# Top

**URL:** https://discuss.elastic.co/top.md?page=1382&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1383

---

## [Postgresql Searches, Visualizations & Dashboards for metricbeat](https://discuss.elastic.co/t/postgresql-searches-visualizations-dashboards-for-metricbeat/89566)

<div class="topic-metadata">

**Author:** [@dwjvaughan](https://discuss.elastic.co/u/dwjvaughan)\
**Replies:** 2\
**Last updated:** [June 16, 2017, 9:12am UTC](https://discuss.elastic.co/t/postgresql-searches-visualizations-dashboards-for-metricbeat/89566 "2017-06-16T09:12:49Z")

</div>

Hi, We've just installed metricbeat (5.1.1) with the postgresql module and the default dashboards. I've noticed there aren't any dashboards for postgresql though. Are there any out there? Cheers, Dave

---

## [Multiple ES-Hadoop versions (5.1.2)](https://discuss.elastic.co/t/multiple-es-hadoop-versions-5-1-2/74310)

<div class="topic-metadata">

**Author:** [@David\_she](https://discuss.elastic.co/u/David_she)\
**Replies:** 2\
**Last updated:** [February 14, 2017, 8:31pm UTC](https://discuss.elastic.co/t/multiple-es-hadoop-versions-5-1-2/74310 "2017-02-14T20:31:57Z")

</div>

Hi, I'm getting the following error. Error: Multiple ES-Hadoop versions detected in the classpath; please use only one I can not find any other instances of elasticsearch-hadoop on the server and not in my jar. I ev…

---

## [Kibana4.5.1 string unique count](https://discuss.elastic.co/t/kibana4-5-1-string-unique-count/55902)

<div class="topic-metadata">

**Author:** [@Yasuhiro\_O](https://discuss.elastic.co/u/Yasuhiro_O)\
**Replies:** 2\
**Last updated:** [July 29, 2016, 3:23am UTC](https://discuss.elastic.co/t/kibana4-5-1-string-unique-count/55902 "2016-07-29T03:23:23Z")

</div>

nameをstrings で 10-01 や K20-91 などで取り込むと、unique countでうまくカウントされず困っています。解決方法をご教示いただけないでしょうか。

---

## [Actual value in kibana](https://discuss.elastic.co/t/actual-value-in-kibana/52002)

<div class="topic-metadata">

**Author:** [@bbhandari0121](https://discuss.elastic.co/u/bbhandari0121)\
**Replies:** 2\
**Last updated:** [June 7, 2016, 6:14pm UTC](https://discuss.elastic.co/t/actual-value-in-kibana/52002 "2016-06-07T18:14:57Z")

</div>

Hi team, I have used collectd to collect the system metrics and have forwarded it to ES to kibana. But in kibana i would like to show the actual value rather having any aggregation like sum average max and min ? is th…

---

## [Kibana visualization for 2 search query](https://discuss.elastic.co/t/kibana-visualization-for-2-search-query/49817)

<div class="topic-metadata">

**Author:** [@Vivek\_Raj](https://discuss.elastic.co/u/Vivek_Raj)\
**Replies:** 2\
**Last updated:** [May 11, 2016, 8:08pm UTC](https://discuss.elastic.co/t/kibana-visualization-for-2-search-query/49817 "2016-05-11T20:08:57Z")

</div>

how to visualize two search queries in one VISUALIZATION. using Line chart

---

## [Unicast issue with docker elasticsearch container on two VMs](https://discuss.elastic.co/t/unicast-issue-with-docker-elasticsearch-container-on-two-vms/22418)

<div class="topic-metadata">

**Author:** [@wzcwts521](https://discuss.elastic.co/u/wzcwts521)\
**Replies:** 2\
**Last updated:** [February 26, 2015, 9:07pm UTC](https://discuss.elastic.co/t/unicast-issue-with-docker-elasticsearch-container-on-two-vms/22418 "2015-02-26T21:07:16Z")

</div>

I have two ES docker container running on two VMs. \*config: on VM 1\* \*path: logs: /data/log data: /data/data plugins: /data/plugins work: /data/work cluster.name: t1-es-gld node: …

---

## [Sure I'm missing something, but](https://discuss.elastic.co/t/sure-im-missing-something-but/2978)

<div class="topic-metadata">

**Author:** [@Paul\_Loy](https://discuss.elastic.co/u/Paul_Loy)\
**Replies:** 2\
**Last updated:** [May 27, 2010, 5:09pm UTC](https://discuss.elastic.co/t/sure-im-missing-something-but/2978 "2010-05-27T17:09:35Z")

</div>

Basically this is a first pass at incorporating an embedded instance of ES for testing. We'd then possibly even bundle up ES for deployment using something similar. However, it's not working. I'm sure there's something…

---

## [Kibana Visualize - Display count even if field not exists](https://discuss.elastic.co/t/kibana-visualize-display-count-even-if-field-not-exists/325246)

<div class="topic-metadata">

**Author:** [@Pedro\_Ventura](https://discuss.elastic.co/u/Pedro_Ventura)\
**Replies:** 3\
**Last updated:** [February 14, 2023, 9:41am UTC](https://discuss.elastic.co/t/kibana-visualize-display-count-even-if-field-not-exists/325246 "2023-02-14T09:41:02Z")

</div>

Hello! First time posting here, I've been looking around but haven't found anything to point me towards the right direction to solve my issue. I'm creating a data table which contains an aggregation by Terms for a date …

---

## [How to increase/decrease the number count via API on K8s instead of kubectl apply -f?](https://discuss.elastic.co/t/how-to-increase-decrease-the-number-count-via-api-on-k8s-instead-of-kubectl-apply-f/238228)

<div class="topic-metadata">

**Author:** [@longlnk](https://discuss.elastic.co/u/longlnk)\
**Replies:** 3\
**Last updated:** [July 12, 2022, 3:09pm UTC](https://discuss.elastic.co/t/how-to-increase-decrease-the-number-count-via-api-on-k8s-instead-of-kubectl-apply-f/238228 "2022-07-12T15:09:18Z")

</div>

Now, I only increase/decrease in the number count by kubectl apply -f Example: I create with count is 1 cat \<\<EOF | kubectl apply -f - apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name: …

---

## [Need to send complete xml file from filebeat to logstash in message field](https://discuss.elastic.co/t/need-to-send-complete-xml-file-from-filebeat-to-logstash-in-message-field/302844)

<div class="topic-metadata">

**Author:** [@Rohit\_Goel1](https://discuss.elastic.co/u/Rohit_Goel1)\
**Replies:** 3\
**Last updated:** [April 25, 2022, 11:55am UTC](https://discuss.elastic.co/t/need-to-send-complete-xml-file-from-filebeat-to-logstash-in-message-field/302844 "2022-04-25T11:55:45Z")

</div>

Hi , I am using below filebeat config yaml to send below xml to logstash for filteration. but it is not sending complete xml file. and sometimes the xml being sent is not in correct format and tags are getting closed ea…

---

## [How can i maintain the sequence of log data while parsing it in logstash?](https://discuss.elastic.co/t/how-can-i-maintain-the-sequence-of-log-data-while-parsing-it-in-logstash/149625)

<div class="topic-metadata">

**Author:** [@richagautam](https://discuss.elastic.co/u/richagautam)\
**Replies:** 3\
**Last updated:** [September 26, 2018, 6:29am UTC](https://discuss.elastic.co/t/how-can-i-maintain-the-sequence-of-log-data-while-parsing-it-in-logstash/149625 "2018-09-26T06:29:07Z")

</div>

Hi Team, How can i maintain the sequence of log data while parsing it in logstash? My log data has a timestamp filed and some log lines have same timestamp, now while displaying data in kibana it is not coming in the …

---

## [Highlighting on a copy\_to Field](https://discuss.elastic.co/t/highlighting-on-a-copy-to-field/106583)

<div class="topic-metadata">

**Author:** [@zillion582](https://discuss.elastic.co/u/zillion582)\
**Replies:** 0\
**Last updated:** [November 6, 2017, 8:01pm UTC](https://discuss.elastic.co/t/highlighting-on-a-copy-to-field/106583 "2017-11-06T20:01:14Z")

</div>

Hello, Is it possible to highlight a copy\_to field? I have a title which I want to be able to analyze two different ways. One with stop words and stemming, and one without. I can effectively query the search results ag…

---

## [Trying to fetch values from xml and feed into influxdb](https://discuss.elastic.co/t/trying-to-fetch-values-from-xml-and-feed-into-influxdb/102988)

<div class="topic-metadata">

**Author:** [@Niranjan\_kaup](https://discuss.elastic.co/u/Niranjan_kaup)\
**Replies:** 3\
**Last updated:** [October 10, 2017, 5:55am UTC](https://discuss.elastic.co/t/trying-to-fetch-values-from-xml-and-feed-into-influxdb/102988 "2017-10-10T05:55:53Z")

</div>

Sample xml file: Tove Jani Reminder Don't forget me this weekend! Below is the configuration: input { file { path =\> "/mnt/users.xml" start\_position =\> "beginning" type =\> xml } } filter { xml { source =\> …

---

## [ES 1.7, disable\_delete\_all\_indices](https://discuss.elastic.co/t/es-1-7-disable-delete-all-indices/40718)

<div class="topic-metadata">

**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\
**Replies:** 3\
**Last updated:** [February 3, 2016, 10:14pm UTC](https://discuss.elastic.co/t/es-1-7-disable-delete-all-indices/40718 "2016-02-03T22:14:05Z")

</div>

hi Guys, I am trying to disable Delete index in my cluster.I have Put in my config following line:- action.destructive\_requires\_name: true. But it is not stoping to delete my index.Please help me Out.

---

## [Percolator not working with exact match](https://discuss.elastic.co/t/percolator-not-working-with-exact-match/32434)

<div class="topic-metadata">

**Author:** [@2trc](https://discuss.elastic.co/u/2trc)\
**Replies:** 3\
**Last updated:** [October 19, 2015, 8:41am UTC](https://discuss.elastic.co/t/percolator-not-working-with-exact-match/32434 "2015-10-19T08:41:44Z")

</div>

Hi guys, I was reading about the percolator feature on https://www.elastic.co/guide/en/elasticsearch/reference/current/search-percolate.html and I couldn't get exact matches (queries with quotes) to work. The documen…

---

## [Cannot login to Elastic Cloud, UI keep saying wrong password](https://discuss.elastic.co/t/cannot-login-to-elastic-cloud-ui-keep-saying-wrong-password/335512)

<div class="topic-metadata">

**Author:** [@mecer80](https://discuss.elastic.co/u/mecer80)\
**Replies:** 4\
**Last updated:** [June 8, 2023, 10:55am UTC](https://discuss.elastic.co/t/cannot-login-to-elastic-cloud-ui-keep-saying-wrong-password/335512 "2023-06-08T10:55:00Z")

</div>

Hi, I can't seem to login using the client UI: https://cloud.elastic.co/ It keeps saying my password is wrong even thought I've tried to changed it like 10 times using the "forgot your password". I received the emails…

---

## [New data stream backing index dropping logs](https://discuss.elastic.co/t/new-data-stream-backing-index-dropping-logs/313913)

<div class="topic-metadata">

**Author:** [@samjpv](https://discuss.elastic.co/u/samjpv)\
**Replies:** 5\
**Last updated:** [September 8, 2022, 6:10pm UTC](https://discuss.elastic.co/t/new-data-stream-backing-index-dropping-logs/313913 "2022-09-08T18:10:07Z")

</div>

I currently have microservice logs going from kubernetes -\> confluent kafka -\> elastic via sink connector (I have confirmed that they are reaching kafka but not elastic). On elastic I have a corresponding data stream tha…

---

## [Cef message split](https://discuss.elastic.co/t/cef-message-split/295797)

<div class="topic-metadata">

**Author:** [@Rohit\_Mangotra](https://discuss.elastic.co/u/Rohit_Mangotra)\
**Replies:** 5\
**Last updated:** [January 31, 2022, 4:08am UTC](https://discuss.elastic.co/t/cef-message-split/295797 "2022-01-31T04:08:46Z")

</div>

Hi, I am new to ELK and learning it now as part of my job. I am getting .cef logs from imperva waf that needs to be split in to fields so that it can be uploaded to the Elastic. Please let me know how I can achieve thi…

---

## [Is the multiline codec supposed to work with the JDBC input plugin?](https://discuss.elastic.co/t/is-the-multiline-codec-supposed-to-work-with-the-jdbc-input-plugin/268852)

<div class="topic-metadata">

**Author:** [@ehanft](https://discuss.elastic.co/u/ehanft)\
**Replies:** 5\
**Last updated:** [April 1, 2021, 10:06pm UTC](https://discuss.elastic.co/t/is-the-multiline-codec-supposed-to-work-with-the-jdbc-input-plugin/268852 "2021-04-01T22:06:08Z")

</div>

I been having a hard time processing log files stored in an Oracle database table. The logs are stored as CLOB, but converted to VARCHAR2 using a pipelined table function. This works great with the JDBC input plugin in L…

---

## [Logstash Grok Filter failure with match](https://discuss.elastic.co/t/logstash-grok-filter-failure-with-match/204616)

<div class="topic-metadata">

**Author:** [@fuXz](https://discuss.elastic.co/u/fuXz)\
**Replies:** 5\
**Last updated:** [October 24, 2019, 2:55pm UTC](https://discuss.elastic.co/t/logstash-grok-filter-failure-with-match/204616 "2019-10-24T14:55:41Z")

</div>

Unfortunately I'm stuck with some Logstash basics. I want to use Logstash to get logs from a Sophos UTM and do something with the data. I already tried different things from the documentation, only with little success ta…

---

## [Custum beat exemple in documentation problem](https://discuss.elastic.co/t/custum-beat-exemple-in-documentation-problem/94818)

<div class="topic-metadata">

**Author:** [@boubker\_elamri](https://discuss.elastic.co/u/boubker_elamri)\
**Replies:** 5\
**Last updated:** [July 28, 2017, 10:34am UTC](https://discuss.elastic.co/t/custum-beat-exemple-in-documentation-problem/94818 "2017-07-28T10:34:54Z")

</div>

hi everyone, I was learning how to create beats this days, and i found out an lsbeat exemple on the documentations, I followed the instruction one by one, and the lsbeat compiled with success. However, when I tried to …

---

## [Elasticsearch splitting terms by words](https://discuss.elastic.co/t/elasticsearch-splitting-terms-by-words/61517)

<div class="topic-metadata">

**Author:** [@joshuaclark](https://discuss.elastic.co/u/joshuaclark)\
**Replies:** 5\
**Last updated:** [September 27, 2016, 4:52am UTC](https://discuss.elastic.co/t/elasticsearch-splitting-terms-by-words/61517 "2016-09-27T04:52:20Z")

</div>

I have a term that looks like this "GET /carbon/metrics-view" in discover which is correct. However when I go to visualize it is splitting it up "get" "carbon" "metrics" "view" . It is setup as not\_analyzed.

---

## [Custom message filter with logstash](https://discuss.elastic.co/t/custom-message-filter-with-logstash/272626)

<div class="topic-metadata">

**Author:** [@cuongnp](https://discuss.elastic.co/u/cuongnp)\
**Replies:** 6\
**Last updated:** [May 11, 2021, 5:31pm UTC](https://discuss.elastic.co/t/custom-message-filter-with-logstash/272626 "2021-05-11T17:31:47Z")

</div>

Hi all, I have a message log below: \<85\>1 2021-05-11T09:25:02+07:00 172.19.16.241 CP-GW - Log \[Fields@1.3.6.1.4.1.2620 Log delay="1620699902" src="172.19.9.18" dst="172.19.11.13" proto="6" UP\_match\_table="TABLE\_START" …

---

## [JVM corrupted with java agent 1.19.0 - CentOS](https://discuss.elastic.co/t/jvm-corrupted-with-java-agent-1-19-0-centos/257599)

<div class="topic-metadata">

**Author:** [@bbking](https://discuss.elastic.co/u/bbking)\
**Replies:** 6\
**Last updated:** [December 7, 2020, 3:15am UTC](https://discuss.elastic.co/t/jvm-corrupted-with-java-agent-1-19-0-centos/257599 "2020-12-07T03:15:59Z")

</div>

Hi everyone! We had the APM java agent with Tomcat successfully running in test environments for a week but after I modified some configurations of the agent(see below), JVM was occasionally corrupted and left the web a…

---

## [ELK 7 Latest stable Version for production deployment](https://discuss.elastic.co/t/elk-7-latest-stable-version-for-production-deployment/198222)

<div class="topic-metadata">

**Author:** [@vivektsb](https://discuss.elastic.co/u/vivektsb)\
**Replies:** 6\
**Last updated:** [September 5, 2019, 11:17am UTC](https://discuss.elastic.co/t/elk-7-latest-stable-version-for-production-deployment/198222 "2019-09-05T11:17:00Z")

</div>

Hi , Could you please let us know the latest stable version of ELK for production deployment? Regards, Vivek

---

## [Search docs with (term = "val" OR not\_exists)](https://discuss.elastic.co/t/search-docs-with-term-val-or-not-exists/134687)

<div class="topic-metadata">

**Author:** [@chief06](https://discuss.elastic.co/u/chief06)\
**Replies:** 6\
**Last updated:** [June 6, 2018, 4:27pm UTC](https://discuss.elastic.co/t/search-docs-with-term-val-or-not-exists/134687 "2018-06-06T16:27:39Z")

</div>

I have a \_search query running that checks certain properties and aggregates values based on the search. One of the search criteria is: { "term": { "Status": 0} } "Status" was a property added after documents were alre…

---

## [I cant enable ouput.elasticsearch and ouput.logstash in same time](https://discuss.elastic.co/t/i-cant-enable-ouput-elasticsearch-and-ouput-logstash-in-same-time/131666)

<div class="topic-metadata">

**Author:** [@Dimas\_Djs](https://discuss.elastic.co/u/Dimas_Djs)\
**Replies:** 6\
**Last updated:** [May 17, 2018, 4:51am UTC](https://discuss.elastic.co/t/i-cant-enable-ouput-elasticsearch-and-ouput-logstash-in-same-time/131666 "2018-05-17T04:51:37Z")

</div>

I configure filbeat in my client host, and when i configure my filebeat.yml and enable output.elasticsearh and output.logstash , there is an error when i start my filebeat service. in the error is : filebeat\[18412\]: Ex…

---

## [Snapshots to S3, only meta files are being created in bucket](https://discuss.elastic.co/t/snapshots-to-s3-only-meta-files-are-being-created-in-bucket/109994)

<div class="topic-metadata">

**Author:** [@mikebw](https://discuss.elastic.co/u/mikebw)\
**Replies:** 6\
**Last updated:** [December 10, 2017, 6:56am UTC](https://discuss.elastic.co/t/snapshots-to-s3-only-meta-files-are-being-created-in-bucket/109994 "2017-12-10T06:56:34Z")

</div>

I've setup an S3 as a repository for my cluster and when I create a snapshot, it seems to work, though in the bucket the only think I see created is the meta files. For example if I do this request: PUT https://mycreds…

---

## [@timestamp and \_index question](https://discuss.elastic.co/t/timestamp-and--index-question/98448)

<div class="topic-metadata">

**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Replies:** 6\
**Last updated:** [August 26, 2017, 10:50am UTC](https://discuss.elastic.co/t/timestamp-and--index-question/98448 "2017-08-26T10:50:17Z")

</div>

Hi everyone, I store syslog into elasticsearch and overview data on Kibana. I found that the date of @timestamp and \_index doesn’t match. The \_index is default logstash-\* and it seems would automatically adjust from @…

---

## [How to sort with standard alphabe](https://discuss.elastic.co/t/how-to-sort-with-standard-alphabe/6994)

<div class="topic-metadata">

**Author:** [@inlier\_2](https://discuss.elastic.co/u/inlier_2)\
**Replies:** 6\
**Last updated:** [March 19, 2012, 7:21am UTC](https://discuss.elastic.co/t/how-to-sort-with-standard-alphabe/6994 "2012-03-19T07:21:01Z")

</div>

I need sort order title like 1. "AAA" 2. "aaa" 3. "BBB" 4. "bbb" 5. "CCC" 6. "ccc" but in Elastic search when I use this query { "fields": \[ "title" \], "query": { "query\_string": { "quer…

---

## [Custom TCP port numbers instead of 9200 for elasticsearch](https://discuss.elastic.co/t/custom-tcp-port-numbers-instead-of-9200-for-elasticsearch/341012)

<div class="topic-metadata">

**Author:** [@Penchala\_Abhilash\_Mu](https://discuss.elastic.co/u/Penchala_Abhilash_Mu)\
**Replies:** 4\
**Last updated:** [August 18, 2023, 5:12am UTC](https://discuss.elastic.co/t/custom-tcp-port-numbers-instead-of-9200-for-elasticsearch/341012 "2023-08-18T05:12:06Z")

</div>

Hi Team, As a security best practices, i would like to change the http.port number from 9200 to custom tcp port number.?? Please share the some reference documents Best Reagards, Abhilash

---

## [Is there any way to configure HTTPS without X-Pack](https://discuss.elastic.co/t/is-there-any-way-to-configure-https-without-x-pack/259588)

<div class="topic-metadata">

**Author:** [@Shubham](https://discuss.elastic.co/u/Shubham)\
**Replies:** 1\
**Last updated:** [December 24, 2020, 12:38pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-configure-https-without-x-pack/259588 "2020-12-24T12:38:40Z")

</div>

Is there any way to configure HTTPS in ES cluster without using x-pack ? I'm using 5.4 version. I know it is doable freely in 6.8+ but any lead with 5.4 version ?

---

## [Curator moved my indexes, but where?](https://discuss.elastic.co/t/curator-moved-my-indexes-but-where/136866)

<div class="topic-metadata">

**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\
**Replies:** 4\
**Last updated:** [June 29, 2018, 9:02pm UTC](https://discuss.elastic.co/t/curator-moved-my-indexes-but-where/136866 "2018-06-29T21:02:33Z")

</div>

Hi. In my cluster i have 5 nodes where 1 is a archive node which is meant to store indexes older than 7 days. So i followed along with the Hot/Warm architecture and modified it slightly so that i have two nodes which ar…

---

## [Imported Data in to Elastic Search with Epoch Nano Not Showing anything in Kibana](https://discuss.elastic.co/t/imported-data-in-to-elastic-search-with-epoch-nano-not-showing-anything-in-kibana/83372)

<div class="topic-metadata">

**Author:** [@Matthew\_Bullock](https://discuss.elastic.co/u/Matthew_Bullock)\
**Replies:** 4\
**Last updated:** [April 24, 2017, 10:57pm UTC](https://discuss.elastic.co/t/imported-data-in-to-elastic-search-with-epoch-nano-not-showing-anything-in-kibana/83372 "2017-04-24T22:57:59Z")

</div>

I have imported data in to Elastic Search via the bulk API. I have kept my date fields as EPOCH NANO within the data but have selected EPOCH MILLI as the date format. My understanding is JAVA TIME will just drop the last…

---

## [\[BUG\] Re: Highlighting not working with synonym filter](https://discuss.elastic.co/t/bug-re-highlighting-not-working-with-synonym-filter/14094)

<div class="topic-metadata">

**Author:** [@vineeth\_mohan\_2](https://discuss.elastic.co/u/vineeth_mohan_2)\
**Replies:** 4\
**Last updated:** [October 26, 2013, 1:12pm UTC](https://discuss.elastic.co/t/bug-re-highlighting-not-working-with-synonym-filter/14094 "2013-10-26T13:12:56Z")

</div>

Hi , I strongly feel this as a bug. Should i open a bug in the rep ? Thanks Vineeth On Wed, Oct 23, 2013 at 6:36 PM, vineeth mohan vm.vineethmohan@gmail.comwrote: Steps to reproduce - Index creation script Downl…

---

## [\[heartbeat\]how to get performace test on heartbeat](https://discuss.elastic.co/t/heartbeat-how-to-get-performace-test-on-heartbeat/274304)

<div class="topic-metadata">

**Author:** [@lowry](https://discuss.elastic.co/u/lowry)\
**Replies:** 8\
**Last updated:** [August 11, 2021, 3:02pm UTC](https://discuss.elastic.co/t/heartbeat-how-to-get-performace-test-on-heartbeat/274304 "2021-08-11T15:02:25Z")

</div>

Hi Elastic friends, Have a question for the performance of heartbeat. Assuming there’re 90K targets need to be monitored via heartbeat, in some case, like there’re 30% to 50% targets, maybe even worse, there’re 60%~80%…

---

## [Logstash gives error "Error: Address already in use" when ingesting filebeat with two inputs](https://discuss.elastic.co/t/logstash-gives-error-error-address-already-in-use-when-ingesting-filebeat-with-two-inputs/226168)

<div class="topic-metadata">

**Author:** [@chintanp](https://discuss.elastic.co/u/chintanp)\
**Replies:** 0\
**Last updated:** [April 2, 2020, 7:27am UTC](https://discuss.elastic.co/t/logstash-gives-error-error-address-already-in-use-when-ingesting-filebeat-with-two-inputs/226168 "2020-04-02T07:27:29Z")

</div>

Hi, I saw several similar posts, but none seemed to match my case. I got the open-source ELK stack from Bitnami and deployed it on AWS (Debian Linux 4.9). I am able to read the apache server logs locally, all the way t…

---

## [\[elastic\_agent.metricbeat\]\[info\] CA certificate matching 'ca\_trusted\_fingerprint' found, adding it to 'certificate\_authorities'](https://discuss.elastic.co/t/elastic-agent-metricbeat-info-ca-certificate-matching-ca-trusted-fingerprint-found-adding-it-to-certificate-authorities/358418)

<div class="topic-metadata">

**Author:** [@otortosa](https://discuss.elastic.co/u/otortosa)\
**Replies:** 7\
**Last updated:** [January 30, 2025, 12:49am UTC](https://discuss.elastic.co/t/elastic-agent-metricbeat-info-ca-certificate-matching-ca-trusted-fingerprint-found-adding-it-to-certificate-authorities/358418 "2025-01-30T00:49:20Z")

</div>

Hello team! I receive from my Ubuntu host these logs all the time. \[elastic\_agent.metricbeat\]\[info\] CA certificate matching 'ca\_trusted\_fingerprint' found, adding it to 'certificate\_authorities' \[elastic\_agent.metricb…

---

## [Kibana Fleet "Another broken 7.11.1 upgrade"](https://discuss.elastic.co/t/kibana-fleet-another-broken-7-11-1-upgrade/264628)

<div class="topic-metadata">

**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\
**Replies:** 7\
**Last updated:** [February 22, 2021, 5:19pm UTC](https://discuss.elastic.co/t/kibana-fleet-another-broken-7-11-1-upgrade/264628 "2021-02-22T17:19:53Z")

</div>

I'll be honest this is painful so far every upgrade from kibana 7.1 to 7.11.1 has resulting in something going wrong 1 prod cluster and 2 dev clusters. Seems I just have terrible luck. All index's have been default for m…

---

## [Logstash Issue : Failed to execute action](https://discuss.elastic.co/t/logstash-issue-failed-to-execute-action/183439)

<div class="topic-metadata">

**Author:** [@Bhargav\_Ram\_Reddy](https://discuss.elastic.co/u/Bhargav_Ram_Reddy)\
**Replies:** 1\
**Last updated:** [May 30, 2019, 9:53am UTC](https://discuss.elastic.co/t/logstash-issue-failed-to-execute-action/183439 "2019-05-30T09:53:41Z")

</div>

Hello, i have installed elasticsearch, created template (server-logs) and started the service on 9200 Also, added below code in logstash config file but when i try to start logstash service it is throwing an error inp…

---

## [Search Requests - How threads work](https://discuss.elastic.co/t/search-requests-how-threads-work/88693)

<div class="topic-metadata">

**Author:** [@chindhu\_hari](https://discuss.elastic.co/u/chindhu_hari)\
**Replies:** 1\
**Last updated:** [June 8, 2017, 9:36pm UTC](https://discuss.elastic.co/t/search-requests-how-threads-work/88693 "2017-06-08T21:36:24Z")

</div>

@jpountz @jprante I hit the following exception in my ES. It's a 2.3.2 with single node, 32 CPU linux machine. 5 shards per index. I'm querying on a particular index. I have few queries based upon the log entry below: …

---

## [Send real-time logs from windows server to ELK stack](https://discuss.elastic.co/t/send-real-time-logs-from-windows-server-to-elk-stack/78170)

<div class="topic-metadata">

**Author:** [@dcdfs](https://discuss.elastic.co/u/dcdfs)\
**Replies:** 1\
**Last updated:** [March 10, 2017, 11:45pm UTC](https://discuss.elastic.co/t/send-real-time-logs-from-windows-server-to-elk-stack/78170 "2017-03-10T23:45:31Z")

</div>

Hi, I'm new to elasticsearch I have a requirement to send a specific log file(not .log format) from a remote location to ELK stack on another server(linux). What is the best approach for this? I looked at filebeat, b…

---

## [Sorting on multi-level nested documents](https://discuss.elastic.co/t/sorting-on-multi-level-nested-documents/34706)

<div class="topic-metadata">

**Author:** [@huwkthomas](https://discuss.elastic.co/u/huwkthomas)\
**Replies:** 1\
**Last updated:** [August 5, 2016, 3:26pm UTC](https://discuss.elastic.co/t/sorting-on-multi-level-nested-documents/34706 "2016-08-05T15:26:10Z")

</div>

I have the following mapping, which has two levels of nested documents. The first nested document is Parties, and within Parties are nested documents; Details. I am trying to sort on Parties.Details.Value and that wor…

---

## [Reliability of Filebeat](https://discuss.elastic.co/t/reliability-of-filebeat/47627)

<div class="topic-metadata">

**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\
**Replies:** 1\
**Last updated:** [April 18, 2016, 11:46am UTC](https://discuss.elastic.co/t/reliability-of-filebeat/47627 "2016-04-18T11:46:31Z")

</div>

Is there any documents on the reliability of Filebeat? How does it ensure the reliability of the delivery of the logs. E.g. In packet loss situation, Elasticsearch is down, avoid duplication? Does Filebeat have some ki…

---

## [Slow document upsert time](https://discuss.elastic.co/t/slow-document-upsert-time/9922)

<div class="topic-metadata">

**Author:** [@mr\_t](https://discuss.elastic.co/u/mr_t)\
**Replies:** 1\
**Last updated:** [December 4, 2012, 8:04am UTC](https://discuss.elastic.co/t/slow-document-upsert-time/9922 "2012-12-04T08:04:02Z")

</div>

I'm experiencing some unexpectedly high update times for upserting documents into a single index using a custom river plugin which I wrote. I've noticed that when I start the river plugin, elapsed time to upsert do…

---

## [Where User/Roles, Index and Saved objects are stored?](https://discuss.elastic.co/t/where-user-roles-index-and-saved-objects-are-stored/301686)

<div class="topic-metadata">

**Author:** [@Gabriel\_Mendez](https://discuss.elastic.co/u/Gabriel_Mendez)\
**Replies:** 2\
**Last updated:** [April 6, 2022, 6:30pm UTC](https://discuss.elastic.co/t/where-user-roles-index-and-saved-objects-are-stored/301686 "2022-04-06T18:30:47Z")

</div>

Hello!, I am using a docker version for Elasticsearch and Kibana, and I have deployed an AWS instance to have my App working, Now on every documentation for Elastic and Kibana with docker it says that to backup the data…

---

## [Mongo driver 4.x is not supported on Java](https://discuss.elastic.co/t/mongo-driver-4-x-is-not-supported-on-java/248571)

<div class="topic-metadata">

**Author:** [@marcelo.pio](https://discuss.elastic.co/u/marcelo.pio)\
**Replies:** 2\
**Last updated:** [December 1, 2020, 8:39am UTC](https://discuss.elastic.co/t/mongo-driver-4-x-is-not-supported-on-java/248571 "2020-12-01T08:39:02Z")

</div>

Kibana version:7.9 Elasticsearch version:7.9 APM Server version:7.9 APM Agent language and version:Java - 1.18.0 Browser version:Firefox 80.0.1 Original install method (e.g. download page, yum, deb, from source, etc…

---

## [Snapshot failed with "file\_system\_exception... Structure needs cleaning"](https://discuss.elastic.co/t/snapshot-failed-with-file-system-exception-structure-needs-cleaning/231200)

<div class="topic-metadata">

**Author:** [@Davoot](https://discuss.elastic.co/u/Davoot)\
**Replies:** 2\
**Last updated:** [May 5, 2020, 8:04pm UTC](https://discuss.elastic.co/t/snapshot-failed-with-file-system-exception-structure-needs-cleaning/231200 "2020-05-05T20:04:59Z")

</div>

Hi all, I'm trying to snapshot an index to an fs repository (nfs share). I have two nodes in 7.6.1. First node share nfs, second mount it There is around 80 indices (30 GB/day), I decide to snapshot monthly manually b…

---

## [Enable to connect Logstash to Kafka](https://discuss.elastic.co/t/enable-to-connect-logstash-to-kafka/157563)

<div class="topic-metadata">

**Author:** [@Youssef\_El](https://discuss.elastic.co/u/Youssef_El)\
**Replies:** 2\
**Last updated:** [November 21, 2018, 3:34pm UTC](https://discuss.elastic.co/t/enable-to-connect-logstash-to-kafka/157563 "2018-11-21T15:34:21Z")

</div>

Hello, I'm trying to connect Kafka to logastash by making kafka input in logstash config file ,but i'm confused with kafka bootstrap\_servers who is hosted in hortonworks platform . In ambari UI is mentioned that kafka …

---

## [Kibana dashboard timeout 30000 and hangs](https://discuss.elastic.co/t/kibana-dashboard-timeout-30000-and-hangs/135005)

<div class="topic-metadata">

**Author:** [@MrFrost](https://discuss.elastic.co/u/MrFrost)\
**Replies:** 2\
**Last updated:** [June 8, 2018, 5:52am UTC](https://discuss.elastic.co/t/kibana-dashboard-timeout-30000-and-hangs/135005 "2018-06-08T05:52:05Z")

</div>

Hello, I am new to ELK Stack but it is really irritating that Kibana just does not want to work correctly. All the time when i try to visualize results even from 30 minutes of time frame, dashboard will fail to do so an…

[Previous page](https://discuss.elastic.co/top.md?page=1381&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1383&per_page=50&period=all)
