# Top **URL:** https://discuss.elastic.co/top.md?page=999&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1000 --- ## [Apache Log and \_geoip\_lookup\_failure error](https://discuss.elastic.co/t/apache-log-and-geoip-lookup-failure-error/114679)
**Author:** [@ssppune](https://discuss.elastic.co/u/ssppune)\ **Replies:** 2\ **Last updated:** [January 9, 2018, 11:29am UTC](https://discuss.elastic.co/t/apache-log-and-geoip-lookup-failure-error/114679 "2018-01-09T11:29:00Z")
I am using Apache behind HAProxy. The sample log file is as follows 194.1.143.146, 10.80.4.30 - - \[13/Dec/2017:15:08:12 +0530\] "GET /Portal/themes/js/language/showjs.js HTTP/1.1" 200 7106 "https://myserver.com/search/?se… --- ## [Is it possible to show surrounding log messages as a plain-text flow?](https://discuss.elastic.co/t/is-it-possible-to-show-surrounding-log-messages-as-a-plain-text-flow/113307)
**Author:** [@Asaf\_Shabat](https://discuss.elastic.co/u/Asaf_Shabat)\ **Replies:** 2\ **Last updated:** [December 28, 2017, 12:00pm UTC](https://discuss.elastic.co/t/is-it-possible-to-show-surrounding-log-messages-as-a-plain-text-flow/113307 "2017-12-28T12:00:57Z")
I'm using the "View surrounding documents" option in order to show some related logs for a specific log, and this makes me ask the following question: Is it possible to show the related messages log as a plain-text, so … --- ## [Greater than not working in logstash filter and crashing](https://discuss.elastic.co/t/greater-than-not-working-in-logstash-filter-and-crashing/109249)
**Author:** [@zzurashvili](https://discuss.elastic.co/u/zzurashvili)\ **Replies:** 2\ **Last updated:** [November 27, 2017, 9:55pm UTC](https://discuss.elastic.co/t/greater-than-not-working-in-logstash-filter-and-crashing/109249 "2017-11-27T21:55:24Z")
I'm getting IPFIX flow data and in filter I need to add fields and tags based on source or destination port. Everything is working perfectly when I compare port using "==". if I use "\>" I get: \[2017-11-27T11:18:45,502\]\[… --- ## [Picking data out of logs with Logstash](https://discuss.elastic.co/t/picking-data-out-of-logs-with-logstash/27804)
**Author:** [@meggiel](https://discuss.elastic.co/u/meggiel)\ **Replies:** 2\ **Last updated:** [August 21, 2015, 5:57pm UTC](https://discuss.elastic.co/t/picking-data-out-of-logs-with-logstash/27804 "2015-08-21T17:57:14Z")
Hi, I'm pretty new to Logstash, and I'm trying to evaluate it to see if it will do what I'd like to do. I'm starting with logs that are partially log4j, but also include lines that aren't log4j, so a straight log4j f… --- ## [\[Kibana visualization\] max of sum](https://discuss.elastic.co/t/kibana-visualization-max-of-sum/206201)
**Author:** [@yazid](https://discuss.elastic.co/u/yazid)\ **Replies:** 3\ **Last updated:** [November 4, 2019, 7:28am UTC](https://discuss.elastic.co/t/kibana-visualization-max-of-sum/206201 "2019-11-04T07:28:05Z")
Hi need your help to do a max of sum group by document's date field Assuming I have 2 series , can you please tell me what metric aggregation I have to use to do this: each line is in the separate document Thanks i… --- ## [ElasticSearch - date range condition should match EXACTLY one item from date range array](https://discuss.elastic.co/t/elasticsearch-date-range-condition-should-match-exactly-one-item-from-date-range-array/53071)
**Author:** [@pungent](https://discuss.elastic.co/u/pungent)\ **Replies:** 3\ **Last updated:** [June 17, 2016, 7:28am UTC](https://discuss.elastic.co/t/elasticsearch-date-range-condition-should-match-exactly-one-item-from-date-range-array/53071 "2016-06-17T07:28:42Z")
I am planning to store million of airbnb type apartments availabilty in elasticsearch . Where availabilty is an array that contains nested objects (availability type is nested). And each of those objects have date range… --- ## [Error establishing direct connection to mongo node Error output: no reachable servers](https://discuss.elastic.co/t/error-establishing-direct-connection-to-mongo-node-error-output-no-reachable-servers/313395)
**Author:** [@Asher\_Manangan](https://discuss.elastic.co/u/Asher_Manangan)\ **Replies:** 6\ **Last updated:** [September 7, 2022, 12:09pm UTC](https://discuss.elastic.co/t/error-establishing-direct-connection-to-mongo-node-error-output-no-reachable-servers/313395 "2022-09-07T12:09:00Z")
Hi, Here is the log: Error establishing direct connection to mongo node at \[127.0.0.1:27017\]. Error output: no reachable servers I tried a lot of things, but after so many days, I can't find it work. Here is my mong… --- ## [Required plugins for ES-5.6.3](https://discuss.elastic.co/t/required-plugins-for-es-5-6-3/118500)
**Author:** [@dzyubanv](https://discuss.elastic.co/u/dzyubanv)\ **Replies:** 6\ **Last updated:** [February 5, 2018, 11:36pm UTC](https://discuss.elastic.co/t/required-plugins-for-es-5-6-3/118500 "2018-02-05T23:36:10Z")
I'm running es-5.6.3 on rhel. It works well with single and multi node configuration and basic attributes in elasticsearch.yml (cluster.name, node.name, node.master, node.data, network.host, etc.). But when I added the… --- ## [How to index a csv file with Elastic Search](https://discuss.elastic.co/t/how-to-index-a-csv-file-with-elastic-search/16083)
**Author:** [@vb2008a](https://discuss.elastic.co/u/vb2008a)\ **Replies:** 6\ **Last updated:** [July 15, 2014, 7:32pm UTC](https://discuss.elastic.co/t/how-to-index-a-csv-file-with-elastic-search/16083 "2014-07-15T19:32:54Z")
I am a nebiew to elastic search. I have eleastic search and head running on a VM. Can someone point me to the steps to index a csv file and search from it. Your asistance would be greatly appreciated. Thanks, Vidy… --- ## [.net client application log not creating index in elasticsearch](https://discuss.elastic.co/t/net-client-application-log-not-creating-index-in-elasticsearch/321259)
**Author:** [@rajvel](https://discuss.elastic.co/u/rajvel)\ **Replies:** 4\ **Last updated:** [December 15, 2022, 4:41pm UTC](https://discuss.elastic.co/t/net-client-application-log-not-creating-index-in-elasticsearch/321259 "2022-12-15T16:41:38Z")
Hello Team, we have .net application we used .net client elasticsearch to share the log to new index. Recently we haven't received any new index created by .net application. there is no way to find the whether the inde… --- ## [Provided Grok patterns do not match data in the input](https://discuss.elastic.co/t/provided-grok-patterns-do-not-match-data-in-the-input/270265)
**Author:** [@Cris\_R](https://discuss.elastic.co/u/Cris_R)\ **Replies:** 4\ **Last updated:** [April 16, 2021, 6:57am UTC](https://discuss.elastic.co/t/provided-grok-patterns-do-not-match-data-in-the-input/270265 "2021-04-16T06:57:17Z")
Hi, Trying to create my own grok patterns, I'm using the following with the Grok Debugger : Sample data : \[ 4812 6032\]\[15 Feb 18:23:15\]\[LdManInit\] Loading Library in Load mode Grok Pattern : %{IDLOG:whom} %{TIMEST:… --- ## [Handling exception from HTTP logstash 6.8](https://discuss.elastic.co/t/handling-exception-from-http-logstash-6-8/242259)
**Author:** [@pvaithee07](https://discuss.elastic.co/u/pvaithee07)\ **Replies:** 4\ **Last updated:** [July 22, 2020, 11:18pm UTC](https://discuss.elastic.co/t/handling-exception-from-http-logstash-6-8/242259 "2020-07-22T23:18:17Z")
Hello - I am trying to handle exception in my logstash after HTTP filter plugin. I am using Logstash version 6.8. I have couple of question on this - How to handle exception if the HTTP response code is other than 200… --- ## [Convert a field string to time](https://discuss.elastic.co/t/convert-a-field-string-to-time/113339)
**Author:** [@Vivek\_Nigam](https://discuss.elastic.co/u/Vivek_Nigam)\ **Replies:** 4\ **Last updated:** [December 31, 2017, 1:02pm UTC](https://discuss.elastic.co/t/convert-a-field-string-to-time/113339 "2017-12-31T13:02:47Z")
Hi, my string value is like 03:40:15 , want to convert it to time field without date. can i do it?? --- ## [Logstash / Elasticsearch Double Values](https://discuss.elastic.co/t/logstash-elasticsearch-double-values/111326)
**Author:** [@MaikLinnemann](https://discuss.elastic.co/u/MaikLinnemann)\ **Replies:** 4\ **Last updated:** [December 12, 2017, 3:38pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-double-values/111326 "2017-12-12T15:38:06Z")
Dear all, i have an issue with logstash that i try to solve since a while. My issue is that the values for the output of "PROBLEMSITE" is always double. Here is an JSON example: "\_source": { "request": \[ "/… --- ## [Support hebrew characters in logs](https://discuss.elastic.co/t/support-hebrew-characters-in-logs/81168)
**Author:** [@orlevy08](https://discuss.elastic.co/u/orlevy08)\ **Replies:** 4\ **Last updated:** [April 6, 2017, 3:29pm UTC](https://discuss.elastic.co/t/support-hebrew-characters-in-logs/81168 "2017-04-06T15:29:58Z")
Hi All, I have an issue with logstash parsing using grok: When some hebrew characters are placed in the log the result i see is ?????? instead of the user name (for example: if the user name is בלהבלה i get ??????) Is … --- ## [Tribe node lost connection to Cluster](https://discuss.elastic.co/t/tribe-node-lost-connection-to-cluster/25724)
**Author:** [@Ramdev\_Wudali](https://discuss.elastic.co/u/Ramdev_Wudali)\ **Replies:** 4\ **Last updated:** [August 31, 2015, 1:08pm UTC](https://discuss.elastic.co/t/tribe-node-lost-connection-to-cluster/25724 "2015-08-31T13:08:17Z")
I have found out that in a tribe node client setup, if one of the clusters being accessed via the Tribe node, has more than a set number of indices, the tribe node looses the ability to search that cluster. My Setup: … --- ## [Elastic agent 8.4.3 - No policy response available](https://discuss.elastic.co/t/elastic-agent-8-4-3-no-policy-response-available/345303)
**Author:** [@elastic\_fan](https://discuss.elastic.co/u/elastic_fan)\ **Replies:** 8\ **Last updated:** [November 15, 2023, 8:23pm UTC](https://discuss.elastic.co/t/elastic-agent-8-4-3-no-policy-response-available/345303 "2023-11-15T20:23:18Z")
Hello, The Elastic UI displays the following error "No policy response available" Status output: ./elastic-agent status Status: FAILED Message: app endpoint-security--8.4.3-3a97d14d: Missed two check-ins Applica… --- ## [Kibana not working after setting up minimal security](https://discuss.elastic.co/t/kibana-not-working-after-setting-up-minimal-security/307454)
**Author:** [@wes.campbell](https://discuss.elastic.co/u/wes.campbell)\ **Replies:** 8\ **Last updated:** [June 22, 2022, 6:28pm UTC](https://discuss.elastic.co/t/kibana-not-working-after-setting-up-minimal-security/307454 "2022-06-22T18:28:45Z")
I have the below setup for Elasticsearch I have the below setup for Kibana server.host: "0.0.0.0" Elasticsearch.username: "kibana\_system" Elasticsearch.logQueries: true logging.dest: D:\\Elastic\\kibana-7.17.0\\Logs\\… --- ## [Sending logs to Elastic cloud using C# Logger](https://discuss.elastic.co/t/sending-logs-to-elastic-cloud-using-c-logger/211438)
**Author:** [@Mohamad-Sobhie](https://discuss.elastic.co/u/Mohamad-Sobhie)\ **Replies:** 0\ **Last updated:** [December 11, 2019, 9:21am UTC](https://discuss.elastic.co/t/sending-logs-to-elastic-cloud-using-c-logger/211438 "2019-12-11T09:21:33Z")
I am using this library https://github.com/serilog/serilog-sinks-elasticsearch to send logs to my Elastic cloud node. I am trying to include the authentication in my code but it's not working. var logger = n… --- ## [Question about Segment described in "Elasticsearch: The Definitive Guide"](https://discuss.elastic.co/t/question-about-segment-described-in-elasticsearch-the-definitive-guide/35980)
**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\ **Replies:** 8\ **Last updated:** [December 2, 2015, 8:52am UTC](https://discuss.elastic.co/t/question-about-segment-described-in-elasticsearch-the-definitive-guide/35980 "2015-12-02T08:52:21Z")
In the section "near real time search" of the book "Elasticsearch: The Definitive Guide": https://www.elastic.co/guide/en/elasticsearch/guide/current/near-real-time.html The Figure 20 depicts how in-memory buffer conte… --- ## [GeoPoint in Java not mapping geo\_point](https://discuss.elastic.co/t/geopoint-in-java-not-mapping-geo-point/251682)
**Author:** [@aatif26](https://discuss.elastic.co/u/aatif26)\ **Replies:** 5\ **Last updated:** [October 12, 2020, 5:58am UTC](https://discuss.elastic.co/t/geopoint-in-java-not-mapping-geo-point/251682 "2020-10-12T05:58:04Z")
I am using ElasticSearch and JAVA REST High Level Client v7.9 Following is my agent class public class Agent { private GeoPoint location; private long timestamp; private long available; public Agent(G… --- ## [Filebeat Processors drop\_event](https://discuss.elastic.co/t/filebeat-processors-drop-event/257856)
**Author:** [@erezhazan1](https://discuss.elastic.co/u/erezhazan1)\ **Replies:** 2\ **Last updated:** [December 9, 2020, 12:50pm UTC](https://discuss.elastic.co/t/filebeat-processors-drop-event/257856 "2020-12-09T12:50:54Z")
Hey all! I need your help with the following, I'm trying to get this condition to work: If not (message: '^.dstintf="aaaa".' OR message: '^.dstintf="bbb".') AND NOT (message: '^.action="ccc".' AND message: '^.action=… --- ## [Not working Https Elasticsearch with GKE default ingress](https://discuss.elastic.co/t/not-working-https-elasticsearch-with-gke-default-ingress/245180)
**Author:** [@kumar\_abhishek](https://discuss.elastic.co/u/kumar_abhishek)\ **Replies:** 2\ **Last updated:** [September 4, 2020, 10:38am UTC](https://discuss.elastic.co/t/not-working-https-elasticsearch-with-gke-default-ingress/245180 "2020-09-04T10:38:04Z")
Hi, Can Anyone help me here? I was able to configure and install an elastic search /kibana using Eck Operator in my environment (GKE GCP) and also able to enable Kibana with an https using GCP managed certificate for S… --- ## [Elasticsearch 7.1 have rediculously high disk read io (100%)](https://discuss.elastic.co/t/elasticsearch-7-1-have-rediculously-high-disk-read-io-100/225619)
**Author:** [@huntlyroad](https://discuss.elastic.co/u/huntlyroad)\ **Replies:** 2\ **Last updated:** [March 30, 2020, 9:56am UTC](https://discuss.elastic.co/t/elasticsearch-7-1-have-rediculously-high-disk-read-io-100/225619 "2020-03-30T09:56:00Z")
Hi, We are seeing unexpected write I/O on elasticsearch data nodes. this is what is captured by iotop: As you can see, the disk io is 100% all the time, following is captured detailed threads. Here is the output … --- ## [Elastic Stack out of Memory](https://discuss.elastic.co/t/elastic-stack-out-of-memory/141598)
**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\ **Replies:** 2\ **Last updated:** [July 25, 2018, 6:35pm UTC](https://discuss.elastic.co/t/elastic-stack-out-of-memory/141598 "2018-07-25T18:35:08Z")
I am having an issue running some kibana reports. It runs out of memory (See below), I started with basic memoryu, upped it to 8GB and now to 16GB. What may be going on? \[2018-07-25T10:02:46,072\]\[ERROR\]\[o.e.x.w.i.s.Exec… --- ## [Traefik module for filbeat don't parse traefik logs](https://discuss.elastic.co/t/traefik-module-for-filbeat-dont-parse-traefik-logs/116170)
**Author:** [@e8kor](https://discuss.elastic.co/u/e8kor)\ **Replies:** 2\ **Last updated:** [January 19, 2018, 9:21am UTC](https://discuss.elastic.co/t/traefik-module-for-filbeat-dont-parse-traefik-logs/116170 "2018-01-19T09:21:48Z")
Log message example: 85.115.248.206 - - \[19/Jan/2018:06:08:56 +0000\] "GET /assets/513050f1e4b0a08cc2435786/valuation?oauth\_token=ya29.Gl0bBckbBUoFLYZtYEHu4\_7LWKAKfNkQpaM9P0FerOmiQXyjth9qOWw0NJjp9\_nocSPs2XA\_icHafiqbaT7oa… --- ## [Can't seem to use socket dataset on rocky linux](https://discuss.elastic.co/t/cant-seem-to-use-socket-dataset-on-rocky-linux/298102)
**Author:** [@jhbigler](https://discuss.elastic.co/u/jhbigler)\ **Replies:** 7\ **Last updated:** [March 2, 2022, 9:00pm UTC](https://discuss.elastic.co/t/cant-seem-to-use-socket-dataset-on-rocky-linux/298102 "2022-03-02T21:00:08Z")
Auditbeat version: 7.15.2 Operating system: Rocky Linux (4.18.0-348.12.2.el8\_5.x86\_64) My issue is similar to the one discussed here, but the fixes that were put in 7.10 do not work here. Commenting out the socket data… --- ## [20 seconds downtime when swapping alias](https://discuss.elastic.co/t/20-seconds-downtime-when-swapping-alias/287739)
**Author:** [@morland96](https://discuss.elastic.co/u/morland96)\ **Replies:** 7\ **Last updated:** [October 27, 2021, 9:14am UTC](https://discuss.elastic.co/t/20-seconds-downtime-when-swapping-alias/287739 "2021-10-27T09:14:11Z")
Hi all. I have a service requires zero down time. Since the data need to be versionized, our pipeline will ingest data every day into a new index. After the new index is "green" and able to search, we simply swap the ali… --- ## [How to prevent old log appending existing log in elasticsearch](https://discuss.elastic.co/t/how-to-prevent-old-log-appending-existing-log-in-elasticsearch/163656)
**Author:** [@Vinit\_Kumar](https://discuss.elastic.co/u/Vinit_Kumar)\ **Replies:** 7\ **Last updated:** [January 10, 2019, 11:24am UTC](https://discuss.elastic.co/t/how-to-prevent-old-log-appending-existing-log-in-elasticsearch/163656 "2019-01-10T11:24:31Z")
I am using filebeat to get logs from the remote server and shipping it to logstash so it's working fine. But when new logs being appending in the source log file so filebeat reads those logs from the beginning and send i… --- ## [Logstash logs filling up disk space](https://discuss.elastic.co/t/logstash-logs-filling-up-disk-space/98561)
**Author:** [@n\_b](https://discuss.elastic.co/u/n_b)\ **Replies:** 1\ **Last updated:** [August 28, 2017, 1:35pm UTC](https://discuss.elastic.co/t/logstash-logs-filling-up-disk-space/98561 "2017-08-28T13:35:31Z")
I am using logstash version 1.5.4 to push logs from a file to elasticsearch. We are using ‘-l’ option and specifying a local file for storing logstash’s logs. I am not using --verbose or debug mode. Now, in case of err… --- ## [Synthetics monitor stuck in "pending" when using Elastic's global infrastructure](https://discuss.elastic.co/t/synthetics-monitor-stuck-in-pending-when-using-elastics-global-infrastructure/338886)
**Author:** [@Ruben\_Bajo](https://discuss.elastic.co/u/Ruben_Bajo)\ **Replies:** 3\ **Last updated:** [July 21, 2023, 9:50am UTC](https://discuss.elastic.co/t/synthetics-monitor-stuck-in-pending-when-using-elastics-global-infrastructure/338886 "2023-07-21T09:50:44Z")
Hi I'm trying to use Elastic's global testing infrastructure in Synthetics monitors but when creating the monitor it gets stuck in "pending" indefinitely. Using private locations works fine. Does anybody had this issue … --- ## [\[resolved\]RSS Feed ELK setup](https://discuss.elastic.co/t/resolved-rss-feed-elk-setup/167148)
**Author:** [@devmal044](https://discuss.elastic.co/u/devmal044)\ **Replies:** 3\ **Last updated:** [February 28, 2019, 7:55pm UTC](https://discuss.elastic.co/t/resolved-rss-feed-elk-setup/167148 "2019-02-28T19:55:18Z")
Looking for documentation for feeding an RSS feed into Kibana. I saw a video posted in a previous discussion but I believe it was couple versions behind so the syntax was off. I have tried setting the input in the logsta… --- ## [Elasticsearch is crashing my system](https://discuss.elastic.co/t/elasticsearch-is-crashing-my-system/137790)
**Author:** [@veerabhadraiah](https://discuss.elastic.co/u/veerabhadraiah)\ **Replies:** 3\ **Last updated:** [June 30, 2018, 6:56am UTC](https://discuss.elastic.co/t/elasticsearch-is-crashing-my-system/137790 "2018-06-30T06:56:19Z")
PLEASE HELP : URGENT REQUEST! I NEED HELP WITH EL I have just started using elasticsearch to sort the data that comes to my DB (I used to use MySQL earlier) I get about 30 Million records per-day, and when I try search… --- ## [Logstash Oracle setup - Cannot create pipeline](https://discuss.elastic.co/t/logstash-oracle-setup-cannot-create-pipeline/92546)
**Author:** [@bhrtjoshi](https://discuss.elastic.co/u/bhrtjoshi)\ **Replies:** 3\ **Last updated:** [August 2, 2017, 3:36pm UTC](https://discuss.elastic.co/t/logstash-oracle-setup-cannot-create-pipeline/92546 "2017-08-02T15:36:03Z")
I there, I am getting below error in the logstash logs. Can someone please help? \[2017-07-10T19:06:10,405\]\[ERROR\]\[logstash.agent \] Cannot create pipeline {:reason=\>"Expected one of #, =\> at line 15, column 11… --- ## [Is metricbeat preventing a container from being deleted? Some locking issue?](https://discuss.elastic.co/t/is-metricbeat-preventing-a-container-from-being-deleted-some-locking-issue/91236)
**Author:** [@MartinAhrer](https://discuss.elastic.co/u/MartinAhrer)\ **Replies:** 3\ **Last updated:** [July 4, 2017, 10:30am UTC](https://discuss.elastic.co/t/is-metricbeat-preventing-a-container-from-being-deleted-some-locking-issue/91236 "2017-07-04T10:30:48Z")
I have the elastic stack (elasticsearch,logstash,kibana) + filebeat + metricbeat running on a 14.04.5 LTS (GNU/Linux 3.13.0-115-generic x86\_64) host. All elastic software is running in their own Docker container. So I … --- ## [Write consistency quorum](https://discuss.elastic.co/t/write-consistency-quorum/25018)
**Author:** [@usualstuff](https://discuss.elastic.co/u/usualstuff)\ **Replies:** 3\ **Last updated:** [July 8, 2015, 10:07pm UTC](https://discuss.elastic.co/t/write-consistency-quorum/25018 "2015-07-08T22:07:10Z")
Hello. We currently have setup with multiple virtual machine hosts and two SANs for failover. I was thinking about best way to deploy cluster in this configuration. So I thought about deploying some nodes with master… --- ## [Config SSL/TLS Kibana and Elasticsearch](https://discuss.elastic.co/t/config-ssl-tls-kibana-and-elasticsearch/255820)
**Author:** [@aloalo2242](https://discuss.elastic.co/u/aloalo2242)\ **Replies:** 4\ **Last updated:** [November 20, 2020, 2:37am UTC](https://discuss.elastic.co/t/config-ssl-tls-kibana-and-elasticsearch/255820 "2020-11-20T02:37:23Z")
Hi, Im trying to enable Fleet in Ingest Manager. And it say I have to enable this xpack.security.authc.api\_key.enabled: true in elasticsearch.yml. But if add that line, I have to add bellow line too: xpack.security.en… --- ## [Unique Count by using visual builder metric](https://discuss.elastic.co/t/unique-count-by-using-visual-builder-metric/218093)
**Author:** [@sajjithreddy](https://discuss.elastic.co/u/sajjithreddy)\ **Replies:** 4\ **Last updated:** [February 7, 2020, 6:12pm UTC](https://discuss.elastic.co/t/unique-count-by-using-visual-builder-metric/218093 "2020-02-07T18:12:28Z")
I have a question that, How we can get unique count of multiple events in visual builder or any visualization kibana? Let me explain my question clearly. In log stash events class name, git url and status is there. Thi… --- ## [Requete sous la forme WHERE (X OR Y ) AND ( W OR Z )](https://discuss.elastic.co/t/requete-sous-la-forme-where-x-or-y-and-w-or-z/136490)
**Author:** [@Athimue](https://discuss.elastic.co/u/Athimue)\ **Replies:** 4\ **Last updated:** [June 21, 2018, 12:09pm UTC](https://discuss.elastic.co/t/requete-sous-la-forme-where-x-or-y-and-w-or-z/136490 "2018-06-21T12:09:29Z")
Bonjour, Nouvelle journée et nouvelle question. Je souhaite faire une requête de la forme : SELECT \* FROM Personnes WHERE nom = "..." AND (prenom = "X" OR adresse = "Y") AND ( age = "W" OR sexe = "Z") J'ai alo… --- ## [Using dev-tool (console) from monitoring cluster](https://discuss.elastic.co/t/using-dev-tool-console-from-monitoring-cluster/108868)
**Author:** [@Oleg.Borisov](https://discuss.elastic.co/u/Oleg.Borisov)\ **Replies:** 4\ **Last updated:** [November 23, 2017, 11:58am UTC](https://discuss.elastic.co/t/using-dev-tool-console-from-monitoring-cluster/108868 "2017-11-23T11:58:55Z")
Hi folks I have two clusters: monitoring (with kibana installed) and prod. Now I want to use kibana "dev tool"(console), but I want to send queries and get answers from my prod cluster instead monitoring I try set el… --- ## [Reading logstash's own log file with logstash](https://discuss.elastic.co/t/reading-logstashs-own-log-file-with-logstash/23828)
**Author:** [@MaxS](https://discuss.elastic.co/u/MaxS)\ **Replies:** 4\ **Last updated:** [June 25, 2015, 7:26pm UTC](https://discuss.elastic.co/t/reading-logstashs-own-log-file-with-logstash/23828 "2015-06-25T19:26:59Z")
Hi, I'd like to read and parse logstash's own log file with logstash. Does anyone have a grok pattern or config to do this? I'm surprised this isn't an out of the box feature! Cheers, Max --- ## [\[MergeException\[java.lang.NullPointerException\] and All shards failed for phase: \[query\_fetch\]](https://discuss.elastic.co/t/mergeexception-java-lang-nullpointerexception-and-all-shards-failed-for-phase-query-fetch/22005)
**Author:** [@ElasticSearch\_Users\_](https://discuss.elastic.co/u/ElasticSearch_Users_)\ **Replies:** 4\ **Last updated:** [February 6, 2015, 12:53am UTC](https://discuss.elastic.co/t/mergeexception-java-lang-nullpointerexception-and-all-shards-failed-for-phase-query-fetch/22005 "2015-02-06T00:53:12Z")
Hello, My environment has 1 linux server installed elasticsearch 1.4.2 with default settings from rpm package. I use TransportClient to send requests to elasticsearch. I recently changed to use rpm package. It has… --- ## [Marvel - Total Queries Per Day](https://discuss.elastic.co/t/marvel-total-queries-per-day/19736)
**Author:** [@Scott\_Decker](https://discuss.elastic.co/u/Scott_Decker)\ **Replies:** 4\ **Last updated:** [September 29, 2014, 10:52pm UTC](https://discuss.elastic.co/t/marvel-total-queries-per-day/19736 "2014-09-29T22:52:47Z")
I must be missing something, or not be querying the dashboards correctly =( How do I get a graph of the total queries being generated for nodes? Basically, just trying to see counts, per hour/per day/per week of how … --- ## [Saved "field" parameter is now invalid. Please select a new field | Visualize: "field" is a required parameter](https://discuss.elastic.co/t/saved-field-parameter-is-now-invalid-please-select-a-new-field-visualize-field-is-a-required-parameter/99036)
**Author:** [@danilosilva87](https://discuss.elastic.co/u/danilosilva87)\ **Replies:** 1\ **Last updated:** [September 4, 2017, 1:19pm UTC](https://discuss.elastic.co/t/saved-field-parameter-is-now-invalid-please-select-a-new-field-visualize-field-is-a-required-parameter/99036 "2017-09-04T13:19:22Z")
Good afternoon, I’m using metricbeat =\> redis =\> logstash =\> elasticsearch \<= kibana. Some information Kibana 5.5.2 logstash 5.5.2 elasticsearch 5.5.2 metricbeat 5.5.2 All with docker I’ve researched a lot about th… --- ## [Date parsing error : Invalid format](https://discuss.elastic.co/t/date-parsing-error-invalid-format/68183)
**Author:** [@mehdi-aouadi](https://discuss.elastic.co/u/mehdi-aouadi)\ **Replies:** 1\ **Last updated:** [December 12, 2016, 10:32am UTC](https://discuss.elastic.co/t/date-parsing-error-invalid-format/68183 "2016-12-12T10:32:50Z")
I am trying to parse a date field from a jdbc input : SELECT TO\_CHAR(date\_column, 'YYYY-MM-DD') || 'T' || TO\_CHAR(date\_column, 'HH24:MI:SS') || 'Z' as "my\_date" FROM my\_table When I try to parse it in the filter so i… --- ## [Kibana not using defined colors in legacy visualizations](https://discuss.elastic.co/t/kibana-not-using-defined-colors-in-legacy-visualizations/278559)
**Author:** [@Mrizzi](https://discuss.elastic.co/u/Mrizzi)\ **Replies:** 6\ **Last updated:** [July 16, 2021, 12:26am UTC](https://discuss.elastic.co/t/kibana-not-using-defined-colors-in-legacy-visualizations/278559 "2021-07-16T00:26:15Z")
Hi everyone, I'm having an issue where Kibana continues to use random colors from the assigned palettes in some visualizations despite the fact that I designed specific colors per label on each one of them. I want to be… --- ## [Cant create snapshot life cycle policy](https://discuss.elastic.co/t/cant-create-snapshot-life-cycle-policy/231081)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 6\ **Last updated:** [May 6, 2020, 5:22am UTC](https://discuss.elastic.co/t/cant-create-snapshot-life-cycle-policy/231081 "2020-05-06T05:22:53Z")
Hey All, Trying to create snapshot life cycle policy according to the knowledge article PUT /\_slm/policy/daily-snapshots { "schedule": "0 30 12 \* \* ?", "name": "snapshot-daily-snap-{now/d}", "repository": "elas… --- ## [Slf4j error not captured](https://discuss.elastic.co/t/slf4j-error-not-captured/216987)
**Author:** [@nugusbayevkk](https://discuss.elastic.co/u/nugusbayevkk)\ **Replies:** 6\ **Last updated:** [February 26, 2020, 3:55pm UTC](https://discuss.elastic.co/t/slf4j-error-not-captured/216987 "2020-02-26T15:55:35Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.5… --- ## [ECE - Confusion about docker storage driver to use - overlay or overlay2?](https://discuss.elastic.co/t/ece-confusion-about-docker-storage-driver-to-use-overlay-or-overlay2/210927)
**Author:** [@ygirouard\_stm](https://discuss.elastic.co/u/ygirouard_stm)\ **Replies:** 2\ **Last updated:** [December 11, 2019, 3:59pm UTC](https://discuss.elastic.co/t/ece-confusion-about-docker-storage-driver-to-use-overlay-or-overlay2/210927 "2019-12-11T15:59:43Z")
Docker's documentation is clear: if possible and your kernel supports it, use overlay2 as the storage driver, as stated here: Use the OverlayFS storage driver | Docker Docs Note : If you use OverlayFS, use the overlay… --- ## [Windows Dhcp Server logs with Filebeat](https://discuss.elastic.co/t/windows-dhcp-server-logs-with-filebeat/194750)
**Author:** [@psyapathy](https://discuss.elastic.co/u/psyapathy)\ **Replies:** 2\ **Last updated:** [August 15, 2019, 5:21am UTC](https://discuss.elastic.co/t/windows-dhcp-server-logs-with-filebeat/194750 "2019-08-15T05:21:41Z")
Hello! Can i get logs from Windows Dhcp Server with Filebeat into Elasticsearch? Is it possible? [Previous page](https://discuss.elastic.co/top.md?page=998&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1000&per_page=50&period=all)