# Top **URL:** https://discuss.elastic.co/top.md?page=146&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 147 --- ## [Filebeat Fortinet Module + Kibana SIEM](https://discuss.elastic.co/t/filebeat-fortinet-module-kibana-siem/236457)
**Author:** [@tjfred](https://discuss.elastic.co/u/tjfred)\ **Replies:** 10\ **Last updated:** [July 14, 2020, 2:31pm UTC](https://discuss.elastic.co/t/filebeat-fortinet-module-kibana-siem/236457 "2020-07-14T14:31:14Z")
Hello, I'm using the Fortinet module with Filebeat on Linux, logs are flowing and making their way into Elastic. Is there something I need to do to have these show in SIEM? The Fortinet module docs https://www.elastic.c… --- ## [How to change Elected master role to master in ES 2.4.0?](https://discuss.elastic.co/t/how-to-change-elected-master-role-to-master-in-es-2-4-0/72439)
**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Replies:** 10\ **Last updated:** [January 25, 2017, 1:13pm UTC](https://discuss.elastic.co/t/how-to-change-elected-master-role-to-master-in-es-2-4-0/72439 "2017-01-25T13:13:49Z")
I have ES 2.4.0. I am having a cluster that is running by 3 nodes when i given the following command http://localhost:9200/\_cat/nodes?v i got to see there stats like these host ip heap.percent ram.percent … --- ## [Convert iso 8601 timestamp to UNIX\_MS](https://discuss.elastic.co/t/convert-iso-8601-timestamp-to-unix-ms/306693)
**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\ **Replies:** 15\ **Last updated:** [June 29, 2022, 9:38am UTC](https://discuss.elastic.co/t/convert-iso-8601-timestamp-to-unix-ms/306693 "2022-06-29T09:38:08Z")
Hello, I have json logs wich have a field timestamp in iso 8601 format I want to convert it to UNIX\_MS so I can calculate the response time between step 1 and 2, 1 and 3 for each mid. How this can be done ? This is an… --- ## [POST analyzed, Index](https://discuss.elastic.co/t/post-analyzed-index/125718)
**Author:** [@Varan](https://discuss.elastic.co/u/Varan)\ **Replies:** 18\ **Last updated:** [March 28, 2018, 1:18pm UTC](https://discuss.elastic.co/t/post-analyzed-index/125718 "2018-03-28T13:18:58Z")
Hi, Sorry for this basic question, but I can't find any sense to it. I have an analyzer and wish it to analyze the data I index. But when I do this: POST my\_index/\_analyze { "analyzer": "my\_analyzer", "text": "Th… --- ## [Metricbeat Kibana dashboards - "Overview" - intermittent results](https://discuss.elastic.co/t/metricbeat-kibana-dashboards-overview-intermittent-results/145451)
**Author:** [@Kieren\_Johnstone](https://discuss.elastic.co/u/Kieren_Johnstone)\ **Replies:** 14\ **Last updated:** [October 16, 2018, 7:26am UTC](https://discuss.elastic.co/t/metricbeat-kibana-dashboards-overview-intermittent-results/145451 "2018-10-16T07:26:58Z")
I'd love some assistance with the below issues, is there anything I can do to diagnose? Issue 1 I'm looking at a fresh "\[Metricbeat Kubernetes\] - Overview" dashboard. The top-left stats (Nodes, Deployments, Desired Po… --- ## [Elasticsearch Won't Start](https://discuss.elastic.co/t/elasticsearch-wont-start/139276)
**Author:** [@jmounce](https://discuss.elastic.co/u/jmounce)\ **Replies:** 13\ **Last updated:** [July 12, 2018, 3:53pm UTC](https://discuss.elastic.co/t/elasticsearch-wont-start/139276 "2018-07-12T15:53:09Z")
Windows 10 - MSI installer - JAVA\_HOME is set Service starts but never registers on 9200. netstat -a -n confirms that no listener on 9200 Log shows that the DiscoveryModule never starts and setup doesn't proceed. What … --- ## [Append to an existing field in java api](https://discuss.elastic.co/t/append-to-an-existing-field-in-java-api/72644)
**Author:** [@Katja](https://discuss.elastic.co/u/Katja)\ **Replies:** 16\ **Last updated:** [January 25, 2017, 2:54pm UTC](https://discuss.elastic.co/t/append-to-an-existing-field-in-java-api/72644 "2017-01-25T14:54:27Z")
Здравствуйте, у меня такая задача. Мне нужно расширить существующее поле в индексе новыми значениями, то есть новые и старые должны остаться в индексе. Тут я нашла пример: curl -XPOST "http://localhost:9200/t/t/1/\_update… --- ## [Unable to convert date to specified timezone](https://discuss.elastic.co/t/unable-to-convert-date-to-specified-timezone/322398)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 10\ **Last updated:** [January 18, 2023, 6:46am UTC](https://discuss.elastic.co/t/unable-to-convert-date-to-specified-timezone/322398 "2023-01-18T06:46:18Z")
Hi All, I am trying to convert the date UTC time to different timezone (Asia/Tokyo) in logstash and below is the configuration I have tried, input { stdin { id =\> "logstash-rae" add\_field =\> { "log\_or… --- ## [Coordinate Map: Cannot read property ‘filter’ of undefined](https://discuss.elastic.co/t/coordinate-map-cannot-read-property-filter-of-undefined/93713)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 10\ **Last updated:** [July 29, 2017, 4:57am UTC](https://discuss.elastic.co/t/coordinate-map-cannot-read-property-filter-of-undefined/93713 "2017-07-29T04:57:12Z")
Hi Experts, Today my Coordinate Map is giving me the below error on Kibana page Coordinate Map: Cannot read property ‘filter’ of undefined. It started today only yesterday It was working fine . Does anyone else facing… --- ## [Memory problems during data index](https://discuss.elastic.co/t/memory-problems-during-data-index/3051)
**Author:** [@Zaharije](https://discuss.elastic.co/u/Zaharije)\ **Replies:** 12\ **Last updated:** [July 7, 2010, 7:43pm UTC](https://discuss.elastic.co/t/memory-problems-during-data-index/3051 "2010-07-07T19:43:51Z")
Hi we are doing single large index creation via python script (there is sample code at the end of email) but after few millions of documents we are getting slowdown and "Long running GC". It seems that we are ha… --- ## [Logstash don't reach elasticsearch](https://discuss.elastic.co/t/logstash-dont-reach-elasticsearch/312311)
**Author:** [@SilasMuniz1](https://discuss.elastic.co/u/SilasMuniz1)\ **Replies:** 16\ **Last updated:** [September 1, 2022, 11:36am UTC](https://discuss.elastic.co/t/logstash-dont-reach-elasticsearch/312311 "2022-09-01T11:36:39Z")
Hi all, I set up an elasticsearch's cluster with 3 nodes. I deploy the first one e installed after kibana in the same VM(RHEL). It's work ok. With Xpack-security enable. elasticsearch.yml: Added other 2 nodes usin… --- ## [Not able to see other nodes in same cluster](https://discuss.elastic.co/t/not-able-to-see-other-nodes-in-same-cluster/82847)
**Author:** [@Mario\_van\_Gemert](https://discuss.elastic.co/u/Mario_van_Gemert)\ **Replies:** 11\ **Last updated:** [April 19, 2017, 10:51am UTC](https://discuss.elastic.co/t/not-able-to-see-other-nodes-in-same-cluster/82847 "2017-04-19T10:51:55Z")
Tried to setup clustering but did not succeed yet. I am using ES 5.3.0. with Windows 10 on both servers (same LAN). Cluster names are identical. Elasticsearch.yml looks like this on both servers: transport.host: localhos… --- ## [\_geoip\_parse\_failure on logstash config](https://discuss.elastic.co/t/-geoip-parse-failure-on-logstash-config/99314)
**Author:** [@Shrawan\_Bhagwat](https://discuss.elastic.co/u/Shrawan_Bhagwat)\ **Replies:** 9\ **Last updated:** [September 6, 2017, 8:16am UTC](https://discuss.elastic.co/t/-geoip-parse-failure-on-logstash-config/99314 "2017-09-06T08:16:39Z")
Hi all, i have configured packet beat, filebeat and metricbeat. i want to use it’s geoIp feature and therefore i have used filter in logtsash config file. but for each and evry configuration i am getting \_geoip\_parse\_… --- ## [Shard recovery fails after resizing Google Cloud Platform's Persistent Disk](https://discuss.elastic.co/t/shard-recovery-fails-after-resizing-google-cloud-platforms-persistent-disk/99936)
**Author:** [@singhpratyush](https://discuss.elastic.co/u/singhpratyush)\ **Replies:** 12\ **Last updated:** [September 25, 2017, 10:37pm UTC](https://discuss.elastic.co/t/shard-recovery-fails-after-resizing-google-cloud-platforms-persistent-disk/99936 "2017-09-25T22:37:59Z")
I am running Elasticsearch inside Kubernetes cluster on Google Cloud Platform. The index is stored on a persistent disk. \[Kubernetes Configuration\] Elasticsearch version is 2.0.0. Recently, the disk was full and I resi… --- ## [Docker compose ELK](https://discuss.elastic.co/t/docker-compose-elk/368923)
**Author:** [@mamadou\_yassaou\_bah](https://discuss.elastic.co/u/mamadou_yassaou_bah)\ **Replies:** 50\ **Last updated:** [October 29, 2024, 8:39pm UTC](https://discuss.elastic.co/t/docker-compose-elk/368923 "2024-10-29T20:39:00Z")
HELLO, here is my docker-compose, I need to add authentication. BONJOUR voici mon docker-compose j'ai besoin d'ajouter l'authentification type or paste code here version: '3.7' services: elasticsearch: image: … --- ## [How to examine the \_all field](https://discuss.elastic.co/t/how-to-examine-the--all-field/5894)
**Author:** [@dvd](https://discuss.elastic.co/u/dvd)\ **Replies:** 13\ **Last updated:** [July 15, 2014, 3:42am UTC](https://discuss.elastic.co/t/how-to-examine-the--all-field/5894 "2014-07-15T03:42:15Z")
There is a way to dump the \_all field associated to an indexed document? I'm trying to debug strange behavior when I query an index; this query produces no results {query: {"query\_string": {"query": "stile"}}} … --- ## [ELK on cloud](https://discuss.elastic.co/t/elk-on-cloud/103486)
**Author:** [@benj](https://discuss.elastic.co/u/benj)\ **Replies:** 12\ **Last updated:** [October 11, 2017, 3:55pm UTC](https://discuss.elastic.co/t/elk-on-cloud/103486 "2017-10-11T15:55:37Z")
Hello guys, I've a question about the cloud service. Me and my company thinking about using ElasticCloud for our product but our usage is pretty particular. We'd like to use an ELK stack for logging purpose but we want … --- ## [Stored term vectors still slow when retrieving their scores (terms filtering)](https://discuss.elastic.co/t/stored-term-vectors-still-slow-when-retrieving-their-scores-terms-filtering/39218)
**Author:** [@sandros](https://discuss.elastic.co/u/sandros)\ **Replies:** 12\ **Last updated:** [May 24, 2017, 1:53pm UTC](https://discuss.elastic.co/t/stored-term-vectors-still-slow-when-retrieving-their-scores-terms-filtering/39218 "2017-05-24T13:53:47Z")
Hi all, I want to get the most characteristic words for each document I stored. The most straightforward way I tried this was (calling from python with es my ES-instance) looping over all my ids: es.termvectors(index … --- ## [Process downloaded log files](https://discuss.elastic.co/t/process-downloaded-log-files/180948)
**Author:** [@Yogendra\_Hada](https://discuss.elastic.co/u/Yogendra_Hada)\ **Replies:** 10\ **Last updated:** [May 23, 2019, 6:09pm UTC](https://discuss.elastic.co/t/process-downloaded-log-files/180948 "2019-05-23T18:09:49Z")
Hi, I am downloading files from S3 on a daily basis. The number of files are quite huge. approximately~ 2,50,000. I want Logstash to process these files and send events to Elasticsearch before I encounter next download… --- ## [2023: The Year in Review](https://discuss.elastic.co/t/2023-the-year-in-review/350184)
**Author:** [@system](https://discuss.elastic.co/u/system)\ **Replies:** 17\ **Last updated:** [January 1, 2024, 3:41pm UTC](https://discuss.elastic.co/t/2023-the-year-in-review/350184 "2024-01-01T15:41:16Z")
2023's Top Users Most Time Reading User Hours Read @stephenb 281 @leandrojmp 234 @Christian\_Dahlqvist 155 @Rios 120 @Badger 103 @DavidTurner 49 @carly.richmond 46 @PRASHANT\_MEHTA 40 @wa… --- ## [5.0alpha logstash-output-email](https://discuss.elastic.co/t/5-0alpha-logstash-output-email/57013)
**Author:** [@DreadPirateRob](https://discuss.elastic.co/u/DreadPirateRob)\ **Replies:** 12\ **Last updated:** [August 5, 2016, 6:38pm UTC](https://discuss.elastic.co/t/5-0alpha-logstash-output-email/57013 "2016-08-05T18:38:32Z")
Trying to install the logstash-output-email plugin, but not working. Can I get a lil help with trying to figure out what's up? \[root@logstash logstash\]# bin/logstash-plugin install logstash-output-email Validatin… --- ## [Elastic Agent 7.9.1 doesn´t send data on Windows](https://discuss.elastic.co/t/elastic-agent-7-9-1-doesn-t-send-data-on-windows/248273)
**Author:** [@hofrichterovak](https://discuss.elastic.co/u/hofrichterovak)\ **Replies:** 14\ **Last updated:** [September 22, 2020, 11:32am UTC](https://discuss.elastic.co/t/elastic-agent-7-9-1-doesn-t-send-data-on-windows/248273 "2020-09-22T11:32:03Z")
Hello, I have problem with Elastic Agent 7.9.1 on Windows. Agent doesn´t generate any data. I don´t see generated dataset on tab Datasets in Kibana. GET metrics-/\_search; GET logs-/\_search is without data too. At the b… --- ## [Set cluster](https://discuss.elastic.co/t/set-cluster/142059)
**Author:** [@sksky93](https://discuss.elastic.co/u/sksky93)\ **Replies:** 11\ **Last updated:** [July 30, 2018, 2:37pm UTC](https://discuss.elastic.co/t/set-cluster/142059 "2018-07-30T14:37:58Z")
I had some problem in setting cluster. I need some help. this is my log \[2018-07-29T17:02:10,672\]\[INFO \]\[o.e.n.Node \] \[node-1\] initializing ... \[2018-07-29T17:02:10,755\]\[INFO \]\[o.e.e.NodeEnvironment \] \[node-1\] using \[… --- ## [Customized Visualization](https://discuss.elastic.co/t/customized-visualization/63414)
**Author:** [@Hussain\_Khan](https://discuss.elastic.co/u/Hussain_Khan)\ **Replies:** 13\ **Last updated:** [October 25, 2016, 8:26pm UTC](https://discuss.elastic.co/t/customized-visualization/63414 "2016-10-25T20:26:06Z")
I've one query as i started using Kibana. and started building couple of simple visualization and dashboard. Now I'm trying to generate some complex visualization by the data/logs i have. Basically, we do generate logs… --- ## [Migrate lucene index into elasticsearch](https://discuss.elastic.co/t/migrate-lucene-index-into-elasticsearch/8924)
**Author:** [@Matthias\_Kricke](https://discuss.elastic.co/u/Matthias_Kricke)\ **Replies:** 9\ **Last updated:** [September 7, 2012, 3:05pm UTC](https://discuss.elastic.co/t/migrate-lucene-index-into-elasticsearch/8924 "2012-09-07T15:05:51Z")
Hi, I want, for some reason, to migrate my lucene index into an existing elasticsearch cluster. Is there a way to do so? Greetings and thanks for your responses, MK -- --- ## [Totally lost, why won't simple queries work?](https://discuss.elastic.co/t/totally-lost-why-wont-simple-queries-work/76169)
**Author:** [@coogle](https://discuss.elastic.co/u/coogle)\ **Replies:** 11\ **Last updated:** [February 23, 2017, 10:22pm UTC](https://discuss.elastic.co/t/totally-lost-why-wont-simple-queries-work/76169 "2017-02-23T22:22:58Z")
Hello, For some reason I cannot get a search on anything but \_all to work for my index. I currently have an index (mapping included) that is populated using the ingest attachment plugin. I am trying to search against a… --- ## [Elastic apm cannot collect GRPC requests](https://discuss.elastic.co/t/elastic-apm-cannot-collect-grpc-requests/230086)
**Author:** [@topstargogo](https://discuss.elastic.co/u/topstargogo)\ **Replies:** 15\ **Last updated:** [April 29, 2020, 10:31am UTC](https://discuss.elastic.co/t/elastic-apm-cannot-collect-grpc-requests/230086 "2020-04-29T10:31:21Z")
Kibana version: v7.6.1 Elasticsearch version: v7.6.1 APM Server version:v7.6.1 APM Agent language and version: Java version 1.15 Browser version:chrome Original install method (e.g. download page, yum, deb, from so… --- ## [New help assigning a date to @timestamp](https://discuss.elastic.co/t/new-help-assigning-a-date-to-timestamp/107107)
**Author:** [@mhallman](https://discuss.elastic.co/u/mhallman)\ **Replies:** 10\ **Last updated:** [November 13, 2017, 2:41pm UTC](https://discuss.elastic.co/t/new-help-assigning-a-date-to-timestamp/107107 "2017-11-13T14:41:25Z")
Hello, NOOB here. Trying to assign a date that I have constructed from other fields in a csv to @timestamp. The field that is concatenated shows up in the imported data but I can get it into the @timestamp field. Her… --- ## [Trouble with installing ECK on my RKE2 Kubernetes cluster](https://discuss.elastic.co/t/trouble-with-installing-eck-on-my-rke2-kubernetes-cluster/330773)
**Author:** [@Michael\_Anthony](https://discuss.elastic.co/u/Michael_Anthony)\ **Replies:** 11\ **Last updated:** [May 12, 2023, 12:51am UTC](https://discuss.elastic.co/t/trouble-with-installing-eck-on-my-rke2-kubernetes-cluster/330773 "2023-05-12T00:51:33Z")
I'm just trying to follow the instructions on the elastic docs for their quick start guide to deploy ECK on my cluster and I can't get the "quickstart-es-default-0" pod to spin up. I'm following all the instructions. Do… --- ## [Authentications tab shows "All values returned zero"](https://discuss.elastic.co/t/authentications-tab-shows-all-values-returned-zero/240784)
**Author:** [@xhidalgo](https://discuss.elastic.co/u/xhidalgo)\ **Replies:** 14\ **Last updated:** [September 8, 2020, 6:22am UTC](https://discuss.elastic.co/t/authentications-tab-shows-all-values-returned-zero/240784 "2020-09-08T06:22:22Z")
Hi, I'm using Elastic Cloud, I have two different deployments. One in version 7.6.2 and Elastic SIEM it's working properly and one in 7.8.0 In this last version 7.8.0 , SIEM Module don't show authentications even when… --- ## [\_grokparsefailure inspite of working well with grok debugger](https://discuss.elastic.co/t/grokparsefailure-inspite-of-working-well-with-grok-debugger/175669)
**Author:** [@yogeshwar\_Trehan](https://discuss.elastic.co/u/yogeshwar_Trehan)\ **Replies:** 9\ **Last updated:** [April 6, 2019, 1:18pm UTC](https://discuss.elastic.co/t/grokparsefailure-inspite-of-working-well-with-grok-debugger/175669 "2019-04-06T13:18:38Z")
I am trying to send logs to elasticsearch using logstash. Following is the logstash config file - input { beats { port =\> "5044" } } filter { grok { patterns\_dir =\> \["/etc/logstash/… --- ## [Parsing Nested JSON with Array](https://discuss.elastic.co/t/parsing-nested-json-with-array/243794)
**Author:** [@nikhilsuryan](https://discuss.elastic.co/u/nikhilsuryan)\ **Replies:** 16\ **Last updated:** [August 6, 2020, 8:05am UTC](https://discuss.elastic.co/t/parsing-nested-json-with-array/243794 "2020-08-06T08:05:50Z")
Hi Team, Can anyone help me in parsing the below and store the same in elastic Search. I am new to Logstash. Wanted to store the metric in Elastic search. { "collectionTime": { "timeStamp": "2020-08-04T17:27:16Z", … --- ## [Elastic agent replace logstash](https://discuss.elastic.co/t/elastic-agent-replace-logstash/375111)
**Author:** [@michael005](https://discuss.elastic.co/u/michael005)\ **Replies:** 14\ **Last updated:** [April 28, 2025, 7:05pm UTC](https://discuss.elastic.co/t/elastic-agent-replace-logstash/375111 "2025-04-28T19:05:11Z")
Hello, I've searched the forum and the elastic site, but haven't quite found what I'm looking for. I'm trying to get a better understanding of elastic agents to setup my test environment appropriately. I want to use mu… --- ## [What is best hardware recommendation in my use case?](https://discuss.elastic.co/t/what-is-best-hardware-recommendation-in-my-use-case/110151)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 11\ **Last updated:** [December 5, 2017, 5:20am UTC](https://discuss.elastic.co/t/what-is-best-hardware-recommendation-in-my-use-case/110151 "2017-12-05T05:20:41Z")
Hi ES Experts, I have following use case , please suggest if I am in the right direction . Daily Data volume :- 140 GB Total ES Clusters :- 7, this means I will be having total 7 different clusters (ES1 to ES7) and in… --- ## [ELK installation completed with latest version 6.x.x on linux servers But i am not able to access webpage](https://discuss.elastic.co/t/elk-installation-completed-with-latest-version-6-x-x-on-linux-servers-but-i-am-not-able-to-access-webpage/116487)
**Author:** [@Panakaj\_Patel](https://discuss.elastic.co/u/Panakaj_Patel)\ **Replies:** 19\ **Last updated:** [February 22, 2018, 2:56pm UTC](https://discuss.elastic.co/t/elk-installation-completed-with-latest-version-6-x-x-on-linux-servers-but-i-am-not-able-to-access-webpage/116487 "2018-02-22T14:56:37Z")
All services are up and running no issue with services and also with below test. \[root@xxx ~\]# curl http://localhost:9200 { "name" : "\_ZCxA3a", "cluster\_name" : "elasticsearch", "cluster\_uuid" : "2N1OSkYjSMmP3Nh8nYZ… --- ## [Filebeat on solaris amd 64 failing](https://discuss.elastic.co/t/filebeat-on-solaris-amd-64-failing/57761)
**Author:** [@vvg](https://discuss.elastic.co/u/vvg)\ **Replies:** 12\ **Last updated:** [August 12, 2016, 5:19pm UTC](https://discuss.elastic.co/t/filebeat-on-solaris-amd-64-failing/57761 "2016-08-12T17:19:11Z")
i picked up the library from here -https://beats-nightlies.s3.amazonaws.com/index.html?prefix=jenkins/filebeat/715-32446edc97bbfe933b1539a473e82a8b4a3a6942/ while running the svcadm i see the following exceptions in th… --- ## [Pushing data from Hive to Elastic Search](https://discuss.elastic.co/t/pushing-data-from-hive-to-elastic-search/11674)
**Author:** [@Abhishek\_Andhavarapu](https://discuss.elastic.co/u/Abhishek_Andhavarapu)\ **Replies:** 14\ **Last updated:** [September 18, 2014, 11:22am UTC](https://discuss.elastic.co/t/pushing-data-from-hive-to-elastic-search/11674 "2014-09-18T11:22:45Z")
Hi All, I'm trying to push data from hive to elastic search using external tables ( https://github.com/elasticsearch/elasticsearch-hadoop ) My ES index mapping { "rid": 1, "mapids" : \[2,3,4\], //Array … --- ## [Nodejs APM not working due to /intake/v2/events timeout in version 7.14](https://discuss.elastic.co/t/nodejs-apm-not-working-due-to-intake-v2-events-timeout-in-version-7-14/284929)
**Author:** [@chamiduz](https://discuss.elastic.co/u/chamiduz)\ **Replies:** 9\ **Last updated:** [September 23, 2021, 8:27am UTC](https://discuss.elastic.co/t/nodejs-apm-not-working-due-to-intake-v2-events-timeout-in-version-7-14/284929 "2021-09-23T08:27:43Z")
Hi, I am trying to set up APM for a nodejs app. however data is not coming to Elasticsearch and I can see the below error in the console. I'm using the docker-compose from this link { "log.level":"error", "@time… --- ## [Filebeat forward to Kibana ssh auth fail](https://discuss.elastic.co/t/filebeat-forward-to-kibana-ssh-auth-fail/151709)
**Author:** [@mcoa](https://discuss.elastic.co/u/mcoa)\ **Replies:** 9\ **Last updated:** [October 15, 2018, 10:46pm UTC](https://discuss.elastic.co/t/filebeat-forward-to-kibana-ssh-auth-fail/151709 "2018-10-15T22:46:01Z")
Hello, I've filebeat and system module for check ssh auth but in Kibana dont register the ssh action. My filebeat.yml: filebeat.inputs: - type: log enabled: true paths: - /var/log/secure - /var/log/message… --- ## [Aggregate by concatenate in lens](https://discuss.elastic.co/t/aggregate-by-concatenate-in-lens/341820)
**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\ **Replies:** 12\ **Last updated:** [September 4, 2023, 8:58am UTC](https://discuss.elastic.co/t/aggregate-by-concatenate-in-lens/341820 "2023-09-04T08:58:40Z")
Hello, i have Kibana 8.7 and am looking for a way to aggregate multiple documents in a table lens by concatenating a string field. Is this possible? I can only find this functionality in TSVB. --- ## [Snapshot performance with ES 7.10](https://discuss.elastic.co/t/snapshot-performance-with-es-7-10/260739)
**Author:** [@karunelas](https://discuss.elastic.co/u/karunelas)\ **Replies:** 16\ **Last updated:** [February 11, 2021, 1:34pm UTC](https://discuss.elastic.co/t/snapshot-performance-with-es-7-10/260739 "2021-02-11T13:34:35Z")
Hi all: We have upgraded to ES 7.10 from 6.8. After the upgrade, we are observing that the time taken for the Snapshot on 7.10 is around 3 times slower compared to the snapshots with 6.8. These are snapshots of the ES c… --- ## [Error when filter multiline of rabbitmq log](https://discuss.elastic.co/t/error-when-filter-multiline-of-rabbitmq-log/103654)
**Author:** [@vuxuanlai](https://discuss.elastic.co/u/vuxuanlai)\ **Replies:** 10\ **Last updated:** [October 12, 2017, 7:40am UTC](https://discuss.elastic.co/t/error-when-filter-multiline-of-rabbitmq-log/103654 "2017-10-12T07:40:00Z")
When i parse log from rabbitmq, i got the error as below: \` \[2017-10-12T04:01:18,006\]\[ERROR\]\[logstash.agent \] Cannot create pipeline {:reason=\>"The setting type in plugin multiline is obsolete and is no long… --- ## [Request to close index fails due to socket timeout](https://discuss.elastic.co/t/request-to-close-index-fails-due-to-socket-timeout/294687)
**Author:** [@Shubham\_M](https://discuss.elastic.co/u/Shubham_M)\ **Replies:** 13\ **Last updated:** [January 19, 2022, 9:08am UTC](https://discuss.elastic.co/t/request-to-close-index-fails-due-to-socket-timeout/294687 "2022-01-19T09:08:42Z")
Scenario: We create new index on daily basis so as to keep the data in the index updated.After creation of new index when close request is made,it times out with Socket failure execption. { class: "org.quartz.simpl.Sim… --- ## [Winlogbeat user.name is missing in event 4634 (Logoff Event) - ECS Missing Correlation](https://discuss.elastic.co/t/winlogbeat-user-name-is-missing-in-event-4634-logoff-event-ecs-missing-correlation/189363)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 10\ **Last updated:** [August 6, 2019, 7:27am UTC](https://discuss.elastic.co/t/winlogbeat-user-name-is-missing-in-event-4634-logoff-event-ecs-missing-correlation/189363 "2019-08-06T07:27:33Z")
Hi, I'm analizing windows event logs comming from a winlogbeat 7.2. When looking in the logoff event (id 4634) I see that the field user.name does not exists The field winlog.event\_data.TargetUserName has the proper u… --- ## [Kibana визуализация суммы часов](https://discuss.elastic.co/t/kibana/262041)
**Author:** [@artem33region](https://discuss.elastic.co/u/artem33region)\ **Replies:** 19\ **Last updated:** [January 25, 2021, 8:19pm UTC](https://discuss.elastic.co/t/kibana/262041 "2021-01-25T20:19:19Z")
Всем привет! Есть задача, считать сумму времени. Например, есть поле содержащее время, изначально время в формате UNIX. Нужно чтобы была визуализация, на которой будет показанна сумма времени полей за определённое врем… --- ## [Curator error when shrinking](https://discuss.elastic.co/t/curator-error-when-shrinking/180210)
**Author:** [@ramzey1981](https://discuss.elastic.co/u/ramzey1981)\ **Replies:** 11\ **Last updated:** [May 10, 2019, 10:01pm UTC](https://discuss.elastic.co/t/curator-error-when-shrinking/180210 "2019-05-10T22:01:17Z")
I am getting the following error message when shrinking 4 indexes via curator, I really can't tell from the DEBUG about if this is a python issue or a elasticsearch load issue, 2019-05-08 02:41:35,249 ERROR … --- ## [Multiple pipelines bug with pipe-to-pipe config and CEF codec](https://discuss.elastic.co/t/multiple-pipelines-bug-with-pipe-to-pipe-config-and-cef-codec/338889)
**Author:** [@Markenstein](https://discuss.elastic.co/u/Markenstein)\ **Replies:** 23\ **Last updated:** [July 25, 2023, 3:52pm UTC](https://discuss.elastic.co/t/multiple-pipelines-bug-with-pipe-to-pipe-config-and-cef-codec/338889 "2023-07-25T15:52:09Z")
Hi, everyone! I have faced with such problem: several CEF strings pushed into the following pipelines configuration causing \_cefparseerror in result cause to incorrect string in the input. It's break original message in… --- ## [Slow indexes search](https://discuss.elastic.co/t/slow-indexes-search/185930)
**Author:** [@Necus](https://discuss.elastic.co/u/Necus)\ **Replies:** 27\ **Last updated:** [June 16, 2019, 2:29pm UTC](https://discuss.elastic.co/t/slow-indexes-search/185930 "2019-06-16T14:29:29Z")
Hi, Each day elasticsearch creates index from two different devices. From the first device I get results really, really slow and even sometimes I got timeout error, from the second one it's still slow but I do not recei… --- ## [Esrally manometric xpack encrypted es7.2.0](https://discuss.elastic.co/t/esrally-manometric-xpack-encrypted-es7-2-0/197748)
**Author:** [@rljie](https://discuss.elastic.co/u/rljie)\ **Replies:** 19\ **Last updated:** [September 10, 2019, 8:56am UTC](https://discuss.elastic.co/t/esrally-manometric-xpack-encrypted-es7-2-0/197748 "2019-09-10T08:56:53Z")
My environment is es7.2.0, esrally1.2.1; Es does xpack encryption and executes the esrally command: esrally --target-hosts=12.19.24.92:9200 --pipeline=benchmark-only --client-options="basic\_auth\_user:'elastic',basic\_aut… --- ## [I tried to upload a log file and a CSV file through the Kibana UI upload file option. But in both cases getting "File structure cannot be determined" error](https://discuss.elastic.co/t/i-tried-to-upload-a-log-file-and-a-csv-file-through-the-kibana-ui-upload-file-option-but-in-both-cases-getting-file-structure-cannot-be-determined-error/314878)
**Author:** [@cadrija](https://discuss.elastic.co/u/cadrija)\ **Replies:** 11\ **Last updated:** [September 30, 2022, 5:23am UTC](https://discuss.elastic.co/t/i-tried-to-upload-a-log-file-and-a-csv-file-through-the-kibana-ui-upload-file-option-but-in-both-cases-getting-file-structure-cannot-be-determined-error/314878 "2022-09-30T05:23:52Z")
I am new to Elastic. I have setup ELK in Ubuntu machine. I tried to upload a log file and a CSV file through the Kibana UI upload file option. But in both cases getting "File structure cannot be determined" error. I h… [Previous page](https://discuss.elastic.co/top.md?page=145&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=147&per_page=50&period=all)