# Top **URL:** https://discuss.elastic.co/top.md?page=1080&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1081 --- ## [Harvesting Old Files That Were Recently Modified](https://discuss.elastic.co/t/harvesting-old-files-that-were-recently-modified/72105)
**Author:** [@locolbd](https://discuss.elastic.co/u/locolbd)\ **Replies:** 3\ **Last updated:** [January 23, 2017, 8:19am UTC](https://discuss.elastic.co/t/harvesting-old-files-that-were-recently-modified/72105 "2017-01-23T08:19:27Z")
Hello All, I am unable to get filebeat to harvest a file that was created years ago but recently modified. Background: Curator deletes any index that is older than 14 days. (elasticsearch) File was created 2013, howe… --- ## [Rolling restart master election takes 2min](https://discuss.elastic.co/t/rolling-restart-master-election-takes-2min/104099)
**Author:** [@AlexW](https://discuss.elastic.co/u/AlexW)\ **Replies:** 6\ **Last updated:** [October 17, 2017, 1:43pm UTC](https://discuss.elastic.co/t/rolling-restart-master-election-takes-2min/104099 "2017-10-17T13:43:11Z")
Hi! On my Elasticsearch 5.3.2 cluster it takes nearly 2min to elect a new master. My screnario is a rolling restart. The master is restarted last. Once it gets restarted the cluster "panics" and searches for a new maste… --- ## [Multi Node - Same Cluster Same hosts](https://discuss.elastic.co/t/multi-node-same-cluster-same-hosts/99974)
**Author:** [@naoy](https://discuss.elastic.co/u/naoy)\ **Replies:** 6\ **Last updated:** [September 12, 2017, 1:46am UTC](https://discuss.elastic.co/t/multi-node-same-cluster-same-hosts/99974 "2017-09-12T01:46:12Z")
Hello, On our Production Platform we have Heap troubles which obliges us to restart our cluster every 10days~ (Heap of each nodes increase to 100%, so timeout on all cluster etc...) data : 33TB, 700indx replicat 1 We… --- ## [Can't turn back index.translog.durability to request](https://discuss.elastic.co/t/cant-turn-back-index-translog-durability-to-request/71725)
**Author:** [@mvleandro](https://discuss.elastic.co/u/mvleandro)\ **Replies:** 6\ **Last updated:** [January 16, 2017, 2:09pm UTC](https://discuss.elastic.co/t/cant-turn-back-index-translog-durability-to-request/71725 "2017-01-16T14:09:20Z")
Hello everyone! I am using Elasticsearch in version 5.1.1. Recently i've changed my translog durability to async. I am trying to turn back my index.translog.durability from async to request but i am receiving acknowl… --- ## [Logstash Filter for Cisco ASA Source Destination and Communication](https://discuss.elastic.co/t/logstash-filter-for-cisco-asa-source-destination-and-communication/322063)
**Author:** [@Pratik\_Srivastava](https://discuss.elastic.co/u/Pratik_Srivastava)\ **Replies:** 5\ **Last updated:** [December 28, 2022, 9:41pm UTC](https://discuss.elastic.co/t/logstash-filter-for-cisco-asa-source-destination-and-communication/322063 "2022-12-28T21:41:31Z")
I want to configure logstash filter to see asa logs with communication detail. LOG Sample: Dec 27 02:48:08 Test-FW : %ASA-6-302014: Teardown TCP connection 3505833084 for Test-OUT:192.168.1.10/58538 to Mgmt-IN:192.168.1… --- ## [Change date format in timepicker from 24 hr to 12 hour](https://discuss.elastic.co/t/change-date-format-in-timepicker-from-24-hr-to-12-hour/270108)
**Author:** [@fidsamurai](https://discuss.elastic.co/u/fidsamurai)\ **Replies:** 5\ **Last updated:** [April 21, 2021, 6:41am UTC](https://discuss.elastic.co/t/change-date-format-in-timepicker-from-24-hr-to-12-hour/270108 "2021-04-21T06:41:53Z")
Hi, I would like to change the time format in the date-picker in Discover, Visualizations and Dashboards from 24 hours to 12 hours eg. currently it's 15:30 16:00.... I would like it to show as 3:30 pm 4:00pm. Could som… --- ## [Adding a new field to an index](https://discuss.elastic.co/t/adding-a-new-field-to-an-index/39410)
**Author:** [@Idarlington](https://discuss.elastic.co/u/Idarlington)\ **Replies:** 5\ **Last updated:** [June 19, 2017, 2:49pm UTC](https://discuss.elastic.co/t/adding-a-new-field-to-an-index/39410 "2017-06-19T14:49:06Z")
Hello, In our elasticsearch index, we have a field time that records the time a document was inserted, we would like to update the index to store this in the default time stamp field (\_timestamp). Please how can i d… --- ## [Unable to fetch mapping debian server](https://discuss.elastic.co/t/unable-to-fetch-mapping-debian-server/41755)
**Author:** [@m.francia](https://discuss.elastic.co/u/m.francia)\ **Replies:** 5\ **Last updated:** [February 15, 2016, 3:57pm UTC](https://discuss.elastic.co/t/unable-to-fetch-mapping-debian-server/41755 "2016-02-15T15:57:42Z")
Hi! I have installed ELK in a debian server and I have this issue when I´m trying to index my data. I have read many solutions and I tried the majority of the solutions. I tried to change the ES port and doesn… --- ## [Modify values in json array with Ruby](https://discuss.elastic.co/t/modify-values-in-json-array-with-ruby/306756)
**Author:** [@Long\_Nguyen](https://discuss.elastic.co/u/Long_Nguyen)\ **Replies:** 4\ **Last updated:** [June 9, 2022, 6:42pm UTC](https://discuss.elastic.co/t/modify-values-in-json-array-with-ruby/306756 "2022-06-09T18:42:30Z")
Hello everyone, I have a json structure as follows: { "server":\[ { "active":true, "objID":1 }, { "active":true, "objID":2 }, { "active":false, … --- ## [Visualization : count every occurrence of every not null field](https://discuss.elastic.co/t/visualization-count-every-occurrence-of-every-not-null-field/215101)
**Author:** [@GabrielM](https://discuss.elastic.co/u/GabrielM)\ **Replies:** 4\ **Last updated:** [February 7, 2020, 10:00am UTC](https://discuss.elastic.co/t/visualization-count-every-occurrence-of-every-not-null-field/215101 "2020-02-07T10:00:01Z")
Hello ! Is there a way to count the number of occurrences of each not null field in a visualization (a table seems appropriate to me) Kibana please? Thank you in advance and have a nice day ! --- ## [Elastic URL Dead](https://discuss.elastic.co/t/elastic-url-dead/187068)
**Author:** [@prasath\_rao](https://discuss.elastic.co/u/prasath_rao)\ **Replies:** 4\ **Last updated:** [June 25, 2019, 5:37am UTC](https://discuss.elastic.co/t/elastic-url-dead/187068 "2019-06-25T05:37:21Z")
Hi Team, Working on 3 node cluster Architecture Environment - AWS t2.xlarge instances Disk - EBS io1 300GB 15k IOPS APP Servers Elastic Nodes - 3 (a,a1,b) Logstash - 1 (a) WEB Servers Rabbit MQ - 2 (a.b) Issue :… --- ## [How to handle json-formated data in input channel in connection with multiline?](https://discuss.elastic.co/t/how-to-handle-json-formated-data-in-input-channel-in-connection-with-multiline/148464)
**Author:** [@elk\_kl](https://discuss.elastic.co/u/elk_kl)\ **Replies:** 4\ **Last updated:** [September 17, 2018, 3:43pm UTC](https://discuss.elastic.co/t/how-to-handle-json-formated-data-in-input-channel-in-connection-with-multiline/148464 "2018-09-17T15:43:27Z")
Hi all, I am currently trying to apply the multiline codec (with particular regards to Java stack traces) in the input tcp stream in logstash on events (logs) that are provided to logstash by the logspout-logstash tool … --- ## [X pack update license](https://discuss.elastic.co/t/x-pack-update-license/79422)
**Author:** [@Sujith](https://discuss.elastic.co/u/Sujith)\ **Replies:** 4\ **Last updated:** [March 21, 2017, 3:51pm UTC](https://discuss.elastic.co/t/x-pack-update-license/79422 "2017-03-21T15:51:23Z")
Hi team, While updating xpack license, i can see bewlo warning message as graph and other components will be disabled. C:\\Program Files\\cURL\\bin\>curl.exe -XPUT -u elastic:changeme "http://bngwidap108 .aonnet.aon.net:… --- ## [Please fix 10 min tutorial](https://discuss.elastic.co/t/please-fix-10-min-tutorial/43420)
**Author:** [@Ivo\_Stoyanoff](https://discuss.elastic.co/u/Ivo_Stoyanoff)\ **Replies:** 4\ **Last updated:** [March 4, 2016, 5:54pm UTC](https://discuss.elastic.co/t/please-fix-10-min-tutorial/43420 "2016-03-04T17:54:47Z")
I am new to Kibana and tried to follow 10 min walkthrough. There are some problem with the shakespeare.json file - unable to download it. Found orginal json file but bulk import to ES is not simple. There is no documenta… --- ## [Need help to create current date based Index in LS](https://discuss.elastic.co/t/need-help-to-create-current-date-based-index-in-ls/42834)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 4\ **Last updated:** [February 26, 2016, 9:51am UTC](https://discuss.elastic.co/t/need-help-to-create-current-date-based-index-in-ls/42834 "2016-02-26T09:51:52Z")
Hi Experts, I am aware that I can use following to create date index . index =\> "prod-%{+YYYY.MM.dd}" but the problem is, it is picking up logs date rather current date, what I want is to create index on current date … --- ## [Grok space expression optional](https://discuss.elastic.co/t/grok-space-expression-optional/152631)
**Author:** [@rotem\_lom](https://discuss.elastic.co/u/rotem_lom)\ **Replies:** 2\ **Last updated:** [October 21, 2018, 12:34pm UTC](https://discuss.elastic.co/t/grok-space-expression-optional/152631 "2018-10-21T12:34:06Z")
Hi there, In my environments I have the following log files: Domain name: WORKGROUP Console user name:Administrator Console user groups: \[Administrators,\] Logged in users: \[Administrator,\] OS version: Windows 10 OS Pl… --- ## [How to solve Visualize undefined error](https://discuss.elastic.co/t/how-to-solve-visualize-undefined-error/132142)
**Author:** [@GibbsKim](https://discuss.elastic.co/u/GibbsKim)\ **Replies:** 2\ **Last updated:** [May 18, 2018, 1:45am UTC](https://discuss.elastic.co/t/how-to-solve-visualize-undefined-error/132142 "2018-05-18T01:45:44Z")
Hi. I'm coding custom plugin. It is wanting to show four kibana visualizes. My ES and Kibana versions are 6.2.2 and plugin files consist of below. package.json \[image\] index.js \[image\] upper two things in 'my\_p… --- ## [Non-Kibana Front End For Graphing Data in Elasticsearch](https://discuss.elastic.co/t/non-kibana-front-end-for-graphing-data-in-elasticsearch/88893)
**Author:** [@cb2015](https://discuss.elastic.co/u/cb2015)\ **Replies:** 2\ **Last updated:** [June 9, 2017, 9:41pm UTC](https://discuss.elastic.co/t/non-kibana-front-end-for-graphing-data-in-elasticsearch/88893 "2017-06-09T21:41:40Z")
Hi Everyone, I love using each part of the ELK stack, however, I need to build dashboards which will be displayed on 60 inch screens that can be viewed from 30+ feet away. With the current level of font customizati… --- ## [Issue with Hive mapping of ES nested fields](https://discuss.elastic.co/t/issue-with-hive-mapping-of-es-nested-fields/43421)
**Author:** [@Yari\_Marchetti](https://discuss.elastic.co/u/Yari_Marchetti)\ **Replies:** 2\ **Last updated:** [March 12, 2016, 2:15pm UTC](https://discuss.elastic.co/t/issue-with-hive-mapping-of-es-nested-fields/43421 "2016-03-12T14:15:31Z")
Hello, I'm having some issue with mapping to an Hive field to a ES nested field. On ES I have a document like: { "name": "test1", "custom\_data": { "session\_id": "d41442b987b5bc8103000a2cc2cfb062", } } … --- ## [Slow upserts](https://discuss.elastic.co/t/slow-upserts/42280)
**Author:** [@Neera\_Vats](https://discuss.elastic.co/u/Neera_Vats)\ **Replies:** 1\ **Last updated:** [February 20, 2016, 4:37pm UTC](https://discuss.elastic.co/t/slow-upserts/42280 "2016-02-20T16:37:51Z")
Hello everyone, I am using python helpers to update an elasticsearch index. If document already exists, update script appends to an array of json objects. It takes about 1 hours to update 10 million records. Are upse… --- ## [Kibana search with partial match](https://discuss.elastic.co/t/kibana-search-with-partial-match/37468)
**Author:** [@ayasha88](https://discuss.elastic.co/u/ayasha88)\ **Replies:** 1\ **Last updated:** [December 17, 2015, 7:49pm UTC](https://discuss.elastic.co/t/kibana-search-with-partial-match/37468 "2015-12-17T19:49:55Z")
Hi I have a field called ipclient inside my properties. It is of string type because I was not able to change its type and by default if you create the index with log4net.elasticsearch it is set as string. Anyway now I… --- ## [Need some help with custom grok pattern](https://discuss.elastic.co/t/need-some-help-with-custom-grok-pattern/100282)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 4\ **Last updated:** [September 14, 2017, 12:20am UTC](https://discuss.elastic.co/t/need-some-help-with-custom-grok-pattern/100282 "2017-09-14T00:20:17Z")
Hello, I'm working on a filter to make sense out of equipment logs I have but I'm stuck because of my own incompetence. Are there any resources online that explain, on a idiot level, how to write patterns? I've looked a… --- ## [Create enrollment for kibana impossible with certificate Lets Encript](https://discuss.elastic.co/t/create-enrollment-for-kibana-impossible-with-certificate-lets-encript/317294)
**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\ **Replies:** 3\ **Last updated:** [October 27, 2022, 6:54am UTC](https://discuss.elastic.co/t/create-enrollment-for-kibana-impossible-with-certificate-lets-encript/317294 "2022-10-27T06:54:42Z")
After the problem I indicated in the post I can't get Elastic and Kibana to work with real certificates I was finally able to understand the issue of needing to pass the --url in the command. But now when I want to gene… --- ## [Logstash strip string from field](https://discuss.elastic.co/t/logstash-strip-string-from-field/280233)
**Author:** [@Hamza\_El\_Aouane](https://discuss.elastic.co/u/Hamza_El_Aouane)\ **Replies:** 8\ **Last updated:** [August 2, 2021, 5:24pm UTC](https://discuss.elastic.co/t/logstash-strip-string-from-field/280233 "2021-08-02T17:24:16Z")
Hi guys. In my logstash stream, I have a some filter to add a fields which is the merging of other fields. as follow: if \[destinationUserName\] and \[sourceUserName\] { mutate { add\_field =\> { "userID" =\> "%{ad.login… --- ## [Metricbeat w/ aws module says failed to list account aliases and failed to get caller identity](https://discuss.elastic.co/t/metricbeat-w-aws-module-says-failed-to-list-account-aliases-and-failed-to-get-caller-identity/234638)
**Author:** [@syost](https://discuss.elastic.co/u/syost)\ **Replies:** 3\ **Last updated:** [June 2, 2020, 7:14pm UTC](https://discuss.elastic.co/t/metricbeat-w-aws-module-says-failed-to-list-account-aliases-and-failed-to-get-caller-identity/234638 "2020-06-02T19:14:39Z")
I've enabled the metricbeat module called aws. When starting metricbeat I receive the following errors... 2020-05-27T23:59:07.253Z INFO \[monitoring\] log/log.go:118 Starting metrics logging every 30s 2020-05-27T23:59:07.… --- ## [\[ELK\] node shutdown](https://discuss.elastic.co/t/elk-node-shutdown/175348)
**Author:** [@Alessio\_Creo](https://discuss.elastic.co/u/Alessio_Creo)\ **Replies:** 8\ **Last updated:** [April 4, 2019, 5:12pm UTC](https://discuss.elastic.co/t/elk-node-shutdown/175348 "2019-04-04T17:12:02Z")
Good Morning, I'm in a strange situation. I started with a single node cluster where were runnning Elasticsearch, Kibana and Logstash. After the analysis of data volumes we decide to expand our cluster, so we added 2 n… --- ## [How to send a link with time that watcher check](https://discuss.elastic.co/t/how-to-send-a-link-with-time-that-watcher-check/152234)
**Author:** [@\_Sergey](https://discuss.elastic.co/u/_Sergey)\ **Replies:** 3\ **Last updated:** [October 16, 2018, 10:35am UTC](https://discuss.elastic.co/t/how-to-send-a-link-with-time-that-watcher-check/152234 "2018-10-16T10:35:06Z")
Hello all, We have watchers that send us the notifications with link to visualizations. Almost all watchers check period like "now-1h" or similar. My question is: Is there any possible way that my watchers will send me… --- ## [Can Not Log the User and Query With Shield](https://discuss.elastic.co/t/can-not-log-the-user-and-query-with-shield/60046)
**Author:** [@dude04](https://discuss.elastic.co/u/dude04)\ **Replies:** 3\ **Last updated:** [January 16, 2017, 9:36am UTC](https://discuss.elastic.co/t/can-not-log-the-user-and-query-with-shield/60046 "2017-01-16T09:36:27Z")
I am using Kibana 4.6.0 and Shield 2.4.0 and am attempting to log the user performing the search and his/her specific query. ES version is 2.4.0. I can't seem to get the Shield auditing to capture the user's actual sea… --- ## [Multilingual Search in Elastic Search](https://discuss.elastic.co/t/multilingual-search-in-elastic-search/8508)
**Author:** [@ajasuja18](https://discuss.elastic.co/u/ajasuja18)\ **Replies:** 3\ **Last updated:** [July 25, 2012, 10:23am UTC](https://discuss.elastic.co/t/multilingual-search-in-elastic-search/8508 "2012-07-25T10:23:41Z")
Hey, I am new to Elastic Search. I wanted to know if Elastic Search support multilingual search support. If yes, then for which languages? If it is not supported by default, then can we make it support through… --- ## [Elasticsearch won't start on reboot](https://discuss.elastic.co/t/elasticsearch-wont-start-on-reboot/172228)
**Author:** [@Steve\_Potter](https://discuss.elastic.co/u/Steve_Potter)\ **Replies:** 0\ **Last updated:** [March 14, 2019, 12:28am UTC](https://discuss.elastic.co/t/elasticsearch-wont-start-on-reboot/172228 "2019-03-14T00:28:29Z")
When my CentOS 7 system boots, elasticsearch fails to start with the message Failed at step RUNTIME\_DIRECTORY spawning /usr/share/elasticsearch/bin/elasticsearch: File exists Once the system is up, it starts fine with … --- ## [Kibana documentation search is not working](https://discuss.elastic.co/t/kibana-documentation-search-is-not-working/377334)
**Author:** [@alextg](https://discuss.elastic.co/u/alextg)\ **Replies:** 5\ **Last updated:** [May 25, 2025, 8:44am UTC](https://discuss.elastic.co/t/kibana-documentation-search-is-not-working/377334 "2025-05-25T08:44:08Z")
Hi, While using the Kibana documentation link from the Help button on the upper right side of the elastic page, I noticed the search functionality is not working as before, in other words it sent me to unrelated links o… --- ## [LS doesn't index to ES during tutorial](https://discuss.elastic.co/t/ls-doesnt-index-to-es-during-tutorial/42568)
**Author:** [@andrew.trobec](https://discuss.elastic.co/u/andrew.trobec)\ **Replies:** 7\ **Last updated:** [February 25, 2016, 8:44am UTC](https://discuss.elastic.co/t/ls-doesnt-index-to-es-during-tutorial/42568 "2016-02-25T08:44:15Z")
Hello! I am very very new to this platform so I have very little idea of what I'm doing. I'm following the LS tutorial and have reached the "Setting Up an Advanced Logstash Pipeline" section. I have carried out all… --- ## [Logstash out put csv with header](https://discuss.elastic.co/t/logstash-out-put-csv-with-header/239968)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 1\ **Last updated:** [July 6, 2020, 4:54pm UTC](https://discuss.elastic.co/t/logstash-out-put-csv-with-header/239968 "2020-07-06T16:54:27Z")
I am trying to create a csv file by using the output csv in logstash. How can I insert the header only once at the very beginning? my data: es\_field1 es\_field2 es\_field3 1 2 3 4 … --- ## [Can I aggregate multiple indexes with different schemas?](https://discuss.elastic.co/t/can-i-aggregate-multiple-indexes-with-different-schemas/224206)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 1\ **Last updated:** [March 19, 2020, 1:34am UTC](https://discuss.elastic.co/t/can-i-aggregate-multiple-indexes-with-different-schemas/224206 "2020-03-19T01:34:21Z")
I am trying to get statistics using the log of the homepage user. There are three types of logs: login log, user action log (search, click), and video enrollment information. I want to store these logs in three Indexes… --- ## [Elastic search Msi on Server 2016 service cant start](https://discuss.elastic.co/t/elastic-search-msi-on-server-2016-service-cant-start/102257)
**Author:** [@Timanator](https://discuss.elastic.co/u/Timanator)\ **Replies:** 1\ **Last updated:** [October 6, 2017, 6:26am UTC](https://discuss.elastic.co/t/elastic-search-msi-on-server-2016-service-cant-start/102257 "2017-10-06T06:26:03Z")
Hey Guys Just did a install on a server 2016 box, and the service wont start. Generic error 1067, process terminated unexpectedly. This is the windows event log: First, Application: elasticsearch.exe Framework Versi… --- ## [NoSuchFileException: translog-5.ckp](https://discuss.elastic.co/t/nosuchfileexception-translog-5-ckp/48753)
**Author:** [@alecswan](https://discuss.elastic.co/u/alecswan)\ **Replies:** 1\ **Last updated:** [November 9, 2016, 2:04pm UTC](https://discuss.elastic.co/t/nosuchfileexception-translog-5-ckp/48753 "2016-11-09T14:04:05Z")
Hello, I am using Elasticsearch 2.2.0 and ran into a problem similar to https://discuss.elastic.co/t/cannot-recover-index-because-of-missing-tanslog-files/38336 but with .ckp file instead of a .tlog file. The most like… --- ## [Example for how logstash works](https://discuss.elastic.co/t/example-for-how-logstash-works/54309)
**Author:** [@a\_soong](https://discuss.elastic.co/u/a_soong)\ **Replies:** 1\ **Last updated:** [June 30, 2016, 3:00am UTC](https://discuss.elastic.co/t/example-for-how-logstash-works/54309 "2016-06-30T03:00:28Z")
does anyone have a resource regarding how logstash works. I have a high level understanding, but when I try to implement a configuration file, all I get is errors. The only thing I have working the way it is supposed to… --- ## [Sorting on length of field in the result](https://discuss.elastic.co/t/sorting-on-length-of-field-in-the-result/10315)
**Author:** [@andrea\_crotti](https://discuss.elastic.co/u/andrea_crotti)\ **Replies:** 1\ **Last updated:** [January 15, 2013, 12:49am UTC](https://discuss.elastic.co/t/sorting-on-length-of-field-in-the-result/10315 "2013-01-15T00:49:52Z")
We use elasticsearch with couchdb, with the couchdb-river installed. Now everything works fine, but now I want to be able to sort the results we get from elasticsearch. The first problem is that the date field is … --- ## [Dec 8th, 2022: \[EN\] What you need to know: Elastic Global Threat Report 2022](https://discuss.elastic.co/t/dec-8th-2022-en-what-you-need-to-know-elastic-global-threat-report-2022/320712)
**Author:** [@jakeking](https://discuss.elastic.co/u/jakeking)\ **Replies:** 0\ **Last updated:** [December 8, 2022, 8:00am UTC](https://discuss.elastic.co/t/dec-8th-2022-en-what-you-need-to-know-elastic-global-threat-report-2022/320712 "2022-12-08T08:00:24Z")
It's been a few weeks since we published the Global Threat Report here at Elastic Security Labs, and we’re immensely happy with the feedback, responses and commentary from the Security Community. Building reports such… --- ## [Is LDAP connectivity open forever? How to close connection to LDAP server after authentication is done?](https://discuss.elastic.co/t/is-ldap-connectivity-open-forever-how-to-close-connection-to-ldap-server-after-authentication-is-done/248338)
**Author:** [@adarsh.venugopal](https://discuss.elastic.co/u/adarsh.venugopal)\ **Replies:** 0\ **Last updated:** [September 11, 2020, 2:19pm UTC](https://discuss.elastic.co/t/is-ldap-connectivity-open-forever-how-to-close-connection-to-ldap-server-after-authentication-is-done/248338 "2020-09-11T14:19:13Z")
We are expecting that the LDAP connection closes after the authentication search but it is not happening. This is what we would want to see in the logs:- \[logs\]$grep conn=1138167 access CONNECT conn=1138167 fr… --- ## [Is there some GUI for managing ingest pipelines?](https://discuss.elastic.co/t/is-there-some-gui-for-managing-ingest-pipelines/167715)
**Author:** [@74db36a597f21b891b3f](https://discuss.elastic.co/u/74db36a597f21b891b3f)\ **Replies:** 0\ **Last updated:** [February 9, 2019, 12:10pm UTC](https://discuss.elastic.co/t/is-there-some-gui-for-managing-ingest-pipelines/167715 "2019-02-09T12:10:04Z")
Hello. I start experimenting with ingest node as replacement for logstash and found constant uploading pipeline file after editing is not comfortable way. Is there or will be there any type of GUI for configuring ingest… --- ## [UpdateByQuery can\`t refresh wait\_for](https://discuss.elastic.co/t/updatebyquery-can-t-refresh-wait-for/80126)
**Author:** [@Gleb\_Kozyryatskyy](https://discuss.elastic.co/u/Gleb_Kozyryatskyy)\ **Replies:** 0\ **Last updated:** [March 27, 2017, 11:35am UTC](https://discuss.elastic.co/t/updatebyquery-can-t-refresh-wait-for/80126 "2017-03-27T11:35:25Z")
Im using elasticsearch java client 5.2.1 Is there a possibility to use RefreshPolicy.WAIT\_UNTIL with UpdateByQueryRequest? Im creating an UpdateByQueryRequestBuilder and there is just refresh(boolean refresh) method. W… --- ## [Alerting in Filebeat?](https://discuss.elastic.co/t/alerting-in-filebeat/203291)
**Author:** [@neilp](https://discuss.elastic.co/u/neilp)\ **Replies:** 2\ **Last updated:** [October 14, 2019, 6:24pm UTC](https://discuss.elastic.co/t/alerting-in-filebeat/203291 "2019-10-14T18:24:48Z")
Hi everyone, I was wondering if there is a configuration option in Filebeat to do alerting when it is about to send a log over to logstash? Thanks, Neil --- ## [Heartbeat-elastic site monitoring error (Web down)](https://discuss.elastic.co/t/heartbeat-elastic-site-monitoring-error-web-down/184112)
**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\ **Replies:** 2\ **Last updated:** [June 6, 2019, 3:07am UTC](https://discuss.elastic.co/t/heartbeat-elastic-site-monitoring-error-web-down/184112 "2019-06-06T03:07:18Z")
Error Msg: Head https://xx.org/: dial tcp 202.xx.xx.xx:443: i/o timeout (Client.Timeout exceeded while awaiting headers) May I know does anyone faced this before? Which part has caused this issue? Is it Uptime service … --- ## [ElasticSearch on Azure - How to Logstash and install plugins?](https://discuss.elastic.co/t/elasticsearch-on-azure-how-to-logstash-and-install-plugins/111300)
**Author:** [@Joff](https://discuss.elastic.co/u/Joff)\ **Replies:** 2\ **Last updated:** [December 15, 2017, 8:07am UTC](https://discuss.elastic.co/t/elasticsearch-on-azure-how-to-logstash-and-install-plugins/111300 "2017-12-15T08:07:32Z")
Hi, We are trying to develop a PoC for Elastic on Azure Cloud We installed the Elastic template from Azure Marketplace, selected 3 nodes and now we have following configuration: 1 Kibana VM 3 Data VM 3 Master VM Wh… --- ## [Remove a field from an array based on another field's value](https://discuss.elastic.co/t/remove-a-field-from-an-array-based-on-another-fields-value/86474)
**Author:** [@endersonmaia](https://discuss.elastic.co/u/endersonmaia)\ **Replies:** 2\ **Last updated:** [May 23, 2017, 2:51pm UTC](https://discuss.elastic.co/t/remove-a-field-from-an-array-based-on-another-fields-value/86474 "2017-05-23T14:51:40Z")
I need to remove some fields from an array of JSON objects based on the value of another field on the same array element. the input is: { "id": "123456", "pagamentos": \[ {"tipo": "R$", "valor": 23.75, "cartao… --- ## [Filebeat Autodiscover on Kubernetes not working](https://discuss.elastic.co/t/filebeat-autodiscover-on-kubernetes-not-working/353097)
**Author:** [@Paul\_B](https://discuss.elastic.co/u/Paul_B)\ **Replies:** 4\ **Last updated:** [February 14, 2024, 8:04pm UTC](https://discuss.elastic.co/t/filebeat-autodiscover-on-kubernetes-not-working/353097 "2024-02-14T20:04:08Z")
I'm having trouble getting autodiscover to work correctly in a Kubernetes environment, if I restart the Filebeat daemonset then logs of new pods are collected correctly but if a pod restarts then Filebeat doesn't see the… --- ## [Connect Logstash to SQL by jdbc with AD Account](https://discuss.elastic.co/t/connect-logstash-to-sql-by-jdbc-with-ad-account/310631)
**Author:** [@Oriya](https://discuss.elastic.co/u/Oriya)\ **Replies:** 4\ **Last updated:** [July 27, 2022, 6:34pm UTC](https://discuss.elastic.co/t/connect-logstash-to-sql-by-jdbc-with-ad-account/310631 "2022-07-27T18:34:30Z")
Hi, we have a new environment with 1 logstash server and 3 node servers. in the logstash i have just only one pipeline that i configured with jdbc to connect to sql server. this is the Input configuration pipeline : i… --- ## [Winlogbeat API Key Permissions](https://discuss.elastic.co/t/winlogbeat-api-key-permissions/248382)
**Author:** [@Coinology](https://discuss.elastic.co/u/Coinology)\ **Replies:** 4\ **Last updated:** [September 14, 2020, 6:53pm UTC](https://discuss.elastic.co/t/winlogbeat-api-key-permissions/248382 "2020-09-14T18:53:04Z")
All, I'm hoping someone can help. I used to output data from Winlogbeat to Logstash and index from there, everything worked fine. With 7.9 I attempted to use Elasticsearch output and received the below: WARN \[elasticse… --- ## [Logstash aggregate/mutate](https://discuss.elastic.co/t/logstash-aggregate-mutate/237876)
**Author:** [@pixelinc](https://discuss.elastic.co/u/pixelinc)\ **Replies:** 4\ **Last updated:** [June 20, 2020, 3:51pm UTC](https://discuss.elastic.co/t/logstash-aggregate-mutate/237876 "2020-06-20T15:51:31Z")
Hey all, I'm attempting to combine take 2 logs and add a field from a previous log to the other log. I've read around about aggregate and mutate, and all that but I'm not quite understanding how to do this. I have 2 lo… [Previous page](https://discuss.elastic.co/top.md?page=1079&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1081&per_page=50&period=all)