Questions tagged [elastic-stack]

Elastic Stack combines the Elasticsearch, Logstash, Kibana, and the Beats Framework to provide real-time insights of any type of structured or unstructured data.

Elastic Stack combines the , , , and the Beats Framework to provide real-time insights of any type of structured or unstructured data.

In 2015, Elastic introduced the Beats framework (,,) into their stack and decided to rename the ELK Stack to the Elastic Stack

3683 questions
0
votes
1 answer

Search in object array for mutiple conditions in elastic search document

I hope you can help me to find the solution, my problem is: I have a list of documents indexed in my index like { "title" : "document 1", "status" 2, "documentParts" : [{ "partTitle": "part 1", "typePart" : 1, …
0
votes
0 answers

Exception Classification in ELK

I have put all my logs into ELK. I want to classify my exceptions according to the exception type. Example: I want to classify the exceptions into "NullPointerException", "IndexOutOfBoundException",... I have tried using the approach mentioned by…
0
votes
0 answers

Kibana Unique count function

I have created a table visualisation so on x-axis I have entity data and on y-axis I am having unique count of traceids function but I am getting unique count of traceids for each entity value is more than the count of records that entity contains .…
0
votes
1 answer

Is there a way to access the old _type metadata on elastic 8.x in script processor?

Using Elasticsearch 8.8 Im trying to use script pipeline to reindex documents, i will transform the old _type metadata into a new field '@type', but all scripts remove all _type and _score fields from the source of doc. There is a way to get the…
neus
  • 15
  • 2
  • 6
0
votes
0 answers

Feed Elastic from Relational Database?

I know this has been asked before, but most answers are from years ago. Can anyone advise on recent ELK best practices for feeding data from a relational database into Elastic? I understand about denormalization. And I know I could write my own…
McJava1967
  • 15
  • 2
0
votes
0 answers

Elasticsearch not generating certificates and enrollment tokens when started from a DockerFile

i'm trying to spin up a docker container for elasticsearch using the Dockerfile: FROM elasticsearch:8.8.1 # Set the environment variables for Elasticsearch. ENV discovery.type=single-node ENV xpack.security.enabled=true ENV…
0
votes
0 answers

Grok Pattern and Hostname Extraction Issues in Logstash 8.8.2

List item I am encountering an issue with Logstash 8 when processing logs from a client machine, while Logstash 6 correctly processes the same logs. Here are the log samples: Log Sample - Logstash 8…
0
votes
1 answer

Elasticsearch keep migrating shards out of one of my data node

Elasticsearch keep migrating shards out of one of my data node data-mbesdrtp21. This cluster have mix of plain index and data streams. Half of the data nodes in an availability zone named rtp1 and other half is in an availability zone named rtp2.…
Zeeshan
  • 11,851
  • 21
  • 73
  • 98
0
votes
0 answers

elastalert with Slack in HELK

I am still new with HELK but i m getting the hang of it. Currently i am trying to use the elastalert function in HELK. I already followed every steps from an article that i found. The alerts still not sending to my Slack channel/myself. All HELK…
0
votes
1 answer

Get all only fieldnames without its value from index

How to get all only fieldnames(key name) and not the values of it from index in Elasticsearch I tried using following request. GET /my_index/_field_caps?fields=*&filter_path=fields.* but above request also returning datatypes of fields. Expected…
0
votes
1 answer

Elasticsearch BoolQuery Gets Different Files

hi i am trying to do a search where i can find specific files using elastic search. This is my java client: co.elastic.clients elasticsearch-java
Levent
  • 1
0
votes
1 answer

Kubernetes cluster at Google cloud with simple flask application and ELK stack

With Flask, I made an application that prints the keys and values ​​of get requests to the console. My goal is to create a cluster with 1 master and 2 workers and install flask app and ELK stack for logging in it. I have already created the cluster…
0
votes
0 answers

Limit on number of Clusters supported by Cross cluster search (CCS) in Ealstic

Can I have a Architectural design where in we have around 100 clusters of Elastic. Where in each cluster is basically a small set of Master Node and Data Nodes . Using Cross Cluster Search if we send the search queries to a Cluster and let the query…
0
votes
0 answers

is it possible to filter results by similarity threshold?

i used in mappings file a dense_vector for knn "esvector": { "type": "dense_vector", "dims": 768, "index": true, "similarity": "cosine" }, I want to use a similarity threshold , but it does'nt work for me ,…
0
votes
0 answers

ElasticSearch policy for documents deletion that older than two months and include field scriptName that equal to TestScript

I am using Elasticsearch version 7.11.2. I would like to create a policy that deletes all documents that are older than two months (e.g., "dateTime": "2023-06-13T15:42:03.6633024+03:00") and contains the field scriptName that is equal to…
Maxim
  • 13
  • 2