python (12.9k questions)

javascript (9.2k questions)

reactjs (4.7k questions)

java (4.2k questions)

java (4.2k questions)

c# (3.5k questions)

c# (3.5k questions)

html (3.3k questions)

Questions - elasticsearch

Filebeat multiline filter doesn't work with txt file

I use the filebeat to collect data from .txt file.I'm trying to use Filebeat multiline capabilities to combine log lines into one entry using the following Filebeat configuration: filebeat.inputs: - ...
test-img

ZSH

elasticsearch

logstash

kibana

elastic-stack

filebeat

Votes: 0

Answers: 2

Latest Answer

I've found out what was the problem. I used filestream as a filebeat input. multiline doesn't work with filestream. I've changed the type to log then everything works fine. filebeat.inputs: multiline...
test-img

ZSH

How to fix red status on opensearch cluster?

We have an opensearch cluster and noticed that the cluster was down. Had the AWS support help me in recovering the cluster but although the cluster is active now, I still see that the cluster is in RE...
test-img

user6826691

amazon-web-services

elasticsearch

opensearch

Votes: 0

Answers: 1

Latest Answer

You can check this link to figure out the issue in case you are not sure that's the only reason(shard is unassigned).It can be red for different reasons. You can try to delete the shard and check but ...
test-img

Riz

Elasticsearch aggregation over several fields and push to an index

I'm having the following document in ElasticSearch, of the index data-ip "ipAddress": "ip-A", "timestamp": "Day 1, Month A", "value": 1 "ipAddres...
test-img

hoangtuansu

elasticsearch

aggregation

Votes: 0

Answers: 1

Latest Answer

You can use a terms aggregation with top hits aggregation, to achieve your required results { "size": 0, "aggs": { "ip-add-terms": { "terms": { ...
test-img

ESCoder

Kibana shows different date from original document

I have folloving issue Elastic mapping: ... "logtime" : { "type":"date", "format":"YYYY-MM-dd HH:mm:ss,SSS" } ... ...
test-img

Алексей Петров

elasticsearch

kibana

Votes: 0

Answers: 1

Latest Answer

Set the format: {"format": "yyyy-MM-dd HH:mm:ss,SSS"} YYYY is a week based year See DateTimeFormatter docs also help you!
test-img

Tomo M

Posts

Questions

Blogs

Jobs