# Top **URL:** https://discuss.elastic.co/top.md?page=1480&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1481 --- ## [Regex Query to extract a number](https://discuss.elastic.co/t/regex-query-to-extract-a-number/160617)
**Author:** [@Arnav\_Bose](https://discuss.elastic.co/u/Arnav_Bose)\ **Replies:** 2\ **Last updated:** [December 12, 2018, 9:20pm UTC](https://discuss.elastic.co/t/regex-query-to-extract-a-number/160617 "2018-12-12T21:20:53Z")
I am new to ES. I have a log message coming and I want to extract some field: {"msg":"Certificate is going to expire in 1088 Regenerate the same","days\_left":1088} I would like to check if the date is less than 60. Is … --- ## [How to SSL with Elasticsearch Cloud](https://discuss.elastic.co/t/how-to-ssl-with-elasticsearch-cloud/108229)
**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\ **Replies:** 2\ **Last updated:** [November 18, 2017, 1:25pm UTC](https://discuss.elastic.co/t/how-to-ssl-with-elasticsearch-cloud/108229 "2017-11-18T13:25:49Z")
I cannot find any documentation on SSL using thr Elastic Cloud. I see in the documentation a hint at using the Java KeyStore, but there is nothing else on Elastic Cloud, Certificates and SSL. Any help out there? --- ## [Hide index patterns depending the user connected x-pack](https://discuss.elastic.co/t/hide-index-patterns-depending-the-user-connected-x-pack/100786)
**Author:** [@Ahmed\_Kdh](https://discuss.elastic.co/u/Ahmed_Kdh)\ **Replies:** 2\ **Last updated:** [September 28, 2017, 8:54am UTC](https://discuss.elastic.co/t/hide-index-patterns-depending-the-user-connected-x-pack/100786 "2017-09-28T08:54:08Z")
Hello, I'm using elasticsearch 5.6.0, Kibana 5.6.0 and X-pack plugin. I would like to know if it is possible (with only one kibana instance) to hide some index patterns depending on the user connected ? Example : Ther… --- ## [Need to perform aggregation, delta/percentage comparison and plot, is this possible in Kibana?](https://discuss.elastic.co/t/need-to-perform-aggregation-delta-percentage-comparison-and-plot-is-this-possible-in-kibana/72148)
**Author:** [@am87](https://discuss.elastic.co/u/am87)\ **Replies:** 2\ **Last updated:** [January 26, 2017, 3:48pm UTC](https://discuss.elastic.co/t/need-to-perform-aggregation-delta-percentage-comparison-and-plot-is-this-possible-in-kibana/72148 "2017-01-26T15:48:15Z")
Hey guys, I need some help with a Kibana visualization i'm putting together. I would like to perform an aggregation and comparison in a very specific way and I'm not sure if its possible with Kibana or not. Any help woul… --- ## [Marvel problem](https://discuss.elastic.co/t/marvel-problem/40832)
**Author:** [@tianzongqi](https://discuss.elastic.co/u/tianzongqi)\ **Replies:** 2\ **Last updated:** [February 3, 2016, 10:51pm UTC](https://discuss.elastic.co/t/marvel-problem/40832 "2016-02-03T22:51:14Z")
I have settled the marvel plugin for my ES cluster. But I found that everyday there will a marvel index be created. how can i stop this mavel index created? --- ## [Not able to config JDBC input](https://discuss.elastic.co/t/not-able-to-config-jdbc-input/25505)
**Author:** [@PavanRGowda](https://discuss.elastic.co/u/PavanRGowda)\ **Replies:** 2\ **Last updated:** [July 15, 2015, 4:04am UTC](https://discuss.elastic.co/t/not-able-to-config-jdbc-input/25505 "2015-07-15T04:04:47Z")
Hello everyone, below is my configuration - input { jdbc { jdbc\_driver\_class =\> "org.apache.derby.jdbc.EmbeddedDriver" jdbc\_connection\_string =\> "jdbc:derby://localhost:3306/test" jdbc\_user =\> "root" … --- ## [Elastic Log Threshold rule problem](https://discuss.elastic.co/t/elastic-log-threshold-rule-problem/329213)
**Author:** [@amityahav](https://discuss.elastic.co/u/amityahav)\ **Replies:** 4\ **Last updated:** [April 11, 2023, 10:03am UTC](https://discuss.elastic.co/t/elastic-log-threshold-rule-problem/329213 "2023-04-11T10:03:40Z")
Hey there, i've been experimenting with log threshold type of rules recently and i've encountered some strange behaviors. Elastic version is 8.6.2 given a log threshold rule with action connector of some index. When … --- ## [Error starting Elastic Search](https://discuss.elastic.co/t/error-starting-elastic-search/316659)
**Author:** [@ArrakisMiner](https://discuss.elastic.co/u/ArrakisMiner)\ **Replies:** 4\ **Last updated:** [October 14, 2022, 7:44pm UTC](https://discuss.elastic.co/t/error-starting-elastic-search/316659 "2022-10-14T19:44:57Z")
I'm having issues trying to start Elastic Search after installation, and I'm not sure how to get around it, nor can I find any similar topics with solutions online. When I run systemctl start elasticsearch, I get the er… --- ## [Rolling upgrade issue - ES 2.1.1 to ES 2.4.1](https://discuss.elastic.co/t/rolling-upgrade-issue-es-2-1-1-to-es-2-4-1/67823)
**Author:** [@mosiddi](https://discuss.elastic.co/u/mosiddi)\ **Replies:** 4\ **Last updated:** [December 2, 2016, 9:22am UTC](https://discuss.elastic.co/t/rolling-upgrade-issue-es-2-1-1-to-es-2-4-1/67823 "2016-12-02T09:22:37Z")
Hi there, We are trying rolling upgrade of our clusters from ES 2.1.1 to ES 2.4.1. What we noticed is once we move the 2nd data node to ES 2.4.1, not all shards in that node are able to come up and remain in unallocated … --- ## [Total hits shows 1 and hits array is 0 length](https://discuss.elastic.co/t/total-hits-shows-1-and-hits-array-is-0-length/3052)
**Author:** [@Samuel\_Doyle](https://discuss.elastic.co/u/Samuel_Doyle)\ **Replies:** 4\ **Last updated:** [June 30, 2010, 9:26am UTC](https://discuss.elastic.co/t/total-hits-shows-1-and-hits-array-is-0-length/3052 "2010-06-30T09:26:57Z")
I just did a test where I encountered this. I was asserting on the hit count which was 1 but there this is no results in the hits. Any ideas why this is happening? Thanks --- ## [Panw.panos TCP grok errors](https://discuss.elastic.co/t/panw-panos-tcp-grok-errors/350993)
**Author:** [@CodeMonky](https://discuss.elastic.co/u/CodeMonky)\ **Replies:** 0\ **Last updated:** [January 12, 2024, 10:03pm UTC](https://discuss.elastic.co/t/panw-panos-tcp-grok-errors/350993 "2024-01-12T22:03:55Z")
Good day all. I have a question about the Palo Alto Next-Gen Firewall integration. It has two input types, TCP and UDP. We have a client that wanted to move from the UDP to the TCP/SSL connection for security, so we did… --- ## [Elastic master node down, how to make slave new master?](https://discuss.elastic.co/t/elastic-master-node-down-how-to-make-slave-new-master/341568)
**Author:** [@webfr](https://discuss.elastic.co/u/webfr)\ **Replies:** 7\ **Last updated:** [August 28, 2023, 2:32pm UTC](https://discuss.elastic.co/t/elastic-master-node-down-how-to-make-slave-new-master/341568 "2023-08-28T14:32:26Z")
Hello, my master node is currently down since few days, how to make my slave new master if problem on master persists? Thanks. --- ## [How to hide error message for graphs](https://discuss.elastic.co/t/how-to-hide-error-message-for-graphs/259554)
**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\ **Replies:** 1\ **Last updated:** [January 11, 2021, 10:08am UTC](https://discuss.elastic.co/t/how-to-hide-error-message-for-graphs/259554 "2021-01-11T10:08:14Z")
{ "$schema": "https://vega.github.io/schema/vega-lite/v4.json", "description": "A simple bar chart with embedded data.", "data": { "values": \[ {"a": "A", "b": 28}, {"a": "B", "b": 55}, {"a": "C", "b": 43}… --- ## [Errors in Kibana logs](https://discuss.elastic.co/t/errors-in-kibana-logs/258968)
**Author:** [@aramos](https://discuss.elastic.co/u/aramos)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 10:42am UTC](https://discuss.elastic.co/t/errors-in-kibana-logs/258968 "2020-12-17T10:42:39Z")
Good morning, The first sorry for my English. I am new on Linux, I have to install Kibana. I'm using Ubuntu Server 2004. I installed kibana 7.9.3 from the .tar file following the instructions https://www.elastic.co/gui… --- ## [Large file chunking with Ingest-Attachment](https://discuss.elastic.co/t/large-file-chunking-with-ingest-attachment/255134)
**Author:** [@MBResolution](https://discuss.elastic.co/u/MBResolution)\ **Replies:** 1\ **Last updated:** [November 16, 2020, 10:49am UTC](https://discuss.elastic.co/t/large-file-chunking-with-ingest-attachment/255134 "2020-11-16T10:49:44Z")
We have recently upgraded ElasticSearch from version 2 to version 7.9. We index attachments like PDFs, Word and Excel files. We previously used the “mapper-attachment” plugin for this. Mapper-attachment is not supported … --- ## [How to access \_resource in context?](https://discuss.elastic.co/t/how-to-access-resource-in-context/219284)
**Author:** [@gunjan\_prmr](https://discuss.elastic.co/u/gunjan_prmr)\ **Replies:** 7\ **Last updated:** [February 21, 2020, 6:03pm UTC](https://discuss.elastic.co/t/how-to-access-resource-in-context/219284 "2020-02-21T18:03:31Z")
I have set up alert in Kibana for slack notification which works fine. I can access my trigger name by {{ ctx.trigger.name }} I want to access \_source but I don't see that in ctx. How can I access that? Detailed In… --- ## [Изменить цвет точек на линии графика](https://discuss.elastic.co/t/topic/205669)
**Author:** [@Anne\_Kim](https://discuss.elastic.co/u/Anne_Kim)\ **Replies:** 7\ **Last updated:** [October 29, 2019, 2:34pm UTC](https://discuss.elastic.co/t/topic/205669 "2019-10-29T14:34:45Z")
Вопрос простой: как изменить цвет точек на линии графика, чтобы цвета точек и линии совпадали? Сейчас график выглядит так: А надо так: --- ## [Ruby exception](https://discuss.elastic.co/t/ruby-exception/176557)
**Author:** [@Abhilash\_B](https://discuss.elastic.co/u/Abhilash_B)\ **Replies:** 1\ **Last updated:** [April 12, 2019, 12:22pm UTC](https://discuss.elastic.co/t/ruby-exception/176557 "2019-04-12T12:22:05Z")
Is there any issue with the below logstash configuration. I am trying to access the file path using event.get('path') and then split it. I get the following exception \[2019-04-12T07:19:25,192\]\[ERROR\]\[logstash.filters.ru… --- ## [Nest v6.2.0 Self Referncing Loop](https://discuss.elastic.co/t/nest-v6-2-0-self-referncing-loop/143718)
**Author:** [@Conor\_Malcolm](https://discuss.elastic.co/u/Conor_Malcolm)\ **Replies:** 1\ **Last updated:** [August 9, 2018, 11:40pm UTC](https://discuss.elastic.co/t/nest-v6-2-0-self-referncing-loop/143718 "2018-08-09T23:40:22Z")
I am using Nest v6.2.0 to connect to elastic search. When I am trying to add a document of type A to an index I get a Self Referencing loop error because the object of type A has a property of type B and type B has a pr… --- ## [ES 6.2.1 Unable to reindex due to unavailable\_shards\_exception](https://discuss.elastic.co/t/es-6-2-1-unable-to-reindex-due-to-unavailable-shards-exception/121859)
**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Replies:** 1\ **Last updated:** [February 28, 2018, 3:14pm UTC](https://discuss.elastic.co/t/es-6-2-1-unable-to-reindex-due-to-unavailable-shards-exception/121859 "2018-02-28T15:14:36Z")
Hi Team, I am trying to reindex from a source "A" index to dest "B" index - this has worked before but suddenly it throws me the unavailable\_shards\_exception exception now and am not sure why. The cluster health is gre… --- ## [How to create daily rotation index with python-elasticsearch](https://discuss.elastic.co/t/how-to-create-daily-rotation-index-with-python-elasticsearch/96113)
**Author:** [@JiGe](https://discuss.elastic.co/u/JiGe)\ **Replies:** 1\ **Last updated:** [August 7, 2017, 1:56pm UTC](https://discuss.elastic.co/t/how-to-create-daily-rotation-index-with-python-elasticsearch/96113 "2017-08-07T13:56:37Z")
Just like logstash index, which could be rotated daily automatically. How to achieve this with python-elasticsearch? create daily rotation index and search from the index. --- ## [Logstash pipe line block utf8 ascii-8bit](https://discuss.elastic.co/t/logstash-pipe-line-block-utf8-ascii-8bit/55107)
**Author:** [@Sadegh\_Solati](https://discuss.elastic.co/u/Sadegh_Solati)\ **Replies:** 1\ **Last updated:** [March 23, 2017, 2:51am UTC](https://discuss.elastic.co/t/logstash-pipe-line-block-utf8-ascii-8bit/55107 "2017-03-23T02:51:51Z")
Hi It's several days I'm trying to figure out what is causing my elk setup crashing. I found the log which causes this issue. Jul 2 05:45:58 web1gr nginx: 2016/07/02 05:45:58 \[error\] 63#63: \*14012402 FastCGI sent in s… --- ## [Elasticsearch template in logstash does not load?](https://discuss.elastic.co/t/elasticsearch-template-in-logstash-does-not-load/65556)
**Author:** [@irom77](https://discuss.elastic.co/u/irom77)\ **Replies:** 1\ **Last updated:** [November 14, 2016, 10:31am UTC](https://discuss.elastic.co/t/elasticsearch-template-in-logstash-does-not-load/65556 "2016-11-14T10:31:20Z")
I have template which is in fact copy&paste of my current auto mappings with two field types change to geo\_point but when I try to load it, actual mappings do not change ? output { if \[type\] =="pa-traffic" { elastics… --- ## [Nested Mapping in Logstash](https://discuss.elastic.co/t/nested-mapping-in-logstash/45886)
**Author:** [@Hans\_Kruse](https://discuss.elastic.co/u/Hans_Kruse)\ **Replies:** 1\ **Last updated:** [March 31, 2016, 8:37am UTC](https://discuss.elastic.co/t/nested-mapping-in-logstash/45886 "2016-03-31T08:37:32Z")
Logstash Template Mappings do not have properties like ElasticSearch mappings do. How do I define nested template Mappings for Logstash? I have a Mapping for elasticsearch like: "blablabla":{ … --- ## [Complex field name and type name collision](https://discuss.elastic.co/t/complex-field-name-and-type-name-collision/44468)
**Author:** [@Peter\_Johnson\_2](https://discuss.elastic.co/u/Peter_Johnson_2)\ **Replies:** 1\ **Last updated:** [March 15, 2016, 9:16pm UTC](https://discuss.elastic.co/t/complex-field-name-and-type-name-collision/44468 "2016-03-15T21:16:11Z")
when performing a 'match' query as below, elasticsearch 1.7.2 is not able to distinguish between: a document with \_type of 'user' & a field called 'name' a document of any \_type with a field called 'user.name' the fol… --- ## [Documents and property naming](https://discuss.elastic.co/t/documents-and-property-naming/4583)
**Author:** [@James\_Cook](https://discuss.elastic.co/u/James_Cook)\ **Replies:** 7\ **Last updated:** [June 10, 2011, 3:15pm UTC](https://discuss.elastic.co/t/documents-and-property-naming/4583 "2011-06-10T15:15:28Z")
I saw a post a couple days ago on the list where someone was saying that the same property name reused across multiple types must have the same mapping. I guess I just wanted someone to confirm whether this is true o… --- ## [Redis input pipeline intermittently stops for couple minutes](https://discuss.elastic.co/t/redis-input-pipeline-intermittently-stops-for-couple-minutes/185400)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 6\ **Last updated:** [June 21, 2019, 1:43pm UTC](https://discuss.elastic.co/t/redis-input-pipeline-intermittently-stops-for-couple-minutes/185400 "2019-06-21T13:43:41Z")
Hi! One of my "heavy duty" pipelines started acting strangely in the past weeks. I get alerts that ingesting stopped then I see that after a spike everything goes back to normal. I checked Elastic and Logstash logs on a… --- ## [How can i create Custom visualization and add as a plugin in kibana](https://discuss.elastic.co/t/how-can-i-create-custom-visualization-and-add-as-a-plugin-in-kibana/130826)
**Author:** [@yash\_mangla](https://discuss.elastic.co/u/yash_mangla)\ **Replies:** 6\ **Last updated:** [May 21, 2018, 12:12pm UTC](https://discuss.elastic.co/t/how-can-i-create-custom-visualization-and-add-as-a-plugin-in-kibana/130826 "2018-05-21T12:12:10Z")
Hello Guyz, this questions is reference of below question. https://discuss.elastic.co/t/how-i-can-add-my-custom-graph-visualization-in-kibana/112223 I'm basically 1st trying to understand how data flow and rendering i… --- ## [Compare two fields with different documents](https://discuss.elastic.co/t/compare-two-fields-with-different-documents/311529)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 5\ **Last updated:** [August 5, 2022, 1:59pm UTC](https://discuss.elastic.co/t/compare-two-fields-with-different-documents/311529 "2022-08-05T13:59:45Z")
Hi, I want to compare two fields but not in the same document is that possible ? for example : if date.document1 == date.document2 and x.document1 == y.document2 { #DO somthing } Any help would be sincerely appre… --- ## [Curator snapshot stuck in INIT](https://discuss.elastic.co/t/curator-snapshot-stuck-in-init/182796)
**Author:** [@Tim\_Curtin1](https://discuss.elastic.co/u/Tim_Curtin1)\ **Replies:** 5\ **Last updated:** [May 26, 2019, 11:46pm UTC](https://discuss.elastic.co/t/curator-snapshot-stuck-in-init/182796 "2019-05-26T23:46:12Z")
I've done a fair bit of searching and I can't come up with a fix here A curator snapshot in our cluster has become stuck (around 7TB of data). About the cluster ES 2.4.6 Running on AWS with the cloud plugin Here's w… --- ## [Need help to apply Analyzers](https://discuss.elastic.co/t/need-help-to-apply-analyzers/8323)
**Author:** [@aps](https://discuss.elastic.co/u/aps)\ **Replies:** 5\ **Last updated:** [July 9, 2012, 8:15pm UTC](https://discuss.elastic.co/t/need-help-to-apply-analyzers/8323 "2012-07-09T20:15:10Z")
Hi, We are indexing data which has various fields like Address, Phone Number, Street Number etc. The problem which we are facing is Address field has data space separated for .e.g "Oak Avenue", "Pretoria Avenue", … --- ## [Logstash Ruby Tmp Folders - Temporary Solution](https://discuss.elastic.co/t/logstash-ruby-tmp-folders-temporary-solution/283793)
**Author:** [@Tydorius](https://discuss.elastic.co/u/Tydorius)\ **Replies:** 0\ **Last updated:** [September 9, 2021, 2:38pm UTC](https://discuss.elastic.co/t/logstash-ruby-tmp-folders-temporary-solution/283793 "2021-09-09T14:38:55Z")
I am currently experiencing the known issue where JRuby files are not cleaned up in /tmp on CentOS 7. My temporary resolution has been to set up a cron job to remove these folders. To save others trouble, here is my set… --- ## [\[apm/apmsql/pq\]\[GoLang\] Does NOT support parameterized SQL statement](https://discuss.elastic.co/t/apm-apmsql-pq-golang-does-not-support-parameterized-sql-statement/203931)
**Author:** [@JeckyOH](https://discuss.elastic.co/u/JeckyOH)\ **Replies:** 3\ **Last updated:** [October 18, 2019, 10:28am UTC](https://discuss.elastic.co/t/apm-apmsql-pq-golang-does-not-support-parameterized-sql-statement/203931 "2019-10-18T10:28:23Z")
Hey Guys, I'm using Elastic APM in GoLang to trace requests for my application. It is awesome that SQL Statements are present in tracing dashboards in Kibana. But I found that apm/module/apmsql does NOT provide raw sta… --- ## [Monitor events](https://discuss.elastic.co/t/monitor-events/143512)
**Author:** [@Gabriela\_Diana\_Stoic](https://discuss.elastic.co/u/Gabriela_Diana_Stoic)\ **Replies:** 3\ **Last updated:** [August 16, 2018, 11:50am UTC](https://discuss.elastic.co/t/monitor-events/143512 "2018-08-16T11:50:31Z")
Hi, I am using Logstash, Elasticsearch and Kibana to continously monitor events sent by a server via a TCP port. Every server event is described by: Name, ID, Subsystem where it occured, Occurence Time, Clearing Time a… --- ## [Fuzzy query in query vs. filter context](https://discuss.elastic.co/t/fuzzy-query-in-query-vs-filter-context/125823)
**Author:** [@l\_l](https://discuss.elastic.co/u/l_l)\ **Replies:** 0\ **Last updated:** [March 27, 2018, 9:05pm UTC](https://discuss.elastic.co/t/fuzzy-query-in-query-vs-filter-context/125823 "2018-03-27T21:05:16Z")
I have an index whose documents have a field firstName. If I run the following, for example: GET \_search/ { "query": { "fuzzy": { "firstName": { "value": "yvonne", "fuzziness": 1 } … --- ## [Disable merging to avoid index corruption](https://discuss.elastic.co/t/disable-merging-to-avoid-index-corruption/54374)
**Author:** [@Selvam\_ayyanar](https://discuss.elastic.co/u/Selvam_ayyanar)\ **Replies:** 3\ **Last updated:** [July 1, 2016, 7:36am UTC](https://discuss.elastic.co/t/disable-merging-to-avoid-index-corruption/54374 "2016-07-01T07:36:29Z")
Hi All, We are facing index corruption due to field conflicts. for ex: i have a field "Number" in type 1 and 2 in a same INDEX. in type 1 it is defined as "integer" in type 2 it is defined as "string" elasticsearc… --- ## [Is it possible to setup multiple logstash indexer service for same index?](https://discuss.elastic.co/t/is-it-possible-to-setup-multiple-logstash-indexer-service-for-same-index/33355)
**Author:** [@macymin](https://discuss.elastic.co/u/macymin)\ **Replies:** 3\ **Last updated:** [November 2, 2015, 6:51am UTC](https://discuss.elastic.co/t/is-it-possible-to-setup-multiple-logstash-indexer-service-for-same-index/33355 "2015-11-02T06:51:28Z")
we have 2 index which has huge data feeding. the forwarder sends data to redis then indexer. by checking the LLEN of the KEYS in redis-cli, the number keeps increasing which means the indexer is not picking up the fil… --- ## [Metrics filter out to Elasticsearch](https://discuss.elastic.co/t/metrics-filter-out-to-elasticsearch/869)
**Author:** [@jruybal](https://discuss.elastic.co/u/jruybal)\ **Replies:** 3\ **Last updated:** [May 26, 2015, 6:07pm UTC](https://discuss.elastic.co/t/metrics-filter-out-to-elasticsearch/869 "2015-05-26T18:07:27Z")
Hi, This seems simple. I wish I could say it was, but I cannot get metrics to show up in Kibana. filter{ metrics { meter =\> \[ "events" \] add\_tag =\> "metric" } } output { elasticsearch { cluster =\> … --- ## [Authentication to realm oidc1 failed - Failed to authenticate user with OpenID Connect](https://discuss.elastic.co/t/authentication-to-realm-oidc1-failed-failed-to-authenticate-user-with-openid-connect/335959)
**Author:** [@latif07](https://discuss.elastic.co/u/latif07)\ **Replies:** 1\ **Last updated:** [June 15, 2023, 11:41pm UTC](https://discuss.elastic.co/t/authentication-to-realm-oidc1-failed-failed-to-authenticate-user-with-openid-connect/335959 "2023-06-15T23:41:13Z")
Hello, I am facing an error when trying to log into Kibana using Keycloak. {"@timestamp":"2023-06-14T08:40:15.478Z", "log.level": "WARN", "message":"Authentication to realm oidc1 failed - Failed to authenticate user wi… --- ## [Elastic Agent Integration Dashboards Not Loading](https://discuss.elastic.co/t/elastic-agent-integration-dashboards-not-loading/282707)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 1\ **Last updated:** [August 30, 2021, 7:49am UTC](https://discuss.elastic.co/t/elastic-agent-integration-dashboards-not-loading/282707 "2021-08-30T07:49:50Z")
Recently setup Elastic Fleet server, added a policy and intergrations, and deployed the agent to a server. However, the dashboards these integrations are supposed to load do not exist anywhere. How do I get these dashb… --- ## [Logstash - Can't get text on a START\_OBJECT](https://discuss.elastic.co/t/logstash-cant-get-text-on-a-start-object/249400)
**Author:** [@bruno\_aleixo](https://discuss.elastic.co/u/bruno_aleixo)\ **Replies:** 1\ **Last updated:** [September 21, 2020, 7:15pm UTC](https://discuss.elastic.co/t/logstash-cant-get-text-on-a-start-object/249400 "2020-09-21T19:15:36Z")
Hi, could help me with errors at the logstash \[2020-09-21T13:48:42,854\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"apimanager-2… --- ## [Filebeat with AWS ES IAM Role authentication ...?](https://discuss.elastic.co/t/filebeat-with-aws-es-iam-role-authentication/206061)
**Author:** [@john\_eapen](https://discuss.elastic.co/u/john_eapen)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 6:36pm UTC](https://discuss.elastic.co/t/filebeat-with-aws-es-iam-role-authentication/206061 "2019-10-31T18:36:44Z")
I am using filebeat-7.4.1 docker on AWS with AWS ES. It is my understanding that Filebeat doesn't support IAM authentication when used with AWS Elasticsearch service ? Is there any plan to support this in near future o… --- ## [Elastic APM property elastic.apm.enable\_log\_correlation does not work](https://discuss.elastic.co/t/elastic-apm-property-elastic-apm-enable-log-correlation-does-not-work/198097)
**Author:** [@surenraju](https://discuss.elastic.co/u/surenraju)\ **Replies:** 1\ **Last updated:** [September 5, 2019, 1:21am UTC](https://discuss.elastic.co/t/elastic-apm-property-elastic-apm-enable-log-correlation-does-not-work/198097 "2019-09-05T01:21:52Z")
Elastic Search Version: 7.3.1 APM Server Version: 7.3.1 APM Client Version: 1.9.0 I am running APM Client agent along with Spring Boot based microservices. APM Client is able to instrument and able to collect traces, … --- ## [Licensing of watcher](https://discuss.elastic.co/t/licensing-of-watcher/140655)
**Author:** [@Akram1](https://discuss.elastic.co/u/Akram1)\ **Replies:** 1\ **Last updated:** [July 19, 2018, 7:22am UTC](https://discuss.elastic.co/t/licensing-of-watcher/140655 "2018-07-19T07:22:29Z")
Hi, I need to use watcher. In licensing I am not able to figure out how much it will cost me to use watcher. can anyone help me out that Is there any free version of watcher available. if not, then how much it will cost… --- ## [Cisco ASA netflow: Ignoring Netflow version v15409](https://discuss.elastic.co/t/cisco-asa-netflow-ignoring-netflow-version-v15409/113451)
**Author:** [@Mario\_van\_Gemert](https://discuss.elastic.co/u/Mario_van_Gemert)\ **Replies:** 1\ **Last updated:** [December 29, 2017, 9:11am UTC](https://discuss.elastic.co/t/cisco-asa-netflow-ignoring-netflow-version-v15409/113451 "2017-12-29T09:11:36Z")
Trying to "push" my Cisco ASA logs to Logstash. This results in an "Ignoring Netflow version v15409" error. .conf: input { udp { port =\> 9996 type =\> "netflow" codec =\> netflow { versions =\> \[9\] } } } output … --- ## [Day of Week from timestamp using ruby code](https://discuss.elastic.co/t/day-of-week-from-timestamp-using-ruby-code/99086)
**Author:** [@anisen](https://discuss.elastic.co/u/anisen)\ **Replies:** 1\ **Last updated:** [September 3, 2017, 6:40pm UTC](https://discuss.elastic.co/t/day-of-week-from-timestamp-using-ruby-code/99086 "2017-09-03T18:40:33Z")
Hi, I am trying to get the day of the week(Sun,Mon…) from the timestamp field in the log with the below code: ruby { code =\> ‘event.set(“day\_of\_week”, event.get(’@timestamp’).time.strftime ‘%a’)’ } But getting " ERR… --- ## [Inserting data from Spark application creates unassigned shards](https://discuss.elastic.co/t/inserting-data-from-spark-application-creates-unassigned-shards/56257)
**Author:** [@Zoran\_Jeremic](https://discuss.elastic.co/u/Zoran_Jeremic)\ **Replies:** 1\ **Last updated:** [April 12, 2017, 10:05pm UTC](https://discuss.elastic.co/t/inserting-data-from-spark-application-creates-unassigned-shards/56257 "2017-04-12T22:05:24Z")
I have a scala spark application that should store some data to ES 2.3.3. I'm trying to insert some very simple data using the following code: val sparkConf = new SparkConf() .setMaster(master) .set("spark.cores\_max"… --- ## [Stemmer is not working](https://discuss.elastic.co/t/stemmer-is-not-working/53297)
**Author:** [@ajoealex](https://discuss.elastic.co/u/ajoealex)\ **Replies:** 1\ **Last updated:** [June 21, 2016, 5:34am UTC](https://discuss.elastic.co/t/stemmer-is-not-working/53297 "2016-06-21T05:34:39Z")
I created an index for an attachment using elasticsearch2.3.3 and Nest 2.3.2.My indexing is given below. I am searching for singular words with plurals in the document.Read that snowball stemmer will do this type of conv… --- ## [Too many open files?](https://discuss.elastic.co/t/too-many-open-files/29969)
**Author:** [@paulkeogh](https://discuss.elastic.co/u/paulkeogh)\ **Replies:** 1\ **Last updated:** [September 26, 2015, 7:38pm UTC](https://discuss.elastic.co/t/too-many-open-files/29969 "2015-09-26T19:38:09Z")
I am seeing errors in myLF log file around too many open files and observe that no events are subsequently forwarded after this error. I am processing files that are effectively closed - if I set the "dead time" variab… --- ## [Spontaneously uneven CPU utilization between data nodes in the cluster](https://discuss.elastic.co/t/spontaneously-uneven-cpu-utilization-between-data-nodes-in-the-cluster/27895)
**Author:** [@Radiosterne](https://discuss.elastic.co/u/Radiosterne)\ **Replies:** 1\ **Last updated:** [August 23, 2015, 10:13pm UTC](https://discuss.elastic.co/t/spontaneously-uneven-cpu-utilization-between-data-nodes-in-the-cluster/27895 "2015-08-23T22:13:20Z")
Hello gentlemen! We have ES cluster consisting of nine virtual machines — four data nodes, two client nodes (allocated evenly across two physical hosts) and three master nodes (one per physical host), which was running… [Previous page](https://discuss.elastic.co/top.md?page=1479&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1481&per_page=50&period=all)