kibana visualisations](https://discuss.elastic.co/t/filter-limit-in-kibana-visualisations/272055)

<div class="topic-metadata">

**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\
**Replies:** 4\
**Last updated:** [May 4, 2021, 2:29pm UTC](https://discuss.elastic.co/t/filter-limit-in-kibana-visualisations/272055 "2021-05-04T14:29:10Z")

</div>

Hi! I have a script that creates a filter. In the future, this filter can be very large so it can filter around 1200 elements or more. Is there any limit on how many filters can be added in Kibana visualisations or dis…

---

## [Logstash split filter issue](https://discuss.elastic.co/t/logstash-split-filter-issue/119291)

<div class="topic-metadata">

**Author:** [@Shyam\_Burla](https://discuss.elastic.co/u/Shyam_Burla)\
**Replies:** 4\
**Last updated:** [February 13, 2018, 7:12am UTC](https://discuss.elastic.co/t/logstash-split-filter-issue/119291 "2018-02-13T07:12:28Z")

</div>

Hi... I have a Azure CosmosDB log message in this format: { "records": \[ { "time": "Fri, 23 Jun 2017 19:29:50.266 GMT", "resourceId": "contosocosmosdb", "category": "DataPlaneRequests", "operationName": "Quer…

---

## [Why 404 occured when use es.search() in kibana6.x?](https://discuss.elastic.co/t/why-404-occured-when-use-es-search-in-kibana6-x/117925)

<div class="topic-metadata">

**Author:** [@Lynnic](https://discuss.elastic.co/u/Lynnic)\
**Replies:** 4\
**Last updated:** [February 4, 2018, 8:23am UTC](https://discuss.elastic.co/t/why-404-occured-when-use-es-search-in-kibana6-x/117925 "2018-02-04T08:23:54Z")

</div>

here is my code \` es.search({ index: kbnIndex, type: "index-pattern", body: { query: { "ids": { "type" : "index-pattern", "values" : \[$scope.vis.ind…

---

## [Timestamp and @timestamp not properly mapping](https://discuss.elastic.co/t/timestamp-and-timestamp-not-properly-mapping/99636)

<div class="topic-metadata">

**Author:** [@Blake\_2112](https://discuss.elastic.co/u/Blake_2112)\
**Replies:** 4\
**Last updated:** [September 7, 2017, 12:34pm UTC](https://discuss.elastic.co/t/timestamp-and-timestamp-not-properly-mapping/99636 "2017-09-07T12:34:45Z")

</div>

I am sure that this has been asked a number of times and from my review of the previous posts nothing seems to be helping me solve my problem. My JSON has separate date and time fields. I’m creating an ‘eventTime’ fiel…

---

## [Unable to set discovery.zen.minimum\_master\_nodes from kibana?](https://discuss.elastic.co/t/unable-to-set-discovery-zen-minimum-master-nodes-from-kibana/56155)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 4\
**Last updated:** [July 25, 2016, 4:08am UTC](https://discuss.elastic.co/t/unable-to-set-discovery-zen-minimum-master-nodes-from-kibana/56155 "2016-07-25T04:08:43Z")

</div>

Hi! I would like to ask question regarding to dyanamic setting in elasticsearch using cluster-update-api. Environment elasticsearch ver 5.0.0 alpha4-1 kibana ver 5.0.0 alpha4-1 Total of 4 nodes. (3 regular nodes and…

---

## [Too many open files error](https://discuss.elastic.co/t/too-many-open-files-error/36789)

<div class="topic-metadata">

**Author:** [@Idarlington](https://discuss.elastic.co/u/Idarlington)\
**Replies:** 4\
**Last updated:** [December 10, 2015, 8:54am UTC](https://discuss.elastic.co/t/too-many-open-files-error/36789 "2015-12-10T08:54:59Z")

</div>

Hello, Currently using elasticsearch 2.0 , had to create another user to run it since it cant run as root. I have changed the settings for ulimit in the limits.conf file and also added the required lines in common-se…

---

## [How to query by field value and date](https://discuss.elastic.co/t/how-to-query-by-field-value-and-date/235835)

<div class="topic-metadata">

**Author:** [@nino](https://discuss.elastic.co/u/nino)\
**Replies:** 6\
**Last updated:** [June 4, 2020, 9:52pm UTC](https://discuss.elastic.co/t/how-to-query-by-field-value-and-date/235835 "2020-06-04T21:52:53Z")

</div>

Hello all, i am trying to create this query in python but i can't find out the correct syntax. I would like to filter by date greater than and field value: query\_body = { "size": 100, …

---

## [Organization of dashboard objects](https://discuss.elastic.co/t/organization-of-dashboard-objects/229146)

<div class="topic-metadata">

**Author:** [@dataplatform12345](https://discuss.elastic.co/u/dataplatform12345)\
**Replies:** 6\
**Last updated:** [April 27, 2020, 10:11pm UTC](https://discuss.elastic.co/t/organization-of-dashboard-objects/229146 "2020-04-27T22:11:24Z")

</div>

Hi, What are the typical ways to organize dashboard and visualization objects in a multi-tenant implementation of elastic stack. Is the Kibana Space the preferred and only approach ? Is it possible to create folders o…

---

## [Logstash-Syslog Configuration in 7.0](https://discuss.elastic.co/t/logstash-syslog-configuration-in-7-0/180118)

<div class="topic-metadata">

**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\
**Replies:** 6\
**Last updated:** [May 27, 2019, 6:46am UTC](https://discuss.elastic.co/t/logstash-syslog-configuration-in-7-0/180118 "2019-05-27T06:46:59Z")

</div>

My current logstash indexing is not working in 7.0 is it the syntax in 7.0 are changed? btw, all this while, it is working in 6.7 My current configuration as below, input { tcp { port =\> 5514 type =\> syslog …

---

## [Filebeat prospectors autoreload not working](https://discuss.elastic.co/t/filebeat-prospectors-autoreload-not-working/141815)

<div class="topic-metadata">

**Author:** [@Eshwar\_Kumar](https://discuss.elastic.co/u/Eshwar_Kumar)\
**Replies:** 6\
**Last updated:** [July 28, 2018, 8:35am UTC](https://discuss.elastic.co/t/filebeat-prospectors-autoreload-not-working/141815 "2018-07-28T08:35:05Z")

</div>

Hello All, Is there any way for auto reloading filebeat config after changing prospector fields? Below is my sample config: filebeat.prospectors: - type: log enabled: true paths: #- /var/log/\*.log - C:\\ELK\\…

---

## [Drop events if a field does not exist](https://discuss.elastic.co/t/drop-events-if-a-field-does-not-exist/111034)

<div class="topic-metadata">

**Author:** [@vivekthangathurai](https://discuss.elastic.co/u/vivekthangathurai)\
**Replies:** 1\
**Last updated:** [December 11, 2017, 2:10pm UTC](https://discuss.elastic.co/t/drop-events-if-a-field-does-not-exist/111034 "2017-12-11T14:10:05Z")

</div>

I would like drop events if a field does not exist in the doc. will the drop\_events config help here?

[Previous page](https://discuss.elastic.co/top.md?page=994&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=996&per_page=50&period=all)
