# Top **URL:** https://discuss.elastic.co/top.md?page=1282&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1283 --- ## [Get saved object id through Search API of Kibana](https://discuss.elastic.co/t/get-saved-object-id-through-search-api-of-kibana/239424)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 8:17am UTC](https://discuss.elastic.co/t/get-saved-object-id-through-search-api-of-kibana/239424 "2020-07-07T08:17:44Z")
Hi! Is there any query I can make in console of Kibana that I can get the id of a specific Dashboard, visualization, index-pattern and search? For example with : GET .kibana/\_search { "\_source": \["dashboard.title"\], … --- ## [Multiline pattern setting for multiple loglines in XML file](https://discuss.elastic.co/t/multiline-pattern-setting-for-multiple-loglines-in-xml-file/183618)
**Author:** [@kishorerv93](https://discuss.elastic.co/u/kishorerv93)\ **Replies:** 1\ **Last updated:** [May 31, 2019, 2:56pm UTC](https://discuss.elastic.co/t/multiline-pattern-setting-for-multiple-loglines-in-xml-file/183618 "2019-05-31T14:56:02Z")
Hi, Below is my xml file. Now my question is, I was able get every line in the above xml in a each message, but i'm unable to get all the log lines in a single message. Anyone can assist ? Thanks \ **Author:** [@apanimesh061](https://discuss.elastic.co/u/apanimesh061)\ **Replies:** 1\ **Last updated:** [September 2, 2015, 1:32am UTC](https://discuss.elastic.co/t/avoid-stemming-of-acronyms/28464 "2015-09-02T01:32:13Z") I am using the pattern\_capture filter to preserve all the acronyms PUT test\_index/\_settings { "index.analysis.filter": { "acronym\_en\_EN": { "type": "pattern\_capture", "patterns": \[ "(?:\[a-zA-Z… --- ## [Displaying data based on one field in Kibana using Data Table](https://discuss.elastic.co/t/displaying-data-based-on-one-field-in-kibana-using-data-table/26483)
**Author:** [@Aditya\_Patel](https://discuss.elastic.co/u/Aditya_Patel)\ **Replies:** 1\ **Last updated:** [July 30, 2015, 4:29am UTC](https://discuss.elastic.co/t/displaying-data-based-on-one-field-in-kibana-using-data-table/26483 "2015-07-30T04:29:45Z")
Hi I was trying to display multiple columns in one data table all of them grouped by one specific field. I know we can use "Terms" in row aggregation but what if i just want to checkout without sorting them in any orde… --- ## [Finding exact value with hyphen on not analyzed field is not working](https://discuss.elastic.co/t/finding-exact-value-with-hyphen-on-not-analyzed-field-is-not-working/23459)
**Author:** [@asmierzchalski](https://discuss.elastic.co/u/asmierzchalski)\ **Replies:** 1\ **Last updated:** [April 29, 2015, 9:14am UTC](https://discuss.elastic.co/t/finding-exact-value-with-hyphen-on-not-analyzed-field-is-not-working/23459 "2015-04-29T09:14:36Z")
Hello together, i'm using Logstash in combination with ElasticSearch. I have a field from type String which is not\_analyzed. The values are containing hyphens. When i'm trying to filter with a term for this field an… --- ## [Elasticsearch error after upgrade "can not run elasticsearch as root"](https://discuss.elastic.co/t/elasticsearch-error-after-upgrade-can-not-run-elasticsearch-as-root/312632)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 3\ **Last updated:** [September 1, 2022, 7:48am UTC](https://discuss.elastic.co/t/elasticsearch-error-after-upgrade-can-not-run-elasticsearch-as-root/312632 "2022-09-01T07:48:43Z")
Hello team, I have update my elasticsearch data node from 7,16,3 to 7.17.5. But it is through below error. Can you please help on same.. All files running as root.elasticsearch \[2022-08-22T18:26:40,213\]\[ERROR\]\[o.e.b… --- ## [HAProxy conf for Logstash](https://discuss.elastic.co/t/haproxy-conf-for-logstash/312773)
**Author:** [@magnorod](https://discuss.elastic.co/u/magnorod)\ **Replies:** 0\ **Last updated:** [August 24, 2022, 7:41am UTC](https://discuss.elastic.co/t/haproxy-conf-for-logstash/312773 "2022-08-24T07:41:35Z")
Hello, I'm contacting you because I can't get the load balancing of Logstash via HAproxy to work properly. I always have 2 Logstash out of the 4 that share the flow. I would like the flow to be fairly distributed betwe… --- ## [How to bypass Array error in Canvas?](https://discuss.elastic.co/t/how-to-bypass-array-error-in-canvas/236122)
**Author:** [@edbautista](https://discuss.elastic.co/u/edbautista)\ **Replies:** 3\ **Last updated:** [June 15, 2020, 11:32am UTC](https://discuss.elastic.co/t/how-to-bypass-array-error-in-canvas/236122 "2020-06-15T11:32:29Z")
Elasticsearch: 7.6.2 Kibana: 7.6.2 Hi. I'm fairly new with using the Elastic Stack. Trying to explore both Kibana and Canvas to decide which to use for our dashboards. We are currently leaning towards Canvas for its ca… --- ## [How to upload bulk data into elasticsearch?](https://discuss.elastic.co/t/how-to-upload-bulk-data-into-elasticsearch/171772)
**Author:** [@dattack13](https://discuss.elastic.co/u/dattack13)\ **Replies:** 3\ **Last updated:** [March 11, 2019, 1:51pm UTC](https://discuss.elastic.co/t/how-to-upload-bulk-data-into-elasticsearch/171772 "2019-03-11T13:51:16Z")
Hi, I have bulk of json data with me, and I want to upload it in single hit, can any one knows the process, I am unable to find any way of bulk item upload in elasticsearch. Thanks Gaurav Singh --- ## [How to use current date to determine table name for jdbc\_input query?](https://discuss.elastic.co/t/how-to-use-current-date-to-determine-table-name-for-jdbc-input-query/144400)
**Author:** [@jdmcalee](https://discuss.elastic.co/u/jdmcalee)\ **Replies:** 3\ **Last updated:** [August 15, 2018, 7:28pm UTC](https://discuss.elastic.co/t/how-to-use-current-date-to-determine-table-name-for-jdbc-input-query/144400 "2018-08-15T19:28:00Z")
I have a database with a table per month for data: table\_01, table\_02, ..., table\_12 Is it possible to have logstash construct the table name at runtime, and use it in the query? --- ## [How much virtual memory does a 30.5Gb heap(256 Gb memory in total) for Elasticsearch support?](https://discuss.elastic.co/t/how-much-virtual-memory-does-a-30-5gb-heap-256-gb-memory-in-total-for-elasticsearch-support/39031)
**Author:** [@lee891031](https://discuss.elastic.co/u/lee891031)\ **Replies:** 3\ **Last updated:** [January 13, 2016, 12:22am UTC](https://discuss.elastic.co/t/how-much-virtual-memory-does-a-30-5gb-heap-256-gb-memory-in-total-for-elasticsearch-support/39031 "2016-01-13T00:22:02Z")
Hello, Assume I have a machine with 256gb memory and 12TB SSD. Indexed document size is 100TB. I assign 30.5 GB to Elasticsearch heap. The remaining is for Lucene and OS. My question is, how much virtual memory does… --- ## [JDBC Input and Scheduled Filter - events being missed](https://discuss.elastic.co/t/jdbc-input-and-scheduled-filter-events-being-missed/99603)
**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\ **Replies:** 2\ **Last updated:** [October 2, 2017, 10:51am UTC](https://discuss.elastic.co/t/jdbc-input-and-scheduled-filter-events-being-missed/99603 "2017-10-02T10:51:09Z")
Hi All, Not sure there’s much that can be done about this but I thought I’d ask the question. I’m running the JDBC Input plugin to obtain new events from our database. The input is set to run every 2 minutes. I’m also… --- ## [Index keeps getting deleted and new index created called read-me-to-recover-data is created](https://discuss.elastic.co/t/index-keeps-getting-deleted-and-new-index-created-called-read-me-to-recover-data-is-created/339882)
**Author:** [@AndyX](https://discuss.elastic.co/u/AndyX)\ **Replies:** 5\ **Last updated:** [August 2, 2023, 4:06pm UTC](https://discuss.elastic.co/t/index-keeps-getting-deleted-and-new-index-created-called-read-me-to-recover-data-is-created/339882 "2023-08-02T16:06:47Z")
Every few days my Elasticsearch index gets deleted. I assume this is due to me running with the following: xpack.security.enabled: false When my index is deleted a new index with the name: read-me-to-recover-data is … --- ## [Kibana developer guide](https://discuss.elastic.co/t/kibana-developer-guide/328421)
**Author:** [@dms6978](https://discuss.elastic.co/u/dms6978)\ **Replies:** 5\ **Last updated:** [March 28, 2023, 2:30am UTC](https://discuss.elastic.co/t/kibana-developer-guide/328421 "2023-03-28T02:30:50Z")
I ran 'yarn kbn bootstrap' while looking at the kibana developer guide, and the error follows. UNHANDLED EXCEPTION: Error: spawn git ENOENT at Process.ChildProcess.\_handle.onexit (node:internal/child\_process:285:19)… --- ## [Logstash S3 Input Plugin Error](https://discuss.elastic.co/t/logstash-s3-input-plugin-error/245201)
**Author:** [@elasticus3r](https://discuss.elastic.co/u/elasticus3r)\ **Replies:** 5\ **Last updated:** [August 17, 2020, 2:55pm UTC](https://discuss.elastic.co/t/logstash-s3-input-plugin-error/245201 "2020-08-17T14:55:13Z")
Hello All, Hoping someone could help please. I have got a simple ELk stack running and using s3 input plugin to ingest from an endpoint with the following config: input { s3 { bucket =\> "mybucket" endpoint =\>… --- ## [Восстановление снапшотов без snap-snapshot\*.dat фалов](https://discuss.elastic.co/t/snap-snapshot-dat/237598)
**Author:** [@mrevilfromhell](https://discuss.elastic.co/u/mrevilfromhell)\ **Replies:** 5\ **Last updated:** [June 24, 2020, 8:45am UTC](https://discuss.elastic.co/t/snap-snapshot-dat/237598 "2020-06-24T08:45:15Z")
На elasticsearch версии 2.4 были созданы снапшоты индексов. Добавлены в архив файлы из папки indices/name-index и meta-name-index.dat. Файл snap-snapshot-index-name.dat добавлен не был. Возможно ли восстановить снапшот … --- ## [Index Alias Using NEST](https://discuss.elastic.co/t/index-alias-using-nest/213220)
**Author:** [@han1](https://discuss.elastic.co/u/han1)\ **Replies:** 0\ **Last updated:** [December 27, 2019, 6:27pm UTC](https://discuss.elastic.co/t/index-alias-using-nest/213220 "2019-12-27T18:27:10Z")
As usual No doc assistance when using NEST. We came across this OLD code on Stackoverflow: \> createIndexResponse = client.CreateIndex(indices\[1\]); \> \> // wait for index-v2 to be operable \> var clusterHealth… --- ## [Kibana 5 - Discover: "logstash\*" is not a configured pattern. Using the default index pattern](https://discuss.elastic.co/t/kibana-5-discover-logstash-is-not-a-configured-pattern-using-the-default-index-pattern/61534)
**Author:** [@yuv14](https://discuss.elastic.co/u/yuv14)\ **Replies:** 0\ **Last updated:** [September 26, 2016, 7:35pm UTC](https://discuss.elastic.co/t/kibana-5-discover-logstash-is-not-a-configured-pattern-using-the-default-index-pattern/61534 "2016-09-26T19:35:25Z")
Hi all, I decided to test out ELK 5. I installed ES version elasticsearch-5.0.0-beta1 and Kibana kibana-5.0.0-beta1-amd64 by the instruction on the docs. I decided to follow the Kibana tutorial, so I downloaded and ins… --- ## [Monitoring Process in Windows](https://discuss.elastic.co/t/monitoring-process-in-windows/285291)
**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\ **Replies:** 2\ **Last updated:** [September 28, 2021, 1:46am UTC](https://discuss.elastic.co/t/monitoring-process-in-windows/285291 "2021-09-28T01:46:18Z")
Hi All, Currently trying to figure out how to monitor whether a Windows application is Up or Down. Currently using a filter to narrow down it to a specific agent.name (My Server) and process.name (application name) and… --- ## [I am trying to change the format of date and time using pipeline but doesn't work](https://discuss.elastic.co/t/i-am-trying-to-change-the-format-of-date-and-time-using-pipeline-but-doesnt-work/274329)
**Author:** [@aswanth\_jabba](https://discuss.elastic.co/u/aswanth_jabba)\ **Replies:** 2\ **Last updated:** [May 28, 2021, 12:30pm UTC](https://discuss.elastic.co/t/i-am-trying-to-change-the-format-of-date-and-time-using-pipeline-but-doesnt-work/274329 "2021-05-28T12:30:54Z")
Here is the pipeline : PUT \_ingest/pipeline/dateformat { "description" : "To change Date format", "processors" : \[ { "date" : { "field" : "EndDate", "target\_field" : "newEndDate", "formats" : \["date\_time"\] } } … --- ## [Is it possible to create custom variables for use on the visualization?](https://discuss.elastic.co/t/is-it-possible-to-create-custom-variables-for-use-on-the-visualization/227145)
**Author:** [@uids2](https://discuss.elastic.co/u/uids2)\ **Replies:** 2\ **Last updated:** [April 14, 2020, 10:19am UTC](https://discuss.elastic.co/t/is-it-possible-to-create-custom-variables-for-use-on-the-visualization/227145 "2020-04-14T10:19:17Z")
Hi all, I have a question, my architecture in this moment is: Kibana Elasticsearch logstash filebeat metricbeat heartbeat In this moment i have created for every visualization an filter with custom label "MyApp\_HostGr… --- ## [Index内の複数のドキュメントidの削除方法について](https://discuss.elastic.co/t/index-id/177579)
**Author:** [@iasenust](https://discuss.elastic.co/u/iasenust)\ **Replies:** 2\ **Last updated:** [April 22, 2019, 1:44am UTC](https://discuss.elastic.co/t/index-id/177579 "2019-04-22T01:44:18Z")
ご教授ください。 Elasticsearchに投入済のindexの複数ドキュメントを一気に削除したいと考えています。 削除には、/index名/type名/ドキュメントid が必要というところまでは調べたので、このidでうまく 正規表現を使って複数行を一気に削除できないかとおもっています。たとえばidはYYYY/MM/dd の ように設定をしておいて、ある期間からある期間までのidを削除、というように。 上記のような手法は実現… --- ## [Trying to implement an "impossible travel" query](https://discuss.elastic.co/t/trying-to-implement-an-impossible-travel-query/172607)
**Author:** [@jbrowe](https://discuss.elastic.co/u/jbrowe)\ **Replies:** 2\ **Last updated:** [April 12, 2019, 3:03pm UTC](https://discuss.elastic.co/t/trying-to-implement-an-impossible-travel-query/172607 "2019-04-12T15:03:07Z")
I have an index with geo-tagged login records. Each document includes user, time and location for authentications. I want to find all instances where successive logins are impossible. The location and time of the latest … --- ## [Watcher still failing to send emails](https://discuss.elastic.co/t/watcher-still-failing-to-send-emails/159059)
**Author:** [@Dima\_X](https://discuss.elastic.co/u/Dima_X)\ **Replies:** 2\ **Last updated:** [December 14, 2018, 3:17pm UTC](https://discuss.elastic.co/t/watcher-still-failing-to-send-emails/159059 "2018-12-14T15:17:51Z")
Continuing the discussion from Watcher failing to send emails: The issue which were discussed in the mentioned topic still hasn't resolved. User (Michael Tarimo) said that it was misconfiguration in the watcher config. … --- ## [Compilation filebeat gccgo solaris /sparc](https://discuss.elastic.co/t/compilation-filebeat-gccgo-solaris-sparc/141170)
**Author:** [@Charaf\_Ahmed](https://discuss.elastic.co/u/Charaf_Ahmed)\ **Replies:** 2\ **Last updated:** [July 24, 2018, 8:47am UTC](https://discuss.elastic.co/t/compilation-filebeat-gccgo-solaris-sparc/141170 "2018-07-24T08:47:33Z")
I am driving to compile the project filebeat going for solar / SPARC environments. Officially, Elastic tools are not supported by Solaris. Neamoins, there is circumventenement to this problem / compile via gccgo. I actu… --- ## [How to configure a Beat to log to the console](https://discuss.elastic.co/t/how-to-configure-a-beat-to-log-to-the-console/44537)
**Author:** [@marminthibaut](https://discuss.elastic.co/u/marminthibaut)\ **Replies:** 2\ **Last updated:** [March 24, 2016, 1:48pm UTC](https://discuss.elastic.co/t/how-to-configure-a-beat-to-log-to-the-console/44537 "2016-03-24T13:48:15Z")
Hi, I'm trying to configure a Beat in a Docker container, that's why I need my beat to log to stdout/stderr. In the logging section of the configuration file, it is written: # There are three options for the log oupu… --- ## [Range query for date of “long” field type in kibana](https://discuss.elastic.co/t/range-query-for-date-of-long-field-type-in-kibana/44929)
**Author:** [@Nagarajan\_S](https://discuss.elastic.co/u/Nagarajan_S)\ **Replies:** 2\ **Last updated:** [March 21, 2016, 5:21am UTC](https://discuss.elastic.co/t/range-query-for-date-of-long-field-type-in-kibana/44929 "2016-03-21T05:21:06Z")
I have a field in ES type representing date with long type. I am trying to filter data in kibana based on this field. For example, get me the documents created in last seven days. But not able to come up with the solut… --- ## [Calendar month log comparison?](https://discuss.elastic.co/t/calendar-month-log-comparison/159576)
**Author:** [@jbrowe](https://discuss.elastic.co/u/jbrowe)\ **Replies:** 1\ **Last updated:** [December 5, 2018, 7:35pm UTC](https://discuss.elastic.co/t/calendar-month-log-comparison/159576 "2018-12-05T19:35:16Z")
I'm trying to accomplish a simple task. I have visualizations summarizing log activity. I can change the time period using the Kibana time picker in the top right. I can get the current month summary using the absolute f… --- ## [Large synonyms file - Cluster State Exception](https://discuss.elastic.co/t/large-synonyms-file-cluster-state-exception/145075)
**Author:** [@mattkallo](https://discuss.elastic.co/u/mattkallo)\ **Replies:** 7\ **Last updated:** [August 21, 2018, 7:09am UTC](https://discuss.elastic.co/t/large-synonyms-file-cluster-state-exception/145075 "2018-08-21T07:09:47Z")
Hi - Similar issues were discussed earlier by others, however I am unable to resolve this from the solutions mentioned in those discussions. Recommendation for large synonym file I have 2 synonyms/phrases files which a… --- ## [Grok Filter for SNMP Trap](https://discuss.elastic.co/t/grok-filter-for-snmp-trap/130854)
**Author:** [@ysumit](https://discuss.elastic.co/u/ysumit)\ **Replies:** 1\ **Last updated:** [May 8, 2018, 8:19am UTC](https://discuss.elastic.co/t/grok-filter-for-snmp-trap/130854 "2018-05-08T08:19:11Z")
Hi Team I have input from snmp trap from which I would want only few fields to be captured. The SNMP trap is long string. I have attached a complete string below however need to fetch the following part: kpi\_match\_nam… --- ## [How to perform join with two or more csv files into one index of elastic search using logstash](https://discuss.elastic.co/t/how-to-perform-join-with-two-or-more-csv-files-into-one-index-of-elastic-search-using-logstash/114865)
**Author:** [@Jagadeesh](https://discuss.elastic.co/u/Jagadeesh)\ **Replies:** 1\ **Last updated:** [January 10, 2018, 12:20pm UTC](https://discuss.elastic.co/t/how-to-perform-join-with-two-or-more-csv-files-into-one-index-of-elastic-search-using-logstash/114865 "2018-01-10T12:20:38Z")
I have created two CSV files A.csv and B.csv. A.csv has the fields id,name,city etc. (10 records) B.csv has fields id,age,blood\_group etc (10 records) In both the above files id field is common. so can I create an ind… --- ## [Cannot see filebeat dashboards in kibana after installing and configuring them as per docs](https://discuss.elastic.co/t/cannot-see-filebeat-dashboards-in-kibana-after-installing-and-configuring-them-as-per-docs/114595)
**Author:** [@sconrod](https://discuss.elastic.co/u/sconrod)\ **Replies:** 1\ **Last updated:** [January 9, 2018, 2:26pm UTC](https://discuss.elastic.co/t/cannot-see-filebeat-dashboards-in-kibana-after-installing-and-configuring-them-as-per-docs/114595 "2018-01-09T14:26:39Z")
Hi I would greatly appreciate some help:0) I have installed filebeat, created the index, and I am receiving data to the index successfully. I have configured kibana to load the filebeat dashboards yet I am not seeing the… --- ## [Elastic Agent with Synthetics Integration- Adding TCP monitor break the Agent](https://discuss.elastic.co/t/elastic-agent-with-synthetics-integration-adding-tcp-monitor-break-the-agent/280651)
**Author:** [@nugroho-expereo](https://discuss.elastic.co/u/nugroho-expereo)\ **Replies:** 6\ **Last updated:** [August 9, 2021, 11:31am UTC](https://discuss.elastic.co/t/elastic-agent-with-synthetics-integration-adding-tcp-monitor-break-the-agent/280651 "2021-08-09T11:31:50Z")
Hi All, I have an Elastic Agent Installed with synthetic integration (heartbeat). Adding HTTP and ICMP monitors work fine but when I tried adding a TCP monitor with the correct host:port format the agent become unhealth… --- ## [Filebeat can't receive log from pfSense](https://discuss.elastic.co/t/filebeat-cant-receive-log-from-pfsense/233859)
**Author:** [@Minh\_Ti\_n\_Tr\_n](https://discuss.elastic.co/u/Minh_Ti_n_Tr_n)\ **Replies:** 6\ **Last updated:** [May 24, 2020, 11:43am UTC](https://discuss.elastic.co/t/filebeat-cant-receive-log-from-pfsense/233859 "2020-05-24T11:43:35Z")
Hi all, I'm trying to make filebeat receive pfsense syslog. my filebeat.yml input part: filebeat.inputs: - type: syslog protocol.udp: host: "0.0.0.0:9560" fields\_under\_root: true fields: input.type: pfsen… --- ## [Kibana Map doesn't visualize any data](https://discuss.elastic.co/t/kibana-map-doesnt-visualize-any-data/209150)
**Author:** [@ElasticMaa](https://discuss.elastic.co/u/ElasticMaa)\ **Replies:** 6\ **Last updated:** [November 24, 2019, 3:33pm UTC](https://discuss.elastic.co/t/kibana-map-doesnt-visualize-any-data/209150 "2019-11-24T15:33:02Z")
Hi to all, I'm finding an issue with Kibana v. 7.4.2 cloud version. This is the mapping of my address field location (using php): .... 'location' =\> \[ 'type' =\> 'geo\_point' \], .... I checked that the mapping has … --- ## [Filebeats 6.3 tcp client crash](https://discuss.elastic.co/t/filebeats-6-3-tcp-client-crash/133759)
**Author:** [@emrith](https://discuss.elastic.co/u/emrith)\ **Replies:** 6\ **Last updated:** [May 31, 2018, 2:27pm UTC](https://discuss.elastic.co/t/filebeats-6-3-tcp-client-crash/133759 "2018-05-31T14:27:07Z")
I'm running filebeat version 6.3.0 (amd64), libbeat 6.3.0 \[489ad50276d34fd597cb31faa644aba1ecf47574 built 2018-05-11 19:02:09 +0000 UTC\] after a week of running we get this in the log 2018-05-29T10:55:39.577-0600 E… --- ## [Filebeat installed as Daemon Set in IBM Private Cloud Kubernetes Cluster don't send logs to Elastic Cloud instance](https://discuss.elastic.co/t/filebeat-installed-as-daemon-set-in-ibm-private-cloud-kubernetes-cluster-dont-send-logs-to-elastic-cloud-instance/184406)
**Author:** [@l.rava](https://discuss.elastic.co/u/l.rava)\ **Replies:** 4\ **Last updated:** [October 15, 2021, 1:31pm UTC](https://discuss.elastic.co/t/filebeat-installed-as-daemon-set-in-ibm-private-cloud-kubernetes-cluster-dont-send-logs-to-elastic-cloud-instance/184406 "2021-10-15T13:31:20Z")
Hi I installed as Daemon Set metricBeat and fileBeat into my infrastracture: IBM Private Cloud kubernetes cluster - 2 nodes - v.1.13 following this guide. MetricBeat send data without problem. Filebeat don't send da… --- ## [Machine leaning Option not showing up in kibana](https://discuss.elastic.co/t/machine-leaning-option-not-showing-up-in-kibana/220359)
**Author:** [@Joy\_Chatterjee](https://discuss.elastic.co/u/Joy_Chatterjee)\ **Replies:** 4\ **Last updated:** [February 27, 2020, 2:34pm UTC](https://discuss.elastic.co/t/machine-leaning-option-not-showing-up-in-kibana/220359 "2020-02-27T14:34:45Z")
Hi Team , I am unable to Machine learning option in Kibana , though I see it in my spaces . I tried enabling and Disabling , but no luck . Xpack is enabled for my user account . Any suggestion ? Regards Joy --- ## [Installing and using logstash (and other elk components) with plugins on a shared mount](https://discuss.elastic.co/t/installing-and-using-logstash-and-other-elk-components-with-plugins-on-a-shared-mount/90608)
**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Replies:** 4\ **Last updated:** [June 29, 2017, 10:20am UTC](https://discuss.elastic.co/t/installing-and-using-logstash-and-other-elk-components-with-plugins-on-a-shared-mount/90608 "2017-06-29T10:20:23Z")
Hi Elastic Team, This question actually applies to not only logstash but actually to all components in ELK stack. Due to some constraints I have, I'm unable to run the installation process with plugin-install command… --- ## [Get single vaue from xml by Java](https://discuss.elastic.co/t/get-single-vaue-from-xml-by-java/46237)
**Author:** [@agent0009](https://discuss.elastic.co/u/agent0009)\ **Replies:** 4\ **Last updated:** [April 5, 2016, 2:09pm UTC](https://discuss.elastic.co/t/get-single-vaue-from-xml-by-java/46237 "2016-04-05T14:09:54Z")
Hi Guys, I'm new to Elasticsearch and i'm trying to get a single field value with an ID. LOG.info("Starte Client für Verbindung zum Elasticsearch-Server:"); Client client = TransportClient.builder().build() .addTran… --- ## [How to provide single Kibana link to multiple clients](https://discuss.elastic.co/t/how-to-provide-single-kibana-link-to-multiple-clients/278)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 4\ **Last updated:** [May 8, 2015, 7:43am UTC](https://discuss.elastic.co/t/how-to-provide-single-kibana-link-to-multiple-clients/278 "2015-05-08T07:43:50Z")
Hi Guys, I was wondering of it's possible to provide single kibana link to multiple clients . What i am planning is to create multiple indexes and restrict client to their respective index. So that everyone can open sa… --- ## [RAR file download from the internet](https://discuss.elastic.co/t/rar-file-download-from-the-internet/327072)
**Author:** [@Maretti](https://discuss.elastic.co/u/Maretti)\ **Replies:** 3\ **Last updated:** [March 23, 2023, 3:17pm UTC](https://discuss.elastic.co/t/rar-file-download-from-the-internet/327072 "2023-03-23T15:17:31Z")
I tried this rule since a lot of malware is spread using password protected RAR files Roshal Archive (RAR) or PowerShell File Downloaded from the Internet | Elastic Security Solution \[7.17\] | Elastic The Query the rule… --- ## [ML: difference between partition\_field\_name and by\_field\_name?](https://discuss.elastic.co/t/ml-difference-between-partition-field-name-and-by-field-name/280013)
**Author:** [@CameronCenic](https://discuss.elastic.co/u/CameronCenic)\ **Replies:** 3\ **Last updated:** [July 30, 2021, 2:01pm UTC](https://discuss.elastic.co/t/ml-difference-between-partition-field-name-and-by-field-name/280013 "2021-07-30T14:01:24Z")
I do not really understand the difference between these two settings. They seem to perform the same function from my perspective. --- ## [Monitor particular port using elk](https://discuss.elastic.co/t/monitor-particular-port-using-elk/141575)
**Author:** [@dinesh1](https://discuss.elastic.co/u/dinesh1)\ **Replies:** 3\ **Last updated:** [July 26, 2018, 1:16pm UTC](https://discuss.elastic.co/t/monitor-particular-port-using-elk/141575 "2018-07-26T13:16:41Z")
how monitor number of active connections in particular port.Like 22, 9090, 15672 etc using elk --- ## [\[6.1\] Submitting index-pattern and visualizations to ".kibana" index](https://discuss.elastic.co/t/6-1-submitting-index-pattern-and-visualizations-to-kibana-index/113680)
**Author:** [@hazim](https://discuss.elastic.co/u/hazim)\ **Replies:** 3\ **Last updated:** [January 1, 2018, 11:50am UTC](https://discuss.elastic.co/t/6-1-submitting-index-pattern-and-visualizations-to-kibana-index/113680 "2018-01-01T11:50:15Z")
I'm upgrading from ES and Kibana 2.3 to 6.1, and can't seem to submit index-pattern, visualizations, dashboard etc to the ".kibana" index. This is how i was submitting them in ES 2.3 curl -vvv -H "Content-Type: applic… --- ## [Topbeat to Elasticsearch - connection refused](https://discuss.elastic.co/t/topbeat-to-elasticsearch-connection-refused/67336)
**Author:** [@txisme](https://discuss.elastic.co/u/txisme)\ **Replies:** 3\ **Last updated:** [November 28, 2016, 2:27pm UTC](https://discuss.elastic.co/t/topbeat-to-elasticsearch-connection-refused/67336 "2016-11-28T14:27:25Z")
Hey, i have the following setup: (machine1) -\> (machine2) (Filebeat) -\> (Logstash-\>ElasticSearch) (Topbeat) -\> (ElasticSearch) Filebeat, logstash, elasticsearch setup is working fine. However, topbeat is not workin… --- ## [Date Parse Failure for dd-MMM-yy h:mm:ss a z](https://discuss.elastic.co/t/date-parse-failure-for-dd-mmm-yy-h-mm-ss-a-z/55526)
**Author:** [@sallehuddin](https://discuss.elastic.co/u/sallehuddin)\ **Replies:** 3\ **Last updated:** [July 15, 2016, 6:19am UTC](https://discuss.elastic.co/t/date-parse-failure-for-dd-mmm-yy-h-mm-ss-a-z/55526 "2016-07-15T06:19:00Z")
I've been scratching my head for hours trying to figure out why the following datetime format failed to be properly detected by date filter of logstash. I have the following sample data from csv file: 09-Jul-16 10:00:0… --- ## [Filebeat 8.19.9, 9.1.9, and 9.2.3 Security Update (ESA-2025-32)](https://discuss.elastic.co/t/filebeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-32/384180)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [December 18, 2025, 9:16pm UTC](https://discuss.elastic.co/t/filebeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-32/384180 "2025-12-18T21:16:47Z")
Filebeat Improper Validation of Specified Index, Position, or Offset in Input (ESA-2025-32) Improper Validation of Specified Index, Position, or Offset in Input (CWE-1285) in Filebeat Syslog parser and the Libbeat Disse… --- ## [Actual logs that appear at Kibana are different than those that configured at filebeat](https://discuss.elastic.co/t/actual-logs-that-appear-at-kibana-are-different-than-those-that-configured-at-filebeat/172975)
**Author:** [@manosmustang](https://discuss.elastic.co/u/manosmustang)\ **Replies:** 1\ **Last updated:** [March 19, 2019, 1:47pm UTC](https://discuss.elastic.co/t/actual-logs-that-appear-at-kibana-are-different-than-those-that-configured-at-filebeat/172975 "2019-03-19T13:47:38Z")
Hello, As you can see below I have configured at filebeat.yml file the log file that I want to send at kibana, it is the /var/log/yum.log but at kibana when I find the index and insert it to it i can see only logs from … --- ## [Monitoring a Windows file Server user info](https://discuss.elastic.co/t/monitoring-a-windows-file-server-user-info/148324)
**Author:** [@alejandro.perez](https://discuss.elastic.co/u/alejandro.perez)\ **Replies:** 1\ **Last updated:** [September 14, 2018, 1:09pm UTC](https://discuss.elastic.co/t/monitoring-a-windows-file-server-user-info/148324 "2018-09-14T13:09:05Z")
Hello , if i´m monitoring a Windows file Server, How can I log the user info? Thank you in advance. [Previous page](https://discuss.elastic.co/top.md?page=1281&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1283&per_page=50&period=all)