# Top **URL:** https://discuss.elastic.co/top.md?page=1327&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1328 --- ## [Elastic search storage exception](https://discuss.elastic.co/t/elastic-search-storage-exception/290642)
**Author:** [@mehmood1](https://discuss.elastic.co/u/mehmood1)\ **Replies:** 8\ **Last updated:** [December 10, 2021, 4:03am UTC](https://discuss.elastic.co/t/elastic-search-storage-exception/290642 "2021-12-10T04:03:25Z")
Elasticsearch run in read only mode due to storage. i dont want to extend storage this time because it is only for testing purpose. below is Elasticsearch yml file # ======================== Elasticsearch Configuratio… --- ## [How can i convert to complex json file](https://discuss.elastic.co/t/how-can-i-convert-to-complex-json-file/176874)
**Author:** [@newface](https://discuss.elastic.co/u/newface)\ **Replies:** 8\ **Last updated:** [April 16, 2019, 1:38am UTC](https://discuss.elastic.co/t/how-can-i-convert-to-complex-json-file/176874 "2019-04-16T01:38:02Z")
Hello i try a complex json using split plugin But, the result is not my intent. Json file is like this. { "col1" : "0C35C", "col2" : 0, "col3" : "was", "col4" : "AAF", "col5" : "20190329", "col6" : … --- ## [Package a beat built from source for deploying to other servers running on same platform](https://discuss.elastic.co/t/package-a-beat-built-from-source-for-deploying-to-other-servers-running-on-same-platform/170351)
**Author:** [@tabalchi](https://discuss.elastic.co/u/tabalchi)\ **Replies:** 8\ **Last updated:** [March 23, 2019, 3:39am UTC](https://discuss.elastic.co/t/package-a-beat-built-from-source-for-deploying-to-other-servers-running-on-same-platform/170351 "2019-03-23T03:39:29Z")
I built MetricBeat from source on an ARMv7 device running Debian Stretch. To do this, I installed Go, then downloaded the Beats source code from GitHub, switched to the matching version for my ElasticSearch and Kibana in… --- ## [Ruby Code - Converting Socket Address Error](https://discuss.elastic.co/t/ruby-code-converting-socket-address-error/108425)
**Author:** [@kazul33](https://discuss.elastic.co/u/kazul33)\ **Replies:** 3\ **Last updated:** [November 21, 2017, 8:55pm UTC](https://discuss.elastic.co/t/ruby-code-converting-socket-address-error/108425 "2017-11-21T20:55:45Z")
I'm working with Auditd data. I have the SADDR within a log message and I'm trying to convert it using some ruby code. Here is my snippet: filter { ruby { code =\> " require 'socket' … --- ## [ElasticSearch 2.2.0 memory dump and node goes out of cluster](https://discuss.elastic.co/t/elasticsearch-2-2-0-memory-dump-and-node-goes-out-of-cluster/46297)
**Author:** [@lokeshhctm](https://discuss.elastic.co/u/lokeshhctm)\ **Replies:** 3\ **Last updated:** [April 4, 2016, 10:04pm UTC](https://discuss.elastic.co/t/elasticsearch-2-2-0-memory-dump-and-node-goes-out-of-cluster/46297 "2016-04-04T22:04:07Z")
ElasticSearch version: 2.2.0 JVM version: 1.8 OS version: AWS Linux C3.4xlarge Description of the problem including expected versus actual behavior: After we restart ElasticSearch run fine like for 2-3 days and t… --- ## [How to load native script with 2.1?](https://discuss.elastic.co/t/how-to-load-native-script-with-2-1/38077)
**Author:** [@Matt\_Chambers1](https://discuss.elastic.co/u/Matt_Chambers1)\ **Replies:** 3\ **Last updated:** [December 28, 2015, 11:07pm UTC](https://discuss.elastic.co/t/how-to-load-native-script-with-2-1/38077 "2015-12-28T23:07:07Z")
Hi everyone, I'm upgrading from Elastic 1.7.3 to 2.1.1 and I think this is the final thing I need to fix. In 1.7 when I needed to load a native script I'd put it in my config like so: script.native.nameOfScript.type… --- ## [Unable to fully utilize resources in Elasticsearch cluster](https://discuss.elastic.co/t/unable-to-fully-utilize-resources-in-elasticsearch-cluster/26279)
**Author:** [@Srinath\_C](https://discuss.elastic.co/u/Srinath_C)\ **Replies:** 3\ **Last updated:** [July 25, 2015, 10:35am UTC](https://discuss.elastic.co/t/unable-to-fully-utilize-resources-in-elasticsearch-cluster/26279 "2015-07-25T10:35:33Z")
Hi, I'm running tests to size up a cluster and get the best tuning parameters for my requirements - Index documents at the rate of 10k per second (each document being ~2k in size) across 10 indices, each having 3 shard… --- ## [Logstash move subfield to top field](https://discuss.elastic.co/t/logstash-move-subfield-to-top-field/244309)
**Author:** [@gbasic](https://discuss.elastic.co/u/gbasic)\ **Replies:** 6\ **Last updated:** [August 10, 2020, 11:52am UTC](https://discuss.elastic.co/t/logstash-move-subfield-to-top-field/244309 "2020-08-10T11:52:09Z")
"\_score" : 1.0, "\_source" : { "Europe" : { "DateTime" : { "Date" : "08.08.2020", "Time" : "15" }, "City" : \[ { … --- ## [Method getTotalHits() duplicated and not found at the same time?](https://discuss.elastic.co/t/method-gettotalhits-duplicated-and-not-found-at-the-same-time/217251)
**Author:** [@franzisk](https://discuss.elastic.co/u/franzisk)\ **Replies:** 6\ **Last updated:** [February 7, 2020, 10:27am UTC](https://discuss.elastic.co/t/method-gettotalhits-duplicated-and-not-found-at-the-same-time/217251 "2020-02-07T10:27:53Z")
Hi, I am using spring-boot-starter-elasticsearch and when I do query via repository I get this error saying the method getTotalHits() doesn't exist, at the same time shows on Eclipse console that there are 2 classes on … --- ## [Can not create index patterns for filebeat-\*, but I can see the logs from kibana's logs plugin](https://discuss.elastic.co/t/can-not-create-index-patterns-for-filebeat-but-i-can-see-the-logs-from-kibanas-logs-plugin/188126)
**Author:** [@yuecong](https://discuss.elastic.co/u/yuecong)\ **Replies:** 6\ **Last updated:** [July 17, 2019, 12:31pm UTC](https://discuss.elastic.co/t/can-not-create-index-patterns-for-filebeat-but-i-can-see-the-logs-from-kibanas-logs-plugin/188126 "2019-07-17T12:31:22Z")
I just installed Elastic Stack 7.2 using Azure ARM template and configured fiebeats to export data to it. Everything looks works pretty straightforward. I can see the logs from kibana's logs plugin and also see the metri… --- ## [How to Disable ‘Apply these filters?’ dialog box in embedded visualizations](https://discuss.elastic.co/t/how-to-disable-apply-these-filters-dialog-box-in-embedded-visualizations/183731)
**Author:** [@jdemp0913](https://discuss.elastic.co/u/jdemp0913)\ **Replies:** 6\ **Last updated:** [June 5, 2019, 5:29pm UTC](https://discuss.elastic.co/t/how-to-disable-apply-these-filters-dialog-box-in-embedded-visualizations/183731 "2019-06-05T17:29:18Z")
I see that this issue was solved in Oct 2017, but no explanation was provided as to how to fix it. Can someone explain how to disable the 'Apply these filters' dialog and have the filters applied without needing to click… --- ## [Value for monthofyear must be in range](https://discuss.elastic.co/t/value-for-monthofyear-must-be-in-range/153190)
**Author:** [@messak](https://discuss.elastic.co/u/messak)\ **Replies:** 6\ **Last updated:** [October 19, 2018, 5:19pm UTC](https://discuss.elastic.co/t/value-for-monthofyear-must-be-in-range/153190 "2018-10-19T17:19:30Z")
I have data in elasticsearch and the date format is like: 2017/12/22 12:13:25 when i index this into kibana, it recognizes it as a date, but when i try to visualize anything i get: failed to parse date field \[12/22/20… --- ## [1 of 21 shards failed](https://discuss.elastic.co/t/1-of-21-shards-failed/301259)
**Author:** [@alex\_96](https://discuss.elastic.co/u/alex_96)\ **Replies:** 4\ **Last updated:** [April 1, 2022, 12:42pm UTC](https://discuss.elastic.co/t/1-of-21-shards-failed/301259 "2022-04-01T12:42:55Z")
Hello, today I went to my dashboard and saw such an error "1 of 21 shards failed", looking at the details I saw the following Request: { "aggs": { "2": { "terms": { "field": "agent.name", "or… --- ## [Recommendation for number of master nodes in a large cluster having 250 data nodes](https://discuss.elastic.co/t/recommendation-for-number-of-master-nodes-in-a-large-cluster-having-250-data-nodes/272510)
**Author:** [@Praveen\_Atluri](https://discuss.elastic.co/u/Praveen_Atluri)\ **Replies:** 4\ **Last updated:** [May 10, 2021, 12:15am UTC](https://discuss.elastic.co/t/recommendation-for-number-of-master-nodes-in-a-large-cluster-having-250-data-nodes/272510 "2021-05-10T00:15:20Z")
Hi All, Is there any recommendation for how many master nodes must be there for a large cluster containing 250 data nodes? When we monitor the thread pool of each data node in the cluster, I see some tasks that are re… --- ## [Terms filter not receiving a hit within a function score](https://discuss.elastic.co/t/terms-filter-not-receiving-a-hit-within-a-function-score/240747)
**Author:** [@Stephen\_Kneubuehl](https://discuss.elastic.co/u/Stephen_Kneubuehl)\ **Replies:** 4\ **Last updated:** [July 13, 2020, 2:22am UTC](https://discuss.elastic.co/t/terms-filter-not-receiving-a-hit-within-a-function-score/240747 "2020-07-13T02:22:29Z")
I am relatively new to Elasticsearch and am building a function score query to find vehicles that may be of interest to our users. We have a field called "make" which holds the brand of the car manufacturer such as "BMW"… --- ## [Kibana 6.4.1 - Canvas plugin installation error](https://discuss.elastic.co/t/kibana-6-4-1-canvas-plugin-installation-error/155402)
**Author:** [@YanekR](https://discuss.elastic.co/u/YanekR)\ **Replies:** 4\ **Last updated:** [November 13, 2018, 3:40pm UTC](https://discuss.elastic.co/t/kibana-6-4-1-canvas-plugin-installation-error/155402 "2018-11-13T15:40:27Z")
Hi All, Could you please help me with an error which pop up during installation of Canvas plugin in Kibana 6.4.1? On Optimizing and caching browser bundles I am getting: "Plugin installation was unsuccessful due to er… --- ## [8GB memory usage of browser - freezing](https://discuss.elastic.co/t/8gb-memory-usage-of-browser-freezing/72892)
**Author:** [@wolframklug](https://discuss.elastic.co/u/wolframklug)\ **Replies:** 4\ **Last updated:** [January 26, 2017, 5:06pm UTC](https://discuss.elastic.co/t/8gb-memory-usage-of-browser-freezing/72892 "2017-01-26T17:06:51Z")
Kibana version: 5.1.2 Elasticsearch version: 5.1.2 Server OS version: Ubuntu AWS Browser version:FFox 50.1 Browser OS version: MAC OS SIERRA 10.12 Steps to reproduce: This visual: { "title": "flows\_Bkup2", "type… --- ## [Logstash closes after reading ES index](https://discuss.elastic.co/t/logstash-closes-after-reading-es-index/24114)
**Author:** [@vilas](https://discuss.elastic.co/u/vilas)\ **Replies:** 4\ **Last updated:** [June 24, 2015, 6:53pm UTC](https://discuss.elastic.co/t/logstash-closes-after-reading-es-index/24114 "2015-06-24T18:53:46Z")
Hi, I am trying to read an ES index. But I observe that Logstash closes immediately after reading the ES index. But I would like Logstash to wait for new records into ES. Is it the common behavior with ES as input to L… --- ## [Enable groovy scripting in Elasticsearch](https://discuss.elastic.co/t/enable-groovy-scripting-in-elasticsearch/59420)
**Author:** [@ankureck](https://discuss.elastic.co/u/ankureck)\ **Replies:** 0\ **Last updated:** [August 31, 2016, 11:54am UTC](https://discuss.elastic.co/t/enable-groovy-scripting-in-elasticsearch/59420 "2016-08-31T11:54:23Z")
I am trying to enable groovy scripts on my elastic search. I have updated my elasticsearch.yml file with following lines script.inline: true script.groovy.sandbox.enabled: true script.inline: on script.indexed: on sc… --- ## [How to minimize the reindexing time](https://discuss.elastic.co/t/how-to-minimize-the-reindexing-time/285739)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 7\ **Last updated:** [October 3, 2021, 11:31am UTC](https://discuss.elastic.co/t/how-to-minimize-the-reindexing-time/285739 "2021-10-03T11:31:42Z")
Using ELK 7.13 cluster 3 master 6 data nodes and 2 coordinate nodes Master node configuration Heap Size: 8gb Storage: 50gb(ssd) CPU: 4 Data node configuration Heap Size: 28gb Storage: 1tb(ssd) CPU: 8 Coordinate no… --- ## [Elasticsearch terms aggregation with sub query](https://discuss.elastic.co/t/elasticsearch-terms-aggregation-with-sub-query/201165)
**Author:** [@Jayabal\_K](https://discuss.elastic.co/u/Jayabal_K)\ **Replies:** 1\ **Last updated:** [September 27, 2019, 3:19pm UTC](https://discuss.elastic.co/t/elasticsearch-terms-aggregation-with-sub-query/201165 "2019-09-27T15:19:13Z")
I need to aggregate the docs (term aggregation), based on the another field vale (atleast one occurrence). For example, I using the api traffic data, I need to get the top api list based on the total doc\_count, who has … --- ## [Configuration file to read xls](https://discuss.elastic.co/t/configuration-file-to-read-xls/117715)
**Author:** [@Errors](https://discuss.elastic.co/u/Errors)\ **Replies:** 1\ **Last updated:** [January 31, 2018, 7:01am UTC](https://discuss.elastic.co/t/configuration-file-to-read-xls/117715 "2018-01-31T07:01:26Z")
I've downloaded and installed the logstash-input-xls plugin. I'm wondering if there's now some sort of guide/documentation or something to follow which shows how to create a config file to read in xls and push it to elas… --- ## [Elasticsearch.Net deserialize to my type](https://discuss.elastic.co/t/elasticsearch-net-deserialize-to-my-type/97418)
**Author:** [@Karolinebryn](https://discuss.elastic.co/u/Karolinebryn)\ **Replies:** 1\ **Last updated:** [August 23, 2017, 10:27am UTC](https://discuss.elastic.co/t/elasticsearch-net-deserialize-to-my-type/97418 "2017-08-23T10:27:12Z")
According to the documentation on Elasticsearch.Net you can provide your own type that Elasticsearch.Net will deserialize into, like this: ElasticsearchLowLevelClient.Index\(indexName, type, id, obj); Whi… --- ## [Logstash on AIX operating system](https://discuss.elastic.co/t/logstash-on-aix-operating-system/41162)
**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\ **Replies:** 1\ **Last updated:** [February 8, 2016, 7:45am UTC](https://discuss.elastic.co/t/logstash-on-aix-operating-system/41162 "2016-02-08T07:45:16Z")
Hi, AS per my understating Logstash / beats does not support any AIX environment. is it correct ? Thanks, Navneet --- ## [Enhance the User Experience page with a search/filter bar similar to the one in APM](https://discuss.elastic.co/t/enhance-the-user-experience-page-with-a-search-filter-bar-similar-to-the-one-in-apm/289501)
**Author:** [@Kohlman](https://discuss.elastic.co/u/Kohlman)\ **Replies:** 5\ **Last updated:** [November 24, 2021, 1:47pm UTC](https://discuss.elastic.co/t/enhance-the-user-experience-page-with-a-search-filter-bar-similar-to-the-one-in-apm/289501 "2021-11-24T13:47:18Z")
We really like the User Experience page you have created. However, there are times where we wish we could filter the data. For example, by user.name or labels.some\_field. If we had a similar search bar to what's in APM i… --- ## [Import Saved Objects from 6.8.4 to 7.6.1](https://discuss.elastic.co/t/import-saved-objects-from-6-8-4-to-7-6-1/236833)
**Author:** [@Saravana37](https://discuss.elastic.co/u/Saravana37)\ **Replies:** 5\ **Last updated:** [June 15, 2020, 1:48pm UTC](https://discuss.elastic.co/t/import-saved-objects-from-6-8-4-to-7-6-1/236833 "2020-06-15T13:48:28Z")
Hello All , I am trying to import the saved objects from 6.8.4 to 7.6.1 . When i try to import the .json file of saved objects , it gives me error . So i see it requires NDJSON format. Kindly help out please. Support f… --- ## [Auditbeat triggers seccomp violations?](https://discuss.elastic.co/t/auditbeat-triggers-seccomp-violations/185700)
**Author:** [@arlen](https://discuss.elastic.co/u/arlen)\ **Replies:** 5\ **Last updated:** [June 17, 2019, 7:10pm UTC](https://discuss.elastic.co/t/auditbeat-triggers-seccomp-violations/185700 "2019-06-17T19:10:03Z")
So I fired up auditbeat (6.8) as a test on one of my servers to see how it does at collecting audit events. Imagine my surprise when I find over 1/3 of the audit events (runs to about 1400/hour) have auditbeat itself lis… --- ## [Converting Location field into lat and long](https://discuss.elastic.co/t/converting-location-field-into-lat-and-long/152776)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 5\ **Last updated:** [October 22, 2018, 10:11am UTC](https://discuss.elastic.co/t/converting-location-field-into-lat-and-long/152776 "2018-10-22T10:11:00Z")
Hi All, We have a field name "Location" which is getting into elasticsearch as a string value, how can i split this location field into latitude and longitude to visualize it as a coordinate map. Is there any way to ac… --- ## [Percentage on E-mail plugin](https://discuss.elastic.co/t/percentage-on-e-mail-plugin/58026)
**Author:** [@rafaellamuniz](https://discuss.elastic.co/u/rafaellamuniz)\ **Replies:** 5\ **Last updated:** [August 16, 2016, 6:40pm UTC](https://discuss.elastic.co/t/percentage-on-e-mail-plugin/58026 "2016-08-16T18:40:36Z")
Hello, I would like to receive the variable "mem.used\_p" from Topbeat as a percentage (something like 99%), like is showed on Kibana. However, on the e-mail I receive on decimal format: 0.99 Somebody knows how to con… --- ## [ELK No Output](https://discuss.elastic.co/t/elk-no-output/46019)
**Author:** [@johnslippers](https://discuss.elastic.co/u/johnslippers)\ **Replies:** 5\ **Last updated:** [April 1, 2016, 1:45pm UTC](https://discuss.elastic.co/t/elk-no-output/46019 "2016-04-01T13:45:07Z")
Hi, I really hope somebody can help me. I have installed ELK on CentOS 6.5 and even after reinstalling onto another box using a different howto, I still can't get Logstash to send me any output. I am supposed to get… --- ## [Need help with an aggregation](https://discuss.elastic.co/t/need-help-with-an-aggregation/28101)
**Author:** [@Jan\_van\_Vlimmeren](https://discuss.elastic.co/u/Jan_van_Vlimmeren)\ **Replies:** 5\ **Last updated:** [August 26, 2015, 1:04pm UTC](https://discuss.elastic.co/t/need-help-with-an-aggregation/28101 "2015-08-26T13:04:56Z")
I already spent way too much time on this. I have this aggregation that I can't get to work like it should. I have a ton of documents with a structure like this (I've ommited some of the parts that aren't relevant for… --- ## [High disc utilization](https://discuss.elastic.co/t/high-disc-utilization/7668)
**Author:** [@Eugene\_Strokin](https://discuss.elastic.co/u/Eugene_Strokin)\ **Replies:** 5\ **Last updated:** [May 15, 2012, 2:23am UTC](https://discuss.elastic.co/t/high-disc-utilization/7668 "2012-05-15T02:23:24Z")
Hello, I have constant, close to 100%, disc utilization on server which is running ElasticSearch. What could be done to improve this? Thank you --- ## [Is it possible to create an alert in case an Elastic Agent goes offline?](https://discuss.elastic.co/t/is-it-possible-to-create-an-alert-in-case-an-elastic-agent-goes-offline/346878)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 2\ **Last updated:** [November 11, 2023, 12:55am UTC](https://discuss.elastic.co/t/is-it-possible-to-create-an-alert-in-case-an-elastic-agent-goes-offline/346878 "2023-11-11T00:55:03Z")
I have a few Elastic-Agents working on metric collection but we got a problem for when one of them goes down. I know so far that there's an alerting option for metrics/logs threshold but I'm not sure about how to set an … --- ## [Elasticsearch and Kibana 8.3.3 basic setup not working in Azure Kubernetes](https://discuss.elastic.co/t/elasticsearch-and-kibana-8-3-3-basic-setup-not-working-in-azure-kubernetes/312032)
**Author:** [@levitoh123](https://discuss.elastic.co/u/levitoh123)\ **Replies:** 2\ **Last updated:** [August 24, 2022, 12:48pm UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-8-3-3-basic-setup-not-working-in-azure-kubernetes/312032 "2022-08-24T12:48:53Z")
Hi, I have installed ECK with the CRDS 2.3.0 (from the main documentation) and proceeded to install elasticsearch and kibana via the manifests provided in the documentation. After deploying the Kibana logs, I am seeing … --- ## [Error: Cannot allocate memory](https://discuss.elastic.co/t/error-cannot-allocate-memory/257423)
**Author:** [@manunc](https://discuss.elastic.co/u/manunc)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 11:06pm UTC](https://discuss.elastic.co/t/error-cannot-allocate-memory/257423 "2020-12-02T23:06:23Z")
Hello, I am faced to an issue since a long time without finding the solution. I have a dedicated server with 12 Gb RAM but I can only allocate to Logstash 2Gb otherwise the process fall into an error. It seems linked t… --- ## [Kibana - Incorrect Count # with Bucket Aggregation "Terms"](https://discuss.elastic.co/t/kibana-incorrect-count-with-bucket-aggregation-terms/192895)
**Author:** [@RattleZ](https://discuss.elastic.co/u/RattleZ)\ **Replies:** 2\ **Last updated:** [July 31, 2019, 12:28am UTC](https://discuss.elastic.co/t/kibana-incorrect-count-with-bucket-aggregation-terms/192895 "2019-07-31T00:28:03Z")
Hi, I'd like to create a Visualisation for our Sales team, to easily show what the top 3 sold items are. I have come across a strange behaviour when using a simple Visualisation where I would like to count the top 3 Te… --- ## [Kibana 6.2 reporting failing due maximum number of retries](https://discuss.elastic.co/t/kibana-6-2-reporting-failing-due-maximum-number-of-retries/121272)
**Author:** [@Jay.Dhillon](https://discuss.elastic.co/u/Jay.Dhillon)\ **Replies:** 2\ **Last updated:** [February 23, 2018, 8:38pm UTC](https://discuss.elastic.co/t/kibana-6-2-reporting-failing-due-maximum-number-of-retries/121272 "2018-02-23T20:38:32Z")
Everytime there is more than 50+ events found by watcher the email alert fails due to Kibana PDF report. Receiving error: Watch\[Report15m\] reporting\[report.pdf\]: Aborting due to maximum number of retries hit \[6\]" Also… --- ## [Timelion es() metric: field data is disabled on text fields](https://discuss.elastic.co/t/timelion-es-metric-field-data-is-disabled-on-text-fields/107458)
**Author:** [@lidavid](https://discuss.elastic.co/u/lidavid)\ **Replies:** 2\ **Last updated:** [November 14, 2017, 8:03pm UTC](https://discuss.elastic.co/t/timelion-es-metric-field-data-is-disabled-on-text-fields/107458 "2017-11-14T20:03:47Z")
Hey, I have log file that i am trying to index and plot the data with timelion. When i am trying to do a query with es() and use the metric field on one of my data fields i get this error: I dont understand how sho… --- ## [Lumberjack input/output plugin AWS LoadBalancer](https://discuss.elastic.co/t/lumberjack-input-output-plugin-aws-loadbalancer/107015)
**Author:** [@Jerry1](https://discuss.elastic.co/u/Jerry1)\ **Replies:** 2\ **Last updated:** [November 9, 2017, 2:50pm UTC](https://discuss.elastic.co/t/lumberjack-input-output-plugin-aws-loadbalancer/107015 "2017-11-09T14:50:48Z")
Hi, I have running two logstash server on different kubernetes cluster with the lumberjack input/output plugin. My config. Client: output { lumberjack { hosts =\> \[ "XXXXXXXXXXXXXXXXXXXXXXXXXXXX-CCCCCCCCC.us-east-1.… --- ## [Logstash + historical import + oddball time stamps](https://discuss.elastic.co/t/logstash-historical-import-oddball-time-stamps/100087)
**Author:** [@mcdowej](https://discuss.elastic.co/u/mcdowej)\ **Replies:** 2\ **Last updated:** [September 14, 2017, 5:39am UTC](https://discuss.elastic.co/t/logstash-historical-import-oddball-time-stamps/100087 "2017-09-14T05:39:18Z")
I am experiencing challenges around getting any of my logs files to use the timestamp in the log file rather than the time it was sucked in. I have been googling, reading and even explored the "Your topic similar to..."… --- ## [CVE-2022-1471 Still Applicable in latest 7.\* and 8. \*, not listed on Security Issues Page](https://discuss.elastic.co/t/cve-2022-1471-still-applicable-in-latest-7-and-8-not-listed-on-security-issues-page/342965)
**Author:** [@aduerr](https://discuss.elastic.co/u/aduerr)\ **Replies:** 3\ **Last updated:** [September 14, 2023, 12:35pm UTC](https://discuss.elastic.co/t/cve-2022-1471-still-applicable-in-latest-7-and-8-not-listed-on-security-issues-page/342965 "2023-09-14T12:35:53Z")
The latest versions of 7.\* and 8.\* in the Elasticsearch image still contain CRITICAL security vulnerability for CVE-2022-1471, snakeyaml. When is this going to be addressed? Are there suggested workarounds or mitigatio… --- ## [Logstash retries 404 instead of dropping - output stuck](https://discuss.elastic.co/t/logstash-retries-404-instead-of-dropping-output-stuck/319741)
**Author:** [@Harm](https://discuss.elastic.co/u/Harm)\ **Replies:** 3\ **Last updated:** [November 24, 2022, 7:08pm UTC](https://discuss.elastic.co/t/logstash-retries-404-instead-of-dropping-output-stuck/319741 "2022-11-24T19:08:08Z")
Hi! Today I had a situation where one of our Elasticsearch outputs in logstash got unavailable. It replied with a 404. Based upon the documentation logstash should give a warning and drop the event. We have no DLQ confi… --- ## [Illegal\_argument\_exception: index.lifecycle.rollover\_alias is empty or not defined](https://discuss.elastic.co/t/illegal-argument-exception-index-lifecycle-rollover-alias-is-empty-or-not-defined/293933)
**Author:** [@dev9](https://discuss.elastic.co/u/dev9)\ **Replies:** 0\ **Last updated:** [January 10, 2022, 6:33pm UTC](https://discuss.elastic.co/t/illegal-argument-exception-index-lifecycle-rollover-alias-is-empty-or-not-defined/293933 "2022-01-10T18:33:57Z")
Hi, I noticed this error last week on our elastic illegal\_argument\_exception: setting \[index.lifecycle.rollover\_alias\] for index \[test-2022.01.07\] is empty or not defined I did some research and found this article on t… --- ## [Kibana dashboard DSL aggregations problem](https://discuss.elastic.co/t/kibana-dashboard-dsl-aggregations-problem/278014)
**Author:** [@harryb](https://discuss.elastic.co/u/harryb)\ **Replies:** 3\ **Last updated:** [July 8, 2021, 7:35am UTC](https://discuss.elastic.co/t/kibana-dashboard-dsl-aggregations-problem/278014 "2021-07-08T07:35:35Z")
I am trying to filter an Elastic index to only return one record per doc\_id and which I want to base the visualization on. If I use this in a Kibana dashboard visualization filter I get an error: '\[size\] query malformed,… --- ## [Machine learning permissions failure \[Kibana Security Menu\]](https://discuss.elastic.co/t/machine-learning-permissions-failure-kibana-security-menu/264475)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 3\ **Last updated:** [February 17, 2021, 8:44pm UTC](https://discuss.elastic.co/t/machine-learning-permissions-failure-kibana-security-menu/264475 "2021-02-17T20:44:51Z")
Hi there, Clean install using apt repo and as soon as I try to access the security overview, it display this message: Machine learning permissions failure Not Found HttpFetchError@https://192.168.0.1:5601/37897/bundle… --- ## [Creating watcher on windows event id 4625 with multiple conditions](https://discuss.elastic.co/t/creating-watcher-on-windows-event-id-4625-with-multiple-conditions/231851)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 3\ **Last updated:** [May 12, 2020, 7:11am UTC](https://discuss.elastic.co/t/creating-watcher-on-windows-event-id-4625-with-multiple-conditions/231851 "2020-05-12T07:11:26Z")
Hi, I want to create alert for Windows Security Event Log and when the event matches EventID (custom) is any of 4625 and when at least 3 events are seen with the same Username in 24 hour(s). Here is my watcher. { … --- ## [Received ban for the parent (Ban messages and searches failing)](https://discuss.elastic.co/t/received-ban-for-the-parent-ban-messages-and-searches-failing/230632)
**Author:** [@rpialum](https://discuss.elastic.co/u/rpialum)\ **Replies:** 0\ **Last updated:** [April 30, 2020, 9:05pm UTC](https://discuss.elastic.co/t/received-ban-for-the-parent-ban-messages-and-searches-failing/230632 "2020-04-30T21:05:59Z")
We're experiencing the following DEBUG & WARN log messages and experiencing an issue where sporadically our searches appear to not be returning when these messages are seen. They all seem to begin with the "Received ban… --- ## [How to get the cluster ID to setup nginx proxy for iframe authentication](https://discuss.elastic.co/t/how-to-get-the-cluster-id-to-setup-nginx-proxy-for-iframe-authentication/224914)
**Author:** [@seppar](https://discuss.elastic.co/u/seppar)\ **Replies:** 3\ **Last updated:** [March 25, 2020, 5:31pm UTC](https://discuss.elastic.co/t/how-to-get-the-cluster-id-to-setup-nginx-proxy-for-iframe-authentication/224914 "2020-03-25T17:31:33Z")
I'm trying to set up an Nginx proxy to log in so that my iframes are already logged in. I'm not sure how to get access to cluster ID --- ## [High number of refresh threads](https://discuss.elastic.co/t/high-number-of-refresh-threads/216135)
**Author:** [@Christophe\_Journel](https://discuss.elastic.co/u/Christophe_Journel)\ **Replies:** 3\ **Last updated:** [January 27, 2020, 2:11pm UTC](https://discuss.elastic.co/t/high-number-of-refresh-threads/216135 "2020-01-27T14:11:02Z")
Hello, Here is the result of GET /\_cat/thread\_pool/refresh/?v node\_name name active queue rejected node-5203 refresh 0 0 0 node-5202 refresh 10 13676 0 node-5206 refresh 0 … --- ## [Need help with Logstash](https://discuss.elastic.co/t/need-help-with-logstash/61761)
**Author:** [@nareshsife](https://discuss.elastic.co/u/nareshsife)\ **Replies:** 3\ **Last updated:** [September 29, 2016, 12:18pm UTC](https://discuss.elastic.co/t/need-help-with-logstash/61761 "2016-09-29T12:18:22Z")
I am new to Logstash, i dont have a background of building a logstash before. I built Suricata (IDS) and on the same machine i built logstash. I was successful in installing it and bringing up the webpage. However, i am … [Previous page](https://discuss.elastic.co/top.md?page=1326&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1328&per_page=50&period=all)