# Top **URL:** https://discuss.elastic.co/top.md?page=1479&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1480 --- ## [Failed to put mappings on indices timeouts](https://discuss.elastic.co/t/failed-to-put-mappings-on-indices-timeouts/61031)
**Author:** [@stlava](https://discuss.elastic.co/u/stlava)\ **Replies:** 0\ **Last updated:** [September 20, 2016, 4:55pm UTC](https://discuss.elastic.co/t/failed-to-put-mappings-on-indices-timeouts/61031 "2016-09-20T16:55:08Z")
Hi I'm seeing a lot of put mapping timeouts on my master server and have a few questions related to this. The exact log line is: Sep 20 16:00:14.533921 ops-flume-es-master-useast1-2-i-ba0a66ac ElasticSearch: \[DEBUG\]\[a… --- ## [Boosting a field yields bizarre results](https://discuss.elastic.co/t/boosting-a-field-yields-bizarre-results/46767)
**Author:** [@Pyppe](https://discuss.elastic.co/u/Pyppe)\ **Replies:** 3\ **Last updated:** [April 8, 2016, 1:55pm UTC](https://discuss.elastic.co/t/boosting-a-field-yields-bizarre-results/46767 "2016-04-08T13:55:31Z")
Howdy! I'm trying to boost search results by a status field (it's an enumeration). My query is as follows: { "query" : { "bool" : { "must" : ..., "should" : \[ { "term" : { … --- ## [Logstash tcp input/output](https://discuss.elastic.co/t/logstash-tcp-input-output/32901)
**Author:** [@treehouse](https://discuss.elastic.co/u/treehouse)\ **Replies:** 0\ **Last updated:** [October 24, 2015, 5:42am UTC](https://discuss.elastic.co/t/logstash-tcp-input-output/32901 "2015-10-24T05:42:10Z")
Hey guys I know there are a couple other questions like this, but I haven't seen behavior like I am seeing surfaced before. I have two logstash instances, A and B. Here are my configs: A -- input { stdin {} } filt… --- ## [Shield: node-to-node communication performance](https://discuss.elastic.co/t/shield-node-to-node-communication-performance/21896)
**Author:** [@Jin\_Huang](https://discuss.elastic.co/u/Jin_Huang)\ **Replies:** 3\ **Last updated:** [January 30, 2015, 12:17pm UTC](https://discuss.elastic.co/t/shield-node-to-node-communication-performance/21896 "2015-01-30T12:17:32Z")
Hi, Can anyone shed some light on the impact of Shield on performance, assuming that secured communication is enabled for node to node communication? When Elasticsearch team says that node-to-node encryption is e… --- ## [Elasticsearch Conflict Error](https://discuss.elastic.co/t/elasticsearch-conflict-error/275104)
**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 4\ **Last updated:** [June 7, 2021, 7:50am UTC](https://discuss.elastic.co/t/elasticsearch-conflict-error/275104 "2021-06-07T07:50:05Z")
Below is my query and code for delete\_by\_query. While code is running after some time i get Elasticsearch conflict error. What do i do wrong? How can i solve this ? body\_val = { "query": { "bool": … --- ## [Question regarding dedicated master nodes](https://discuss.elastic.co/t/question-regarding-dedicated-master-nodes/241267)
**Author:** [@Zerobot](https://discuss.elastic.co/u/Zerobot)\ **Replies:** 1\ **Last updated:** [July 15, 2020, 10:41am UTC](https://discuss.elastic.co/t/question-regarding-dedicated-master-nodes/241267 "2020-07-15T10:41:53Z")
Hello! What will happen to elasticsearch cluster if 2 out of 3 dedicated master nodes will go down? Let's say we have replication factor 2 and basically 2/3 of our cluster went down - we still have the data because it … --- ## [Timelion query not working](https://discuss.elastic.co/t/timelion-query-not-working/228194)
**Author:** [@marrel](https://discuss.elastic.co/u/marrel)\ **Replies:** 4\ **Last updated:** [May 7, 2020, 8:07am UTC](https://discuss.elastic.co/t/timelion-query-not-working/228194 "2020-05-07T08:07:35Z")
Hello! I have developed a graph in Timelion but I faced a problem with the query. I do not get any line. .es(index=machinebeat\*, timefield=@timestamp, q='topic: product/group\_a/\*').label('Group A') The query shou… --- ## [Grok pattern OK in debugger, but parse failure in logstash](https://discuss.elastic.co/t/grok-pattern-ok-in-debugger-but-parse-failure-in-logstash/220405)
**Author:** [@argnist](https://discuss.elastic.co/u/argnist)\ **Replies:** 4\ **Last updated:** [February 26, 2020, 9:30am UTC](https://discuss.elastic.co/t/grok-pattern-ok-in-debugger-but-parse-failure-in-logstash/220405 "2020-02-26T09:30:52Z")
Hello everyone. I wrote grok pattern, checked it in debugger in Kibana. Grok pattern OK in debugger, but in logstash i got parse failure. I tried to debug pattern in logstash with ~/logstash/bin/logstash --path.setti… --- ## [Show fields in Coordinate Maps Visualization](https://discuss.elastic.co/t/show-fields-in-coordinate-maps-visualization/191334)
**Author:** [@MARCO\_RAMBALDI](https://discuss.elastic.co/u/MARCO_RAMBALDI)\ **Replies:** 4\ **Last updated:** [July 24, 2019, 9:40am UTC](https://discuss.elastic.co/t/show-fields-in-coordinate-maps-visualization/191334 "2019-07-24T09:40:50Z")
461/5000 Hi, I configured my location geo\_point field to have the map visualization coordinate active. Using this visualization, I realized that when I go to zoom in on a certain event, I would like to see more inform… --- ## [Query bool with must and should](https://discuss.elastic.co/t/query-bool-with-must-and-should/323135)
**Author:** [@sphawk](https://discuss.elastic.co/u/sphawk)\ **Replies:** 6\ **Last updated:** [January 13, 2023, 3:21pm UTC](https://discuss.elastic.co/t/query-bool-with-must-and-should/323135 "2023-01-13T15:21:57Z")
I'm trying to build a bool query. { "query": { "bool" : { "must" : \[ {"term": { "language": "es\_ES" }} \], "should": \[ { … --- ## [Create Object Type with Arbitrary Fields in Dynamic:false type](https://discuss.elastic.co/t/create-object-type-with-arbitrary-fields-in-dynamic-false-type/5427)
**Author:** [@davrob](https://discuss.elastic.co/u/davrob)\ **Replies:** 6\ **Last updated:** [October 13, 2011, 4:47pm UTC](https://discuss.elastic.co/t/create-object-type-with-arbitrary-fields-in-dynamic-false-type/5427 "2011-10-13T16:47:27Z")
Hi, I'd like to have one of my fields to behave like a map / associative array, or else a JavaScript object that has arbitrary fields. Currently, I've turned off dynamic fields altogether, by specifying this in my … --- ## [Question about ES w/ Couch(or any other db)](https://discuss.elastic.co/t/question-about-es-w-couch-or-any-other-db/4688)
**Author:** [@Roger\_Studner](https://discuss.elastic.co/u/Roger_Studner)\ **Replies:** 6\ **Last updated:** [June 24, 2011, 10:06am UTC](https://discuss.elastic.co/t/question-about-es-w-couch-or-any-other-db/4688 "2011-06-24T10:06:05Z")
I'm probably missing the obvious.. but what are the main/agreed upon reasons for using something like CouchDB to actually store "the data" and having the River stuff make the indexes in ES. i.e. Why not use ES al… --- ## [Value too large to output (49839 bytes) logstash error](https://discuss.elastic.co/t/value-too-large-to-output-49839-bytes-logstash-error/294170)
**Author:** [@ZZ.IT](https://discuss.elastic.co/u/ZZ.IT)\ **Replies:** 2\ **Last updated:** [January 13, 2022, 11:02am UTC](https://discuss.elastic.co/t/value-too-large-to-output-49839-bytes-logstash-error/294170 "2022-01-13T11:02:33Z")
We are using ELK stack on windows server 2016. ELK stack has version 7.16.2. We are sending data from filebeat to logstash using pipeline and the pipeline har grok plugin. On sending the data we are getting the error i… --- ## [Filebeat Azure Module with Intune Diagnostics?](https://discuss.elastic.co/t/filebeat-azure-module-with-intune-diagnostics/248635)
**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\ **Replies:** 2\ **Last updated:** [October 5, 2020, 2:23pm UTC](https://discuss.elastic.co/t/filebeat-azure-module-with-intune-diagnostics/248635 "2020-10-05T14:23:41Z")
Hi, We're interested in trying out the Azure module for Filebeat in order to fetch logs from an Azure event hub. The event hub will be fed diagnostics logs from Intune. If we look at the documentation for the Azure mod… --- ## [How to grant permission in ESClientYamlSuiteTestCase integTest?](https://discuss.elastic.co/t/how-to-grant-permission-in-esclientyamlsuitetestcase-integtest/241975)
**Author:** [@nooneuse](https://discuss.elastic.co/u/nooneuse)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 9:51am UTC](https://discuss.elastic.co/t/how-to-grant-permission-in-esclientyamlsuitetestcase-integtest/241975 "2020-08-12T09:51:17Z")
Hello, I wrote a plugin which provide support for Datasketches aggregation, I think it is easy to use and I want to contribute it. I added it to the plugins folder with code, unit tests and all license for dependencies… --- ## [Visualizing multiple boolean values](https://discuss.elastic.co/t/visualizing-multiple-boolean-values/208622)
**Author:** [@AlanMark](https://discuss.elastic.co/u/AlanMark)\ **Replies:** 2\ **Last updated:** [November 22, 2019, 7:17am UTC](https://discuss.elastic.co/t/visualizing-multiple-boolean-values/208622 "2019-11-22T07:17:56Z")
I have a list of Boolean values representing options my users have taken on my site. Something like: Option A: Boolean ( True / False ) Option B: Boolean ( True / False ) Option C: Boolean ( True / False ) (In reality… --- ## [Advanced Watch of serial diff of value](https://discuss.elastic.co/t/advanced-watch-of-serial-diff-of-value/178925)
**Author:** [@6tUBp3gwd9Zp](https://discuss.elastic.co/u/6tUBp3gwd9Zp)\ **Replies:** 2\ **Last updated:** [April 30, 2019, 5:50am UTC](https://discuss.elastic.co/t/advanced-watch-of-serial-diff-of-value/178925 "2019-04-30T05:50:41Z")
I want to create an advanced watcher that monitors a value and if that value does make a jump greater than x then i want to be informed. My guess was to do this with a serial\_diff of the average aggregation of that value… --- ## [Get some field on searched result with JAVA](https://discuss.elastic.co/t/get-some-field-on-searched-result-with-java/7503)
**Author:** [@Ahmet\_DAL](https://discuss.elastic.co/u/Ahmet_DAL)\ **Replies:** 2\ **Last updated:** [June 28, 2013, 9:14am UTC](https://discuss.elastic.co/t/get-some-field-on-searched-result-with-java/7503 "2013-06-28T09:14:16Z")
Hi I'm newbie about Elastic Search. bi konuda How can i get some field on searched result. Assume that is the code; SearchResponse response = client.prepareSearch("twitter") .addField("user").setQuery(termQuery("u… --- ## [Unicast Problems (no handler found for action \[discovery/zen/unicast\])](https://discuss.elastic.co/t/unicast-problems-no-handler-found-for-action-discovery-zen-unicast/2974)
**Author:** [@Marc\_Seeger](https://discuss.elastic.co/u/Marc_Seeger)\ **Replies:** 2\ **Last updated:** [May 26, 2010, 6:20am UTC](https://discuss.elastic.co/t/unicast-problems-no-handler-found-for-action-discovery-zen-unicast/2974 "2010-05-26T06:20:43Z")
I'm trying to get the cluster working on EC2 (without the cloud plugin). 1. I start server A 2. I put the elastic ip of server A in server B's config file (in the unicast options) discovery.zen.ping.multicast: … --- ## [Unable to delete replicas on existing indices with ILM](https://discuss.elastic.co/t/unable-to-delete-replicas-on-existing-indices-with-ilm/306051)
**Author:** [@mhoward](https://discuss.elastic.co/u/mhoward)\ **Replies:** 2\ **Last updated:** [May 31, 2022, 7:50pm UTC](https://discuss.elastic.co/t/unable-to-delete-replicas-on-existing-indices-with-ilm/306051 "2022-05-31T19:50:26Z")
Hello. I have been trying to implement a change to my ILM where indices moved to the "cold" state will have their replica deleted. They currently have 1 replica. I've already made the change in the Index Lifecycle Pol… --- ## [Installing/updating license](https://discuss.elastic.co/t/installing-updating-license/98477)
**Author:** [@yehosef](https://discuss.elastic.co/u/yehosef)\ **Replies:** 2\ **Last updated:** [August 28, 2017, 11:34am UTC](https://discuss.elastic.co/t/installing-updating-license/98477 "2017-08-28T11:34:51Z")
Is it on the roadmap to be able to update the license from the web interface instead of the instructions given at https://www.elastic.co/guide/en/x-pack/current/installing-license.html It feels backwards that something … --- ## [Analyzer API does not work for Elasticsearch 1.7](https://discuss.elastic.co/t/analyzer-api-does-not-work-for-elasticsearch-1-7/81288)
**Author:** [@Karolinebryn](https://discuss.elastic.co/u/Karolinebryn)\ **Replies:** 2\ **Last updated:** [April 5, 2017, 12:14pm UTC](https://discuss.elastic.co/t/analyzer-api-does-not-work-for-elasticsearch-1-7/81288 "2017-04-05T12:14:06Z")
We are running Elasticsearch 1.7 (planning to upgrade very soon) and I am trying to use the Analyze API to understand what the different analyzers do, but the result presented from elasticsearch is not what I expect. I… --- ## [Too many File Descriptors open](https://discuss.elastic.co/t/too-many-file-descriptors-open/236820)
**Author:** [@Goutham\_Pratapa](https://discuss.elastic.co/u/Goutham_Pratapa)\ **Replies:** 5\ **Last updated:** [June 13, 2020, 8:15am UTC](https://discuss.elastic.co/t/too-many-file-descriptors-open/236820 "2020-06-13T08:15:56Z")
Hi all, In our Dev-environment (ES single node setup) we have seen that the open file descriptors for elastic search are 27491596. (base) root@root:~$ lsof | awk '{print $2}'| uniq -c | sort -rn | head The output… --- ## [Setting start timestamp on Transaction to an earlier time is always added to "app" type](https://discuss.elastic.co/t/setting-start-timestamp-on-transaction-to-an-earlier-time-is-always-added-to-app-type/203615)
**Author:** [@skestle](https://discuss.elastic.co/u/skestle)\ **Replies:** 5\ **Last updated:** [October 17, 2019, 11:03am UTC](https://discuss.elastic.co/t/setting-start-timestamp-on-transaction-to-an-earlier-time-is-always-added-to-app-type/203615 "2019-10-17T11:03:33Z")
Kibana version: 7.4 Elasticsearch version: 7.4 APM Server version: 7.4 APM Agent language and version: Java Programmatic API (ElasticApmAttacher) 1.10.0 Description of the problem including expected versus actual beh… --- ## [Apply Index Life Cycle Policies](https://discuss.elastic.co/t/apply-index-life-cycle-policies/192754)
**Author:** [@premkumar](https://discuss.elastic.co/u/premkumar)\ **Replies:** 5\ **Last updated:** [August 1, 2019, 8:49am UTC](https://discuss.elastic.co/t/apply-index-life-cycle-policies/192754 "2019-08-01T08:49:07Z")
Hi All, I have been trying to set up the index life cycle policies to my active index already available. My index names are X, Y, Z. Trying to assign a policy to roll over once reaching 25 GB. I'm creating the index n… --- ## [Extracting texts from audio and video files in kibana](https://discuss.elastic.co/t/extracting-texts-from-audio-and-video-files-in-kibana/191500)
**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\ **Replies:** 5\ **Last updated:** [July 21, 2019, 11:39am UTC](https://discuss.elastic.co/t/extracting-texts-from-audio-and-video-files-in-kibana/191500 "2019-07-21T11:39:45Z")
hi, i have mp3 and mp4 files i want to index them and visulaize the text corresponding to speech in kibana interface, how i can do that thank you --- ## [More about recovery process detail](https://discuss.elastic.co/t/more-about-recovery-process-detail/110533)
**Author:** [@ginger](https://discuss.elastic.co/u/ginger)\ **Replies:** 5\ **Last updated:** [December 12, 2017, 11:28am UTC](https://discuss.elastic.co/t/more-about-recovery-process-detail/110533 "2017-12-12T11:28:25Z")
Hi, all. I want to learn more about the remote recovery process in ES 5.x. Through reading code, the recovery process is as following: phase1(index)-\>phase2(translog)-\>finalizeRecovery. As far as I know, operations is s… --- ## [Labeling elastic nodes by API?](https://discuss.elastic.co/t/labeling-elastic-nodes-by-api/109119)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 5\ **Last updated:** [November 29, 2017, 4:46pm UTC](https://discuss.elastic.co/t/labeling-elastic-nodes-by-api/109119 "2017-11-29T16:46:01Z")
Hi, can the following attribute be set by API with 5.6.x? node.attr.box\_type Or only through the elastisearch.yml config? --- ## [Anyone have G1 GC working? What environment/configs?](https://discuss.elastic.co/t/anyone-have-g1-gc-working-what-environment-configs/13274)
**Author:** [@Nathan\_Dial](https://discuss.elastic.co/u/Nathan_Dial)\ **Replies:** 5\ **Last updated:** [August 21, 2013, 1:57pm UTC](https://discuss.elastic.co/t/anyone-have-g1-gc-working-what-environment-configs/13274 "2013-08-21T13:57:39Z")
I'm trying to tune ES for predictable response times under an update-heavy load. Our big challenge has been long GC pauses (sometimes stopping the app for up to 30 seconds). This post (http://jprante.github.io/2… --- ## [Logstash Helm Chart](https://discuss.elastic.co/t/logstash-helm-chart/188521)
**Author:** [@georgec](https://discuss.elastic.co/u/georgec)\ **Replies:** 0\ **Last updated:** [July 2, 2019, 1:25pm UTC](https://discuss.elastic.co/t/logstash-helm-chart/188521 "2019-07-02T13:25:29Z")
Hey all, Does anyone (particularly anyone who works at Elastic) know if the logstash charts will be integrated into the new Elastic maintained setup (https://github.com/elastic/helm-charts) ? There are a few mods I was… --- ## [Socket hang up with ExpressJS](https://discuss.elastic.co/t/socket-hang-up-with-expressjs/120979)
**Author:** [@Huynh\_Nam](https://discuss.elastic.co/u/Huynh_Nam)\ **Replies:** 0\ **Last updated:** [February 22, 2018, 5:19am UTC](https://discuss.elastic.co/t/socket-hang-up-with-expressjs/120979 "2018-02-22T05:19:03Z")
Hi all, I've setup my server with elastic-apm-node, and it run ok. But after a period of time (30-60 min), it causes an error like below: Error: socket hang up at createHangUpError (\_http\_client.js:331:15) at S… --- ## [How to extract logstash log.file.path for filter](https://discuss.elastic.co/t/how-to-extract-logstash-log-file-path-for-filter/239581)
**Author:** [@jang](https://discuss.elastic.co/u/jang)\ **Replies:** 1\ **Last updated:** [July 2, 2020, 7:51am UTC](https://discuss.elastic.co/t/how-to-extract-logstash-log-file-path-for-filter/239581 "2020-07-02T07:51:16Z")
hi. I am using Filebeat and Logstash. now, my \[log\]\[file\]\[path\] result. (The file path is flexible.) /home/logs/tomcat/application/test.log or /LOG/application/test2.log etc... I only want the file name except for… --- ## [Metricbeat/docker shows different stats for logstash in container than logstash monitoring](https://discuss.elastic.co/t/metricbeat-docker-shows-different-stats-for-logstash-in-container-than-logstash-monitoring/192015)
**Author:** [@sgreszcz](https://discuss.elastic.co/u/sgreszcz)\ **Replies:** 1\ **Last updated:** [July 24, 2019, 1:05pm UTC](https://discuss.elastic.co/t/metricbeat-docker-shows-different-stats-for-logstash-in-container-than-logstash-monitoring/192015 "2019-07-24T13:05:26Z")
I’m getting weird perf stats on logstash-netflow. Seems like the docker API perf mon says it is using 1200% CPU, but the actual logstash monitoring shows 8% CPU. Also htop also show lots of CPU headroom. --- ## [Can't login after install x-pack](https://discuss.elastic.co/t/cant-login-after-install-x-pack/121394)
**Author:** [@1\_Maximys\_1](https://discuss.elastic.co/u/1_Maximys_1)\ **Replies:** 1\ **Last updated:** [February 27, 2018, 6:50pm UTC](https://discuss.elastic.co/t/cant-login-after-install-x-pack/121394 "2018-02-27T18:50:20Z")
Hi. I've installed Elasticsearch and Kibana. Every thing was fine. But I want install X-Pack with license. When I did it, I saw message during login to Kibana: Login is currently disabled because the license could n… --- ## [Elastic search snapshots to Cohesity S3 repository](https://discuss.elastic.co/t/elastic-search-snapshots-to-cohesity-s3-repository/108625)
**Author:** [@nedl](https://discuss.elastic.co/u/nedl)\ **Replies:** 1\ **Last updated:** [December 19, 2017, 8:57pm UTC](https://discuss.elastic.co/t/elastic-search-snapshots-to-cohesity-s3-repository/108625 "2017-12-19T20:57:00Z")
We would like to direct our elastic search cluster snapshots to our Cohesity S3 compliant object storage. Is there any documentation or experience in performing this? I have searched but have yet to find anything on snap… --- ## [Regex/Wildcard Query not working](https://discuss.elastic.co/t/regex-wildcard-query-not-working/99775)
**Author:** [@Pritom\_Ahmed](https://discuss.elastic.co/u/Pritom_Ahmed)\ **Replies:** 1\ **Last updated:** [September 8, 2017, 7:07pm UTC](https://discuss.elastic.co/t/regex-wildcard-query-not-working/99775 "2017-09-08T19:07:46Z")
Hi, I am using the java API to query for a field with elasticsearch 5.5 SearchResponse response = client.prepareSearch("index") .setTypes("log") .setSearchType(SearchType.DFS\_QUERY\_THEN\_… --- ## [PF\_RING on Packetbeat error chinese](https://discuss.elastic.co/t/pf-ring-on-packetbeat-error-chinese/91365)
**Author:** [@pgyggi](https://discuss.elastic.co/u/pgyggi)\ **Replies:** 1\ **Last updated:** [July 4, 2017, 9:21am UTC](https://discuss.elastic.co/t/pf-ring-on-packetbeat-error-chinese/91365 "2017-07-04T09:21:09Z")
everybody, 1、I want to use PF\_RING for Packetbeat and then install PF\_RING on my CentOS(1161 min),PF\_RING is work. see: \[root@packetbeat packetbeat\]# lsmod |grep pf\_ring pf\_ring 1234205 0 2、 I clone the latest version b… --- ## [Logstash sending it's metric data to elasticsearch in localhost instead of configured host](https://discuss.elastic.co/t/logstash-sending-its-metric-data-to-elasticsearch-in-localhost-instead-of-configured-host/82232)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 1\ **Last updated:** [April 16, 2017, 12:33am UTC](https://discuss.elastic.co/t/logstash-sending-its-metric-data-to-elasticsearch-in-localhost-instead-of-configured-host/82232 "2017-04-16T00:33:59Z")
Hello I am trying to configure x-pack monitoring for logstash but not working as expected. As a test , I am using user elastic instead of logstashwriter\_ as written in the doc. I see below error log in logstash-pl… --- ## [Err Empty Response From Kibana](https://discuss.elastic.co/t/err-empty-response-from-kibana/322677)
**Author:** [@Surendra\_Gupta](https://discuss.elastic.co/u/Surendra_Gupta)\ **Replies:** 3\ **Last updated:** [January 16, 2023, 11:28pm UTC](https://discuss.elastic.co/t/err-empty-response-from-kibana/322677 "2023-01-16T23:28:42Z")
Hi @xeraa I am getting Err Empty Response from Kibana after multiple refresh i am getting elk screen and after that while fetching apm i am getting this issue can you please hlep me to solve this we have 16 gb ram … --- ## [Filebeat Module's Yaml Config Issue](https://discuss.elastic.co/t/filebeat-modules-yaml-config-issue/287231)
**Author:** [@Cassie\_Danaher](https://discuss.elastic.co/u/Cassie_Danaher)\ **Replies:** 3\ **Last updated:** [October 20, 2021, 9:58pm UTC](https://discuss.elastic.co/t/filebeat-modules-yaml-config-issue/287231 "2021-10-20T21:58:17Z")
I was under the impression that I could use filebeats keystore, to hold security information and then call those variables in the config file. When I try to do that it throws an error "mapping values are not allowed in … --- ## [Transaction.mark() does not show up in the timeline for RUM data](https://discuss.elastic.co/t/transaction-mark-does-not-show-up-in-the-timeline-for-rum-data/242117)
**Author:** [@Kartheek\_Mannepalli](https://discuss.elastic.co/u/Kartheek_Mannepalli)\ **Replies:** 3\ **Last updated:** [August 5, 2020, 10:18am UTC](https://discuss.elastic.co/t/transaction-mark-does-not-show-up-in-the-timeline-for-rum-data/242117 "2020-08-05T10:18:05Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea… --- ## [How to configure detection SIEM](https://discuss.elastic.co/t/how-to-configure-detection-siem/238385)
**Author:** [@syafeera](https://discuss.elastic.co/u/syafeera)\ **Replies:** 3\ **Last updated:** [June 29, 2020, 12:43pm UTC](https://discuss.elastic.co/t/how-to-configure-detection-siem/238385 "2020-06-29T12:43:31Z")
Hi, Problem: data from filebeat appear in SIEM, but at detection the it just empty and show this notification "Let’s set up your detection engine To use the detection engine, a user with the required cluster and index… --- ## [Parse source field](https://discuss.elastic.co/t/parse-source-field/154987)
**Author:** [@luggo](https://discuss.elastic.co/u/luggo)\ **Replies:** 3\ **Last updated:** [November 1, 2018, 10:40am UTC](https://discuss.elastic.co/t/parse-source-field/154987 "2018-11-01T10:40:29Z")
Hey community, my source field (provided by filebeat) contains information about the host, the application and the version. Those are information that need to be in my log entries in Elasticsearch. Example source: C:\\… --- ## [Bootstrap checks - memory is not locked](https://discuss.elastic.co/t/bootstrap-checks-memory-is-not-locked/102218)
**Author:** [@matthew\_maclean](https://discuss.elastic.co/u/matthew_maclean)\ **Replies:** 0\ **Last updated:** [September 29, 2017, 7:05am UTC](https://discuss.elastic.co/t/bootstrap-checks-memory-is-not-locked/102218 "2017-09-29T07:05:04Z")
Hi guys, I'm having problems with the bootstrap check on a RedHat box. I've searched around the forums and tried \[2017-09-20T11:40:41,836\]\[ERROR\]\[o.e.b.Bootstrap \] \[node1\] node validation exception \[2\] bootstr… --- ## [Logstash container in Docker starts and then stops with no obvious error](https://discuss.elastic.co/t/logstash-container-in-docker-starts-and-then-stops-with-no-obvious-error/66132)
**Author:** [@Schadenfred](https://discuss.elastic.co/u/Schadenfred)\ **Replies:** 0\ **Last updated:** [November 15, 2016, 4:02pm UTC](https://discuss.elastic.co/t/logstash-container-in-docker-starts-and-then-stops-with-no-obvious-error/66132 "2016-11-15T16:02:40Z")
I'm a newbie to Elkstack, and I'm having trouble setting up an Elkstack in Docker. The problem I'm having is that my container runs for about 20 seconds, then exits. I don't see any obvious errors in the log (see below… --- ## [How to inspect the inverted index created by ES?](https://discuss.elastic.co/t/how-to-inspect-the-inverted-index-created-by-es/52697)
**Author:** [@Clay](https://discuss.elastic.co/u/Clay)\ **Replies:** 3\ **Last updated:** [June 16, 2016, 2:10am UTC](https://discuss.elastic.co/t/how-to-inspect-the-inverted-index-created-by-es/52697 "2016-06-16T02:10:20Z")
Is there anyway to inspect the inverted index ? Elasticsearch version : 2.2.0 Luke ? if luke can, should I change some codes? --- ## [Canvas Issue - math](https://discuss.elastic.co/t/canvas-issue-math/299090)
**Author:** [@PaulaCM](https://discuss.elastic.co/u/PaulaCM)\ **Replies:** 2\ **Last updated:** [March 10, 2022, 4:07pm UTC](https://discuss.elastic.co/t/canvas-issue-math/299090 "2022-03-10T16:07:24Z")
Hey! I don't know if someone got this issue or knows how to help: I am doing a SQL query which is working fine: // SELECT COUNT(DISTINCT "idVisit") FROM "test" but when displaying an error appears "Whoops! Expressi… --- ## [Why metricbeat is not picking up keystore entries?](https://discuss.elastic.co/t/why-metricbeat-is-not-picking-up-keystore-entries/256011)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 11:19am UTC](https://discuss.elastic.co/t/why-metricbeat-is-not-picking-up-keystore-entries/256011 "2020-11-20T11:19:10Z")
Hi, I am using elastic stack 7.9. I have a 3 node cluster and https is I have created certificates using elasticsearch-certutil command, which are generic, and I am using it across all nodes. I have the below files; e… --- ## [How to remove all the Host&Cloud fields added to Filebeats/Elasticsearch index?](https://discuss.elastic.co/t/how-to-remove-all-the-host-cloud-fields-added-to-filebeats-elasticsearch-index/255399)
**Author:** [@houmie](https://discuss.elastic.co/u/houmie)\ **Replies:** 2\ **Last updated:** [November 14, 2020, 5:12pm UTC](https://discuss.elastic.co/t/how-to-remove-all-the-host-cloud-fields-added-to-filebeats-elasticsearch-index/255399 "2020-11-14T17:12:50Z")
Hello, I finally got Filebeats/Elasticsearch/Kibana working. However the stack seems to have injected a lot of cloud tags (e.g. cloud.account.id) and host tags (host.os.kernel) that has inflated the data and makes it h… --- ## [Edge NGram Tokenizer not Tokenizing Digits?](https://discuss.elastic.co/t/edge-ngram-tokenizer-not-tokenizing-digits/196521)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 2\ **Last updated:** [August 23, 2019, 4:04pm UTC](https://discuss.elastic.co/t/edge-ngram-tokenizer-not-tokenizing-digits/196521 "2019-08-23T16:04:57Z")
We're using the Edge NGram tokenizer (ElasticSearch 7.3 Windows) on letters and digits from 3 to 10 characters. However when we upload a text test 11kw and search for text: test AND text: 11k we find nothing. Interestin… [Previous page](https://discuss.elastic.co/top.md?page=1478&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1480&per_page=50&period=all)