# Top **URL:** https://discuss.elastic.co/top.md?page=101&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 102 --- ## [Elasticseach 7.x - Can't add new node to cluster](https://discuss.elastic.co/t/elasticseach-7-x-cant-add-new-node-to-cluster/197941)
**Author:** [@humartinez](https://discuss.elastic.co/u/humartinez)\ **Replies:** 15\ **Last updated:** [September 5, 2019, 6:23pm UTC](https://discuss.elastic.co/t/elasticseach-7-x-cant-add-new-node-to-cluster/197941 "2019-09-05T18:23:23Z")
Hi there, Im having an issue trying to add a new server to an existing cluster thats is using encription and Im getting the following error. \[2019-09-03T20:11:10,344\]\[WARN \]\[o.e.c.c.ClusterFormationFailureHelper\] \[elas… --- ## [Kibana data suddenly got missing!](https://discuss.elastic.co/t/kibana-data-suddenly-got-missing/230943)
**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\ **Replies:** 16\ **Last updated:** [May 6, 2020, 5:59am UTC](https://discuss.elastic.co/t/kibana-data-suddenly-got-missing/230943 "2020-05-06T05:59:05Z")
Today morning when I've tried to open my Kibana, I found the following error in my browser. Then I've restarted Kibana. But after the restart, all of my indexes have been gone. After that, to view all my works such… --- ## [Elastic search logstash](https://discuss.elastic.co/t/elastic-search-logstash/120568)
**Author:** [@Ajit\_Kumar1](https://discuss.elastic.co/u/Ajit_Kumar1)\ **Replies:** 34\ **Last updated:** [February 27, 2018, 10:27am UTC](https://discuss.elastic.co/t/elastic-search-logstash/120568 "2018-02-27T10:27:36Z")
Hi all, I want to use logstash for real time syncing of data in both mongodb and elasticsearch. i am using mongoosastic for real time syncing and it is working fine but i am not able to trnasfer the existing mongodb d… --- ## [AutoCompletion Suggester - Duplicate record in suggestion return](https://discuss.elastic.co/t/autocompletion-suggester-duplicate-record-in-suggestion-return/16950)
**Author:** [@zkidkid](https://discuss.elastic.co/u/zkidkid)\ **Replies:** 13\ **Last updated:** [March 17, 2016, 11:15am UTC](https://discuss.elastic.co/t/autocompletion-suggester-duplicate-record-in-suggestion-return/16950 "2016-03-17T11:15:15Z")
Hi All, I have problem with AutoCompletion Suggester. When I index same word in record, AutoCompletion will return duplicate that record, Here is restful: curl -X PUT 10.30.58.105:9200/completion curl -X DELETE… --- ## [Filebeat on Ubuntu hosts getting sporadic error: "Error decoding JSON:"](https://discuss.elastic.co/t/filebeat-on-ubuntu-hosts-getting-sporadic-error-error-decoding-json/258783)
**Author:** [@humbeGar](https://discuss.elastic.co/u/humbeGar)\ **Replies:** 9\ **Last updated:** [August 11, 2021, 2:40pm UTC](https://discuss.elastic.co/t/filebeat-on-ubuntu-hosts-getting-sporadic-error-error-decoding-json/258783 "2021-08-11T14:40:03Z")
Description We are using Filebeat to collect data from multiple systems (~300 different hosts) and OSes ( Windows, Ubuntu, Mac OS). We are collecting around 125Million events coming from .ndjson files per week using Fil… --- ## [Create nested JSON with aggregate filter plugin](https://discuss.elastic.co/t/create-nested-json-with-aggregate-filter-plugin/192690)
**Author:** [@vschaefer](https://discuss.elastic.co/u/vschaefer)\ **Replies:** 12\ **Last updated:** [July 31, 2019, 12:37pm UTC](https://discuss.elastic.co/t/create-nested-json-with-aggregate-filter-plugin/192690 "2019-07-31T12:37:07Z")
Hi, i am trying to import data from mySQL DB by Logstash and would like to create a nested JSON. The data from the db looks as follows: | fkm\_family | s\_family | pkm\_article | | ---------- | -------- | ----------- | |… --- ## [Missing Docker Meta Data Fields in Kibana](https://discuss.elastic.co/t/missing-docker-meta-data-fields-in-kibana/101977)
**Author:** [@stevejr](https://discuss.elastic.co/u/stevejr)\ **Replies:** 15\ **Last updated:** [October 22, 2017, 7:12pm UTC](https://discuss.elastic.co/t/missing-docker-meta-data-fields-in-kibana/101977 "2017-10-22T19:12:24Z")
Hi, I am evaluating the 6.0.0-beta2 release of Filebeat as I am interested in the docker metadata feature. In my filebeat.yml I have added the following in my prospector: processors: add\_docker\_metadata:~ Filebeat i… --- ## [Calculate timestamp duration to next document](https://discuss.elastic.co/t/calculate-timestamp-duration-to-next-document/297244)
**Author:** [@jannik.b](https://discuss.elastic.co/u/jannik.b)\ **Replies:** 21\ **Last updated:** [February 21, 2022, 4:08pm UTC](https://discuss.elastic.co/t/calculate-timestamp-duration-to-next-document/297244 "2022-02-21T16:08:39Z")
Hi, this is my expected result: A new field "time\_taken" which in best case calculates in "ms" the used time between the timestamp in the documents. I would like to sort them later in a table so that I can analyze w… --- ## [PAcketbeat Flow wih CIDR search on Kibana](https://discuss.elastic.co/t/packetbeat-flow-wih-cidr-search-on-kibana/130760)
**Author:** [@Tzathenah\_Peaneah\_Ha](https://discuss.elastic.co/u/Tzathenah_Peaneah_Ha)\ **Replies:** 18\ **Last updated:** [May 8, 2018, 10:11am UTC](https://discuss.elastic.co/t/packetbeat-flow-wih-cidr-search-on-kibana/130760 "2018-05-08T10:11:12Z")
Hi i have a packetbeat flow index with dest.ip :x.x.x.x which is working fine. What i need to do now is if it is possible to search based on CIDR notation instead of individual ips . Like if i want to find how much byte… --- ## [Elasticsearch Serviceで不明なメモリ圧迫](https://discuss.elastic.co/t/elasticsearch-service/235668)
**Author:** [@Masanori\_Mishima](https://discuss.elastic.co/u/Masanori_Mishima)\ **Replies:** 10\ **Last updated:** [July 8, 2020, 2:13am UTC](https://discuss.elastic.co/t/elasticsearch-service/235668 "2020-07-08T02:13:03Z")
Elasticsearch Service上に立てているインスタンスへ大量の検索を行っていないにもかかわらず、 JVM Memory Pressureが80%,99%になるなどして、インスタンス自体が停止してしまうのですが どこから見ていけばよいでしょうか。また何が原因なのでしょうか。 以下、WARNログ \[instance-0000000005\] \[apm-7.4.1-error-000122\]\[0\] marking and … --- ## [No data after CSV Export - Kibana](https://discuss.elastic.co/t/no-data-after-csv-export-kibana/289910)
**Author:** [@njain213](https://discuss.elastic.co/u/njain213)\ **Replies:** 19\ **Last updated:** [November 30, 2021, 7:45am UTC](https://discuss.elastic.co/t/no-data-after-csv-export-kibana/289910 "2021-11-30T07:45:54Z")
Hello Team, In reference to No data after CSV Export - Kibana I am also facing exact same issue. Could you please help me in fixing it? Note:- I am using kibana 7.9.3. --- ## [Problem. Filebeat 7.4.0 excesive syslog size](https://discuss.elastic.co/t/problem-filebeat-7-4-0-excesive-syslog-size/208291)
**Author:** [@salva](https://discuss.elastic.co/u/salva)\ **Replies:** 20\ **Last updated:** [November 26, 2019, 9:35am UTC](https://discuss.elastic.co/t/problem-filebeat-7-4-0-excesive-syslog-size/208291 "2019-11-26T09:35:41Z")
Hi. I have a problem with Filebeats 7.4.0. It generates a very large syslog. If I don't stop the service, it would take up all the disk space. Attached configuration (filebeat.yml): --- ## [Logstash S3 Input Plugin Error](https://discuss.elastic.co/t/logstash-s3-input-plugin-error/245104)
**Author:** [@Kevin\_f](https://discuss.elastic.co/u/Kevin_f)\ **Replies:** 14\ **Last updated:** [August 16, 2020, 3:19pm UTC](https://discuss.elastic.co/t/logstash-s3-input-plugin-error/245104 "2020-08-16T15:19:56Z")
Hi All, I am using S3 plugin to ingest logs from Oracle Cloud Infrastructure bucket. They have advised that the S3 plugin is what can be used. So I have now configured the input config as: input { s3 { bucket =\> … --- ## [Geo\_distance query always returns results, regardless of distance, latitude, or longitude](https://discuss.elastic.co/t/geo-distance-query-always-returns-results-regardless-of-distance-latitude-or-longitude/169968)
**Author:** [@rythem](https://discuss.elastic.co/u/rythem)\ **Replies:** 12\ **Last updated:** [February 27, 2019, 3:44pm UTC](https://discuss.elastic.co/t/geo-distance-query-always-returns-results-regardless-of-distance-latitude-or-longitude/169968 "2019-02-27T15:44:39Z")
I've been trying out the geo\_distance query on the latest version of Elasticsearch (6.6), but it seems I always get hits/results back. If I follow the example here and change either the latitude/longitude to something w… --- ## [Unable to start ElasticSearch after install on CENTOS 7](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-install-on-centos-7/243733)
**Author:** [@ian-hosting](https://discuss.elastic.co/u/ian-hosting)\ **Replies:** 13\ **Last updated:** [August 6, 2020, 6:27am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-install-on-centos-7/243733 "2020-08-06T06:27:37Z")
Hi Went through the steps to install the latest ElasticSearch via rpm and all seemed to go well but when I try to start it, there is an error First time attempting to install this so am a bit lost as to where to look f… --- ## [Why does Kibana stops after 10seconds?](https://discuss.elastic.co/t/why-does-kibana-stops-after-10seconds/312860)
**Author:** [@Vinyl\_Down](https://discuss.elastic.co/u/Vinyl_Down)\ **Replies:** 12\ **Last updated:** [August 25, 2022, 3:08pm UTC](https://discuss.elastic.co/t/why-does-kibana-stops-after-10seconds/312860 "2022-08-25T15:08:59Z")
Dear all, I really didn't want to post a question here, and i am trying for a week to fix my issue, but i can't seem to figure this out. I am trying to do some tests on Elastic Search Endpoint Security (using elastic a… --- ## [How to calculate a delta value and show it in visualization](https://discuss.elastic.co/t/how-to-calculate-a-delta-value-and-show-it-in-visualization/261154)
**Author:** [@nguyenduyhung1979](https://discuss.elastic.co/u/nguyenduyhung1979)\ **Replies:** 10\ **Last updated:** [January 16, 2021, 7:41am UTC](https://discuss.elastic.co/t/how-to-calculate-a-delta-value-and-show-it-in-visualization/261154 "2021-01-16T07:41:20Z")
I have a data in format below: Release Num - Server Name - CPU Average 15.4.001 - App01 - 55.56 15.4.001 - App02 - 34.12 16.1.003 - App01 - 71.04 16.1.003 - App02 - 26.82 What I want is to have a graph displaying o… --- ## [Removing seconds from time stamp field](https://discuss.elastic.co/t/removing-seconds-from-time-stamp-field/33995)
**Author:** [@bubu.senapati](https://discuss.elastic.co/u/bubu.senapati)\ **Replies:** 12\ **Last updated:** [November 6, 2015, 5:40pm UTC](https://discuss.elastic.co/t/removing-seconds-from-time-stamp-field/33995 "2015-11-06T17:40:47Z")
i want to make the seconds field from the timestamp field 2015-10-27T00:07:20.168+0000 in logstash 00 and create the new time stamp. Could u please help me how can i achieve this. From 2015-10-27T00:07:20.168+0000 to 2… --- ## [7.2.0 spend more time on query \`next\_doc\` and aggregation \`collect\` than 6.8.0](https://discuss.elastic.co/t/7-2-0-spend-more-time-on-query-next-doc-and-aggregation-collect-than-6-8-0/196489)
**Author:** [@hackerwin7](https://discuss.elastic.co/u/hackerwin7)\ **Replies:** 13\ **Last updated:** [September 12, 2019, 1:46pm UTC](https://discuss.elastic.co/t/7-2-0-spend-more-time-on-query-next-doc-and-aggregation-collect-than-6-8-0/196489 "2019-09-12T13:46:55Z")
Recently，we upgrade our es cluster to 7.2.0 and find the same search took time is longer than 6.8.0 . so we prepare for two cluster (7.2 and 6.8) with same index data set , same mapping, and execute same search. we fou… --- ## [Elastic 7.9.1 - Security (SIEM) - Your visualization has error(s) - \[illegal\_argument\_exception\]](https://discuss.elastic.co/t/elastic-7-9-1-security-siem-your-visualization-has-error-s-illegal-argument-exception/250265)
**Author:** [@Derick\_Jansen](https://discuss.elastic.co/u/Derick_Jansen)\ **Replies:** 15\ **Last updated:** [October 12, 2020, 8:05pm UTC](https://discuss.elastic.co/t/elastic-7-9-1-security-siem-your-visualization-has-error-s-illegal-argument-exception/250265 "2020-10-12T20:05:40Z")
Hi, We have a brand new cluster install to test 7.9.1 and the security features in particular. When navigating to the Overview page we get the following error. \[illegal\_argument\_exception\] Text fields are not optimise… --- ## [\[BUG?\] Wrong aggregated values shown in visualization](https://discuss.elastic.co/t/bug-wrong-aggregated-values-shown-in-visualization/100888)
**Author:** [@pranav0091](https://discuss.elastic.co/u/pranav0091)\ **Replies:** 10\ **Last updated:** [September 26, 2017, 2:55pm UTC](https://discuss.elastic.co/t/bug-wrong-aggregated-values-shown-in-visualization/100888 "2017-09-26T14:55:50Z")
I seem to have run across what is essentially a deal-breaking bug for my use case: When Visualizing an Average of a numeric field on the Y-axis versus a name on the X-axis the data shown differs substantially depending … --- ## [What is the best mix of index and shards on Elastic Cloud](https://discuss.elastic.co/t/what-is-the-best-mix-of-index-and-shards-on-elastic-cloud/276896)
**Author:** [@kwoxer](https://discuss.elastic.co/u/kwoxer)\ **Replies:** 29\ **Last updated:** [July 12, 2021, 5:27am UTC](https://discuss.elastic.co/t/what-is-the-best-mix-of-index-and-shards-on-elastic-cloud/276896 "2021-07-12T05:27:40Z")
As the title says, we are using Elastic Cloud with 3 Elastic Instances. We are currently having 338 shards: but just having one index: Is this a proper way? Or should I create one index for each day maybe? (btw … --- ## [What is best node configuration in 3 node](https://discuss.elastic.co/t/what-is-best-node-configuration-in-3-node/313411)
**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\ **Replies:** 9\ **Last updated:** [September 6, 2022, 1:35am UTC](https://discuss.elastic.co/t/what-is-best-node-configuration-in-3-node/313411 "2022-09-06T01:35:39Z")
Hello, i have 3 nodes to operate Elasticsearch and Kibana. I have to set role node by node (master? data? ingest?) I heard that node.roles don't need to be configured in small cluster size (smaller than 3 nodes) It me… --- ## [Division in Scripted field](https://discuss.elastic.co/t/division-in-scripted-field/244715)
**Author:** [@Ramadevi](https://discuss.elastic.co/u/Ramadevi)\ **Replies:** 9\ **Last updated:** [August 13, 2020, 7:04am UTC](https://discuss.elastic.co/t/division-in-scripted-field/244715 "2020-08-13T07:04:18Z")
Hi Team, We are trying to create percentage based on 2 specific properties using Scripted field in kibana. Below is the code int AF\_failures = 0; int FL\_failures = 0; int count = 0; if(!(doc\['MarketingCarrier.keyword… --- ## [Elasticsearch service stops, site not available; fresh install on Ubuntu 18.04](https://discuss.elastic.co/t/elasticsearch-service-stops-site-not-available-fresh-install-on-ubuntu-18-04/136944)
**Author:** [@crichmond](https://discuss.elastic.co/u/crichmond)\ **Replies:** 9\ **Last updated:** [June 22, 2018, 3:10pm UTC](https://discuss.elastic.co/t/elasticsearch-service-stops-site-not-available-fresh-install-on-ubuntu-18-04/136944 "2018-06-22T15:10:31Z")
Hello all; New to Elasticstack, and already running into troubles :frowning: I have a fresh Ubuntu 18.04 VM just created a few days ago. Basic install, have only added SSH and Webmin functionality. Yesterday, started … --- ## [Ssl error on accessing Kibana interface](https://discuss.elastic.co/t/ssl-error-on-accessing-kibana-interface/331999)
**Author:** [@ishan.abhinit](https://discuss.elastic.co/u/ishan.abhinit)\ **Replies:** 17\ **Last updated:** [May 2, 2023, 7:01pm UTC](https://discuss.elastic.co/t/ssl-error-on-accessing-kibana-interface/331999 "2023-05-02T19:01:07Z")
I have set up Elasticsearch and Kibana on my server loganalysisclass1.cacr.camp. I have also setup Certbot for loganalysisclass1.cacr.camp using this. I can access Kibana on http://loganalysisclass1.cacr.camp:5601 but wh… --- ## [FileBeat in Windows and LogStash in Linux](https://discuss.elastic.co/t/filebeat-in-windows-and-logstash-in-linux/73529)
**Author:** [@Shmuel.Bouhnik](https://discuss.elastic.co/u/Shmuel.Bouhnik)\ **Replies:** 11\ **Last updated:** [February 1, 2017, 3:40pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-and-logstash-in-linux/73529 "2017-02-01T15:40:23Z")
Hi, I running FileBeat on Windows and LogStash on Linux. When I'm sending a log file from FileBeat to LogStash ... LogStash is getting in utf8 and the grok filtering is not working. But when I'm sending the file fro… --- ## [Query internet bandwidth usage?](https://discuss.elastic.co/t/query-internet-bandwidth-usage/32541)
**Author:** [@allenmchan](https://discuss.elastic.co/u/allenmchan)\ **Replies:** 9\ **Last updated:** [October 22, 2015, 6:37am UTC](https://discuss.elastic.co/t/query-internet-bandwidth-usage/32541 "2015-10-22T06:37:49Z")
Hi all, My company is about to move to multi-datacenter implementation of Elasticsearch. Each datacenter will have a local cluster that stores the data. We will have tribe nodes (that kibana connects to) in 1 or 2 of t… --- ## [Shard allocation - strange behaviour of index tier preference](https://discuss.elastic.co/t/shard-allocation-strange-behaviour-of-index-tier-preference/326746)
**Author:** [@Michael\_Hyatt](https://discuss.elastic.co/u/Michael_Hyatt)\ **Replies:** 11\ **Last updated:** [March 8, 2023, 1:56pm UTC](https://discuss.elastic.co/t/shard-allocation-strange-behaviour-of-index-tier-preference/326746 "2023-03-08T13:56:43Z")
Hi there, I have a hot-warm cluster with 2 hot and 2 warm nodes (Elastic cloud v8.6.1). I also have an index that I want to distribute to both, hot and warm-tier nodes. To do that, I want to set up the number of replica… --- ## [Metricbeat AWS module not sending data](https://discuss.elastic.co/t/metricbeat-aws-module-not-sending-data/260200)
**Author:** [@Jurilz](https://discuss.elastic.co/u/Jurilz)\ **Replies:** 17\ **Last updated:** [January 11, 2021, 11:45am UTC](https://discuss.elastic.co/t/metricbeat-aws-module-not-sending-data/260200 "2021-01-11T11:45:46Z")
Good day, I'm currently trying to collect AWS metrics with the Metricbeat AWS module. And although the status of metricbeat looks fine, elasticsearch doesn't seem to receive any data. my metricbeat.yml: metricbeat.con… --- ## [I have wrote a query in elastic search, but it shows data ffrom 5:00 am only.Before that 12:00 AM to 04:00 AM data, it does not shows.Why it it like that only?it is problem due to time -zone or what?Kindly provide some suggestions.I am pasting query:](https://discuss.elastic.co/t/i-have-wrote-a-query-in-elastic-search-but-it-shows-data-ffrom-5-00-am-only-before-that-12-00-am-to-04-00-am-data-it-does-not-shows-why-it-it-like-that-only-it-is-problem-due-to-time-zone-or-what-kindly-provide-some-suggestions-i-am-pasting-query/109347)
**Author:** [@vinayak](https://discuss.elastic.co/u/vinayak)\ **Replies:** 12\ **Last updated:** [December 15, 2017, 5:55am UTC](https://discuss.elastic.co/t/i-have-wrote-a-query-in-elastic-search-but-it-shows-data-ffrom-5-00-am-only-before-that-12-00-am-to-04-00-am-data-it-does-not-shows-why-it-it-like-that-only-it-is-problem-due-to-time-zone-or-what-kindly-provide-some-suggestions-i-am-pasting-query/109347 "2017-12-15T05:55:16Z")
POST alertbrowser/\_search?filter\_path=aggregations.hourlyData.buckets { "query":{ "bool":{ "must": \[ { "match": { "projectId": "aasish-webdemo-1-1498031057532" } … --- ## [Issue on setting up Logstash](https://discuss.elastic.co/t/issue-on-setting-up-logstash/149679)
**Author:** [@pananth](https://discuss.elastic.co/u/pananth)\ **Replies:** 17\ **Last updated:** [September 25, 2018, 10:02am UTC](https://discuss.elastic.co/t/issue-on-setting-up-logstash/149679 "2018-09-25T10:02:52Z")
I am facing issue on configuring Logstash, have set java\_home with Jave 1.8.0\_171 (JDK) While running logstash -f logstash-sample.conf - throwing error as Oracle "" was unexpected at this time. On other side used N… --- ## [ELK suddenly colapsed](https://discuss.elastic.co/t/elk-suddenly-colapsed/48414)
**Author:** [@Anderson](https://discuss.elastic.co/u/Anderson)\ **Replies:** 12\ **Last updated:** [May 20, 2016, 6:03am UTC](https://discuss.elastic.co/t/elk-suddenly-colapsed/48414 "2016-05-20T06:03:16Z")
Hi there ! Our env is 11 physical machines with 128 GB ram. A lot of storage in RAID6. On 3 servers we have 1xmaster and 1x data node On 8 server we run 2x data node. Indexes have 8 primary shards + 2 replicas. New ind… --- ## [How to download data from an elasticsearch cloud index with elasticdump](https://discuss.elastic.co/t/how-to-download-data-from-an-elasticsearch-cloud-index-with-elasticdump/270431)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 9\ **Last updated:** [April 17, 2021, 12:20am UTC](https://discuss.elastic.co/t/how-to-download-data-from-an-elasticsearch-cloud-index-with-elasticdump/270431 "2021-04-17T00:20:51Z")
Hi, I am trying to download the data of an index with the elasticdump tool from the elasticsearch cloud but I get the following error : root@srvefevmmar:~# elasticdump \\ \> --input=https://elastic:secret@72dfe17217744236… --- ## [Why shards are not averagely placed in es cluster nodes](https://discuss.elastic.co/t/why-shards-are-not-averagely-placed-in-es-cluster-nodes/53208)
**Author:** [@figo10203](https://discuss.elastic.co/u/figo10203)\ **Replies:** 9\ **Last updated:** [June 22, 2016, 1:09am UTC](https://discuss.elastic.co/t/why-shards-are-not-averagely-placed-in-es-cluster-nodes/53208 "2016-06-22T01:09:55Z")
Hi,I have a question, when I add two nodes to my es cluster, the shards then relocate at once. But the issue is the shards including replica of most index(lighter ones in the graph) are not distributed averagely in the … --- ## [Access Denied Exception in elasticsearch v5.6](https://discuss.elastic.co/t/access-denied-exception-in-elasticsearch-v5-6/206276)
**Author:** [@amirhossein](https://discuss.elastic.co/u/amirhossein)\ **Replies:** 16\ **Last updated:** [November 20, 2019, 3:20pm UTC](https://discuss.elastic.co/t/access-denied-exception-in-elasticsearch-v5-6/206276 "2019-11-20T15:20:36Z")
Hi, i have a cluster with 3 nodes. elasticsearch UID is different and their GID is same, But when I get the information of the snapshot on the Kibana, all the processes failed, here is part of the logs of the snapshot: … --- ## [Kibana Dashboard not displaying any data after applying new license](https://discuss.elastic.co/t/kibana-dashboard-not-displaying-any-data-after-applying-new-license/178305)
**Author:** [@Paras\_Paul](https://discuss.elastic.co/u/Paras_Paul)\ **Replies:** 22\ **Last updated:** [April 29, 2019, 5:47pm UTC](https://discuss.elastic.co/t/kibana-dashboard-not-displaying-any-data-after-applying-new-license/178305 "2019-04-29T17:47:09Z")
Hi All, My Kibana Dashboard is not displaying any data after applying new license. Please suggest some trouble shooting steps to fix this --- ## [Поиск фразы в индексе со стеммингом](https://discuss.elastic.co/t/topic/74031)
**Author:** [@GreenX](https://discuss.elastic.co/u/GreenX)\ **Replies:** 11\ **Last updated:** [February 15, 2017, 8:54pm UTC](https://discuss.elastic.co/t/topic/74031 "2017-02-15T20:54:13Z")
Доброго времени суток! Есть индекс и поле в нем построенное со стеммингом. Не получается сделать поиск полной фразы. Т.е. на пример, надо найти точно "Электронный документ". Как ни пытался - ES первым выводит более длин… --- ## [Configure logstash to show logs from port 5002](https://discuss.elastic.co/t/configure-logstash-to-show-logs-from-port-5002/250205)
**Author:** [@Lusca\_lusca](https://discuss.elastic.co/u/Lusca_lusca)\ **Replies:** 19\ **Last updated:** [October 1, 2020, 11:44am UTC](https://discuss.elastic.co/t/configure-logstash-to-show-logs-from-port-5002/250205 "2020-10-01T11:44:56Z")
I am knew to ELK and I can't see the logs coming from port 5002 on kibana. Can anyone please help me configure logstash to send the logs to kibana? --- ## [Cross Cluster Replication Issue](https://discuss.elastic.co/t/cross-cluster-replication-issue/286943)
**Author:** [@Prabakar](https://discuss.elastic.co/u/Prabakar)\ **Replies:** 11\ **Last updated:** [October 19, 2021, 10:28pm UTC](https://discuss.elastic.co/t/cross-cluster-replication-issue/286943 "2021-10-19T22:28:45Z")
We are using Elasticsearch open source 7.13. We are trying to perform Cross Cluster Replication. We followed below steps. Created Index (Leader Index) on Cluster 1. Created cluster 1 as a remote cluster for cluster 2 … --- ## [Date, change day and month position](https://discuss.elastic.co/t/date-change-day-and-month-position/221606)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 10\ **Last updated:** [March 3, 2020, 6:28pm UTC](https://discuss.elastic.co/t/date-change-day-and-month-position/221606 "2020-03-03T18:28:39Z")
I have a field called "timeanddate" and I use it as timestamp. date { match =\> \["timeanddate", "HH:mm:ss MM/dd/yyyy"\] target =\> "@timestamp" } But I want to change the order of the date and put the day f… --- ## [New Install, No Data in Kibana](https://discuss.elastic.co/t/new-install-no-data-in-kibana/102382)
**Author:** [@leunammejii](https://discuss.elastic.co/u/leunammejii)\ **Replies:** 12\ **Last updated:** [October 16, 2017, 12:06am UTC](https://discuss.elastic.co/t/new-install-no-data-in-kibana/102382 "2017-10-16T00:06:26Z")
I am new to Elastic Stack and currently just "finished" my installation but I am not receiving any data in Kibana. I installed version 5.6.2 of Elasticsearch, Logstash, Kibana, and X-Pack all on the same host. I used net… --- ## [Tomcat log not detected after chnge the PATH on filebeat.yml](https://discuss.elastic.co/t/tomcat-log-not-detected-after-chnge-the-path-on-filebeat-yml/38267)
**Author:** [@Mohamed\_Ibrahim](https://discuss.elastic.co/u/Mohamed_Ibrahim)\ **Replies:** 10\ **Last updated:** [January 4, 2016, 9:27am UTC](https://discuss.elastic.co/t/tomcat-log-not-detected-after-chnge-the-path-on-filebeat-yml/38267 "2016-01-04T09:27:10Z")
my configuration like the below filebeat: prospectors: - paths: - /home/mohamed/localhost\_access\_log.2015-12-20.txt input\_type: syslog registry\_file: /var/lib/filebeat/registry output: ela… --- ## [APM Agent is not working on FIPS enabled java application](https://discuss.elastic.co/t/apm-agent-is-not-working-on-fips-enabled-java-application/261815)
**Author:** [@Dhanaraju\_Vasireddy](https://discuss.elastic.co/u/Dhanaraju_Vasireddy)\ **Replies:** 18\ **Last updated:** [February 3, 2021, 8:42am UTC](https://discuss.elastic.co/t/apm-agent-is-not-working-on-fips-enabled-java-application/261815 "2021-02-03T08:42:45Z")
Hi We are trying to using APM agent in an application which is FIPS complaint and using CCJ jar (security.provider.5=com.sun.net.ssl.internal.ssl.Provider CCJ) Problem1: In the Java APM agent, below line keeps failing … --- ## [Timestamp field has a 5 minutes delay](https://discuss.elastic.co/t/timestamp-field-has-a-5-minutes-delay/99679)
**Author:** [@h\_foxit](https://discuss.elastic.co/u/h_foxit)\ **Replies:** 12\ **Last updated:** [September 7, 2017, 3:02pm UTC](https://discuss.elastic.co/t/timestamp-field-has-a-5-minutes-delay/99679 "2017-09-07T15:02:21Z")
hello, still a newbie here I installed the 5.5 version of ElasticStack I have a time problem 5 min difference with the local time I do receive ossec logs 2017 Sep 06 00:05:03 WinEvtLog: Security: AUDIT\_SUCCESS(4624) … --- ## [Shield 2.3.5 specifcally transport SSL/TLS failing](https://discuss.elastic.co/t/shield-2-3-5-specifcally-transport-ssl-tls-failing/57728)
**Author:** [@datadude](https://discuss.elastic.co/u/datadude)\ **Replies:** 16\ **Last updated:** [August 15, 2016, 8:16pm UTC](https://discuss.elastic.co/t/shield-2-3-5-specifcally-transport-ssl-tls-failing/57728 "2016-08-15T20:16:26Z")
Trouble figuring out exactly what is going on but here is what I am seeing: shield http TLS/SSL working fine ES 2.3.5 shield 2.3.5 private CA shield transport failing with a message that typically is associated with u… --- ## [Sending payload to APM server failed](https://discuss.elastic.co/t/sending-payload-to-apm-server-failed/250912)
**Author:** [@Dawn\_Okem](https://discuss.elastic.co/u/Dawn_Okem)\ **Replies:** 11\ **Last updated:** [October 12, 2020, 7:34am UTC](https://discuss.elastic.co/t/sending-payload-to-apm-server-failed/250912 "2020-10-12T07:34:35Z")
Kibana version: 7.9.2 Elasticsearch version: 7.9.2 APM Server version: 7.9.2 APM Agent language and version: Java agent - 1.18 / 1.9.0 Browser version: Original install method (e.g. download page, yum, deb, from sou… --- ## [High CPU Utilized by JAVA in single node ELK #31089](https://discuss.elastic.co/t/high-cpu-utilized-by-java-in-single-node-elk-31089/134563)
**Author:** [@Prabhu2430](https://discuss.elastic.co/u/Prabhu2430)\ **Replies:** 11\ **Last updated:** [June 21, 2018, 2:36pm UTC](https://discuss.elastic.co/t/high-cpu-utilized-by-java-in-single-node-elk-31089/134563 "2018-06-21T14:36:59Z")
We are experiencing high CPU utilization when starting the elasticsearch & logstash services simultaneously. The JAVA process is occupying more than 300% CPU. The elasticsearch holds some multiple JAVA threads and make… --- ## [Fail to upgrade Kibana from 7.11 to 7.12](https://discuss.elastic.co/t/fail-to-upgrade-kibana-from-7-11-to-7-12/269370)
**Author:** [@paulbrown4](https://discuss.elastic.co/u/paulbrown4)\ **Replies:** 9\ **Last updated:** [April 7, 2021, 3:01pm UTC](https://discuss.elastic.co/t/fail-to-upgrade-kibana-from-7-11-to-7-12/269370 "2021-04-07T15:01:12Z")
Kibana times out waiting for index migration. {"type":"log","@timestamp":"2021-04-06T13:09:46-05:00","tags":\["info","savedobjects-service"\],"pid":9608,"message":"\[.kibana\] UPDATE\_TARGET\_MAPPINGS -\> UPDATE\_TARGET\_MAPPING… --- ## [ElasticSearch Heap memory free up](https://discuss.elastic.co/t/elasticsearch-heap-memory-free-up/109682)
**Author:** [@akirafei](https://discuss.elastic.co/u/akirafei)\ **Replies:** 12\ **Last updated:** [November 30, 2017, 10:41pm UTC](https://discuss.elastic.co/t/elasticsearch-heap-memory-free-up/109682 "2017-11-30T22:41:35Z")
Hi, We are doing some load testing on ElasticSearch. Out data is log data. The testing server has 1T data, and two ElasticSearch nodes with 15g heap for each. When doing testing with some random generated queries, I… [Previous page](https://discuss.elastic.co/top.md?page=100&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=102&per_page=50&period=all)