Questions tagged [elastic-stack]

Elastic Stack combines the Elasticsearch, Logstash, Kibana, and the Beats Framework to provide real-time insights of any type of structured or unstructured data.

Elastic Stack combines the , , , and the Beats Framework to provide real-time insights of any type of structured or unstructured data.

In 2015, Elastic introduced the Beats framework (,,) into their stack and decided to rename the ELK Stack to the Elastic Stack

3683 questions
5
votes
1 answer

Optimal way to set up ELK stack on three servers

I am looking to set up an ELK stack and have three servers to do so. While I have found plenty of documentation and tutorials about how to actually install, and configure elasticsearch, logstash, and kibana, I have found less information about how I…
jeromefroe
  • 1,345
  • 12
  • 19
5
votes
4 answers

Logstash creates enormous local log files and (although it sends then to Elasticsearch)

The problem I have a machine with logstash on it, and another Elasticsearch-Kibana machine which stores the logs written from logstash on the first machine. Naturally, I want no logs to be kept on the origin machine and handle logging only on the…
Adam Matan
  • 128,757
  • 147
  • 397
  • 562
5
votes
1 answer

logstash grok filter for logs with arbitrary attribute-value pairs

(This is related to my other question logstash grok filter for custom logs ) I have a logfile whose lines look something like: 14:46:16.603 [http-nio-8080-exec-4] INFO METERING - msg=93e6dd5e-c009-46b3-b9eb-f753ee3b889a CREATE_JOB…
PurpleVermont
  • 1,179
  • 4
  • 18
  • 46
4
votes
1 answer

vega lite Infinite extent for field "field_start": [Infinity, -Infinity]

I have code for stacked bar chart, got from Using Vega Lite to display already-aggregated data it works in vega editor { "data": { "values": [ {"bin": "[-inf,8.0)", "bad_distr": 0.009210526315789473, "good_distr": 0.07763157894736843}, …
hanzgs
  • 1,498
  • 17
  • 44
4
votes
1 answer

How to know total nodes in an elasticsearch cluster?

I have 3 nodes elasticsearch cluster. If more than one node goes down then I can easily check them manually. Suppose nodes in the cluster got increased then it will be difficult to check them manually. So, how can I get all the nodes(specifically…
4
votes
2 answers

No handler found for URI (elasticsearch)

Im trying to add type to index like this: PUT /catalog/_mapping/product { "properties": { "name": { "type":"text" } } } In answer I get an error: { "error" : "no handler found for uri…
rokoman13
  • 41
  • 1
  • 1
  • 3
4
votes
1 answer

ElasticSearch Accessing Nested Documents in Script - Null Pointer Exception

Gist: Trying to write a custom filter on nested documents using painless. Want to write error checks when there are no nested documents to surpass null_pointer_exception I have a mapping as such (simplified and obfuscated) { "video_entry" : { …
4
votes
1 answer

How to write elastic search code using lambda expression in java

Like C#(NEST), how can we write elastic search query using lambda expressions in JAVA. Below is the attached code which I have written using Elasticsearch JAVA client(HighlevelRestClient) . How can I write the code using lambda to reduce complexity…
rahul
  • 406
  • 1
  • 5
  • 14
4
votes
1 answer

Index on Elastic search contains and starts with search

We are using elastic search for faster searching on our organization data . The data model has organization id, address, organization name, business start date and organization contacts array . We have asked to perform string contains search and…
4
votes
0 answers

Got this error "Cannot invoke \"Object.getClass()\" because \"callArgs[0]\" is null" in kibana Console

got this error in kibana console Cannot invoke \"Object.getClass()\" because \"callArgs[0]\" is null while executed this in kibana devtools console POST /_update_by_query { "query": { "match": { "Field": "FieldValue" …
M_x
  • 782
  • 1
  • 8
  • 26
4
votes
1 answer

Python Elasticsearch create index mapping

I am trying to create a ES index with custom mapping with elasticsearch python to increase the size of text in each document: mapping = {"mapping":{ "properties":{ "Apple":{"type":"text","ignore_above":1000}, …
data_person
  • 4,194
  • 7
  • 40
  • 75
4
votes
1 answer

FileBeat not sending docker-container logs to Elastic-search

My requirement is to configure filebeat to be able to send logs to elastic search, the source for the file beats is docker container logs. I am using docker to install filebeat, below mentioned are the dockerfile.filebeat.yml & docker-compose files…
k.explorer
  • 291
  • 6
  • 19
4
votes
2 answers

Elasticsearch scoring documents liked by similar users higher

In Elasticsearch I have two indexes, places and users. This is the mapping for places: mappings: { location: { type: "geo_point" } } And this is the mapping for users: mappings: { likes: { type: "keyword" }, seen: { type:…
user3517658
  • 349
  • 3
  • 14
4
votes
1 answer

How to normalize score across multiple search results

I need some help in normalizing the score using Elastic Search. I am using N-Gram, Fuzziness, Custom Queries and phonetic search In the database : Alice, Bob, Cathy Search query 1 : Alice Results are : Max Score(500), Alice(500)[100%],…
Abhinav Keshri
  • 595
  • 5
  • 20
4
votes
3 answers

Logstash | ConfigurationError :message=>Expected one of [ \\t\\r\\n], \"#\", \"input\", \"filter\", \"output\" at line 1, column 1 (byte 1)

I am getting config error while launching Logstash. I am using 7.5.1 version. Same config file worked earlier. I had to setup ELK stash on another VM since older VM was decommissioned, and I am facing this error here. I'm instantiating logstash…
Shreyas SG
  • 368
  • 3
  • 6
  • 21