# Top

**URL:** https://discuss.elastic.co/top.md?page=1177&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1178

---

## [Can not make TLS/SSL connection to kafka v0,9 using filebeat v5](https://discuss.elastic.co/t/can-not-make-tls-ssl-connection-to-kafka-v0-9-using-filebeat-v5/53219)

<div class="topic-metadata">

**Author:** [@chengtaochen](https://discuss.elastic.co/u/chengtaochen)\
**Replies:** 1\
**Last updated:** [June 20, 2016, 9:31am UTC](https://discuss.elastic.co/t/can-not-make-tls-ssl-connection-to-kafka-v0-9-using-filebeat-v5/53219 "2016-06-20T09:31:54Z")

</div>

Hi: I am trying to figure out how to make TLS/SSL connection from filebeat v5. I have enabled TLS and client authentication on a Kafka v0.9 server, and configure filebeat with TLS enabled, but I am getting tons of T…

---

## [Powershell to ElasticSearch](https://discuss.elastic.co/t/powershell-to-elasticsearch/39260)

<div class="topic-metadata">

**Author:** [@elastic-fan](https://discuss.elastic.co/u/elastic-fan)\
**Replies:** 1\
**Last updated:** [January 14, 2016, 11:34pm UTC](https://discuss.elastic.co/t/powershell-to-elasticsearch/39260 "2016-01-14T23:34:40Z")

</div>

hi, from powershell if i convert the data i want to json and send that over to elastic search will i be able to query that from kibana? do i need anything in the middle?

---

## [Extract URL from Text Field into a New Field Called URL](https://discuss.elastic.co/t/extract-url-from-text-field-into-a-new-field-called-url/34100)

<div class="topic-metadata">

**Author:** [@Isra](https://discuss.elastic.co/u/Isra)\
**Replies:** 1\
**Last updated:** [November 8, 2015, 8:45pm UTC](https://discuss.elastic.co/t/extract-url-from-text-field-into-a-new-field-called-url/34100 "2015-11-08T20:45:53Z")

</div>

I'm inputting a field called text. this field may at times contain a URL.What I would like to do is extract the URL's from text, and put them in a new field called URL. I tried grok, but it seems like grok patterns nee…

---

## [Server mapping between elasticsearch and mongodb](https://discuss.elastic.co/t/server-mapping-between-elasticsearch-and-mongodb/9445)

<div class="topic-metadata">

**Author:** [@Robbie\_Cheng](https://discuss.elastic.co/u/Robbie_Cheng)\
**Replies:** 7\
**Last updated:** [December 15, 2012, 5:48am UTC](https://discuss.elastic.co/t/server-mapping-between-elasticsearch-and-mongodb/9445 "2012-12-15T05:48:34Z")

</div>

we would like to build elasticsearch on top of our mongodb, and river plug is used. -what would be the best server mapping between elasticsearch and mongodb? 1 elasticsearch 1 mongo replication server? thanks, …

---

## [Kibana Canvas](https://discuss.elastic.co/t/kibana-canvas/313786)

<div class="topic-metadata">

**Author:** [@RobinIT](https://discuss.elastic.co/u/RobinIT)\
**Replies:** 8\
**Last updated:** [September 7, 2022, 11:59am UTC](https://discuss.elastic.co/t/kibana-canvas/313786 "2022-09-07T11:59:49Z")

</div>

Hello, I have a dashboard with a Pie, including some filters to specify the Slices of the pie. I want to build the Pie in canvas, but I don't know how. Can someone guide me a little bit, with some hints....how to get t…

---

## [ELK Stack 6.x vs EFK Stack 6.x, general guideline for Hardware Sizing resources (recommendation)?](https://discuss.elastic.co/t/elk-stack-6-x-vs-efk-stack-6-x-general-guideline-for-hardware-sizing-resources-recommendation/114261)

<div class="topic-metadata">

**Author:** [@fchiorascu](https://discuss.elastic.co/u/fchiorascu)\
**Replies:** 0\
**Last updated:** [January 5, 2018, 9:53am UTC](https://discuss.elastic.co/t/elk-stack-6-x-vs-efk-stack-6-x-general-guideline-for-hardware-sizing-resources-recommendation/114261 "2018-01-05T09:53:51Z")

</div>

Hi, I'm sorry for the post. I have read all the Internet recommendation but is not so clear. In fact I want to deploy ELK Stack and EFK Stack and for this I didn't find any "general guideline for Hardware sizing of re…

---

## [ElasticCluster cant restart and connect with kibana](https://discuss.elastic.co/t/elasticcluster-cant-restart-and-connect-with-kibana/65382)

<div class="topic-metadata">

**Author:** [@rpoveda](https://discuss.elastic.co/u/rpoveda)\
**Replies:** 8\
**Last updated:** [November 10, 2016, 3:27pm UTC](https://discuss.elastic.co/t/elasticcluster-cant-restart-and-connect-with-kibana/65382 "2016-11-10T15:27:14Z")

</div>

After cluster reboot, Kibana show me the cluster's status RED It was working fine... ¿Anyone can helpme? Thanks

---

## [Logstash output to elasticsearch - open distro for elasticsearch](https://discuss.elastic.co/t/logstash-output-to-elasticsearch-open-distro-for-elasticsearch/252961)

<div class="topic-metadata">

**Author:** [@jafri6](https://discuss.elastic.co/u/jafri6)\
**Replies:** 2\
**Last updated:** [October 22, 2020, 2:28pm UTC](https://discuss.elastic.co/t/logstash-output-to-elasticsearch-open-distro-for-elasticsearch/252961 "2020-10-22T14:28:39Z")

</div>

I have been working on this project, and my logstash configuration file works fine. Now I am trying to implement the same thing on a system that is running opendistro/elk stack. I have tried to fix most of the errors, b…

---

## [More\_this\_thisクエリ関する質問](https://discuss.elastic.co/t/more-this-this/59520)

<div class="topic-metadata">

**Author:** [@Takahiro\_Horike](https://discuss.elastic.co/u/Takahiro_Horike)\
**Replies:** 2\
**Last updated:** [October 21, 2016, 1:57am UTC](https://discuss.elastic.co/t/more-this-this/59520 "2016-10-21T01:57:17Z")

</div>

実現したいこと more\_this\_thisクエリを使ってブログメディアの関連記事を抽出するシステムを作っております。その中で以下の仕様を実現したいと考えています。 1. 特定の単語が本文に存在している記事はmore\_this\_thisの結果に出さない 2. 特定の単語が本文に存在している記事のmore\_this\_thisの結果のスコアをあげたい 現在試している方法 1に関してはstop\_wordsのオプションを。2に関してはb…

---

## [Using ElasticSearch Java API on an EAR project in Glassfish 4.1](https://discuss.elastic.co/t/using-elasticsearch-java-api-on-an-ear-project-in-glassfish-4-1/48408)

<div class="topic-metadata">

**Author:** [@Erates](https://discuss.elastic.co/u/Erates)\
**Replies:** 2\
**Last updated:** [May 25, 2016, 1:04pm UTC](https://discuss.elastic.co/t/using-elasticsearch-java-api-on-an-ear-project-in-glassfish-4-1/48408 "2016-05-25T13:04:33Z")

</div>

Hello, I'm trying to create a EAR application that talks to ElasticSearch. But I can't get it to work. It keeps complaining about classes not being able to load. I know Glassfish has it's own implementations of Jacks…

---

## [Newbie and new log format: shoutcast streaming server](https://discuss.elastic.co/t/newbie-and-new-log-format-shoutcast-streaming-server/500)

<div class="topic-metadata">

**Author:** [@alexolivan](https://discuss.elastic.co/u/alexolivan)\
**Replies:** 2\
**Last updated:** [May 11, 2015, 3:29pm UTC](https://discuss.elastic.co/t/newbie-and-new-log-format-shoutcast-streaming-server/500 "2015-05-11T15:29:20Z")

</div>

Hi forum... I'm quite new to all this logstash / elasticsearch (kibana) world so please take it easy... I have successfully created a centralized ELK setup to monitor our pfsense firewalls... and thereby, I have been…

---

## [Single behavior generates several alerts](https://discuss.elastic.co/t/single-behavior-generates-several-alerts/283943)

<div class="topic-metadata">

**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\
**Replies:** 3\
**Last updated:** [September 21, 2021, 12:15pm UTC](https://discuss.elastic.co/t/single-behavior-generates-several-alerts/283943 "2021-09-21T12:15:54Z")

</div>

Hello evry body, I have a lot of alerts generated by a single behavior scan from the address IP x.x.x.x to the ip address Y (each time the rule is executed another alerts is created). Is there a way to have only one ale…

---

## [Oracle BLOB column with jdbc input to base64](https://discuss.elastic.co/t/oracle-blob-column-with-jdbc-input-to-base64/276830)

<div class="topic-metadata">

**Author:** [@alexanders](https://discuss.elastic.co/u/alexanders)\
**Replies:** 3\
**Last updated:** [July 5, 2021, 7:54am UTC](https://discuss.elastic.co/t/oracle-blob-column-with-jdbc-input-to-base64/276830 "2021-07-05T07:54:03Z")

</div>

When fetching an Oracle BLOB column with logstash's jdbc input, I try to convert it to base64 using the following filter: ruby { code =\> 'event.set("b64", Base64.strict\_encode64(event.get("blob\_column")))' } wh…

---

## [Not able to see all fields when trying to create visualisation](https://discuss.elastic.co/t/not-able-to-see-all-fields-when-trying-to-create-visualisation/244058)

<div class="topic-metadata">

**Author:** [@Dinesh\_Potey](https://discuss.elastic.co/u/Dinesh_Potey)\
**Replies:** 3\
**Last updated:** [August 9, 2020, 8:09pm UTC](https://discuss.elastic.co/t/not-able-to-see-all-fields-when-trying-to-create-visualisation/244058 "2020-08-09T20:09:29Z")

</div>

Hi , I am trying to create error dashboard for which firstly I have to create a visualization out of my Index pattern. I am not able to see all the elements of my xml when I am trying to filter out to create the visuali…

---

## [Esrally error - Could not initialize internal actor system](https://discuss.elastic.co/t/esrally-error-could-not-initialize-internal-actor-system/240993)

<div class="topic-metadata">

**Author:** [@pro.shivansh](https://discuss.elastic.co/u/pro.shivansh)\
**Replies:** 3\
**Last updated:** [July 24, 2020, 1:35pm UTC](https://discuss.elastic.co/t/esrally-error-could-not-initialize-internal-actor-system/240993 "2020-07-24T13:35:58Z")

</div>

Hello everyone, I was running a benchmark-only for a cluster and ran into an error as described below. I would really appreciate it if someone can help me figure out why is this error occurring and a possible resolution. …

---

## [Pulling date from Elastic and convert it to local time zone](https://discuss.elastic.co/t/pulling-date-from-elastic-and-convert-it-to-local-time-zone/201345)

<div class="topic-metadata">

**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\
**Replies:** 3\
**Last updated:** [October 1, 2019, 12:39pm UTC](https://discuss.elastic.co/t/pulling-date-from-elastic-and-convert-it-to-local-time-zone/201345 "2019-10-01T12:39:59Z")

</div>

Hello, I'm using Beats to to put data onto my Elasticsearch server. All machines incluing the monitored server are based in CET timezone. In Kibana i can see the @timestamp stored in CET, but when i pull it out using Lo…

---

## [Using tshark -e \<field\> with -T ek switch, parsing json, filebeat](https://discuss.elastic.co/t/using-tshark-e-field-with-t-ek-switch-parsing-json-filebeat/183625)

<div class="topic-metadata">

**Author:** [@dataGuy](https://discuss.elastic.co/u/dataGuy)\
**Replies:** 3\
**Last updated:** [June 11, 2019, 2:50am UTC](https://discuss.elastic.co/t/using-tshark-e-field-with-t-ek-switch-parsing-json-filebeat/183625 "2019-06-11T02:50:54Z")

</div>

Thanks for allowing me in the forums I'm new to Elasticstack and this is my first post so please be gentle. Tools: Windows 10.1804 (Admin)PowerShell Elastic Version 7.0.1 Problem: When harvesting a json file genera…

---

## [Input tcp does not close the connection](https://discuss.elastic.co/t/input-tcp-does-not-close-the-connection/100869)

<div class="topic-metadata">

**Author:** [@Tonni\_Hult](https://discuss.elastic.co/u/Tonni_Hult)\
**Replies:** 3\
**Last updated:** [September 18, 2017, 1:51pm UTC](https://discuss.elastic.co/t/input-tcp-does-not-close-the-connection/100869 "2017-09-18T13:51:59Z")

</div>

Hi My problem is that the tcp plugin seems to keep a connection open instead of closing it after each call. Is this normal behaviour? We have a loadbalancer that constantly make GET requests to see that each node in the…

---

## [How do I get my Kibana/Elasticsearch 5.4 Server to get logs/graphs for an ISILON OneFS v7.2](https://discuss.elastic.co/t/how-do-i-get-my-kibana-elasticsearch-5-4-server-to-get-logs-graphs-for-an-isilon-onefs-v7-2/94676)

<div class="topic-metadata">

**Author:** [@elJoeyJojo](https://discuss.elastic.co/u/elJoeyJojo)\
**Replies:** 3\
**Last updated:** [July 26, 2017, 10:41pm UTC](https://discuss.elastic.co/t/how-do-i-get-my-kibana-elasticsearch-5-4-server-to-get-logs-graphs-for-an-isilon-onefs-v7-2/94676 "2017-07-26T22:41:49Z")

</div>

Hello, Anybody know how I can get my Kibana/Elasticsearch 5.4 running on Ubuntu 16.04 Xenial to get logs/stats from an ISILON Cluster running OneFS 7.2? I know how to get data/logs/stats from other Linux distribution…

---

## [Filebeat won't send files cause ignore\_older reached](https://discuss.elastic.co/t/filebeat-wont-send-files-cause-ignore-older-reached/72086)

<div class="topic-metadata">

**Author:** [@Shadowraze](https://discuss.elastic.co/u/Shadowraze)\
**Replies:** 3\
**Last updated:** [January 19, 2017, 2:08pm UTC](https://discuss.elastic.co/t/filebeat-wont-send-files-cause-ignore-older-reached/72086 "2017-01-19T14:08:18Z")

</div>

Elasticsearch + kibana + logstash + filebeat all was downloaded 2 days ago from official site(.deb). Thats my filebeat.yml http://pastebin.com/ij18FMec. It's like every harvest in filebeat log looks like this 2017-01…

---

## [Logstash 5.0 Alpha 4 csv input and mutate split error](https://discuss.elastic.co/t/logstash-5-0-alpha-4-csv-input-and-mutate-split-error/55923)

<div class="topic-metadata">

**Author:** [@tcaudrey](https://discuss.elastic.co/u/tcaudrey)\
**Replies:** 3\
**Last updated:** [August 22, 2016, 5:32pm UTC](https://discuss.elastic.co/t/logstash-5-0-alpha-4-csv-input-and-mutate-split-error/55923 "2016-08-22T17:32:18Z")

</div>

Hi - I have simple .csv input files and a Logstash config that worked fine with Logstash 2.3.x, but when trying to use the same input files and config file in Logstash 5.0 aplha 4 produces the following error and crashes…

---

## [Explanation of the cluster and indices actions privileges](https://discuss.elastic.co/t/explanation-of-the-cluster-and-indices-actions-privileges/42269)

<div class="topic-metadata">

**Author:** [@ksoucy](https://discuss.elastic.co/u/ksoucy)\
**Replies:** 3\
**Last updated:** [February 22, 2016, 8:34pm UTC](https://discuss.elastic.co/t/explanation-of-the-cluster-and-indices-actions-privileges/42269 "2016-02-22T20:34:58Z")

</div>

Is there a document that details what each of the cluster/indices actions privileges will allow/not allow in Kibana and ES ? Its difficult to properly set up roles when its not really clear what the individual privilege…

---

## [Why node query cache works only for filters](https://discuss.elastic.co/t/why-node-query-cache-works-only-for-filters/157846)

<div class="topic-metadata">

**Author:** [@vgindin](https://discuss.elastic.co/u/vgindin)\
**Replies:** 5\
**Last updated:** [December 5, 2018, 1:14pm UTC](https://discuss.elastic.co/t/why-node-query-cache-works-only-for-filters/157846 "2018-12-05T13:14:04Z")

</div>

Hi, I have a custom query with ml scoring algorithm. I'd like to be able to cache search results before different aggregations/sorting are applied. I.e. request\_cache is not suitable and node query cache would be great,…

---

## [Which node handle my request?](https://discuss.elastic.co/t/which-node-handle-my-request/181969)

<div class="topic-metadata">

**Author:** [@Mor](https://discuss.elastic.co/u/Mor)\
**Replies:** 0\
**Last updated:** [May 21, 2019, 10:00am UTC](https://discuss.elastic.co/t/which-node-handle-my-request/181969 "2019-05-21T10:00:43Z")

</div>

Hi, I have a cluster with ~20 ES data nodes and 3 masters and want to add coordinator nodes. I understand the technique of how to add those nodes, but in order to make sure my app is working correctly (and not calling …

---

## [Connection refused port 5044](https://discuss.elastic.co/t/connection-refused-port-5044/277149)

<div class="topic-metadata">

**Author:** [@diegz](https://discuss.elastic.co/u/diegz)\
**Replies:** 1\
**Last updated:** [July 14, 2021, 4:35pm UTC](https://discuss.elastic.co/t/connection-refused-port-5044/277149 "2021-07-14T16:35:43Z")

</div>

Hi, When i want to validate the logstash server certificate with this command : curl -v --cacert /etc/logstash/config/certs/logstash.crt https://logstash.ad-it.fr:5044 Rebuilt URL to: https://192.168.1.30:5044/ \* Try…

---

## [Encrypt the password in logstash elasticsearch output](https://discuss.elastic.co/t/encrypt-the-password-in-logstash-elasticsearch-output/95447)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 1\
**Last updated:** [August 2, 2017, 7:04am UTC](https://discuss.elastic.co/t/encrypt-the-password-in-logstash-elasticsearch-output/95447 "2017-08-02T07:04:15Z")

</div>

Is there a way to encrypt the password in logstash elasticsearch output? output { elasticsearch { … user =\> logstash\_internal password =\> changeme } }

---

## [Error while restarting filebeat?](https://discuss.elastic.co/t/error-while-restarting-filebeat/38247)

<div class="topic-metadata">

**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\
**Replies:** 1\
**Last updated:** [January 4, 2016, 7:48am UTC](https://discuss.elastic.co/t/error-while-restarting-filebeat/38247 "2016-01-04T07:48:56Z")

</div>

Please find the error and help me in order to recover from it. Restarting Sends log files to Logstash or directly to Elasticsearch. filebeat 2016/01/01 15…

---

## [Ingest-attachment: case insensitive search](https://discuss.elastic.co/t/ingest-attachment-case-insensitive-search/107737)

<div class="topic-metadata">

**Author:** [@Vikentyi](https://discuss.elastic.co/u/Vikentyi)\
**Replies:** 5\
**Last updated:** [December 6, 2017, 4:01pm UTC](https://discuss.elastic.co/t/ingest-attachment-case-insensitive-search/107737 "2017-12-06T16:01:56Z")

</div>

Hello. I have a requirement to perform search in file content. Everything is ok. But is it possible to implement case insensitive search in file content? I've read a lot and did't find an answer.

---

## [\_grokparsefailure in the file](https://discuss.elastic.co/t/-grokparsefailure-in-the-file/95123)

<div class="topic-metadata">

**Author:** [@varunverma](https://discuss.elastic.co/u/varunverma)\
**Replies:** 5\
**Last updated:** [August 2, 2017, 12:37am UTC](https://discuss.elastic.co/t/-grokparsefailure-in-the-file/95123 "2017-08-02T00:37:55Z")

</div>

I have the below grok filter in my logstash conf file filter { grok { match =\> { ‘message’ =\> ’ %{IPORHOST:clientip} - %{USERNAME:user} %{HTTPDATE:timestamp} \\"%{WORD:method} %{NOTSPACE:request} %{NOTSPACE:httpversion…

---

## [Sourcemaps not getting applied](https://discuss.elastic.co/t/sourcemaps-not-getting-applied/326923)

<div class="topic-metadata">

**Author:** [@skumar7](https://discuss.elastic.co/u/skumar7)\
**Replies:** 4\
**Last updated:** [March 23, 2023, 3:11pm UTC](https://discuss.elastic.co/t/sourcemaps-not-getting-applied/326923 "2023-03-23T15:11:30Z")

</div>

We have a custom node app for uploading source maps and have provided all the required details like serviceName, serviceVersion, bundlePath to upload. We are getting success message for all the source maps but when we tr…

---

## [Watcherの実装内容に関して](https://discuss.elastic.co/t/watcher/249760)

<div class="topic-metadata">

**Author:** [@harue](https://discuss.elastic.co/u/harue)\
**Replies:** 4\
**Last updated:** [October 8, 2020, 12:30am UTC](https://discuss.elastic.co/t/watcher/249760 "2020-10-08T00:30:12Z")

</div>

※9/25 一部内容を変更しました。 お世話になります。 Watcherの実装に関して、質問させて頂きます。 ▼inputのindex ・A\_indexとB\_indexの紐づき項目は「tenantId」 ・tenantIdにaddressは一意 A\_index \_id tenantId eventid memo 1 001 111 test1 2 002 111 test2 B\_i…

---

## [Specify ILM policy for Multiple Elasticsearch outputs](https://discuss.elastic.co/t/specify-ilm-policy-for-multiple-elasticsearch-outputs/208129)

<div class="topic-metadata">

**Author:** [@TonyLuc](https://discuss.elastic.co/u/TonyLuc)\
**Replies:** 4\
**Last updated:** [November 19, 2019, 5:36pm UTC](https://discuss.elastic.co/t/specify-ilm-policy-for-multiple-elasticsearch-outputs/208129 "2019-11-19T17:36:35Z")

</div>

Scenario I am using filebeat to collect logs from 2 different sources. It is going to 2 different indexes. Thus in the filebeat.yml the following are added to the Elasticsearch output: output.elasticsearch: hosts: \["…

---

## [Logstash sending to all output hosts](https://discuss.elastic.co/t/logstash-sending-to-all-output-hosts/100583)

<div class="topic-metadata">

**Author:** [@criddock](https://discuss.elastic.co/u/criddock)\
**Replies:** 4\
**Last updated:** [September 14, 2017, 7:21pm UTC](https://discuss.elastic.co/t/logstash-sending-to-all-output-hosts/100583 "2017-09-14T19:21:11Z")

</div>

So, here is a really odd situation. I have two pipeline files: Receive "Beats" fwd'ed logs over 5044 - send to ElasticSearch (x.x.x.164) input { beats { port =\> "5044" } } output { elasticsearch { …

---

## [On upgrading from 2.1 \> 2.3 (rolling & breaking mapping changes)](https://discuss.elastic.co/t/on-upgrading-from-2-1-2-3-rolling-breaking-mapping-changes/46092)

<div class="topic-metadata">

**Author:** [@mikewillekes](https://discuss.elastic.co/u/mikewillekes)\
**Replies:** 4\
**Last updated:** [April 5, 2016, 6:41pm UTC](https://discuss.elastic.co/t/on-upgrading-from-2-1-2-3-rolling-breaking-mapping-changes/46092 "2016-04-05T18:41:05Z")

</div>

Rolling Upgrade According to the table it should be possible to perform a rolling upgrade from 2.1.1 \> 2.3.0. The steps to perform a Rolling upgrade seem straightforward. But this warning stands out: "If it is not po…

---

## [Elastic SQL](https://discuss.elastic.co/t/elastic-sql/327525)

<div class="topic-metadata">

**Author:** [@\_baba](https://discuss.elastic.co/u/_baba)\
**Replies:** 6\
**Last updated:** [March 17, 2023, 8:41am UTC](https://discuss.elastic.co/t/elastic-sql/327525 "2023-03-17T08:41:00Z")

</div>

Hi, I'm not able to execute sql queries from kibana on AWS managed Elasticsearch, however I can execute it via REST call. Can someone help me identify what's the root cause of this? Query: POST /\_sql { "query": "SELE…

---

## [2nd Winlogbeat Install same as the first...this one doesn't work](https://discuss.elastic.co/t/2nd-winlogbeat-install-same-as-the-first-this-one-doesnt-work/142764)

<div class="topic-metadata">

**Author:** [@JustTheDr](https://discuss.elastic.co/u/JustTheDr)\
**Replies:** 6\
**Last updated:** [August 2, 2018, 7:26pm UTC](https://discuss.elastic.co/t/2nd-winlogbeat-install-same-as-the-first-this-one-doesnt-work/142764 "2018-08-02T19:26:27Z")

</div>

I installed a Winlogbeat on my Windows 10 PC and everything was zen. I installed another on a Windows Server 2012 R2 Server and followed the same steps. I copied the contents of the winlogbeat.yml file from my first in…

---

## [Filebeat with Kubernetes on GCE](https://discuss.elastic.co/t/filebeat-with-kubernetes-on-gce/134875)

<div class="topic-metadata">

**Author:** [@Newbas](https://discuss.elastic.co/u/Newbas)\
**Replies:** 6\
**Last updated:** [June 10, 2018, 7:04am UTC](https://discuss.elastic.co/t/filebeat-with-kubernetes-on-gce/134875 "2018-06-10T07:04:46Z")

</div>

Hi to everyone. I am trying to send logs to logstash from GCE Kubernetes with use of Filebeat. I took example config for filebeat and just changed Elasticsearch on my logstash. DaemonSet starting and logs look like nor…

---

## [Watcher issue (for real)](https://discuss.elastic.co/t/watcher-issue-for-real/57159)

<div class="topic-metadata">

**Author:** [@kartikvelastic](https://discuss.elastic.co/u/kartikvelastic)\
**Replies:** 6\
**Last updated:** [August 4, 2016, 6:10pm UTC](https://discuss.elastic.co/t/watcher-issue-for-real/57159 "2016-08-04T18:10:03Z")

</div>

The examples on elastic.co seem to work unmodified in my environment, I am however having an issue: This works and sends email: 0}\[root@test75 ~\]# curl -XPUT 'http://test45:9200/\_watcher/watch/cluster\_health\_watch7' -…

---

## [New Elasticsearch Java API: Source is null when search is execute](https://discuss.elastic.co/t/new-elasticsearch-java-api-source-is-null-when-search-is-execute/309980)

<div class="topic-metadata">

**Author:** [@ALX\_DM](https://discuss.elastic.co/u/ALX_DM)\
**Replies:** 2\
**Last updated:** [July 19, 2022, 7:30am UTC](https://discuss.elastic.co/t/new-elasticsearch-java-api-source-is-null-when-search-is-execute/309980 "2022-07-19T07:30:56Z")

</div>

I want to implement this command using the new ES Java API client but the result shows source as null POST /test\_event\_202207/\_search?typed\_keys=true { "sort":\[{"time":{"order":"desc"}}\] } If I excecute this in Kiban…

---

## [\[Filebeat 7.12\] \[Windows\] Failed to open store 'filebeat' after incorrect Windows reboot](https://discuss.elastic.co/t/filebeat-7-12-windows-failed-to-open-store-filebeat-after-incorrect-windows-reboot/270145)

<div class="topic-metadata">

**Author:** [@akelio](https://discuss.elastic.co/u/akelio)\
**Replies:** 2\
**Last updated:** [April 19, 2021, 12:01pm UTC](https://discuss.elastic.co/t/filebeat-7-12-windows-failed-to-open-store-filebeat-after-incorrect-windows-reboot/270145 "2021-04-19T12:01:32Z")

</div>

Hi! Filebeat 7.12 (x86) on Windows machine cannot start after incorrect OS reboot (possibly after power supply lost). Log shows that registry data files are corrupted. The only way I found to manually start filebeat is…

---

## [Asynchronous Traces](https://discuss.elastic.co/t/asynchronous-traces/236736)

<div class="topic-metadata">

**Author:** [@tstadler](https://discuss.elastic.co/u/tstadler)\
**Replies:** 2\
**Last updated:** [June 12, 2020, 7:09pm UTC](https://discuss.elastic.co/t/asynchronous-traces/236736 "2020-06-12T19:09:20Z")

</div>

Kibana version: 7.7.1 Elasticsearch version: 7.7.1 APM Server version: 7.7.1 APM Agent language and version: Java 1.16.0 Original install method (e.g. download page, yum, deb, from source, etc.) and version: docker F…

---

## [EUI BasicTable selection updates not reflecting](https://discuss.elastic.co/t/eui-basictable-selection-updates-not-reflecting/225310)

<div class="topic-metadata">

**Author:** [@tiburon\_security](https://discuss.elastic.co/u/tiburon_security)\
**Replies:** 2\
**Last updated:** [March 27, 2020, 6:30pm UTC](https://discuss.elastic.co/t/eui-basictable-selection-updates-not-reflecting/225310 "2020-03-27T18:30:19Z")

</div>

Hi all, I'm using an EUI BasicTable with the selection feature for performing actions against rows of data. However, when I programatically update the tables selection (for example in response to an action against a row)…

---

## [エラー Too many operations declared on operation entry](https://discuss.elastic.co/t/too-many-operations-declared-on-operation-entry/201892)

<div class="topic-metadata">

**Author:** [@Masanori\_Mishima](https://discuss.elastic.co/u/Masanori_Mishima)\
**Replies:** 2\
**Last updated:** [October 15, 2019, 11:09am UTC](https://discuss.elastic.co/t/too-many-operations-declared-on-operation-entry/201892 "2019-10-15T11:09:21Z")

</div>

node.jsから非同期処理を用いて 1.旧indexのindex\_name取得 2.旧indexのaliasをremove、新indexに旧につけていたalias名と同じものをaliasとしてadd 3.旧indexの削除 を行ったところタイトルのerrorが出ました。原因は一度に大量のオペレーションを宣言したからということみたいですが、解決策は何がありますでしょうか？ { StatusCodeError: 400 - {…

---

## [Filter is not working with multi \_match](https://discuss.elastic.co/t/filter-is-not-working-with-multi-match/122505)

<div class="topic-metadata">

**Author:** [@Rajamanickam](https://discuss.elastic.co/u/Rajamanickam)\
**Replies:** 2\
**Last updated:** [March 6, 2018, 6:38am UTC](https://discuss.elastic.co/t/filter-is-not-working-with-multi-match/122505 "2018-03-06T06:38:11Z")

</div>

Filter is not working for me :frowning: even though i'm having matching record with this search term, The search result shows empty hit. Can anyone please help me out. \`GET my\_index/my\_type2/\_search { "query": { …

---

## [Issue with custom settings with my plugin in 6.x](https://discuss.elastic.co/t/issue-with-custom-settings-with-my-plugin-in-6-x/114883)

<div class="topic-metadata">

**Author:** [@andywilliams](https://discuss.elastic.co/u/andywilliams)\
**Replies:** 2\
**Last updated:** [January 11, 2018, 6:38pm UTC](https://discuss.elastic.co/t/issue-with-custom-settings-with-my-plugin-in-6-x/114883 "2018-01-11T18:38:15Z")

</div>

I'm having an issue with an elastic search plugin I'm trying to write...basically I need my own settings (like passed in as System props or defined in elasticsearch.yml)...originally I started on an earlier version of el…

---

## [Docker gelf udp to logstash-elasticsearch-kibana](https://discuss.elastic.co/t/docker-gelf-udp-to-logstash-elasticsearch-kibana/85115)

<div class="topic-metadata">

**Author:** [@justinbleach](https://discuss.elastic.co/u/justinbleach)\
**Replies:** 2\
**Last updated:** [May 9, 2017, 2:54pm UTC](https://discuss.elastic.co/t/docker-gelf-udp-to-logstash-elasticsearch-kibana/85115 "2017-05-09T14:54:11Z")

</div>

I need someone to please verify my simple config because I'm not seeing the logs in Kibana like I thought. It's very simple; here's what I have. I would think the container I run on the daemon; whatever it logs would end…

---

## [How to configurate filebeats for muliline log file](https://discuss.elastic.co/t/how-to-configurate-filebeats-for-muliline-log-file/37679)

<div class="topic-metadata">

**Author:** [@swelltt0576](https://discuss.elastic.co/u/swelltt0576)\
**Replies:** 2\
**Last updated:** [December 24, 2015, 5:54am UTC](https://discuss.elastic.co/t/how-to-configurate-filebeats-for-muliline-log-file/37679 "2015-12-24T05:54:38Z")

</div>

hi, i have a file just like this: 2015-12-21 17:44:31,922 ERROR c.e.u.e.e.E2BService. \[pool-2-thread-519\] Connect to localhost:80 \[localhost/127.0.0.1\] failed: Connection refused org.apache.http.conn.HttpHostConnectE…

---

## [Kibana でのリバースプロキシ設定](https://discuss.elastic.co/t/kibana/267627)

<div class="topic-metadata">

**Author:** [@vavan](https://discuss.elastic.co/u/vavan)\
**Replies:** 1\
**Last updated:** [March 19, 2021, 4:11am UTC](https://discuss.elastic.co/t/kibana/267627 "2021-03-19T04:11:12Z")

</div>

現在、 kibanaへのアクセスを 80ポートで行うためにリバースプロキシ設定をしようとしています。 kibanaは 7.8.１＋apache 2.4を利用しています。 ちょうど下記サイトがビンゴな内容だったので、この通りの設定にしているのですが、 ここで http://hostname/kibana にアクセスすると、Login画面にリダイレクトするのですが、

---

## [Routing bug: no routing document get doc id not found, while set specific routing param found the docs](https://discuss.elastic.co/t/routing-bug-no-routing-document-get-doc-id-not-found-while-set-specific-routing-param-found-the-docs/246714)

<div class="topic-metadata">

**Author:** [@hackerwin7](https://discuss.elastic.co/u/hackerwin7)\
**Replies:** 7\
**Last updated:** [August 28, 2020, 10:35am UTC](https://discuss.elastic.co/t/routing-bug-no-routing-document-get-doc-id-not-found-while-set-specific-routing-param-found-the-docs/246714 "2020-08-28T10:35:21Z")

</div>

version : 7.6.2 we search the docs: curl xxx.xxx.xxx.xx:9200/index-1/\_search?pretty -H'Content-type: application/json' -d' { "query": { "terms": { "field-1": \["xxxxxxx"\] } } } ' the response body l…

---

## [Data Table Metrics Custom label](https://discuss.elastic.co/t/data-table-metrics-custom-label/237731)

<div class="topic-metadata">

**Author:** [@pikonio](https://discuss.elastic.co/u/pikonio)\
**Replies:** 1\
**Last updated:** [June 19, 2020, 4:54pm UTC](https://discuss.elastic.co/t/data-table-metrics-custom-label/237731 "2020-06-19T16:54:18Z")

</div>

I am using ELK stack version 7.7.1 and my data look like that I am trying to create a Data Table Visualization that has the following information Date Range: each row shows a predefined period of time like (last year…

[Previous page](https://discuss.elastic.co/top.md?page=1176&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1178&per_page=50&period=all)
