# Top **URL:** https://discuss.elastic.co/top.md?page=143&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 144 --- ## [Reading logs from URL](https://discuss.elastic.co/t/reading-logs-from-url/143089)
**Author:** [@Raghuveer\_SJ](https://discuss.elastic.co/u/Raghuveer_SJ)\ **Replies:** 9\ **Last updated:** [August 6, 2018, 9:39am UTC](https://discuss.elastic.co/t/reading-logs-from-url/143089 "2018-08-06T09:39:48Z")
Logstash setup should read from beat and http url so the configuration that am using is like : input { beats { port=\>5044 } http { method =\> "POST" host =\> "localhost" port =\> 8080 path =\> "/context/atest" } } D… --- ## [Elastic APM server errors 502](https://discuss.elastic.co/t/elastic-apm-server-errors-502/340714)
**Author:** [@lalitprasanth](https://discuss.elastic.co/u/lalitprasanth)\ **Replies:** 13\ **Last updated:** [August 23, 2023, 10:28am UTC](https://discuss.elastic.co/t/elastic-apm-server-errors-502/340714 "2023-08-23T10:28:12Z")
Kibana version: 8.8.1 Elasticsearch version: 8.8.1 APM Server version: 8.8.1 APM Agent language and version: NodeJs Agent elastic-apm-node": "^3.47.0 Configuration: const apm = require('elastic-apm-node').start({ … --- ## [What is the proper design pattern for plugins that must submit multiple requests to Elasticsearch?](https://discuss.elastic.co/t/what-is-the-proper-design-pattern-for-plugins-that-must-submit-multiple-requests-to-elasticsearch/262190)
**Author:** [@davemoore](https://discuss.elastic.co/u/davemoore)\ **Replies:** 13\ **Last updated:** [January 29, 2021, 8:18pm UTC](https://discuss.elastic.co/t/what-is-the-proper-design-pattern-for-plugins-that-must-submit-multiple-requests-to-elasticsearch/262190 "2021-01-29T20:18:47Z")
Question for plugin authors What is the proper way to implement a REST handler in a custom ActionPlugin (a.k.a. API extension plugin) that must wait for the response of multiple Elasticsearch requests before returning a… --- ## [Quotes in config files v2.3.0](https://discuss.elastic.co/t/quotes-in-config-files-v2-3-0/46563)
**Author:** [@StephenGoodall](https://discuss.elastic.co/u/StephenGoodall)\ **Replies:** 16\ **Last updated:** [April 12, 2016, 10:36am UTC](https://discuss.elastic.co/t/quotes-in-config-files-v2-3-0/46563 "2016-04-12T10:36:56Z")
Hi all, When trying out my config on a windows laptop this seemed to work fine (v2.2.0 by the way): input { s3 { credentials =\> \["XXXXXXXXXXXXXXXXXXXXXXXXXXXXX","XXXXXXXXXXXXXXXXXXXXXX"\] bucket =\> … --- ## [Elastic search status is red](https://discuss.elastic.co/t/elastic-search-status-is-red/176708)
**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\ **Replies:** 12\ **Last updated:** [April 15, 2019, 6:32am UTC](https://discuss.elastic.co/t/elastic-search-status-is-red/176708 "2019-04-15T06:32:16Z")
My Elastic search status is red in colour. How can i trouble shoot and fix this. There is no issue accessing and using it. But I was a bit concerned . By the way I am running it on single server. There is no cluster s… --- ## [ElasticSearch 7.2 not able to connect from localhost](https://discuss.elastic.co/t/elasticsearch-7-2-not-able-to-connect-from-localhost/189933)
**Author:** [@sukarn001](https://discuss.elastic.co/u/sukarn001)\ **Replies:** 9\ **Last updated:** [July 15, 2019, 9:52am UTC](https://discuss.elastic.co/t/elasticsearch-7-2-not-able-to-connect-from-localhost/189933 "2019-07-15T09:52:00Z")
Hello, I have recently installed elasticsearch 7.2 on my Ubuntu 18.04. Initially elasticsearch service was not starting due to some Java issue, Once I installed java and set JAVA\_HOME, service started working fine and i… --- ## [How to parse WebSphere SystemErr log in logstash](https://discuss.elastic.co/t/how-to-parse-websphere-systemerr-log-in-logstash/252323)
**Author:** [@eubarkana](https://discuss.elastic.co/u/eubarkana)\ **Replies:** 14\ **Last updated:** [November 4, 2020, 6:18am UTC](https://discuss.elastic.co/t/how-to-parse-websphere-systemerr-log-in-logstash/252323 "2020-11-04T06:18:37Z")
IBM WebSphere logs include SystemOut and SystemErr logs for a JVM. Each message in SystemOut is enabled with timestamp that can be parsed with logstash. Exceptions in this log has stack trace but does not include timesta… --- ## [Logs not being harvested after agent restart](https://discuss.elastic.co/t/logs-not-being-harvested-after-agent-restart/294579)
**Author:** [@yelloyonder](https://discuss.elastic.co/u/yelloyonder)\ **Replies:** 9\ **Last updated:** [February 1, 2022, 10:30am UTC](https://discuss.elastic.co/t/logs-not-being-harvested-after-agent-restart/294579 "2022-02-01T10:30:45Z")
Hi, We are using Elastic Agent to collect logs using the Custom Logs integration. This is on Elastic Cloud. The agent servers are turned off nightly. When the servers come up and the elastic-agent service is started, F… --- ## [Mapper attachment plugin vs. pre-parsing and extracting content from binary files](https://discuss.elastic.co/t/mapper-attachment-plugin-vs-pre-parsing-and-extracting-content-from-binary-files/73764)
**Author:** [@tlovett1](https://discuss.elastic.co/u/tlovett1)\ **Replies:** 11\ **Last updated:** [February 6, 2017, 8:14am UTC](https://discuss.elastic.co/t/mapper-attachment-plugin-vs-pre-parsing-and-extracting-content-from-binary-files/73764 "2017-02-06T08:14:42Z")
In order to search binary files, I have two options that I see: 1) Use the Elastic Mapping Plugin and have Elasticsearch handle all the things. 2) Pre-parse and extract content from binary file. Send parsed content t… --- ## [Logstash 7.1.1 grokparsefailure despite match pattern](https://discuss.elastic.co/t/logstash-7-1-1-grokparsefailure-despite-match-pattern/185075)
**Author:** [@kyle\_che](https://discuss.elastic.co/u/kyle_che)\ **Replies:** 18\ **Last updated:** [June 11, 2019, 5:10pm UTC](https://discuss.elastic.co/t/logstash-7-1-1-grokparsefailure-despite-match-pattern/185075 "2019-06-11T17:10:58Z")
I have upgraded logstash to 7.1.1 and I am receiving a grokparsefailure despite my pattern matching. See below. {"log":{"file":{"path":"/var/log/cassandra/system.log"},"offset":18875190},"input":{"type":"log"},"tags":\[… --- ## [Yet Another Elastic SIEM Not Showing Hosts](https://discuss.elastic.co/t/yet-another-elastic-siem-not-showing-hosts/241332)
**Author:** [@brian\_m](https://discuss.elastic.co/u/brian_m)\ **Replies:** 10\ **Last updated:** [July 23, 2020, 6:19pm UTC](https://discuss.elastic.co/t/yet-another-elastic-siem-not-showing-hosts/241332 "2020-07-23T18:19:16Z")
I started playing with Elastic a few months ago, and very recently started trying to get Elastic SIEM to work. I have not been able to get it to recognize anything, and the only host showing up is the Elastic node itself… --- ## [Incorrect Timestamp in Machine Learning Job Result](https://discuss.elastic.co/t/incorrect-timestamp-in-machine-learning-job-result/99111)
**Author:** [@nktvys](https://discuss.elastic.co/u/nktvys)\ **Replies:** 9\ **Last updated:** [September 7, 2017, 10:16am UTC](https://discuss.elastic.co/t/incorrect-timestamp-in-machine-learning-job-result/99111 "2017-09-07T10:16:35Z")
Hi, I have a few documents that have a timestamp of 01:46:00:038. But, after running a ML job, the results show these documents with a different time 07:16:00:038. I guess this is due to time difference of 5:30 but I do… --- ## [Logstash 503](https://discuss.elastic.co/t/logstash-503/211439)
**Author:** [@typzea](https://discuss.elastic.co/u/typzea)\ **Replies:** 10\ **Last updated:** [December 14, 2019, 12:50pm UTC](https://discuss.elastic.co/t/logstash-503/211439 "2019-12-14T12:50:10Z")
Bonjour à tous, J'ai besoin d'aide car depuis quelques jours j'ai le souci suivant : Dec 11 08:54:12 s-log-p-i02-fr logstash\[1011\]: \[2019-12-11T08:54:12,757\]\[INFO \]\[logstash.outputs.elasticsearch\]\[main\] retrying failed… --- ## [Get per process Metrics](https://discuss.elastic.co/t/get-per-process-metrics/270242)
**Author:** [@Dzious](https://discuss.elastic.co/u/Dzious)\ **Replies:** 12\ **Last updated:** [April 15, 2021, 3:33pm UTC](https://discuss.elastic.co/t/get-per-process-metrics/270242 "2021-04-15T15:33:29Z")
Hi, I'm a new user to Elastic and in order to better understand how elastic works, i would like to create a visualisation or canvas that would allow me to compare per process memory usage on my server. More used to SQL… --- ## [Unable to make Cluster state to Green](https://discuss.elastic.co/t/unable-to-make-cluster-state-to-green/39625)
**Author:** [@anusha6](https://discuss.elastic.co/u/anusha6)\ **Replies:** 11\ **Last updated:** [January 20, 2016, 10:54am UTC](https://discuss.elastic.co/t/unable-to-make-cluster-state-to-green/39625 "2016-01-20T10:54:56Z")
Hello Team, I am using two nodes in same host but am unable to see the cluster state as green, Here is my response for cluster health GET /\_cluster/health?pretty=true { "cluster\_name": "elasticsearch", "status"… --- ## [CEF plugin is not working as expected](https://discuss.elastic.co/t/cef-plugin-is-not-working-as-expected/286024)
**Author:** [@Sunflower](https://discuss.elastic.co/u/Sunflower)\ **Replies:** 12\ **Last updated:** [October 7, 2021, 1:11pm UTC](https://discuss.elastic.co/t/cef-plugin-is-not-working-as-expected/286024 "2021-10-07T13:11:35Z")
Hi, I'm trying to configure Logstash to work with SentinelOne logs, but it is not working as expected, it looks like it is not separating the fields correctly. I configured the input to be CEF and the output to be json… --- ## [How to Increase Performance Speed of Logstash for using MongoDB](https://discuss.elastic.co/t/how-to-increase-performance-speed-of-logstash-for-using-mongodb/163698)
**Author:** [@urcreations](https://discuss.elastic.co/u/urcreations)\ **Replies:** 12\ **Last updated:** [January 16, 2019, 11:09am UTC](https://discuss.elastic.co/t/how-to-increase-performance-speed-of-logstash-for-using-mongodb/163698 "2019-01-16T11:09:33Z")
Hi... I'm using logstash 5.6.13. I'm trying to export data from a CSV file (Size 975mb and contain 1 crore fields) to Mongodb using logstash. My system configuration in 16GB RAM and 320GB HDD. System have core i7 proce… --- ## [X-Pack PDF Report Generation fails - Kibana 5.5.2](https://discuss.elastic.co/t/x-pack-pdf-report-generation-fails-kibana-5-5-2/106940)
**Author:** [@tamisalex](https://discuss.elastic.co/u/tamisalex)\ **Replies:** 12\ **Last updated:** [December 1, 2017, 12:17am UTC](https://discuss.elastic.co/t/x-pack-pdf-report-generation-fails-kibana-5-5-2/106940 "2017-12-01T00:17:43Z")
After I click the generate printable pdf, I get this error: There was an error generating your report for the "Report Dashboard" dashboard: Max attempts reached (3) If I add xpack.reporting.queue.timeout to 90000 to th… --- ## [Creating day of week filter on my dashboard](https://discuss.elastic.co/t/creating-day-of-week-filter-on-my-dashboard/338391)
**Author:** [@Valerija](https://discuss.elastic.co/u/Valerija)\ **Replies:** 11\ **Last updated:** [July 21, 2023, 6:40am UTC](https://discuss.elastic.co/t/creating-day-of-week-filter-on-my-dashboard/338391 "2023-07-21T06:40:32Z")
Hello there, I am trying to create Day of Week filter that would enable me to exclude day of the week which I do not want to see in the reports on my Dashboard. What I did is created a new script: doc\['createdDate'\].v… --- ## [Apm-agent-rum: How to restore page-load information when I use custom transaction?](https://discuss.elastic.co/t/apm-agent-rum-how-to-restore-page-load-information-when-i-use-custom-transaction/244111)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 18\ **Last updated:** [September 23, 2020, 10:42am UTC](https://discuss.elastic.co/t/apm-agent-rum-how-to-restore-page-load-information-when-i-use-custom-transaction/244111 "2020-09-23T10:42:23Z")
After using custom, the page load message does not appear. But I want to use APM's performance monitoring capabilities. My code is as follows, I don’t know how to modify it. \> ampHanleRequest(config: any) { \> \> … --- ## [Logstash Startup completed but no data loaded](https://discuss.elastic.co/t/logstash-startup-completed-but-no-data-loaded/44243)
**Author:** [@Lucky](https://discuss.elastic.co/u/Lucky)\ **Replies:** 9\ **Last updated:** [March 16, 2016, 1:34pm UTC](https://discuss.elastic.co/t/logstash-startup-completed-but-no-data-loaded/44243 "2016-03-16T13:34:01Z")
I am using logstash to feed my CSV file into my elasticsearch , my logstash startup completed but the files didn't load into the index. I try checking by using GET /\_cat/indices?v health status index pri rep docs.count… --- ## [Sort on nested object](https://discuss.elastic.co/t/sort-on-nested-object/6874)
**Author:** [@Arny](https://discuss.elastic.co/u/Arny)\ **Replies:** 9\ **Last updated:** [April 18, 2012, 9:11am UTC](https://discuss.elastic.co/t/sort-on-nested-object/6874 "2012-04-18T09:11:45Z")
Hi, well, I've read all the other "sort on nested" threads, but I kind of need a solution for my issue. I'm using something like: { \_id: "..", someGlobalInfo: "foo", localizedInfo: { DE: { title: "foo" }, … --- ## [Read from ES index fails without write permission with HEAD \[405|Method Not Allowed:\]](https://discuss.elastic.co/t/read-from-es-index-fails-without-write-permission-with-head-405-method-not-allowed/328176)
**Author:** [@petersedivec](https://discuss.elastic.co/u/petersedivec)\ **Replies:** 10\ **Last updated:** [April 3, 2023, 3:03pm UTC](https://discuss.elastic.co/t/read-from-es-index-fails-without-write-permission-with-head-405-method-not-allowed/328176 "2023-04-03T15:03:29Z")
We're trying to connect to 2 different elastic instances and read data from databricks on indicies where a user has read permissions. For both instances we're seeing the following error EsHadoopInvalidRequest: \[HEAD\] o… --- ## [Problème d'intégration des indices](https://discuss.elastic.co/t/probleme-dintegration-des-indices/314017)
**Author:** [@renaud\_l](https://discuss.elastic.co/u/renaud_l)\ **Replies:** 15\ **Last updated:** [September 21, 2022, 8:47am UTC](https://discuss.elastic.co/t/probleme-dintegration-des-indices/314017 "2022-09-21T08:47:45Z")
Bonsoir, J'utilise une application web qui transmet des fichiers vers elastic afin de pouvoir visualiser la donnée dans Kibana. Tout fonctionnait très bien depuis 2 ans, mais je suis désormais bloqué : les fichiers qui… --- ## [Slow bulk speed](https://discuss.elastic.co/t/slow-bulk-speed/373675)
**Author:** [@ronwilson](https://discuss.elastic.co/u/ronwilson)\ **Replies:** 61\ **Last updated:** [February 21, 2025, 10:47am UTC](https://discuss.elastic.co/t/slow-bulk-speed/373675 "2025-02-21T10:47:29Z")
Hi! We have performance issue with bulk operations in Elasticsearch 8.14.3. Bulks looks like this (tried from 1000 up to 25000 records - no changes): { "index": {"\_id" : "627", "\_index": "iv\_counter\_fd7bb2fd122ca9a08d40… --- ## [Run Elastic Search Engineer On Demand localy](https://discuss.elastic.co/t/run-elastic-search-engineer-on-demand-localy/230099)
**Author:** [@rab](https://discuss.elastic.co/u/rab)\ **Replies:** 25\ **Last updated:** [May 8, 2020, 9:14am UTC](https://discuss.elastic.co/t/run-elastic-search-engineer-on-demand-localy/230099 "2020-05-08T09:14:46Z")
Hi, I have purchased subscripton training for Elastic Search Engineer - 1 On Demand and want to run it locally. There is mentioned about the datasets available in archive downloads but it is missing. Raised this query … --- ## [Adding .raw to winlogbeat messages](https://discuss.elastic.co/t/adding-raw-to-winlogbeat-messages/58159)
**Author:** [@joshablett](https://discuss.elastic.co/u/joshablett)\ **Replies:** 10\ **Last updated:** [August 22, 2016, 3:36pm UTC](https://discuss.elastic.co/t/adding-raw-to-winlogbeat-messages/58159 "2016-08-22T15:36:25Z")
Hi - I'm using the default winlogbeat.template.json file that downloaded with winlogbeat. I've made some modifications to the mapping in an attempt to get .raw not-analyzed results to show up for key string fields in W… --- ## [KIBANA : xpack.security.audit issue](https://discuss.elastic.co/t/kibana-xpack-security-audit-issue/265347)
**Author:** [@Alex\_Lum](https://discuss.elastic.co/u/Alex_Lum)\ **Replies:** 15\ **Last updated:** [March 3, 2021, 10:41am UTC](https://discuss.elastic.co/t/kibana-xpack-security-audit-issue/265347 "2021-03-03T10:41:59Z")
hello, I'm trying to make audit for kibana like this doc : https://www.elastic.co/guide/en/kibana/7.11/security-settings-kb.html#audit-logging-settings Here's my kib.yml : --------------------------------- Audit ----… --- ## [Filebeat using Fortinet module TZ issue](https://discuss.elastic.co/t/filebeat-using-fortinet-module-tz-issue/251518)
**Author:** [@Derick\_Jansen](https://discuss.elastic.co/u/Derick_Jansen)\ **Replies:** 11\ **Last updated:** [November 9, 2020, 4:54am UTC](https://discuss.elastic.co/t/filebeat-using-fortinet-module-tz-issue/251518 "2020-11-09T04:54:51Z")
Hi, We are using Filebeat with the Fortinet module to ingest our FW logs via Syslog. Our Fortigates do not send timezone information in log entries. The logs all have this format \<189\>date=2020-10-09 time=14:06:56 de… --- ## ["aggregations" do not work any more (index corrupt ?) - resolved](https://discuss.elastic.co/t/aggregations-do-not-work-any-more-index-corrupt-resolved/24947)
**Author:** [@abrod](https://discuss.elastic.co/u/abrod)\ **Replies:** 9\ **Last updated:** [July 31, 2015, 7:06am UTC](https://discuss.elastic.co/t/aggregations-do-not-work-any-more-index-corrupt-resolved/24947 "2015-07-31T07:06:55Z")
Hi all, I want to get all server items stored within the database. Now I have a problem within the following aggregations request: POST /index/item/\_search { "size": 0, "aggregations": { "agg": { … --- ## [Response.code:401](https://discuss.elastic.co/t/response-code-401/141359)
**Author:** [@m.sereda](https://discuss.elastic.co/u/m.sereda)\ **Replies:** 10\ **Last updated:** [July 27, 2018, 6:44pm UTC](https://discuss.elastic.co/t/response-code-401/141359 "2018-07-27T18:44:19Z")
Hi, I am trying to get to the endpoints but getting an error response.code:401. Could anyone explain me how to fix this? --- ## [Can I parse text in pdf document before sending it to elasticsearch using FSCrawler](https://discuss.elastic.co/t/can-i-parse-text-in-pdf-document-before-sending-it-to-elasticsearch-using-fscrawler/182564)
**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\ **Replies:** 17\ **Last updated:** [May 26, 2019, 11:54am UTC](https://discuss.elastic.co/t/can-i-parse-text-in-pdf-document-before-sending-it-to-elasticsearch-using-fscrawler/182564 "2019-05-26T11:54:23Z")
Please help. --- ## [Variation in data read by machine learning module to the actual data present in CSV file](https://discuss.elastic.co/t/variation-in-data-read-by-machine-learning-module-to-the-actual-data-present-in-csv-file/105704)
**Author:** [@anomalyml](https://discuss.elastic.co/u/anomalyml)\ **Replies:** 19\ **Last updated:** [November 7, 2017, 4:08am UTC](https://discuss.elastic.co/t/variation-in-data-read-by-machine-learning-module-to-the-actual-data-present-in-csv-file/105704 "2017-11-07T04:08:13Z")
Hi, I was creating a multi metric job for a sample data with two metrics using the machine learning module. I have inserted anomalies manually for testing purpose by entering values of larger magnitude randomly - For ex… --- ## [Add new field using part of existing value](https://discuss.elastic.co/t/add-new-field-using-part-of-existing-value/234434)
**Author:** [@Feedy](https://discuss.elastic.co/u/Feedy)\ **Replies:** 9\ **Last updated:** [May 28, 2020, 6:04pm UTC](https://discuss.elastic.co/t/add-new-field-using-part-of-existing-value/234434 "2020-05-28T18:04:38Z")
Hello - I would like to create a new field named "process\_name". I would like to use part of the an existing field's value to add to the newly created field. Ex: Sample JSON Log : "cb\_server":"cbserver","computer\_name"… --- ## [Kibana - scripted fileds - painles](https://discuss.elastic.co/t/kibana-scripted-fileds-painles/128483)
**Author:** [@bayerb](https://discuss.elastic.co/u/bayerb)\ **Replies:** 10\ **Last updated:** [April 19, 2018, 7:09am UTC](https://discuss.elastic.co/t/kibana-scripted-fileds-painles/128483 "2018-04-19T07:09:36Z")
When I insert the scripted field: if (doc\['system.process.cmdline'\].value =~ /.\*java.\*-DJENKINS\_HOME.\*/) { def m = /.\*java.\*-DJENKINS\_HOME.\*instance\_(.\*?)\\//.matcher(doc\['system.process.cmdline'\].value); if (m.m… --- ## [Index restore in pending task](https://discuss.elastic.co/t/index-restore-in-pending-task/79031)
**Author:** [@Srivastavark](https://discuss.elastic.co/u/Srivastavark)\ **Replies:** 15\ **Last updated:** [March 18, 2017, 10:58am UTC](https://discuss.elastic.co/t/index-restore-in-pending-task/79031 "2017-03-18T10:58:53Z")
Hello experts, I have tried to restore a snapshot (ES version 1.4.4 ) size 488 GB in ES 2.4.0. (5 node cluster 30 GB Heap) But for last 3 days its in queue with no progress. ,,, {"tasks":\[{"insert\_order":55678,"prio… --- ## [So I upgraded to 1.6.0 and all the data disappeared! Gone! Nada! Zilch!](https://discuss.elastic.co/t/so-i-upgraded-to-1-6-0-and-all-the-data-disappeared-gone-nada-zilch/2508)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 15\ **Last updated:** [June 12, 2015, 6:48pm UTC](https://discuss.elastic.co/t/so-i-upgraded-to-1-6-0-and-all-the-data-disappeared-gone-nada-zilch/2508 "2015-06-12T18:48:41Z")
Ok I'm in a test environment thankfully. Maybe how I upgraded? I'm updating from 1.5.2 to 1.6.0 Running on Windows 2008 R2 The setup is 4 dedicated data nodes and 1 dedicated master (Plus running extra "sites" client… --- ## [Error accessing Kibana after Upgrade](https://discuss.elastic.co/t/error-accessing-kibana-after-upgrade/300677)
**Author:** [@kubernetes87](https://discuss.elastic.co/u/kubernetes87)\ **Replies:** 12\ **Last updated:** [March 28, 2022, 11:46am UTC](https://discuss.elastic.co/t/error-accessing-kibana-after-upgrade/300677 "2022-03-28T11:46:45Z")
Hi community, for testing purposes I copied a VM with Ubuntu 18.04.6. On that machine everything worked fine. I upgraded the Ubuntu to 21.10 (the underlying Kibana and Elasticsearch had been updated too). Now I have … --- ## [Need help diagnosing slow indexing speed](https://discuss.elastic.co/t/need-help-diagnosing-slow-indexing-speed/223123)
**Author:** [@xenoid](https://discuss.elastic.co/u/xenoid)\ **Replies:** 12\ **Last updated:** [March 12, 2020, 9:22am UTC](https://discuss.elastic.co/t/need-help-diagnosing-slow-indexing-speed/223123 "2020-03-12T09:22:14Z")
Hi guys! I need some help diagnosing my cluster performance. Indexing is very slow and the whole cluster as well as Kibana is pretty unresponsive. Here is my cluster: We index about 1,5TB or 1.5 bn events every day… --- ## [Signal Detection Rules](https://discuss.elastic.co/t/signal-detection-rules/219887)
**Author:** [@tanner8302](https://discuss.elastic.co/u/tanner8302)\ **Replies:** 11\ **Last updated:** [April 21, 2020, 11:08am UTC](https://discuss.elastic.co/t/signal-detection-rules/219887 "2020-04-21T11:08:23Z")
These don't seem to be working for me. I have enabled all rules for Linux and Windows. There are two rules based upon the whoami command. One for windows and one for linux. I performed the whoami command on both host… --- ## [Access Kibana from remote machine](https://discuss.elastic.co/t/access-kibana-from-remote-machine/279924)
**Author:** [@Rickenson\_Robert](https://discuss.elastic.co/u/Rickenson_Robert)\ **Replies:** 10\ **Last updated:** [July 30, 2021, 12:54am UTC](https://discuss.elastic.co/t/access-kibana-from-remote-machine/279924 "2021-07-30T00:54:27Z")
Hi all, I have Kibana running on one machine and I would like to access that instance of Kibana on another machine. That is to say, I want to host Kibana on on my local computer and access it through the web browser of … --- ## [The same query is really slow 20% of the time](https://discuss.elastic.co/t/the-same-query-is-really-slow-20-of-the-time/198483)
**Author:** [@rickbenchsci](https://discuss.elastic.co/u/rickbenchsci)\ **Replies:** 10\ **Last updated:** [September 16, 2019, 2:26pm UTC](https://discuss.elastic.co/t/the-same-query-is-really-slow-20-of-the-time/198483 "2019-09-16T14:26:10Z")
When running some of our msearch queries, the response time is usually around 500ms. However about 20% of the time the response time skyrockets to anywhere between 2000ms to 13000ms. The index has about 120GB data, 20 s… --- ## [Sending Log4J logs (in XML) again](https://discuss.elastic.co/t/sending-log4j-logs-in-xml-again/215739)
**Author:** [@JY\_DT](https://discuss.elastic.co/u/JY_DT)\ **Replies:** 13\ **Last updated:** [January 30, 2020, 12:16pm UTC](https://discuss.elastic.co/t/sending-log4j-logs-in-xml-again/215739 "2020-01-30T12:16:03Z")
Hi, This is a follow up to an earlier post on a similar topic. I'm trying to send Log4j logs in XML format to Elasticsearch using Logstash. My XML file is: \ **Author:** [@Eugene\_Strokin](https://discuss.elastic.co/u/Eugene_Strokin)\ **Replies:** 9\ **Last updated:** [October 19, 2014, 9:17pm UTC](https://discuss.elastic.co/t/what-mongodb-can-do-and-es-cannot/11385 "2014-10-19T21:17:48Z") Hello, I had a conversation with friend of mine about architectural choice for his application. Big amount of data needs to be queried in usual way (many reads, some writes). Needs to be distributed, etc... His id… --- ## [Monitoring Logstash with XPACK](https://discuss.elastic.co/t/monitoring-logstash-with-xpack/117165)
**Author:** [@uirobot](https://discuss.elastic.co/u/uirobot)\ **Replies:** 16\ **Last updated:** [February 8, 2018, 6:06pm UTC](https://discuss.elastic.co/t/monitoring-logstash-with-xpack/117165 "2018-02-08T18:06:26Z")
Hi! I follow the instruction about installing and setting up logstash monitoring. No errors. I using cloud ES and Kibana. When I navigate to Monitoring - nothing happends - "No Monitor Data Found", but when I go to De… --- ## [Failing with multi-file config and auto reload flag](https://discuss.elastic.co/t/failing-with-multi-file-config-and-auto-reload-flag/46168)
**Author:** [@StavSap](https://discuss.elastic.co/u/StavSap)\ **Replies:** 11\ **Last updated:** [April 4, 2016, 8:28am UTC](https://discuss.elastic.co/t/failing-with-multi-file-config-and-auto-reload-flag/46168 "2016-04-04T08:28:13Z")
Hi, i have an issue running in multi-files configuration (using folder with \*.conf files) and auto-reload flag (--auto-reload) this causes a crash and shutdown of log stash when i am sending the syslog event for parsin… --- ## [First boot after install fails to display password, token, etc](https://discuss.elastic.co/t/first-boot-after-install-fails-to-display-password-token-etc/306949)
**Author:** [@Jack\_Park](https://discuss.elastic.co/u/Jack_Park)\ **Replies:** 11\ **Last updated:** [June 12, 2022, 2:33am UTC](https://discuss.elastic.co/t/first-boot-after-install-fails-to-display-password-token-etc/306949 "2022-06-12T02:33:11Z")
Version 8.2.2 Since I installed before but failed to grab those values, I started over. What this is telling me is that ES maintains a hidden record, which I cannot find. This is on a Mac. There is no ~/.elastic fie a… --- ## [Pivot transform copying values](https://discuss.elastic.co/t/pivot-transform-copying-values/297919)
**Author:** [@iamtheschmitzer](https://discuss.elastic.co/u/iamtheschmitzer)\ **Replies:** 10\ **Last updated:** [February 23, 2022, 11:05pm UTC](https://discuss.elastic.co/t/pivot-transform-copying-values/297919 "2022-02-23T23:05:21Z")
I'm attempting my first pivot transform with a goal of calculating duration between timestamps. In the group\_by clause, it results in a two documents, each with a timestamp. I have been able to calculate the duration u… --- ## [Hot/warm data idempotency and vertical scaled ES infrastructure using Curator](https://discuss.elastic.co/t/hot-warm-data-idempotency-and-vertical-scaled-es-infrastructure-using-curator/162613)
**Author:** [@kodo65](https://discuss.elastic.co/u/kodo65)\ **Replies:** 18\ **Last updated:** [January 8, 2019, 11:45am UTC](https://discuss.elastic.co/t/hot-warm-data-idempotency-and-vertical-scaled-es-infrastructure-using-curator/162613 "2019-01-08T11:45:23Z")
I have a hot/warm implementation which is orchestrated with Curator and it works really well. However, I have a thought, a design-related thought, which has been bogging me for a while and I'd like to discuss this with y… --- ## [New Elasticsearch client - Search response cannot be serialized because of null value on sort fields](https://discuss.elastic.co/t/new-elasticsearch-client-search-response-cannot-be-serialized-because-of-null-value-on-sort-fields/315326)
**Author:** [@ALX\_DM](https://discuss.elastic.co/u/ALX_DM)\ **Replies:** 9\ **Last updated:** [September 30, 2022, 1:31am UTC](https://discuss.elastic.co/t/new-elasticsearch-client-search-response-cannot-be-serialized-because-of-null-value-on-sort-fields/315326 "2022-09-30T01:31:28Z")
I am migrating elasticsearch from old to new elasticsearch java client. I encounter this problem wherein I issue a request query, then the response has null values. The code below is how I request: SearchRequest r… [Previous page](https://discuss.elastic.co/top.md?page=142&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=144&per_page=50&period=all)