# Top **URL:** https://discuss.elastic.co/top.md?page=109&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 110 --- ## [Unable to access data from elastic search](https://discuss.elastic.co/t/unable-to-access-data-from-elastic-search/257258)
**Author:** [@DENMODSupport](https://discuss.elastic.co/u/DENMODSupport)\ **Replies:** 19\ **Last updated:** [December 11, 2020, 12:28pm UTC](https://discuss.elastic.co/t/unable-to-access-data-from-elastic-search/257258 "2020-12-11T12:28:19Z")
In elastic search, when checking index health link, we could see that each index is having huge amount of data as per the size. But when running api \/\_search, it is retrieving only only one alias data. We are… --- ## [Elasticsearch 5 vs 8 performance and index size](https://discuss.elastic.co/t/elasticsearch-5-vs-8-performance-and-index-size/325601)
**Author:** [@Idorasi\_Paul](https://discuss.elastic.co/u/Idorasi_Paul)\ **Replies:** 9\ **Last updated:** [February 16, 2023, 1:45pm UTC](https://discuss.elastic.co/t/elasticsearch-5-vs-8-performance-and-index-size/325601 "2023-02-16T13:45:18Z")
Hello. I've updated from elasticsearch 5.6 to 8.1 and following load tests I can see a decrease in performance, between 20-40%. I was expecting 8.1 to be faster 5.6, I'm assuming we're doing something wrong. Another weir… --- ## [Неточный поиск](https://discuss.elastic.co/t/topic/164274)
**Author:** [@Darkness](https://discuss.elastic.co/u/Darkness)\ **Replies:** 11\ **Last updated:** [February 12, 2019, 1:58pm UTC](https://discuss.elastic.co/t/topic/164274 "2019-02-12T13:58:40Z")
Это возможно в elastic? Мне нужно найти записи с их процентом сходства и минимальным процентом (например, 30%) сходства? Например, у нас есть входная строка «Hello» и в бд «Hello, world!», «Hello, friends!». В этом слу… --- ## [Best option to migrate data from old cluster to new](https://discuss.elastic.co/t/best-option-to-migrate-data-from-old-cluster-to-new/154535)
**Author:** [@Archie1](https://discuss.elastic.co/u/Archie1)\ **Replies:** 10\ **Last updated:** [November 4, 2018, 10:40pm UTC](https://discuss.elastic.co/t/best-option-to-migrate-data-from-old-cluster-to-new/154535 "2018-11-04T22:40:54Z")
Hi Everyone, I've also posted this exact same question on the Graylog forum - I'm just edging my bets a bit more by posting here as well as my issue is more ES than Graylog I guess :slight\_smile: I have a new cluster a… --- ## [Pipeline cannot start with http\_poller](https://discuss.elastic.co/t/pipeline-cannot-start-with-http-poller/108405)
**Author:** [@Tonni\_Hult](https://discuss.elastic.co/u/Tonni_Hult)\ **Replies:** 11\ **Last updated:** [December 13, 2017, 3:53pm UTC](https://discuss.elastic.co/t/pipeline-cannot-start-with-http-poller/108405 "2017-12-13T15:53:30Z")
Hi I've installed v6.0 and get a problem when using input http\_poller because the pipeline crashes when starting up and the output that I get is: Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipe… --- ## [Proxy is not working in 4.4 kibana](https://discuss.elastic.co/t/proxy-is-not-working-in-4-4-kibana/49045)
**Author:** [@sreenivasu](https://discuss.elastic.co/u/sreenivasu)\ **Replies:** 9\ **Last updated:** [June 3, 2016, 8:22am UTC](https://discuss.elastic.co/t/proxy-is-not-working-in-4-4-kibana/49045 "2016-06-03T08:22:17Z")
Dear Team, I added serverbase/baseurl in the kibana.yml. It is not taking that . Could you please tell me how to add proxy to kibana4.4 Thanks In Advance. Regards Sreenivasu --- ## [Unallocated shards when a node is removed](https://discuss.elastic.co/t/unallocated-shards-when-a-node-is-removed/50331)
**Author:** [@vangap](https://discuss.elastic.co/u/vangap)\ **Replies:** 12\ **Last updated:** [May 19, 2016, 12:58pm UTC](https://discuss.elastic.co/t/unallocated-shards-when-a-node-is-removed/50331 "2016-05-19T12:58:20Z")
ES 2.1 AWS EC2, Private subnets. When ever I remove a node, shards that belong to this node don't get re balanced I think some times resetting the number of replicas solves the issue. Most of the times I end up resta… --- ## [How to handle Exceptions](https://discuss.elastic.co/t/how-to-handle-exceptions/25307)
**Author:** [@ABecker](https://discuss.elastic.co/u/ABecker)\ **Replies:** 9\ **Last updated:** [July 16, 2015, 10:46am UTC](https://discuss.elastic.co/t/how-to-handle-exceptions/25307 "2015-07-16T10:46:55Z")
Hello Logstash Community, in my logfiles I have different Exceptions from different Stack Traces. How can I handle singleline and multiline entries within one logfile? The normal logfile looks like: \<191\>Jul 10 13:… --- ## [Use APM in a Windows Service (non .net core)](https://discuss.elastic.co/t/use-apm-in-a-windows-service-non-net-core/225985)
**Author:** [@frutty](https://discuss.elastic.co/u/frutty)\ **Replies:** 16\ **Last updated:** [May 6, 2020, 12:41am UTC](https://discuss.elastic.co/t/use-apm-in-a-windows-service-non-net-core/225985 "2020-05-06T00:41:34Z")
Hey, I've been trying to find an answer to this in the forum but I'm not able to find anything relevant. I want to be able to create transaction for different methods in our code. Filtering data/db transactions etc... … --- ## [After putting index setting, cannot add document](https://discuss.elastic.co/t/after-putting-index-setting-cannot-add-document/177311)
**Author:** [@lemon\_soft](https://discuss.elastic.co/u/lemon_soft)\ **Replies:** 9\ **Last updated:** [April 18, 2019, 10:49am UTC](https://discuss.elastic.co/t/after-putting-index-setting-cannot-add-document/177311 "2019-04-18T10:49:46Z")
I failed to create my ElasticSearch index, again. Here are my steps: created index with name clef2018, number of shard=1, number of replicas=0 closed index put settings of clef2018 (website) put mappings of clef2018 (w… --- ## [Use case for elasticsearch-curator using AWS S3 repository](https://discuss.elastic.co/t/use-case-for-elasticsearch-curator-using-aws-s3-repository/89635)
**Author:** [@Jaff](https://discuss.elastic.co/u/Jaff)\ **Replies:** 9\ **Last updated:** [June 21, 2017, 8:50pm UTC](https://discuss.elastic.co/t/use-case-for-elasticsearch-curator-using-aws-s3-repository/89635 "2017-06-21T20:50:09Z")
After upgrade to ES 5.4.1, I was told there is new curator version, and we would like to take advantage of added capability. Looking into configuration examples, what would be the best example of how to set this up? --- ## [How to generate month instead of weekly indexes in winlogbeat?](https://discuss.elastic.co/t/how-to-generate-month-instead-of-weekly-indexes-in-winlogbeat/47037)
**Author:** [@anhlqn](https://discuss.elastic.co/u/anhlqn)\ **Replies:** 10\ **Last updated:** [April 13, 2016, 9:46pm UTC](https://discuss.elastic.co/t/how-to-generate-month-instead-of-weekly-indexes-in-winlogbeat/47037 "2016-04-13T21:46:09Z")
Hi all, If I use winlogbeat to send Windows log directly to ES, what is the config syntax in winlogbeat.yml to generate monthly indexes? I have tried the syntax below but it did not work index: "\[winlogbeat-\]YYYY.M… --- ## [ElasticSearch : Custom Analyzer](https://discuss.elastic.co/t/elasticsearch-custom-analyzer/2432)
**Author:** [@maaxow](https://discuss.elastic.co/u/maaxow)\ **Replies:** 9\ **Last updated:** [June 16, 2015, 9:38am UTC](https://discuss.elastic.co/t/elasticsearch-custom-analyzer/2432 "2015-06-16T09:38:28Z")
Bonjour, J'utilise Elasticsearch 1.6.0, et je m'intéresse aux custom analyzer. Je pense avoir bien indexé mes settings avec mon analyzer, mais lorsque j'essaie d'inserer un mapping qui utilise cet analyzer, il me renvo… --- ## [Use metricbeat to monitor elasticsearch/kibana/beats](https://discuss.elastic.co/t/use-metricbeat-to-monitor-elasticsearch-kibana-beats/304828)
**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\ **Replies:** 13\ **Last updated:** [June 1, 2022, 2:20pm UTC](https://discuss.elastic.co/t/use-metricbeat-to-monitor-elasticsearch-kibana-beats/304828 "2022-06-01T14:20:47Z")
Hi i am trying to get metricbeats to monitor the status of my Elasticsearch cluster. If i go to Stack Monitoring page it tells me taht metricbeat has not been setup. I'm confused what im doing wrong here, i don't see… --- ## [Postgresql stored procedure with elastic search](https://discuss.elastic.co/t/postgresql-stored-procedure-with-elastic-search/57411)
**Author:** [@Pavan\_123](https://discuss.elastic.co/u/Pavan_123)\ **Replies:** 13\ **Last updated:** [August 7, 2016, 4:33pm UTC](https://discuss.elastic.co/t/postgresql-stored-procedure-with-elastic-search/57411 "2016-08-07T16:33:06Z")
I integrated postgresql stored procedure with elastic search. My scenario is : is it possible to write a stored procedure functionality in elastic search. Because while querying in elastic search it retrives the data f… --- ## [Metricbeat not able to display cpu status](https://discuss.elastic.co/t/metricbeat-not-able-to-display-cpu-status/128715)
**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\ **Replies:** 10\ **Last updated:** [April 24, 2018, 11:47am UTC](https://discuss.elastic.co/t/metricbeat-not-able-to-display-cpu-status/128715 "2018-04-24T11:47:26Z")
Hello Team, I'm using metricbeats but I'm not able to see the CPU status in kibana dashboards. Please let me know where I went wrong \[image\] You can see in the image. all the cpu stats are set to 0. this is my system… --- ## [1 Hour Difference on showing Logs in ELK/Kibana](https://discuss.elastic.co/t/1-hour-difference-on-showing-logs-in-elk-kibana/268744)
**Author:** [@radu990](https://discuss.elastic.co/u/radu990)\ **Replies:** 11\ **Last updated:** [April 6, 2021, 8:24am UTC](https://discuss.elastic.co/t/1-hour-difference-on-showing-logs-in-elk-kibana/268744 "2021-04-06T08:24:14Z")
Hello, I have set a Filebeat agent on a server for Apache logs (using apache module), and observed that the logs are appearing on Kibana/ELK with 1 hour delay. Any idea what can be the problem? The time/timezone settin… --- ## [How to wait for a CreateIndexRequest to really finish (using java TransportClient)](https://discuss.elastic.co/t/how-to-wait-for-a-createindexrequest-to-really-finish-using-java-transportclient/10261)
**Author:** [@q42jaap](https://discuss.elastic.co/u/q42jaap)\ **Replies:** 9\ **Last updated:** [January 9, 2013, 9:55pm UTC](https://discuss.elastic.co/t/how-to-wait-for-a-createindexrequest-to-really-finish-using-java-transportclient/10261 "2013-01-09T21:55:11Z")
Hi there, I'm using the native client (TransportClient) and I'm running the following code: Settings settings = ImmutableSettings.settingsBuilder().put("cluster.name", "elasticsearch").build(); TransportClient … --- ## [Endless Loop es 6.6.2](https://discuss.elastic.co/t/endless-loop-es-6-6-2/178291)
**Author:** [@fuhong](https://discuss.elastic.co/u/fuhong)\ **Replies:** 10\ **Last updated:** [April 25, 2019, 3:44pm UTC](https://discuss.elastic.co/t/endless-loop-es-6-6-2/178291 "2019-04-25T15:44:53Z")
Can you help me??? \ \org.elasticsearch.client\ \elasticsearch-rest-high-level-client\ \6.6.2\ \ \ **Author:** [@kamaleshwar](https://discuss.elastic.co/u/kamaleshwar)\ **Replies:** 13\ **Last updated:** [May 24, 2019, 9:36pm UTC](https://discuss.elastic.co/t/can-someone-help-me-on-how-to-configure-the-watcher-in-6-6-version/173444 "2019-05-24T21:36:58Z") I am new to ELK Stack and exploring all the options it has offered to the users. Right now ,i am stuck with the alerting (watcher),Can any one please let me know how to the do the watcher configuration and set the aler… --- ## [APM and Koa unknown route](https://discuss.elastic.co/t/apm-and-koa-unknown-route/281228)
**Author:** [@hsabillon](https://discuss.elastic.co/u/hsabillon)\ **Replies:** 18\ **Last updated:** [September 3, 2021, 8:27pm UTC](https://discuss.elastic.co/t/apm-and-koa-unknown-route/281228 "2021-09-03T20:27:54Z")
I'm currently using APM (elastic-apm-node 3.18.0), koa, and koa-router on one service. The problem is that even if I give a transaction name with transaction.name, APM tries to get the name from the koa-router. It's ther… --- ## [Date parse failure and date formatter issue](https://discuss.elastic.co/t/date-parse-failure-and-date-formatter-issue/106925)
**Author:** [@guruprasadh4](https://discuss.elastic.co/u/guruprasadh4)\ **Replies:** 10\ **Last updated:** [November 9, 2017, 10:01pm UTC](https://discuss.elastic.co/t/date-parse-failure-and-date-formatter-issue/106925 "2017-11-09T22:01:02Z")
Sample log - IDENTIFIER TIMESTAMP T C RESOURCE\_NAME DESCRIPTION C6E26F3B 1002042417 I H hdisk111 BACK-UP PATH STATUS CHANGE C6E26F3B 1002042417 I H hdisk103 BACK-UP PATH STATUS CHANGE Config File - … --- ## [Ingesting surricata logs](https://discuss.elastic.co/t/ingesting-surricata-logs/309437)
**Author:** [@username82](https://discuss.elastic.co/u/username82)\ **Replies:** 12\ **Last updated:** [July 14, 2022, 9:12am UTC](https://discuss.elastic.co/t/ingesting-surricata-logs/309437 "2022-07-14T09:12:26Z")
Hi, I am trying to ingest surricata logs into ElasticStack. The architecture is as follows, Suricata\>\>\>FileBeat\>\>\>ElasticSearch\>\>\>Kibana I have followed this guide to letter. How To Build A SIEM with Suricata and Elas… --- ## [How can I overwrite default index pattern name while importing dashboards for beats](https://discuss.elastic.co/t/how-can-i-overwrite-default-index-pattern-name-while-importing-dashboards-for-beats/85857)
**Author:** [@zaqweb](https://discuss.elastic.co/u/zaqweb)\ **Replies:** 9\ **Last updated:** [May 23, 2017, 1:43pm UTC](https://discuss.elastic.co/t/how-can-i-overwrite-default-index-pattern-name-while-importing-dashboards-for-beats/85857 "2017-05-23T13:43:23Z")
I've installed Filebeat and Metricbeat via YUM repo. And everything runs ok. now, I have a problem to overwrite default index pattern name. no matter I use ./script/importdashboards -i\_ or dashboards.index: customize-m… --- ## [Problem when using Elasticsearch and Tesseract-OCR](https://discuss.elastic.co/t/problem-when-using-elasticsearch-and-tesseract-ocr/238770)
**Author:** [@hanguyen.uet](https://discuss.elastic.co/u/hanguyen.uet)\ **Replies:** 14\ **Last updated:** [July 22, 2020, 3:48am UTC](https://discuss.elastic.co/t/problem-when-using-elasticsearch-and-tesseract-ocr/238770 "2020-07-22T03:48:12Z")
Hi everybody! I have a directory containing text data at /opt/data/. When a new file is uploaded to that directory. Is there a way to automatically use tesseract-ocr to convert to another language, then use elasticsearc… --- ## [Es update document very slow](https://discuss.elastic.co/t/es-update-document-very-slow/259072)
**Author:** [@111421](https://discuss.elastic.co/u/111421)\ **Replies:** 10\ **Last updated:** [December 21, 2020, 7:09am UTC](https://discuss.elastic.co/t/es-update-document-very-slow/259072 "2020-12-21T07:09:27Z")
Now it even takes about 7 minutes to update a doc. Single node, heap size: 8G, 30 shards, a total of 6.2G data, 2 million doc. This is too slow, if anyone can tell me how to solve it, I would appreciate it iostat Lin… --- ## [Cluster recovery and reachability takes long time when master left](https://discuss.elastic.co/t/cluster-recovery-and-reachability-takes-long-time-when-master-left/165747)
**Author:** [@kaner](https://discuss.elastic.co/u/kaner)\ **Replies:** 10\ **Last updated:** [February 19, 2019, 2:53pm UTC](https://discuss.elastic.co/t/cluster-recovery-and-reachability-takes-long-time-when-master-left/165747 "2019-02-19T14:53:14Z")
Hi, we're test running a 3 node cluster of Elasticsearch, version 5.6.9. There seems to be a problem when the master node becomes unreachable by the other 2 nodes (for example, when the network cable gets pulled). The … --- ## [\[Metricbeat System\] Containers overview Dashboard issues](https://discuss.elastic.co/t/metricbeat-system-containers-overview-dashboard-issues/110547)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 11\ **Last updated:** [December 14, 2017, 4:46pm UTC](https://discuss.elastic.co/t/metricbeat-system-containers-overview-dashboard-issues/110547 "2017-12-14T16:46:34Z")
I'm using Elastic stack version 6.0 and while accessing \[Metricbeat System\] Containers overview Dashboard I found few issues: Container CPU usage \[Metricbeat System\] Container Block IO \[Metricbeat System\] Shows Contai… --- ## [Performance problems when Upgrading from ElasticSearch 1.7.4 to 5.4.0](https://discuss.elastic.co/t/performance-problems-when-upgrading-from-elasticsearch-1-7-4-to-5-4-0/93076)
**Author:** [@ljs](https://discuss.elastic.co/u/ljs)\ **Replies:** 10\ **Last updated:** [July 25, 2017, 10:14pm UTC](https://discuss.elastic.co/t/performance-problems-when-upgrading-from-elasticsearch-1-7-4-to-5-4-0/93076 "2017-07-25T22:14:53Z")
We are upgrading our ElasticSearch 1.7.4 cluster to 5.4. We made mapping/code modifications so that everything is functionally working, but the performance is much worse than 1.7.4 (same exact cluster size, data size, a… --- ## [(ELK 7.9.1) Security - Hosts and Security - Network missing data](https://discuss.elastic.co/t/elk-7-9-1-security-hosts-and-security-network-missing-data/248576)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 19\ **Last updated:** [September 17, 2020, 10:19pm UTC](https://discuss.elastic.co/t/elk-7-9-1-security-hosts-and-security-network-missing-data/248576 "2020-09-17T22:19:57Z")
Hi, \*Recently upgraded to ELK 7.9.1. \*All beats were upgraded to match same node version \*All indexes were deleted and recreated As stated above, I am running ELK 7.9.1. If I check Discovery section, I can confirm th… --- ## [Logstash http output user password](https://discuss.elastic.co/t/logstash-http-output-user-password/231525)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 9\ **Last updated:** [May 8, 2020, 7:11pm UTC](https://discuss.elastic.co/t/logstash-http-output-user-password/231525 "2020-05-08T19:11:53Z")
I am receiving log data from TCP and sending it to a https url as json using logstash. Here is my configuration input { tcp { port =\> 8443 codec =\> json\_lines { charset =\> CP1252 } } } output { http { format=\>… --- ## [Ingest multiple json files under a folder](https://discuss.elastic.co/t/ingest-multiple-json-files-under-a-folder/190026)
**Author:** [@decodeit](https://discuss.elastic.co/u/decodeit)\ **Replies:** 10\ **Last updated:** [July 11, 2019, 2:32pm UTC](https://discuss.elastic.co/t/ingest-multiple-json-files-under-a-folder/190026 "2019-07-11T14:32:08Z")
I am trying to make logstash ingest multiple json files under a folder. Each json file is multiline about 100 line. I don't see any out put . here is my config. \`input { file{ path =\> "/data/nhs.json" start\_posi… --- ## [Why logstash service not work correctly but it is running in the foreground](https://discuss.elastic.co/t/why-logstash-service-not-work-correctly-but-it-is-running-in-the-foreground/347211)
**Author:** [@baber1223](https://discuss.elastic.co/u/baber1223)\ **Replies:** 17\ **Last updated:** [November 16, 2023, 5:38am UTC](https://discuss.elastic.co/t/why-logstash-service-not-work-correctly-but-it-is-running-in-the-foreground/347211 "2023-11-16T05:38:59Z")
Hi. When I am running logstash in the foreground it is working excellent with follow command /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/pipeline1.conf --path.settings /etc/logstash/ but when I am running … --- ## [Watcher error when executing the watch](https://discuss.elastic.co/t/watcher-error-when-executing-the-watch/119536)
**Author:** [@Maxime\_Poirier-Journ](https://discuss.elastic.co/u/Maxime_Poirier-Journ)\ **Replies:** 11\ **Last updated:** [February 22, 2018, 9:25pm UTC](https://discuss.elastic.co/t/watcher-error-when-executing-the-watch/119536 "2018-02-22T21:25:01Z")
Hi, Im pretty new to watcher and painless. I'm getting this error and I have no clue why. Can you guys help me out for this one? What i need to do is retrieve the value of "SAM Account Name: " in the ES item called "me… --- ## [Scale Logstash config for more than 20,000 messages per minute?](https://discuss.elastic.co/t/scale-logstash-config-for-more-than-20-000-messages-per-minute/350552)
**Author:** [@Trung\_Nguyen](https://discuss.elastic.co/u/Trung_Nguyen)\ **Replies:** 14\ **Last updated:** [January 18, 2024, 8:35am UTC](https://discuss.elastic.co/t/scale-logstash-config-for-more-than-20-000-messages-per-minute/350552 "2024-01-18T08:35:09Z")
Hi I'm using rsyslog as a syslog server to get the log from the Firewall and network devices, then it send log to Logstash (on the same host) to do the filter then push to Elastic (on other host). If I forward around 1… --- ## [How to compare dates without timestamp](https://discuss.elastic.co/t/how-to-compare-dates-without-timestamp/170102)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 9\ **Last updated:** [March 1, 2019, 1:32am UTC](https://discuss.elastic.co/t/how-to-compare-dates-without-timestamp/170102 "2019-03-01T01:32:07Z")
Hello Team, I want to compare dates with @timestamp , but I don't want to compare the time , only the date part I want to compare. I tried using date filter but could not set date in dd/MM/YY format any pointers to re… --- ## [Netflow module](https://discuss.elastic.co/t/netflow-module/131123)
**Author:** [@venki522](https://discuss.elastic.co/u/venki522)\ **Replies:** 10\ **Last updated:** [May 10, 2018, 7:17am UTC](https://discuss.elastic.co/t/netflow-module/131123 "2018-05-10T07:17:36Z")
Hello, I am testing netflow module on elk stack and not getting any where. Can someone let me know how to configure logstash to get the netflow data and send to elastic so that i can see the data on kibana --- ## [Grok parse failure syslog](https://discuss.elastic.co/t/grok-parse-failure-syslog/149968)
**Author:** [@heskez](https://discuss.elastic.co/u/heskez)\ **Replies:** 11\ **Last updated:** [October 17, 2018, 10:26am UTC](https://discuss.elastic.co/t/grok-parse-failure-syslog/149968 "2018-10-17T10:26:42Z")
Hi there, I've setup syslog forwarding on my firewall. And I'm getting this error: fortigate\_subtype:%{subtype} host:192.168.100.100 logTimestamp:%{date} %{time} @version:1 syslog5424\_pri:188 fortigate\_type:syslog messa… --- ## [Credentials' variables blocking beats from running as services on Windows](https://discuss.elastic.co/t/credentials-variables-blocking-beats-from-running-as-services-on-windows/214943)
**Author:** [@jsu](https://discuss.elastic.co/u/jsu)\ **Replies:** 11\ **Last updated:** [March 23, 2020, 3:58pm UTC](https://discuss.elastic.co/t/credentials-variables-blocking-beats-from-running-as-services-on-windows/214943 "2020-03-23T15:58:06Z")
Hey there, So, the problem doesn't appear on linux boxes, but only windows ones : win server 2012 and win10. I had the (almost) exact same problem with Winlogbeat, Metricbeat and Filebeat. Following the documentation c… --- ## [Not Able to filter two type of events in logstash filter](https://discuss.elastic.co/t/not-able-to-filter-two-type-of-events-in-logstash-filter/47556)
**Author:** [@ashutosh25apr](https://discuss.elastic.co/u/ashutosh25apr)\ **Replies:** 15\ **Last updated:** [April 19, 2016, 8:58am UTC](https://discuss.elastic.co/t/not-able-to-filter-two-type-of-events-in-logstash-filter/47556 "2016-04-19T08:58:12Z")
Hi I am using filebeat to send beats to logstash, Able to see in the logs of filebeat that event is generated after reading the file but ,not able to view the logs of logstash whether event is reaching to to logstash so … --- ## [Convert Timestamp to milliseconds in ingest pipeline](https://discuss.elastic.co/t/convert-timestamp-to-milliseconds-in-ingest-pipeline/294602)
**Author:** [@Rakesh\_Rayabarapu](https://discuss.elastic.co/u/Rakesh_Rayabarapu)\ **Replies:** 9\ **Last updated:** [January 25, 2022, 11:47am UTC](https://discuss.elastic.co/t/convert-timestamp-to-milliseconds-in-ingest-pipeline/294602 "2022-01-25T11:47:26Z")
Hi, I am trying to find a way to get millis from string date time field using ingest pipeline and getting following error. please help me to correct the script. POST /\_ingest/pipeline/\_simulate { "pipeline": { "des… --- ## [FileBeat fails to process large log files of some MBs](https://discuss.elastic.co/t/filebeat-fails-to-process-large-log-files-of-some-mbs/240122)
**Author:** [@shwethaN](https://discuss.elastic.co/u/shwethaN)\ **Replies:** 9\ **Last updated:** [July 20, 2020, 11:05am UTC](https://discuss.elastic.co/t/filebeat-fails-to-process-large-log-files-of-some-mbs/240122 "2020-07-20T11:05:35Z")
Hi, I am new to ELK stack. Done the setup of elastic, Kibana , Logstash and filebeat to process the files. If i configure path of log file which in some KBs(2-3KB) then i am able to process file successfully. I would l… --- ## [Filebeat not started](https://discuss.elastic.co/t/filebeat-not-started/305129)
**Author:** [@Rajesh119](https://discuss.elastic.co/u/Rajesh119)\ **Replies:** 20\ **Last updated:** [May 19, 2022, 12:53pm UTC](https://discuss.elastic.co/t/filebeat-not-started/305129 "2022-05-19T12:53:41Z")
Hi, My filebeat was not running, if can i change any settings in filebeat.yml it goes to inactive. sudo service filebeat status ● filebeat.service - Filebeat sends log files to Logstash or directly to Elasticsearch.… --- ## [Create Watcher for percentile difference of a field between two days](https://discuss.elastic.co/t/create-watcher-for-percentile-difference-of-a-field-between-two-days/131680)
**Author:** [@ishantanu](https://discuss.elastic.co/u/ishantanu)\ **Replies:** 12\ **Last updated:** [May 16, 2018, 9:41am UTC](https://discuss.elastic.co/t/create-watcher-for-percentile-difference-of-a-field-between-two-days/131680 "2018-05-16T09:41:09Z")
Hi, I would like to get an idea how I can create a watcher which is triggered based on percentile difference of a numeric field across two days. Here's the scenario: Two float type fields, let's say, A and B Time to … --- ## [Logstash service not starting](https://discuss.elastic.co/t/logstash-service-not-starting/87849)
**Author:** [@moorthyrajesh](https://discuss.elastic.co/u/moorthyrajesh)\ **Replies:** 11\ **Last updated:** [June 5, 2017, 9:49am UTC](https://discuss.elastic.co/t/logstash-service-not-starting/87849 "2017-06-05T09:49:57Z")
i have an issue similar to https://www.elastic.co/guide/en/logstash/current/running-logstash.html#running-logstash-upstart os: Ununtu Mate 14.04 logstash service not starting sudo initctl start logstash result: u… --- ## [I cannot log in to Elastic Enterprise Search](https://discuss.elastic.co/t/i-cannot-log-in-to-elastic-enterprise-search/274011)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 17\ **Last updated:** [June 14, 2021, 3:28pm UTC](https://discuss.elastic.co/t/i-cannot-log-in-to-elastic-enterprise-search/274011 "2021-06-14T15:28:24Z")
Elastic Enterprise Search has been installed. After executing the following command, I was able to see the login screen from a browser. ENT\_SEARCH\_DEFAULT\_PASSWORD=\[REDACTED\] bin/enterprise-search. Even if I enter the… --- ## [Stack monitoring cannot see Indices](https://discuss.elastic.co/t/stack-monitoring-cannot-see-indices/214478)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 19\ **Last updated:** [January 29, 2020, 4:42pm UTC](https://discuss.elastic.co/t/stack-monitoring-cannot-see-indices/214478 "2020-01-29T16:42:06Z")
Hi, I am ES 7.5 and using metricbeat for monitoring, under my cluster, Elasticsearch, Indices. I can see the number of Indices, Memory etc but in the filter list I see nothing, I have changed the date range to days an… --- ## [Auditbeat on docker fails to run auditd module](https://discuss.elastic.co/t/auditbeat-on-docker-fails-to-run-auditd-module/284399)
**Author:** [@MarshalHex](https://discuss.elastic.co/u/MarshalHex)\ **Replies:** 16\ **Last updated:** [September 24, 2021, 8:58am UTC](https://discuss.elastic.co/t/auditbeat-on-docker-fails-to-run-auditd-module/284399 "2021-09-24T08:58:20Z")
Hi! I'm setting up Auditbeat to run on amazon linux EC2 instance. When I run the default install and config for auditbeat, everything works fine for auditbeat auditd module and I can configure my rules to be implemente… --- ## [Elasticsearch won't start first use - 8.1.0](https://discuss.elastic.co/t/elasticsearch-wont-start-first-use-8-1-0/299741)
**Author:** [@itzikyis](https://discuss.elastic.co/u/itzikyis)\ **Replies:** 12\ **Last updated:** [March 21, 2022, 7:29am UTC](https://discuss.elastic.co/t/elasticsearch-wont-start-first-use-8-1-0/299741 "2022-03-21T07:29:35Z")
After downloading Elasticsearch from zip to windows. run bin\\Elasticsearch.bat getting Error: skipping security auto configuration because the configuration file \[C:\\Program Files\\Elasticsearch-8.1.0\\bin\\Elasticsearch\\E… --- ## [Frequent disconnects between nodes](https://discuss.elastic.co/t/frequent-disconnects-between-nodes/13205)
**Author:** [@Runar\_Myklebust](https://discuss.elastic.co/u/Runar_Myklebust)\ **Replies:** 12\ **Last updated:** [August 19, 2013, 7:14am UTC](https://discuss.elastic.co/t/frequent-disconnects-between-nodes/13205 "2013-08-19T07:14:25Z")
Hi. We have a setup with embedded ES (0.20.6) with 7 nodes. At a regular basis, one or more nodes looses connection to the master, and thus (since the minimum\_master\_nodes setting is 1) creates a split-brain scenari… [Previous page](https://discuss.elastic.co/top.md?page=108&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=110&per_page=50&period=all)