# Top **URL:** https://discuss.elastic.co/top.md?page=1066&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1067 --- ## [Can I do query to retrieve some doc in ingest processor](https://discuss.elastic.co/t/can-i-do-query-to-retrieve-some-doc-in-ingest-processor/107878)
**Author:** [@itplayer](https://discuss.elastic.co/u/itplayer)\ **Replies:** 6\ **Last updated:** [November 16, 2017, 10:18am UTC](https://discuss.elastic.co/t/can-i-do-query-to-retrieve-some-doc-in-ingest-processor/107878 "2017-11-16T10:18:20Z")
Hi Does anyone have experience that writes your own ingest processor? Is this possible to make a ingest processor that can query ES to retrieve a doc and that fill to the ingest doc before actual index? By directly us… --- ## [Meaning of error "Unexpected character ('p' (code 112))"](https://discuss.elastic.co/t/meaning-of-error-unexpected-character-p-code-112/205313)
**Author:** [@planetracer](https://discuss.elastic.co/u/planetracer)\ **Replies:** 1\ **Last updated:** [October 26, 2019, 12:59pm UTC](https://discuss.elastic.co/t/meaning-of-error-unexpected-character-p-code-112/205313 "2019-10-26T12:59:54Z")
Here is the full error: { "error" : { "root\_cause" : \[ { "type" : "json\_parse\_exception", "reason" : "Unexpected character ('p' (code 112)): was expecting either '' or '/' for a comment\\n at \[Source: org.elasticsea… --- ## [Elasticsearch bulk insert JSON file](https://discuss.elastic.co/t/elasticsearch-bulk-insert-json-file/47814)
**Author:** [@amlife](https://discuss.elastic.co/u/amlife)\ **Replies:** 1\ **Last updated:** [April 19, 2016, 10:42pm UTC](https://discuss.elastic.co/t/elasticsearch-bulk-insert-json-file/47814 "2016-04-19T22:42:06Z")
have the following JSON file I have used awk to get rid of empty spaces, trailing, next line awk -v ORS= -v OFS= '{$1=$1}1' data.json I have added a create request at the top of my data.json followed by \\n and the… --- ## [Could not find hunspell dictionary \[US\]](https://discuss.elastic.co/t/could-not-find-hunspell-dictionary-us/26143)
**Author:** [@poonam](https://discuss.elastic.co/u/poonam)\ **Replies:** 1\ **Last updated:** [July 23, 2015, 10:47am UTC](https://discuss.elastic.co/t/could-not-find-hunspell-dictionary-us/26143 "2015-07-23T10:47:48Z")
I am trying to use hunspell . I have crated plugin and have dictionary in config path. in elasticsearch.yml I added indices.analysis.hunspell.dictionary.location: config\\hunspell indices.analysis.hunspell.dictionary.igno… --- ## [Create Visualization - Get Data for last month](https://discuss.elastic.co/t/create-visualization-get-data-for-last-month/261111)
**Author:** [@shubham184](https://discuss.elastic.co/u/shubham184)\ **Replies:** 3\ **Last updated:** [January 15, 2021, 2:37pm UTC](https://discuss.elastic.co/t/create-visualization-get-data-for-last-month/261111 "2021-01-15T14:37:49Z")
Dear, The purpose is to create a visualization Lets assume the following table. The Input table contains the user name and user login timestamp. The generated output should be only those users who have NOT logged i… --- ## [X-Pack Machine Learning- Lab 1](https://discuss.elastic.co/t/x-pack-machine-learning-lab-1/113112)
**Author:** [@Mohamed](https://discuss.elastic.co/u/Mohamed)\ **Replies:** 3\ **Last updated:** [December 25, 2017, 8:33am UTC](https://discuss.elastic.co/t/x-pack-machine-learning-lab-1/113112 "2017-12-25T08:33:52Z")
Hello, I am trying to execute logstash commande (as mentioned in Lab 1 instruction)cat stocks.csv | ./logstash -f stocks.conf to load data into elasticsearch but I found this error: An unexpected error occurred! {:er… --- ## [Change mapping without losing data](https://discuss.elastic.co/t/change-mapping-without-losing-data/61222)
**Author:** [@Ivan\_Ghisleni](https://discuss.elastic.co/u/Ivan_Ghisleni)\ **Replies:** 3\ **Last updated:** [September 22, 2016, 10:38am UTC](https://discuss.elastic.co/t/change-mapping-without-losing-data/61222 "2016-09-22T10:38:07Z")
Hi, Is it possible change mapping without losing the data? thanx Ivan --- ## [MapperParsingException: No handler for type \[completion\]](https://discuss.elastic.co/t/mapperparsingexception-no-handler-for-type-completion/13901)
**Author:** [@Barak\_Yaish](https://discuss.elastic.co/u/Barak_Yaish)\ **Replies:** 3\ **Last updated:** [October 10, 2013, 9:30am UTC](https://discuss.elastic.co/t/mapperparsingexception-no-handler-for-type-completion/13901 "2013-10-10T09:30:19Z")
Hi, Working with version 0.90.2, I'm trying to follow auto-complete blog http://www.elasticsearch.org/blog/you-complete-me/. However, trying to build the hotels index as in the example, I'm getting the following e… --- ## [Best Practices / Recommendations for Custom Objects](https://discuss.elastic.co/t/best-practices-recommendations-for-custom-objects/274081)
**Author:** [@Jeff\_Stevens](https://discuss.elastic.co/u/Jeff_Stevens)\ **Replies:** 2\ **Last updated:** [June 1, 2021, 6:16am UTC](https://discuss.elastic.co/t/best-practices-recommendations-for-custom-objects/274081 "2021-06-01T06:16:24Z")
We are evaluating ECS as a common transport schema for our events, logging, and messaging needs. Tags are not enough as we want to have sharable serialized compound objects. We initially started with the .NET NLog mapp… --- ## [Monitoring error after enabling security](https://discuss.elastic.co/t/monitoring-error-after-enabling-security/171395)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 2\ **Last updated:** [March 8, 2019, 4:12pm UTC](https://discuss.elastic.co/t/monitoring-error-after-enabling-security/171395 "2019-03-08T16:12:52Z")
We are trying to learn how to setup security. We have TLS for the transport using certutil, we have TSL for http using a commercial cert, setup default account passwords and connected via Kibana using the elastic accou… --- ## [Not Logging Account Lockout (4740)](https://discuss.elastic.co/t/not-logging-account-lockout-4740/138023)
**Author:** [@Innove](https://discuss.elastic.co/u/Innove)\ **Replies:** 2\ **Last updated:** [July 2, 2018, 1:46pm UTC](https://discuss.elastic.co/t/not-logging-account-lockout-4740/138023 "2018-07-02T13:46:15Z")
I have winlogbeat installed on a few desktops and our primary domain controller with all of them pointing to a SecurityOnion server with ELK. If I clear event logs (1102) for example, the event quickly shows up in my Kib… --- ## [Filter month](https://discuss.elastic.co/t/filter-month/86307)
**Author:** [@Padmavathy](https://discuss.elastic.co/u/Padmavathy)\ **Replies:** 2\ **Last updated:** [May 21, 2017, 2:26am UTC](https://discuss.elastic.co/t/filter-month/86307 "2017-05-21T02:26:35Z")
I am using Kibana 5 .I am drawing a line chart with a year's data.I need to filter out any one specific month say Feb . How to filter for specific months in Kibana 5? --- ## [Wildacard (.\*) is not giving as expected result](https://discuss.elastic.co/t/wildacard-is-not-giving-as-expected-result/114230)
**Author:** [@saravanan\_kutty](https://discuss.elastic.co/u/saravanan_kutty)\ **Replies:** 8\ **Last updated:** [January 31, 2018, 11:21am UTC](https://discuss.elastic.co/t/wildacard-is-not-giving-as-expected-result/114230 "2018-01-31T11:21:46Z")
Recently i used hostname: ".\*" which doesnt give any result surprisingly, since two weeks back it was working perfect. is there anything i am missing here and i need to have work around for it. Thanks in advance --- ## [Index rollover with date and time](https://discuss.elastic.co/t/index-rollover-with-date-and-time/283458)
**Author:** [@Felipe\_Fuller](https://discuss.elastic.co/u/Felipe_Fuller)\ **Replies:** 4\ **Last updated:** [September 6, 2021, 3:33pm UTC](https://discuss.elastic.co/t/index-rollover-with-date-and-time/283458 "2021-09-06T15:33:40Z")
Hi Community! I'm trying to create an index rollover with the date and hour when the new index is created because I set up the rollover every hour during the day. Having this in consideration, the format of the new inde… --- ## [Is positive lookbehind supported in Logstash at all?](https://discuss.elastic.co/t/is-positive-lookbehind-supported-in-logstash-at-all/267388)
**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\ **Replies:** 4\ **Last updated:** [March 17, 2021, 5:39pm UTC](https://discuss.elastic.co/t/is-positive-lookbehind-supported-in-logstash-at-all/267388 "2021-03-17T17:39:54Z")
Hi there all, i started with Logstash the other day and currently getting to know the tool. I have a situation here. Consider the below Baraccuda FW log entry 2018 01 30 13:12:21 Security +01:00 Block: type=FWD|proto=… --- ## [Filebeat path glob support](https://discuss.elastic.co/t/filebeat-path-glob-support/185288)
**Author:** [@SnakeByte](https://discuss.elastic.co/u/SnakeByte)\ **Replies:** 4\ **Last updated:** [June 12, 2019, 2:25am UTC](https://discuss.elastic.co/t/filebeat-path-glob-support/185288 "2019-06-12T02:25:42Z")
According to the docs: https://www.elastic.co/guide/en/logstash/6.7/glob-support.html It looks like there's some glob support for paths. However, a glob pattern I've written doesn't seem to be getting used by filebeat… --- ## [Filebeat not setting index name even though configured](https://discuss.elastic.co/t/filebeat-not-setting-index-name-even-though-configured/53793)
**Author:** [@whyapenny](https://discuss.elastic.co/u/whyapenny)\ **Replies:** 4\ **Last updated:** [June 24, 2016, 11:39am UTC](https://discuss.elastic.co/t/filebeat-not-setting-index-name-even-though-configured/53793 "2016-06-24T11:39:29Z")
In filebeat.yml i have set: index: filebeat-app yet in the json output there is nothing for index, and it still receives teh default logstash-$date index when inserted into elasticsearch. --- ## [High VIRT on ElasticSearch Java Process](https://discuss.elastic.co/t/high-virt-on-elasticsearch-java-process/15853)
**Author:** [@stefano\_ruggiero](https://discuss.elastic.co/u/stefano_ruggiero)\ **Replies:** 4\ **Last updated:** [February 17, 2014, 9:03pm UTC](https://discuss.elastic.co/t/high-virt-on-elasticsearch-java-process/15853 "2014-02-17T21:03:04Z")
Hi all, i would like to understand why my ElasticSearch Node is display me that 45 gb of VIRT memory is used even if the system is pretty cool... as i see if i run some query with kiaban the load averege goes sud… --- ## [CCR exception/warning issue. RetentionLeaseNotFoundException](https://discuss.elastic.co/t/ccr-exception-warning-issue-retentionleasenotfoundexception/257977)
**Author:** [@Armen\_Petrosyan](https://discuss.elastic.co/u/Armen_Petrosyan)\ **Replies:** 5\ **Last updated:** [December 9, 2020, 3:00pm UTC](https://discuss.elastic.co/t/ccr-exception-warning-issue-retentionleasenotfoundexception/257977 "2020-12-09T15:00:36Z")
Scenario Create leader cluster Create index with index.soft\_deletes.retention\_lease.period = 5s (\*\*\*). This period I choose only for test purposes. Index document and wait 5s before next step so retention lease expire C… --- ## [What is the bottleneck of elasticsearch? What gives the greatest performance boosts?](https://discuss.elastic.co/t/what-is-the-bottleneck-of-elasticsearch-what-gives-the-greatest-performance-boosts/243880)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 5\ **Last updated:** [August 6, 2020, 1:37pm UTC](https://discuss.elastic.co/t/what-is-the-bottleneck-of-elasticsearch-what-gives-the-greatest-performance-boosts/243880 "2020-08-06T13:37:33Z")
Hi, its a general question: What limits elasticsearch the most? Lets say we have a normal node with: i5, 4 Cores 32GB, DDR4 Ram 2TB SSD What will give me the greates performance boost when I change these components? … --- ## [Making filter for the last data set in Kibana discover](https://discuss.elastic.co/t/making-filter-for-the-last-data-set-in-kibana-discover/182553)
**Author:** [@JIYOUNG](https://discuss.elastic.co/u/JIYOUNG)\ **Replies:** 5\ **Last updated:** [May 27, 2019, 2:42am UTC](https://discuss.elastic.co/t/making-filter-for-the-last-data-set-in-kibana-discover/182553 "2019-05-27T02:42:28Z")
Hello. When using Kibana, I meet some problem. Kibana is tool using time-based. But I need to see the last data set. In Kibana Discover, I want to make Filter to see the last data. If using SQL, like the below: SELE… --- ## [How to start specified elasticsearch version using command "yarn elasticsearch"?](https://discuss.elastic.co/t/how-to-start-specified-elasticsearch-version-using-command-yarn-elasticsearch/123231)
**Author:** [@ahrtr](https://discuss.elastic.co/u/ahrtr)\ **Replies:** 5\ **Last updated:** [March 13, 2018, 8:07am UTC](https://discuss.elastic.co/t/how-to-start-specified-elasticsearch-version-using-command-yarn-elasticsearch/123231 "2018-03-13T08:07:42Z")
I am trying to developping a new kibana plugin against kibana 6.2. The steps as below, git clone GitHub - elastic/kibana: Your window into the Elastic Stack kibana cd kibana git checkout 6.2 nvm install "$(cat .node… --- ## [Different results based on the ordering of the search terms](https://discuss.elastic.co/t/different-results-based-on-the-ordering-of-the-search-terms/64286)
**Author:** [@nulpunkt](https://discuss.elastic.co/u/nulpunkt)\ **Replies:** 5\ **Last updated:** [November 7, 2016, 10:23am UTC](https://discuss.elastic.co/t/different-results-based-on-the-ordering-of-the-search-terms/64286 "2016-11-07T10:23:20Z")
Hi All! I'm facing a problem where ElasticSearch return different results for different orderings in the query. I have a document with the keyword "newkeyword" present, if I search for "newkeyword stnahoeu" it does not… --- ## [Kibana not showing all indices](https://discuss.elastic.co/t/kibana-not-showing-all-indices/221626)
**Author:** [@tbhaxor](https://discuss.elastic.co/u/tbhaxor)\ **Replies:** 1\ **Last updated:** [March 3, 2020, 2:07pm UTC](https://discuss.elastic.co/t/kibana-not-showing-all-indices/221626 "2020-03-03T14:07:27Z")
I have been trying to add visualizations on kibana for the beats. Unfortunately, the kibana isn't showing me any index pattern for the same All the indices Not showing even though i know the index names But indice… --- ## [Logstash RabbitMQ input plugin - How to define multiple routing\_key](https://discuss.elastic.co/t/logstash-rabbitmq-input-plugin-how-to-define-multiple-routing-key/183817)
**Author:** [@Ahmad\_Ahmadi](https://discuss.elastic.co/u/Ahmad_Ahmadi)\ **Replies:** 1\ **Last updated:** [June 3, 2019, 6:38am UTC](https://discuss.elastic.co/t/logstash-rabbitmq-input-plugin-how-to-define-multiple-routing-key/183817 "2019-06-03T06:38:23Z")
I'm using RabbitMQ plugin of Logstash to pull from RabbitMQ and push to Elasticsearch using this pipeline: input { rabbitmq { queue =\> "Elasticsearch\_Queue" host =\> "rabbitmq" exchange =\> "my… --- ## [File beat --\> logtash --\> conditional output](https://discuss.elastic.co/t/file-beat-logtash-conditional-output/155792)
**Author:** [@rajsolanki](https://discuss.elastic.co/u/rajsolanki)\ **Replies:** 7\ **Last updated:** [November 7, 2018, 10:23pm UTC](https://discuss.elastic.co/t/file-beat-logtash-conditional-output/155792 "2018-11-07T22:23:12Z")
Hi I did research in this forum and documentation but couldn't find any solution so posting here for help. OS : windows 10 Filebeat : 6.4.2 sending 2 CSV files to Logstash File name London.csv , Australia.csv Logsta… --- ## [No able to write in Elasticsearch index using Spark 2.0.0](https://discuss.elastic.co/t/no-able-to-write-in-elasticsearch-index-using-spark-2-0-0/58612)
**Author:** [@sumit\_gupta\_sgt](https://discuss.elastic.co/u/sumit_gupta_sgt)\ **Replies:** 1\ **Last updated:** [August 23, 2016, 2:37pm UTC](https://discuss.elastic.co/t/no-able-to-write-in-elasticsearch-index-using-spark-2-0-0/58612 "2016-08-23T14:37:25Z")
Hi All, Here is my setup information ES version: 2.3.3 Spark: 2.0.0 ES-Hadoop jar: elasticsearch-hadoop-2.3.3.jar ES-Spark Jar: elasticsearch-spark\_2.11-2.3.3.jar I am trying to read data from ES index and trying to … --- ## [Pass raw search object to \`SearchAsync\` Elastic.Clients.Elasticsearch 8.1.1 .NET](https://discuss.elastic.co/t/pass-raw-search-object-to-searchasync-elastic-clients-elasticsearch-8-1-1-net/334311)
**Author:** [@felix-stnr](https://discuss.elastic.co/u/felix-stnr)\ **Replies:** 0\ **Last updated:** [May 25, 2023, 11:10am UTC](https://discuss.elastic.co/t/pass-raw-search-object-to-searchasync-elastic-clients-elasticsearch-8-1-1-net/334311 "2023-05-25T11:10:55Z")
I am trying to implement an API, which allows users to dynamically query an Elasticsearch index. The API should therefore act like a "proxy" between the user and Elasticsearch (the API performs additional operations alon… --- ## [Elasticsearch-hadoop spark connector unable to connect/write using out-of-box ES server setup, & default library settings](https://discuss.elastic.co/t/elasticsearch-hadoop-spark-connector-unable-to-connect-write-using-out-of-box-es-server-setup-default-library-settings/251981)
**Author:** [@Chris\_Bedford](https://discuss.elastic.co/u/Chris_Bedford)\ **Replies:** 3\ **Last updated:** [October 16, 2020, 5:52pm UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-spark-connector-unable-to-connect-write-using-out-of-box-es-server-setup-default-library-settings/251981 "2020-10-16T17:52:29Z")
I had some problems using the Elasticsearch connector for Spark described here: https://www.elastic.co/guide/en/elasticsearch/hadoop/master/spark.html. I could not even get the examples on their page working with a plain… --- ## [Comprehensive parent-child Logstash/Kibana solution from separate events](https://discuss.elastic.co/t/comprehensive-parent-child-logstash-kibana-solution-from-separate-events/42741)
**Author:** [@kpdude77](https://discuss.elastic.co/u/kpdude77)\ **Replies:** 3\ **Last updated:** [January 11, 2017, 11:44am UTC](https://discuss.elastic.co/t/comprehensive-parent-child-logstash-kibana-solution-from-separate-events/42741 "2017-01-11T11:44:38Z")
We have a db table that represents sessions, and are using the jdbc plugin to import into LS. We also have various logs related to the session (whose lines contain the same session id as in the db table) that we are usin… --- ## [Elasticsearch in heroku](https://discuss.elastic.co/t/elasticsearch-in-heroku/182034)
**Author:** [@leobaiano](https://discuss.elastic.co/u/leobaiano)\ **Replies:** 2\ **Last updated:** [May 23, 2019, 12:19pm UTC](https://discuss.elastic.co/t/elasticsearch-in-heroku/182034 "2019-05-23T12:19:35Z")
I would like a help / example deploy elasticsearch in heroku. I have already seen that there are some add ons like Bonsai, however as far as I can see it does not allow modifying elasticsearch.yml and kibana.yml and I n… --- ## [2.5 second startup time for Java elasticsearch client on AWS Lambda](https://discuss.elastic.co/t/2-5-second-startup-time-for-java-elasticsearch-client-on-aws-lambda/177674)
**Author:** [@evdh](https://discuss.elastic.co/u/evdh)\ **Replies:** 2\ **Last updated:** [April 23, 2019, 10:12am UTC](https://discuss.elastic.co/t/2-5-second-startup-time-for-java-elasticsearch-client-on-aws-lambda/177674 "2019-04-23T10:12:51Z")
We're using AWS Lambda (Java) and the elasticsearch client to connect to a hosted elasticsearch instance on AWS. I encounter a long wait on the first request of about 2.5 seconds (on top of a cold start). After that it i… --- ## [License Installation](https://discuss.elastic.co/t/license-installation/77598)
**Author:** [@prakash1243](https://discuss.elastic.co/u/prakash1243)\ **Replies:** 2\ **Last updated:** [March 10, 2017, 4:02am UTC](https://discuss.elastic.co/t/license-installation/77598 "2017-03-10T04:02:20Z")
Hi - I was running the ES with X-pack with the free license, it got expired on last week, so I couldn't launch the Elastic search and Kibana. I've got the license file now, how do I install it ? Kiabana doesn't open, a… --- ## [Prevent %{field\_name} in output, for fields not always present](https://discuss.elastic.co/t/prevent-field-name-in-output-for-fields-not-always-present/31295)
**Author:** [@nekatreven](https://discuss.elastic.co/u/nekatreven)\ **Replies:** 2\ **Last updated:** [September 29, 2015, 4:47pm UTC](https://discuss.elastic.co/t/prevent-field-name-in-output-for-fields-not-always-present/31295 "2015-09-29T16:47:41Z")
Hello, Basically, the problem is that I need to include fields in my Logstash outputs that aren't always present in the event, but are sometimes present. By not present I mean that the field name is not a defined field … --- ## [I am trying to Use Webhook connector from ELK- Need Help](https://discuss.elastic.co/t/i-am-trying-to-use-webhook-connector-from-elk-need-help/350901)
**Author:** [@MOHAMMED\_ASIF\_Z](https://discuss.elastic.co/u/MOHAMMED_ASIF_Z)\ **Replies:** 6\ **Last updated:** [January 23, 2024, 11:45am UTC](https://discuss.elastic.co/t/i-am-trying-to-use-webhook-connector-from-elk-need-help/350901 "2024-01-23T11:45:14Z")
I am capturing IBM Tivoli Schedular logs using Elastic stach - so my idea is to retrigger a failed job based on the reasoning, so using query on the specify field i could get only the failure , but i want to try reach ou… --- ## [Testing aggregates =\> LogStash::ConfigurationError: Aggregate plugin: more than one filter which defines timeout options. But only defining once](https://discuss.elastic.co/t/testing-aggregates-logstash-aggregate-plugin-more-than-one-filter-which-defines-timeout-options-but-only-defining-once/289644)
**Author:** [@Colin\_K](https://discuss.elastic.co/u/Colin_K)\ **Replies:** 6\ **Last updated:** [December 26, 2021, 4:33am UTC](https://discuss.elastic.co/t/testing-aggregates-logstash-aggregate-plugin-more-than-one-filter-which-defines-timeout-options-but-only-defining-once/289644 "2021-12-26T04:33:57Z")
I'm trying to test my logstash configurations that use the aggregate plugin. I have not had any issues running them locally against the binary as I write them. But now I want to test the behavior expectations of the aggr… --- ## [Kibana that supports elasticsearch-hadoop 2.4.0](https://discuss.elastic.co/t/kibana-that-supports-elasticsearch-hadoop-2-4-0/62431)
**Author:** [@ebx](https://discuss.elastic.co/u/ebx)\ **Replies:** 6\ **Last updated:** [October 7, 2016, 2:27pm UTC](https://discuss.elastic.co/t/kibana-that-supports-elasticsearch-hadoop-2-4-0/62431 "2016-10-07T14:27:14Z")
I am a newbee to Elastic. I am using elasticsearch-hadoop-2.4.0 with pyspark. And I can successfully write to and read from elasticsearch from within pyspark. Now I want to visualize the data in Kibana. When I start Kiba… --- ## [How can I setup Alert and Actions privileges for a specific user role?](https://discuss.elastic.co/t/how-can-i-setup-alert-and-actions-privileges-for-a-specific-user-role/271121)
**Author:** [@Patr123](https://discuss.elastic.co/u/Patr123)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 2:22pm UTC](https://discuss.elastic.co/t/how-can-i-setup-alert-and-actions-privileges-for-a-specific-user-role/271121 "2021-05-20T14:22:23Z")
I am trying to setup roles in elasticsearch so that the user can create and setup alers in Alerts and Actions tab. I am getting "No permissions to create alerts" message in Alerts Tab. Any idea how I can setup these acce… --- ## [How to upload ".toml" rules from github to Kibana](https://discuss.elastic.co/t/how-to-upload-toml-rules-from-github-to-kibana/267274)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 1\ **Last updated:** [March 15, 2021, 7:24pm UTC](https://discuss.elastic.co/t/how-to-upload-toml-rules-from-github-to-kibana/267274 "2021-03-15T19:24:39Z")
Hello, I would like to upload this rule: https://github.com/elastic/detection-rules/blob/a0e86e20d6ad039dfe4446b28f3c29642b50385c/rules/windows/credential\_access\_cmdline\_dump\_tool.toml to my Cluster The problem is in K… --- ## [Elastic Search to pull data from DB2 at regular intervals](https://discuss.elastic.co/t/elastic-search-to-pull-data-from-db2-at-regular-intervals/157961)
**Author:** [@rameshkv1989](https://discuss.elastic.co/u/rameshkv1989)\ **Replies:** 1\ **Last updated:** [November 23, 2018, 6:22am UTC](https://discuss.elastic.co/t/elastic-search-to-pull-data-from-db2-at-regular-intervals/157961 "2018-11-23T06:22:57Z")
Hi, Any one has any idea how Elastic Search can pull data from DB2 at regular intervals. Can we use Logstash for querying DB2 continuously and push to Elastic Search. Kindly advice. --- ## [Kibana Posted JSON should be converted as Tabular format](https://discuss.elastic.co/t/kibana-posted-json-should-be-converted-as-tabular-format/85267)
**Author:** [@ssuresh](https://discuss.elastic.co/u/ssuresh)\ **Replies:** 1\ **Last updated:** [May 10, 2017, 8:04pm UTC](https://discuss.elastic.co/t/kibana-posted-json-should-be-converted-as-tabular-format/85267 "2017-05-10T20:04:33Z")
I am new to Kibana. Currently App generates events in JSON format, send to Graylog. We want to move to Kibana. If we search the events, result JSONs should be shown as Table format and as each key as column name. Is … --- ## [Monitoring not working - 5.1.1](https://discuss.elastic.co/t/monitoring-not-working-5-1-1/80930)
**Author:** [@askids](https://discuss.elastic.co/u/askids)\ **Replies:** 1\ **Last updated:** [April 2, 2017, 10:03pm UTC](https://discuss.elastic.co/t/monitoring-not-working-5-1-1/80930 "2017-04-02T22:03:12Z")
hi, I am running Elasticsearch and Kibana 5.1.1. I have 4 node test cluster enabled with all roles, running on windows 2008 R2. I installed the x-pack plugin on one of the Elasticsearch and Kibana node (with Kibana poi… --- ## [Java api for terms lookup query](https://discuss.elastic.co/t/java-api-for-terms-lookup-query/37892)
**Author:** [@jimyoo](https://discuss.elastic.co/u/jimyoo)\ **Replies:** 1\ **Last updated:** [May 6, 2016, 12:02am UTC](https://discuss.elastic.co/t/java-api-for-terms-lookup-query/37892 "2016-05-06T00:02:22Z")
How do I implement a terms query like under in Java? Anyway to use termsQuery() or other way? "query" : { "terms" : { "user" : { "index" : "users", "type" : "user", "id" : "2", … --- ## [APM java agent request timeout logs](https://discuss.elastic.co/t/apm-java-agent-request-timeout-logs/268695)
**Author:** [@EdeV](https://discuss.elastic.co/u/EdeV)\ **Replies:** 4\ **Last updated:** [March 31, 2021, 3:50pm UTC](https://discuss.elastic.co/t/apm-java-agent-request-timeout-logs/268695 "2021-03-31T15:50:38Z")
I have a question regarding the following information noted in the APM Java Agent Reference \[1.x\] Troubleshooting guide. Since none of these continuously repeating DEBUG logs appear to be associated with an other WARN o… --- ## [Filebeat randomly missing input records](https://discuss.elastic.co/t/filebeat-randomly-missing-input-records/224428)
**Author:** [@Henk21](https://discuss.elastic.co/u/Henk21)\ **Replies:** 4\ **Last updated:** [March 24, 2020, 2:59pm UTC](https://discuss.elastic.co/t/filebeat-randomly-missing-input-records/224428 "2020-03-24T14:59:58Z")
We routinely (re-)load ISE events in elasticsearch using the following command: cat ${FILELIST} | sort -u \>\>iselog.log.reprocess We sort the input file as it is made of ISE log events over multiple lines, and in our cu… --- ## [Uninitialized constant LogStash::Filters::CIDR::IPAddr](https://discuss.elastic.co/t/uninitialized-constant-logstash-ipaddr/209337)
**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\ **Replies:** 4\ **Last updated:** [November 25, 2019, 7:10pm UTC](https://discuss.elastic.co/t/uninitialized-constant-logstash-ipaddr/209337 "2019-11-25T19:10:39Z")
Hi All, For some reason I am getting the below error. I have checked my CIDR config and the appear correct to me. I do several CIDR checks like below where I set different tags and use different networks. Can someone p… --- ## [Logstash 7.1.0 does not start as service RHEL 7](https://discuss.elastic.co/t/logstash-7-1-0-does-not-start-as-service-rhel-7/208279)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 4\ **Last updated:** [November 21, 2019, 8:12am UTC](https://discuss.elastic.co/t/logstash-7-1-0-does-not-start-as-service-rhel-7/208279 "2019-11-21T08:12:48Z")
I just installed logstash 7.1.0 from an RPM with sudo yum install logstash.7.1.0.rpm system has 32 GB RAM. When im trying to run the service as \[root@elk02 ~\]# sudo systemctl start logstash Failed to start logstash.s… --- ## [Metricbeat issue: The request for this panel failed](https://discuss.elastic.co/t/metricbeat-issue-the-request-for-this-panel-failed/145108)
**Author:** [@Shree](https://discuss.elastic.co/u/Shree)\ **Replies:** 4\ **Last updated:** [August 21, 2018, 7:15am UTC](https://discuss.elastic.co/t/metricbeat-issue-the-request-for-this-panel-failed/145108 "2018-08-21T07:15:05Z")
Hi, I am getting this on my kibana dashboard. I installed metricbeat and wanted to see the performance of system but this happened. could someone help me with this?? --- ## [Running Elastic 5.4 on CentOS-Docker(installed by binary file) does not bound](https://discuss.elastic.co/t/running-elastic-5-4-on-centos-docker-installed-by-binary-file-does-not-bound/88206)
**Author:** [@Juneyoung\_Oh](https://discuss.elastic.co/u/Juneyoung_Oh)\ **Replies:** 4\ **Last updated:** [June 7, 2017, 6:09am UTC](https://discuss.elastic.co/t/running-elastic-5-4-on-centos-docker-installed-by-binary-file-does-not-bound/88206 "2017-06-07T06:09:30Z")
Hi. I am trying to run elasticsearch on centos-docker image. As far as I know, since running daemon inside the docker container has some problem(like auth..), I made a Dockerfile like below. FROM centos MAINTAINER june… --- ## [Windows Elasticsearch cluster performance tuning](https://discuss.elastic.co/t/windows-elasticsearch-cluster-performance-tuning/16550)
**Author:** [@Eric\_Brandes](https://discuss.elastic.co/u/Eric_Brandes)\ **Replies:** 4\ **Last updated:** [March 23, 2014, 7:13pm UTC](https://discuss.elastic.co/t/windows-elasticsearch-cluster-performance-tuning/16550 "2014-03-23T19:13:49Z")
Hey all, I have a 3 node Elasticsearch 1.0.1 cluster running on Windows Server 2012 (in Azure). There's about 20 million documents that take up a total of 40GB (including replicas). There's about 400 indexes in tot… [Previous page](https://discuss.elastic.co/top.md?page=1065&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1067&per_page=50&period=all)