# Top **URL:** https://discuss.elastic.co/top.md?page=114&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 115 --- ## [How to get a NodeClient inside a X-Pack plugin?](https://discuss.elastic.co/t/how-to-get-a-nodeclient-inside-a-x-pack-plugin/156347)
**Author:** [@Marcel-Hillmann](https://discuss.elastic.co/u/Marcel-Hillmann)\ **Replies:** 13\ **Last updated:** [November 14, 2018, 11:57am UTC](https://discuss.elastic.co/t/how-to-get-a-nodeclient-inside-a-x-pack-plugin/156347 "2018-11-14T11:57:49Z")
I would like to read/write an index inside our custom X-Pack plugin. I use the SecurityExtension interface v6.3.1 to load the Realm. In org.elasticsearch.xpack.security.Security is no delegation for the Client object. … --- ## [Error has occured trying to edit kibana-logs-ui-default-default-log-entry-categories-count ml job model memory limit](https://discuss.elastic.co/t/error-has-occured-trying-to-edit-kibana-logs-ui-default-default-log-entry-categories-count-ml-job-model-memory-limit/224264)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 18\ **Last updated:** [April 9, 2020, 6:45am UTC](https://discuss.elastic.co/t/error-has-occured-trying-to-edit-kibana-logs-ui-default-default-log-entry-categories-count-ml-job-model-memory-limit/224264 "2020-04-09T06:45:35Z")
Hello, It seems I hit hard limit for the memory ml model of 'kibana-logs-ui-default-default-log-entry-categories-count' So I stopped the datafeed, closed the job, edit the job and try to edit the Model memory limit f… --- ## [Sending an unfiltered copy](https://discuss.elastic.co/t/sending-an-unfiltered-copy/130659)
**Author:** [@topher](https://discuss.elastic.co/u/topher)\ **Replies:** 14\ **Last updated:** [May 7, 2018, 6:19pm UTC](https://discuss.elastic.co/t/sending-an-unfiltered-copy/130659 "2018-05-07T18:19:29Z")
OK, I'm relatively new to Logstash; we're looking at it as a possible replacement for what we're using now. I've been tasked with setting it up in such a way that it redirects the data along to our current system and a… --- ## [Indices not creating after logstah starting with Systemctl service](https://discuss.elastic.co/t/indices-not-creating-after-logstah-starting-with-systemctl-service/304871)
**Author:** [@Karthik9099](https://discuss.elastic.co/u/Karthik9099)\ **Replies:** 25\ **Last updated:** [May 25, 2022, 1:04pm UTC](https://discuss.elastic.co/t/indices-not-creating-after-logstah-starting-with-systemctl-service/304871 "2022-05-25T13:04:53Z")
Logstash not creating indices when I use the below command sudo systemctl start logstash.service If I run below command then indices creating successfully and pulling the data bin/logstash -f /etc/logstash/conf.d/logs… --- ## [Elasticsearch CCS: client get timeout when remote cluster is isolated by firewall](https://discuss.elastic.co/t/elasticsearch-ccs-client-get-timeout-when-remote-cluster-is-isolated-by-firewall/152019)
**Author:** [@luxiaoxun](https://discuss.elastic.co/u/luxiaoxun)\ **Replies:** 9\ **Last updated:** [November 8, 2018, 1:01pm UTC](https://discuss.elastic.co/t/elasticsearch-ccs-client-get-timeout-when-remote-cluster-is-isolated-by-firewall/152019 "2018-11-08T13:01:38Z")
ES version: 6.2.4 os: redhat Environment: We have 2 clusters (A and B) in 2 different data centers. For searching, we use "cross cluster search" to get data from one cluster(A), and then cluster A will search relevant … --- ## [Multisearch Java API](https://discuss.elastic.co/t/multisearch-java-api/9257)
**Author:** [@bilash](https://discuss.elastic.co/u/bilash)\ **Replies:** 19\ **Last updated:** [December 20, 2012, 7:55pm UTC](https://discuss.elastic.co/t/multisearch-java-api/9257 "2012-12-20T19:55:27Z")
Hi, Does anyone know how I can use the multisearchfeature using Java API? I can create a multisearch object but how do I use it to return MutliSearchResponse? MultiSearchRequestBuilder multiSearch = new Mult… --- ## [Elastic-agent.exe not running on target](https://discuss.elastic.co/t/elastic-agent-exe-not-running-on-target/279197)
**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\ **Replies:** 14\ **Last updated:** [August 3, 2021, 1:20am UTC](https://discuss.elastic.co/t/elastic-agent-exe-not-running-on-target/279197 "2021-08-03T01:20:43Z")
I have set up a virtual machine to install McAfee ePO and solidcore for testing. So I am taking the opportunity to connect my VM to the Elastic stack. I copied over the Agent and the agent.yml file. Made the changes t… --- ## [Fuzzy search doesn't return all available results](https://discuss.elastic.co/t/fuzzy-search-doesnt-return-all-available-results/292935)
**Author:** [@eladf](https://discuss.elastic.co/u/eladf)\ **Replies:** 11\ **Last updated:** [December 29, 2021, 3:25pm UTC](https://discuss.elastic.co/t/fuzzy-search-doesnt-return-all-available-results/292935 "2021-12-29T15:25:16Z")
Hi, I've been trying to use fuzziness in order to find typos for specific terms. My terms usually consist of a single word. Although there are thousands of possible results available that I'm aware of (fuzziness of 1 … --- ## [Http\_poller input only new lines?](https://discuss.elastic.co/t/http-poller-input-only-new-lines/115058)
**Author:** [@eebee](https://discuss.elastic.co/u/eebee)\ **Replies:** 11\ **Last updated:** [January 12, 2018, 4:14pm UTC](https://discuss.elastic.co/t/http-poller-input-only-new-lines/115058 "2018-01-12T16:14:38Z")
I'm using the http\_poller Logstash input plugin to ingest a logfile into Elasticsearch. But every time it polls data from the logfile, it polls the whole file. Config file: input { http\_poller { urls =\> { te… --- ## [Java API ping operation hangs the application on Elasticsearch 7.11.0](https://discuss.elastic.co/t/java-api-ping-operation-hangs-the-application-on-elasticsearch-7-11-0/264351)
**Author:** [@marcgise](https://discuss.elastic.co/u/marcgise)\ **Replies:** 20\ **Last updated:** [February 17, 2021, 8:23am UTC](https://discuss.elastic.co/t/java-api-ping-operation-hangs-the-application-on-elasticsearch-7-11-0/264351 "2021-02-17T08:23:12Z")
I have 3 Java applications (using RestHighLevelClient 7.11.0 client API) connected to the same ElasticSearch server version 7.11.0, and periodically I check the connection to ElasticSearch with ping operation, using clie… --- ## [Indexing emails that come in uppercase, won't match lowercase searches](https://discuss.elastic.co/t/indexing-emails-that-come-in-uppercase-wont-match-lowercase-searches/25080)
**Author:** [@ronchalant](https://discuss.elastic.co/u/ronchalant)\ **Replies:** 9\ **Last updated:** [July 8, 2015, 12:44pm UTC](https://discuss.elastic.co/t/indexing-emails-that-come-in-uppercase-wont-match-lowercase-searches/25080 "2015-07-08T12:44:22Z")
So I created this analyzer: "uax\_url\_email" : { "filters" : \[ "standard", "lowercase", "stop" \], "type": "custom", "tokenizer" : "uax\_url\_email" } And my mapping for the g… --- ## [Implementation of ELK stack in large company with huge data](https://discuss.elastic.co/t/implementation-of-elk-stack-in-large-company-with-huge-data/269887)
**Author:** [@xirehat](https://discuss.elastic.co/u/xirehat)\ **Replies:** 9\ **Last updated:** [April 17, 2021, 6:49am UTC](https://discuss.elastic.co/t/implementation-of-elk-stack-in-large-company-with-huge-data/269887 "2021-04-17T06:49:21Z")
Hello We want to change implementation of ELK stack in our company, we having some challenge at this time: Kibana is too slow (sometimes getting response from Elasticsearch take time more than 5 minutes) Our service's … --- ## [Windows filebeat to logstash to elasticsearch](https://discuss.elastic.co/t/windows-filebeat-to-logstash-to-elasticsearch/165679)
**Author:** [@richard.poole](https://discuss.elastic.co/u/richard.poole)\ **Replies:** 9\ **Last updated:** [February 12, 2019, 9:04am UTC](https://discuss.elastic.co/t/windows-filebeat-to-logstash-to-elasticsearch/165679 "2019-02-12T09:04:00Z")
I'm fairly new to ELK, but not completely hopeless, I hope. I am running filebeat on a Windows server to collect tomcat8 access logs (eClinicalWorks on Windows). I got the grok pattern correct as far as any pattern tes… --- ## [Elasticsearch version 2.x can not start in docker container but 1.7.3 starts with same config](https://discuss.elastic.co/t/elasticsearch-version-2-x-can-not-start-in-docker-container-but-1-7-3-starts-with-same-config/47141)
**Author:** [@ajay\_bh111](https://discuss.elastic.co/u/ajay_bh111)\ **Replies:** 10\ **Last updated:** [April 13, 2016, 7:10pm UTC](https://discuss.elastic.co/t/elasticsearch-version-2-x-can-not-start-in-docker-container-but-1-7-3-starts-with-same-config/47141 "2016-04-13T19:10:56Z")
Here is the error in elasticsearch logs when docker image build with 2.3.1. \[2016-04-12 14:30:00,083\]\[WARN \]\[rest.suppressed \] /\_cluster/health Params: {pretty=true} MasterNotDiscoveredException\[null\] … --- ## [Dropdown Filter CSS](https://discuss.elastic.co/t/dropdown-filter-css/195744)
**Author:** [@gbarnett](https://discuss.elastic.co/u/gbarnett)\ **Replies:** 11\ **Last updated:** [August 21, 2019, 12:31pm UTC](https://discuss.elastic.co/t/dropdown-filter-css/195744 "2019-08-21T12:31:13Z")
Does anyone have an example of how to style the dropdown filter element? --- ## [Execbeat-master Installation](https://discuss.elastic.co/t/execbeat-master-installation/54724)
**Author:** [@Ravi\_Shanker\_Reddy](https://discuss.elastic.co/u/Ravi_Shanker_Reddy)\ **Replies:** 11\ **Last updated:** [July 11, 2016, 8:35am UTC](https://discuss.elastic.co/t/execbeat-master-installation/54724 "2016-07-11T08:35:15Z")
I am using Red Hat Enterprise Linux Server release 6.4 (Santiago) . I want to install exec beats. I downloaded the exec beat master zip file from https://github.com/christiangalsterer/execbeat. I installed go version of g… --- ## [Is a Authentication neccessary?](https://discuss.elastic.co/t/is-a-authentication-neccessary/304656)
**Author:** [@frankmehlhop](https://discuss.elastic.co/u/frankmehlhop)\ **Replies:** 16\ **Last updated:** [May 18, 2022, 8:45am UTC](https://discuss.elastic.co/t/is-a-authentication-neccessary/304656 "2022-05-18T08:45:01Z")
Hi, I installed Elastic and Kibana localy on my device and I create a index. Than I create a C# console project using .NET6.0 and Visual Studio as described here. But I can't get it running. The problem I described he… --- ## [Have watches created but the watches don't appear to be being triggered](https://discuss.elastic.co/t/have-watches-created-but-the-watches-dont-appear-to-be-being-triggered/55811)
**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\ **Replies:** 10\ **Last updated:** [July 26, 2016, 2:19pm UTC](https://discuss.elastic.co/t/have-watches-created-but-the-watches-dont-appear-to-be-being-triggered/55811 "2016-07-26T14:19:20Z")
Hi, This is the second time I'm doing this. The first time was fairly straightforward: I created the watches based on a schedule, then was able to see them occurring (saw corresponding .triggered\_watches and watch\_hist… --- ## [Error installing Shield plugin](https://discuss.elastic.co/t/error-installing-shield-plugin/65925)
**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\ **Replies:** 15\ **Last updated:** [November 27, 2016, 6:23pm UTC](https://discuss.elastic.co/t/error-installing-shield-plugin/65925 "2016-11-27T18:23:55Z")
I am trying to install shield plugin. I tried using both offline installation procedure as well as RPM packaged installation. I am using elasticsearch 2.4.1 Packaged installation steps: bin/plugin install shield Offl… --- ## [How to create dynamic tree view](https://discuss.elastic.co/t/how-to-create-dynamic-tree-view/253392)
**Author:** [@praveer](https://discuss.elastic.co/u/praveer)\ **Replies:** 10\ **Last updated:** [November 26, 2020, 2:02pm UTC](https://discuss.elastic.co/t/how-to-create-dynamic-tree-view/253392 "2020-11-26T14:02:47Z")
Hi Team, I have created custom plugin in Kibana. In my plugin I have a requirement in which I have to create a dynamic tree view. Which would enable user to add/remove nodes from tree view at runtime. It would also be h… --- ## [Multiple CSV files need to upload for same column names](https://discuss.elastic.co/t/multiple-csv-files-need-to-upload-for-same-column-names/114012)
**Author:** [@Hari\_Baskar](https://discuss.elastic.co/u/Hari_Baskar)\ **Replies:** 9\ **Last updated:** [January 9, 2018, 11:17am UTC](https://discuss.elastic.co/t/multiple-csv-files-need-to-upload-for-same-column-names/114012 "2018-01-09T11:17:00Z")
Hi, I need to upload monthly wise csv data(which contains the same columns) using logstash. So how to upload that and create an index. Thanks in Advance. --- ## [How to Parse my JSON stack trace in logstash?](https://discuss.elastic.co/t/how-to-parse-my-json-stack-trace-in-logstash/208451)
**Author:** [@rishab](https://discuss.elastic.co/u/rishab)\ **Replies:** 10\ **Last updated:** [November 19, 2019, 1:39pm UTC](https://discuss.elastic.co/t/how-to-parse-my-json-stack-trace-in-logstash/208451 "2019-11-19T13:39:44Z")
Logstash is not parsing the my full stack trace. The stack trace is parsing but only part is coming of stack trace as full stack trace is delayed. --- ## [APM Server has still not connected to Elasticsearch (2, previous was closed)](https://discuss.elastic.co/t/apm-server-has-still-not-connected-to-elasticsearch-2-previous-was-closed/206491)
**Author:** [@fraballi](https://discuss.elastic.co/u/fraballi)\ **Replies:** 11\ **Last updated:** [November 20, 2019, 11:12am UTC](https://discuss.elastic.co/t/apm-server-has-still-not-connected-to-elasticsearch-2-previous-was-closed/206491 "2019-11-20T11:12:01Z")
APM Server version: APM-Server 7.4.1 Elasticsearch: 7.4.0 Kibana: 7.4.1 I'm having this error, yet I ran: docker exec -it elastic-apm-server bash -c "./apm-server test config" Config OK docker exec -it elastic-apm-… --- ## [Error in fleet-server, kibana, elastic search](https://discuss.elastic.co/t/error-in-fleet-server-kibana-elastic-search/366362)
**Author:** [@soularius](https://discuss.elastic.co/u/soularius)\ **Replies:** 13\ **Last updated:** [September 14, 2024, 7:49am UTC](https://discuss.elastic.co/t/error-in-fleet-server-kibana-elastic-search/366362 "2024-09-14T07:49:40Z")
Issue when trying to connect Fleet Server with Elasticsearch in Docker I am setting up an Elastic Stack environment in Docker, including containers for Elasticsearch, Kibana, and Elastic Agent with Fleet Server enabled.… --- ## [Kibana Login page is not working](https://discuss.elastic.co/t/kibana-login-page-is-not-working/245551)
**Author:** [@AKumar123](https://discuss.elastic.co/u/AKumar123)\ **Replies:** 11\ **Last updated:** [August 25, 2020, 7:13pm UTC](https://discuss.elastic.co/t/kibana-login-page-is-not-working/245551 "2020-08-25T19:13:14Z")
I want to implement Kibana Login page ,I tried all the settings can any body help me. --- ## [Probleme avec la commande curl](https://discuss.elastic.co/t/probleme-avec-la-commande-curl/189537)
**Author:** [@busan](https://discuss.elastic.co/u/busan)\ **Replies:** 10\ **Last updated:** [July 10, 2019, 2:51pm UTC](https://discuss.elastic.co/t/probleme-avec-la-commande-curl/189537 "2019-07-10T14:51:30Z")
Salut, Quand je rentre la commande: root@elasticsearch:~# curl --noproxy "\*" http://127.0.0.1:9200 J'obtiens l'erreur suivante: curl: (7) Failed to connect to 127.0.0.1 port 9200: Connection refused Pareil avec : … --- ## [Logstash not receiving logs from Winlogbeat 5.0 alpha](https://discuss.elastic.co/t/logstash-not-receiving-logs-from-winlogbeat-5-0-alpha/57277)
**Author:** [@alvaroca1](https://discuss.elastic.co/u/alvaroca1)\ **Replies:** 15\ **Last updated:** [August 4, 2016, 9:47pm UTC](https://discuss.elastic.co/t/logstash-not-receiving-logs-from-winlogbeat-5-0-alpha/57277 "2016-08-04T21:47:20Z")
upgraded winlogbeat to v 5.a and not I'm not able to receive any data to logstash see below error on log stash D:\\Elastic\\logstash\\bin\>logstash -f logstash.conf io/console not supported; tty will not be manipulated Set… --- ## [Java GRPC Client not ending spans and not reporting to APM](https://discuss.elastic.co/t/java-grpc-client-not-ending-spans-and-not-reporting-to-apm/280643)
**Author:** [@YvesAndre](https://discuss.elastic.co/u/YvesAndre)\ **Replies:** 18\ **Last updated:** [August 18, 2021, 11:34am UTC](https://discuss.elastic.co/t/java-grpc-client-not-ending-spans-and-not-reporting-to-apm/280643 "2021-08-18T11:34:34Z")
Kibana version: 7.13.4 Elasticsearch version: 7.13.4 APM Server version: 7.13.4 APM Agent language and version: Java 8, apm-agent-attach, apm-agent-api, elastic-apm-agent 1.25.0 Browser version: Chrome Original inst… --- ## [SSL Error in Kibana logs](https://discuss.elastic.co/t/ssl-error-in-kibana-logs/247992)
**Author:** [@artobstrel](https://discuss.elastic.co/u/artobstrel)\ **Replies:** 14\ **Last updated:** [September 16, 2020, 1:15pm UTC](https://discuss.elastic.co/t/ssl-error-in-kibana-logs/247992 "2020-09-16T13:15:22Z")
Hi guys! I have successfully configured TLS in ELK using a corporate certificates. Everything works fine: Kibana and Elasticsearch is available by https Authentication in Kibana is ok Certificate is valid However, S… --- ## [\[SOLVED\] Kibana 5.3.0 and SSL for browser requests](https://discuss.elastic.co/t/solved-kibana-5-3-0-and-ssl-for-browser-requests/85051)
**Author:** [@nicocolt](https://discuss.elastic.co/u/nicocolt)\ **Replies:** 13\ **Last updated:** [May 10, 2017, 12:27pm UTC](https://discuss.elastic.co/t/solved-kibana-5-3-0-and-ssl-for-browser-requests/85051 "2017-05-10T12:27:14Z")
Hello, Trying to set up SSL connection between browser and kibana does not work. When activate required parameter server.ssl.certificate and server.ssl.key in kibana.yml, kibana crashed at startup with any logs. Cert… --- ## [How to Know how many Metric beat agents are up and running](https://discuss.elastic.co/t/how-to-know-how-many-metric-beat-agents-are-up-and-running/261890)
**Author:** [@sai07](https://discuss.elastic.co/u/sai07)\ **Replies:** 17\ **Last updated:** [February 2, 2021, 3:26pm UTC](https://discuss.elastic.co/t/how-to-know-how-many-metric-beat-agents-are-up-and-running/261890 "2021-02-02T15:26:23Z")
We have configured 100 Metricbeat agents in 100 VM's and we are getting all the logs from that VM's as well. But we need to monitor the Metricbeat agent as well. If any Metricbeat agent is not working we need to identi… --- ## [Logstash restarting every 20-30 seconds](https://discuss.elastic.co/t/logstash-restarting-every-20-30-seconds/138940)
**Author:** [@pavan2](https://discuss.elastic.co/u/pavan2)\ **Replies:** 11\ **Last updated:** [July 12, 2018, 5:41pm UTC](https://discuss.elastic.co/t/logstash-restarting-every-20-30-seconds/138940 "2018-07-12T17:41:03Z")
Log file has the following error \[2018-07-06T07:50:00,389\]\[ERROR\]\[org.logstash.Logstash \] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit logstash-simple.conf has … --- ## [Fuzzy syntaxe tilde](https://discuss.elastic.co/t/fuzzy-syntaxe-tilde/76374)
**Author:** [@Karel\_SUEDILE](https://discuss.elastic.co/u/Karel_SUEDILE)\ **Replies:** 10\ **Last updated:** [March 2, 2017, 12:57am UTC](https://discuss.elastic.co/t/fuzzy-syntaxe-tilde/76374 "2017-03-02T00:57:01Z")
Bonjour, j'ai cru comprendre que les recherches fuzzy pouvaient automatiquement déterminer la distance de levenstein à appliquer en fonction de la longueur du mot recherché. Je voulais savoir si la syntaxe avec le tild… --- ## [Custom similarities in ElasticSearch Nest 2](https://discuss.elastic.co/t/custom-similarities-in-elasticsearch-nest-2/56496)
**Author:** [@Barry\_Woods](https://discuss.elastic.co/u/Barry_Woods)\ **Replies:** 11\ **Last updated:** [September 14, 2016, 10:10am UTC](https://discuss.elastic.co/t/custom-similarities-in-elasticsearch-nest-2/56496 "2016-09-14T10:10:34Z")
I am just in the process of attempting to upgrade ElasticSearch and Nest to versions 2.3 from 1.7 and I am having some issues with the changes to the API. Most of it is fine and just a case of renaming things or removing… --- ## [High disk usage compared to before](https://discuss.elastic.co/t/high-disk-usage-compared-to-before/35917)
**Author:** [@tesseract](https://discuss.elastic.co/u/tesseract)\ **Replies:** 9\ **Last updated:** [December 5, 2015, 9:36am UTC](https://discuss.elastic.co/t/high-disk-usage-compared-to-before/35917 "2015-12-05T09:36:29Z")
Hi everyone, We are trying out elasticsearch as one of the potential solutions for our search/insights needs. We are all setup with a small cluster with two nodes. For our initial test, we used a single node in order to… --- ## [Как правильно распределить данные в индекс(е/ах)](https://discuss.elastic.co/t/topic/117310)
**Author:** [@akaNightmare](https://discuss.elastic.co/u/akaNightmare)\ **Replies:** 14\ **Last updated:** [March 6, 2018, 5:00pm UTC](https://discuss.elastic.co/t/topic/117310 "2018-03-06T17:00:42Z")
Здравствуйте, хочу задать практический вопрос, а именно как правильно хранить/распределить данные (в моем случае транзакции по платежам, ордера, возвраты, отмены) по продуктам. Суть в том, что из этих всех транзакций ст… --- ## [Write consistency on a single node cluster](https://discuss.elastic.co/t/write-consistency-on-a-single-node-cluster/56542)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 14\ **Last updated:** [August 1, 2016, 8:39am UTC](https://discuss.elastic.co/t/write-consistency-on-a-single-node-cluster/56542 "2016-08-01T08:39:46Z")
As referenced here: I'm currently attempting to migrate our elasticsearch data to being 2.0 compatible (ie: no dots in field names) in preparation for an upgrade form 1.x to 2.x. I've written a program that runs th… --- ## [Group Conditions](https://discuss.elastic.co/t/group-conditions/149824)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 11\ **Last updated:** [October 2, 2018, 1:05pm UTC](https://discuss.elastic.co/t/group-conditions/149824 "2018-10-02T13:05:39Z")
Currently i have this Query to search data in ElasticSearch: { "query": { "bool": { "must": \[ { "term": { "account\_id": 128 … --- ## [Docker module on metricbeat](https://discuss.elastic.co/t/docker-module-on-metricbeat/127908)
**Author:** [@Gaurav\_Agarwal](https://discuss.elastic.co/u/Gaurav_Agarwal)\ **Replies:** 14\ **Last updated:** [April 17, 2018, 7:00pm UTC](https://discuss.elastic.co/t/docker-module-on-metricbeat/127908 "2018-04-17T19:00:34Z")
The docker module on metric beat shows error when I try to put it in the conf file. Please let me know if i m wrong with the configuration for the docker module, This is the error I m getting when I try to run with th… --- ## [How to limit results with same field value to X amount of documents every time it shows up multiple times in a row](https://discuss.elastic.co/t/how-to-limit-results-with-same-field-value-to-x-amount-of-documents-every-time-it-shows-up-multiple-times-in-a-row/217809)
**Author:** [@SeverinDK](https://discuss.elastic.co/u/SeverinDK)\ **Replies:** 9\ **Last updated:** [February 13, 2020, 12:58pm UTC](https://discuss.elastic.co/t/how-to-limit-results-with-same-field-value-to-x-amount-of-documents-every-time-it-shows-up-multiple-times-in-a-row/217809 "2020-02-13T12:58:21Z")
I have an issue that I am not quite sure how to solve. Really hope someone here can help me figure out how to go about it. Imagine that I have 100 documents, all with user\_id fields. I know that most documents are from … --- ## [SIEM detection engine is not getting started](https://discuss.elastic.co/t/siem-detection-engine-is-not-getting-started/248910)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 12\ **Last updated:** [September 20, 2020, 12:52pm UTC](https://discuss.elastic.co/t/siem-detection-engine-is-not-getting-started/248910 "2020-09-20T12:52:04Z")
I have installed stack on AWS, all three(Elastic, Logstash, Kibana) components are on different instance. Stack is running all good and functioning in a expected way. Problem is, I am unable to enable detection engine, … --- ## [Desconexion Aleatoria de Nodos por error en uso de memoria RAM](https://discuss.elastic.co/t/desconexion-aleatoria-de-nodos-por-error-en-uso-de-memoria-ram/59592)
**Author:** [@Emiliano\_Baum](https://discuss.elastic.co/u/Emiliano_Baum)\ **Replies:** 12\ **Last updated:** [September 16, 2016, 6:20pm UTC](https://discuss.elastic.co/t/desconexion-aleatoria-de-nodos-por-error-en-uso-de-memoria-ram/59592 "2016-09-16T18:20:16Z")
Buenos dias, Estoy teniendo un problema con el funcionamiento del Cluster, los nodos se desconectan y cuando verifico los logs no deja ningun registro de error. El archivo esta /etc/default/elasticsearch (linux) esta d… --- ## [Script field and regexp](https://discuss.elastic.co/t/script-field-and-regexp/80505)
**Author:** [@apoc](https://discuss.elastic.co/u/apoc)\ **Replies:** 9\ **Last updated:** [April 4, 2017, 10:01am UTC](https://discuss.elastic.co/t/script-field-and-regexp/80505 "2017-04-04T10:01:43Z")
Hello, I installed the elastic stack 5.2.2. In a script field, I would like to test another field with a regexp : return (doc\['processContext.componentName'\].value ==~ /IN/); I get an error Courier Fetch: 1 of… --- ## [How to load json file into ES using logstash](https://discuss.elastic.co/t/how-to-load-json-file-into-es-using-logstash/218620)
**Author:** [@Deepak\_Dandotiya](https://discuss.elastic.co/u/Deepak_Dandotiya)\ **Replies:** 12\ **Last updated:** [March 5, 2020, 6:06am UTC](https://discuss.elastic.co/t/how-to-load-json-file-into-es-using-logstash/218620 "2020-03-05T06:06:38Z")
Hi Guys, can anyone provide me sample logstash conf file to parse and document the json formatted data into elasticsearch using logstash. There are multiple fields which needs to parsed. Any quick help is appreciated so… --- ## [Upgraded node not rejoining non upgraded cluster 6.5.1 to 6.7 upgrade - IOException\[Invalid string; unexpected character: 255 hex: ff\]](https://discuss.elastic.co/t/upgraded-node-not-rejoining-non-upgraded-cluster-6-5-1-to-6-7-upgrade-ioexception-invalid-string-unexpected-character-255-hex-ff/174326)
**Author:** [@John\_Swift](https://discuss.elastic.co/u/John_Swift)\ **Replies:** 26\ **Last updated:** [April 1, 2019, 10:45am UTC](https://discuss.elastic.co/t/upgraded-node-not-rejoining-non-upgraded-cluster-6-5-1-to-6-7-upgrade-ioexception-invalid-string-unexpected-character-255-hex-ff/174326 "2019-04-01T10:45:01Z")
Upgraded 1 node of a 4 node cluster this mroing from 6.5.1 to 6.7 Upgraded node starts up fine & comes online but is refusing to joing the existing cluster since the upgrade. Elasticsearch.yml is config cluster.name: … --- ## [Lower and upper bound of range facet is not consistent with RangeQuery](https://discuss.elastic.co/t/lower-and-upper-bound-of-range-facet-is-not-consistent-with-rangequery/4728)
**Author:** [@Stephane\_Bastian](https://discuss.elastic.co/u/Stephane_Bastian)\ **Replies:** 11\ **Last updated:** [December 21, 2012, 3:55pm UTC](https://discuss.elastic.co/t/lower-and-upper-bound-of-range-facet-is-not-consistent-with-rangequery/4728 "2012-12-21T15:55:13Z")
Hi, I've just noticed that the range facet includes the 'from' value and excludes the 'to' value from its results. It's fine but is not consistent with RangeQuery which by default includes both the 'from' and 'to'… --- ## [Can't drop events from metricbeat](https://discuss.elastic.co/t/cant-drop-events-from-metricbeat/94602)
**Author:** [@Robin\_Guo](https://discuss.elastic.co/u/Robin_Guo)\ **Replies:** 9\ **Last updated:** [July 31, 2017, 4:15am UTC](https://discuss.elastic.co/t/cant-drop-events-from-metricbeat/94602 "2017-07-31T04:15:03Z")
Hi folks, We encountered an issue while the metricbeat is trying to send their metrics to elasticsearch. even with some drop events rules, but can't drop the events we don't want. we still can see some particular value… --- ## [Logstash-input-jdbc doesn't work on logstash 5.x](https://discuss.elastic.co/t/logstash-input-jdbc-doesnt-work-on-logstash-5-x/69137)
**Author:** [@elosada](https://discuss.elastic.co/u/elosada)\ **Replies:** 10\ **Last updated:** [January 2, 2017, 8:02am UTC](https://discuss.elastic.co/t/logstash-input-jdbc-doesnt-work-on-logstash-5-x/69137 "2017-01-02T08:02:56Z")
I installed logstash 5.x and I have a problem with logstah-input-jdbc plugin. My simple.conf works well while jdbc input is commented and it parses logs properly, but when it is enabled, logstash doesn't work (configte… --- ## [Downgrading License](https://discuss.elastic.co/t/downgrading-license/310931)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 10\ **Last updated:** [July 28, 2022, 10:52pm UTC](https://discuss.elastic.co/t/downgrading-license/310931 "2022-07-28T22:52:49Z")
Hi, we have a cluster with Platinium Licence, we are creating a new cluster and want to move the license there, an leave the old cluster with just a basic license. is there a way to downgrade the license to Basic, so the… --- ## [Nested field in a grok filter](https://discuss.elastic.co/t/nested-field-in-a-grok-filter/190758)
**Author:** [@theo1991](https://discuss.elastic.co/u/theo1991)\ **Replies:** 9\ **Last updated:** [July 18, 2019, 7:21am UTC](https://discuss.elastic.co/t/nested-field-in-a-grok-filter/190758 "2019-07-18T07:21:29Z")
Hi, I have a pattern for log which is like this : inactive: No, sources : \[{id: 1, type: fr, name:custom}, {id:2, type:fr, name: random}\], assigned: Yes I wrote this custom grok filter : inactive: %{WORD:inactive}, s… [Previous page](https://discuss.elastic.co/top.md?page=113&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=115&per_page=50&period=all)