# Top **URL:** https://discuss.elastic.co/top.md?page=1347&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1348 --- ## [Activate/Deactivate Watchers through Jenikins](https://discuss.elastic.co/t/activate-deactivate-watchers-through-jenikins/146531)
**Author:** [@TheCodingKnight](https://discuss.elastic.co/u/TheCodingKnight)\ **Replies:** 4\ **Last updated:** [September 5, 2018, 1:32pm UTC](https://discuss.elastic.co/t/activate-deactivate-watchers-through-jenikins/146531 "2018-09-05T13:32:54Z")
I have a number of watchers configured in Elastic which I would like to activate/deactivate in one go. I'm planning to create a Jenkins job and use the below APIs. PUT \_xpack/watcher/watch/watcherid/\_deactivate PUT \_xp… --- ## [Elasticsearch index creation and searching on japanese data](https://discuss.elastic.co/t/elasticsearch-index-creation-and-searching-on-japanese-data/22404)
**Author:** [@K\_Samanth\_Kumar\_Redd](https://discuss.elastic.co/u/K_Samanth_Kumar_Redd)\ **Replies:** 4\ **Last updated:** [February 26, 2015, 12:20pm UTC](https://discuss.elastic.co/t/elasticsearch-index-creation-and-searching-on-japanese-data/22404 "2015-02-26T12:20:39Z")
Hi, I am using elasticsearch for last 6 months. I am very happy to work with elasticsearch till now. But I have the following requirement: I have the Japanese data. I want to create index on Japanese data. And … --- ## [IPv6 endpoint for S3 repository](https://discuss.elastic.co/t/ipv6-endpoint-for-s3-repository/259164)
**Author:** [@NominaSumpta](https://discuss.elastic.co/u/NominaSumpta)\ **Replies:** 5\ **Last updated:** [December 20, 2020, 10:17am UTC](https://discuss.elastic.co/t/ipv6-endpoint-for-s3-repository/259164 "2020-12-20T10:17:53Z")
How do I use an IPv6 endpoint for an S3 repository? Using a hostname that resolves to an IPv6 address and an IPv4 address results in: { "error": { "root\_cause": \[ { "type": "repository\_verification\_… --- ## [Issue with my logstash conf file](https://discuss.elastic.co/t/issue-with-my-logstash-conf-file/118983)
**Author:** [@rattisyam](https://discuss.elastic.co/u/rattisyam)\ **Replies:** 5\ **Last updated:** [February 8, 2018, 9:39am UTC](https://discuss.elastic.co/t/issue-with-my-logstash-conf-file/118983 "2018-02-08T09:39:59Z")
Hi Team, I am very new to ELK stack. I am trying to parse jenkins XML (buil.xml) logs through xml parser. but i could not make it. could you please help me on this. below is my conf file: input { file { path =\> "… --- ## [Добавление URL Repositoty](https://discuss.elastic.co/t/url-repositoty/88405)
**Author:** [@Lid](https://discuss.elastic.co/u/Lid)\ **Replies:** 5\ **Last updated:** [June 7, 2017, 1:24pm UTC](https://discuss.elastic.co/t/url-repositoty/88405 "2017-06-07T13:24:52Z")
Доброго времени суток. Пытаюсь подключить URL репозитарий. # Path to snapshot files: # path.repo: \["/home/elasticsearch/backups", "/home/elasticsearch/longterm\_backups"\] # # URl repo # repositories.url.allowed\_urls: \[… --- ## [How to write AND Query in Elasticsearch?](https://discuss.elastic.co/t/how-to-write-and-query-in-elasticsearch/50612)
**Author:** [@Sigehere1](https://discuss.elastic.co/u/Sigehere1)\ **Replies:** 5\ **Last updated:** [May 21, 2016, 7:21pm UTC](https://discuss.elastic.co/t/how-to-write-and-query-in-elasticsearch/50612 "2016-05-21T19:21:58Z")
Document 1 { "userid" : 1234, "username" : "Sigehere Smith", "type" : "student", "department" : { "deptname" : "Computer Science", "deptpath" : \["First" , "Second… --- ## [In docker(docker-compose), I got some errors](https://discuss.elastic.co/t/in-docker-docker-compose-i-got-some-errors/307489)
**Author:** [@StartMenu](https://discuss.elastic.co/u/StartMenu)\ **Replies:** 2\ **Last updated:** [June 20, 2022, 9:22am UTC](https://discuss.elastic.co/t/in-docker-docker-compose-i-got-some-errors/307489 "2022-06-20T09:22:36Z")
I used this files to up dockers I changed log4j2.properties file for less logs to watch clearly : rootLogger.level = info to rootLogger.level = warn then ,mounted it into docker container: -./Elasticsearch/config… --- ## [Stuck in Kibana home page](https://discuss.elastic.co/t/stuck-in-kibana-home-page/253286)
**Author:** [@Cad](https://discuss.elastic.co/u/Cad)\ **Replies:** 2\ **Last updated:** [November 4, 2020, 8:43am UTC](https://discuss.elastic.co/t/stuck-in-kibana-home-page/253286 "2020-11-04T08:43:18Z")
Hi, I want to install ELK on debian 9. I performed my installations from the elasticsearch-7.9.2-amd64.deb, kibana-7.9.2-amd64.deb and logstash-7.9.2.deb package. I don't see any errors when starting Elasticsearch and… --- ## [Displaying weeks number as X labels](https://discuss.elastic.co/t/displaying-weeks-number-as-x-labels/245606)
**Author:** [@BenoitSERRA](https://discuss.elastic.co/u/BenoitSERRA)\ **Replies:** 2\ **Last updated:** [August 19, 2020, 3:10pm UTC](https://discuss.elastic.co/t/displaying-weeks-number-as-x-labels/245606 "2020-08-19T15:10:57Z")
Hello, we are currently in a process of using the ELK stack to create our monthly dashboards for the management. previously, we were using custom Excel workbooks with specials queries. And those workbooks were agregati… --- ## [Unable to create new document/event in logstash Ruby filter using yield](https://discuss.elastic.co/t/unable-to-create-new-document-event-in-logstash-ruby-filter-using-yield/236995)
**Author:** [@Nani\_20](https://discuss.elastic.co/u/Nani_20)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 6:38pm UTC](https://discuss.elastic.co/t/unable-to-create-new-document-event-in-logstash-ruby-filter-using-yield/236995 "2020-06-16T18:38:00Z")
I am trying to calculate elapsed time between the first and last line of a file using a Ruby filter and push the field in a new event using the below Ruby filter ruby { init =\> "@save\_the\_path = 'none'" code =\> " … --- ## [Elastic does not respond with many security index patterns](https://discuss.elastic.co/t/elastic-does-not-respond-with-many-security-index-patterns/215376)
**Author:** [@jpozorio](https://discuss.elastic.co/u/jpozorio)\ **Replies:** 2\ **Last updated:** [January 17, 2020, 2:41pm UTC](https://discuss.elastic.co/t/elastic-does-not-respond-with-many-security-index-patterns/215376 "2020-01-17T14:41:44Z")
Hi, My custer has 770 index and when I try to open a Kibana dashboard with one user who can access more then 10 patterns (each pattern usually "point" to 9 index), the elasticsearch throws the below message. I google a… --- ## [Auto index rollover not happening](https://discuss.elastic.co/t/auto-index-rollover-not-happening/206381)
**Author:** [@Heatzone87](https://discuss.elastic.co/u/Heatzone87)\ **Replies:** 2\ **Last updated:** [November 18, 2019, 5:01pm UTC](https://discuss.elastic.co/t/auto-index-rollover-not-happening/206381 "2019-11-18T17:01:18Z")
Hey, I would like to auto rollover my ES indexes every daily due the fact where it is still a bit unsure how the retention policy is going to look like. So i set it up like this: The problem im having is that it is… --- ## [Keystore wrong location in version 7.2.0](https://discuss.elastic.co/t/keystore-wrong-location-in-version-7-2-0/190603)
**Author:** [@zpraxis](https://discuss.elastic.co/u/zpraxis)\ **Replies:** 2\ **Last updated:** [July 16, 2019, 4:40pm UTC](https://discuss.elastic.co/t/keystore-wrong-location-in-version-7-2-0/190603 "2019-07-16T16:40:56Z")
Documentation says: Filebeat creates the keystore in the directory defined by the path.config configuration setting. However, keystore is created in /path\_where\_tar\_was\_extracted/filebeat-7.2.0-linux-x86\_64/data/ . … --- ## [Clone indexes](https://discuss.elastic.co/t/clone-indexes/187521)
**Author:** [@joao.nzuzi](https://discuss.elastic.co/u/joao.nzuzi)\ **Replies:** 2\ **Last updated:** [June 27, 2019, 7:27am UTC](https://discuss.elastic.co/t/clone-indexes/187521 "2019-06-27T07:27:01Z")
Hello guys. Is there a way to clone indexes from one server to another? --- ## [No Output Until Verbose](https://discuss.elastic.co/t/no-output-until-verbose/85272)
**Author:** [@johnslippers](https://discuss.elastic.co/u/johnslippers)\ **Replies:** 2\ **Last updated:** [May 11, 2017, 8:28am UTC](https://discuss.elastic.co/t/no-output-until-verbose/85272 "2017-05-11T08:28:24Z")
Hi guys, This is a very strange one. I am unable to get logstash to output to file by starting logstash as normal: start logstash The strange thing is, when I start logstash in verbose mode it works: /usr/share/l… --- ## [Problem updating settings: maxThreadCount (= 8) should be \<= maxMergeCount (= 6)](https://discuss.elastic.co/t/problem-updating-settings-maxthreadcount-8-should-be-maxmergecount-6/76279)
**Author:** [@jbbarth](https://discuss.elastic.co/u/jbbarth)\ **Replies:** 2\ **Last updated:** [February 27, 2017, 11:42pm UTC](https://discuss.elastic.co/t/problem-updating-settings-maxthreadcount-8-should-be-maxmergecount-6/76279 "2017-02-27T23:42:33Z")
Hi there, (let me know if I file a bug on Github directly) We're in the process of upgrading to ES5 (5.0.2 in our case). We have reindexed a lot of data already. I wanted to try settings I saw in a blog post from a… --- ## [Incorrect timestamp](https://discuss.elastic.co/t/incorrect-timestamp/62585)
**Author:** [@Mormaii](https://discuss.elastic.co/u/Mormaii)\ **Replies:** 2\ **Last updated:** [October 10, 2016, 7:59pm UTC](https://discuss.elastic.co/t/incorrect-timestamp/62585 "2016-10-10T19:59:03Z")
I'm processing data with my logstash (which doesn't have any timestamp modifications or nothing related to it) and then feeding them to my elasticsearch and using Kibana to visualize the data. The problem is that since … --- ## [Problem in using filter-cipher](https://discuss.elastic.co/t/problem-in-using-filter-cipher/51553)
**Author:** [@sanju1323](https://discuss.elastic.co/u/sanju1323)\ **Replies:** 2\ **Last updated:** [June 2, 2016, 10:36am UTC](https://discuss.elastic.co/t/problem-in-using-filter-cipher/51553 "2016-06-02T10:36:32Z")
Hi, I'm working on logstash-filter-cipher to encode and decode the data. But nothing is coming up. I have an "ID" field and I want to encode it. The code that I was using is as follows. input { elasticsearch { … --- ## [Badly corrupted index](https://discuss.elastic.co/t/badly-corrupted-index/21476)
**Author:** [@jmkgreen](https://discuss.elastic.co/u/jmkgreen)\ **Replies:** 1\ **Last updated:** [October 5, 2016, 1:08pm UTC](https://discuss.elastic.co/t/badly-corrupted-index/21476 "2016-10-05T13:08:31Z")
Our storage server threw it's toys of the pram. We got it back, and everything bar ElasticSearch is singing sweetly again. On start, we get an IndexFormatTooNewException. Not many get that one, but CheckIndex appear… --- ## [Grok and curly brackets](https://discuss.elastic.co/t/grok-and-curly-brackets/273491)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 10:36am UTC](https://discuss.elastic.co/t/grok-and-curly-brackets/273491 "2021-05-20T10:36:25Z")
Dear team, I have a grok filter which needs to parse following part of line from the Haproxy logs: {\*/\*||en-US|10.12.132.200:30012||||1997-04-09-17.02.03.246664|pclient\_us} Now how do I remove the brackets from beginn… --- ## [Disable Snapshots Elastic](https://discuss.elastic.co/t/disable-snapshots-elastic/109080)
**Author:** [@handyc](https://discuss.elastic.co/u/handyc)\ **Replies:** 1\ **Last updated:** [November 24, 2017, 8:28pm UTC](https://discuss.elastic.co/t/disable-snapshots-elastic/109080 "2017-11-24T20:28:01Z")
Hi !!! I need to stop snapshots on my cluster asap, can you pleas help me? My cluster ID is ca8979, i do understand the risk of that. Thanks !!! --- ## [Filebeat stops sending logs, but with no errors, service is running](https://discuss.elastic.co/t/filebeat-stops-sending-logs-but-with-no-errors-service-is-running/82765)
**Author:** [@rswestmoreland](https://discuss.elastic.co/u/rswestmoreland)\ **Replies:** 1\ **Last updated:** [April 20, 2017, 9:45am UTC](https://discuss.elastic.co/t/filebeat-stops-sending-logs-but-with-no-errors-service-is-running/82765 "2017-04-20T09:45:34Z")
Ran into a weird issue. I have Filebeat picking up logs on a centos7 vm and sending them over to instances of Graylog using the Logstash output. I having Metricbeat and Packetbeat saving to disk, so Filebeat would pic… --- ## [Some Grok filter explanation needed](https://discuss.elastic.co/t/some-grok-filter-explanation-needed/64892)
**Author:** [@sancroth](https://discuss.elastic.co/u/sancroth)\ **Replies:** 1\ **Last updated:** [November 6, 2016, 10:21am UTC](https://discuss.elastic.co/t/some-grok-filter-explanation-needed/64892 "2016-11-06T10:21:35Z")
Ok a colleague of mine made a certain grok filter to create a few fields from suricata logs. An example of an a log input would be this : Nov 3 15:20:33 192.168.1.1 suricata\[42959\]: \[1:2200029:1\] SURICATA ICMPv6 unkno… --- ## [Logstash runner error](https://discuss.elastic.co/t/logstash-runner-error/297378)
**Author:** [@Bigboy0706](https://discuss.elastic.co/u/Bigboy0706)\ **Replies:** 3\ **Last updated:** [February 16, 2022, 3:41pm UTC](https://discuss.elastic.co/t/logstash-runner-error/297378 "2022-02-16T15:41:43Z")
\[2022-02-16T14:02:47,966\]\[INFO \]\[logstash.runner \] Log4j configuration path used is: /etc/logstash/log4j2.properties \[2022-02-16T14:02:47,980\]\[INFO \]\[logstash.runner \] Starting Logstash {"logstash.versi… --- ## [Ruby pipeline permission denied sending to logstash](https://discuss.elastic.co/t/ruby-pipeline-permission-denied-sending-to-logstash/272584)
**Author:** [@Stan3005](https://discuss.elastic.co/u/Stan3005)\ **Replies:** 3\ **Last updated:** [May 17, 2021, 9:49am UTC](https://discuss.elastic.co/t/ruby-pipeline-permission-denied-sending-to-logstash/272584 "2021-05-17T09:49:27Z")
Hi, So I've set up an ELK stack. First time setting one up but installed elastic, kibana and logstash. When I go to localhost:5601 it takes me to the elastic dashboard. The problem I'm having is when I'm trying to sen… --- ## [Csv Column -\> Splitstring array and -\> Nested Object Problem](https://discuss.elastic.co/t/csv-column-splitstring-array-and-nested-object-problem/237609)
**Author:** [@Bender](https://discuss.elastic.co/u/Bender)\ **Replies:** 3\ **Last updated:** [June 24, 2020, 9:18am UTC](https://discuss.elastic.co/t/csv-column-splitstring-array-and-nested-object-problem/237609 "2020-06-24T09:18:44Z")
Dear Community, iam very new in the logstash and Ruby Environment and i have task that i have to solve. Input is a CSV file and on Column has a String with the following content (content length is dynamic but structure… --- ## [Find number of rows/documents inserted by curl command](https://discuss.elastic.co/t/find-number-of-rows-documents-inserted-by-curl-command/167577)
**Author:** [@Bhupendra\_Bagde](https://discuss.elastic.co/u/Bhupendra_Bagde)\ **Replies:** 3\ **Last updated:** [February 12, 2019, 9:42am UTC](https://discuss.elastic.co/t/find-number-of-rows-documents-inserted-by-curl-command/167577 "2019-02-12T09:42:23Z")
Hi , Can anyone please tell hwo to find number of rows/documents inserted by curl command in elastic search. Lets say I have json file with 2k rowcount. I want to verify all 2k rows has been inserted by curl successful… --- ## [Logstash keeps crashing with the same Fatal Error](https://discuss.elastic.co/t/logstash-keeps-crashing-with-the-same-fatal-error/122838)
**Author:** [@whicter](https://discuss.elastic.co/u/whicter)\ **Replies:** 3\ **Last updated:** [March 7, 2018, 7:47pm UTC](https://discuss.elastic.co/t/logstash-keeps-crashing-with-the-same-fatal-error/122838 "2018-03-07T19:47:34Z")
Hello, My logstash keeps crashing with the same reason and I couldn't find the reason. Could someone help? The log is as below: \[2018-03-06T17:44:09,393\]\[FATAL\]\[logstash.runner \] An unexpected error occurred! … --- ## [Run logstash in batch mode + signals?](https://discuss.elastic.co/t/run-logstash-in-batch-mode-signals/120246)
**Author:** [@Jason\_Brooks](https://discuss.elastic.co/u/Jason_Brooks)\ **Replies:** 3\ **Last updated:** [February 19, 2018, 8:02pm UTC](https://discuss.elastic.co/t/run-logstash-in-batch-mode-signals/120246 "2018-02-19T20:02:31Z")
Hello, I have learned how to do some data conversion with logstash. Eventually, I would like to piggyback tasks on to an existing logstash service, but for now I would like to run logstash on a configuration and exit w… --- ## [Multiline syslogs group with the same PID?](https://discuss.elastic.co/t/multiline-syslogs-group-with-the-same-pid/50379)
**Author:** [@Shiekron](https://discuss.elastic.co/u/Shiekron)\ **Replies:** 3\ **Last updated:** [May 19, 2016, 5:05pm UTC](https://discuss.elastic.co/t/multiline-syslogs-group-with-the-same-pid/50379 "2016-05-19T17:05:39Z")
I'm curious on how would you attempt to create a multiline match on just the PID to put it on a single event? I'm currently using this: prospectors: - paths: - /usr/local/log/opensips.log encoding: plain input\_ty… --- ## [Merging Configuration Files](https://discuss.elastic.co/t/merging-configuration-files/39990)
**Author:** [@pcfens](https://discuss.elastic.co/u/pcfens)\ **Replies:** 3\ **Last updated:** [January 25, 2016, 5:25pm UTC](https://discuss.elastic.co/t/merging-configuration-files/39990 "2016-01-25T17:25:24Z")
Is it possible to merge various configuration files and fields (like the input/procs field)? I'd like to distribute a default configuration file to all of my machines with output information, and add additional files … --- ## [Json for Indexing Data in Elastic Search using C#.Net](https://discuss.elastic.co/t/json-for-indexing-data-in-elastic-search-using-c-net/17001)
**Author:** [@Amit\_Tripathi](https://discuss.elastic.co/u/Amit_Tripathi)\ **Replies:** 3\ **Last updated:** [April 15, 2014, 5:28pm UTC](https://discuss.elastic.co/t/json-for-indexing-data-in-elastic-search-using-c-net/17001 "2014-04-15T17:28:45Z")
Dear All, I quite new with in Elastic search, I want Json for Indexing Data in Elastic Search using C#.Net from SQL Server Please help me Out Amit -- You received this message because you are subscribed … --- ## [Data tier problem - New Indices not allocating in data\_hot](https://discuss.elastic.co/t/data-tier-problem-new-indices-not-allocating-in-data-hot/282498)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 3\ **Last updated:** [August 25, 2021, 3:37pm UTC](https://discuss.elastic.co/t/data-tier-problem-new-indices-not-allocating-in-data-hot/282498 "2021-08-25T15:37:30Z")
Hi, I'm (trying) to implement a hot/warm architecture using the concept of data tiers. I have several clusters with a hot/warm/cold architecture working perfectly but the implementation was done based on node.attr. No… --- ## [Default action?](https://discuss.elastic.co/t/default-action/276208)
**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\ **Replies:** 3\ **Last updated:** [June 29, 2021, 11:55pm UTC](https://discuss.elastic.co/t/default-action/276208 "2021-06-29T23:55:55Z")
I think I've brought this up before but is there a way we can have a default action for detection rules please? Manually editing 600 rules is not my cup of tea! --- ## [.NET Client Connection Issue](https://discuss.elastic.co/t/net-client-connection-issue/304830)
**Author:** [@Zee\_Grinch](https://discuss.elastic.co/u/Zee_Grinch)\ **Replies:** 2\ **Last updated:** [May 16, 2022, 3:14pm UTC](https://discuss.elastic.co/t/net-client-connection-issue/304830 "2022-05-16T15:14:17Z")
NEST/Elasticsearch.Net version : 7.17.1 Elasticsearch version : 7.16.2 (standalone instance) .NET runtime version : Framework 4.7.1 Operating system version : Windows 10 ENT (build 19042) Description of the problem i… --- ## [Troubleshooting missing links for some OpenTelemetry services in the APM Service Map](https://discuss.elastic.co/t/troubleshooting-missing-links-for-some-opentelemetry-services-in-the-apm-service-map/302451)
**Author:** [@davemoore](https://discuss.elastic.co/u/davemoore)\ **Replies:** 2\ **Last updated:** [April 18, 2022, 3:32pm UTC](https://discuss.elastic.co/t/troubleshooting-missing-links-for-some-opentelemetry-services-in-the-apm-service-map/302451 "2022-04-18T15:32:00Z")
Observed behavior: The APM service map doesn't display links between some OpenTelemetry services, but those links do appear in the trace samples. When searching in Discover for the trace.id of one of the orphaned servi… --- ## [Custom fields in ECS](https://discuss.elastic.co/t/custom-fields-in-ecs/199721)
**Author:** [@phruby](https://discuss.elastic.co/u/phruby)\ **Replies:** 2\ **Last updated:** [October 22, 2019, 8:49am UTC](https://discuss.elastic.co/t/custom-fields-in-ecs/199721 "2019-10-22T08:49:25Z")
Hello, for our use case is sometimes important to include fields not present in Elastic Common Schema. There are two main cases: Fields that conceptually belong an existing ECS fieldset, but are not included to ECS 1… --- ## [Kibana Webservice Returns Blank Webpage?](https://discuss.elastic.co/t/kibana-webservice-returns-blank-webpage/194527)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 2\ **Last updated:** [August 9, 2019, 5:41pm UTC](https://discuss.elastic.co/t/kibana-webservice-returns-blank-webpage/194527 "2019-08-09T17:41:27Z")
Hi all, I’ve recently brought up my first Kibana server, and it looks like the HTTP server is running but not actually sending any HTML…? The details: My Kibana is the Docker container version, and I spun it us using t… --- ## [Canvas Workpad embedding in application](https://discuss.elastic.co/t/canvas-workpad-embedding-in-application/191952)
**Author:** [@dharani](https://discuss.elastic.co/u/dharani)\ **Replies:** 2\ **Last updated:** [July 26, 2019, 6:31am UTC](https://discuss.elastic.co/t/canvas-workpad-embedding-in-application/191952 "2019-07-26T06:31:45Z")
Hello guys, How to embed canvas workpad to application using basic version .if possible can you send me the documentation explaining that. --- ## [Logstash ConfigurationError - Failed to execute action](https://discuss.elastic.co/t/logstash-configurationerror-failed-to-execute-action/333874)
**Author:** [@Yasser\_Alsawy](https://discuss.elastic.co/u/Yasser_Alsawy)\ **Replies:** 1\ **Last updated:** [May 19, 2023, 2:25pm UTC](https://discuss.elastic.co/t/logstash-configurationerror-failed-to-execute-action/333874 "2023-05-19T14:25:51Z")
I'm getting a configuration error when try to start logstash: at line 13, column 28 (byte 213) after filter {\\n grok {\\n match =\> { \\"message\\" =\> \\"%{COMBINEDAPACHELOG}\\" }\\n }\\n date {\\n match =\> \[ \\"times… --- ## [Cisco Umbrella logs ingestion - Elastic Cloud](https://discuss.elastic.co/t/cisco-umbrella-logs-ingestion-elastic-cloud/301530)
**Author:** [@misiel](https://discuss.elastic.co/u/misiel)\ **Replies:** 4\ **Last updated:** [April 5, 2022, 1:21pm UTC](https://discuss.elastic.co/t/cisco-umbrella-logs-ingestion-elastic-cloud/301530 "2022-04-05T13:21:02Z")
Hello I started Elastic Cloud service trial period. I want to ingest Cisco Umbrella logs using Cisco Umbrella integration. Documentation says, that I have to install Elastic Agent in order to ship the logs (logs from se… --- ## [Filebeat stops sending data to Logstash and hence Elasticsearch after a few hundred thousand documents, works again on restarting Filebeat container](https://discuss.elastic.co/t/filebeat-stops-sending-data-to-logstash-and-hence-elasticsearch-after-a-few-hundred-thousand-documents-works-again-on-restarting-filebeat-container/279984)
**Author:** [@sanjogmehta](https://discuss.elastic.co/u/sanjogmehta)\ **Replies:** 4\ **Last updated:** [August 5, 2021, 9:27am UTC](https://discuss.elastic.co/t/filebeat-stops-sending-data-to-logstash-and-hence-elasticsearch-after-a-few-hundred-thousand-documents-works-again-on-restarting-filebeat-container/279984 "2021-08-05T09:27:15Z")
I am a new to Elastic stack and I am using Filebeat AWS module's vpcflow to fetch data from S3 through SQS. It works fine for a few hundred thousand documents, but after that I don't see any new document in Elasticsearch… --- ## [LDAP Integration with Elastic Search](https://discuss.elastic.co/t/ldap-integration-with-elastic-search/207322)
**Author:** [@ksarkar](https://discuss.elastic.co/u/ksarkar)\ **Replies:** 4\ **Last updated:** [November 13, 2019, 2:03pm UTC](https://discuss.elastic.co/t/ldap-integration-with-elastic-search/207322 "2019-11-13T14:03:26Z")
I am using a trial x-pack license and configured a openLDAP in centOS env. While trying to validate a user through Kibana its just showing, \<\>{"statusCode":403,"error":"Forbidden","message":"Forbidden"}\ My elasticse… --- ## [Machine learning anomaly correlation](https://discuss.elastic.co/t/machine-learning-anomaly-correlation/193954)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 4\ **Last updated:** [August 7, 2019, 1:35pm UTC](https://discuss.elastic.co/t/machine-learning-anomaly-correlation/193954 "2019-08-07T13:35:36Z")
0 Is there a way to achieve the following with elastic machine learning: A sample demo structure: Index data has the following fields: job\_duration\_time,server, boot\_time, run\_time the first field:job\_duration\_time, … --- ## [Very slow insertions in nested (unable reindexing)](https://discuss.elastic.co/t/very-slow-insertions-in-nested-unable-reindexing/153931)
**Author:** [@magorbe](https://discuss.elastic.co/u/magorbe)\ **Replies:** 1\ **Last updated:** [October 29, 2018, 11:47am UTC](https://discuss.elastic.co/t/very-slow-insertions-in-nested-unable-reindexing/153931 "2018-10-29T11:47:42Z")
Hello, I have the next mapping : { "my\_index": { "aliases": {}, "mappings": { "a\_c": { "properties": { "id": { "type": "string"… --- ## [Multiple synonyms contribute to the score](https://discuss.elastic.co/t/multiple-synonyms-contribute-to-the-score/9744)
**Author:** [@Kevin\_Lawrence](https://discuss.elastic.co/u/Kevin_Lawrence)\ **Replies:** 4\ **Last updated:** [November 20, 2012, 10:23am UTC](https://discuss.elastic.co/t/multiple-synonyms-contribute-to-the-score/9744 "2012-11-20T10:23:00Z")
I have a synonym file that includes the row: sunitinib,su11248,su011248,sutent When I search for 'sutent' and look at the \_explain results, I see that each hit contributes to the score, even though the source d… --- ## [Elastic agent not running](https://discuss.elastic.co/t/elastic-agent-not-running/345153)
**Author:** [@Akshay\_Ranka](https://discuss.elastic.co/u/Akshay_Ranka)\ **Replies:** 1\ **Last updated:** [October 18, 2023, 3:49pm UTC](https://discuss.elastic.co/t/elastic-agent-not-running/345153 "2023-10-18T15:49:11Z")
Hi, I am facing the error Error: failed to communicate with Elastic Agent daemon: rpc error: code = Unavailable desc = connection error: desc = "transport: Error while dialing: dial unix /run/elastic-agent.sock: connec… --- ## [Cant create enrollment token with own certificates](https://discuss.elastic.co/t/cant-create-enrollment-token-with-own-certificates/308629)
**Author:** [@d\_raulf](https://discuss.elastic.co/u/d_raulf)\ **Replies:** 1\ **Last updated:** [July 2, 2022, 9:10pm UTC](https://discuss.elastic.co/t/cant-create-enrollment-token-with-own-certificates/308629 "2022-07-02T21:10:27Z")
Hey, I'm trying to run Elasticsearch with our own CA. Key and Cert are provide by our PKI-Team. Changes in elasticsearch.yml: network.host: 0.0.0.0 xpack.security.http.ssl: enabled: true keystore.path: certs/\ **Author:** [@rp346](https://discuss.elastic.co/u/rp346)\ **Replies:** 1\ **Last updated:** [June 17, 2021, 11:11am UTC](https://discuss.elastic.co/t/unable-to-find-the-cluster-in-the-selected-time-range/275874 "2021-06-17T11:11:35Z") I have EBK setup, but when I try to setup monitoring in /app/monitoring with Set up monitoring with Metricbeat I get Monitoring Request Failed Unable to find the cluster in the selected time range. UUID: iKsZ1PfnTfWth… --- ## [Elastic security throwing "Authentication to realm default\_native failed - Password authentication failed for \"](https://discuss.elastic.co/t/elastic-security-throwing-authentication-to-realm-default-native-failed-password-authentication-failed-for-user/262455)
**Author:** [@Shilpa\_S\_Shetty](https://discuss.elastic.co/u/Shilpa_S_Shetty)\ **Replies:** 1\ **Last updated:** [January 28, 2021, 11:01pm UTC](https://discuss.elastic.co/t/elastic-security-throwing-authentication-to-realm-default-native-failed-password-authentication-failed-for-user/262455 "2021-01-28T23:01:45Z")
Hi Team, I have es cluster with the below version |version|| |---|---| |number|"7.8.1"| |build\_flavor|"default"| |build\_type|"rpm"| |build\_hash|"b5ca9c58fb664ca8bf9e4057fc229b3396bf3a89"| |build\_date… [Previous page](https://discuss.elastic.co/top.md?page=1346&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1348&per_page=50&period=all)