# Top **URL:** https://discuss.elastic.co/top.md?page=102&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 103 --- ## [Elasticsearch 6.3.2 the index is automatically deleted](https://discuss.elastic.co/t/elasticsearch-6-3-2-the-index-is-automatically-deleted/143848)
**Author:** [@1e64d27745019f309346](https://discuss.elastic.co/u/1e64d27745019f309346)\ **Replies:** 10\ **Last updated:** [August 13, 2018, 3:01am UTC](https://discuss.elastic.co/t/elasticsearch-6-3-2-the-index-is-automatically-deleted/143848 "2018-08-13T03:01:03Z")
I have set up elk version 6.3.2, all the services can work normally, but the index of es is automatically deleted. In each index, I can only view the last 5 records, and more than 5 will be deleted. --- ## [Watcher's State - Error!](https://discuss.elastic.co/t/watchers-state-error/119132)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 11\ **Last updated:** [February 14, 2018, 7:36am UTC](https://discuss.elastic.co/t/watchers-state-error/119132 "2018-02-14T07:36:55Z")
I just noticed that several of X-Pack Monitoring watcher's state is: Error! w/ comment Execution Failing Please advise. --- ## [Issue with logstash on aarch64](https://discuss.elastic.co/t/issue-with-logstash-on-aarch64/133008)
**Author:** [@doctorhey](https://discuss.elastic.co/u/doctorhey)\ **Replies:** 16\ **Last updated:** [June 5, 2018, 12:27pm UTC](https://discuss.elastic.co/t/issue-with-logstash-on-aarch64/133008 "2018-06-05T12:27:08Z")
Hello, I'm having an issue with logstash running on aarch64. At this point, I don't believe it to be config based, as I ran config test on the various files in conf.d AND these files run on other hosts (that are x86\_64)… --- ## [Filebeat keeps files open forever](https://discuss.elastic.co/t/filebeat-keeps-files-open-forever/62802)
**Author:** [@ronny.lerch](https://discuss.elastic.co/u/ronny.lerch)\ **Replies:** 12\ **Last updated:** [October 27, 2016, 1:16pm UTC](https://discuss.elastic.co/t/filebeat-keeps-files-open-forever/62802 "2016-10-27T13:16:43Z")
I would like to join the discussion. I'm following and applying changes in "Filebeat keeps open files forever" topic the past week. Sadly I still experience the problem: filebeat 31 root 1r REG 253,16 10486094 4751403 /o… --- ## [How to get the nested array and nested json from input message in logstash](https://discuss.elastic.co/t/how-to-get-the-nested-array-and-nested-json-from-input-message-in-logstash/215693)
**Author:** [@Amit\_Agarwal1](https://discuss.elastic.co/u/Amit_Agarwal1)\ **Replies:** 11\ **Last updated:** [January 22, 2020, 9:43am UTC](https://discuss.elastic.co/t/how-to-get-the-nested-array-and-nested-json-from-input-message-in-logstash/215693 "2020-01-22T09:43:00Z")
message : {"prdctId":"10066","id":"10066","owner":{"id":"E040547","name":"Shashi Raghunandan"},"regAvail":\["ap","lac","mea"\] ,"isActive":true} Applied Filter: kv { source =\> "message" trim\_key =\> """ trim\_value =\> … --- ## [Integration of Azure AD with Elastic for central User management](https://discuss.elastic.co/t/integration-of-azure-ad-with-elastic-for-central-user-management/124331)
**Author:** [@Jay.Dhillon](https://discuss.elastic.co/u/Jay.Dhillon)\ **Replies:** 14\ **Last updated:** [March 29, 2018, 4:59am UTC](https://discuss.elastic.co/t/integration-of-azure-ad-with-elastic-for-central-user-management/124331 "2018-03-29T04:59:27Z")
Any available guide/custom realm to integrate Azure AD with elastic? As Azure AD doesn't uses traditional ports, It seems it required to use custom realm for API. Any help will be appreciated. Thanks --- ## [Mutate function not working (Logstash 6.2.4)](https://discuss.elastic.co/t/mutate-function-not-working-logstash-6-2-4/129067)
**Author:** [@alicia1](https://discuss.elastic.co/u/alicia1)\ **Replies:** 22\ **Last updated:** [April 25, 2018, 4:06pm UTC](https://discuss.elastic.co/t/mutate-function-not-working-logstash-6-2-4/129067 "2018-04-25T16:06:36Z")
Hi, Any mutate function is working on my PC. In fact, i want use mutate lowercase function in my logstash config, but the function is not working, any data was sent to ES. I tried to test other mutate function like ad… --- ## [Data synchronization time in elasticsearch](https://discuss.elastic.co/t/data-synchronization-time-in-elasticsearch/246748)
**Author:** [@akshatsharma](https://discuss.elastic.co/u/akshatsharma)\ **Replies:** 14\ **Last updated:** [October 5, 2020, 12:26pm UTC](https://discuss.elastic.co/t/data-synchronization-time-in-elasticsearch/246748 "2020-10-05T12:26:53Z")
Hi, This is a query regarding data synchronization in elasticsearch. We encountered a problem where we insert some data into elasticsearch at a regular interval. Now, immediately after data insertion, we run a search q… --- ## [Custom kibana home](https://discuss.elastic.co/t/custom-kibana-home/238427)
**Author:** [@Shikhar\_Dixit](https://discuss.elastic.co/u/Shikhar_Dixit)\ **Replies:** 9\ **Last updated:** [July 7, 2020, 8:19am UTC](https://discuss.elastic.co/t/custom-kibana-home/238427 "2020-07-07T08:19:38Z")
Hi, can anyone help in the customization of the homepage of kibana ui I want to remove all the cards and add a pic in the background --- ## [Master election takes too long](https://discuss.elastic.co/t/master-election-takes-too-long/177305)
**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\ **Replies:** 19\ **Last updated:** [April 18, 2019, 2:15pm UTC](https://discuss.elastic.co/t/master-election-takes-too-long/177305 "2019-04-18T14:15:21Z")
I am using 5.4.1 version. I see in the logs \[2019-04-16T21:42:40,996\]\[INFO \]\[o.e.d.z.ZenDiscovery \] \[node-2\] master\_left \[{node-1}{Nuzkh0bnRw6LPnqkO-KUDg}{wxOLyucfTDqZUSfspSh5PQ}{172.20.67.236}{172.20.67.236:9300}\]… --- ## [Logstash Index creation and parsing custom app log](https://discuss.elastic.co/t/logstash-index-creation-and-parsing-custom-app-log/57711)
**Author:** [@jukkendar](https://discuss.elastic.co/u/jukkendar)\ **Replies:** 14\ **Last updated:** [August 15, 2016, 7:41pm UTC](https://discuss.elastic.co/t/logstash-index-creation-and-parsing-custom-app-log/57711 "2016-08-15T19:41:27Z")
I have installed Logstash 2.3.1, elastic search 2.3.1 and Kibana 4.5.0 in windows 2008 server as services. I can launch Kibana but unable to create Index in Kibana , Refer the log below. I have verified the below config… --- ## [Setting up Integrations: Fortinet](https://discuss.elastic.co/t/setting-up-integrations-fortinet/359251)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 30\ **Last updated:** [August 5, 2024, 12:52pm UTC](https://discuss.elastic.co/t/setting-up-integrations-fortinet/359251 "2024-08-05T12:52:15Z")
Hello I want to try out the integration feature but Im kind of lost. Im gonna have my ELK stack all on one server. The reason I mention this is because there is a Fleek/Elastic Agent being talked about and Im not sure … --- ## [Design indexes with big data](https://discuss.elastic.co/t/design-indexes-with-big-data/239235)
**Author:** [@Ankur\_Mahajan](https://discuss.elastic.co/u/Ankur_Mahajan)\ **Replies:** 15\ **Last updated:** [July 3, 2020, 7:23am UTC](https://discuss.elastic.co/t/design-indexes-with-big-data/239235 "2020-07-03T07:23:15Z")
I am creating an elastic cluster with 2.5TB dataset. Questions: What is the best way to design shards for best performance? The only limit is 2.1Billion documents per shard (it's Lucene core limitation), 20 - 40GB… --- ## [Проблема с заливкой данных. Проблема с преобразованием типов](https://discuss.elastic.co/t/topic/169200)
**Author:** [@andy4195](https://discuss.elastic.co/u/andy4195)\ **Replies:** 25\ **Last updated:** [March 7, 2019, 7:54pm UTC](https://discuss.elastic.co/t/topic/169200 "2019-03-07T19:54:10Z")
Есть заранее созданный индекс. В нем есть поле fullprice. В маппинге указан у него тип double. При загрузке данных, периодически появляется ошибка java.lang.IllegalArgumentException: mapper \[fullprice\] cannot be change… --- ## [Bulk indexing causes management threadpool queue to skyrocket](https://discuss.elastic.co/t/bulk-indexing-causes-management-threadpool-queue-to-skyrocket/217852)
**Author:** [@Doc\_Kaos](https://discuss.elastic.co/u/Doc_Kaos)\ **Replies:** 18\ **Last updated:** [February 6, 2020, 11:43am UTC](https://discuss.elastic.co/t/bulk-indexing-causes-management-threadpool-queue-to-skyrocket/217852 "2020-02-06T11:43:14Z")
After bulk indexing for 10 minutes on a 7.4.1 cluster, it will suddenly become completely unresponsive to any cluster state requests. It still index's and still responds to queries, but the cluster state itself is unres… --- ## [Custom metric for aggregation based visualizations](https://discuss.elastic.co/t/custom-metric-for-aggregation-based-visualizations/284210)
**Author:** [@pchakour](https://discuss.elastic.co/u/pchakour)\ **Replies:** 13\ **Last updated:** [September 20, 2021, 12:48pm UTC](https://discuss.elastic.co/t/custom-metric-for-aggregation-based-visualizations/284210 "2021-09-20T12:48:54Z")
Hello :wave: I'm trying to migrate the famous plugin datasweet formula but I'm stuck. I created a custom metric using the registerMetric function from the data plugin and the metric appears except options. I want to cr… --- ## [Error: \[illegal\_state\_exception\] trying to merge the field stats of field](https://discuss.elastic.co/t/error-illegal-state-exception-trying-to-merge-the-field-stats-of-field/50749)
**Author:** [@Mike\_Wurtz](https://discuss.elastic.co/u/Mike_Wurtz)\ **Replies:** 10\ **Last updated:** [June 2, 2016, 5:46pm UTC](https://discuss.elastic.co/t/error-illegal-state-exception-trying-to-merge-the-field-stats-of-field/50749 "2016-06-02T17:46:25Z")
After setting up a new Elasticsearch 5 Alpha 2 cluster, and redirecting our logstash pipe to send logs to this new cluster, I'm getting this error in Kibana: Error: \[illegal\_state\_exception\] trying to merge the field s… --- ## [Not able to create index based on log date field](https://discuss.elastic.co/t/not-able-to-create-index-based-on-log-date-field/32042)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 10\ **Last updated:** [October 13, 2015, 7:52am UTC](https://discuss.elastic.co/t/not-able-to-create-index-based-on-log-date-field/32042 "2015-10-13T07:52:00Z")
Hi Experts, I want to create an index based on a log date field , my logs in csv file are like logtime,name 10/13/2015 2:30,vg my LS conf has filter { csv { columns =\> \["logtime","name"\] separator =\> ",… --- ## [Logstash number of threads keeps increasing until crash](https://discuss.elastic.co/t/logstash-number-of-threads-keeps-increasing-until-crash/313463)
**Author:** [@Alain\_Bod](https://discuss.elastic.co/u/Alain_Bod)\ **Replies:** 13\ **Last updated:** [September 19, 2022, 1:06pm UTC](https://discuss.elastic.co/t/logstash-number-of-threads-keeps-increasing-until-crash/313463 "2022-09-19T13:06:06Z")
Hi, I'm testing the following pipeline (stack version 8.4.1): input { google\_cloud\_storage {...} } filter {csv {...} mutate {...} } output { elasticsearch {...} } with a large number of events (3M+). After a few min… --- ## [Does Logstash process single file or multiple files simultaneously?](https://discuss.elastic.co/t/does-logstash-process-single-file-or-multiple-files-simultaneously/64108)
**Author:** [@Mayank\_Agrawal](https://discuss.elastic.co/u/Mayank_Agrawal)\ **Replies:** 9\ **Last updated:** [October 27, 2016, 8:57am UTC](https://discuss.elastic.co/t/does-logstash-process-single-file-or-multiple-files-simultaneously/64108 "2016-10-27T08:57:15Z")
How does the logstash process multiple log files ??? What I mean is, does the logstash processes one file at a time (and then move on to another file) or multiple files simultaneously ??? --- ## [Don’t see logs in kibana stack monitoring](https://discuss.elastic.co/t/don-t-see-logs-in-kibana-stack-monitoring/311914)
**Author:** [@cheshirecat](https://discuss.elastic.co/u/cheshirecat)\ **Replies:** 21\ **Last updated:** [September 2, 2022, 10:06am UTC](https://discuss.elastic.co/t/don-t-see-logs-in-kibana-stack-monitoring/311914 "2022-09-02T10:06:58Z")
Hello There! I have seen similar topic but it is closed for two years. I can not see STRUCTURED LOGS in Kibana. I am using filebeat with module elasticsearch and this is module's config: # Module: elasticsearch # D… --- ## [Update value in elastic](https://discuss.elastic.co/t/update-value-in-elastic/186710)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 10\ **Last updated:** [June 20, 2019, 6:53pm UTC](https://discuss.elastic.co/t/update-value-in-elastic/186710 "2019-06-20T18:53:55Z")
I want to write a query and update a field, my index already has all of listed field para, mytime, yourtime, someonestime by this logic if \[para="T'\] { mytime=yourtime } else { mytime=someonestime } is this pos… --- ## [Indexing non-English text](https://discuss.elastic.co/t/indexing-non-english-text/3251)
**Author:** [@Andrei](https://discuss.elastic.co/u/Andrei)\ **Replies:** 10\ **Last updated:** [September 10, 2010, 5:13pm UTC](https://discuss.elastic.co/t/indexing-non-english-text/3251 "2010-09-10T17:13:40Z")
I have two questions that related to indexing non-English text. 1. Does ES support accented character folding, i.e. indexing "café", but if the search term is "cafe" the doc is still found? 2. If I understand corr… --- ## [Dealing with no timestamp (Bro integration)](https://discuss.elastic.co/t/dealing-with-no-timestamp-bro-integration/60419)
**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\ **Replies:** 9\ **Last updated:** [September 13, 2016, 9:53pm UTC](https://discuss.elastic.co/t/dealing-with-no-timestamp-bro-integration/60419 "2016-09-13T21:53:07Z")
So I'm currently testing using bro's bro ES integration plugin. My first challenge is the ts field, timestamp, isn't anything ES knows. Example: How do I create a mapping to make ES see ts as a timestamp? Thank you… --- ## [Logstash\_forwarder connected to lostash-server-IP but never receive event](https://discuss.elastic.co/t/logstash-forwarder-connected-to-lostash-server-ip-but-never-receive-event/28675)
**Author:** [@soniaeli](https://discuss.elastic.co/u/soniaeli)\ **Replies:** 9\ **Last updated:** [September 24, 2015, 6:38am UTC](https://discuss.elastic.co/t/logstash-forwarder-connected-to-lostash-server-ip-but-never-receive-event/28675 "2015-09-24T06:38:50Z")
I installed elasticsearch, logstash, kibana, ngix and logstash-forwarder at same server to centralized logs. The log file (allapp.json) is a json file with logs entry like this: "{\\"timestamp\\":\\"2015-08-30 19:42:26.72… --- ## [Pipelines.yml ignored on logstash](https://discuss.elastic.co/t/pipelines-yml-ignored-on-logstash/314807)
**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\ **Replies:** 9\ **Last updated:** [September 21, 2022, 1:17pm UTC](https://discuss.elastic.co/t/pipelines-yml-ignored-on-logstash/314807 "2022-09-21T13:17:28Z")
I have looked at the following: I have LS 8.3.3 and here is version 1 of pipelines.yml located in /opt/logstash/config/pipelines.yml - pipeline.id: main path.config: "/opt/logstash/lab\_conf/\*.conf" - pipeline.id:… --- ## [\_grokparsefailure for IIS logs](https://discuss.elastic.co/t/-grokparsefailure-for-iis-logs/34829)
**Author:** [@Omar\_Al\_Zabir](https://discuss.elastic.co/u/Omar_Al_Zabir)\ **Replies:** 9\ **Last updated:** [November 17, 2015, 6:58pm UTC](https://discuss.elastic.co/t/-grokparsefailure-for-iis-logs/34829 "2015-11-17T18:58:08Z")
I have been trying various combinations of patterns to get IIS logs parsed, but have been unsuccessful in getting the patterns to match. I can get apache logs to parse perfectly fine, even with geoip. But I just can't ge… --- ## [Kibana/Elastic Cloud on Kubernetes - Unable to revive connection](https://discuss.elastic.co/t/kibana-elastic-cloud-on-kubernetes-unable-to-revive-connection/182941)
**Author:** [@henro](https://discuss.elastic.co/u/henro)\ **Replies:** 13\ **Last updated:** [May 29, 2019, 2:26pm UTC](https://discuss.elastic.co/t/kibana-elastic-cloud-on-kubernetes-unable-to-revive-connection/182941 "2019-05-29T14:26:38Z")
Good day! I am trying to install Elastic Cloud on Kubernetes (Elastic Cloud on Kubernetes \[2.10\] | Elastic), and having issue to get Kibana up and running. Kibana health status is Red: NAME HEALTH NODES V… --- ## [Next.checkpoint\_progress.total\_docs remains empty after first checkpoint](https://discuss.elastic.co/t/next-checkpoint-progress-total-docs-remains-empty-after-first-checkpoint/251729)
**Author:** [@Julien\_HENRY](https://discuss.elastic.co/u/Julien_HENRY)\ **Replies:** 17\ **Last updated:** [October 20, 2020, 4:50pm UTC](https://discuss.elastic.co/t/next-checkpoint-progress-total-docs-remains-empty-after-first-checkpoint/251729 "2020-10-20T16:50:55Z")
Hi, We have defined a continuous transform job in Elastic Cloud, using a scripted group\_by. We were previously bitten by this bug so we have upgraded Kibana to 7.9.2, and I recreated the transform job from scratch just… --- ## [Openness in Elastic Security's Agent artifacts](https://discuss.elastic.co/t/openness-in-elastic-securitys-agent-artifacts/281121)
**Author:** [@mark.dufresne](https://discuss.elastic.co/u/mark.dufresne)\ **Replies:** 1\ **Last updated:** [August 12, 2021, 6:51pm UTC](https://discuss.elastic.co/t/openness-in-elastic-securitys-agent-artifacts/281121 "2021-08-12T18:51:21Z")
You may have seen the twitter thread regarding a security researcher decrypting our endpoint protection artifacts in Elastic Agent. Our vision at Elastic Security is to protect the world’s data from attack by making secu… --- ## [Elasticsearch producing Duplicate entries in Kibana](https://discuss.elastic.co/t/elasticsearch-producing-duplicate-entries-in-kibana/100632)
**Author:** [@scayzer65](https://discuss.elastic.co/u/scayzer65)\ **Replies:** 9\ **Last updated:** [September 18, 2017, 7:45am UTC](https://discuss.elastic.co/t/elasticsearch-producing-duplicate-entries-in-kibana/100632 "2017-09-18T07:45:16Z")
Hi I have a Windows FTP server that produces 3 different logs and they are all output in to the same folder on C: Drive. I am trying to get a separation between the logs so that I can create custom filters. I have set u… --- ## [Elastic wont start after adding realms configuration](https://discuss.elastic.co/t/elastic-wont-start-after-adding-realms-configuration/235115)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 16\ **Last updated:** [June 4, 2020, 5:09am UTC](https://discuss.elastic.co/t/elastic-wont-start-after-adding-realms-configuration/235115 "2020-06-04T05:09:08Z")
Hi All, Added realm configuration to elasticsearch.yml. After that the service wont start. This is the added part → # # ---------------------------------- Realms ------------------------------------ # xpack: secu… --- ## [Event loss on way rsyslog-\> LS -\> ES](https://discuss.elastic.co/t/event-loss-on-way-rsyslog-ls-es/59099)
**Author:** [@bastianhoss](https://discuss.elastic.co/u/bastianhoss)\ **Replies:** 23\ **Last updated:** [September 1, 2016, 8:28am UTC](https://discuss.elastic.co/t/event-loss-on-way-rsyslog-ls-es/59099 "2016-09-01T08:28:59Z")
Hi there, I've thinking about a little validation of my ELK-Stack Installation... A Word and a blow! The differenc between a sepaerate logfile and indexed events is very very high: Logfile: 24Million lines and In… --- ## [Cannot get Cisco Filebeat module to work](https://discuss.elastic.co/t/cannot-get-cisco-filebeat-module-to-work/289903)
**Author:** [@titan\_tm](https://discuss.elastic.co/u/titan_tm)\ **Replies:** 13\ **Last updated:** [December 1, 2021, 6:56am UTC](https://discuss.elastic.co/t/cannot-get-cisco-filebeat-module-to-work/289903 "2021-12-01T06:56:46Z")
Hello Team, I'm running on ELK 7.14.0 and I'm facing an issue with kibana dashboard and need your help. I have an ELK stack which gets logs from filebeat (cisco module) and sends them directly to Elasticsearch. It work… --- ## [How to connect beats to elasticsearch, when elasticsearch using ssl/tls](https://discuss.elastic.co/t/how-to-connect-beats-to-elasticsearch-when-elasticsearch-using-ssl-tls/271735)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 19\ **Last updated:** [May 6, 2021, 2:36am UTC](https://discuss.elastic.co/t/how-to-connect-beats-to-elasticsearch-when-elasticsearch-using-ssl-tls/271735 "2021-05-06T02:36:27Z")
what should i do to make all of my beat can send log to my elasticsearch since i setting ssl/tls to my elasticsearch. this my configuration and the log ##################### Filebeat Configuration Example ##############… --- ## [Critical Risk on Elasticsearch 9200 / tcp / www Reported by Nessus](https://discuss.elastic.co/t/critical-risk-on-elasticsearch-9200-tcp-www-reported-by-nessus/86603)
**Author:** [@caixiac1](https://discuss.elastic.co/u/caixiac1)\ **Replies:** 9\ **Last updated:** [May 23, 2017, 8:55am UTC](https://discuss.elastic.co/t/critical-risk-on-elasticsearch-9200-tcp-www-reported-by-nessus/86603 "2017-05-23T08:55:05Z")
I used Nessus to scan Elaticsearch server, it reports there is one Critical risk on Elasticsearch issue: Severity Plugin Id Name Critical (10.0) 10169 … --- ## [Specifying an elasticsearch index from fscrawler rest api](https://discuss.elastic.co/t/specifying-an-elasticsearch-index-from-fscrawler-rest-api/212481)
**Author:** [@Sam\_4](https://discuss.elastic.co/u/Sam_4)\ **Replies:** 13\ **Last updated:** [December 24, 2019, 3:25pm UTC](https://discuss.elastic.co/t/specifying-an-elasticsearch-index-from-fscrawler-rest-api/212481 "2019-12-24T15:25:17Z")
Hi I using fscrawler rest API to index PDF,Word,and text files. I have requirement to provide index name , when i making HTTP request but seems that it taking default \_settings.json configuration to index document. i… --- ## [Watcher with Index Action - Not writing data properly](https://discuss.elastic.co/t/watcher-with-index-action-not-writing-data-properly/232714)
**Author:** [@Bhavani\_Prasad](https://discuss.elastic.co/u/Bhavani_Prasad)\ **Replies:** 15\ **Last updated:** [May 21, 2020, 6:21am UTC](https://discuss.elastic.co/t/watcher-with-index-action-not-writing-data-properly/232714 "2020-05-21T06:21:07Z")
Hello, I am trying to create a watcher that scans a log index and once it finds a search term, writes the JSON payload to a new index with an Index action. I am seeing that the data that is reaching the Index this way i… --- ## [APM with AWS Lambda Java](https://discuss.elastic.co/t/apm-with-aws-lambda-java/185936)
**Author:** [@f136989c](https://discuss.elastic.co/u/f136989c)\ **Replies:** 18\ **Last updated:** [July 7, 2019, 4:35am UTC](https://discuss.elastic.co/t/apm-with-aws-lambda-java/185936 "2019-07-07T04:35:30Z")
Hi, I try to use the apm-java-attach on AWS Lambda openjdk-8 however I am getting "Attaching the Elastic APM Java agent is not possible on this JVM" . Looks like the APM attach is not working on the AWS Lambda OPENJDK … --- ## [SystemMemoryOutOfException While Indexing Documents as attachments](https://discuss.elastic.co/t/systemmemoryoutofexception-while-indexing-documents-as-attachments/51119)
**Author:** [@ASN](https://discuss.elastic.co/u/ASN)\ **Replies:** 13\ **Last updated:** [June 8, 2016, 6:08am UTC](https://discuss.elastic.co/t/systemmemoryoutofexception-while-indexing-documents-as-attachments/51119 "2016-06-08T06:08:01Z")
Hi All, I'm facing a problem while trying to index documents as attachments. (NEST and VS) I am able to index documents of number 20-25 without any problem. But if I have more documents say 50 odd then I'm facing a pr… --- ## [Create new Filebeat](https://discuss.elastic.co/t/create-new-filebeat/246081)
**Author:** [@saffatechy](https://discuss.elastic.co/u/saffatechy)\ **Replies:** 34\ **Last updated:** [October 22, 2020, 8:01am UTC](https://discuss.elastic.co/t/create-new-filebeat/246081 "2020-10-22T08:01:22Z")
Hi Elastic community I'm trying to build a custom Filebeat module but to me the Doc is a little unspecific: https://www.elastic.co/guide/en/beats/devguide/current/filebeat-modules-devguide.html I've come as far as crea… --- ## [Upload CSV File to Kibana Dashboard](https://discuss.elastic.co/t/upload-csv-file-to-kibana-dashboard/342821)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 25\ **Last updated:** [October 6, 2023, 10:53am UTC](https://discuss.elastic.co/t/upload-csv-file-to-kibana-dashboard/342821 "2023-10-06T10:53:19Z")
Hi Team, I need help on below two points while uploading csv file through kibana dashboard. How to upload a csv file size of more than 100MB through the kibana dashboard. How to upload multiple csv files to same indic… --- ## [Index (ingest attachment) update in elastic search or storing multipe document in same index](https://discuss.elastic.co/t/index-ingest-attachment-update-in-elastic-search-or-storing-multipe-document-in-same-index/95887)
**Author:** [@gauravgarg](https://discuss.elastic.co/u/gauravgarg)\ **Replies:** 13\ **Last updated:** [August 7, 2017, 9:41am UTC](https://discuss.elastic.co/t/index-ingest-attachment-update-in-elastic-search-or-storing-multipe-document-in-same-index/95887 "2017-08-07T09:41:32Z")
Hi Team, I am new to elasticseaarch. I am using ingest attachment for indexing pdf, excel… etc… document. I am doing it with rest client. Is it possible i can update index. I mean to say that when i do first POST requ… --- ## [Kibana working very slow and showing errors randomly](https://discuss.elastic.co/t/kibana-working-very-slow-and-showing-errors-randomly/222238)
**Author:** [@cravinder489](https://discuss.elastic.co/u/cravinder489)\ **Replies:** 18\ **Last updated:** [March 8, 2020, 7:19am UTC](https://discuss.elastic.co/t/kibana-working-very-slow-and-showing-errors-randomly/222238 "2020-03-08T07:19:01Z")
My kibana is working very slow. I only have 4 indices in it with 300, 45000, 66000 and 12000 documents respectively. Also once I start the server, after some time it gives circuit break exception. This did not happen i… --- ## [Where is my data of fortinet?](https://discuss.elastic.co/t/where-is-my-data-of-fortinet/311009)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 27\ **Last updated:** [August 1, 2022, 1:20pm UTC](https://discuss.elastic.co/t/where-is-my-data-of-fortinet/311009 "2022-08-01T13:20:03Z")
Hello, I installed Elasticsearch and kibana and filebeat in ubuntu 22.04 VM and i installed FortiGate 7.2.0 in other VM in VMware workstation, I follow the steps to upload the Fortinet logs in elastic and kibana as the … --- ## [2 server ELK cluster implementation](https://discuss.elastic.co/t/2-server-elk-cluster-implementation/220308)
**Author:** [@nityaraj06](https://discuss.elastic.co/u/nityaraj06)\ **Replies:** 13\ **Last updated:** [February 27, 2020, 4:21pm UTC](https://discuss.elastic.co/t/2-server-elk-cluster-implementation/220308 "2020-02-27T16:21:14Z")
What is the best way to implement ELK stack for a log monitoring system on Windows. I have 2 servers with windows server 2019 installed. --- ## [Elastic Search安装完成后无法启动](https://discuss.elastic.co/t/elastic-search/317941)
**Author:** [@Shadow\_CHN](https://discuss.elastic.co/u/Shadow_CHN)\ **Replies:** 10\ **Last updated:** [November 8, 2022, 5:47am UTC](https://discuss.elastic.co/t/elastic-search/317941 "2022-11-08T05:47:13Z")
在CentOS7.8上安装配置完成后初次启动会在输出以下日志后卡住，请问有什么解决办法吗？ \[2022-11-01T22:48:44,788\]\[INFO \]\[o.e.n.Node \] \[node-1\] started {node-1}{G9dqjNsoRKKiW16C2kJYRQ}{09N\_x9F9Tjuqd3OeeYchEg}{node-1}{10.11.0.2}{10.11.0.2:9300}{cdfh… --- ## [Elastic endpoint overwrites configuration file](https://discuss.elastic.co/t/elastic-endpoint-overwrites-configuration-file/246531)
**Author:** [@Zawadidone](https://discuss.elastic.co/u/Zawadidone)\ **Replies:** 16\ **Last updated:** [September 2, 2020, 2:19pm UTC](https://discuss.elastic.co/t/elastic-endpoint-overwrites-configuration-file/246531 "2020-09-02T14:19:13Z")
Everytime when I start elastic-endpoint.exe it overwrites the file elastic-endpoint.yaml with: hosts: - http://localhost:9200 Because of that the Elastic agent is not sending any data to my Elasticsearch cluster th… --- ## [Filebeat output to logstash](https://discuss.elastic.co/t/filebeat-output-to-logstash/82177)
**Author:** [@Vivek\_Samaga](https://discuss.elastic.co/u/Vivek_Samaga)\ **Replies:** 16\ **Last updated:** [May 23, 2017, 12:31pm UTC](https://discuss.elastic.co/t/filebeat-output-to-logstash/82177 "2017-05-23T12:31:46Z")
So am using filebeat to fetch 3 types of logs from websphere paths: - /opt/IBM/HTTPServer/logs/access\_log document\_type: access\_log - paths: - /opt/IBM/WebSphere/AppServer/profiles/WP… --- ## [Securing ElasticSearch -- Jetty plugin, or proxy with nginx?](https://discuss.elastic.co/t/securing-elasticsearch-jetty-plugin-or-proxy-with-nginx/13471)
**Author:** [@doug\_livesey](https://discuss.elastic.co/u/doug_livesey)\ **Replies:** 16\ **Last updated:** [September 10, 2013, 9:03am UTC](https://discuss.elastic.co/t/securing-elasticsearch-jetty-plugin-or-proxy-with-nginx/13471 "2013-09-10T09:03:04Z")
Hi -- I need to provide access to some ElasticSearch indices both in EC2 (where it is hosted) and Heroku. I've been reading a bit around this, and the two solutions suggested seem to be using the jetty plugin, or using… [Previous page](https://discuss.elastic.co/top.md?page=101&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=103&per_page=50&period=all)