# Top **URL:** https://discuss.elastic.co/top.md?page=1161&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1162 --- ## [Elasticsearch keystore file regenerate](https://discuss.elastic.co/t/elasticsearch-keystore-file-regenerate/291185)
**Author:** [@suvro](https://discuss.elastic.co/u/suvro)\ **Replies:** 2\ **Last updated:** [December 8, 2021, 6:44am UTC](https://discuss.elastic.co/t/elasticsearch-keystore-file-regenerate/291185 "2021-12-08T06:44:55Z")
is there any way to regenerate Elasticsearch.keystore file? I have deleted it by mistake. --- ## [Logstash 'compile\_imperative' error](https://discuss.elastic.co/t/logstash-compile-imperative-error/276625)
**Author:** [@Michael\_Dylan\_McAloo](https://discuss.elastic.co/u/Michael_Dylan_McAloo)\ **Replies:** 2\ **Last updated:** [June 22, 2021, 9:33am UTC](https://discuss.elastic.co/t/logstash-compile-imperative-error/276625 "2021-06-22T09:33:32Z")
Hi, I have Logstash to pick up Snort Alerts, but i have had this error and i don't know why. Error: logstash | \[2021-06-22T08:55:53,809\]\[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>Log… --- ## [Elasticsearch doesn't recover data from NAS storage volume](https://discuss.elastic.co/t/elasticsearch-doesnt-recover-data-from-nas-storage-volume/234681)
**Author:** [@tmporary](https://discuss.elastic.co/u/tmporary)\ **Replies:** 2\ **Last updated:** [May 28, 2020, 7:57am UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-recover-data-from-nas-storage-volume/234681 "2020-05-28T07:57:18Z")
Hi, Our elasticsearch instance starts up fine and in the logs I can see that it found the mounted storage but it doesn't recover any indices info into the cluster. \[2020-05-28T06:51:41,853\]\[INFO \]\[o.e.e.NodeEnvironment… --- ## [Can't pull Docker image](https://discuss.elastic.co/t/cant-pull-docker-image/173535)
**Author:** [@AndresPineros](https://discuss.elastic.co/u/AndresPineros)\ **Replies:** 2\ **Last updated:** [March 22, 2019, 5:57pm UTC](https://discuss.elastic.co/t/cant-pull-docker-image/173535 "2019-03-22T17:57:03Z")
From my machine: docker pull docker.elastic.co/beats/filebeat:6.6.2 Returns: Error response from daemon: unauthorized: authentication required My cluster says: filebeat-bp9cv … --- ## [Trying to integrate elasticsearch into gitlab, create\_empty\_index fails](https://discuss.elastic.co/t/trying-to-integrate-elasticsearch-into-gitlab-create-empty-index-fails/114662)
**Author:** [@Kamikater](https://discuss.elastic.co/u/Kamikater)\ **Replies:** 2\ **Last updated:** [January 9, 2018, 11:20am UTC](https://discuss.elastic.co/t/trying-to-integrate-elasticsearch-into-gitlab-create-empty-index-fails/114662 "2018-01-09T11:20:08Z")
I am trying to use the elasticsearch tool for our gitlab repository. I follow this guide to integrate the gitlab data to the Elasticsearch index, however I already fail at the first step. Executing gitlab-rake gitlab:e… --- ## [TransportClient connection number](https://discuss.elastic.co/t/transportclient-connection-number/85877)
**Author:** [@Utkarsh\_Pyne](https://discuss.elastic.co/u/Utkarsh_Pyne)\ **Replies:** 2\ **Last updated:** [May 17, 2017, 7:45pm UTC](https://discuss.elastic.co/t/transportclient-connection-number/85877 "2017-05-17T19:45:00Z")
How many numbers of connections will a TransportClient make to a node in the cluster and will it connect to one node at a time or can connect to multiple nodes in the cluster? We front client nodes with a load-balancer… --- ## [ESへXGETしたときのfieldsの出力順について](https://discuss.elastic.co/t/es-xget-fields/60967)
**Author:** [@aurantiacus](https://discuss.elastic.co/u/aurantiacus)\ **Replies:** 2\ **Last updated:** [September 30, 2016, 5:10am UTC](https://discuss.elastic.co/t/es-xget-fields/60967 "2016-09-30T05:10:21Z")
こんにちは。 こちらにはたびたびお世話になっております。 Elasticsearch Ver.1.7.1 XGETクエリのfieldsでA,B,C,Dと指定したら fields:{A:, B:, C:, D:} といったように、クエリの記述に沿ってダウンロードしたいと考えています。 XGETクエリの記述方法で想定した出力結果を得られるのでしょうか、 それともElasticsearchの設定(template)などを調整する… --- ## [Which ISO shall I download](https://discuss.elastic.co/t/which-iso-shall-i-download/26229)
**Author:** [@satimis](https://discuss.elastic.co/u/satimis)\ **Replies:** 2\ **Last updated:** [July 24, 2015, 2:43pm UTC](https://discuss.elastic.co/t/which-iso-shall-i-download/26229 "2015-07-24T14:43:00Z")
Hi all, I want to follow below article; How To Install Elasticsearch on an Ubuntu VPS https://www.digitalocean.com/communi...-an-ubuntu-vps installing Elasticsearch, Logstash, and Kibana 4 on Ubuntu 14.04 VPS running… --- ## [Persist top level menus](https://discuss.elastic.co/t/persist-top-level-menus/875)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 2\ **Last updated:** [May 19, 2015, 12:02pm UTC](https://discuss.elastic.co/t/persist-top-level-menus/875 "2015-05-19T12:02:23Z")
When I open a thread I lose any access to jump to anything other than the top level, ie I cannot easily go from Unread to an unread post and then back to all Unread threads without hitting the horizontal menu in the top … --- ## [Logstash jdbc\_streaming filter with Cubrid DB](https://discuss.elastic.co/t/logstash-jdbc-streaming-filter-with-cubrid-db/131847)
**Author:** [@imbyungjun](https://discuss.elastic.co/u/imbyungjun)\ **Replies:** 0\ **Last updated:** [May 15, 2018, 5:26am UTC](https://discuss.elastic.co/t/logstash-jdbc-streaming-filter-with-cubrid-db/131847 "2018-05-15T05:26:13Z")
input { stdin { } } jdbc\_streaming { jdbc\_driver\_library =\> "/Users/user/Downloads/JDBC-9.2.29.0001-cubrid.jar" jdbc\_driver\_class =\> "cubrid.jdbc.driver.CUBRIDDriver" jdbc\_connection\_string =\>… --- ## [Null\_pointer\_exception: Cannot invoke "String.equals(Object)" because the return value of "org.apache.lucene.search.SortField.getField()" is null](https://discuss.elastic.co/t/null-pointer-exception-cannot-invoke-string-equals-object-because-the-return-value-of-org-apache-lucene-search-sortfield-getfield-is-null/327235)
**Author:** [@davidgAID](https://discuss.elastic.co/u/davidgAID)\ **Replies:** 1\ **Last updated:** [March 8, 2023, 4:35pm UTC](https://discuss.elastic.co/t/null-pointer-exception-cannot-invoke-string-equals-object-because-the-return-value-of-org-apache-lucene-search-sortfield-getfield-is-null/327235 "2023-03-08T16:35:29Z")
This is on Elasticsearch 8.6.2. I have a pretty mundane query that I want to paginate via search\_after. The initial query looks like this: { "\_source": true, "collapse": { "field": "collapse\_col" }, "query… --- ## [Get the difference between different format of datetime](https://discuss.elastic.co/t/get-the-difference-between-different-format-of-datetime/257325)
**Author:** [@Izek\_Chen](https://discuss.elastic.co/u/Izek_Chen)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 2:10pm UTC](https://discuss.elastic.co/t/get-the-difference-between-different-format-of-datetime/257325 "2020-12-03T14:10:41Z")
I have data with two date field like this "@buildTimestamp": "2020-12-01T18:55:34.895-0800", "@timestamp": "2020-12-02T03:02:16.723Z" I'd like to use ingest pipeline script processor to get the difference. How can I… --- ## [I got the this error=\>#\ **Author:** [@santoshbhagat](https://discuss.elastic.co/u/santoshbhagat)\ **Replies:** 1\ **Last updated:** [May 29, 2019, 12:12pm UTC](https://discuss.elastic.co/t/i-got-the-this-error-argumenterror-setting-pipeline-batch-hasnt-been-registered/183305 "2019-05-29T12:12:06Z") Sending Logstash logs to E:/Software/ELK/logstash-7.0.1/logstash-7.0.1/logs which is now configured via log4j2.properties 15:53:13.943 \[main\] DEBUG logstash.modules.scaffold - Found module {:module\_name=\>"fb\_apache", :d… --- ## [Grok filter not working to capture filename](https://discuss.elastic.co/t/grok-filter-not-working-to-capture-filename/91197)
**Author:** [@Deepthi\_V](https://discuss.elastic.co/u/Deepthi_V)\ **Replies:** 1\ **Last updated:** [June 29, 2017, 5:17am UTC](https://discuss.elastic.co/t/grok-filter-not-working-to-capture-filename/91197 "2017-06-29T05:17:46Z")
Hello, I have a grok filter that looks like below, which I wrote to capture only the filename from the "path" field. grok { match =\> { "path" =\> "%{GREEDYDATA}/%{GREEDYDATA:filename}.log" } … --- ## [Force logging-and-metrics cluster to run curator job](https://discuss.elastic.co/t/force-logging-and-metrics-cluster-to-run-curator-job/177401)
**Author:** [@JPT](https://discuss.elastic.co/u/JPT)\ **Replies:** 3\ **Last updated:** [April 23, 2019, 8:53pm UTC](https://discuss.elastic.co/t/force-logging-and-metrics-cluster-to-run-curator-job/177401 "2019-04-23T20:53:52Z")
Hello, we had the situation that our logging-and-metrics cluster get a lot of logs, because some trouble with a cluster. This than resulted in two of three nodes had 100% disk space usage. We tried to restart the cluste… --- ## [Logstash does not listen for beats](https://discuss.elastic.co/t/logstash-does-not-listen-for-beats/115181)
**Author:** [@wweeder](https://discuss.elastic.co/u/wweeder)\ **Replies:** 3\ **Last updated:** [January 23, 2018, 4:50pm UTC](https://discuss.elastic.co/t/logstash-does-not-listen-for-beats/115181 "2018-01-23T16:50:32Z")
Hello, it appears that logstash fails to listen on 5044. My config: # egrep -v '#|^$' logstash.yml path.data: /var/lib/logstash path.config: /etc/logstash/conf.d/\*.conf path.logs: /var/log/logstash # cat conf.d/bea… --- ## [ES result to mysql query](https://discuss.elastic.co/t/es-result-to-mysql-query/86234)
**Author:** [@symbios-zi](https://discuss.elastic.co/u/symbios-zi)\ **Replies:** 3\ **Last updated:** [May 18, 2017, 1:37pm UTC](https://discuss.elastic.co/t/es-result-to-mysql-query/86234 "2017-05-18T13:37:49Z")
Hello there. There is a project with MVC framework using MySQL and a products table with description field. I want to use ElasticSearch for full-text search of products. I have made indexing products to ES and can fi… --- ## [Unique Term Values via Aggregation - Performance Considerations](https://discuss.elastic.co/t/unique-term-values-via-aggregation-performance-considerations/69603)
**Author:** [@mikeydoyle](https://discuss.elastic.co/u/mikeydoyle)\ **Replies:** 3\ **Last updated:** [December 20, 2016, 6:43pm UTC](https://discuss.elastic.co/t/unique-term-values-via-aggregation-performance-considerations/69603 "2016-12-20T18:43:25Z")
I'm looking to get a distinct list of values for a few terms ("keyword" fields) in my index for display in a UI. I would consider these to be low cardinality (\< 200 distinct values, for example). To do this, I have been… --- ## [Problem with twitter-plugin and https-proxies](https://discuss.elastic.co/t/problem-with-twitter-plugin-and-https-proxies/50426)
**Author:** [@kodo65](https://discuss.elastic.co/u/kodo65)\ **Replies:** 0\ **Last updated:** [May 19, 2016, 11:29am UTC](https://discuss.elastic.co/t/problem-with-twitter-plugin-and-https-proxies/50426 "2016-05-19T11:29:14Z")
I have logstash v2.3.2 installed and wanted to try the twitter-plugin again after abandoning it earlier in favor for a custom developed twitterstream-client. Setting the proxy-relevant settings to: use\_proxy =\> true p… --- ## [Date format changes and causes an error in a transform](https://discuss.elastic.co/t/date-format-changes-and-causes-an-error-in-a-transform/298643)
**Author:** [@Jker](https://discuss.elastic.co/u/Jker)\ **Replies:** 4\ **Last updated:** [March 3, 2022, 10:49am UTC](https://discuss.elastic.co/t/date-format-changes-and-causes-an-error-in-a-transform/298643 "2022-03-03T10:49:07Z")
Hello! I'm trying to create a transform from two different indices but keep on running to this error and have tried many different solutions but can't get it to work. This is the error: Failed to index documents into… --- ## [How to grok different format record lines in one single log file](https://discuss.elastic.co/t/how-to-grok-different-format-record-lines-in-one-single-log-file/236797)
**Author:** [@Eaven](https://discuss.elastic.co/u/Eaven)\ **Replies:** 4\ **Last updated:** [June 12, 2020, 3:02pm UTC](https://discuss.elastic.co/t/how-to-grok-different-format-record-lines-in-one-single-log-file/236797 "2020-06-12T15:02:29Z")
Dear Friend, I'm encountering an issue when configuring logstash, here is an example from my case that I need to grok filter to match - some lines are with IP fields and sesseionID fields but some are not (so they are n… --- ## [Elasticsearch 1.4.0 yellow with shards stuck initializing - need help diagnosing this](https://discuss.elastic.co/t/elasticsearch-1-4-0-yellow-with-shards-stuck-initializing-need-help-diagnosing-this/20969)
**Author:** [@Jilles\_van\_Gurp](https://discuss.elastic.co/u/Jilles_van_Gurp)\ **Replies:** 4\ **Last updated:** [November 27, 2014, 4:37pm UTC](https://discuss.elastic.co/t/elasticsearch-1-4-0-yellow-with-shards-stuck-initializing-need-help-diagnosing-this/20969 "2014-11-27T16:37:59Z")
Our production cluster went yellow last night after our logstash index rolled over to the next version. I've seen this happen before but this time I decided to properly diagnose and seek some feedback on what might b… --- ## [Sorting of number in discover not working](https://discuss.elastic.co/t/sorting-of-number-in-discover-not-working/248544)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [September 14, 2020, 8:19pm UTC](https://discuss.elastic.co/t/sorting-of-number-in-discover-not-working/248544 "2020-09-14T20:19:57Z")
I have number field when I try to sort it out it does not sort. is there some setting I am missing or is it bug I only selected this one field in my discover. do not display the timestamp as I don't want it. but any wa… --- ## [Move all fields to a subfield?](https://discuss.elastic.co/t/move-all-fields-to-a-subfield/225563)
**Author:** [@sliddjur](https://discuss.elastic.co/u/sliddjur)\ **Replies:** 2\ **Last updated:** [March 30, 2020, 10:29am UTC](https://discuss.elastic.co/t/move-all-fields-to-a-subfield/225563 "2020-03-30T10:29:00Z")
I want to move all my fields to a specified subfield. However, I don't know all the field names. Alternatively if there is a way for grok filter to set the target field or similar? I found an old post that did this, wh… --- ## [Calculate total uptime/downtime](https://discuss.elastic.co/t/calculate-total-uptime-downtime/216627)
**Author:** [@Matthias\_Seidl](https://discuss.elastic.co/u/Matthias_Seidl)\ **Replies:** 2\ **Last updated:** [January 27, 2020, 5:58pm UTC](https://discuss.elastic.co/t/calculate-total-uptime-downtime/216627 "2020-01-27T17:58:14Z")
Hi, I'm thinking about setting up Hearbeat to monitor the uptime of my hosts. Is it possible with Hearbeat to calculate the time that a host has been up or down over a month or a year? This functionality would be really… --- ## [How to download PNG/PDF content with url in Chromium browser?](https://discuss.elastic.co/t/how-to-download-png-pdf-content-with-url-in-chromium-browser/180555)
**Author:** [@landy](https://discuss.elastic.co/u/landy)\ **Replies:** 2\ **Last updated:** [May 14, 2019, 2:28pm UTC](https://discuss.elastic.co/t/how-to-download-png-pdf-content-with-url-in-chromium-browser/180555 "2019-05-14T14:28:47Z")
Based on my previous question (https://discuss.elastic.co/t/how-to-use-post-url-to-share-visualisation-in-my-website/179671/4), I think it is better to open a new topic because the question changes to another area. I se… --- ## [Hearbeat error: x509: certificate signed by unknown authority](https://discuss.elastic.co/t/hearbeat-error-x509-certificate-signed-by-unknown-authority/176484)
**Author:** [@Peter92](https://discuss.elastic.co/u/Peter92)\ **Replies:** 2\ **Last updated:** [April 29, 2019, 8:28am UTC](https://discuss.elastic.co/t/hearbeat-error-x509-certificate-signed-by-unknown-authority/176484 "2019-04-29T08:28:00Z")
Hi Team, I am getting x509: certificate signed by unknown authority on heartbeat, although I have ssl.verification\_mode: none line in the config file. - type: http proxy\_url: ssl.verification\_mode: none # List… --- ## [Failing to start elasticsearch versions 6.x on Mac due to java.security.\* access denied](https://discuss.elastic.co/t/failing-to-start-elasticsearch-versions-6-x-on-mac-due-to-java-security-access-denied/119953)
**Author:** [@ryemyer](https://discuss.elastic.co/u/ryemyer)\ **Replies:** 2\ **Last updated:** [March 7, 2018, 6:58am UTC](https://discuss.elastic.co/t/failing-to-start-elasticsearch-versions-6-x-on-mac-due-to-java-security-access-denied/119953 "2018-03-07T06:58:33Z")
Hi, I installed elasticsearch 6.2.1 (also tried 6.1.2) on my mac, and I am getting various exceptions due to Java security issues. Searching google I found very few suggestions, all of them pointing to the Java policy … --- ## [Hashmaps in params](https://discuss.elastic.co/t/hashmaps-in-params/92763)
**Author:** [@Silas\_Hansen](https://discuss.elastic.co/u/Silas_Hansen)\ **Replies:** 2\ **Last updated:** [July 13, 2017, 11:21am UTC](https://discuss.elastic.co/t/hashmaps-in-params/92763 "2017-07-13T11:21:07Z")
I'm trying to send a list of lookup-values as parameters to a function\_score script. I'm trying to supply the script with a map of ID's that it will use to lookup the current documentId and use whatever value exists in… --- ## [Dashboard Names Obfuscated in URLs in Kibana 5](https://discuss.elastic.co/t/dashboard-names-obfuscated-in-urls-in-kibana-5/82918)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 2\ **Last updated:** [April 19, 2017, 9:46pm UTC](https://discuss.elastic.co/t/dashboard-names-obfuscated-in-urls-in-kibana-5/82918 "2017-04-19T21:46:12Z")
Prior to Kibana v5, I could save a dashboard as something like: myTestDashboard I could then navigate to a url, knowing I'd find my dashboard there; e.g: http://myKibanaServer/#/myTestDashboard and it would resolve… --- ## [SMTP port 25 and 587](https://discuss.elastic.co/t/smtp-port-25-and-587/78810)
**Author:** [@mhalatuituia](https://discuss.elastic.co/u/mhalatuituia)\ **Replies:** 2\ **Last updated:** [March 16, 2017, 7:48pm UTC](https://discuss.elastic.co/t/smtp-port-25-and-587/78810 "2017-03-16T19:48:32Z")
any chance i can shipped smtp on tcp port 25 and 587 using packetbeat --- ## [GC warnings and Time out exceptions on bulk update](https://discuss.elastic.co/t/gc-warnings-and-time-out-exceptions-on-bulk-update/29212)
**Author:** [@spiral\_circ](https://discuss.elastic.co/u/spiral_circ)\ **Replies:** 2\ **Last updated:** [January 5, 2017, 9:08am UTC](https://discuss.elastic.co/t/gc-warnings-and-time-out-exceptions-on-bulk-update/29212 "2017-01-05T09:08:06Z")
Hi, I am trying to bulk update about 2.3 million documents in batches of 100K. After about 400K - 500K i start seeing the below exceptions on the client side. And i see lot of gc logging on the elastic search console… --- ## [Wildcard search / query via REST request URI](https://discuss.elastic.co/t/wildcard-search-query-via-rest-request-uri/17837)
**Author:** [@Lam\_Pham](https://discuss.elastic.co/u/Lam_Pham)\ **Replies:** 2\ **Last updated:** [June 1, 2014, 4:12am UTC](https://discuss.elastic.co/t/wildcard-search-query-via-rest-request-uri/17837 "2014-06-01T04:12:44Z")
Hi, Is it possible to do a wildcard search via the request URI? For example http://localhost:9200/index1/type1/\_search?q=type1.text\_ID=\* If yes, what is the correct format? I tried the above format and did no… --- ## [Nodes randomly restarting](https://discuss.elastic.co/t/nodes-randomly-restarting/12544)
**Author:** [@Jeremy\_Jongsma\_2](https://discuss.elastic.co/u/Jeremy_Jongsma_2)\ **Replies:** 2\ **Last updated:** [July 3, 2013, 8:34pm UTC](https://discuss.elastic.co/t/nodes-randomly-restarting/12544 "2013-07-03T20:34:46Z")
I noticed lately that my ES node names keep changing. I happened to see it happen live today (via elasticsearch paramedic - http://karmi.github.io/elasticsearch-paramedic/), and saw the ES node actually shut down a… --- ## [Cluster currently has \[1000\]/\[1000\] maximum normal shards open](https://discuss.elastic.co/t/cluster-currently-has-1000-1000-maximum-normal-shards-open/354830)
**Author:** [@diselkgd7](https://discuss.elastic.co/u/diselkgd7)\ **Replies:** 5\ **Last updated:** [March 16, 2024, 9:51am UTC](https://discuss.elastic.co/t/cluster-currently-has-1000-1000-maximum-normal-shards-open/354830 "2024-03-16T09:51:38Z")
I have what is like a Newbee question, I hope it makes sense how I explain it. I noticed that logs are not being ingested by my 1 node cluster and logstash complains about the maximum normal shards open - can you help m… --- ## [Sum Aggregation using multiple fields](https://discuss.elastic.co/t/sum-aggregation-using-multiple-fields/321357)
**Author:** [@searchwithme](https://discuss.elastic.co/u/searchwithme)\ **Replies:** 5\ **Last updated:** [December 16, 2022, 7:02pm UTC](https://discuss.elastic.co/t/sum-aggregation-using-multiple-fields/321357 "2022-12-16T19:02:00Z")
Hi team! I am indexing the following sample data: travel index Flight price - 550 Hotel price - 220 Meals - 120 (Total Expense - 890) If I query for travel index with total expense \< 1000, it should return result… --- ## [The new node cannot add to the cluster but creating a separate new cluster instead](https://discuss.elastic.co/t/the-new-node-cannot-add-to-the-cluster-but-creating-a-separate-new-cluster-instead/278373)
**Author:** [@Zongxian\_Feng](https://discuss.elastic.co/u/Zongxian_Feng)\ **Replies:** 5\ **Last updated:** [July 12, 2021, 2:41pm UTC](https://discuss.elastic.co/t/the-new-node-cannot-add-to-the-cluster-but-creating-a-separate-new-cluster-instead/278373 "2021-07-12T14:41:31Z")
Hi. I am trying to add a new node to an existing cluster(only has one node in it). After configuring in .yml and running the elasticsearch on both nodes, the new node creates a new cluster instead of joining the original… --- ## [Configure Filebeat not to rotate file on restart](https://discuss.elastic.co/t/configure-filebeat-not-to-rotate-file-on-restart/195525)
**Author:** [@Romano](https://discuss.elastic.co/u/Romano)\ **Replies:** 5\ **Last updated:** [August 23, 2019, 9:31am UTC](https://discuss.elastic.co/t/configure-filebeat-not-to-rotate-file-on-restart/195525 "2019-08-23T09:31:20Z")
I am using filebeat to parse some logs and collect data for a month. System uses logrotate to rotate file when needed. Filebeat system fits perfectly for me, because It starts up on server restart, and easy to setup the … --- ## [Kibana Status: Red](https://discuss.elastic.co/t/kibana-status-red/98820)
**Author:** [@gpganeshgp](https://discuss.elastic.co/u/gpganeshgp)\ **Replies:** 5\ **Last updated:** [August 30, 2017, 9:11am UTC](https://discuss.elastic.co/t/kibana-status-red/98820 "2017-08-30T09:11:21Z")
Hi… Now I installed ELK but it showing 1. Elasticsearch plugin is red 2. This version of Kibana requires Elasticsearch v5.5.2 on all nodes. I found the following incompatible nodes in your cluster: v2.4.6 @ 127.0.0.1:920… --- ## [Как убрать слово из запроса, которое нигде не встречается?](https://discuss.elastic.co/t/topic/81147)
**Author:** [@klara\_gogi](https://discuss.elastic.co/u/klara_gogi)\ **Replies:** 5\ **Last updated:** [April 5, 2017, 2:06pm UTC](https://discuss.elastic.co/t/topic/81147 "2017-04-05T14:06:48Z")
Я понимаю что можно скомбинировать запросы с оператором и и или между словами, но может планируется или есть уже решение которое было бы оптимизировано под большие скорости и нагрузки? --- ## [Bulk alerting configuration](https://discuss.elastic.co/t/bulk-alerting-configuration/327511)
**Author:** [@rossw](https://discuss.elastic.co/u/rossw)\ **Replies:** 5\ **Last updated:** [April 11, 2023, 9:13pm UTC](https://discuss.elastic.co/t/bulk-alerting-configuration/327511 "2023-04-11T21:13:48Z")
Afternoon, We are using the alerting functionality inside the Elastic Security toolset, and we have turned on about 100-odd rules. We have created email and webhook integrations and have started to tune the data being … --- ## [Can't see Kibana logs](https://discuss.elastic.co/t/cant-see-kibana-logs/330246)
**Author:** [@ishan.abhinit](https://discuss.elastic.co/u/ishan.abhinit)\ **Replies:** 7\ **Last updated:** [April 19, 2023, 7:15pm UTC](https://discuss.elastic.co/t/cant-see-kibana-logs/330246 "2023-04-19T19:15:40Z")
I had set up Elasticsearch and Kibana on Rocky Linux few months ago for a workshop. Everything worked fine then. I shut down the server after the workshop and restarted it last week. I don't see the logs appearing in Ki… --- ## [Problem with SIEM](https://discuss.elastic.co/t/problem-with-siem/204593)
**Author:** [@Aleix\_Abrie\_Prat](https://discuss.elastic.co/u/Aleix_Abrie_Prat)\ **Replies:** 7\ **Last updated:** [October 22, 2019, 4:52pm UTC](https://discuss.elastic.co/t/problem-with-siem/204593 "2019-10-22T16:52:42Z")
Hello everyone, I have a problem once i have configured SIEM and auditbeat on the "client" machine. I configured one machine only with auditbeat and the coniguration standars. I will post below the configuration. The … --- ## [Writing spark Dataframe/Dataset to Elasticsearch](https://discuss.elastic.co/t/writing-spark-dataframe-dataset-to-elasticsearch/131023)
**Author:** [@wandermonk](https://discuss.elastic.co/u/wandermonk)\ **Replies:** 1\ **Last updated:** [May 30, 2018, 7:28pm UTC](https://discuss.elastic.co/t/writing-spark-dataframe-dataset-to-elasticsearch/131023 "2018-05-30T19:28:49Z")
I am trying to write a JavaRDD to elasticsearch using the saveToES() method. But, we are getting the exception EsHadoopIllegalArgumentException: Cannot detect ES version - typically this happens if the network/Elastics… --- ## [Kibana Incorrect Order for Bar Graph](https://discuss.elastic.co/t/kibana-incorrect-order-for-bar-graph/128641)
**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\ **Replies:** 1\ **Last updated:** [April 19, 2018, 4:57pm UTC](https://discuss.elastic.co/t/kibana-incorrect-order-for-bar-graph/128641 "2018-04-19T16:57:17Z")
Hello Team, I'm visualizing two fields in the vertical bar graph(using split series) but not sure what order it's following? \[image\] If you see the count of the second bar is very less and count of the third bar is hi… --- ## [Timestamp at Input section](https://discuss.elastic.co/t/timestamp-at-input-section/59600)
**Author:** [@sombilat](https://discuss.elastic.co/u/sombilat)\ **Replies:** 7\ **Last updated:** [September 1, 2016, 9:17pm UTC](https://discuss.elastic.co/t/timestamp-at-input-section/59600 "2016-09-01T21:17:31Z")
Hello Guys, I am utilizing the @timestamp field in a DB2 Query. I am using the JDBC plugin, where in I am relying on the @timestamp field for my date parameters. Now, thing is I cannot use the @timestamp because it … --- ## [How to get discovery.zen.minimum\_master\_nodes setting](https://discuss.elastic.co/t/how-to-get-discovery-zen-minimum-master-nodes-setting/40617)
**Author:** [@dtrv](https://discuss.elastic.co/u/dtrv)\ **Replies:** 1\ **Last updated:** [February 2, 2016, 10:26pm UTC](https://discuss.elastic.co/t/how-to-get-discovery-zen-minimum-master-nodes-setting/40617 "2016-02-02T22:26:23Z")
Hi. I know one can set the discovery.zen.minimum\_master\_node within the config file and by using the cluster update settings API. But how to get the current setting? What if one start a node with minimum\_master\_node … --- ## [inconsistent document scores using search\_type=dfs\_query\_then\_fetch (how do the \_score and \_explanation.value fields relate?)](https://discuss.elastic.co/t/inconsistent-document-scores-using-search-type-dfs-query-then-fetch-how-do-the--score-and--explanation-value-fields-relate/6151)
**Author:** [@cole](https://discuss.elastic.co/u/cole)\ **Replies:** 7\ **Last updated:** [December 16, 2011, 7:32pm UTC](https://discuss.elastic.co/t/inconsistent-document-scores-using-search-type-dfs-query-then-fetch-how-do-the--score-and--explanation-value-fields-relate/6151 "2011-12-16T19:32:45Z")
--- ## [Logging](https://discuss.elastic.co/t/logging/5147)
**Author:** [@Mats\_Noren](https://discuss.elastic.co/u/Mats_Noren)\ **Replies:** 7\ **Last updated:** [August 13, 2011, 10:51am UTC](https://discuss.elastic.co/t/logging/5147 "2011-08-13T10:51:56Z")
Hi, I'm trying to integrate an elasticsearch localnode in a project of mine. I keep getting this error: 52309 \[btpool0-4\] ERROR org.mortbay.log - Nested in org.springframework.web.util.NestedServletException: Han… --- ## [Why Elasticsearch-SQL “group by” use composite agg](https://discuss.elastic.co/t/why-elasticsearch-sql-group-by-use-composite-agg/239740)
**Author:** [@ITzhangqiang](https://discuss.elastic.co/u/ITzhangqiang)\ **Replies:** 8\ **Last updated:** [July 6, 2020, 2:45am UTC](https://discuss.elastic.co/t/why-elasticsearch-sql-group-by-use-composite-agg/239740 "2020-07-06T02:45:25Z")
When I tested the Elasticsearch-SQL feature，I found the “group by” is too slow,why “group by” relies on Elasticsearch’s composite aggregation？ case1:use Elasticsearch-SQL GET /\_sql?format=json { "query": """ selec… [Previous page](https://discuss.elastic.co/top.md?page=1160&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1162&per_page=50&period=all)