# Top **URL:** https://discuss.elastic.co/top.md?page=1386&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1387 --- ## [Failed to publish events: unavailable\_shards\_exception](https://discuss.elastic.co/t/failed-to-publish-events-unavailable-shards-exception/153393)
**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\ **Replies:** 3\ **Last updated:** [October 23, 2018, 10:08am UTC](https://discuss.elastic.co/t/failed-to-publish-events-unavailable-shards-exception/153393 "2018-10-23T10:08:36Z")
Hi, I deployed filebeat on a host and seeing below errors: Filebeat container log: 2018/10/22 11:22:26.464563 logger.go:22: INFO retryer: send wait signal to consumer 2018/10/22 11:22:26.464592 logger.go:22: INFO do… --- ## [Requete Timeout kibana](https://discuss.elastic.co/t/requete-timeout-kibana/123240)
**Author:** [@rmarin](https://discuss.elastic.co/u/rmarin)\ **Replies:** 3\ **Last updated:** [March 20, 2018, 9:54am UTC](https://discuss.elastic.co/t/requete-timeout-kibana/123240 "2018-03-20T09:54:40Z")
Bonjour, Voici mon infra : 4 noeud ElasticSearch DATA avec la config suivante : - 6 CPU - 62 Go de RAM (XMS et XMX configurer à 31 Go) - 500Go de disque pour le data (Seul elasticsearch installé dessus) 2 noeud Ela… --- ## [Log through Filebeat has hex values, but direct to Logstash does not](https://discuss.elastic.co/t/log-through-filebeat-has-hex-values-but-direct-to-logstash-does-not/118123)
**Author:** [@bladerunner512](https://discuss.elastic.co/u/bladerunner512)\ **Replies:** 3\ **Last updated:** [February 2, 2018, 4:13pm UTC](https://discuss.elastic.co/t/log-through-filebeat-has-hex-values-but-direct-to-logstash-does-not/118123 "2018-02-02T16:13:30Z")
ELK 6.0.0/Filebeat 6.0.0 Logs are single line json: {"msg":"Logger in Debug mode","sev":"DEBUG","ts":"2017-11-15T19:38:44:0223Z"} This works fine: $ nc localhost 5044 \< json-log.log Same file put in Filebeat log dir… --- ## [Why watermark settings are set so low by default?](https://discuss.elastic.co/t/why-watermark-settings-are-set-so-low-by-default/112010)
**Author:** [@ivten](https://discuss.elastic.co/u/ivten)\ **Replies:** 3\ **Last updated:** [December 18, 2017, 12:41pm UTC](https://discuss.elastic.co/t/why-watermark-settings-are-set-so-low-by-default/112010 "2017-12-18T12:41:59Z")
Hi, I am running a cluster in which all datanodes have their data dirs mounted on separate 6TB disks. Today the cluster reached 84% disk usage and I was forced to delete a bunch of old indexes even though I still had a… --- ## [TopBeat: hosts desaparecen aleatoreamente desde kibana](https://discuss.elastic.co/t/topbeat-hosts-desaparecen-aleatoreamente-desde-kibana/60400)
**Author:** [@dpincheira](https://discuss.elastic.co/u/dpincheira)\ **Replies:** 3\ **Last updated:** [September 16, 2016, 6:19pm UTC](https://discuss.elastic.co/t/topbeat-hosts-desaparecen-aleatoreamente-desde-kibana/60400 "2016-09-16T18:19:04Z")
Buen día querida comunidad, Estoy presentando un problema con los hosts bajo monitoreo con topbeat, la configuración es sencilla, casi por defecto. Cada host (10 equipos) envía sus datos desde topbeat a un nodo esp… --- ## [Can't show geopoint in a tile map](https://discuss.elastic.co/t/cant-show-geopoint-in-a-tile-map/48432)
**Author:** [@Josep\_Bacardit](https://discuss.elastic.co/u/Josep_Bacardit)\ **Replies:** 3\ **Last updated:** [April 27, 2016, 10:57am UTC](https://discuss.elastic.co/t/cant-show-geopoint-in-a-tile-map/48432 "2016-04-27T10:57:58Z")
Hello, I'm using logstash 2.3.1, elasticsearch 2.3.1 and kibi 0.3.2. I have problems visualizing locations in a map with kibi. I have the following configuration in logstash: input { file { path =\> "/opt/logstash-2… --- ## [Use multiple inputs configs w/single logstash instance](https://discuss.elastic.co/t/use-multiple-inputs-configs-w-single-logstash-instance/39912)
**Author:** [@Kaufusihm](https://discuss.elastic.co/u/Kaufusihm)\ **Replies:** 3\ **Last updated:** [January 24, 2016, 3:49am UTC](https://discuss.elastic.co/t/use-multiple-inputs-configs-w-single-logstash-instance/39912 "2016-01-24T03:49:22Z")
Let me quickly define my Elastic stack. I'm currently just working with 3 different types of logs coming from 3 different machines. Goal: I would like to handle all 3 logs w/my current elastic stack. How do I do this? … --- ## [How to scale an ES deployment to millions of tenants with different data schemas](https://discuss.elastic.co/t/how-to-scale-an-es-deployment-to-millions-of-tenants-with-different-data-schemas/19844)
**Author:** [@zivs](https://discuss.elastic.co/u/zivs)\ **Replies:** 3\ **Last updated:** [September 17, 2014, 1:38pm UTC](https://discuss.elastic.co/t/how-to-scale-an-es-deployment-to-millions-of-tenants-with-different-data-schemas/19844 "2014-09-17T13:38:38Z")
Hi, we are considering using ES as a primary data-source for a new project. our data is generated by millions of different users, \*each having a relatively small number of documents, yet each having a different data … --- ## [The client noticed that the server is not Elasticsearch and we do not support this unknown product](https://discuss.elastic.co/t/the-client-noticed-that-the-server-is-not-elasticsearch-and-we-do-not-support-this-unknown-product/354046)
**Author:** [@jeet.mail72](https://discuss.elastic.co/u/jeet.mail72)\ **Replies:** 1\ **Last updated:** [February 25, 2024, 1:50pm UTC](https://discuss.elastic.co/t/the-client-noticed-that-the-server-is-not-elasticsearch-and-we-do-not-support-this-unknown-product/354046 "2024-02-25T13:50:37Z")
Hi All, I am using Elasticsearch with Python using Docker on the MacBook Pro and getting the following error. The index is created but still getting the exception. Print Logs: Creating Elastic Search connection. Elas… --- ## [Snapshot s3: The specified key does not exist](https://discuss.elastic.co/t/snapshot-s3-the-specified-key-does-not-exist/308280)
**Author:** [@zeenon](https://discuss.elastic.co/u/zeenon)\ **Replies:** 1\ **Last updated:** [June 28, 2022, 7:07am UTC](https://discuss.elastic.co/t/snapshot-s3-the-specified-key-does-not-exist/308280 "2022-06-28T07:07:38Z")
Hello, I am currently testing s3 compatible solution from Scaleway. Creating my repository, my bucket contains a test directory tests-kedvHECeQhmY6kvkArb8AA but it seems that elasticsearch cannot delete this directory.… --- ## [Error: mapper\_parsing\_exception](https://discuss.elastic.co/t/error-mapper-parsing-exception/179763)
**Author:** [@fim](https://discuss.elastic.co/u/fim)\ **Replies:** 1\ **Last updated:** [May 6, 2019, 12:36pm UTC](https://discuss.elastic.co/t/error-mapper-parsing-exception/179763 "2019-05-06T12:36:05Z")
I try to create a new template with the following mapping in ES7. So far it worked in ES6.7 but do not find what's wrong. PUT \_template/connect { "index\_patterns": \[ "connect" \], "settings": { "index": { … --- ## [Grok : Extract multiple lines format occurring between two lines of log data](https://discuss.elastic.co/t/grok-extract-multiple-lines-format-occurring-between-two-lines-of-log-data/148962)
**Author:** [@richagautam](https://discuss.elastic.co/u/richagautam)\ **Replies:** 1\ **Last updated:** [September 21, 2018, 9:21pm UTC](https://discuss.elastic.co/t/grok-extract-multiple-lines-format-occurring-between-two-lines-of-log-data/148962 "2018-09-21T21:21:04Z")
Hi Team, I am trying to parse multiple log files where log syntax are not same and extract differnt lines which is coming between 2 lines of log data. Below is the sample data Feb 12 18:24:26 localhost.localdomain: TC … --- ## [Is the given point inside a Geo Shape?](https://discuss.elastic.co/t/is-the-given-point-inside-a-geo-shape/78949)
**Author:** [@damian-pf](https://discuss.elastic.co/u/damian-pf)\ **Replies:** 1\ **Last updated:** [March 20, 2017, 9:21am UTC](https://discuss.elastic.co/t/is-the-given-point-inside-a-geo-shape/78949 "2017-03-20T09:21:23Z")
Hey guys could someone help me a bit with this query? I need a query that I can pass a latitude/longitude point to and it will return any of the stored GeoShapes that the point is inside. Bonus points: I also need to… --- ## [Logstash can not parse azure activity logs](https://discuss.elastic.co/t/logstash-can-not-parse-azure-activity-logs/76801)
**Author:** [@111148](https://discuss.elastic.co/u/111148)\ **Replies:** 1\ **Last updated:** [March 7, 2017, 4:08pm UTC](https://discuss.elastic.co/t/logstash-can-not-parse-azure-activity-logs/76801 "2017-03-07T16:08:16Z")
Hello, I have faced with issue during parsing Azure activity logs (multiline json) by Logstash. Tried several codecs but all of them are useless. They can not parse multiline logs with coma delimiters. Please advise ho… --- ## [Add Heartbeat to every beat](https://discuss.elastic.co/t/add-heartbeat-to-every-beat/120865)
**Author:** [@widhalmt](https://discuss.elastic.co/u/widhalmt)\ **Replies:** 4\ **Last updated:** [February 21, 2018, 7:56pm UTC](https://discuss.elastic.co/t/add-heartbeat-to-every-beat/120865 "2018-02-21T19:56:43Z")
Hi, It would be rather useful to have an option to send some sort of heartbeat with every beat. While it's good to have the Heartbeat-beat to show whether a host is up or not I'd really like to have a way to see if a sp… --- ## [Import dashboard on elk 8.5.3](https://discuss.elastic.co/t/import-dashboard-on-elk-8-5-3/338236)
**Author:** [@kibana\_dev\_iko](https://discuss.elastic.co/u/kibana_dev_iko)\ **Replies:** 6\ **Last updated:** [July 17, 2023, 9:54am UTC](https://discuss.elastic.co/t/import-dashboard-on-elk-8-5-3/338236 "2023-07-17T09:54:30Z")
hi can anyone help me i create dashboard on elk version 8.6.2 and i want to import them in elk version 8.5.3 but i get this warning in kibana UI The file could not be processed due to error: "Unprocessable Entity: Doc… --- ## [Filebeat -\> Logstash -\> ElasticSearch with multiple outputs](https://discuss.elastic.co/t/filebeat-logstash-elasticsearch-with-multiple-outputs/267598)
**Author:** [@Satyat500](https://discuss.elastic.co/u/Satyat500)\ **Replies:** 6\ **Last updated:** [March 22, 2021, 11:39am UTC](https://discuss.elastic.co/t/filebeat-logstash-elasticsearch-with-multiple-outputs/267598 "2021-03-22T11:39:01Z")
Hi team, I am trying to send output to two different index by taking two different inputs in tcp and beats. I am able to send logs to elasticsearch which are coming from filebeat but I am not able to send the logs to lo… --- ## [Combing relevancy and trending scores](https://discuss.elastic.co/t/combing-relevancy-and-trending-scores/21213)
**Author:** [@hespoddi](https://discuss.elastic.co/u/hespoddi)\ **Replies:** 6\ **Last updated:** [December 23, 2014, 5:30pm UTC](https://discuss.elastic.co/t/combing-relevancy-and-trending-scores/21213 "2014-12-23T17:30:03Z")
Hi all, We'd like to combine the query score with our own custom trending score for a given document. Currently, our query looks like: { "query": { "filtered": { "filter": { … --- ## [Snowball Analyzer and Java API](https://discuss.elastic.co/t/snowball-analyzer-and-java-api/6981)
**Author:** [@thinusp](https://discuss.elastic.co/u/thinusp)\ **Replies:** 6\ **Last updated:** [March 14, 2012, 8:08am UTC](https://discuss.elastic.co/t/snowball-analyzer-and-java-api/6981 "2012-03-14T08:08:51Z")
I'm having a big struggle to get a Snowball Analyser working on my index... I'm trying to use the Java API to set the relevant settings/mapping not even sure which it is any more. From the website I gathered tha… --- ## [Missing application roles. API required roles: Incident.Read.All,Incident.ReadWrite.All, application roles](https://discuss.elastic.co/t/missing-application-roles-api-required-roles-incident-read-all-incident-readwrite-all-application-roles/360019)
**Author:** [@Van\_Howell](https://discuss.elastic.co/u/Van_Howell)\ **Replies:** 2\ **Last updated:** [May 23, 2024, 1:14pm UTC](https://discuss.elastic.co/t/missing-application-roles-api-required-roles-incident-read-all-incident-readwrite-all-application-roles/360019 "2024-05-23T13:14:55Z")
I am using the Filebeat Microsoft module to ingest Defender Endpoint logs. I have setup an App on the Azure AD site and added the documented permissions. I am getting a message that indicates I do not have the required r… --- ## [Cold data node is not starting after restart the ES service 7.7.0](https://discuss.elastic.co/t/cold-data-node-is-not-starting-after-restart-the-es-service-7-7-0/281474)
**Author:** [@alicango](https://discuss.elastic.co/u/alicango)\ **Replies:** 2\ **Last updated:** [August 15, 2021, 10:29am UTC](https://discuss.elastic.co/t/cold-data-node-is-not-starting-after-restart-the-es-service-7-7-0/281474 "2021-08-15T10:29:51Z")
Hi, I am getting below exception after restart the ES service; journalctl -xe systemd-entrypoint\[4842\]: Exception in thread "main" org.apache.lucene.index.CorruptIndexException: codec header mismatch: actual header=10… --- ## [Elastic Search: Composite Aggregations with Cardinality in NEST](https://discuss.elastic.co/t/elastic-search-composite-aggregations-with-cardinality-in-nest/227602)
**Author:** [@Vignesh\_Theyagarajan](https://discuss.elastic.co/u/Vignesh_Theyagarajan)\ **Replies:** 2\ **Last updated:** [April 15, 2020, 10:05am UTC](https://discuss.elastic.co/t/elastic-search-composite-aggregations-with-cardinality-in-nest/227602 "2020-04-15T10:05:24Z")
I'm using the composite and terms aggregations to get grouped results based on a given field. I'm also using Cardinality aggregation to get the overall count of the aggregation buckets. Find below the request query I'm … --- ## [I need to re-create my .watcher & monitoring-6 index](https://discuss.elastic.co/t/i-need-to-re-create-my-watcher-monitoring-6-index/146289)
**Author:** [@jamesl](https://discuss.elastic.co/u/jamesl)\ **Replies:** 2\ **Last updated:** [September 7, 2018, 10:38am UTC](https://discuss.elastic.co/t/i-need-to-re-create-my-watcher-monitoring-6-index/146289 "2018-09-07T10:38:07Z")
Hi. I had a major system outage this morning and when I booted all nodes up again both my .watcher and .monitoring indices would not allocate to the data nodes, cluster was red. I tried closing and re opening them but t… --- ## [Date\_histogram returns empty](https://discuss.elastic.co/t/date-histogram-returns-empty/52108)
**Author:** [@mfcarbo](https://discuss.elastic.co/u/mfcarbo)\ **Replies:** 2\ **Last updated:** [June 10, 2016, 2:43pm UTC](https://discuss.elastic.co/t/date-histogram-returns-empty/52108 "2016-06-10T14:43:01Z")
I have an aggregation which works but I would like the results to be organized differently so I can more easily map it to several data series for highcharts graphs. This works: { "size": 0, "aggs": { … --- ## [Table with Elasticsearch static and dynamic settings](https://discuss.elastic.co/t/table-with-elasticsearch-static-and-dynamic-settings/52239)
**Author:** [@hartfordfive](https://discuss.elastic.co/u/hartfordfive)\ **Replies:** 2\ **Last updated:** [June 9, 2016, 10:25am UTC](https://discuss.elastic.co/t/table-with-elasticsearch-static-and-dynamic-settings/52239 "2016-06-09T10:25:08Z")
It would be great to have a very simple page to sum up all cluster settings (static and dynamic). I know you can currently see all available cluster settings here although you have to go through each sub page and read t… --- ## [Logstash AWS code 403](https://discuss.elastic.co/t/logstash-aws-code-403/272499)
**Author:** [@Roy\_Levy](https://discuss.elastic.co/u/Roy_Levy)\ **Replies:** 4\ **Last updated:** [May 11, 2021, 12:35am UTC](https://discuss.elastic.co/t/logstash-aws-code-403/272499 "2021-05-11T00:35:02Z")
Hey, I'm trying to push documents from local to elastic server in AWS, and when trying to do so I get 403 error and logstash keeps on trying to establish connection with the server like so: \[2021-05-09T11:09:52,707\]\[TR… --- ## [Logstash Ruby Code string](https://discuss.elastic.co/t/logstash-ruby-code-string/184231)
**Author:** [@jonathan01](https://discuss.elastic.co/u/jonathan01)\ **Replies:** 4\ **Last updated:** [June 4, 2019, 5:38pm UTC](https://discuss.elastic.co/t/logstash-ruby-code-string/184231 "2019-06-04T17:38:34Z")
I am new to this and I am a little stuck. I have a input from metric beats "windows" =\> { "perfmon" =\> { "ica" =\> { "output\_pn\_bandwidth" =\> 0, "name" =\> "ICA-CGP 33 (jgillman)" } } I need to get the user name f… --- ## [Help needed with multiline codec, current pattern too slow](https://discuss.elastic.co/t/help-needed-with-multiline-codec-current-pattern-too-slow/102516)
**Author:** [@nikhilsangvikar](https://discuss.elastic.co/u/nikhilsangvikar)\ **Replies:** 4\ **Last updated:** [October 10, 2017, 6:08am UTC](https://discuss.elastic.co/t/help-needed-with-multiline-codec-current-pattern-too-slow/102516 "2017-10-10T06:08:24Z")
Hello, for these set of input lines: SAMPLE INPUT INFO | jvm 1 | 2017/08/28 17:54:14 | 25306.601: Total time for which application threads were stopped: 0.0008632 seconds, Stopping threads took: 0.0000905 seconds I… --- ## [Multiple Elastic Agents on the same system](https://discuss.elastic.co/t/multiple-elastic-agents-on-the-same-system/306215)
**Author:** [@AndreiRD](https://discuss.elastic.co/u/AndreiRD)\ **Replies:** 1\ **Last updated:** [April 4, 2024, 8:38am UTC](https://discuss.elastic.co/t/multiple-elastic-agents-on-the-same-system/306215 "2024-04-04T08:38:01Z")
Is there any method by which two Elastic Agents with different Fleet&Output configurations can run simultaneously on the same server? (except for Docker Containers scenario). It looks like the installation paths cannot … --- ## [org.elasticsearch.action.search.SearchPhaseExecutionException: all shards failed](https://discuss.elastic.co/t/org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed/278411)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 1\ **Last updated:** [July 15, 2021, 5:10am UTC](https://discuss.elastic.co/t/org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed/278411 "2021-07-15T05:10:21Z")
org.elasticsearch.action.search.SearchPhaseExecutionException: all shards failed It is said that all shards fail, what is happening? The index in question shows that the health was green. What do I need to do to avoid… --- ## [Kibana 7.10.0 visualization throwing error on aggregation \[esaggs\]\>bad request](https://discuss.elastic.co/t/kibana-7-10-0-visualization-throwing-error-on-aggregation-esaggs-bad-request/263086)
**Author:** [@Rakesh\_Rayabarapu](https://discuss.elastic.co/u/Rakesh_Rayabarapu)\ **Replies:** 1\ **Last updated:** [February 4, 2021, 6:23am UTC](https://discuss.elastic.co/t/kibana-7-10-0-visualization-throwing-error-on-aggregation-esaggs-bad-request/263086 "2021-02-04T06:23:09Z")
Hello Team, While we creating a visualization with any aggregation except count renders an error. please find error details below. Thanks in advance. search\_phase\_execution\_exception all shards failed Error: Bad Req… --- ## [I want to add more nodes in my existing cluster](https://discuss.elastic.co/t/i-want-to-add-more-nodes-in-my-existing-cluster/261233)
**Author:** [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\ **Replies:** 7\ **Last updated:** [January 17, 2021, 10:50pm UTC](https://discuss.elastic.co/t/i-want-to-add-more-nodes-in-my-existing-cluster/261233 "2021-01-17T22:50:26Z")
Hi, I have 3 Node cluster (7.9.2) with elasticsearch license. I want to add more 5 Data nodes on my existing cluster. Do I need to have License for extra nodes also? Please Help me with this situation Thanks Regard… --- ## [Node is not added to the cluster](https://discuss.elastic.co/t/node-is-not-added-to-the-cluster/251579)
**Author:** [@djuwa4](https://discuss.elastic.co/u/djuwa4)\ **Replies:** 7\ **Last updated:** [October 12, 2020, 8:38am UTC](https://discuss.elastic.co/t/node-is-not-added-to-the-cluster/251579 "2020-10-12T08:38:39Z")
I created a cluster for five nodes. However, one of the nodes does not see the rest and creates a cluster where this node is the only participant. I do everything in the same way on all nodes. Here is its config: cluste… --- ## [Cannot connect to ES 6.8 getting connection refused erros](https://discuss.elastic.co/t/cannot-connect-to-es-6-8-getting-connection-refused-erros/204716)
**Author:** [@eric.cox](https://discuss.elastic.co/u/eric.cox)\ **Replies:** 1\ **Last updated:** [October 23, 2019, 7:07am UTC](https://discuss.elastic.co/t/cannot-connect-to-es-6-8-getting-connection-refused-erros/204716 "2019-10-23T07:07:18Z")
Team, We are trying to connect to ES 6.8 instance, from API Connect 5.0.8.6 on the master node and are getting the following connection refused error. This is the first time I've been asked to send Event Analytics from … --- ## [Can't complete filebeat setup due to failed ML setup](https://discuss.elastic.co/t/cant-complete-filebeat-setup-due-to-failed-ml-setup/202893)
**Author:** [@DigitalMachinist](https://discuss.elastic.co/u/DigitalMachinist)\ **Replies:** 1\ **Last updated:** [October 9, 2019, 7:21pm UTC](https://discuss.elastic.co/t/cant-complete-filebeat-setup-due-to-failed-ml-setup/202893 "2019-10-09T19:21:34Z")
I'm getting an error whenever I run filebeat setup caused by filebeat being unable to setup ML jobs (that I don't even use). Here's the terminal output: \> sudo filebeat setup Loaded index template Loading dashboards (Ki… --- ## [Logstash multiple path.config (copying files is not a valid solution!)](https://discuss.elastic.co/t/logstash-multiple-path-config-copying-files-is-not-a-valid-solution/104696)
**Author:** [@mostolog](https://discuss.elastic.co/u/mostolog)\ **Replies:** 1\ **Last updated:** [October 31, 2017, 8:29am UTC](https://discuss.elastic.co/t/logstash-multiple-path-config-copying-files-is-not-a-valid-solution/104696 "2017-10-31T08:29:48Z")
Our logstash configurations are actually splitted into 2 directories: main configuration files. group specific configuration files. According to docs: -f, --path.config CONFIG\_PATH Load the Logstash config from a spe… --- ## [Max doc size for indexing over HTTP](https://discuss.elastic.co/t/max-doc-size-for-indexing-over-http/17953)
**Author:** [@ed\_perez](https://discuss.elastic.co/u/ed_perez)\ **Replies:** 1\ **Last updated:** [June 6, 2014, 1:26pm UTC](https://discuss.elastic.co/t/max-doc-size-for-indexing-over-http/17953 "2014-06-06T13:26:48Z")
I'm trying to index a document over 1gb in size but I get the following error. org.elasticsearch.common.netty.handler.codec.frame.TooLongFrameException: HTTP content length exceeded 1073741824 bytes. 1073741824 … --- ## [Fleet UI not displaying CPU and Memory stats for some agents](https://discuss.elastic.co/t/fleet-ui-not-displaying-cpu-and-memory-stats-for-some-agents/354468)
**Author:** [@elastic\_fan](https://discuss.elastic.co/u/elastic_fan)\ **Replies:** 3\ **Last updated:** [March 13, 2024, 9:47am UTC](https://discuss.elastic.co/t/fleet-ui-not-displaying-cpu-and-memory-stats-for-some-agents/354468 "2024-03-13T09:47:42Z")
Hello, I have some agents that are not showing their CPU and Memory usage on the fleet page, but do have the metric updating every few seconds on the agent details page. Elasticsearch version 8.8.2 Elastic agent versi… --- ## [Conditional Coloring on Pie Chart on Canvas](https://discuss.elastic.co/t/conditional-coloring-on-pie-chart-on-canvas/279358)
**Author:** [@Mayank\_Malhotra](https://discuss.elastic.co/u/Mayank_Malhotra)\ **Replies:** 3\ **Last updated:** [July 24, 2021, 3:29pm UTC](https://discuss.elastic.co/t/conditional-coloring-on-pie-chart-on-canvas/279358 "2021-07-24T15:29:19Z")
Hi, I have created a Pie Chart on canvas which consists a field severity which as two values one is ERROR and the other is WARNING. I want to show the part of WARNING in pie-chart as orange and ERROR as red. I Used belo… --- ## [Monitoring API query](https://discuss.elastic.co/t/monitoring-api-query/277200)
**Author:** [@priamai](https://discuss.elastic.co/u/priamai)\ **Replies:** 3\ **Last updated:** [July 1, 2021, 5:30am UTC](https://discuss.elastic.co/t/monitoring-api-query/277200 "2021-07-01T05:30:31Z")
Hi there, I am with ELK 7.13.0 the basic free licence. Is there a way to monitor the queries that are performed via the Elastic API? Even to keep the last N most recent ones for example. I basically have different pyt… --- ## [Date Filter on Unix Epoch Failing](https://discuss.elastic.co/t/date-filter-on-unix-epoch-failing/227422)
**Author:** [@ben-10](https://discuss.elastic.co/u/ben-10)\ **Replies:** 8\ **Last updated:** [April 10, 2020, 4:09pm UTC](https://discuss.elastic.co/t/date-filter-on-unix-epoch-failing/227422 "2020-04-10T16:09:43Z")
The date filter fails when attempting to match a unix epoch integer field and I can't figure out why. The data ingested is from xml using the following logstash config: input { file { path =\> \[ "/home/ben/d… --- ## [When importing Drupal watchdog log file in logstash not getting fields separated from message in elastisearch](https://discuss.elastic.co/t/when-importing-drupal-watchdog-log-file-in-logstash-not-getting-fields-separated-from-message-in-elastisearch/163522)
**Author:** [@Bdr](https://discuss.elastic.co/u/Bdr)\ **Replies:** 8\ **Last updated:** [January 21, 2019, 8:00am UTC](https://discuss.elastic.co/t/when-importing-drupal-watchdog-log-file-in-logstash-not-getting-fields-separated-from-message-in-elastisearch/163522 "2019-01-21T08:00:53Z")
This is my watchdog file Jan 3 06:28:34 10.81.157.182 shopingstore: https://secure.shopingstore.com|1546496914|product\_rest|23.194.213.4|https://secure.shopingstore.com/api/product/part?\_format=json||1||Update Part requ… --- ## [Fuzziness in query\_string](https://discuss.elastic.co/t/fuzziness-in-query-string/160711)
**Author:** [@roru](https://discuss.elastic.co/u/roru)\ **Replies:** 3\ **Last updated:** [December 13, 2018, 2:37pm UTC](https://discuss.elastic.co/t/fuzziness-in-query-string/160711 "2018-12-13T14:37:21Z")
Hi all, I am using query\_string for my queries, because I want the user to be able to use operators like AND and OR. The problem is, that if a user searches for "nestle", he won't get any results, because it is actuall… --- ## [Multi-tenancy problem with Kibana](https://discuss.elastic.co/t/multi-tenancy-problem-with-kibana/135026)
**Author:** [@riccardopierpaoli](https://discuss.elastic.co/u/riccardopierpaoli)\ **Replies:** 3\ **Last updated:** [June 8, 2018, 9:18am UTC](https://discuss.elastic.co/t/multi-tenancy-problem-with-kibana/135026 "2018-06-08T09:18:02Z")
Hello! This is my issue: I try to setup a multi-tenancy system in my Kibana, describe as follow: AS IS ENV Index: twitter\_index, .kibana Dashboards: 1,2,3,4 (stored in .kibana) TO BE ENV (I would like 2 different ki… --- ## [SOLVED! CentOs 7 minimal - Syslog received on port 5000 but not after a redirect fw rule from 514](https://discuss.elastic.co/t/solved-centos-7-minimal-syslog-received-on-port-5000-but-not-after-a-redirect-fw-rule-from-514/120345)
**Author:** [@QuizzyRascal](https://discuss.elastic.co/u/QuizzyRascal)\ **Replies:** 0\ **Last updated:** [February 18, 2018, 11:11am UTC](https://discuss.elastic.co/t/solved-centos-7-minimal-syslog-received-on-port-5000-but-not-after-a-redirect-fw-rule-from-514/120345 "2018-02-18T11:11:14Z")
Hi, I'm running a minimal centos 7 setup and am trying to receive syslog into Elk. I have installed ELK with defaults and all three services are up. Using port 5000 for logstash I have started to receive Syslog - sendi… --- ## [X-pack Monitoring](https://discuss.elastic.co/t/x-pack-monitoring/80053)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 3\ **Last updated:** [March 28, 2017, 11:56am UTC](https://discuss.elastic.co/t/x-pack-monitoring/80053 "2017-03-28T11:56:30Z")
Hi All, We have purchased platinum version of x-pack for production it works perfectly fine ,but for test I have the 30 days trial version but in the monitoring view , iam unable to see the stats ,it says only No Monit… --- ## [Hipchat Integration Errors](https://discuss.elastic.co/t/hipchat-integration-errors/59321)
**Author:** [@denton64](https://discuss.elastic.co/u/denton64)\ **Replies:** 3\ **Last updated:** [August 30, 2016, 9:22pm UTC](https://discuss.elastic.co/t/hipchat-integration-errors/59321 "2016-08-30T21:22:35Z")
Hey there, I have recently been working with setting up Watches for my company. Now that my bELK stack is in production, I would like to separate the apache errors that we are receiving into two distinct rooms. One for… --- ## [Index optimization fails to merge all segments](https://discuss.elastic.co/t/index-optimization-fails-to-merge-all-segments/50984)
**Author:** [@alont](https://discuss.elastic.co/u/alont)\ **Replies:** 3\ **Last updated:** [May 31, 2016, 6:25pm UTC](https://discuss.elastic.co/t/index-optimization-fails-to-merge-all-segments/50984 "2016-05-31T18:25:43Z")
Hello all, We are running a production Elasticsearch 1.7.4 cluster with time-based data sitting in monthly indexes. Indexes with data from previous months are very static and don't get written to, so we've decided to o… --- ## [TopBeat CPU performance counter](https://discuss.elastic.co/t/topbeat-cpu-performance-counter/46826)
**Author:** [@jeremy.cruz](https://discuss.elastic.co/u/jeremy.cruz)\ **Replies:** 3\ **Last updated:** [April 12, 2016, 5:23pm UTC](https://discuss.elastic.co/t/topbeat-cpu-performance-counter/46826 "2016-04-12T17:23:28Z")
I am trying to setup a visualization related to CPU performance for some of our application servers. I want to make sure that the visualization is providing the most accurate information to our customers. The Question … --- ## [Shards not replicating to two nodes](https://discuss.elastic.co/t/shards-not-replicating-to-two-nodes/21685)
**Author:** [@Stewart\_Gray](https://discuss.elastic.co/u/Stewart_Gray)\ **Replies:** 3\ **Last updated:** [January 16, 2015, 1:21pm UTC](https://discuss.elastic.co/t/shards-not-replicating-to-two-nodes/21685 "2015-01-16T13:21:49Z")
I have a new elasticsearch cluster with 4 nodes and for some reason I can't get the shards distributed across all of these. Shards are only being copied to 2/4 rather than all of them which is what I'm after. T… [Previous page](https://discuss.elastic.co/top.md?page=1385&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1387&per_page=50&period=all)