# Top **URL:** https://discuss.elastic.co/top.md?page=1204&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1205 --- ## [Send json message only from a log file to elastic seach](https://discuss.elastic.co/t/send-json-message-only-from-a-log-file-to-elastic-seach/103791)
**Author:** [@rainbow1\_rainbow](https://discuss.elastic.co/u/rainbow1_rainbow)\ **Replies:** 6\ **Last updated:** [October 16, 2017, 6:05pm UTC](https://discuss.elastic.co/t/send-json-message-only-from-a-log-file-to-elastic-seach/103791 "2017-10-16T18:05:44Z")
Hi, Below is the output of a log file, I will need to send json message only from a log file, and add a filter geoip for the visitorip cat visitor\_cluster01server02.log \[ECOM\] \[2017-10-11 14:50:06,810\] \[ECOM\] \[DEBUG\] … --- ## [Kibana logging](https://discuss.elastic.co/t/kibana-logging/49605)
**Author:** [@tuankun](https://discuss.elastic.co/u/tuankun)\ **Replies:** 6\ **Last updated:** [May 11, 2016, 6:45am UTC](https://discuss.elastic.co/t/kibana-logging/49605 "2016-05-11T06:45:53Z")
Hi sir, env: kibana 4.5.0 elasticsearch :2.3.2 In our env. many user access the kibana to view,create,delete the visualize and dashboard, we want get the detaild action,so does kibana could log the detail inform… --- ## [Define index alias in template](https://discuss.elastic.co/t/define-index-alias-in-template/4214)
**Author:** [@thiago](https://discuss.elastic.co/u/thiago)\ **Replies:** 6\ **Last updated:** [April 11, 2011, 6:54pm UTC](https://discuss.elastic.co/t/define-index-alias-in-template/4214 "2011-04-11T18:54:56Z")
Hi there, Does anyone knows if it's possible to define an index alias at index template level? Thanks, Thiago Souza --- ## [Node cold but phase hot](https://discuss.elastic.co/t/node-cold-but-phase-hot/254826)
**Author:** [@alexfritz](https://discuss.elastic.co/u/alexfritz)\ **Replies:** 7\ **Last updated:** [November 15, 2020, 8:55pm UTC](https://discuss.elastic.co/t/node-cold-but-phase-hot/254826 "2020-11-15T20:55:20Z")
Hello I am running Version: 6.8 when I look at \_cat/shards/$index it says that the node is cold. When I look at $index/\_ilm/explain it says the index is in phase hot: { "indices": { "7a900401ea8845819a5cf5931… --- ## [How to process JBoss access log with FileBeat](https://discuss.elastic.co/t/how-to-process-jboss-access-log-with-filebeat/191234)
**Author:** [@Arioule](https://discuss.elastic.co/u/Arioule)\ **Replies:** 1\ **Last updated:** [July 19, 2019, 5:51am UTC](https://discuss.elastic.co/t/how-to-process-jboss-access-log-with-filebeat/191234 "2019-07-19T05:51:09Z")
I install FileBeat on my local computer to send data to my Kibana application hosted in AWS. However there is no Out Of Box JBOSS Access Log module for FileBeat. Is there any way for FileBeat to process JBoss Access lo… --- ## [Why all new Indexes start with 5 replicas?](https://discuss.elastic.co/t/why-all-new-indexes-start-with-5-replicas/144761)
**Author:** [@uhlhosting](https://discuss.elastic.co/u/uhlhosting)\ **Replies:** 7\ **Last updated:** [August 26, 2018, 5:46pm UTC](https://discuss.elastic.co/t/why-all-new-indexes-start-with-5-replicas/144761 "2018-08-26T17:46:19Z")
Hi, All my indexes start with 5 indexes when they are created this results in my status running yellow, since I do not run a cluster. In order to fix this, I always run manually this: PUT /logstash-2018\*/\_settings { … --- ## [\[ANNOUNCEMENT\] - Elasticsearch Beyonder 6.3 released](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-6-3-released/141010)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 1\ **Last updated:** [July 22, 2018, 2:12am UTC](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-6-3-released/141010 "2018-07-22T02:12:37Z")
The Elasticsearch Beyonder team is pleased to announce the elasticsearch-beyonder-6.3 release! Elasticsearch Beyonder Elasticsearch beyonder provides automatic index, mapping, alias or template creation when an elastic… --- ## [执行./logstash -f /etc/logstash/pipelines.yml 提示"Couldn't find any input plugin named 'log4j'的错误](https://discuss.elastic.co/t/logstash-f-etc-logstash-pipelines-yml-couldnt-find-any-input-plugin-named-log4j/133650)
**Author:** [@jayshi1985](https://discuss.elastic.co/u/jayshi1985)\ **Replies:** 1\ **Last updated:** [June 5, 2018, 2:43pm UTC](https://discuss.elastic.co/t/logstash-f-etc-logstash-pipelines-yml-couldnt-find-any-input-plugin-named-log4j/133650 "2018-06-05T14:43:02Z")
执行./logstash -f /etc/logstash/pipelines.yml ，输出中提示"Couldn't find any input plugin named 'log4j'，这个log4j是需要单独安装的插件吗，这个如何安装 \[2018-05-29T17:27:56,748\]\[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>Lo… --- ## [Using ElasticSearch for indexing forum](https://discuss.elastic.co/t/using-elasticsearch-for-indexing-forum/5212)
**Author:** [@S3ncha\_2](https://discuss.elastic.co/u/S3ncha_2)\ **Replies:** 7\ **Last updated:** [August 24, 2011, 7:51pm UTC](https://discuss.elastic.co/t/using-elasticsearch-for-indexing-forum/5212 "2011-08-24T19:51:51Z")
Hello, I would like to use ElasticSearch to index a forum database (containing about 8 million messages) and I'm not sure how to index/ query it properly. I'm planning to index a document that would represent a s… --- ## [Error 1067: The process terminates unexpectedly](https://discuss.elastic.co/t/error-1067-the-process-terminates-unexpectedly/229678)
**Author:** [@dearle](https://discuss.elastic.co/u/dearle)\ **Replies:** 0\ **Last updated:** [April 24, 2020, 2:46pm UTC](https://discuss.elastic.co/t/error-1067-the-process-terminates-unexpectedly/229678 "2020-04-24T14:46:45Z")
We have a number of servers that run Filebeat as a service and the majority of them are having the same issue upon startup: “Error 1067: The process terminates unexpectedly.” Here's the log file on first run: 2020-… --- ## [Cache - Weird behavior in function\_score](https://discuss.elastic.co/t/cache-weird-behavior-in-function-score/66002)
**Author:** [@vdefeo](https://discuss.elastic.co/u/vdefeo)\ **Replies:** 0\ **Last updated:** [November 14, 2016, 3:43pm UTC](https://discuss.elastic.co/t/cache-weird-behavior-in-function-score/66002 "2016-11-14T15:43:32Z")
Hello guys, Currently, at my work, I was testing elastic search queries - in terms of performance - through millions of documents. During the tests, I found a weird behavior of caching feature. We use - and need to… --- ## [Elastic Certified Engineer course certification vs exam certification?](https://discuss.elastic.co/t/elastic-certified-engineer-course-certification-vs-exam-certification/131377)
**Author:** [@oldcodeoberyn](https://discuss.elastic.co/u/oldcodeoberyn)\ **Replies:** 1\ **Last updated:** [May 11, 2018, 2:38am UTC](https://discuss.elastic.co/t/elastic-certified-engineer-course-certification-vs-exam-certification/131377 "2018-05-11T02:38:46Z")
It is great that elastic provide "Elastic Certification". I read the detail information for Elastic Certified Engineer and notice that after complete the course, it will have a certification for course complete. \[image\] … --- ## [ES Cloud: How to fix \[include\_in\_all\] is not allowed for indices created on or after version 6.0.0](https://discuss.elastic.co/t/es-cloud-how-to-fix-include-in-all-is-not-allowed-for-indices-created-on-or-after-version-6-0-0/107806)
**Author:** [@suchitgupta](https://discuss.elastic.co/u/suchitgupta)\ **Replies:** 1\ **Last updated:** [November 16, 2017, 10:26pm UTC](https://discuss.elastic.co/t/es-cloud-how-to-fix-include-in-all-is-not-allowed-for-indices-created-on-or-after-version-6-0-0/107806 "2017-11-16T22:26:54Z")
Hi Team, Yesterday we upgraded to ES Cloud 6.0.0. We are using docker image of Logstash 5.6.3 for pushing the logs to ES Cloud. The upgrade is not going well for us as we are getting following exceptions in our logstas… --- ## [Hitting some sort of field type mismatch after upgrading filebeat to 7.x](https://discuss.elastic.co/t/hitting-some-sort-of-field-type-mismatch-after-upgrading-filebeat-to-7-x/221951)
**Author:** [@dfinn](https://discuss.elastic.co/u/dfinn)\ **Replies:** 5\ **Last updated:** [March 6, 2020, 6:31pm UTC](https://discuss.elastic.co/t/hitting-some-sort-of-field-type-mismatch-after-upgrading-filebeat-to-7-x/221951 "2020-03-06T18:31:41Z")
Our setup looks like: filebeat -\> logstash -\> elasticsearch After upgrading some of our servers from filebeat 5.x to filebeat to 7.x we seem to be hitting some sort of field type mismatch. We use daily indexes using … --- ## [Knowledge of Facechimp with Elasticsearch](https://discuss.elastic.co/t/knowledge-of-facechimp-with-elasticsearch/52182)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 5\ **Last updated:** [June 8, 2016, 10:23am UTC](https://discuss.elastic.co/t/knowledge-of-facechimp-with-elasticsearch/52182 "2016-06-08T10:23:07Z")
I have heard that there is a tool called Facechimp which can work like Google indexing. However, I could not find any reference. Is there anyone who have any knowledge or reference on it? Thanks in advance. --- ## [Question about email notification alert](https://discuss.elastic.co/t/question-about-email-notification-alert/314044)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 8\ **Last updated:** [September 9, 2022, 2:30pm UTC](https://discuss.elastic.co/t/question-about-email-notification-alert/314044 "2022-09-09T14:30:53Z")
does elasticsearch SIEM email notification alert is free in the current version of elastic stack 8.4.1 ?? I heard that this tool is gold or somethinglike that i don't know more about it. or i will use elasticalert? --- ## [Elasticsearch after upgrade on 7.7.0 starts CircuitBreakingExceptions and nodes leaves/rejoin cluster](https://discuss.elastic.co/t/elasticsearch-after-upgrade-on-7-7-0-starts-circuitbreakingexceptions-and-nodes-leaves-rejoin-cluster/282071)
**Author:** [@Jiri\_Petak](https://discuss.elastic.co/u/Jiri_Petak)\ **Replies:** 8\ **Last updated:** [August 23, 2021, 1:45pm UTC](https://discuss.elastic.co/t/elasticsearch-after-upgrade-on-7-7-0-starts-circuitbreakingexceptions-and-nodes-leaves-rejoin-cluster/282071 "2021-08-23T13:45:41Z")
Hi, we have an issue when performing an upgrade on one of our clusters. We are upgrading elasticsearch from version 6.8.1 to 7.7.0 (we have other clusters on this version). The cluster has 3 master nodes, 5 data nodes a… --- ## [Kibana gets timed out](https://discuss.elastic.co/t/kibana-gets-timed-out/259512)
**Author:** [@john8](https://discuss.elastic.co/u/john8)\ **Replies:** 8\ **Last updated:** [December 23, 2020, 7:10pm UTC](https://discuss.elastic.co/t/kibana-gets-timed-out/259512 "2020-12-23T19:10:22Z")
I am new to the elk stack I am running kibana in a VM with NAT I am able to ping the virtual machine from the host but when I navigate to http://VMipaddress:9200 it gets timed out. Thanks in advance. --- ## [How to make Search UI show results in a new tab?](https://discuss.elastic.co/t/how-to-make-search-ui-show-results-in-a-new-tab/212577)
**Author:** [@kasibiel](https://discuss.elastic.co/u/kasibiel)\ **Replies:** 3\ **Last updated:** [January 2, 2020, 12:18pm UTC](https://discuss.elastic.co/t/how-to-make-search-ui-show-results-in-a-new-tab/212577 "2020-01-02T12:18:13Z")
Hello! I am new to React, so please excuse me if I am asking a lame question. I would like to set up the Reference UI to show search results (upon pressing the "Search" button) in a new tab or on a new page. How can I a… --- ## [Scripted fields in kibana for IP public and Private](https://discuss.elastic.co/t/scripted-fields-in-kibana-for-ip-public-and-private/89643)
**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\ **Replies:** 3\ **Last updated:** [June 20, 2017, 3:46pm UTC](https://discuss.elastic.co/t/scripted-fields-in-kibana-for-ip-public-and-private/89643 "2017-06-20T15:46:22Z")
Hi, Im using Kibana 5.4.0 I have field netflow.ipv4\_dst\_addr. I want check this is private ỏ public ip. Here is my script filed def m = ^(?:10|127|172.(?:1\[6-9\]|2\[0-9\]|3\[01\])|192.168)..\*$/.matcher(doc\['netflow.ipv4\_… --- ## [Restricting/Authorizing Kibana Dashboards To a Specific User](https://discuss.elastic.co/t/restricting-authorizing-kibana-dashboards-to-a-specific-user/86612)
**Author:** [@hfakar](https://discuss.elastic.co/u/hfakar)\ **Replies:** 3\ **Last updated:** [May 22, 2017, 11:31am UTC](https://discuss.elastic.co/t/restricting-authorizing-kibana-dashboards-to-a-specific-user/86612 "2017-05-22T11:31:08Z")
Hello There. We are building dashboards for our staff. So there are a lot of dahsboards currently. What we want to figure out is "Can we show only a spesific dashboard when a spesific user logged in?". We have tried it… --- ## [Converting MMM to MM in Logstash](https://discuss.elastic.co/t/converting-mmm-to-mm-in-logstash/58570)
**Author:** [@vvs14](https://discuss.elastic.co/u/vvs14)\ **Replies:** 3\ **Last updated:** [August 22, 2016, 12:08pm UTC](https://discuss.elastic.co/t/converting-mmm-to-mm-in-logstash/58570 "2016-08-22T12:08:47Z")
I have typical Apache logs as follows 10.240.135.132 - - \[22/Aug/2016:10:46:10 +0000\] "GET /v1/cc\_services/neutron\_controller HTTP/1.1" 200 729 "-" "python-requests/2.9.1" As the month is in MMM format, I would like … --- ## [Unknow this error](https://discuss.elastic.co/t/unknow-this-error/46632)
**Author:** [@Inbeo\_Beo](https://discuss.elastic.co/u/Inbeo_Beo)\ **Replies:** 3\ **Last updated:** [April 7, 2016, 7:54am UTC](https://discuss.elastic.co/t/unknow-this-error/46632 "2016-04-07T07:54:09Z")
I have a file logstash.conf input { beats { port =\> 5044 } } output { elasticsearch { hosts =\> "localhost:9200" index =\> "%{\[@metadata\]\[beat\]}-%{+YYYY.MM.dd}" document\_type =\> "%{\[@metadata\]\[ty… --- ## [Add / Remove nodes in cluster, good practice question](https://discuss.elastic.co/t/add-remove-nodes-in-cluster-good-practice-question/18825)
**Author:** [@Pierre\_Vincent\_Ledou](https://discuss.elastic.co/u/Pierre_Vincent_Ledou)\ **Replies:** 3\ **Last updated:** [July 24, 2014, 10:12am UTC](https://discuss.elastic.co/t/add-remove-nodes-in-cluster-good-practice-question/18825 "2014-07-24T10:12:06Z")
Hi, We have a little cluster of 2 nodes, hosting 4 indexes of about 1.5M documents each, replicated on both nodes. Those 2 nodes are on VPS that are stored on the same physical host. As it represents a single p… --- ## [Transferring Data From Firebase To Elasticsearch](https://discuss.elastic.co/t/transferring-data-from-firebase-to-elasticsearch/96826)
**Author:** [@troy](https://discuss.elastic.co/u/troy)\ **Replies:** 0\ **Last updated:** [August 11, 2017, 9:59pm UTC](https://discuss.elastic.co/t/transferring-data-from-firebase-to-elasticsearch/96826 "2017-08-11T21:59:07Z")
I need to get data from a Firebase database into Elasticsearch. I’ve considered using Firebase cloud functions, Flashlight and Google Pub/Sub. The big issue that I see with cloud functions and flashlight is reliability. … --- ## [Logstash elasticsearch output, expand variables in data stream parameters](https://discuss.elastic.co/t/logstash-elasticsearch-output-expand-variables-in-data-stream-parameters/275276)
**Author:** [@ebourlon](https://discuss.elastic.co/u/ebourlon)\ **Replies:** 2\ **Last updated:** [June 9, 2021, 6:13am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-output-expand-variables-in-data-stream-parameters/275276 "2021-06-09T06:13:01Z")
Hello, I am using logstash 7.13.1 that has support for datastreams in the elasticsearch output. As far as I looked at it is not possible to specify a variable in one of the datastream related parameter like below: e… --- ## [How to get only one field from elasticsearch in the output](https://discuss.elastic.co/t/how-to-get-only-one-field-from-elasticsearch-in-the-output/261379)
**Author:** [@devil\_hacks](https://discuss.elastic.co/u/devil_hacks)\ **Replies:** 2\ **Last updated:** [January 30, 2021, 6:18pm UTC](https://discuss.elastic.co/t/how-to-get-only-one-field-from-elasticsearch-in-the-output/261379 "2021-01-30T18:18:41Z")
I am having my log data pushed into elasticssearch looks like given below: { "took": 5, "timed\_out": false, "\_shards": { "total": 1, "successful": 1, "skipped": 0, "failed": 0 }… --- ## [Service Logstash with exit code 1 when restarting](https://discuss.elastic.co/t/service-logstash-with-exit-code-1-when-restarting/194944)
**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\ **Replies:** 2\ **Last updated:** [August 13, 2019, 1:17pm UTC](https://discuss.elastic.co/t/service-logstash-with-exit-code-1-when-restarting/194944 "2019-08-13T13:17:56Z")
hi community I need advise from community about logstash I create logstash as a service using NSSM in Windows Server 2016. Then I usually use(start/stop/restart) it via services panel. Now I can not restart anymore. … --- ## [Do I need to install the plugin on the client node?](https://discuss.elastic.co/t/do-i-need-to-install-the-plugin-on-the-client-node/85773)
**Author:** [@breezzz](https://discuss.elastic.co/u/breezzz)\ **Replies:** 2\ **Last updated:** [May 15, 2017, 1:58pm UTC](https://discuss.elastic.co/t/do-i-need-to-install-the-plugin-on-the-client-node/85773 "2017-05-15T13:58:41Z")
Good day! This plugin can be installed using the plugin manager: sudo bin/elasticsearch-plugin install repository-s3 The plugin must be installed on every node in the cluster, and each node must be restarted after … --- ## [Are the MySQL responses captured by Packetbeat?](https://discuss.elastic.co/t/are-the-mysql-responses-captured-by-packetbeat/47408)
**Author:** [@srpatatas](https://discuss.elastic.co/u/srpatatas)\ **Replies:** 2\ **Last updated:** [April 15, 2016, 3:25pm UTC](https://discuss.elastic.co/t/are-the-mysql-responses-captured-by-packetbeat/47408 "2016-04-15T15:25:43Z")
Hi, I didn't find any mentions on the documentation or forum, is packetbeat able to capture the response values from the mysql queries? For example if I have a "SELECT x from table\_y where id='123'" I know packetbeat wil… --- ## [Ability to create multiple datastreams with Elastic integrations?](https://discuss.elastic.co/t/ability-to-create-multiple-datastreams-with-elastic-integrations/343325)
**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\ **Replies:** 4\ **Last updated:** [September 21, 2023, 2:42pm UTC](https://discuss.elastic.co/t/ability-to-create-multiple-datastreams-with-elastic-integrations/343325 "2023-09-21T14:42:32Z")
Hello everyone, I'm currently exploring Elastic integrations and have a question regarding the creation of multiple datastreams. I noticed that in the integration example with Cisco ISE, there are about ten Ingest Pipel… --- ## [Can't sort by column/field in Kabana](https://discuss.elastic.co/t/cant-sort-by-column-field-in-kabana/329929)
**Author:** [@JackieLaFrite](https://discuss.elastic.co/u/JackieLaFrite)\ **Replies:** 4\ **Last updated:** [April 17, 2023, 8:31am UTC](https://discuss.elastic.co/t/cant-sort-by-column-field-in-kabana/329929 "2023-04-17T08:31:29Z")
Hello, I'm currently implementing ELK on my environment to retrieve the logs and I got a problem. In the discover tab, I can't sort a column. I can only sort by the @Timestamp. I would like to be able to sort by the… --- ## [Update to 8.2.2 showing error in keystore-init](https://discuss.elastic.co/t/update-to-8-2-2-showing-error-in-keystore-init/307076)
**Author:** [@Dxnium](https://discuss.elastic.co/u/Dxnium)\ **Replies:** 4\ **Last updated:** [June 24, 2022, 5:07pm UTC](https://discuss.elastic.co/t/update-to-8-2-2-showing-error-in-keystore-init/307076 "2022-06-24T17:07:09Z")
Currently testing to update elastic from 8.1.3 to 8.2.2, but when i tried to deploy with the latest version I'm getting this error. Also getting the same error with version 8.2.0 I'm using the same cofiguration from 8.… --- ## [Issues ingesting log files with fresh installation](https://discuss.elastic.co/t/issues-ingesting-log-files-with-fresh-installation/233564)
**Author:** [@ozonshak](https://discuss.elastic.co/u/ozonshak)\ **Replies:** 4\ **Last updated:** [June 5, 2020, 12:33pm UTC](https://discuss.elastic.co/t/issues-ingesting-log-files-with-fresh-installation/233564 "2020-06-05T12:33:59Z")
Hello. I'm hoping someone can please help me with an indexing issue that i'm having. I'm working with a fresh setup of ElasticSearch and Kibana. I have everything setup, Kibana loads, I can log in with security, and t… --- ## [Logstash not reading data from text file in windows](https://discuss.elastic.co/t/logstash-not-reading-data-from-text-file-in-windows/213013)
**Author:** [@sayyadsays](https://discuss.elastic.co/u/sayyadsays)\ **Replies:** 4\ **Last updated:** [December 26, 2019, 2:04pm UTC](https://discuss.elastic.co/t/logstash-not-reading-data-from-text-file-in-windows/213013 "2019-12-26T14:04:08Z")
Hi when i tried with stdin{} it works fine. but reading from file not getting any data in elasticsearch in windows. Please find the below conf details. Conf file: input{ # stdin{} file{ type =\>"syslog" path =\> \["… --- ## [Import index saved without snapshot](https://discuss.elastic.co/t/import-index-saved-without-snapshot/49931)
**Author:** [@Juan\_Andres\_Ramirez](https://discuss.elastic.co/u/Juan_Andres_Ramirez)\ **Replies:** 4\ **Last updated:** [May 13, 2016, 4:01pm UTC](https://discuss.elastic.co/t/import-index-saved-without-snapshot/49931 "2016-05-13T16:01:52Z")
Hello, Before changed my ELK version to v.2.0 I saved some index manually, just copy the data directory and paste in other server. I didn't have copy with snapshot system, in these times I was very newbie in ELK,… --- ## [Kibana how to hide panels and display them after filter](https://discuss.elastic.co/t/kibana-how-to-hide-panels-and-display-them-after-filter/295945)
**Author:** [@fionachan](https://discuss.elastic.co/u/fionachan)\ **Replies:** 6\ **Last updated:** [February 2, 2022, 4:16pm UTC](https://discuss.elastic.co/t/kibana-how-to-hide-panels-and-display-them-after-filter/295945 "2022-02-02T16:16:21Z")
Hi, I would like to ask a question about Kibana. I would like to hide some panels at the beginning and when I filter, the panels that are hidden show. How can I come true to it? Thanks. --- ## [Elastic Agent not retrieving kube-state-metrics](https://discuss.elastic.co/t/elastic-agent-not-retrieving-kube-state-metrics/299563)
**Author:** [@mkstephenson](https://discuss.elastic.co/u/mkstephenson)\ **Replies:** 1\ **Last updated:** [March 14, 2022, 10:13pm UTC](https://discuss.elastic.co/t/elastic-agent-not-retrieving-kube-state-metrics/299563 "2022-03-14T22:13:08Z")
I am attempting to set up an Elastic stack with ECK on k3s and getting it to monitor the k3s cluster itself using kube-state-metrics. I installed the ECK operator using the official helm chart, same for the kube-state-me… --- ## [Elasticsearch crashing with 'no space available', while disk still has 75% free storage](https://discuss.elastic.co/t/elasticsearch-crashing-with-no-space-available-while-disk-still-has-75-free-storage/269094)
**Author:** [@Kristijan](https://discuss.elastic.co/u/Kristijan)\ **Replies:** 1\ **Last updated:** [April 2, 2021, 11:10am UTC](https://discuss.elastic.co/t/elasticsearch-crashing-with-no-space-available-while-disk-still-has-75-free-storage/269094 "2021-04-02T11:10:08Z")
The elasticsearch(v5.6.12) is deployed as a single pod in a Kubernetes cluster with attached storage through a PVC. Once every couple of months it will go into a crash loop state and complain that there is no storage le… --- ## [Filebeat docker container is not connecting to logstash docker container](https://discuss.elastic.co/t/filebeat-docker-container-is-not-connecting-to-logstash-docker-container/195192)
**Author:** [@douy](https://discuss.elastic.co/u/douy)\ **Replies:** 1\ **Last updated:** [August 15, 2019, 10:31am UTC](https://discuss.elastic.co/t/filebeat-docker-container-is-not-connecting-to-logstash-docker-container/195192 "2019-08-15T10:31:41Z")
Hi, I've created custom docker images based on ubuntu for elasticsearch, kibana, logstash and filebeat and I'm trying to connect them to each other. I've started out with elasticsearch, which runs perfectly well and is … --- ## [Upgrade with docker-compose fails to start](https://discuss.elastic.co/t/upgrade-with-docker-compose-fails-to-start/139797)
**Author:** [@alexvollmer](https://discuss.elastic.co/u/alexvollmer)\ **Replies:** 1\ **Last updated:** [July 17, 2018, 8:43pm UTC](https://discuss.elastic.co/t/upgrade-with-docker-compose-fails-to-start/139797 "2018-07-17T20:43:32Z")
In our local development environments we use docker-compose to run Elasticsearch and Kibana. We're getting ready to upgrade from 5.6 to 6.3, so my starting point was updating our docker-compose.yml file to point to the n… --- ## [Sql\_last\_value with tracking column](https://discuss.elastic.co/t/sql-last-value-with-tracking-column/105639)
**Author:** [@mkarmi](https://discuss.elastic.co/u/mkarmi)\ **Replies:** 1\ **Last updated:** [October 31, 2017, 6:16am UTC](https://discuss.elastic.co/t/sql-last-value-with-tracking-column/105639 "2017-10-31T06:16:12Z")
I'm little confused with the "clean\_run" option. from documentation it says "If clean\_run is set to true, this value will be ignored and sql\_last\_value will be set to Jan 1, 1970, or 0 if use\_column\_value is true, as if … --- ## [Kibana and System time mismatch](https://discuss.elastic.co/t/kibana-and-system-time-mismatch/103352)
**Author:** [@Rodolfo\_Albuquerque](https://discuss.elastic.co/u/Rodolfo_Albuquerque)\ **Replies:** 1\ **Last updated:** [October 10, 2017, 2:12pm UTC](https://discuss.elastic.co/t/kibana-and-system-time-mismatch/103352 "2017-10-10T14:12:46Z")
Hello, I'm just starting to develop a system where I'll will have a few sensors sending data to elasticsearch+kibana. The problem I'm facing right now is since Kibana time is off my data timestamps will always have an of… --- ## [Word\_delimiter Filter et position](https://discuss.elastic.co/t/word-delimiter-filter-et-position/89071)
**Author:** [@maryline](https://discuss.elastic.co/u/maryline)\ **Replies:** 1\ **Last updated:** [June 30, 2017, 2:47pm UTC](https://discuss.elastic.co/t/word-delimiter-filter-et-position/89071 "2017-06-30T14:47:11Z")
Bonjour, Je suis passe de ES. 1.7 à la version 5.4.1 et J'ai un "probleme" avec un word\_delimiter filter. Est il possible de ne pas tenir compte de la position des token. Je vaux pouvoir faire des recherche sur des noms … --- ## [Groovy script in Elastic Stack 5.0 error: action request validation exception](https://discuss.elastic.co/t/groovy-script-in-elastic-stack-5-0-error-action-request-validation-exception/65885)
**Author:** [@maziyar](https://discuss.elastic.co/u/maziyar)\ **Replies:** 1\ **Last updated:** [November 12, 2016, 8:17pm UTC](https://discuss.elastic.co/t/groovy-script-in-elastic-stack-5-0-error-action-request-validation-exception/65885 "2016-11-12T20:17:57Z")
Hi, After upgrading my cluster from 2.4 to 5.0 I am having trouble to get my script files working. Here is what my script look like in /etc/elasticsearch/scripts/update\_keywords.groovy: if (!ctx.\_source.containsKey("… --- ## [Logstash events count and get alert](https://discuss.elastic.co/t/logstash-events-count-and-get-alert/264850)
**Author:** [@bdn](https://discuss.elastic.co/u/bdn)\ **Replies:** 2\ **Last updated:** [February 19, 2021, 6:16pm UTC](https://discuss.elastic.co/t/logstash-events-count-and-get-alert/264850 "2021-02-19T18:16:51Z")
I want to count events in Logstash and get me alert if events hit more than 10 times within 2mins. E.g. I have a log like below. Feb 19 15:22:01 DEVICE-01 Device is online. Feb 19 15:22:01 DEVICE-02 Device is online. F… --- ## [getDayOfWeek() return type change in 7.0](https://discuss.elastic.co/t/getdayofweek-return-type-change-in-7-0/206494)
**Author:** [@bruce289](https://discuss.elastic.co/u/bruce289)\ **Replies:** 2\ **Last updated:** [November 5, 2019, 8:16pm UTC](https://discuss.elastic.co/t/getdayofweek-return-type-change-in-7-0/206494 "2019-11-05T20:16:18Z")
Hi, We are seeing the following deprecation log messages in our 6.8 cluster: The return type of \[getDayOfWeek()\] will change to an enum in 7.0. Use getDayOfWeekEnum().getValue(). However, having upgraded our test clus… --- ## [How to write logical or(||) in logstash](https://discuss.elastic.co/t/how-to-write-logical-or-in-logstash/188794)
**Author:** [@naveenrt23](https://discuss.elastic.co/u/naveenrt23)\ **Replies:** 2\ **Last updated:** [July 3, 2019, 6:57pm UTC](https://discuss.elastic.co/t/how-to-write-logical-or-in-logstash/188794 "2019-07-03T18:57:55Z")
Hello, How can I write a logical or operator for two values? I've tried if \[type\] == "test-request" || \[type\] == "test1-request" but this gives me a syntax error. I want it to work on how a logical OR operator works.… --- ## [Error Install Kibana with Elastic Search 502](https://discuss.elastic.co/t/error-install-kibana-with-elastic-search-502/73944)
**Author:** [@dduffy](https://discuss.elastic.co/u/dduffy)\ **Replies:** 2\ **Last updated:** [February 4, 2017, 2:33pm UTC](https://discuss.elastic.co/t/error-install-kibana-with-elastic-search-502/73944 "2017-02-04T14:33:07Z")
Hi there, very new to Kibana, sorry if this is a silly question: but the error message is a contradiction ? This version of Kibana requires Elasticsearch v5.2.0 on all nodes. I found the following incompatible nodes in… --- ## [Can file beat ship logs over https?](https://discuss.elastic.co/t/can-file-beat-ship-logs-over-https/35531)
**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\ **Replies:** 2\ **Last updated:** [November 25, 2015, 9:39am UTC](https://discuss.elastic.co/t/can-file-beat-ship-logs-over-https/35531 "2015-11-25T09:39:30Z")
Can it communicate over https or requires binary protocol? and what are the privileges it requires? [Previous page](https://discuss.elastic.co/top.md?page=1203&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1205&per_page=50&period=all)