# Top **URL:** https://discuss.elastic.co/top.md?page=1424&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1425 --- ## [Logstash AND Elasticsearch - mapper\_parsing\_exception - geo\_point](https://discuss.elastic.co/t/logstash-and-elasticsearch-mapper-parsing-exception-geo-point/131482)
**Author:** [@Alessio\_Frabotta](https://discuss.elastic.co/u/Alessio_Frabotta)\ **Replies:** 1\ **Last updated:** [May 17, 2018, 12:19pm UTC](https://discuss.elastic.co/t/logstash-and-elasticsearch-mapper-parsing-exception-geo-point/131482 "2018-05-17T12:19:32Z")
Through logstash I sent my log messages to elasticsearch and a message has the following structure: { "message" =\> "{\\"@version\\":1,\\"level\\":\\"INFO\\",\\"logger\_name\\":\\"it.test.elk.ELKTestApplication\\",\\"appName\\":\\… --- ## [Вопросы на понимание работы кластера es](https://discuss.elastic.co/t/es/77473)
**Author:** [@aliksbright](https://discuss.elastic.co/u/aliksbright)\ **Replies:** 1\ **Last updated:** [March 6, 2017, 7:06pm UTC](https://discuss.elastic.co/t/es/77473 "2017-03-06T19:06:27Z")
Недавно начал разбираться с работой кластера ES (5.2), и возникли вопросы Как я понял, для каждого шарда есть всегда один работающая мастер нода, которая делает индексацию документа в шард. Каким образом изменения поп… --- ## [Aggregations on date fields](https://discuss.elastic.co/t/aggregations-on-date-fields/73262)
**Author:** [@stevenmwall](https://discuss.elastic.co/u/stevenmwall)\ **Replies:** 1\ **Last updated:** [January 31, 2017, 9:24am UTC](https://discuss.elastic.co/t/aggregations-on-date-fields/73262 "2017-01-31T09:24:40Z")
I am trying to create an aggregation on a date field (in my case, named "startDate") that will put documents into buckets based upon the startDate month (while ignoring the year). For example, documents with a start dat… --- ## [I found the count of hits from curl does not equal to the count of hits from kibana](https://discuss.elastic.co/t/i-found-the-count-of-hits-from-curl-does-not-equal-to-the-count-of-hits-from-kibana/49845)
**Author:** [@jixiuf](https://discuss.elastic.co/u/jixiuf)\ **Replies:** 1\ **Last updated:** [May 16, 2016, 2:22pm UTC](https://discuss.elastic.co/t/i-found-the-count-of-hits-from-curl-does-not-equal-to-the-count-of-hits-from-kibana/49845 "2016-05-16T14:22:51Z")
curl -XPOST 'localhost:9200/zjh\_assets\*/\_search?pretty' -d ' { "query": { "query\_string": { "query": "\*", "analyze\_wildcard": true } } }' "took" : 782, "timed\_out" : false,… --- ## [Packetbeat not publishing events to remote tcp on windows](https://discuss.elastic.co/t/packetbeat-not-publishing-events-to-remote-tcp-on-windows/42925)
**Author:** [@abhinavzspace](https://discuss.elastic.co/u/abhinavzspace)\ **Replies:** 1\ **Last updated:** [February 29, 2016, 4:16am UTC](https://discuss.elastic.co/t/packetbeat-not-publishing-events-to-remote-tcp-on-windows/42925 "2016-02-29T04:16:58Z")
I checked that TCP connection was established with mac machine where ELK setup is running. I am trying to output the logs to logstash. Following are my packetbeat.yml and logs I collected by running packetbeat.exe in deb… --- ## [Host field not present on logstash event](https://discuss.elastic.co/t/host-field-not-present-on-logstash-event/37906)
**Author:** [@thematthewgreen](https://discuss.elastic.co/u/thematthewgreen)\ **Replies:** 1\ **Last updated:** [January 5, 2016, 6:57am UTC](https://discuss.elastic.co/t/host-field-not-present-on-logstash-event/37906 "2016-01-05T06:57:17Z")
Greetings. I am shipping logs from two servers in disparate data centers and utilizing the lumberjack plugin as a means of communication between the two. The communication is working fine (no ssl issues) but when the … --- ## [Tile Map not working with geoip](https://discuss.elastic.co/t/tile-map-not-working-with-geoip/34591)
**Author:** [@tpnoonan](https://discuss.elastic.co/u/tpnoonan)\ **Replies:** 1\ **Last updated:** [November 14, 2015, 5:00pm UTC](https://discuss.elastic.co/t/tile-map-not-working-with-geoip/34591 "2015-11-14T17:00:31Z")
i've been working this weekend to enhance our net flow data being fed into ElasticSearch. I successfully setup log stash to publish geo ip data into my index (YAY!!!), but when I go to visualize in Kibana using a tile ma… --- ## [How to deal with mainframe system logs with Elasticseach ELK stack](https://discuss.elastic.co/t/how-to-deal-with-mainframe-system-logs-with-elasticseach-elk-stack/20638)
**Author:** [@RaviKumar\_Potnuru](https://discuss.elastic.co/u/RaviKumar_Potnuru)\ **Replies:** 1\ **Last updated:** [November 7, 2014, 8:51pm UTC](https://discuss.elastic.co/t/how-to-deal-with-mainframe-system-logs-with-elasticseach-elk-stack/20638 "2014-11-07T20:51:09Z")
Hi Team, I am working on ELK suite with all JAVA based applciations and no problem so far or atlease i can sort out my self.. but now i want to deal with mainframe logs and can anybody suggest a good artical that… --- ## [How to register Custom Query Parser Plugin in ES 6.2.4](https://discuss.elastic.co/t/how-to-register-custom-query-parser-plugin-in-es-6-2-4/143361)
**Author:** [@amit.nema](https://discuss.elastic.co/u/amit.nema)\ **Replies:** 2\ **Last updated:** [August 31, 2018, 3:29pm UTC](https://discuss.elastic.co/t/how-to-register-custom-query-parser-plugin-in-es-6-2-4/143361 "2018-08-31T15:29:17Z")
Hello, I am using Elasticsearch 6.2.4. I am trying to create the Custom Query Parser Plugin. I saw the mesage under https://discuss.elastic.co/t/custom-query-parser-possible from May, 2011. I have created my custom q… --- ## [Parsing json file](https://discuss.elastic.co/t/parsing-json-file/111224)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 2\ **Last updated:** [December 13, 2017, 3:17am UTC](https://discuss.elastic.co/t/parsing-json-file/111224 "2017-12-13T03:17:44Z")
Hi All, I am trying to parse the .json file its perfectly getting parsed when I do stdin i.e. per entry but .json being a file with comma separated entries how do I parse using file input parameter? here is my file and… --- ## [Logstash not parsing multiple logs for different type](https://discuss.elastic.co/t/logstash-not-parsing-multiple-logs-for-different-type/93606)
**Author:** [@Ahmed.O](https://discuss.elastic.co/u/Ahmed.O)\ **Replies:** 2\ **Last updated:** [August 4, 2017, 4:38pm UTC](https://discuss.elastic.co/t/logstash-not-parsing-multiple-logs-for-different-type/93606 "2017-08-04T16:38:38Z")
Hi Team, I have been looking for logstash configuration that should parse two different log types and to create different indexes for types. in my case i have .log and .CSV file types, That i'm capturing through filebea… --- ## [Reindex to change type with wildcard indexes](https://discuss.elastic.co/t/reindex-to-change-type-with-wildcard-indexes/78374)
**Author:** [@p\_kc](https://discuss.elastic.co/u/p_kc)\ **Replies:** 2\ **Last updated:** [March 14, 2017, 7:46am UTC](https://discuss.elastic.co/t/reindex-to-change-type-with-wildcard-indexes/78374 "2017-03-14T07:46:00Z")
Hello, When I started to send data from logstash to elasticsearch the format was set to string for several inputs. I'd like to change the format from string to integer, but it looks like it requires reindexing the wh… --- ## [Kept include\_in\_all:false in mapping?](https://discuss.elastic.co/t/kept-include-in-all-false-in-mapping/75494)
**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Replies:** 2\ **Last updated:** [February 17, 2017, 3:39pm UTC](https://discuss.elastic.co/t/kept-include-in-all-false-in-mapping/75494 "2017-02-17T15:39:44Z")
Hi, If i kept include\_in\_all:False for a field in mapping then whether that field is searchable or not? If i kept include\_in\_all:True in mapping and index:false for a field whether i can able to search the the field? … --- ## [Monitoring for field data circuit breaker](https://discuss.elastic.co/t/monitoring-for-field-data-circuit-breaker/48957)
**Author:** [@JeremyinNC](https://discuss.elastic.co/u/JeremyinNC)\ **Replies:** 2\ **Last updated:** [September 9, 2016, 6:47pm UTC](https://discuss.elastic.co/t/monitoring-for-field-data-circuit-breaker/48957 "2016-09-09T18:47:01Z")
We have an ES cluster that is having issues where it is hitting the field data breaker over and over after running with out problems for weeks. Clearing the cache appears to tempoarly resolve the issue but then it comes … --- ## [Single syslog input to multiple indices output](https://discuss.elastic.co/t/single-syslog-input-to-multiple-indices-output/57433)
**Author:** [@bastianhoss](https://discuss.elastic.co/u/bastianhoss)\ **Replies:** 2\ **Last updated:** [August 17, 2016, 7:27am UTC](https://discuss.elastic.co/t/single-syslog-input-to-multiple-indices-output/57433 "2016-08-17T07:27:53Z")
Hi Community, searching a way for multiple indice output. In this case with a lot of different programs. Cisco ASA... My inputs is syslog, forwarding rsyslog massages in type "syslog" input { syslog { type… --- ## [Repository-hdfs on elasticsearch 2.1.0](https://discuss.elastic.co/t/repository-hdfs-on-elasticsearch-2-1-0/37298)
**Author:** [@Benny](https://discuss.elastic.co/u/Benny)\ **Replies:** 2\ **Last updated:** [December 18, 2015, 1:01pm UTC](https://discuss.elastic.co/t/repository-hdfs-on-elasticsearch-2-1-0/37298 "2015-12-18T13:01:23Z")
Hi, I'm elasticsearch beginner and trying install repository-hdfs on elasticsearch 2.x. However it always be failed. On elasticsearch-2.0.0-beta1, elasticsearch-2.0.1 and elasticsearch-2.1.0, while installing reposito… --- ## [Shield - Kibana4 - User Access Control - Keeping Marketing Matt from doing what comes naturally](https://discuss.elastic.co/t/shield-kibana4-user-access-control-keeping-marketing-matt-from-doing-what-comes-naturally/24017)
**Author:** [@bdunbar](https://discuss.elastic.co/u/bdunbar)\ **Replies:** 2\ **Last updated:** [June 22, 2015, 4:53pm UTC](https://discuss.elastic.co/t/shield-kibana4-user-access-control-keeping-marketing-matt-from-doing-what-comes-naturally/24017 "2015-06-22T16:53:58Z")
Seeking guidance. We're new to ES. Using ES, Logstash, Kibana4 to provide webstats. We want very badly to be able to allow Matt from Marketing to login to Kibana, sort data, create visualizations and dashboards, but… --- ## [Ruby filter plugin does not read new field values](https://discuss.elastic.co/t/ruby-filter-plugin-does-not-read-new-field-values/283343)
**Author:** [@priyaankaa](https://discuss.elastic.co/u/priyaankaa)\ **Replies:** 8\ **Last updated:** [September 5, 2021, 2:22pm UTC](https://discuss.elastic.co/t/ruby-filter-plugin-does-not-read-new-field-values/283343 "2021-09-05T14:22:25Z")
How to get correct value of the field inside ruby code in logstash pipeline? sample 1: input { elasticsearch { hosts =\> "http://localhost:9200" index =\> "test1" } } filter { mutate { add\_field =\>… --- ## [Dec 25th, 2018: \[EN\]\[Kibana\] Awesome Kibana Spaces](https://discuss.elastic.co/t/dec-25th-2018-en-kibana-awesome-kibana-spaces/159969)
**Author:** [@rashmi](https://discuss.elastic.co/u/rashmi)\ **Replies:** 0\ **Last updated:** [December 25, 2018, 12:00am UTC](https://discuss.elastic.co/t/dec-25th-2018-en-kibana-awesome-kibana-spaces/159969 "2018-12-25T00:00:03Z")
What is a Space? This feature was newly introduced in Kibana 6.5.0. Kibana Spaces allows you to organize your dashboards, visualizations and other saved objects into meaningful categories based on team, use case, individ… --- ## [X-Pack monitoring caches DNS indefinitely?](https://discuss.elastic.co/t/x-pack-monitoring-caches-dns-indefinitely/124191)
**Author:** [@amcinnes](https://discuss.elastic.co/u/amcinnes)\ **Replies:** 6\ **Last updated:** [April 13, 2018, 4:21pm UTC](https://discuss.elastic.co/t/x-pack-monitoring-caches-dns-indefinitely/124191 "2018-04-13T16:21:13Z")
I've encountered the same problem as described in https://discuss.elastic.co/t/consistantly-losing-monitoring-data-for-clusters/92512: I have a separate monitoring cluster, and sometimes my cluster stops sending data to … --- ## [Save elasticsearch results](https://discuss.elastic.co/t/save-elasticsearch-results/101836)
**Author:** [@afonso.ribeiro](https://discuss.elastic.co/u/afonso.ribeiro)\ **Replies:** 6\ **Last updated:** [September 26, 2017, 4:03pm UTC](https://discuss.elastic.co/t/save-elasticsearch-results/101836 "2017-09-26T16:03:54Z")
Hi everyone, I'm taking the first steps in elasticsearch and I have a question. I have an index with the sales of my company and the respective sales days. I need to add up all the sales per month and make a chart to … --- ## [Elastic Platinum License Pricing](https://discuss.elastic.co/t/elastic-platinum-license-pricing/324317)
**Author:** [@mostafaelsayed](https://discuss.elastic.co/u/mostafaelsayed)\ **Replies:** 4\ **Last updated:** [January 31, 2023, 2:21pm UTC](https://discuss.elastic.co/t/elastic-platinum-license-pricing/324317 "2023-01-31T14:21:23Z")
Hello Can someone please help me with info on how to determine the pricing associated with the Platinum license using self-managed ELK instance and how that will vary with the volume of the data or the resources consump… --- ## [Kibana 8.0.0 not running](https://discuss.elastic.co/t/kibana-8-0-0-not-running/297053)
**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\ **Replies:** 4\ **Last updated:** [February 12, 2022, 5:01pm UTC](https://discuss.elastic.co/t/kibana-8-0-0-not-running/297053 "2022-02-12T17:01:30Z")
Hello friends, good morning After installing kibana version 8.0.0, unfortunately, everything I do will not work I already have a 7.16 kibana Operating system: debian 11 Installation steps in order 1 =\> install kiban… --- ## [Elastic APM not working out of the box when custom ConcurrentKafkaListenerContainerFactory](https://discuss.elastic.co/t/elastic-apm-not-working-out-of-the-box-when-custom-concurrentkafkalistenercontainerfactory/293046)
**Author:** [@solveretur](https://discuss.elastic.co/u/solveretur)\ **Replies:** 4\ **Last updated:** [January 5, 2022, 5:40pm UTC](https://discuss.elastic.co/t/elastic-apm-not-working-out-of-the-box-when-custom-concurrentkafkalistenercontainerfactory/293046 "2022-01-05T17:40:54Z")
Kibana version: v 7.12.1 Elasticsearch version: 7.12.1 APM Server version: 7.12.1 APM Agent language and version: "co.elastic.apm:apm-agent-attach:1.25.0" Original install method (e.g. download page, yum, deb, fr… --- ## [I downloaded and installed elasticsearch](https://discuss.elastic.co/t/i-downloaded-and-installed-elasticsearch/266623)
**Author:** [@PaulGureghian](https://discuss.elastic.co/u/PaulGureghian)\ **Replies:** 4\ **Last updated:** [March 9, 2021, 10:21pm UTC](https://discuss.elastic.co/t/i-downloaded-and-installed-elasticsearch/266623 "2021-03-09T22:21:54Z")
\*\*On Linux Mint. I extracted the archive tar.gz and cd into elasticsearch dir and ran ./bin/elasticsearch, \*\* The error message was: could not find java in the bundled jdk dir. I have Open JDK already installed on my s… --- ## [How to setup Opbeans-dotnet for Elastic APM](https://discuss.elastic.co/t/how-to-setup-opbeans-dotnet-for-elastic-apm/248038)
**Author:** [@ckough](https://discuss.elastic.co/u/ckough)\ **Replies:** 4\ **Last updated:** [September 12, 2020, 5:23am UTC](https://discuss.elastic.co/t/how-to-setup-opbeans-dotnet-for-elastic-apm/248038 "2020-09-12T05:23:23Z")
Hi there, I'm running ELK 7.7 with APM 7.7. I have successfully setup Opbeans-java for APM monitoring. I have also downloaded and run the Opbeans-dotnet application. How do i setup APM .net agent for it? I have run … --- ## [Sum of miliseconds Kibana](https://discuss.elastic.co/t/sum-of-miliseconds-kibana/236790)
**Author:** [@gribeiro](https://discuss.elastic.co/u/gribeiro)\ **Replies:** 4\ **Last updated:** [June 14, 2020, 5:43pm UTC](https://discuss.elastic.co/t/sum-of-miliseconds-kibana/236790 "2020-06-14T17:43:49Z")
Hi, I have in my SQL Server a DateTime2 Field which represents how long a task took to be completed. In a simple way, the value is StartDateTimeOfTask - GetDate(), that gives me the result in seconds, and it would be s… --- ## [Integração do Elastic Cloud ao Front End](https://discuss.elastic.co/t/integracao-do-elastic-cloud-ao-front-end/229338)
**Author:** [@Renato\_Razal](https://discuss.elastic.co/u/Renato_Razal)\ **Replies:** 4\ **Last updated:** [April 22, 2020, 10:40pm UTC](https://discuss.elastic.co/t/integracao-do-elastic-cloud-ao-front-end/229338 "2020-04-22T22:40:40Z")
Olá, boa tarde. Estou tentando integrar o Elasticsearch a um aplicativo React, e pela quantidade de informações a respeito, não sei se é possivel faze-lo. O maior problema é que o aplicativo não possui um BackEnd (esta… --- ## [Unable to create index pattern](https://discuss.elastic.co/t/unable-to-create-index-pattern/141782)
**Author:** [@youss](https://discuss.elastic.co/u/youss)\ **Replies:** 4\ **Last updated:** [July 30, 2018, 8:02am UTC](https://discuss.elastic.co/t/unable-to-create-index-pattern/141782 "2018-07-30T08:02:01Z")
Hi all, I'm facing a problem while creating a kibana index pattern .when i select the index to define ,i failed in the step 2 after selecting my time filter field name, who is set as a date type . Can anyone help me … --- ## [ES Scroll is returning duplicate/same results](https://discuss.elastic.co/t/es-scroll-is-returning-duplicate-same-results/274327)
**Author:** [@vedantkdesai](https://discuss.elastic.co/u/vedantkdesai)\ **Replies:** 7\ **Last updated:** [May 28, 2021, 12:59pm UTC](https://discuss.elastic.co/t/es-scroll-is-returning-duplicate-same-results/274327 "2021-05-28T12:59:15Z")
Hi Team, I was using the ES scroll mechanism for pagination. I found that we are getting the same/duplicate results in the subsequent scroll request made. Could you please help us here? Thanks in advance! --- ## [APM python agent stoped showing boto3 spans](https://discuss.elastic.co/t/apm-python-agent-stoped-showing-boto3-spans/157559)
**Author:** [@Ahmad\_Al-Masry](https://discuss.elastic.co/u/Ahmad_Al-Masry)\ **Replies:** 7\ **Last updated:** [January 2, 2019, 8:29am UTC](https://discuss.elastic.co/t/apm-python-agent-stoped-showing-boto3-spans/157559 "2019-01-02T08:29:05Z")
Hi; We are using elastic cloud and we were using 6.4.3 and apm agent 3.0.3, then, the boto3 instrumentation went so well, but after we upgraded to 6.5.0 and apm agent 4.0.1 the distributed tracing went well but the boto… --- ## [Winlogbeat SSL setup with ElasticSearch and Kibana with SSL enabled](https://discuss.elastic.co/t/winlogbeat-ssl-setup-with-elasticsearch-and-kibana-with-ssl-enabled/313094)
**Author:** [@RonH8](https://discuss.elastic.co/u/RonH8)\ **Replies:** 1\ **Last updated:** [August 31, 2022, 9:20am UTC](https://discuss.elastic.co/t/winlogbeat-ssl-setup-with-elasticsearch-and-kibana-with-ssl-enabled/313094 "2022-08-31T09:20:00Z")
Hey I've set up Elasticsearch and Kibana with SSL enabled for both of them with certificates that were generated using elasticsearch-certutil, running on Ubuntu 22.04.1 LTS. It's my first time setting up Elasticsearch,… --- ## [Documents disappearing?](https://discuss.elastic.co/t/documents-disappearing/167158)
**Author:** [@Delf](https://discuss.elastic.co/u/Delf)\ **Replies:** 1\ **Last updated:** [February 5, 2019, 5:49pm UTC](https://discuss.elastic.co/t/documents-disappearing/167158 "2019-02-05T17:49:08Z")
Hellow guys ! My post & 1st question here, be kind to me :stuck\_out\_tongue: So here's my problem : we have multiple indices, but the primary and bigger one is starting to lose documents by the seconds I'm talking here. … --- ## [Filebeat doesn't log anythign with kubernetes autodiscover](https://discuss.elastic.co/t/filebeat-doesnt-log-anythign-with-kubernetes-autodiscover/144933)
**Author:** [@lassizci](https://discuss.elastic.co/u/lassizci)\ **Replies:** 1\ **Last updated:** [August 20, 2018, 9:13am UTC](https://discuss.elastic.co/t/filebeat-doesnt-log-anythign-with-kubernetes-autodiscover/144933 "2018-08-20T09:13:29Z")
Hi, I've been trying to set up kubernetes logging with filebeat from outside our kubernetes cluster. Here is my config: filebeat: autodiscover: providers: - type: kubernetes kube\_config: /etc/kuberne… --- ## [How to convert datatype field from "string" to "integer" with mutate filter?](https://discuss.elastic.co/t/how-to-convert-datatype-field-from-string-to-integer-with-mutate-filter/143272)
**Author:** [@med\_amine](https://discuss.elastic.co/u/med_amine)\ **Replies:** 1\ **Last updated:** [August 7, 2018, 8:52am UTC](https://discuss.elastic.co/t/how-to-convert-datatype-field-from-string-to-integer-with-mutate-filter/143272 "2018-08-07T08:52:33Z")
hello , i'm using mutate filter to convert datatype filed from string to integer in logstash config file but no result it still showing string as type to "bytes\_sent" field , this is the filter ; mutate { convert =\> … --- ## [HELP: Injecting PCAP to ELK](https://discuss.elastic.co/t/help-injecting-pcap-to-elk/101560)
**Author:** [@nuggetinu](https://discuss.elastic.co/u/nuggetinu)\ **Replies:** 1\ **Last updated:** [September 23, 2017, 7:40pm UTC](https://discuss.elastic.co/t/help-injecting-pcap-to-elk/101560 "2017-09-23T19:40:52Z")
I have an access point from which I would like to capture traffic and visualize it through ELK. I am collecting traffic from the AP by using plink.exe on Windows to ssh the AP and running tcp dump on the AP outputting to… --- ## [Cluster-Default index allocation box?](https://discuss.elastic.co/t/cluster-default-index-allocation-box/72839)
**Author:** [@no\_jihun](https://discuss.elastic.co/u/no_jihun)\ **Replies:** 1\ **Last updated:** [January 27, 2017, 8:57am UTC](https://discuss.elastic.co/t/cluster-default-index-allocation-box/72839 "2017-01-27T08:57:17Z")
Hello. Is there a way to have cluster-default index allocation box settings? I mean, There are many indices(ON SSD backed nodes) and some templates. Some indices were created with index template, but others not. N… --- ## [Change kibana.autocompleteTerminateAfter](https://discuss.elastic.co/t/change-kibana-autocompleteterminateafter/285311)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 3\ **Last updated:** [September 29, 2021, 3:07pm UTC](https://discuss.elastic.co/t/change-kibana-autocompleteterminateafter/285311 "2021-09-29T15:07:08Z")
Hi In a deployment with Elasticsearch and kibana, I get the below: I saw from Terms list might be incomplete because the request is taking to long - #15 by Fedi\_Ben\_Messaoud that kibana.autocompleteTerminateAfter pa… --- ## [Specific steps to build monitoring and siem with elk](https://discuss.elastic.co/t/specific-steps-to-build-monitoring-and-siem-with-elk/268605)
**Author:** [@Depressed](https://discuss.elastic.co/u/Depressed)\ **Replies:** 3\ **Last updated:** [March 29, 2021, 9:09pm UTC](https://discuss.elastic.co/t/specific-steps-to-build-monitoring-and-siem-with-elk/268605 "2021-03-29T21:09:09Z")
Hi I'm kinda new to whole siem and elk things and before i managed to setup monitoring with splunk cracked enterprise edition and there all was simple as forwarding data from netflow ,syslog ,snmp and defining new fi… --- ## [Failover mechanism of master nodes](https://discuss.elastic.co/t/failover-mechanism-of-master-nodes/249504)
**Author:** [@Shubham\_Mittal](https://discuss.elastic.co/u/Shubham_Mittal)\ **Replies:** 3\ **Last updated:** [September 23, 2020, 9:04am UTC](https://discuss.elastic.co/t/failover-mechanism-of-master-nodes/249504 "2020-09-23T09:04:14Z")
I have one web application in which IP address of one the 3 master eligible nodes is configured for using elasticsearch. Now if this configured node goes down, and my web app will hit the same IP address, will the reque… --- ## [Retry: Pipeline to Pipeline Output Variable Expansion](https://discuss.elastic.co/t/retry-pipeline-to-pipeline-output-variable-expansion/208674)
**Author:** [@Lukas\_L](https://discuss.elastic.co/u/Lukas_L)\ **Replies:** 3\ **Last updated:** [November 20, 2019, 3:30pm UTC](https://discuss.elastic.co/t/retry-pipeline-to-pipeline-output-variable-expansion/208674 "2019-11-20T15:30:24Z")
Hello, I have the same question as described in this post. Since there hasnt been any replies I thought i would just open the same topic again. I am currently using Logstash-7.3.1 with this configuration for all inc… --- ## [Can we use the free ElasticSearch encryption for production environments?](https://discuss.elastic.co/t/can-we-use-the-free-elasticsearch-encryption-for-production-environments/201678)
**Author:** [@strouja](https://discuss.elastic.co/u/strouja)\ **Replies:** 3\ **Last updated:** [September 30, 2019, 4:58pm UTC](https://discuss.elastic.co/t/can-we-use-the-free-elasticsearch-encryption-for-production-environments/201678 "2019-09-30T16:58:06Z")
Hi I read this "Elasticsearch now includes free security features by default, which will help ensure you don’t need to run an unprotected cluster." Which is in in https://www.elastic.co/blog/dear-search-guard-users We… --- ## [Date\_histogram with date range](https://discuss.elastic.co/t/date-histogram-with-date-range/190450)
**Author:** [@nitingarg](https://discuss.elastic.co/u/nitingarg)\ **Replies:** 3\ **Last updated:** [July 16, 2019, 1:08am UTC](https://discuss.elastic.co/t/date-histogram-with-date-range/190450 "2019-07-16T01:08:13Z")
I tried to use date histogram with specific range , { "aggs": { "group\_by\_created\_ts": { "range": { "date\_histogram": { "field": "created\_ts", "interval": "day", "format": "yyyy-MM-dd", "ranges": \[ { "to": "20… --- ## [Index is not got created into elastic search](https://discuss.elastic.co/t/index-is-not-got-created-into-elastic-search/176053)
**Author:** [@amit\_anand](https://discuss.elastic.co/u/amit_anand)\ **Replies:** 3\ **Last updated:** [April 10, 2019, 5:48am UTC](https://discuss.elastic.co/t/index-is-not-got-created-into-elastic-search/176053 "2019-04-10T05:48:01Z")
This is the config file i m using to run logstatsh and version is 6.7.1 but when i try to search into kabana its not showing any indices with "mchoutput" name. Please help me ..Thanks in advance.. input { file { pat… --- ## [Filebeat inputs configured to output to multiple logstash pipelines](https://discuss.elastic.co/t/filebeat-inputs-configured-to-output-to-multiple-logstash-pipelines/168580)
**Author:** [@stuartdsmith](https://discuss.elastic.co/u/stuartdsmith)\ **Replies:** 3\ **Last updated:** [February 25, 2019, 5:07pm UTC](https://discuss.elastic.co/t/filebeat-inputs-configured-to-output-to-multiple-logstash-pipelines/168580 "2019-02-25T17:07:52Z")
We would like to be able to configure filebeat to route different log files to different logstash pipelines. Is there a way to do this? As far as I can tell since we define the logstash port in the main filebeat configu… --- ## [Ability to add more exported fields in APM](https://discuss.elastic.co/t/ability-to-add-more-exported-fields-in-apm/151245)
**Author:** [@umapati](https://discuss.elastic.co/u/umapati)\ **Replies:** 3\ **Last updated:** [October 16, 2018, 1:08pm UTC](https://discuss.elastic.co/t/ability-to-add-more-exported-fields-in-apm/151245 "2018-10-16T13:08:25Z")
https://www.elastic.co/guide/en/apm/server/6.0/exported-fields-apm.html ref to the above post, If my request/response has additional fields, how do i make sure it gets indexed? I am using APM 6.0 --- ## [Monitoring docker logs, container can no longer be removed](https://discuss.elastic.co/t/monitoring-docker-logs-container-can-no-longer-be-removed/111494)
**Author:** [@Jordi\_Jansen](https://discuss.elastic.co/u/Jordi_Jansen)\ **Replies:** 3\ **Last updated:** [December 14, 2017, 12:02pm UTC](https://discuss.elastic.co/t/monitoring-docker-logs-container-can-no-longer-be-removed/111494 "2017-12-14T12:02:36Z")
Hi, I've read several blog posts and dicussions on this forum for collecting the docker json logs using filebeat. I've come up with the following config: filebeat.prospectors: - input\_type: log paths: - /var/lib/dock… --- ## [Need help how to parse such log from Kubernetes nginx pod](https://discuss.elastic.co/t/need-help-how-to-parse-such-log-from-kubernetes-nginx-pod/86942)
**Author:** [@Igor\_Gerasimow](https://discuss.elastic.co/u/Igor_Gerasimow)\ **Replies:** 3\ **Last updated:** [May 29, 2017, 3:56pm UTC](https://discuss.elastic.co/t/need-help-how-to-parse-such-log-from-kubernetes-nginx-pod/86942 "2017-05-29T15:56:20Z")
Hello - desperately asking for help with logs from nginx on kubernetes. {"log":"10.128.0.21 - - \[24/May/2017:10:12:32 +0000\] \\"GET /pp/apiv2/personprofile/check\_summ/na/A%20Bird%20of%20Prey%20 HTTP/1.1\\" 200 259 \\"-… --- ## [Updating roles](https://discuss.elastic.co/t/updating-roles/81025)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 3\ **Last updated:** [April 13, 2017, 4:47pm UTC](https://discuss.elastic.co/t/updating-roles/81025 "2017-04-13T16:47:25Z")
I'm trying to create some roles to define specific access to Kibana and its features, but I have the following issue: When I add a role, I check how it's working then I need to adjust it to the achieve my goal. But I ge… --- ## [.Kibana Index from Version 4.6 is not working in Kibana 5.2](https://discuss.elastic.co/t/kibana-index-from-version-4-6-is-not-working-in-kibana-5-2/77734)
**Author:** [@Neuron\_Ring](https://discuss.elastic.co/u/Neuron_Ring)\ **Replies:** 3\ **Last updated:** [March 8, 2017, 10:52pm UTC](https://discuss.elastic.co/t/kibana-index-from-version-4-6-is-not-working-in-kibana-5-2/77734 "2017-03-08T22:52:29Z")
@warkolm I migrated my cluster fro ES 2.4 and Kibana 4.6 to ES & Kibana 5.2. I recreated all the indexes and restored the data exactly as it was in ES-2.4 and restored the data. I did setup the Kibana 5.2 as well, it i… [Previous page](https://discuss.elastic.co/top.md?page=1423&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1425&per_page=50&period=all)