any examples how to use scripting? e.g when one has free text and wants to create a new field based on some part of the original document using painless script
How do i look for spacific commands in the discover tab. Lets say i have a user executing "visudo" on a centos machine and he/she does this regularly. How do i look for all the instances of "visudo" in the discover tab. This was mostly windows based. would love to see Linux based as well.
I have ES on production and use Kibana for a querying. But it is too slow. For example I use simple search like user_name: SomeName and it is too slow. Could this be Kibana's problem or this or this problems deal with ES cluster?
Mike Neville looks thrilled to be there.
any examples how to use scripting? e.g when one has free text and wants to create a new field based on some part of the original document using painless script
Part 2?
ua-cam.com/video/pl__VEjv_4Q/v-deo.html
Can we export the filter as json
Good 1, thanks guys.
How do i look for spacific commands in the discover tab. Lets say i have a user executing "visudo" on a centos machine and he/she does this regularly. How do i look for all the instances of "visudo" in the discover tab. This was mostly windows based. would love to see Linux based as well.
i guess Im kinda randomly asking but do anyone know of a good place to stream new movies online?
@Ulises River I would suggest flixzone. Just search on google for it =)
@Malachi Diego Yup, been using flixzone for since april myself :)
@Malachi Diego Thanks, signed up and it seems to work :) I really appreciate it!
@Ulises River Glad I could help :D
good, it was helpful
I have ES on production and use Kibana for a querying. But it is too slow. For example I use simple search like user_name: SomeName and it is too slow. Could this be Kibana's problem or this or this problems deal with ES cluster?
I could suggest you to check/make sure if you have 'index lifecycles' set, it could help reduce memory load
Screen is not clear
lousy audio quality. Can't watch it, sorry
how to write where command in kibana eg. where eventcode = 4688 ?
event.code : "4688"