# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1882 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1883 --- ## [\[ERROR\]\[logstash.agent Failed to execute action {:id=\>:main...}](https://discuss.elastic.co/t/error-logstash-agent-failed-to-execute-action-id-main/200248)
**Author:** [@a.gavric](https://discuss.elastic.co/u/a.gavric)\ **Replies:** 1\ **Last updated:** [September 23, 2019, 6:17am UTC](https://discuss.elastic.co/t/error-logstash-agent-failed-to-execute-action-id-main/200248 "2019-09-23T06:17:46Z")
Hello Everyone, i have been experiencing a problem with starting the pipeline ever since turning on SSL connection for Elasticsearch, Kibana and Logstash. My configuration is below: input { beats { port =\> 6969 } } … --- ## [Clarification on logstash configuration](https://discuss.elastic.co/t/clarification-on-logstash-configuration/200619)
**Author:** [@durgaram](https://discuss.elastic.co/u/durgaram)\ **Replies:** 2\ **Last updated:** [September 23, 2019, 5:09am UTC](https://discuss.elastic.co/t/clarification-on-logstash-configuration/200619 "2019-09-23T05:09:11Z")
I am trying to install ELK stack 7.3.2, I (filebeat included) have used the the following logstash conf., the fieldname logappname is not found in the kibana. Am I missing something? input { beats { port =\> "5044" } … --- ## [Clarification on if/else behavior in output](https://discuss.elastic.co/t/clarification-on-if-else-behavior-in-output/200617)
**Author:** [@TechGeekNZ](https://discuss.elastic.co/u/TechGeekNZ)\ **Replies:** 2\ **Last updated:** [September 23, 2019, 4:23am UTC](https://discuss.elastic.co/t/clarification-on-if-else-behavior-in-output/200617 "2019-09-23T04:23:01Z")
Heya all, I want to confirm whether the particular behavior i'm seeing is normal and if there is another approach I should take towards my config. Situation is that I have multiple inputs on a single pipeline, and am a… --- ## [Total aggregations](https://discuss.elastic.co/t/total-aggregations/200143)
**Author:** [@heather-lau](https://discuss.elastic.co/u/heather-lau)\ **Replies:** 2\ **Last updated:** [September 23, 2019, 3:56am UTC](https://discuss.elastic.co/t/total-aggregations/200143 "2019-09-23T03:56:29Z")
How can I get total aggregations without set the size to 1000000 and get the length of buckets? please help. --- ## [LOgstash "Citcuit brealing exception"](https://discuss.elastic.co/t/logstash-citcuit-brealing-exception/200613)
**Author:** [@Prabia\_Sharma](https://discuss.elastic.co/u/Prabia_Sharma)\ **Replies:** 0\ **Last updated:** [September 23, 2019, 1:53am UTC](https://discuss.elastic.co/t/logstash-citcuit-brealing-exception/200613 "2019-09-23T01:53:18Z")
l l Hello Experts I am experiencing issues with logstash which is remotely conneced to elasticsearch having bth the images on docker logstash\_1 | \[2019-09-20T03:06:21,384\]\[INFO \]\[logstash.outputs.elasticsearch\] retr… --- ## [Upgrading Elasticsearch from 1.3.7 to 7.3.2](https://discuss.elastic.co/t/upgrading-elasticsearch-from-1-3-7-to-7-3-2/200602)
**Author:** [@Siva\_Karan](https://discuss.elastic.co/u/Siva_Karan)\ **Replies:** 3\ **Last updated:** [September 22, 2019, 6:46pm UTC](https://discuss.elastic.co/t/upgrading-elasticsearch-from-1-3-7-to-7-3-2/200602 "2019-09-22T18:46:32Z")
Hi, Is this any risk if we upgrading elasticsearch from 1.3.7 to 7.3.2 using Reindex API --- ## [Readiness check failure when enabling OIDC authentication](https://discuss.elastic.co/t/readiness-check-failure-when-enabling-oidc-authentication/200554)
**Author:** [@robcoward](https://discuss.elastic.co/u/robcoward)\ **Replies:** 2\ **Last updated:** [September 22, 2019, 6:16pm UTC](https://discuss.elastic.co/t/readiness-check-failure-when-enabling-oidc-authentication/200554 "2019-09-22T18:16:01Z")
I'm trying to enable OIDC authentication in elastic/kibana deployed by the operator, having enabled the platinum subscription trial. The operator is starting the required number of pods and they are coming up as running … --- ## [Elasticsearch wont start on windows 10](https://discuss.elastic.co/t/elasticsearch-wont-start-on-windows-10/200603)
**Author:** [@Naaman\_Numansen](https://discuss.elastic.co/u/Naaman_Numansen)\ **Replies:** 0\ **Last updated:** [September 22, 2019, 6:10pm UTC](https://discuss.elastic.co/t/elasticsearch-wont-start-on-windows-10/200603 "2019-09-22T18:10:03Z")
The past week i have been troubling to get Elastic-search working on my windows 10 laptop again. 2 weeks ago Elastic worked just fine. I don't know what the cause is because i won't get any logs or data when opening Elas… --- ## [Unable to Install Elastic 7.3.1 on windows machine](https://discuss.elastic.co/t/unable-to-install-elastic-7-3-1-on-windows-machine/200598)
**Author:** [@inext3211](https://discuss.elastic.co/u/inext3211)\ **Replies:** 0\ **Last updated:** [September 22, 2019, 5:29pm UTC](https://discuss.elastic.co/t/unable-to-install-elastic-7-3-1-on-windows-machine/200598 "2019-09-22T17:29:56Z")
Getting an error while installation 7.3.1 --- ## [Could not index event to Elasticsearch after upgrade](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-after-upgrade/200593)
**Author:** [@hackdefendr](https://discuss.elastic.co/u/hackdefendr)\ **Replies:** 4\ **Last updated:** [September 22, 2019, 3:15pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-after-upgrade/200593 "2019-09-22T15:15:46Z")
\[2019-09-22T09:37:34,941\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"logstash-2019.09.22", :\_type=\>"doc", :routing=\>nil}, #\ **Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\ **Replies:** 11\ **Last updated:** [September 22, 2019, 2:30pm UTC](https://discuss.elastic.co/t/2-data-nodes-being-used-unevenly/200521 "2019-09-22T14:30:18Z") ES - v6.4.1 3Master, 2Data, 2Coord nodes One replica setup. I use \_routing. Can somebody please explain me the below behavior ?? When i send continuous requests to my both coordinating nodes, i have observed that onl… --- ## [Logstash is not pushing logs to ES intermittently](https://discuss.elastic.co/t/logstash-is-not-pushing-logs-to-es-intermittently/200582)
**Author:** [@madurad](https://discuss.elastic.co/u/madurad)\ **Replies:** 0\ **Last updated:** [September 22, 2019, 1:05pm UTC](https://discuss.elastic.co/t/logstash-is-not-pushing-logs-to-es-intermittently/200582 "2019-09-22T13:05:56Z")
I've configured the ES in AWS in elasticsearch service, and logstash is configured separately in another server. All my production servers are pushing logs to logstash via filebeat services. This system was working end t… --- ## [Decode URL Query After use KV Filter](https://discuss.elastic.co/t/decode-url-query-after-use-kv-filter/200579)
**Author:** [@gholeh89](https://discuss.elastic.co/u/gholeh89)\ **Replies:** 0\ **Last updated:** [September 22, 2019, 11:53am UTC](https://discuss.elastic.co/t/decode-url-query-after-use-kv-filter/200579 "2019-09-22T11:53:05Z")
Hi, I am new to Logstash and my case need get all logs from s3 cloudfront logs format the problem when using decode filter plugin this my code Blockquote input { s3 { bucket =\> "test" access\_key\_id =\> "test" … --- ## [What metafields does storedFields("\_none\_") return?](https://discuss.elastic.co/t/what-metafields-does-storedfields-none-return/200465)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 1\ **Last updated:** [September 22, 2019, 11:37am UTC](https://discuss.elastic.co/t/what-metafields-does-storedfields-none-return/200465 "2019-09-22T11:37:03Z")
Can someone explain what metafield does storedFields("\_none") return? As per the javadoc Adds stored fields to load and return (note, it must be stored) as part of the search request. To disable the stored fields enti… --- ## [Options for personalized searches](https://discuss.elastic.co/t/options-for-personalized-searches/200574)
**Author:** [@Zaid\_Amir](https://discuss.elastic.co/u/Zaid_Amir)\ **Replies:** 0\ **Last updated:** [September 22, 2019, 11:18am UTC](https://discuss.elastic.co/t/options-for-personalized-searches/200574 "2019-09-22T11:18:58Z")
Hi, I am looking for options in elasticsearch to design an index(s) that can allow personalized searches. Lets assume the example given in ES 6.8 documentation on searching twitter followers. In this example it suggest… --- ## [Migration from aws managed to on-prem infra](https://discuss.elastic.co/t/migration-from-aws-managed-to-on-prem-infra/200573)
**Author:** [@asadrao123](https://discuss.elastic.co/u/asadrao123)\ **Replies:** 0\ **Last updated:** [September 22, 2019, 11:16am UTC](https://discuss.elastic.co/t/migration-from-aws-managed-to-on-prem-infra/200573 "2019-09-22T11:16:05Z")
Hi, We are using aws managed elasticsearch service for our e-comm web application, the indexes are around 50K, and the managed service is running in vpc it is not exposed to internet, initially our whole application inf… --- ## [Cluster Name | Elasticsearch Watcher](https://discuss.elastic.co/t/cluster-name-elasticsearch-watcher/200572)
**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\ **Replies:** 0\ **Last updated:** [September 22, 2019, 11:07am UTC](https://discuss.elastic.co/t/cluster-name-elasticsearch-watcher/200572 "2019-09-22T11:07:46Z")
Hi all, I was wondering is it possible to retrieve the cluster name and put it in a watcher, without hard coding? I wish to make a watcher which alerts our team's slack channel with the cluster name if any issues arise … --- ## [ELK Stack on GCP](https://discuss.elastic.co/t/elk-stack-on-gcp/200262)
**Author:** [@premkumar](https://discuss.elastic.co/u/premkumar)\ **Replies:** 1\ **Last updated:** [September 22, 2019, 10:06am UTC](https://discuss.elastic.co/t/elk-stack-on-gcp/200262 "2019-09-22T10:06:20Z")
Hi Team, Could someone please direct me to the elastic documentation on how to install ELK stack on GCP. Thanks. --- ## [Watcher updates\_documents is not working after v7.3](https://discuss.elastic.co/t/watcher-updates-documents-is-not-working-after-v7-3/200550)
**Author:** [@Shaw](https://discuss.elastic.co/u/Shaw)\ **Replies:** 1\ **Last updated:** [September 22, 2019, 9:20am UTC](https://discuss.elastic.co/t/watcher-updates-documents-is-not-working-after-v7-3/200550 "2019-09-22T09:20:36Z")
Hi, I am keep getting the below error that failed to execute the update documents in Watcher after we upgraded to Kibana v7.3. , we have valid certificate but Kibana does not seem to agree, how can I check and any advi… --- ## [Ingest node or logstash](https://discuss.elastic.co/t/ingest-node-or-logstash/200547)
**Author:** [@Ankit\_Sawant](https://discuss.elastic.co/u/Ankit_Sawant)\ **Replies:** 4\ **Last updated:** [September 22, 2019, 9:18am UTC](https://discuss.elastic.co/t/ingest-node-or-logstash/200547 "2019-09-22T09:18:15Z")
I want to read log files from a folder into which a new file is added every 1 hour.I need to filter these files. Which processing element should i choose ingest node or logStash ? please explain reasons also as i have … --- ## [How to fix hitting maximum shards open error](https://discuss.elastic.co/t/how-to-fix-hitting-maximum-shards-open-error/200502)
**Author:** [@yuecong](https://discuss.elastic.co/u/yuecong)\ **Replies:** 9\ **Last updated:** [September 22, 2019, 8:12am UTC](https://discuss.elastic.co/t/how-to-fix-hitting-maximum-shards-open-error/200502 "2019-09-22T08:12:26Z")
I got the following error when writing docs to Elasticseach cluster. it works till today. I guess I need to increase some limit, but can not find any doc on this yet. Validation Failed: 1: this action would add \[2\] tot… --- ## [Update index associated to Visualizations](https://discuss.elastic.co/t/update-index-associated-to-visualizations/200512)
**Author:** [@Camilo\_Diaz](https://discuss.elastic.co/u/Camilo_Diaz)\ **Replies:** 1\ **Last updated:** [September 22, 2019, 2:56am UTC](https://discuss.elastic.co/t/update-index-associated-to-visualizations/200512 "2019-09-22T02:56:00Z")
How can I update the index\_id associated to a visualisation? I first enabled the Suricata Module from Filebeat and all the dashboard and visualisations were loading correctly. (Output to Elasticsearch and Kibana) Due … --- ## [Full packet inspection with beats?](https://discuss.elastic.co/t/full-packet-inspection-with-beats/200555)
**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\ **Replies:** 0\ **Last updated:** [September 22, 2019, 1:53am UTC](https://discuss.elastic.co/t/full-packet-inspection-with-beats/200555 "2019-09-22T01:53:07Z")
How can the beat(s) system be used to listen/ingest full packets, ie i don't just want the headers, but the data also. Scenario: Can one or more beats be used to listen for SMB TCP traffic and identify the SMBv1 dialect… --- ## [Kibana Tutorial 404 Error](https://discuss.elastic.co/t/kibana-tutorial-404-error/200552)
**Author:** [@ElkLearner115](https://discuss.elastic.co/u/ElkLearner115)\ **Replies:** 1\ **Last updated:** [September 22, 2019, 1:52am UTC](https://discuss.elastic.co/t/kibana-tutorial-404-error/200552 "2019-09-22T01:52:10Z")
Hi I'm new to ELK and was trying to go through the Kibana tutorial. I am having issues loading the sample data set shakespeare, account and logs I tried both with curl and powershell loading the data: curl -elastic -H … --- ## [Object mapping issue](https://discuss.elastic.co/t/object-mapping-issue/195739)
**Author:** [@Osama\_Tariq](https://discuss.elastic.co/u/Osama_Tariq)\ **Replies:** 20\ **Last updated:** [September 22, 2019, 12:54am UTC](https://discuss.elastic.co/t/object-mapping-issue/195739 "2019-09-22T00:54:27Z")
Hi, I am getting following issue in elasticsearch. Object mapping for \[ClientIP\] tried to parse field \[ClientIP\] as object. How do I fixed configuration to adjust the mapping ? \[2019-08-19T16:03:30,213\]\[DEBUG\]\[o.e.a.b.… --- ## [Help with Ruby code please (Using user input in searches)](https://discuss.elastic.co/t/help-with-ruby-code-please-using-user-input-in-searches/200545)
**Author:** [@michaelberg](https://discuss.elastic.co/u/michaelberg)\ **Replies:** 0\ **Last updated:** [September 21, 2019, 7:44pm UTC](https://discuss.elastic.co/t/help-with-ruby-code-please-using-user-input-in-searches/200545 "2019-09-21T19:44:48Z")
puts "\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*" puts "\* This program will search Elastic Search Cloud \*" puts "\* based on a single field name and a single value \*" puts "\* for the given field name … --- ## [Mapping for query life events of user](https://discuss.elastic.co/t/mapping-for-query-life-events-of-user/200541)
**Author:** [@aess](https://discuss.elastic.co/u/aess)\ **Replies:** 0\ **Last updated:** [September 21, 2019, 5:57pm UTC](https://discuss.elastic.co/t/mapping-for-query-life-events-of-user/200541 "2019-09-21T17:57:51Z")
Mapping for time-series data Alind · Lecture 13 · a minute ago Hi, I am trying to create a mapping where intent is to record events for a user and aggregate them based on any given condition, for example a user … --- ## [120s Timeout on Elasticsearch Queries](https://discuss.elastic.co/t/120s-timeout-on-elasticsearch-queries/199735)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 5\ **Last updated:** [September 18, 2019, 12:41pm UTC](https://discuss.elastic.co/t/120s-timeout-on-elasticsearch-queries/199735 "2019-09-18T12:41:12Z")
I have two clusters (ES 7.3.1) that are hosted by an internal team here at my org. Each cluster has 6 data nodes, three master nodes, and one cluster has two client nodes that perform searches against both clusters simul… --- ## [Is it possible to migrate visualizations from version 4.1 to 6.4](https://discuss.elastic.co/t/is-it-possible-to-migrate-visualizations-from-version-4-1-to-6-4/200220)
**Author:** [@jeffzhao](https://discuss.elastic.co/u/jeffzhao)\ **Replies:** 4\ **Last updated:** [September 21, 2019, 2:31pm UTC](https://discuss.elastic.co/t/is-it-possible-to-migrate-visualizations-from-version-4-1-to-6-4/200220 "2019-09-21T14:31:53Z")
We want to upgrade from Elasticsearch 1.7 + Kibana 4.1 to Elasticsearch 6.4 + Kibana 6.4. We have setup a new cluster using Elasticsearch 6.4 + Kibana 6.4. We also migrated the Elasticsearch index using reindex-from-rem… --- ## [Want to extract day number and day time from current data](https://discuss.elastic.co/t/want-to-extract-day-number-and-day-time-from-current-data/200530)
**Author:** [@shahrukh](https://discuss.elastic.co/u/shahrukh)\ **Replies:** 0\ **Last updated:** [September 21, 2019, 1:29pm UTC](https://discuss.elastic.co/t/want-to-extract-day-number-and-day-time-from-current-data/200530 "2019-09-21T13:29:16Z")
I am reading cloudfront logs using logstash and storing the data into elasticsearch, the process works fines and stores all the required fields, so far I have 11M records in cluster. Now for the statistics purposes I fee… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1881) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1883)