# Top

**URL:** https://discuss.elastic.co/top.md?page=141&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 142

---

## [My mysql docker container and pet clinic client both are showing unhealthy](https://discuss.elastic.co/t/my-mysql-docker-container-and-pet-clinic-client-both-are-showing-unhealthy/354772)

<div class="topic-metadata">

**Author:** [@ericatwood](https://discuss.elastic.co/u/ericatwood)\
**Replies:** 39\
**Last updated:** [April 4, 2024, 5:56pm UTC](https://discuss.elastic.co/t/my-mysql-docker-container-and-pet-clinic-client-both-are-showing-unhealthy/354772 "2024-04-04T17:56:55Z")

</div>

Course: Course 3 -1 -3-3 APM Version: And which particular version? Question: My java client was collecting data after setup, now its not and the 2 docker containers being unhealthy is a problem also. For APM 3-1 to …

---

## [Autocomplete mapping error](https://discuss.elastic.co/t/autocomplete-mapping-error/14938)

<div class="topic-metadata">

**Author:** [@Joshua\_Corb](https://discuss.elastic.co/u/Joshua_Corb)\
**Replies:** 9\
**Last updated:** [December 21, 2013, 5:45pm UTC](https://discuss.elastic.co/t/autocomplete-mapping-error/14938 "2013-12-21T17:45:11Z")

</div>

We are running into an issue where we are getting mapping issues. We are have tried on both Ubuntu and OSX. We are using java 1.7. Attached is our node configuration, and below is the error we are getting. 11:12:4…

---

## [Upgrade from 6.8.3 to 7.X.X results in "failed to apply updated cluster state"](https://discuss.elastic.co/t/upgrade-from-6-8-3-to-7-x-x-results-in-failed-to-apply-updated-cluster-state/207111)

<div class="topic-metadata">

**Author:** [@ricferr1976](https://discuss.elastic.co/u/ricferr1976)\
**Replies:** 12\
**Last updated:** [December 1, 2019, 11:09am UTC](https://discuss.elastic.co/t/upgrade-from-6-8-3-to-7-x-x-results-in-failed-to-apply-updated-cluster-state/207111 "2019-12-01T11:09:21Z")

</div>

Hello. We had a 6.8.3 single node with a lot of data (yes, I know that offers no fault tolerance but its a known limitation) and I tried to upgrade it to 7.4.2. We followed the step by step in https://www.elastic.co/gu…

---

## [All nodes except Master show as “Offline”](https://discuss.elastic.co/t/all-nodes-except-master-show-as-offline/213463)

<div class="topic-metadata">

**Author:** [@Osama\_Tariq](https://discuss.elastic.co/u/Osama_Tariq)\
**Replies:** 11\
**Last updated:** [January 23, 2020, 2:53am UTC](https://discuss.elastic.co/t/all-nodes-except-master-show-as-offline/213463 "2020-01-23T02:53:41Z")

</div>

Hi All, I am getting an issue my other two data nodes of elasticsearch cluster are not shown in Kibana. Although these are up and running in cluster. Please let me know how could i resolve this issue. I am use ELK stack…

---

## [JVM crash on 64 bit SPARC with Elasticsearch 1.2.2 due to unaligned memory access](https://discuss.elastic.co/t/jvm-crash-on-64-bit-sparc-with-elasticsearch-1-2-2-due-to-unaligned-memory-access/18786)

<div class="topic-metadata">

**Author:** [@David\_Roberts\_2](https://discuss.elastic.co/u/David_Roberts_2)\
**Replies:** 25\
**Last updated:** [August 29, 2014, 8:00pm UTC](https://discuss.elastic.co/t/jvm-crash-on-64-bit-sparc-with-elasticsearch-1-2-2-due-to-unaligned-memory-access/18786 "2014-08-29T20:00:17Z")

</div>

Hello, After upgrading from Elasticsearch 1.0.1 to 1.2.2 I'm getting JVM core dumps on Solaris 10 on SPARC. # A fatal error has been detected by the Java Runtime Environment: # # SIGBUS (0xa) at pc=0xffffffff7…

---

## [Intermittent index creation failure on 6.0.0-rc1](https://discuss.elastic.co/t/intermittent-index-creation-failure-on-6-0-0-rc1/105615)

<div class="topic-metadata">

**Author:** [@loren](https://discuss.elastic.co/u/loren)\
**Replies:** 13\
**Last updated:** [October 31, 2017, 5:07pm UTC](https://discuss.elastic.co/t/intermittent-index-creation-failure-on-6-0-0-rc1/105615 "2017-10-31T17:07:18Z")

</div>

I have an integration test that creates a half dozen indices and then tests a bunch of stuff. A few times now, the index fails to get created and I see this in the logs: \[2017-10-26T13:07:34,690\]\[INFO \]\[o.e.c.m.MetaData…

---

## [Missing Integrations from Installed integrations](https://discuss.elastic.co/t/missing-integrations-from-installed-integrations/324181)

<div class="topic-metadata">

**Author:** [@matled](https://discuss.elastic.co/u/matled)\
**Replies:** 9\
**Last updated:** [January 30, 2023, 3:16pm UTC](https://discuss.elastic.co/t/missing-integrations-from-installed-integrations/324181 "2023-01-30T15:16:54Z")

</div>

Elastic-Stack: 8.6.1 We have encountered an issue where Installed Integrations are missing from the Installed Integration page of Fleet Integrations. As an example, the Windows Integration isn't shown as an installed in…

---

## [Converting TimeStamp to epoch in LogStash](https://discuss.elastic.co/t/converting-timestamp-to-epoch-in-logstash/243168)

<div class="topic-metadata">

**Author:** [@Shanmuka\_Chowdary](https://discuss.elastic.co/u/Shanmuka_Chowdary)\
**Replies:** 9\
**Last updated:** [July 31, 2020, 12:22am UTC](https://discuss.elastic.co/t/converting-timestamp-to-epoch-in-logstash/243168 "2020-07-31T00:22:24Z")

</div>

Hi Team, I am trying to get some records from SQLServer through logstash. In the database the record is like this : 2002-09-03 04:00:00.000 , But it's saving in elastic like : "fileddate" : "2002-09-03T04:00:00.000Z" …

---

## [Shard allocation and routing keys](https://discuss.elastic.co/t/shard-allocation-and-routing-keys/62951)

<div class="topic-metadata">

**Author:** [@orweinberger](https://discuss.elastic.co/u/orweinberger)\
**Replies:** 9\
**Last updated:** [October 14, 2016, 2:55pm UTC](https://discuss.elastic.co/t/shard-allocation-and-routing-keys/62951 "2016-10-14T14:55:35Z")

</div>

ES Version: 1.6.2 We have a case where we index documents into timebased indices in a certain pattern: events-2016.10.13 for example. We have 10 data nodes and 30 shards with 2 replicas and we are using a routing key…

---

## [Kibana not loading after providing credential, It is coming back to login page itself](https://discuss.elastic.co/t/kibana-not-loading-after-providing-credential-it-is-coming-back-to-login-page-itself/267086)

<div class="topic-metadata">

**Author:** [@r\_aravind](https://discuss.elastic.co/u/r_aravind)\
**Replies:** 10\
**Last updated:** [May 3, 2021, 7:53pm UTC](https://discuss.elastic.co/t/kibana-not-loading-after-providing-credential-it-is-coming-back-to-login-page-itself/267086 "2021-05-03T19:53:43Z")

</div>

I have setup my ELK stack kibana instance in Azure kubernetes. I have exposed my kibana service to external load balancer and accessing the load balancer service using DNS from NGINX ingress. I have tried accessing elas…

---

## [Curator returns empty output for elasticsearch user](https://discuss.elastic.co/t/curator-returns-empty-output-for-elasticsearch-user/168112)

<div class="topic-metadata">

**Author:** [@George\_Wainwright](https://discuss.elastic.co/u/George_Wainwright)\
**Replies:** 20\
**Last updated:** [February 13, 2019, 5:08pm UTC](https://discuss.elastic.co/t/curator-returns-empty-output-for-elasticsearch-user/168112 "2019-02-13T17:08:10Z")

</div>

On my Ubuntu Xenial host curator doesn't work at all under elasticsearch user: root@elastic1:~# su - elasticsearch -s /bin/bash elasticsearch@elastic1:~ export LC\_ALL=C.UTF-8; export LANG=C.UTF-8 elasticsearch@elastic…

---

## [Failed to download geoip databases](https://discuss.elastic.co/t/failed-to-download-geoip-databases/372274)

<div class="topic-metadata">

**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\
**Replies:** 15\
**Last updated:** [December 27, 2024, 4:38pm UTC](https://discuss.elastic.co/t/failed-to-download-geoip-databases/372274 "2024-12-27T16:38:27Z")

</div>

Hi, I was getting the Geo coordinates and IP countries from my Nginx logs via elastic agents since long time. Now I can see this part is not available to new ingested logs (from same services) and the log field has this…

---

## [Filebeat 1.1.0: Multiline Patterns](https://discuss.elastic.co/t/filebeat-1-1-0-multiline-patterns/46947)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 11\
**Last updated:** [April 15, 2016, 2:00pm UTC](https://discuss.elastic.co/t/filebeat-1-1-0-multiline-patterns/46947 "2016-04-15T14:00:18Z")

</div>

Hi, Does filebeat have any definitions for common patterns that need to be matched in log lines? Could the logstash grok patterns be reused? Is there a way I could make a set of pattern definitions available to filebeat? …

---

## [В кибане не оттображается документы индекса](https://discuss.elastic.co/t/topic/135027)

<div class="topic-metadata">

**Author:** [@orsa](https://discuss.elastic.co/u/orsa)\
**Replies:** 12\
**Last updated:** [June 7, 2018, 10:48pm UTC](https://discuss.elastic.co/t/topic/135027 "2018-06-07T22:48:13Z")

</div>

Добрый день Коллеги, вопрос не первый раз поднимается, но что то я делаю неправильно. Есть кластер ES Есть ВМ с LS Есть ВМ откуда средствами Filebeats забирается тестовый лог. для примера был взят стандартный messa…

---

## [Elasticsearch Watcher error while trying to send email attachment, dashboard.pdf](https://discuss.elastic.co/t/elasticsearch-watcher-error-while-trying-to-send-email-attachment-dashboard-pdf/301048)

<div class="topic-metadata">

**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\
**Replies:** 13\
**Last updated:** [May 12, 2022, 5:53am UTC](https://discuss.elastic.co/t/elasticsearch-watcher-error-while-trying-to-send-email-attachment-dashboard-pdf/301048 "2022-05-12T05:53:09Z")

</div>

Hi, I have created a watcher alert from the advanced option which sends dashboard.pdf as an email attachment when the triggering condition is met. Now when the criteria is matching (threshold is exceeded) then it is thr…

---

## [How can I create custom tags from the data inside a log file using filebeat](https://discuss.elastic.co/t/how-can-i-create-custom-tags-from-the-data-inside-a-log-file-using-filebeat/323657)

<div class="topic-metadata">

**Author:** [@Raja\_Muneer](https://discuss.elastic.co/u/Raja_Muneer)\
**Replies:** 11\
**Last updated:** [January 25, 2023, 11:21am UTC](https://discuss.elastic.co/t/how-can-i-create-custom-tags-from-the-data-inside-a-log-file-using-filebeat/323657 "2023-01-25T11:21:20Z")

</div>

I am using elk stack for a month now. Lately, I have come across a situation where I need some help from the community to save me some time. I am actually running filebeat and elk stack in docker. I am sending logs from …

---

## [Kibana unable to revive connection with Azure ECK](https://discuss.elastic.co/t/kibana-unable-to-revive-connection-with-azure-eck/235366)

<div class="topic-metadata">

**Author:** [@Grant\_V](https://discuss.elastic.co/u/Grant_V)\
**Replies:** 9\
**Last updated:** [June 4, 2020, 1:26pm UTC](https://discuss.elastic.co/t/kibana-unable-to-revive-connection-with-azure-eck/235366 "2020-06-04T13:26:08Z")

</div>

Hi all! Having a bit of a struggle with getting Kibana talking to my elastic http service in ECK. I'm running on an Azure cluster. Kibana pod won't start, produces the following logs: {"type":"log","@timestamp":"2020…

---

## [Filebeat 6.1 not forwarding syslog and container\_log to kafka (0.11.0.1)](https://discuss.elastic.co/t/filebeat-6-1-not-forwarding-syslog-and-container-log-to-kafka-0-11-0-1/118668)

<div class="topic-metadata">

**Author:** [@Sandeep\_Sarkar](https://discuss.elastic.co/u/Sandeep_Sarkar)\
**Replies:** 12\
**Last updated:** [February 13, 2018, 8:51am UTC](https://discuss.elastic.co/t/filebeat-6-1-not-forwarding-syslog-and-container-log-to-kafka-0-11-0-1/118668 "2018-02-13T08:51:45Z")

</div>

Hi , I have filebeat 6.1 and kafka 0.11.0.1. I need to forward syslog and container\_log to kafka. Logs are not getting published, I am getting below log message : 2018/02/06 15:11:15.630752 metrics.go:39: INFO Non-zero…

---

## [Not able to see the geo\_point type fields in Kibana](https://discuss.elastic.co/t/not-able-to-see-the-geo-point-type-fields-in-kibana/80970)

<div class="topic-metadata">

**Author:** [@ankit\_rawat](https://discuss.elastic.co/u/ankit_rawat)\
**Replies:** 11\
**Last updated:** [April 4, 2017, 12:52pm UTC](https://discuss.elastic.co/t/not-able-to-see-the-geo-point-type-fields-in-kibana/80970 "2017-04-04T12:52:56Z")

</div>

Hi I am using packetbeats to get the client location, But in kibana i see that all the geo\_point type fields are missing.Please find the screenshot below I did not find any much information in logs also, Thanks Ank…

---

## [Es document count != wc -l output of file after sending data with logstash?](https://discuss.elastic.co/t/es-document-count-wc-l-output-of-file-after-sending-data-with-logstash/304293)

<div class="topic-metadata">

**Author:** [@elk-user-99](https://discuss.elastic.co/u/elk-user-99)\
**Replies:** 20\
**Last updated:** [May 17, 2022, 9:19pm UTC](https://discuss.elastic.co/t/es-document-count-wc-l-output-of-file-after-sending-data-with-logstash/304293 "2022-05-17T21:19:47Z")

</div>

Hi friends! I've got what I thought was a simple configuration -- the input is a file that passes through 3 filters -- csv to parse the file, mutate to do a character replace that makes the timestamp automatically detec…

---

## [License validation seems to take for very long](https://discuss.elastic.co/t/license-validation-seems-to-take-for-very-long/186126)

<div class="topic-metadata">

**Author:** [@jmartori](https://discuss.elastic.co/u/jmartori)\
**Replies:** 9\
**Last updated:** [June 19, 2019, 12:30pm UTC](https://discuss.elastic.co/t/license-validation-seems-to-take-for-very-long/186126 "2019-06-19T12:30:07Z")

</div>

Hi everyone, we are currently running a cluster 5.6 with 5 nodes, 4 mdi and 1 coordinator, and a valid xpack license. When we restart a node it takes forever (about 8minutes) until the license is validated and node is …

---

## [Try to use aggregate filter](https://discuss.elastic.co/t/try-to-use-aggregate-filter/100078)

<div class="topic-metadata">

**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Replies:** 9\
**Last updated:** [October 10, 2017, 11:55am UTC](https://discuss.elastic.co/t/try-to-use-aggregate-filter/100078 "2017-10-10T11:55:40Z")

</div>

I am trying to use the aggregate filter and that what I am getting in the log: \[2017-09-11T17:53:35,256\]\[ERROR\]\[logstash.plugins.registry\] Problems loading a plugin with {:type=\>"filter", :name=\>"aggregate", :path=\>"log…

---

## [Does single node Elasticsearch supports ILM ploicy](https://discuss.elastic.co/t/does-single-node-elasticsearch-supports-ilm-ploicy/350124)

<div class="topic-metadata">

**Author:** [@Ravi\_Pattar](https://discuss.elastic.co/u/Ravi_Pattar)\
**Replies:** 41\
**Last updated:** [January 15, 2024, 6:46pm UTC](https://discuss.elastic.co/t/does-single-node-elasticsearch-supports-ilm-ploicy/350124 "2024-01-15T18:46:05Z")

</div>

Hello, I have applied the ILM policy because the disk space usage was seen very high. But I don't see any changes in the disk space after implementing the ILM policy for filebeat. shards disk.indices disk.used disk.to…

---

## [Filebeat Netflow module doesn't load](https://discuss.elastic.co/t/filebeat-netflow-module-doesnt-load/237267)

<div class="topic-metadata">

**Author:** [@ahiyaz](https://discuss.elastic.co/u/ahiyaz)\
**Replies:** 13\
**Last updated:** [June 24, 2020, 10:09am UTC](https://discuss.elastic.co/t/filebeat-netflow-module-doesnt-load/237267 "2020-06-24T10:09:25Z")

</div>

hi ive installed filebeat ver 7.7.0 using arm repository. udp input and logstash output work fine. only when im configuring netflow input filebeat fail to start. appreciate your help. bellow is the out put of debug: …

---

## [Copy a value from one field to other if a field exists by using ingestnode pipeline](https://discuss.elastic.co/t/copy-a-value-from-one-field-to-other-if-a-field-exists-by-using-ingestnode-pipeline/289484)

<div class="topic-metadata">

**Author:** [@sidharth\_vijayakumar](https://discuss.elastic.co/u/sidharth_vijayakumar)\
**Replies:** 10\
**Last updated:** [November 18, 2021, 4:39pm UTC](https://discuss.elastic.co/t/copy-a-value-from-one-field-to-other-if-a-field-exists-by-using-ingestnode-pipeline/289484 "2021-11-18T16:39:28Z")

</div>

Hi Team, I want to create a new field called kubernetes.pod.name if fields called prometheus.labels.pod exists in the logs. I found out that from the set processor I could copy the value which is present in prometheus.l…

---

## [Unable to start Elasticsearch 7.5 on RHEL 7](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-5-on-rhel-7/214244)

<div class="topic-metadata">

**Author:** [@stressedsalmon](https://discuss.elastic.co/u/stressedsalmon)\
**Replies:** 15\
**Last updated:** [January 9, 2020, 2:51pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-5-on-rhel-7/214244 "2020-01-09T14:51:39Z")

</div>

Hello, I am having an issue running the elasticsearch service after installation. I have seen another article here which was not answered. I am running into the same issue as the other user. Here are some log files: Pa…

---

## [Logstash cannot load config file](https://discuss.elastic.co/t/logstash-cannot-load-config-file/58113)

<div class="topic-metadata">

**Author:** [@Nizar\_Khalifa](https://discuss.elastic.co/u/Nizar_Khalifa)\
**Replies:** 16\
**Last updated:** [August 16, 2016, 3:46pm UTC](https://discuss.elastic.co/t/logstash-cannot-load-config-file/58113 "2016-08-16T15:46:43Z")

</div>

Hello, I have a problem with Logstash configuration. Its running with 500Xmx. When i tried to increase it in /etc/default/logstash to 1g it doesnt take it into account after retasrting. But when i set LS\_HEAP\_SIZE to 1…

---

## [ICU analysis plugin with elasticsearch 1.7.1](https://discuss.elastic.co/t/icu-analysis-plugin-with-elasticsearch-1-7-1/39946)

<div class="topic-metadata">

**Author:** [@Arun\_Agarwal](https://discuss.elastic.co/u/Arun_Agarwal)\
**Replies:** 10\
**Last updated:** [January 24, 2016, 7:29am UTC](https://discuss.elastic.co/t/icu-analysis-plugin-with-elasticsearch-1-7-1/39946 "2016-01-24T07:29:00Z")

</div>

Hey i am trying to use icu analysis 2.7.0 with elasticsearch 1.7.1 every time i try to run analyze API on a field i get the following error "error":"NoClassDefFoundError\[Could not initialize class org.apache.lucene.anal…

---

## [Logstash 2.3.0 Startup Error](https://discuss.elastic.co/t/logstash-2-3-0-startup-error/46225)

<div class="topic-metadata">

**Author:** [@Sameer\_Dharur](https://discuss.elastic.co/u/Sameer_Dharur)\
**Replies:** 13\
**Last updated:** [April 6, 2016, 9:44am UTC](https://discuss.elastic.co/t/logstash-2-3-0-startup-error/46225 "2016-04-06T09:44:58Z")

</div>

Hello! I had been using this configuration for Logstash 2.2.0 until this morning, which worked perfectly. But after an upgrade to 2.3.0, I get the following error message on the console - An unexpected error occurred…

---

## [Failed to read latest segment infos on flush](https://discuss.elastic.co/t/failed-to-read-latest-segment-infos-on-flush/32438)

<div class="topic-metadata">

**Author:** [@genesis](https://discuss.elastic.co/u/genesis)\
**Replies:** 9\
**Last updated:** [October 20, 2015, 5:46pm UTC](https://discuss.elastic.co/t/failed-to-read-latest-segment-infos-on-flush/32438 "2015-10-20T17:46:45Z")

</div>

Any idea why I am getting: 2015-10-17 19:37:57,551\]\[WARN \]\[index.engine.internal \] \[ElasticSearch-18\] \[abc-2015.10.13\]\[4\] failed to read latest segment infos on flush java.nio.file.FileSystemException: /var/data/elast…

---

## [Unfortunately I have deleted some index files](https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878)

<div class="topic-metadata">

**Author:** [@Ravinder28](https://discuss.elastic.co/u/Ravinder28)\
**Replies:** 17\
**Last updated:** [November 10, 2021, 9:24am UTC](https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878 "2021-11-10T09:24:18Z")

</div>

unfortunately i have deleted some index files in below path. home/Elasticsearch/data/nodes/0/indices/ Elasticsearch is stopped and we are trying to restart the Elasticsearch but am getting below error. "\[2021-10-25T11…

---

## [Elasticsearch Index shards per nodes](https://discuss.elastic.co/t/elasticsearch-index-shards-per-nodes/247445)

<div class="topic-metadata">

**Author:** [@Sergio\_Bortsov](https://discuss.elastic.co/u/Sergio_Bortsov)\
**Replies:** 12\
**Last updated:** [September 7, 2020, 12:44pm UTC](https://discuss.elastic.co/t/elasticsearch-index-shards-per-nodes/247445 "2020-09-07T12:44:32Z")

</div>

Hi! I have the cluster with 3 masters and 10 data nodes. Settings per index include 5 shards and 2 replicas. From what I see the data nodes are loaded unevenly. I can see that shards for the same nodes are not located o…

---

## [Couldn't see the logs in elasticsearch and kibana](https://discuss.elastic.co/t/couldnt-see-the-logs-in-elasticsearch-and-kibana/55546)

<div class="topic-metadata">

**Author:** [@dubul](https://discuss.elastic.co/u/dubul)\
**Replies:** 9\
**Last updated:** [July 15, 2016, 10:21am UTC](https://discuss.elastic.co/t/couldnt-see-the-logs-in-elasticsearch-and-kibana/55546 "2016-07-15T10:21:55Z")

</div>

when we send the logs using filebeat does it create a separate index for filebeat in elastic search and kibana. Or do we need to install the beats dashboard to create the index?

---

## [Uploading csv file: Failed to parse date field dd/MM/yyyy HH:mm](https://discuss.elastic.co/t/uploading-csv-file-failed-to-parse-date-field-dd-mm-yyyy-hh-mm/270813)

<div class="topic-metadata">

**Author:** [@MARCO\_RAMBALDI](https://discuss.elastic.co/u/MARCO_RAMBALDI)\
**Replies:** 23\
**Last updated:** [April 21, 2021, 1:46pm UTC](https://discuss.elastic.co/t/uploading-csv-file-failed-to-parse-date-field-dd-mm-yyyy-hh-mm/270813 "2021-04-21T13:46:16Z")

</div>

Hi, I'm uploading a csv file (; as separator). I identified one of the columns as Machine Time. The format on excel is "customized" as seen in the image below: To parse the date as a date type on Elastic I used the …

---

## [K8s metricbeat not consistently recognizing metric endpoints](https://discuss.elastic.co/t/k8s-metricbeat-not-consistently-recognizing-metric-endpoints/246574)

<div class="topic-metadata">

**Author:** [@jonas27](https://discuss.elastic.co/u/jonas27)\
**Replies:** 15\
**Last updated:** [October 8, 2020, 6:55am UTC](https://discuss.elastic.co/t/k8s-metricbeat-not-consistently-recognizing-metric-endpoints/246574 "2020-10-08T06:55:28Z")

</div>

Hello, I experienced that after restarting metricbeat in kubernetes it recognizes different pods to scan Recognizes fine after restart: Only recognizing before: Only recognizing after: I have checked that all …

---

## [Kibana only display logo no content -elasticsearch error shard](https://discuss.elastic.co/t/kibana-only-display-logo-no-content-elasticsearch-error-shard/185529)

<div class="topic-metadata">

**Author:** [@callmejon](https://discuss.elastic.co/u/callmejon)\
**Replies:** 18\
**Last updated:** [June 13, 2019, 11:46pm UTC](https://discuss.elastic.co/t/kibana-only-display-logo-no-content-elasticsearch-error-shard/185529 "2019-06-13T23:46:27Z")

</div>

im new to the elastic search, we use it to capture cisco callmanager cdr record. but it seems stop working recently. it keeped 2yr of data. could you please help to get it working again? tried restart the ubuntu ser…

---

## [Self hosted app search .Net Core UI](https://discuss.elastic.co/t/self-hosted-app-search-net-core-ui/216633)

<div class="topic-metadata">

**Author:** [@Srini12](https://discuss.elastic.co/u/Srini12)\
**Replies:** 14\
**Last updated:** [March 5, 2020, 12:00pm UTC](https://discuss.elastic.co/t/self-hosted-app-search-net-core-ui/216633 "2020-03-05T12:00:06Z")

</div>

Good Day, We are planning to use app search self managed service to integrate into .Net Core MVC UI. I am able to set up app search self managed instance on Linux machine. Is there any sample Appsearch client UI in .…

---

## [Connection Refused](https://discuss.elastic.co/t/connection-refused/313418)

<div class="topic-metadata">

**Author:** [@ombit](https://discuss.elastic.co/u/ombit)\
**Replies:** 10\
**Last updated:** [September 19, 2022, 1:08pm UTC](https://discuss.elastic.co/t/connection-refused/313418 "2022-09-19T13:08:23Z")

</div>

Hi all, I need to create a solution that amends syslogs to be RFC3164 compliant and ultimately send them on to a QRADAR at a customer's site. To test this I have created two linux VMs both of which can ping each other…

---

## [The logstash'pipeline is running, but elasticsearch didnt create an index for data](https://discuss.elastic.co/t/the-logstashpipeline-is-running-but-elasticsearch-didnt-create-an-index-for-data/232768)

<div class="topic-metadata">

**Author:** [@Joseph-Gan-wk](https://discuss.elastic.co/u/Joseph-Gan-wk)\
**Replies:** 9\
**Last updated:** [May 19, 2020, 2:52am UTC](https://discuss.elastic.co/t/the-logstashpipeline-is-running-but-elasticsearch-didnt-create-an-index-for-data/232768 "2020-05-19T02:52:27Z")

</div>

Hi all, i am facing an issue is the elasticsearch did not create an index for data on Kibana. I checked the Logstash-plain.log that shows two pipelines are running. \[2020-05-15T15:42:41,124\]\[INFO \]\[logstash.agent …

---

## [Hosts as name instead of IP?](https://discuss.elastic.co/t/hosts-as-name-instead-of-ip/157536)

<div class="topic-metadata">

**Author:** [@BigAlbert](https://discuss.elastic.co/u/BigAlbert)\
**Replies:** 9\
**Last updated:** [November 21, 2018, 11:33am UTC](https://discuss.elastic.co/t/hosts-as-name-instead-of-ip/157536 "2018-11-21T11:33:46Z")

</div>

in my conf file, can I use the Elasticsearch machine "name" instead of IP? tried using hosts =\> \["Elasticsearch:9200"\] yet failed. notice that I CAN ping Elasticsearch .. THX -Albert.

---

## [Elasticsearch download on aws ec2 linux](https://discuss.elastic.co/t/elasticsearch-download-on-aws-ec2-linux/233575)

<div class="topic-metadata">

**Author:** [@Jun.8](https://discuss.elastic.co/u/Jun.8)\
**Replies:** 15\
**Last updated:** [May 30, 2020, 1:23pm UTC](https://discuss.elastic.co/t/elasticsearch-download-on-aws-ec2-linux/233575 "2020-05-30T13:23:30Z")

</div>

Hi, I'm trying to set elasticsearch on my AWS EC2 Linux server. I've followed the steps in https://www.elastic.co/guide/en/elasticsearch/reference/current/rpm.html using rpm. But I found the error message when I input …

---

## [Please help](https://discuss.elastic.co/t/please-help/181457)

<div class="topic-metadata">

**Author:** [@Aryan90](https://discuss.elastic.co/u/Aryan90)\
**Replies:** 9\
**Last updated:** [May 22, 2019, 6:32pm UTC](https://discuss.elastic.co/t/please-help/181457 "2019-05-22T18:32:45Z")

</div>

\[elastic@elasticsearch elasticsearch\] sudo systemctl status elasticsearch -l ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) …

---

## [Logstash Message Parsing](https://discuss.elastic.co/t/logstash-message-parsing/98970)

<div class="topic-metadata">

**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\
**Replies:** 13\
**Last updated:** [September 5, 2017, 2:49pm UTC](https://discuss.elastic.co/t/logstash-message-parsing/98970 "2017-09-05T14:49:41Z")

</div>

Hi - I have the message in the below format, I couldn’t able to filter it and convert it to JSON or XML. I’d want to convert this to Key =\> Value pair of (Name =\> Value) and store it in ELK. Could someone please let m…

---

## [Index Template vs Logstash Managed Template](https://discuss.elastic.co/t/index-template-vs-logstash-managed-template/34897)

<div class="topic-metadata">

**Author:** [@aacb9](https://discuss.elastic.co/u/aacb9)\
**Replies:** 10\
**Last updated:** [November 19, 2015, 12:46am UTC](https://discuss.elastic.co/t/index-template-vs-logstash-managed-template/34897 "2015-11-19T00:46:57Z")

</div>

Is there any downside to using logstash managed template vs elasticsearch index template? The output for logstash looks like %{type}-%{+YYYY.MM.dd}, so I'm not sure if logstash mapped template can even be like %{type}.j…

---

## [Stored Procedure](https://discuss.elastic.co/t/stored-procedure/158519)

<div class="topic-metadata">

**Author:** [@Raghunadhan](https://discuss.elastic.co/u/Raghunadhan)\
**Replies:** 9\
**Last updated:** [December 11, 2018, 5:35am UTC](https://discuss.elastic.co/t/stored-procedure/158519 "2018-12-11T05:35:52Z")

</div>

I want to stored procedure in elastic search as in sql For example in sql stored procedure contains insert operations conditions insert operations based on conditions(like if condition). Example of Stored Procedure …

---

## [Autodiscover with hints, discover pods from all namespaces](https://discuss.elastic.co/t/autodiscover-with-hints-discover-pods-from-all-namespaces/147939)

<div class="topic-metadata">

**Author:** [@havlan](https://discuss.elastic.co/u/havlan)\
**Replies:** 9\
**Last updated:** [September 25, 2018, 7:59am UTC](https://discuss.elastic.co/t/autodiscover-with-hints-discover-pods-from-all-namespaces/147939 "2018-09-25T07:59:25Z")

</div>

Hi! I could not find any documentation regarding how to use autodiscover with hints and discover from all namespaces, is it possible to do this? Elastic stack: 6.4.0 Example Filebeat config: filebeat.autodiscover: …

---

## [Can we use more master nodes instead of 'coordinating only'](https://discuss.elastic.co/t/can-we-use-more-master-nodes-instead-of-coordinating-only/266123)

<div class="topic-metadata">

**Author:** [@NLSVTN](https://discuss.elastic.co/u/NLSVTN)\
**Replies:** 15\
**Last updated:** [March 12, 2021, 8:28pm UTC](https://discuss.elastic.co/t/can-we-use-more-master-nodes-instead-of-coordinating-only/266123 "2021-03-12T20:28:13Z")

</div>

Hi, We have an issue that is supposed to be resolved by adding 'coordinating only' nodes: But on AWS (it might be a special case due to the fact that we are using internal company system built on top of AWS for secur…

---

## [Could not see OCR text in "content" field](https://discuss.elastic.co/t/could-not-see-ocr-text-in-content-field/238653)

<div class="topic-metadata">

**Author:** [@saikat189](https://discuss.elastic.co/u/saikat189)\
**Replies:** 18\
**Last updated:** [July 6, 2020, 7:40am UTC](https://discuss.elastic.co/t/could-not-see-ocr-text-in-content-field/238653 "2020-07-06T07:40:23Z")

</div>

I am using fs crawler with below settings --- name: "test2" fs: url: "/home/local/es" update\_rate: "2m" excludes: - "\*/~\*" json\_support: false filename\_as\_id: false add\_filesize: true remove\_deleted: tru…

---

## [Rollover alias to new index](https://discuss.elastic.co/t/rollover-alias-to-new-index/242629)

<div class="topic-metadata">

**Author:** [@vicky0639](https://discuss.elastic.co/u/vicky0639)\
**Replies:** 15\
**Last updated:** [July 27, 2020, 10:38pm UTC](https://discuss.elastic.co/t/rollover-alias-to-new-index/242629 "2020-07-27T22:38:55Z")

</div>

hi, I created a rollover index and alias. The alias is pointing to new as well as old index when i try to read data from alias. how can i remove the old index from alias? Thanks Vicky

---

## [Elastic endpoint isn't installed after adding Elastic Defend integration](https://discuss.elastic.co/t/elastic-endpoint-isnt-installed-after-adding-elastic-defend-integration/359450)

<div class="topic-metadata">

**Author:** [@OoO](https://discuss.elastic.co/u/OoO)\
**Replies:** 16\
**Last updated:** [June 14, 2024, 8:11am UTC](https://discuss.elastic.co/t/elastic-endpoint-isnt-installed-after-adding-elastic-defend-integration/359450 "2024-06-14T08:11:19Z")

</div>

Hello world, I have a problem when testing Elastic Security with "Current plan:Basic". OS Version: Ubuntu 20.04 for Elastic Agent and Elasticsearch-Kibana-Fleet serve Elastic Stack Version: 8.13.4 I am using the super…

[Previous page](https://discuss.elastic.co/top.md?page=140&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=142&per_page=50&period=all)
