# Top **URL:** https://discuss.elastic.co/top.md?page=1254&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1255 --- ## [Docker-compose Lostash "Attempted to resurrect connection to dead ES instance, but got an error"](https://discuss.elastic.co/t/docker-compose-lostash-attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error/142180)
**Author:** [@Ragnar](https://discuss.elastic.co/u/Ragnar)\ **Replies:** 1\ **Last updated:** [July 30, 2018, 3:46pm UTC](https://discuss.elastic.co/t/docker-compose-lostash-attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error/142180 "2018-07-30T15:46:38Z")
Wanting to build my Elastic stack from docker-compose. Here my file. version: '3.7' services: elasticsearch1: image: docker.elastic.co/elasticsearch/elasticsearch:6.3.2 container\_name: Elasticsearch1 envi… --- ## [Filebeats : failed to start found a tab character](https://discuss.elastic.co/t/filebeats-failed-to-start-found-a-tab-character/119461)
**Author:** [@Pierre\_What\_s\_Up\_Sca](https://discuss.elastic.co/u/Pierre_What_s_Up_Sca)\ **Replies:** 1\ **Last updated:** [February 12, 2018, 1:07pm UTC](https://discuss.elastic.co/t/filebeats-failed-to-start-found-a-tab-character/119461 "2018-02-12T13:07:35Z")
Hi ! When I try to launch filebeat I have this error message : \< Feb 12 11:49:40 localhost.localdomain systemd\[1\]: Unit filebeat.service entered failed state. Feb 12 11:49:40 localhost.localdomain systemd\[1\]: filebeat.… --- ## [How to query only numeric values in a String field?](https://discuss.elastic.co/t/how-to-query-only-numeric-values-in-a-string-field/115066)
**Author:** [@cab93](https://discuss.elastic.co/u/cab93)\ **Replies:** 1\ **Last updated:** [January 11, 2018, 3:15pm UTC](https://discuss.elastic.co/t/how-to-query-only-numeric-values-in-a-string-field/115066 "2018-01-11T15:15:54Z")
Hi there, I'm looking for a way to filter my query results. \[image\] I need to exclude all those results that are not only numbers. Is there a way to this in "post production"? I'm using elastic as a database and cann… --- ## [Marvel dashboard is empty!](https://discuss.elastic.co/t/marvel-dashboard-is-empty/23808)
**Author:** [@gaurhari\_dass](https://discuss.elastic.co/u/gaurhari_dass)\ **Replies:** 1\ **Last updated:** [June 17, 2015, 8:01am UTC](https://discuss.elastic.co/t/marvel-dashboard-is-empty/23808 "2015-06-17T08:01:07Z")
I have bought subscription for 5 nodes ,i have installed on one of nodes and restarted that node but its shows nothing elastic search version is 1.6.0. I have restarted using sudo service elasticsearch restart. ple… --- ## [Connection issues between Elastic Agent (Filebeat) and Logstash: connection reset by peer](https://discuss.elastic.co/t/connection-issues-between-elastic-agent-filebeat-and-logstash-connection-reset-by-peer/371536)
**Author:** [@philippsautter](https://discuss.elastic.co/u/philippsautter)\ **Replies:** 4\ **Last updated:** [December 9, 2024, 8:42pm UTC](https://discuss.elastic.co/t/connection-issues-between-elastic-agent-filebeat-and-logstash-connection-reset-by-peer/371536 "2024-12-09T20:42:16Z")
Hello everyone, I am currently facing an issue where I keep encountering errors in the connection between the Elastic Agents (Filebeat) and Logstash. There are always two related errors, and the target is always Logsta… --- ## [Impossible to overwrite "host.ip" when using Custom Logs integration](https://discuss.elastic.co/t/impossible-to-overwrite-host-ip-when-using-custom-logs-integration/298348)
**Author:** [@Twyzz](https://discuss.elastic.co/u/Twyzz)\ **Replies:** 4\ **Last updated:** [February 28, 2022, 3:25pm UTC](https://discuss.elastic.co/t/impossible-to-overwrite-host-ip-when-using-custom-logs-integration/298348 "2022-02-28T15:25:01Z")
Hi, I'm trying to get the correct IP for the host.ip property in my logs documents, to be able to utilize all the built in links in kibana but unfortunately I cannot get it to work. The setup is quite easy. I'm running… --- ## [Node stats null\_pointer\_exception error](https://discuss.elastic.co/t/node-stats-null-pointer-exception-error/148739)
**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\ **Replies:** 4\ **Last updated:** [September 18, 2018, 12:44pm UTC](https://discuss.elastic.co/t/node-stats-null-pointer-exception-error/148739 "2018-09-18T12:44:31Z")
I am trying to gen nodes stat, because I could not see any of them in Cerebro statistics. I receive this error. curl -s -X GET "localhost:9201/\_cat/nodes?v" | jq . { "error": { "root\_cause": \[ { "typ… --- ## [Best way to model a query on 10K ORs?](https://discuss.elastic.co/t/best-way-to-model-a-query-on-10k-ors/37941)
**Author:** [@aliostad](https://discuss.elastic.co/u/aliostad)\ **Replies:** 4\ **Last updated:** [December 24, 2015, 3:28pm UTC](https://discuss.elastic.co/t/best-way-to-model-a-query-on-10k-ors/37941 "2015-12-24T15:28:18Z")
I know this sounds like a strange question but I am looking for the sanest way to achieve this: I have a list of ~10K ProductIds coming from a ML engine and I need to create filters and facets on the top of this list, … --- ## [Tribenode masternotdiscoveredexception](https://discuss.elastic.co/t/tribenode-masternotdiscoveredexception/33166)
**Author:** [@bennett](https://discuss.elastic.co/u/bennett)\ **Replies:** 4\ **Last updated:** [October 28, 2015, 7:14pm UTC](https://discuss.elastic.co/t/tribenode-masternotdiscoveredexception/33166 "2015-10-28T19:14:30Z")
Hi, I'm trying to set up a tribe node to look at clusters in different datacenters. When I hook up kibana and try to add visualization or a dashboard i keep hitting: Kibana: MasterNotDiscoveredException\[waited for … --- ## [Number of shards in one node of cluster is stuck](https://discuss.elastic.co/t/number-of-shards-in-one-node-of-cluster-is-stuck/29569)
**Author:** [@olegbragin](https://discuss.elastic.co/u/olegbragin)\ **Replies:** 4\ **Last updated:** [September 21, 2015, 10:24pm UTC](https://discuss.elastic.co/t/number-of-shards-in-one-node-of-cluster-is-stuck/29569 "2015-09-21T22:24:33Z")
Hello, I have a cluster with 2 nodes. Each node has 2248 (1124 \* 2) shards. When I check cluster health using head plugin on one server (node) I see that indexing is going on and number of shards is increasing. On anot… --- ## [AWS-Cloud plugin for ES 5 alpha 1](https://discuss.elastic.co/t/aws-cloud-plugin-for-es-5-alpha-1/50871)
**Author:** [@anks](https://discuss.elastic.co/u/anks)\ **Replies:** 2\ **Last updated:** [May 25, 2016, 3:47am UTC](https://discuss.elastic.co/t/aws-cloud-plugin-for-es-5-alpha-1/50871 "2016-05-25T03:47:21Z")
Hi I am using ES 5 alpha1 on AWS EC2. I am trying forming cluster but didn't way to install aws-cloud plugin. Can you please suggest to install AWS-Cloud plugin with ES 5 alpha1 or some other alternate for running a… --- ## [Migrating Saved Objects from Kibana 5.5 to 8.1](https://discuss.elastic.co/t/migrating-saved-objects-from-kibana-5-5-to-8-1/344117)
**Author:** [@Divyanshu\_Raj](https://discuss.elastic.co/u/Divyanshu_Raj)\ **Replies:** 6\ **Last updated:** [October 4, 2023, 11:51am UTC](https://discuss.elastic.co/t/migrating-saved-objects-from-kibana-5-5-to-8-1/344117 "2023-10-04T11:51:40Z")
Hello Community, we are trying to export our saved objects ( visualizations, dashboards ..) from Kibana 5.5 to Kibana 8.1. The challenge is that exported saved objects from Kibana are in .json format and the expected f… --- ## [Elastic search intervals query](https://discuss.elastic.co/t/elastic-search-intervals-query/211833)
**Author:** [@vamsi\_yadav](https://discuss.elastic.co/u/vamsi_yadav)\ **Replies:** 6\ **Last updated:** [December 14, 2019, 12:38pm UTC](https://discuss.elastic.co/t/elastic-search-intervals-query/211833 "2019-12-14T12:38:46Z")
TEXT : A simple sentence contains only one independent clause I want the query to return proximity search. Simple w/3 one -\> I need to return the above text documents. --- ## [Need advice on AWS logs indexing using logstash](https://discuss.elastic.co/t/need-advice-on-aws-logs-indexing-using-logstash/38667)
**Author:** [@subbu.nv](https://discuss.elastic.co/u/subbu.nv)\ **Replies:** 6\ **Last updated:** [January 8, 2016, 1:35am UTC](https://discuss.elastic.co/t/need-advice-on-aws-logs-indexing-using-logstash/38667 "2016-01-08T01:35:44Z")
i have elastic search + logstash installed on one server. i am trying to index the logs from AWS and push into elastic search. can any one help with the format i have to use in logstash conf file input. --- ## [Question de mapping (je débute)](https://discuss.elastic.co/t/question-de-mapping-je-debute/285592)
**Author:** [@BombeurJean](https://discuss.elastic.co/u/BombeurJean)\ **Replies:** 7\ **Last updated:** [October 1, 2021, 9:54am UTC](https://discuss.elastic.co/t/question-de-mapping-je-debute/285592 "2021-10-01T09:54:50Z")
Bonjour a tous , ma question est la suivante : je ne vois pas quel token ou mapping utilisé pour remédier a ma problématique : dans mon moteur de recherche local pour pdf (avec le plug in ingest attachment). lorsque… --- ## [How to make EUI part of Kibana packages?](https://discuss.elastic.co/t/how-to-make-eui-part-of-kibana-packages/273569)
**Author:** [@danburi](https://discuss.elastic.co/u/danburi)\ **Replies:** 7\ **Last updated:** [May 26, 2021, 5:08pm UTC](https://discuss.elastic.co/t/how-to-make-eui-part-of-kibana-packages/273569 "2021-05-26T17:08:14Z")
Hello, I'm running a development version of Kibana 7.10.2. Currently, I have a fork of EUI 29.3.2, with many custom components (eui/packages/) and themes (eui/src/themes). Ideally, I want to submodule this fork in kiba… --- ## [Kubernetes.statefulset.generation.\* what are these fields meaning?](https://discuss.elastic.co/t/kubernetes-statefulset-generation-what-are-these-fields-meaning/195362)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [August 16, 2019, 9:59am UTC](https://discuss.elastic.co/t/kubernetes-statefulset-generation-what-are-these-fields-meaning/195362 "2019-08-16T09:59:24Z")
Hi, the two exported fields: kubernetes.statefulset.generation.desired kubernetes.statefulset.generation.observed What do they mean in detail? I understand the replicas.desired and observed, but what is generation? … --- ## [How to use filter using constant\_score with another query bool](https://discuss.elastic.co/t/how-to-use-filter-using-constant-score-with-another-query-bool/49856)
**Author:** [@Bakhtiyor\_Homidov](https://discuss.elastic.co/u/Bakhtiyor_Homidov)\ **Replies:** 1\ **Last updated:** [March 16, 2017, 6:39pm UTC](https://discuss.elastic.co/t/how-to-use-filter-using-constant-score-with-another-query-bool/49856 "2017-03-16T18:39:16Z")
for example i've the query, and want to re-write the query using constant\_score for filter. { "query": { "bool": { "must": \[{ "term": { "slug": "awe2ome" } }\], "must\_not": \[{ "term": { "slug": "not\_a… --- ## [Machine Learning - Index migration in progress](https://discuss.elastic.co/t/machine-learning-index-migration-in-progress/255837)
**Author:** [@Jorge7](https://discuss.elastic.co/u/Jorge7)\ **Replies:** 2\ **Last updated:** [November 18, 2020, 2:09pm UTC](https://discuss.elastic.co/t/machine-learning-index-migration-in-progress/255837 "2020-11-18T14:09:16Z")
Hi all, I upgraded my elk license to Trial in order to work with the Machine Learning feature. But since 2 days ago, it only appears this message: "Index migration in progress Indices related to Machine Learning are c… --- ## [Filebeats - Sending JSON output to Compacted Kafka Topic](https://discuss.elastic.co/t/filebeats-sending-json-output-to-compacted-kafka-topic/188658)
**Author:** [@vinshas1](https://discuss.elastic.co/u/vinshas1)\ **Replies:** 2\ **Last updated:** [July 5, 2019, 7:33am UTC](https://discuss.elastic.co/t/filebeats-sending-json-output-to-compacted-kafka-topic/188658 "2019-07-05T07:33:50Z")
I am able to send JSON output to Kafka non-compacted Topic but unable to send it to compacted topic. I know we need a keyed message to send it to compacted topic and I tried with 'key' in output.kafka and also tried json… --- ## [Does the score calculation admit a maximum?](https://discuss.elastic.co/t/does-the-score-calculation-admit-a-maximum/163926)
**Author:** [@a.gabriel](https://discuss.elastic.co/u/a.gabriel)\ **Replies:** 2\ **Last updated:** [January 14, 2019, 8:08am UTC](https://discuss.elastic.co/t/does-the-score-calculation-admit-a-maximum/163926 "2019-01-14T08:08:44Z")
Hello the community, I have an index of resumes and I want to compare it to a job offer as query. As long as I understand the tf idf that is behind the scoring does not have maximum, isn't it? When I process the query,… --- ## [Logstash errors after SSL setup](https://discuss.elastic.co/t/logstash-errors-after-ssl-setup/151690)
**Author:** [@lcui\_dxc](https://discuss.elastic.co/u/lcui_dxc)\ **Replies:** 2\ **Last updated:** [October 11, 2018, 5:01am UTC](https://discuss.elastic.co/t/logstash-errors-after-ssl-setup/151690 "2018-10-11T05:01:38Z")
Hello there: I set up the SSL /TLS on logstash/elasticsearch and kibnana as indicated above. Everything looks fine, all are up and running, and I can see the beats(file/metric/etc...) are sending data on Kibana (Discov… --- ## [Errors on gradle build using elasticsearch.esplugin](https://discuss.elastic.co/t/errors-on-gradle-build-using-elasticsearch-esplugin/92393)
**Author:** [@Itamar\_Syn\_Hershko](https://discuss.elastic.co/u/Itamar_Syn_Hershko)\ **Replies:** 2\ **Last updated:** [July 19, 2017, 7:01pm UTC](https://discuss.elastic.co/t/errors-on-gradle-build-using-elasticsearch-esplugin/92393 "2017-07-19T19:01:29Z")
I'm working on moving a plugin to use gradle the the elasticsearch.esplugin gradle plugin, and have a few issues while getting the import done. Running tests via AnalysisFactoryTestCase fails with the following: \> … --- ## [Logstash - Comparing two fields](https://discuss.elastic.co/t/logstash-comparing-two-fields/82113)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 2\ **Last updated:** [April 12, 2017, 8:24am UTC](https://discuss.elastic.co/t/logstash-comparing-two-fields/82113 "2017-04-12T08:24:53Z")
Hi All, I was trying to compare two fields of our windows events by creating a mutate filter ,but i couldn't get any results in elasticsearch, i checked the configuration ,it seems to be Ok.Could anyone help me on th… --- ## [Problem with logstash handling the mysql-slow.log](https://discuss.elastic.co/t/problem-with-logstash-handling-the-mysql-slow-log/69531)
**Author:** [@houfan](https://discuss.elastic.co/u/houfan)\ **Replies:** 2\ **Last updated:** [December 20, 2016, 4:21pm UTC](https://discuss.elastic.co/t/problem-with-logstash-handling-the-mysql-slow-log/69531 "2016-12-20T16:21:26Z")
this is the filebeat.yml: filebeat: prospectors: - paths: - /usr/local/nginx/logs/mysql-slow.log input\_type: log document\_type: mysql-slow multiline: pattern: ^# User@Host negate: true match: … --- ## [Processing logs from Jersey JAX-RS](https://discuss.elastic.co/t/processing-logs-from-jersey-jax-rs/35576)
**Author:** [@borillo](https://discuss.elastic.co/u/borillo)\ **Replies:** 2\ **Last updated:** [December 22, 2015, 11:55am UTC](https://discuss.elastic.co/t/processing-logs-from-jersey-jax-rs/35576 "2015-12-22T11:55:04Z")
Hi guys, First of all, thanks a lot for such an amazing work!! In our webapps, jersey is generating two entries in the log file, one for the HTTP request and one for the reponse. The problem is that this entries are … --- ## [Index Template - renaming the index](https://discuss.elastic.co/t/index-template-renaming-the-index/29132)
**Author:** [@oranciog](https://discuss.elastic.co/u/oranciog)\ **Replies:** 2\ **Last updated:** [September 14, 2015, 10:46am UTC](https://discuss.elastic.co/t/index-template-renaming-the-index/29132 "2015-09-14T10:46:02Z")
Hello, Is there any way to auto-rename the index, when someone creates the index? For example, when I want to create the index "test", in ES should be created the index "test-timestamp", with alias "test". I saw … --- ## [Seconds since Epoch and 'numeric\_resolution'](https://discuss.elastic.co/t/seconds-since-epoch-and-numeric-resolution/789)
**Author:** [@Roy\_Russo](https://discuss.elastic.co/u/Roy_Russo)\ **Replies:** 2\ **Last updated:** [May 17, 2015, 9:40am UTC](https://discuss.elastic.co/t/seconds-since-epoch-and-numeric-resolution/789 "2015-05-17T09:40:26Z")
'numeric\_resolution' fix, seen here : was supposed to allow date\_time to accept "seconds since epoch" style timestamps and treat them as date objects. Looking through the test case, I expected this to work with the b… --- ## [Elastic Defend Policy response failure](https://discuss.elastic.co/t/elastic-defend-policy-response-failure/332933)
**Author:** [@xqaiviwjxzw](https://discuss.elastic.co/u/xqaiviwjxzw)\ **Replies:** 3\ **Last updated:** [May 18, 2023, 5:00pm UTC](https://discuss.elastic.co/t/elastic-defend-policy-response-failure/332933 "2023-05-18T17:00:39Z")
Hello，The following error is displayed in fleet, what is the reason? How to solve it? Policy response failure The Endpoint did not apply the Policy correctly. Expand the Policy response above for more details. --- ## [Build error when using \`kibanaReact\` and \`kibanaUtils\` in kibana 3rd party plugin](https://discuss.elastic.co/t/build-error-when-using-kibanareact-and-kibanautils-in-kibana-3rd-party-plugin/261748)
**Author:** [@Eric\_wei](https://discuss.elastic.co/u/Eric_wei)\ **Replies:** 8\ **Last updated:** [January 21, 2021, 9:46am UTC](https://discuss.elastic.co/t/build-error-when-using-kibanareact-and-kibanautils-in-kibana-3rd-party-plugin/261748 "2021-01-21T09:46:30Z")
Hello, I'm trying to use kibanaReact and kibanaUtils in my kibana plugin. These 2 plugins added as requiredBundles in the kibana.json, ... "requiredBundles": \["kibanaUtils", "kibanaReact"\] ... But error keep happens … --- ## [Create histogram with group by count (binned data)](https://discuss.elastic.co/t/create-histogram-with-group-by-count-binned-data/250512)
**Author:** [@Pond](https://discuss.elastic.co/u/Pond)\ **Replies:** 8\ **Last updated:** [October 2, 2020, 5:57pm UTC](https://discuss.elastic.co/t/create-histogram-with-group-by-count-binned-data/250512 "2020-10-02T17:57:26Z")
Hi, I have devices users are using: {"userID":"1", "deviceID": "11"} {"userID":"1", "deviceID": "12"} {"userID":"1", "deviceID": "13"} {"userID":"2", "deviceID": "21"} {"userID":"2", "deviceID": "22"} {"userID":"3… --- ## [QUESTION : Disable access to Kibana Console when using ELK inside a webapp](https://discuss.elastic.co/t/question-disable-access-to-kibana-console-when-using-elk-inside-a-webapp/236938)
**Author:** [@tenet\_testuser1](https://discuss.elastic.co/u/tenet_testuser1)\ **Replies:** 8\ **Last updated:** [June 24, 2020, 2:49pm UTC](https://discuss.elastic.co/t/question-disable-access-to-kibana-console-when-using-elk-inside-a-webapp/236938 "2020-06-24T14:49:54Z")
Need some proper guidance on setting up security in ELK. Problem Definition: I have a webapp that will display Kibana reports and dashbaords. The ""iframe" url is embedded to various menu/submenu in my app that will di… --- ## [Add ID as one of the columns (index page)](https://discuss.elastic.co/t/add-id-as-one-of-the-columns-index-page/196371)
**Author:** [@shanekm](https://discuss.elastic.co/u/shanekm)\ **Replies:** 3\ **Last updated:** [August 22, 2019, 7:38pm UTC](https://discuss.elastic.co/t/add-id-as-one-of-the-columns-index-page/196371 "2019-08-22T19:38:28Z")
I've set up everything and it's working. However my urls for heartbeat are pretty long (under ID drop down) ex: http://myservertocheck.uat.net:19081/QA/Configuration.Service/Status.Api/api/application/status/QA.Configu… --- ## [Monthly Year on Year](https://discuss.elastic.co/t/monthly-year-on-year/139469)
**Author:** [@Sunil\_Khullar](https://discuss.elastic.co/u/Sunil_Khullar)\ **Replies:** 3\ **Last updated:** [July 25, 2018, 1:27pm UTC](https://discuss.elastic.co/t/monthly-year-on-year/139469 "2018-07-25T13:27:15Z")
I need to create monthly aggregation and compare it YoY like below I did manage it once (by trial and error) but forgot the steps. The older discussions on the topic are not very helpful. I am on 6.2.3 Any help would… --- ## [Add a json in webhook body for teams](https://discuss.elastic.co/t/add-a-json-in-webhook-body-for-teams/132536)
**Author:** [@Sebastian\_Herrera](https://discuss.elastic.co/u/Sebastian_Herrera)\ **Replies:** 3\ **Last updated:** [June 4, 2018, 12:48pm UTC](https://discuss.elastic.co/t/add-a-json-in-webhook-body-for-teams/132536 "2018-06-04T12:48:54Z")
Hello guys, i am trying to send alerts to a webhook that i have on my microsoft teams account. for that i need to add this on the webhook body { "@context": "http://schema.org/extensions", "@type": "MessageCard", "th… --- ## [Superslow simple query](https://discuss.elastic.co/t/superslow-simple-query/24645)
**Author:** [@Ted\_Smith](https://discuss.elastic.co/u/Ted_Smith)\ **Replies:** 3\ **Last updated:** [July 1, 2015, 8:44am UTC](https://discuss.elastic.co/t/superslow-simple-query/24645 "2015-07-01T08:44:50Z")
Hi: I am using termsFilter with a list of integer of 50000) trying to get response it takes like 3 minutes to get result back. it is not sorted in anyway, I just want to get the list of docs Another scenario, I simp… --- ## [Filebeat add\_kubernetes\_metadata pod uid matcher doesn't match poduid for rotated file on AKS](https://discuss.elastic.co/t/filebeat-add-kubernetes-metadata-pod-uid-matcher-doesnt-match-poduid-for-rotated-file-on-aks/298938)
**Author:** [@Jayw77](https://discuss.elastic.co/u/Jayw77)\ **Replies:** 5\ **Last updated:** [March 9, 2022, 10:51am UTC](https://discuss.elastic.co/t/filebeat-add-kubernetes-metadata-pod-uid-matcher-doesnt-match-poduid-for-rotated-file-on-aks/298938 "2022-03-09T10:51:55Z")
Hi, As the title suggests, I believe when using pod UID (/var/log/pod) with the below config which was fixed and backported into release v7.17.1, it still cannot get the metadata for the second file when rotated in AKS … --- ## [Help: Metricbeat to elasticsearch using ipv6](https://discuss.elastic.co/t/help-metricbeat-to-elasticsearch-using-ipv6/211373)
**Author:** [@briank5400](https://discuss.elastic.co/u/briank5400)\ **Replies:** 5\ **Last updated:** [December 13, 2019, 1:06pm UTC](https://discuss.elastic.co/t/help-metricbeat-to-elasticsearch-using-ipv6/211373 "2019-12-13T13:06:48Z")
I have elasticsearch/Kibana setup on another host and configured basic authentication. now I am trying to configure metricbeat to send some data (over ipv6) but I cant seem to figure out why its failing to authenticate … --- ## [Filebeat sends garbled messages to kafka](https://discuss.elastic.co/t/filebeat-sends-garbled-messages-to-kafka/129277)
**Author:** [@wangyanzhao](https://discuss.elastic.co/u/wangyanzhao)\ **Replies:** 5\ **Last updated:** [May 2, 2018, 10:01am UTC](https://discuss.elastic.co/t/filebeat-sends-garbled-messages-to-kafka/129277 "2018-05-02T10:01:52Z")
use filebeat-6.1.2 to collect logs to kafka, but part of logs in kafka are Garbled. filebeat.yml path.data: ${FILEBEAT\_HOME}/data path.logs: ${FILEBEAT\_HOME}/logs filebeat.config.prospectors: enabled: true path: … --- ## [AccessControlException: Ingest-attachment via NEST](https://discuss.elastic.co/t/accesscontrolexception-ingest-attachment-via-nest/88988)
**Author:** [@PierreFre](https://discuss.elastic.co/u/PierreFre)\ **Replies:** 5\ **Last updated:** [June 12, 2017, 9:52am UTC](https://discuss.elastic.co/t/accesscontrolexception-ingest-attachment-via-nest/88988 "2017-06-12T09:52:54Z")
Hello, i tried to insert a pdf-file in the elasticsearch database with the NEST-Interface. I got an AccessControlException. How i have to configure the security-policy? Best regards, Pierre --- ## [Unable to use grok pattern on GREEDYDATA message](https://discuss.elastic.co/t/unable-to-use-grok-pattern-on-greedydata-message/301086)
**Author:** [@rahulgupta18](https://discuss.elastic.co/u/rahulgupta18)\ **Replies:** 4\ **Last updated:** [March 31, 2022, 10:04am UTC](https://discuss.elastic.co/t/unable-to-use-grok-pattern-on-greedydata-message/301086 "2022-03-31T10:04:32Z")
Hi, I have this log message - 2022-03-08 04:16:04 \[DEBUG\] Creating linked clone: from Template-CentOS, to CentOS-001122 My logstash config. file is as follows - filter { grok { match =\> { "message" … --- ## [Input filter only metricbeat data](https://discuss.elastic.co/t/input-filter-only-metricbeat-data/122865)
**Author:** [@arun\_prasath1](https://discuss.elastic.co/u/arun_prasath1)\ **Replies:** 4\ **Last updated:** [April 3, 2018, 2:11pm UTC](https://discuss.elastic.co/t/input-filter-only-metricbeat-data/122865 "2018-04-03T14:11:26Z")
Is there a way to configure input only metricbeat events in the logstash.conf file? Generally, inputs will include all beat events like input { beats { port =\> 5044 } }. But i am looking to input ONLY metricbeat events … --- ## [Thousands of fields named column with a number](https://discuss.elastic.co/t/thousands-of-fields-named-column-with-a-number/52260)
**Author:** [@jeffkirk1](https://discuss.elastic.co/u/jeffkirk1)\ **Replies:** 4\ **Last updated:** [June 9, 2016, 4:50pm UTC](https://discuss.elastic.co/t/thousands-of-fields-named-column-with-a-number/52260 "2016-06-09T16:50:33Z")
Not sure if this really belongs in Elasticsearch, or in Logstash, but since I'm using both, I'll put it in Elasticsearch. I recently noticed our ELK cluster has thousands and thousands of fields named "column" followed… --- ## [Master node can not rejoin cluster after restart on es2.0.0. but other nodes can rejoin cluster after restart #15916](https://discuss.elastic.co/t/master-node-can-not-rejoin-cluster-after-restart-on-es2-0-0-but-other-nodes-can-rejoin-cluster-after-restart-15916/38945)
**Author:** [@wisre](https://discuss.elastic.co/u/wisre)\ **Replies:** 4\ **Last updated:** [January 12, 2016, 9:41am UTC](https://discuss.elastic.co/t/master-node-can-not-rejoin-cluster-after-restart-on-es2-0-0-but-other-nodes-can-rejoin-cluster-after-restart-15916/38945 "2016-01-12T09:41:54Z")
i have a es cluster with ten nodes five dedicated master\[A,B,C,D,E\] and five datanode,when i retsart the master A ,other dedicated master elect another master B,but when the A start,it cannot find master B.but B can find… --- ## [Combining multiple Tokenizer features on single \_all field](https://discuss.elastic.co/t/combining-multiple-tokenizer-features-on-single-all-field/148288)
**Author:** [@cdekker](https://discuss.elastic.co/u/cdekker)\ **Replies:** 1\ **Last updated:** [September 18, 2018, 9:39am UTC](https://discuss.elastic.co/t/combining-multiple-tokenizer-features-on-single-all-field/148288 "2018-09-18T09:39:55Z")
We have several customer defined indices on ES 6 with 100+ fields, where each field has a copy\_to mapping to an \_all field. This allows us to perform full-text search over all user-defined fields in the index. I have se… --- ## [How disable logstash Monitoring APIs](https://discuss.elastic.co/t/how-disable-logstash-monitoring-apis/81635)
**Author:** [@s.tkachenko](https://discuss.elastic.co/u/s.tkachenko)\ **Replies:** 1\ **Last updated:** [April 8, 2017, 11:13pm UTC](https://discuss.elastic.co/t/how-disable-logstash-monitoring-apis/81635 "2017-04-08T23:13:38Z")
Hello. How disable logstash Monitoring APIs? And disable started binding http.port (9600)? --- ## [Logstash tcp input插件 keepalive 的问题](https://discuss.elastic.co/t/logstash-tcp-input-keepalive/82403)
**Author:** [@qin](https://discuss.elastic.co/u/qin)\ **Replies:** 0\ **Last updated:** [April 14, 2017, 10:50am UTC](https://discuss.elastic.co/t/logstash-tcp-input-keepalive/82403 "2017-04-14T10:50:45Z")
我使用logstash的tcp input插件,它是server端，在使用的过程中,client异常断开连接,但是server没有断开, 所以服务器的TCP连接数一直在增加; 我试着修改OS tcp\_keepalive参数,但是不起作用 logstash version 5.0.1 tcp config: input { tcp { host =\> "0.0.0.0" port =\> 4561 mode =\> "server" … --- ## [ILM index rollover error](https://discuss.elastic.co/t/ilm-index-rollover-error/315938)
**Author:** [@Khaled\_Saidi](https://discuss.elastic.co/u/Khaled_Saidi)\ **Replies:** 6\ **Last updated:** [October 7, 2022, 1:10pm UTC](https://discuss.elastic.co/t/ilm-index-rollover-error/315938 "2022-10-07T13:10:06Z")
Hi everyone, Hope you will be able to help me another time. I have an elasticsearch cluster with an ILM Policy to manage the index rollover. The rollover is based on the index size. Everything was running well. The c… --- ## [FSCrawler2.6 : failed to create elasticsearch client, disabling crawler](https://discuss.elastic.co/t/fscrawler2-6-failed-to-create-elasticsearch-client-disabling-crawler/271701)
**Author:** [@joseph-l.amalraj](https://discuss.elastic.co/u/joseph-l.amalraj)\ **Replies:** 6\ **Last updated:** [April 30, 2021, 2:16am UTC](https://discuss.elastic.co/t/fscrawler2-6-failed-to-create-elasticsearch-client-disabling-crawler/271701 "2021-04-30T02:16:06Z")
Hi, Can you please share your suggestions for this issue.. I am using FSCrawler v2.6 and my ELK v6.8.14.. when i tried to ingest pdf files, getting below errors.. FYI.. with the same settings.json and data, i was able… --- ## [Elasticsearch high cpu load on snapshot creation](https://discuss.elastic.co/t/elasticsearch-high-cpu-load-on-snapshot-creation/265650)
**Author:** [@farmean](https://discuss.elastic.co/u/farmean)\ **Replies:** 6\ **Last updated:** [March 24, 2021, 8:24am UTC](https://discuss.elastic.co/t/elasticsearch-high-cpu-load-on-snapshot-creation/265650 "2021-03-24T08:24:13Z")
Hey everyone! We've got some issue that's making us scratch our heads for a while. We have pretty straightforward setup, 13 nodes, 1 index, 1000 shards, 2 replicas for each, a lot of nested document, high write load an… [Previous page](https://discuss.elastic.co/top.md?page=1253&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1255&per_page=50&period=all)