# Top **URL:** https://discuss.elastic.co/top.md?page=105&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 106 --- ## [Multi file send from filebeat to logstash](https://discuss.elastic.co/t/multi-file-send-from-filebeat-to-logstash/70018)
**Author:** [@Tr\_ng\_Trang](https://discuss.elastic.co/u/Tr_ng_Trang)\ **Replies:** 12\ **Last updated:** [December 29, 2016, 7:45am UTC](https://discuss.elastic.co/t/multi-file-send-from-filebeat-to-logstash/70018 "2016-12-29T07:45:46Z")
i configured a filebeat.yml to get multi file log and create type fields for each file like this: filebeat.prospectors: - paths: - /var/log/access.log fields: {log\_type: access} - paths: … --- ## [Json { source =\> "message" } not parsing all of it](https://discuss.elastic.co/t/json-source-message-not-parsing-all-of-it/297430)
**Author:** [@itschobot](https://discuss.elastic.co/u/itschobot)\ **Replies:** 20\ **Last updated:** [February 22, 2022, 8:47pm UTC](https://discuss.elastic.co/t/json-source-message-not-parsing-all-of-it/297430 "2022-02-22T20:47:34Z")
Hello, I'm new to Logstash and was wondering if someone could help with my filter and how can I parse the rest of my json fields the intent is to bring out the other fields in "message" such that I can map them to ECS: h… --- ## [Increasing Logstash Throughput When the Codec is the Bottleneck](https://discuss.elastic.co/t/increasing-logstash-throughput-when-the-codec-is-the-bottleneck/224158)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 11\ **Last updated:** [March 26, 2020, 2:08pm UTC](https://discuss.elastic.co/t/increasing-logstash-throughput-when-the-codec-is-the-bottleneck/224158 "2020-03-26T14:08:21Z")
Setup I have multiple machines running a containerized Logstash 7.6. These machines have 32 core and 256GB RAM. I am using these nodes to process network flow data based on Elastiflow. These nodes are listening for data … --- ## [Start FileBeat using publish](https://discuss.elastic.co/t/start-filebeat-using-publish/200710)
**Author:** [@Ghaith\_Haddad](https://discuss.elastic.co/u/Ghaith_Haddad)\ **Replies:** 20\ **Last updated:** [September 23, 2019, 7:55pm UTC](https://discuss.elastic.co/t/start-filebeat-using-publish/200710 "2019-09-23T19:55:19Z")
Hello everyone, Im not sure what the difference is between starting filebeat using: service start filebeat AND ./filebeat -e -c /etc/filebeat/filebeat.yml -d "publish" the latter seems to work better than the first one… --- ## [Cloud-aws for ES 2.1.1 in maven](https://discuss.elastic.co/t/cloud-aws-for-es-2-1-1-in-maven/38924)
**Author:** [@dbaggott](https://discuss.elastic.co/u/dbaggott)\ **Replies:** 11\ **Last updated:** [May 18, 2017, 7:43pm UTC](https://discuss.elastic.co/t/cloud-aws-for-es-2-1-1-in-maven/38924 "2017-05-18T19:43:42Z")
Hi, I'm trying to upgrade a java client node from ES 1.7 to 2.1.1 and I'm stuck on the cloud-aws portion of the upgrade. Specifically, My ES 1.7-compatible code successfully uses the elasticsearch-cloud-aws artifac… --- ## [Proper YAML Configuration of ElasticSearch](https://discuss.elastic.co/t/proper-yaml-configuration-of-elasticsearch/6842)
**Author:** [@Ronak\_Patel](https://discuss.elastic.co/u/Ronak_Patel)\ **Replies:** 18\ **Last updated:** [April 30, 2012, 5:29pm UTC](https://discuss.elastic.co/t/proper-yaml-configuration-of-elasticsearch/6842 "2012-04-30T17:29:02Z")
Hi All, I'm fairly new to ElasticSearch and am looking for the proper way to configure it to create my index and my index settings instead of relying on the application to do it using the ES API. Is there any d… --- ## [A performance issue about elasticsearch on k8s](https://discuss.elastic.co/t/a-performance-issue-about-elasticsearch-on-k8s/214692)
**Author:** [@ftyuuu](https://discuss.elastic.co/u/ftyuuu)\ **Replies:** 10\ **Last updated:** [January 19, 2020, 12:56pm UTC](https://discuss.elastic.co/t/a-performance-issue-about-elasticsearch-on-k8s/214692 "2020-01-19T12:56:38Z")
I'm experiencing an es on k8s performance issue that confuses me, and this is my test environment. First, I have a k8s cluster with 4 nodes, of which 1 master and 3 nodes: NAME STATUS ROLES AGE … --- ## [ANN Search is super slow](https://discuss.elastic.co/t/ann-search-is-super-slow/344863)
**Author:** [@spliter2157](https://discuss.elastic.co/u/spliter2157)\ **Replies:** 14\ **Last updated:** [October 25, 2023, 1:38pm UTC](https://discuss.elastic.co/t/ann-search-is-super-slow/344863 "2023-10-25T13:38:02Z")
Hello There, Hello, I have a question regarding Elasticsearch vector search. Our vector index has 768 dimensions, and it contains 25,000,000 documents split into two indices. Here are the results from /\_cat/indices: he… --- ## [Working with filebeat](https://discuss.elastic.co/t/working-with-filebeat/40944)
**Author:** [@Anmol\_Garg](https://discuss.elastic.co/u/Anmol_Garg)\ **Replies:** 13\ **Last updated:** [February 10, 2016, 9:25am UTC](https://discuss.elastic.co/t/working-with-filebeat/40944 "2016-02-10T09:25:15Z")
When should we use a single prospector and when multiple? Like I can include multiple files in a single prospector. What are the pros and cons of using multiple prospectors? --- ## [Using Filebeat with the rollover pattern](https://discuss.elastic.co/t/using-filebeat-with-the-rollover-pattern/154402)
**Author:** [@sterago](https://discuss.elastic.co/u/sterago)\ **Replies:** 9\ **Last updated:** [November 12, 2018, 12:44pm UTC](https://discuss.elastic.co/t/using-filebeat-with-the-rollover-pattern/154402 "2018-11-12T12:44:46Z")
Hi, my team and I are looking for a solution to keep the size of indices below a certain threshold and we are looking at the Rollover API with interest. We are already using Curator for data retention purposes and thoug… --- ## [Unable to start elasticsearch on CentOs](https://discuss.elastic.co/t/unable-to-start-elasticsearch-on-centos/282687)
**Author:** [@mirza\_muhriz](https://discuss.elastic.co/u/mirza_muhriz)\ **Replies:** 11\ **Last updated:** [August 28, 2021, 3:06am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-on-centos/282687 "2021-08-28T03:06:56Z")
/bin/systemctl status elasticsearch.service ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendo … --- ## [The index pattern \\* does not contain any of the following compatible field types: geo\_point](https://discuss.elastic.co/t/the-index-pattern-index-name-does-not-contain-any-of-the-following-compatible-field-types-geo-point/215689)
**Author:** [@ruranga](https://discuss.elastic.co/u/ruranga)\ **Replies:** 11\ **Last updated:** [January 20, 2020, 1:08pm UTC](https://discuss.elastic.co/t/the-index-pattern-index-name-does-not-contain-any-of-the-following-compatible-field-types-geo-point/215689 "2020-01-20T13:08:36Z")
Hi, When I try to create a visualization -\> coordinated map by using geoip i'm getting below error "The index pattern \\* does not contain any of the following compatible field types: geo\_point" But I'm ge… --- ## [Watcher Index Actionで、ドキュメントを分けて出力する](https://discuss.elastic.co/t/watcher-index-action/181738)
**Author:** [@5f750bbb360aba6ced5f](https://discuss.elastic.co/u/5f750bbb360aba6ced5f)\ **Replies:** 14\ **Last updated:** [May 31, 2019, 1:27am UTC](https://discuss.elastic.co/t/watcher-index-action/181738 "2019-05-31T01:27:20Z")
基礎的な質問で恐縮ですが、WatcherのIndex Actionを利用すると、デフォルトでは、集計結果が、一つのドキュメントにまとめられて出力されます。 これを、Watcherで引っかかったドキュメントが、そのまま別々の状態で出力されるように設定をしたいです。 たとえば、 ①下記のような３つのデータを用意 \*doc1 pc\_name : A feature : B \*doc2 pc\_name : A … --- ## [Structured logging with Filebeat](https://discuss.elastic.co/t/structured-logging-with-filebeat/269383)
**Author:** [@vharabor](https://discuss.elastic.co/u/vharabor)\ **Replies:** 11\ **Last updated:** [April 29, 2021, 6:42am UTC](https://discuss.elastic.co/t/structured-logging-with-filebeat/269383 "2021-04-29T06:42:59Z")
Signed up for the elastic trial and quickly got the Filebeat up and running and getting docker statistics to Elasticsearch. I'm really stuck in trying to add any kind of structured logging to kibana. I've tried to add… --- ## [Can´t install Shield](https://discuss.elastic.co/t/can-t-install-shield/36316)
**Author:** [@OscarCrespo](https://discuss.elastic.co/u/OscarCrespo)\ **Replies:** 11\ **Last updated:** [February 26, 2016, 11:59am UTC](https://discuss.elastic.co/t/can-t-install-shield/36316 "2016-02-26T11:59:02Z")
hi, i had installed "shield" but failed. uninstall it to install it again, but I can not, it displays the following error: "failed to download out of all possible locations" . How I can reinstall it? --- ## [Master node role cannot be removed in 8.0.0](https://discuss.elastic.co/t/master-node-role-cannot-be-removed-in-8-0-0/298526)
**Author:** [@jean.bissonnette](https://discuss.elastic.co/u/jean.bissonnette)\ **Replies:** 28\ **Last updated:** [March 7, 2022, 2:24pm UTC](https://discuss.elastic.co/t/master-node-role-cannot-be-removed-in-8-0-0/298526 "2022-03-07T14:24:38Z")
I have 5 nodes, 3 of them are master. Running on podman on RHEL as systemD service. By error, I set the 2 others as master and ran the cluster but they should be data only. When I change their Elasticsearch.yml to rem… --- ## [Message filed is missing when Winlogbeat is used](https://discuss.elastic.co/t/message-filed-is-missing-when-winlogbeat-is-used/100115)
**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\ **Replies:** 11\ **Last updated:** [September 12, 2017, 10:24pm UTC](https://discuss.elastic.co/t/message-filed-is-missing-when-winlogbeat-is-used/100115 "2017-09-12T22:24:14Z")
Hi, I am using Winlogbeat to collect Windows event logs and sending output to Logstash. But the problem is that I am missing message filed and instead I am seeing event\_data filed. And inside event\_data field there is a… --- ## [Java API and Search Template with params](https://discuss.elastic.co/t/java-api-and-search-template-with-params/23769)
**Author:** [@John\_D\_Ament](https://discuss.elastic.co/u/John_D_Ament)\ **Replies:** 9\ **Last updated:** [June 17, 2015, 12:05pm UTC](https://discuss.elastic.co/t/java-api-and-search-template-with-params/23769 "2015-06-17T12:05:14Z")
I have a template based on https://www.elastic.co/guide/en/elasticsearch/reference/current/search-template.html, it looks like this for one param, which is meant to be an in query " {\\n" + … --- ## [ElasticSearch returning less results even with set Size = 50](https://discuss.elastic.co/t/elasticsearch-returning-less-results-even-with-set-size-50/74021)
**Author:** [@mv\_es](https://discuss.elastic.co/u/mv_es)\ **Replies:** 9\ **Last updated:** [February 6, 2017, 1:59pm UTC](https://discuss.elastic.co/t/elasticsearch-returning-less-results-even-with-set-size-50/74021 "2017-02-06T13:59:29Z")
On running my ES query, total hits received are shown to be 7746 Yet, setting the size param to 50, the query is returning only 46 results. What could be the reason for ES not returning the last 4 results? The top sco… --- ## [ElasticHQ](https://discuss.elastic.co/t/elastichq/58565)
**Author:** [@zen.xen](https://discuss.elastic.co/u/zen.xen)\ **Replies:** 9\ **Last updated:** [August 24, 2016, 4:14pm UTC](https://discuss.elastic.co/t/elastichq/58565 "2016-08-24T16:14:39Z")
Hello, I need some help, in ElasticHQ there is a button "Query", when I click it I get such interface: indices look like winlogbeat-2016.08.22, winlogbeat-2016.08.21 and so on, I would like to use a "Search Query ...… --- ## [Vega Error](https://discuss.elastic.co/t/vega-error/274479)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 23\ **Last updated:** [June 8, 2021, 9:10am UTC](https://discuss.elastic.co/t/vega-error/274479 "2021-06-08T09:10:48Z")
Hello expert, I need your help to find the error, i tried to find out but i didnt got it. Thanks in advance... \` { $schema: https://vega.github.io/schema/vega-lite/v5.json data: { url: { %context%: true %… --- ## [Cannot install 2.1 from Debian repository](https://discuss.elastic.co/t/cannot-install-2-1-from-debian-repository/35843)
**Author:** [@elastic\_search](https://discuss.elastic.co/u/elastic_search)\ **Replies:** 10\ **Last updated:** [December 3, 2015, 3:22am UTC](https://discuss.elastic.co/t/cannot-install-2-1-from-debian-repository/35843 "2015-12-03T03:22:16Z")
I'm trying to install ElasticSearch 2.1 on Ubuntu 14 following these instructions https://www.elastic.co/guide/en/elasticsearch/reference/current/setup-repositories.html. I have followed the instructions exactly, but r… --- ## ["message" filed missing from windows event logs](https://discuss.elastic.co/t/message-filed-missing-from-windows-event-logs/137854)
**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\ **Replies:** 10\ **Last updated:** [July 23, 2018, 3:33pm UTC](https://discuss.elastic.co/t/message-filed-missing-from-windows-event-logs/137854 "2018-07-23T15:33:43Z")
Hi, I am sending all the event logs to Logstash using Winlogbeat. Here is part of Winlogbeat.yml, winlogbeat.event\_logs: - name: Application level: error, warning, info output.logstash: # The Logstash hosts … --- ## [How packetbeat to work with pf\_ring](https://discuss.elastic.co/t/how-packetbeat-to-work-with-pf-ring/63121)
**Author:** [@shell.b2t](https://discuss.elastic.co/u/shell.b2t)\ **Replies:** 11\ **Last updated:** [October 18, 2016, 1:16pm UTC](https://discuss.elastic.co/t/how-packetbeat-to-work-with-pf-ring/63121 "2016-10-18T13:16:42Z")
I have set as follows : interfaces: device: any type: pf\_ring but error as follows: 2016/10/16 05:16:37.012239 packetbeat.go:215: CRIT Initializing sniffer failed: Error creating sniffer: Pfring sniffing is no… --- ## [Transform - Continuous mode for more than 1 index?](https://discuss.elastic.co/t/transform-continuous-mode-for-more-than-1-index/239244)
**Author:** [@Jason\_Neo](https://discuss.elastic.co/u/Jason_Neo)\ **Replies:** 11\ **Last updated:** [July 6, 2020, 1:28am UTC](https://discuss.elastic.co/t/transform-continuous-mode-for-more-than-1-index/239244 "2020-07-06T01:28:54Z")
Hi all. I have been searching the web and elastic forum looking for solution, but it doesn't seem like people are having problem with the Transform function. I'm using Transform to create summary tables to optimize que… --- ## [Is it ok to have too many tiny shards in a cluster?](https://discuss.elastic.co/t/is-it-ok-to-have-too-many-tiny-shards-in-a-cluster/106120)
**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Replies:** 10\ **Last updated:** [November 3, 2017, 4:29pm UTC](https://discuss.elastic.co/t/is-it-ok-to-have-too-many-tiny-shards-in-a-cluster/106120 "2017-11-03T16:29:28Z")
Our use case allows customers to create tiny indices, which means there might be too many shards in a cluster (1 shard / index since these are tiny). Each index might have less than 10k records. I was wondering if its o… --- ## [Hibernate Search with Elasticsearch](https://discuss.elastic.co/t/hibernate-search-with-elasticsearch/22121)
**Author:** [@m1771vw](https://discuss.elastic.co/u/m1771vw)\ **Replies:** 20\ **Last updated:** [February 14, 2015, 6:20am UTC](https://discuss.elastic.co/t/hibernate-search-with-elasticsearch/22121 "2015-02-14T06:20:15Z")
Hi everyone, I am new to the forum and I am also new to ElasticSearch! However for this project, I am trying to replace HibernateSearch with ElasticSearch. I am using Spring Framework, and I have also taken a loo… --- ## [Timed out while getting index list on creating an index pattern in Kibana](https://discuss.elastic.co/t/timed-out-while-getting-index-list-on-creating-an-index-pattern-in-kibana/171103)
**Author:** [@Tomoyuki\_Saito](https://discuss.elastic.co/u/Tomoyuki_Saito)\ **Replies:** 10\ **Last updated:** [March 7, 2019, 9:09am UTC](https://discuss.elastic.co/t/timed-out-while-getting-index-list-on-creating-an-index-pattern-in-kibana/171103 "2019-03-07T09:09:01Z")
We're observing timeout while creating an index pattern in Kibana. That means an aggregation query below takes over 30 seconds. {"size":0,"aggs":{"indices":{"terms":{"field":"\_index","size":200}}}} A curl command that… --- ## [Is there a way to see one document indexed result. is the fields matching the mapping type](https://discuss.elastic.co/t/is-there-a-way-to-see-one-document-indexed-result-is-the-fields-matching-the-mapping-type/95877)
**Author:** [@Red](https://discuss.elastic.co/u/Red)\ **Replies:** 9\ **Last updated:** [August 5, 2017, 1:58am UTC](https://discuss.elastic.co/t/is-there-a-way-to-see-one-document-indexed-result-is-the-fields-matching-the-mapping-type/95877 "2017-08-05T01:58:44Z")
is there a way to see one document indexed result. is the fields matching the mapping type --- ## [How can i create logstash index every 4 hours except 1 hour](https://discuss.elastic.co/t/how-can-i-create-logstash-index-every-4-hours-except-1-hour/227928)
**Author:** [@Dragon9](https://discuss.elastic.co/u/Dragon9)\ **Replies:** 13\ **Last updated:** [April 17, 2020, 4:25pm UTC](https://discuss.elastic.co/t/how-can-i-create-logstash-index-every-4-hours-except-1-hour/227928 "2020-04-17T16:25:47Z")
like output{ elasticsearch { index =\> "logstash-%{+YYYY.MM.dd.hh}" } } for example:- logstash-2020.04.14.07 logstash-2020.04.14.11 --- ## [Elasticsearch upgrade from v2.3.4 to v6.1.1](https://discuss.elastic.co/t/elasticsearch-upgrade-from-v2-3-4-to-v6-1-1/113040)
**Author:** [@vishal\_kumar](https://discuss.elastic.co/u/vishal_kumar)\ **Replies:** 13\ **Last updated:** [January 8, 2018, 10:21am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-from-v2-3-4-to-v6-1-1/113040 "2018-01-08T10:21:03Z")
Hi, I have a setup running elasticsearch v2.3.4, I want to upgrade it to v6.1.1 and I wanted to migrate all my data from v2.3.4 to v6.1.1. I followed all the steps suggested for this. 1st I upgraded by elasticsearch to… --- ## [Include custom Elasticsearch index in SIEM default dashboards](https://discuss.elastic.co/t/include-custom-elasticsearch-index-in-siem-default-dashboards/238878)
**Author:** [@robertitox](https://discuss.elastic.co/u/robertitox)\ **Replies:** 14\ **Last updated:** [July 7, 2020, 3:33pm UTC](https://discuss.elastic.co/t/include-custom-elasticsearch-index-in-siem-default-dashboards/238878 "2020-07-07T15:33:00Z")
Hi people. I have an ELK server 7.8.0 running OK in testing mode. I've configured Logstash to listen on UDP/514 for incoming syslog remote events, Logstash doesn't apply ani filter, just pass the input to Elasticsearch.… --- ## [Disk usage after indexing much higher then after restart service](https://discuss.elastic.co/t/disk-usage-after-indexing-much-higher-then-after-restart-service/75053)
**Author:** [@Benjamin\_Gathmann](https://discuss.elastic.co/u/Benjamin_Gathmann)\ **Replies:** 11\ **Last updated:** [February 20, 2017, 7:53am UTC](https://discuss.elastic.co/t/disk-usage-after-indexing-much-higher-then-after-restart-service/75053 "2017-02-20T07:53:48Z")
I noticed that if I index a large amount of documents to my cluster (which currently is restricted to one server), I have e.g. a disk usage of 90 GByte. (du -sh /var/lib/elasticsearch/mycluster) If I then restart elasti… --- ## [Unexpected exception while running Enterprise Search: Error: Read timed out at](https://discuss.elastic.co/t/unexpected-exception-while-running-enterprise-search-error-read-timed-out-at/307102)
**Author:** [@Nids\_Rai](https://discuss.elastic.co/u/Nids_Rai)\ **Replies:** 20\ **Last updated:** [January 9, 2023, 7:40pm UTC](https://discuss.elastic.co/t/unexpected-exception-while-running-enterprise-search-error-read-timed-out-at/307102 "2023-01-09T19:40:54Z")
Getting read timeout error while setting up, Appsearch in ECK cluster. Elastic is up and running fine. The LOG : \[2022-06-14T06:10:00.351+00:00\]\[7\]\[2000\]\[app-server\]\[INFO\]: \[db\_lock\] \[installation\] Status: \[Failed\] Cr… --- ## [Is it possible to display a value for a threshold line on a vertical bar graph?](https://discuss.elastic.co/t/is-it-possible-to-display-a-value-for-a-threshold-line-on-a-vertical-bar-graph/298559)
**Author:** [@vector\_prime](https://discuss.elastic.co/u/vector_prime)\ **Replies:** 9\ **Last updated:** [March 3, 2022, 2:22pm UTC](https://discuss.elastic.co/t/is-it-possible-to-display-a-value-for-a-threshold-line-on-a-vertical-bar-graph/298559 "2022-03-03T14:22:49Z")
Hi Elastic Community, The question is pretty much what the title says. I am looking to be able to display the value of a threshold line in a vertical bar chart on the chart in some way. I have the line configured and … --- ## [Failed to connect to busy master](https://discuss.elastic.co/t/failed-to-connect-to-busy-master/150376)
**Author:** [@Bukhtawar\_Khan](https://discuss.elastic.co/u/Bukhtawar_Khan)\ **Replies:** 17\ **Last updated:** [October 1, 2018, 2:30pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-busy-master/150376 "2018-10-01T14:30:08Z")
org.elasticsearch.transport.ConnectTransportException: \[IF4wObj\]\[10.xxx.xxx.xx:9300\] connect\_exception at org.elasticsearch.transport.TcpChannel.awaitConnected(TcpChannel.java:165) ~\[elasticsearch-6.3.1.jar:6.3.1\] a… --- ## [JSON string to Nested type](https://discuss.elastic.co/t/json-string-to-nested-type/214074)
**Author:** [@arham](https://discuss.elastic.co/u/arham)\ **Replies:** 14\ **Last updated:** [January 15, 2020, 1:44pm UTC](https://discuss.elastic.co/t/json-string-to-nested-type/214074 "2020-01-15T13:44:55Z")
Hi, I am using ingest pipeline to map FScrawler fields to elasticsearch index fields. I have json string like "Tags": \[{"Tag":"Ford"}, {"Tag":"BMW"}, {"Tag":"Fiat"}\] . How i can map this data to my index nested type … --- ## [LSF Error: Skipping file (older than dead time of 24h0m0s):](https://discuss.elastic.co/t/lsf-error-skipping-file-older-than-dead-time-of-24h0m0s/32921)
**Author:** [@Fatema](https://discuss.elastic.co/u/Fatema)\ **Replies:** 10\ **Last updated:** [October 29, 2015, 2:42pm UTC](https://discuss.elastic.co/t/lsf-error-skipping-file-older-than-dead-time-of-24h0m0s/32921 "2015-10-29T14:42:07Z")
Hi, I have an ELK cluster. I have some files in a input dir which I need to forward to the ELK via LSF. My ELK and LSF are on the same machine. When I restarted ELK and LSF I am getting following msgs in LSF err logs: … --- ## [Build kibana in windows 10](https://discuss.elastic.co/t/build-kibana-in-windows-10/115054)
**Author:** [@radi](https://discuss.elastic.co/u/radi)\ **Replies:** 15\ **Last updated:** [January 15, 2018, 1:36pm UTC](https://discuss.elastic.co/t/build-kibana-in-windows-10/115054 "2018-01-15T13:36:03Z")
Hello, I want to build Kibana 5.4.0 locally from sources on Windows 10 machine. I found the procedure for linux not yet for windows if someone test the build kibana running on windows, Please provide the proper steps … --- ## [I have a problem when I want to send logs of PFSense (2.5.2 amd64) to EK version 7.14.2](https://discuss.elastic.co/t/i-have-a-problem-when-i-want-to-send-logs-of-pfsense-2-5-2-amd64-to-ek-version-7-14-2/297603)
**Author:** [@khouloud1](https://discuss.elastic.co/u/khouloud1)\ **Replies:** 18\ **Last updated:** [February 28, 2022, 9:19am UTC](https://discuss.elastic.co/t/i-have-a-problem-when-i-want-to-send-logs-of-pfsense-2-5-2-amd64-to-ek-version-7-14-2/297603 "2022-02-28T09:19:20Z")
I have a problem when I want to send logs from PFSense (2.5.2 amd64) to EK version 7.14.2 I did configure PFSense to send logs to EK but I did not find the best procedure to configure Elasticsearch and Kibana (7.14.2) --- ## [Anyone else seeing memory issues with java 121?](https://discuss.elastic.co/t/anyone-else-seeing-memory-issues-with-java-121/73131)
**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\ **Replies:** 21\ **Last updated:** [February 25, 2017, 12:41pm UTC](https://discuss.elastic.co/t/anyone-else-seeing-memory-issues-with-java-121/73131 "2017-02-25T12:41:20Z")
Topic...I had no issues with java 111, but with 121 I'm getting oom-killers :frowning: Anyone else? --- ## [How to show empty bukets in aggregation Range](https://discuss.elastic.co/t/how-to-show-empty-bukets-in-aggregation-range/127489)
**Author:** [@radi](https://discuss.elastic.co/u/radi)\ **Replies:** 14\ **Last updated:** [April 26, 2018, 8:28am UTC](https://discuss.elastic.co/t/how-to-show-empty-bukets-in-aggregation-range/127489 "2018-04-26T08:28:02Z")
Hello This visualization don't display the empty buckets ?! How can i show the empty buckets it's possible in agreagation histogram but I need to use range! any solution?! Thanks { "aggs": \[ { "enabled… --- ## [Logstash fails to start: "no such file to load -- concurrent"](https://discuss.elastic.co/t/logstash-fails-to-start-no-such-file-to-load-concurrent/288268)
**Author:** [@dwasss](https://discuss.elastic.co/u/dwasss)\ **Replies:** 9\ **Last updated:** [November 3, 2021, 7:47pm UTC](https://discuss.elastic.co/t/logstash-fails-to-start-no-such-file-to-load-concurrent/288268 "2021-11-03T19:47:06Z")
I recently upgraded my Elastic stack from 7.12 to 7.15.1 on Ubuntu 18.04. Logstash is running via systemd. Now Logstash fails to start with the following error: Nov 02 19:58:28 server logstash\[30340\]: Using bundled JDK:… --- ## [What's the disk watermark actually applied while specified in both node configuration file and cluster settings?](https://discuss.elastic.co/t/whats-the-disk-watermark-actually-applied-while-specified-in-both-node-configuration-file-and-cluster-settings/297966)
**Author:** [@Hao\_Yellow](https://discuss.elastic.co/u/Hao_Yellow)\ **Replies:** 13\ **Last updated:** [February 23, 2022, 3:21pm UTC](https://discuss.elastic.co/t/whats-the-disk-watermark-actually-applied-while-specified-in-both-node-configuration-file-and-cluster-settings/297966 "2022-02-23T15:21:44Z")
Hello, I have a cluster of several nodes, where each node has the following configuration about the disk watermark: cluster.routing.allocation.disk.watermark.low=60gb cluster.routing.allocation.disk.watermark.high=50gb … --- ## [Kibana 6 - Visualization Buckets at different timescales \[RESOLVED\]](https://discuss.elastic.co/t/kibana-6-visualization-buckets-at-different-timescales-resolved/105394)
**Author:** [@gotjoshua](https://discuss.elastic.co/u/gotjoshua)\ **Replies:** 10\ **Last updated:** [November 15, 2017, 9:03pm UTC](https://discuss.elastic.co/t/kibana-6-visualization-buckets-at-different-timescales-resolved/105394 "2017-11-15T21:03:09Z")
I have regular data coming in from heartbeat for 4 https server checks, every 20 seconds. The data is fine. Visualizing the last hour looks great: \[ResponseTimes-1Hour\] Visualizing the last 12 hours is half empty (in… --- ## [Kibana 5 failed to install on CentOS 7 - SOLVED](https://discuss.elastic.co/t/kibana-5-failed-to-install-on-centos-7-solved/64087)
**Author:** [@Vishal\_Sharma1](https://discuss.elastic.co/u/Vishal_Sharma1)\ **Replies:** 13\ **Last updated:** [November 1, 2016, 4:30am UTC](https://discuss.elastic.co/t/kibana-5-failed-to-install-on-centos-7-solved/64087 "2016-11-01T04:30:18Z")
hi, I have followed the official document and tried installing Elastic Stack 5. When i try to do it i get below Dependencies Resolved ================================================================================… --- ## [Help with logstash json output to split a field in multiple variables and combine them to a new field](https://discuss.elastic.co/t/help-with-logstash-json-output-to-split-a-field-in-multiple-variables-and-combine-them-to-a-new-field/122592)
**Author:** [@micruzz82](https://discuss.elastic.co/u/micruzz82)\ **Replies:** 11\ **Last updated:** [March 9, 2018, 9:57pm UTC](https://discuss.elastic.co/t/help-with-logstash-json-output-to-split-a-field-in-multiple-variables-and-combine-them-to-a-new-field/122592 "2018-03-09T21:57:10Z")
Hi All I have this JSON output as below. { "totalCount": "1", "imdata": \[ { "l1PhysIf": { "attributes": { "adminSt": "up", "autoNeg": "on", "brkoutMap": "none", "bw": "0", "childAction": "", "delay": "1", "descr": "srv… --- ## [Timeouts on Node Stats API?](https://discuss.elastic.co/t/timeouts-on-node-stats-api/16337)
**Author:** [@Xiao\_Yu](https://discuss.elastic.co/u/Xiao_Yu)\ **Replies:** 9\ **Last updated:** [March 17, 2014, 6:12pm UTC](https://discuss.elastic.co/t/timeouts-on-node-stats-api/16337 "2014-03-17T18:12:17Z")
Hello, We have a cluster that's still running on 0.90.9 and it's recently developed an interesting issue. Random (data) nodes within our cluster will occasionally stop responding to the node stats API and we see e… --- ## [Objects showing in Discover as json, not discrete fields](https://discuss.elastic.co/t/objects-showing-in-discover-as-json-not-discrete-fields/180178)
**Author:** [@darkmoon](https://discuss.elastic.co/u/darkmoon)\ **Replies:** 9\ **Last updated:** [May 17, 2019, 3:57pm UTC](https://discuss.elastic.co/t/objects-showing-in-discover-as-json-not-discrete-fields/180178 "2019-05-17T15:57:29Z")
After deleting and recreating my .kibana index to fix the API/FORBIDDEN issue, all of my structured fields are showing at top level json blobs. Refreshing the index pattern doesn't help. Mapping: \` "meta": { "dynamic… --- ## [How to create a new line on a kibana canvas table](https://discuss.elastic.co/t/how-to-create-a-new-line-on-a-kibana-canvas-table/248179)
**Author:** [@francieliton\_araujo](https://discuss.elastic.co/u/francieliton_araujo)\ **Replies:** 10\ **Last updated:** [September 21, 2020, 5:32pm UTC](https://discuss.elastic.co/t/how-to-create-a-new-line-on-a-kibana-canvas-table/248179 "2020-09-21T17:32:55Z")
Hello, I'm new here, and in kibana. I would like to know if it is possible and how it would be, to put a new line on a table. I made an essql query: essql:SELECT sum(segrelatorio) as value,severidade FROM "databases\*… [Previous page](https://discuss.elastic.co/top.md?page=104&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=106&per_page=50&period=all)