# Top

**URL:** https://discuss.elastic.co/top.md?page=1491&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1492

---

## [Elasticsearch node crashed](https://discuss.elastic.co/t/elasticsearch-node-crashed/308889)

<div class="topic-metadata">

**Author:** [@catadetest](https://discuss.elastic.co/u/catadetest)\
**Replies:** 4\
**Last updated:** [July 6, 2022, 3:32pm UTC](https://discuss.elastic.co/t/elasticsearch-node-crashed/308889 "2022-07-06T15:32:26Z")

</div>

Hello, I am new to elasticsearch and I'm trying to understand why sometimes our elasticsearch cluster breaks. We have 3 nodes in the cluster running on Ubuntu 20.04 LTS, with 8 cores CPU and 32 GB of RAM, out of which …

---

## [Index delete error with ILM](https://discuss.elastic.co/t/index-delete-error-with-ilm/295462)

<div class="topic-metadata">

**Author:** [@ASRLO](https://discuss.elastic.co/u/ASRLO)\
**Replies:** 1\
**Last updated:** [January 26, 2022, 6:54pm UTC](https://discuss.elastic.co/t/index-delete-error-with-ilm/295462 "2022-01-26T18:54:04Z")

</div>

Hello everyone, I have a problem with indexes. Indeed, it no longer deletes itself automatically as expected with my Index Policy management. When I look I get this error message "Index lifecycle error : security\_ex…

---

## [Search API with elastic search in .Net core Micro-services](https://discuss.elastic.co/t/search-api-with-elastic-search-in-net-core-micro-services/211414)

<div class="topic-metadata">

**Author:** [@Croos](https://discuss.elastic.co/u/Croos)\
**Replies:** 4\
**Last updated:** [December 12, 2019, 9:49am UTC](https://discuss.elastic.co/t/search-api-with-elastic-search-in-net-core-micro-services/211414 "2019-12-12T09:49:46Z")

</div>

I'm developing a microservice solution for an E-commerce application. I like to use the Elasticsearch for searching the items in different databases like the product from MongoDB, Vendors from SqlDB. I need a clear idea …

---

## [Search a date time field based off another date time field in the same log entry](https://discuss.elastic.co/t/search-a-date-time-field-based-off-another-date-time-field-in-the-same-log-entry/179423)

<div class="topic-metadata">

**Author:** [@Jeff\_the\_geek](https://discuss.elastic.co/u/Jeff_the_geek)\
**Replies:** 1\
**Last updated:** [May 2, 2019, 6:53pm UTC](https://discuss.elastic.co/t/search-a-date-time-field-based-off-another-date-time-field-in-the-same-log-entry/179423 "2019-05-02T18:53:37Z")

</div>

What I'm trying to do is find if a certain timefield is within tolerance of another. So, for example I want: entrytime:\[@timestamp-4h TO @timestamp+4h\] ...where @timestamp is the the timestamp on this logentry (and …

---

## [Logstash - IF / ELSE with document\_id](https://discuss.elastic.co/t/logstash-if-else-with-document-id/165214)

<div class="topic-metadata">

**Author:** [@Marcos\_OS](https://discuss.elastic.co/u/Marcos_OS)\
**Replies:** 4\
**Last updated:** [January 22, 2019, 11:18am UTC](https://discuss.elastic.co/t/logstash-if-else-with-document-id/165214 "2019-01-22T11:18:11Z")

</div>

Can anyone help me identify why the setup below does not work with document\_id. Context of my configuration, I am importing data from a relational database so I need the sync id. output { stdout { codec =\> rubyde…

---

## [Web Components in Kibana or Plugins](https://discuss.elastic.co/t/web-components-in-kibana-or-plugins/153485)

<div class="topic-metadata">

**Author:** [@fetherolfjd](https://discuss.elastic.co/u/fetherolfjd)\
**Replies:** 4\
**Last updated:** [October 23, 2018, 3:26am UTC](https://discuss.elastic.co/t/web-components-in-kibana-or-plugins/153485 "2018-10-23T03:26:29Z")

</div>

Hi, I was exploring the potential of using a web component, specifically a custom element written via Angular Elements, into Kibana, but am having a difficult time determining where to inject the produced javascript. I'…

---

## [Two elastic servers with one Kibana dashboard](https://discuss.elastic.co/t/two-elastic-servers-with-one-kibana-dashboard/151388)

<div class="topic-metadata">

**Author:** [@shivaprasadrao.b](https://discuss.elastic.co/u/shivaprasadrao.b)\
**Replies:** 4\
**Last updated:** [October 9, 2018, 9:35am UTC](https://discuss.elastic.co/t/two-elastic-servers-with-one-kibana-dashboard/151388 "2018-10-09T09:35:55Z")

</div>

I have a requirement: i need two elastic servers and two logstash to be setup on two unix boxes (unix box1 and unix box2). My kibana will be setup in unix box1. I need kibana to show the data/logs from both unix box 1…

---

## [Multiple filebeat\_\<host\>.yml files from a central log sever](https://discuss.elastic.co/t/multiple-filebeat-host-yml-files-from-a-central-log-sever/122894)

<div class="topic-metadata">

**Author:** [@penguingeek](https://discuss.elastic.co/u/penguingeek)\
**Replies:** 4\
**Last updated:** [March 14, 2018, 8:36am UTC](https://discuss.elastic.co/t/multiple-filebeat-host-yml-files-from-a-central-log-sever/122894 "2018-03-14T08:36:13Z")

</div>

I have a central log server that i want to forward logs to logstash from. The issue I am having is that since I am forwarding logs to the central server, there are no logs stored locally for filebeat to pull from. Now i …

---

## [Percentages per day (per bucket) possible?](https://discuss.elastic.co/t/percentages-per-day-per-bucket-possible/208138)

<div class="topic-metadata">

**Author:** [@Skeeve](https://discuss.elastic.co/u/Skeeve)\
**Replies:** 5\
**Last updated:** [November 19, 2019, 1:36pm UTC](https://discuss.elastic.co/t/percentages-per-day-per-bucket-possible/208138 "2019-11-19T13:36:35Z")

</div>

I have a set of records where each record has (among other fields) a field "spam" for the amount of spam mails received and a field "total\_volume" for the amount of mails, received. For each day I have several entries fo…

---

## [How to call a method of ksh file(shell script) from a conf file(logstash file)](https://discuss.elastic.co/t/how-to-call-a-method-of-ksh-file-shell-script-from-a-conf-file-logstash-file/138910)

<div class="topic-metadata">

**Author:** [@prashansa1](https://discuss.elastic.co/u/prashansa1)\
**Replies:** 5\
**Last updated:** [July 9, 2018, 11:33am UTC](https://discuss.elastic.co/t/how-to-call-a-method-of-ksh-file-shell-script-from-a-conf-file-logstash-file/138910 "2018-07-09T11:33:38Z")

</div>

How to call a method of external ksh file(shell script) from a conf file(logstash file). Shell script (ksh file) a.ksh Test() { x ="$1" if (x \> 10 ) return x; } Logstash Script (conf file) acon.conf I want to…

---

## [Cannot read property '0'](https://discuss.elastic.co/t/cannot-read-property-0/106986)

<div class="topic-metadata">

**Author:** [@mathias](https://discuss.elastic.co/u/mathias)\
**Replies:** 5\
**Last updated:** [November 13, 2017, 7:02am UTC](https://discuss.elastic.co/t/cannot-read-property-0/106986 "2017-11-13T07:02:13Z")

</div>

Hi, Quite often I get the following error screen when trying to enter the visualization menu. \[image\] Clearing the session solves the problem temporarily. What does it mean? Br mathias

---

## [Metricbeat 6.0.0-beta1 config reload issue](https://discuss.elastic.co/t/metricbeat-6-0-0-beta1-config-reload-issue/98234)

<div class="topic-metadata">

**Author:** [@randude](https://discuss.elastic.co/u/randude)\
**Replies:** 5\
**Last updated:** [August 27, 2017, 8:03am UTC](https://discuss.elastic.co/t/metricbeat-6-0-0-beta1-config-reload-issue/98234 "2017-08-27T08:03:41Z")

</div>

Hi, I enabled this feature and tried several things. I changed one of the modules from false to true and then tried to add a new module altogether. In both cases, nothing was written to log to confirm that the reload …

---

## [No config files found in path after 2-3 days uptime](https://discuss.elastic.co/t/no-config-files-found-in-path-after-2-3-days-uptime/93100)

<div class="topic-metadata">

**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\
**Replies:** 5\
**Last updated:** [July 17, 2017, 1:28am UTC](https://discuss.elastic.co/t/no-config-files-found-in-path-after-2-3-days-uptime/93100 "2017-07-17T01:28:18Z")

</div>

I'm using Elastic stack 5.5, OS Centos 7 and testing with x-pack. My logstash start normaly, no problem when started. But after 2-3 days update, i got error and logstash can't send data. \[2017-07-14T08:31:39,747\]\[INFO…

---

## [Need help with logstash config(version in first row)](https://discuss.elastic.co/t/need-help-with-logstash-config-version-in-first-row/59206)

<div class="topic-metadata">

**Author:** [@Alexey\_Plotnikov](https://discuss.elastic.co/u/Alexey_Plotnikov)\
**Replies:** 5\
**Last updated:** [August 30, 2016, 5:50am UTC](https://discuss.elastic.co/t/need-help-with-logstash-config-version-in-first-row/59206 "2016-08-30T05:50:17Z")

</div>

Hello, i don't know how to parse this log file: VERSION: 1.0.2 00:00:01.159\[http-thread-pool-8080(5)\] - ERROR - SOMETHING #1 00:00:22.372\[http-thread-pool-8080(1)\] - ERROR - SOMETHING #2 00:00:23.837\[http…

---

## [CISCO Grok Fail](https://discuss.elastic.co/t/cisco-grok-fail/231802)

<div class="topic-metadata">

**Author:** [@clockard](https://discuss.elastic.co/u/clockard)\
**Replies:** 2\
**Last updated:** [May 9, 2020, 6:40pm UTC](https://discuss.elastic.co/t/cisco-grok-fail/231802 "2020-05-09T18:40:52Z")

</div>

Let me say I am a network guy so take that for what it is worth. I have spent weeks googling, testing, and debugging I tried not to hassle anyone. I am trying to Grok the following data. \<134\>May 08 2020 10:50:53: %ASA…

---

## [\[7.2\] Unexplained Null Pointer Exception when doing explore query using certain phrases](https://discuss.elastic.co/t/7-2-unexplained-null-pointer-exception-when-doing-explore-query-using-certain-phrases/188498)

<div class="topic-metadata">

**Author:** [@Dan421](https://discuss.elastic.co/u/Dan421)\
**Replies:** 2\
**Last updated:** [July 2, 2019, 12:17pm UTC](https://discuss.elastic.co/t/7-2-unexplained-null-pointer-exception-when-doing-explore-query-using-certain-phrases/188498 "2019-07-02T12:17:57Z")

</div>

Hi there. I am getting a really hard to trace null pointer exception from my elastic cluster when doing explore queries with certain words eg: Game Console: Null pointer exception Game Consoles: Results I am hoping s…

---

## [Es6.x snapshot or restore support ceph?](https://discuss.elastic.co/t/es6-x-snapshot-or-restore-support-ceph/130954)

<div class="topic-metadata">

**Author:** [@piingluo](https://discuss.elastic.co/u/piingluo)\
**Replies:** 2\
**Last updated:** [May 21, 2018, 2:59am UTC](https://discuss.elastic.co/t/es6-x-snapshot-or-restore-support-ceph/130954 "2018-05-21T02:59:01Z")

</div>

hi all： i want to know whether repository-s3 and ceph are compatible, and repository-s3 support ceph as snapshot repository？

---

## [Too many open files on bitnami virtual appliance](https://discuss.elastic.co/t/too-many-open-files-on-bitnami-virtual-appliance/98567)

<div class="topic-metadata">

**Author:** [@mkorayem](https://discuss.elastic.co/u/mkorayem)\
**Replies:** 2\
**Last updated:** [August 29, 2017, 8:52am UTC](https://discuss.elastic.co/t/too-many-open-files-on-bitnami-virtual-appliance/98567 "2017-08-29T08:52:50Z")

</div>

I have only one cluster and one node on which is Elasticsearch, Logstash and Kibana This is a bitnami virtual appliance The system was working fine until we had to reboot the machine then the Elasticsearch cannot start…

---

## [Recreate index from scratch with static file](https://discuss.elastic.co/t/recreate-index-from-scratch-with-static-file/95690)

<div class="topic-metadata">

**Author:** [@DFrant](https://discuss.elastic.co/u/DFrant)\
**Replies:** 2\
**Last updated:** [August 3, 2017, 2:59pm UTC](https://discuss.elastic.co/t/recreate-index-from-scratch-with-static-file/95690 "2017-08-03T14:59:38Z")

</div>

Hello, I have a static log file for testing, and every time I recreated the index (for testing purpose), there is no data in the index. I have to change the file name and restart the filebeat service. Is there an opti…

---

## [\[Logstash\] Plusieurs événements par message](https://discuss.elastic.co/t/logstash-plusieurs-evenements-par-message/43682)

<div class="topic-metadata">

**Author:** [@Benjamin\_Carriou](https://discuss.elastic.co/u/Benjamin_Carriou)\
**Replies:** 2\
**Last updated:** [March 9, 2016, 1:33pm UTC](https://discuss.elastic.co/t/logstash-plusieurs-evenements-par-message/43682 "2016-03-09T13:33:05Z")

</div>

Bonjour tout le monde ! \[:slightly\_smiling:\] Je suis confronté à une problématique sous Logstash qui est la suivante. Je récupère des événements depuis un firewall (Juniper). Ce dernier m'envoie parfois un message comp…

---

## [Récupérer l'id du document dans un script\_score](https://discuss.elastic.co/t/recuperer-lid-du-document-dans-un-script-score/27322)

<div class="topic-metadata">

**Author:** [@ChristopheBoucaut](https://discuss.elastic.co/u/ChristopheBoucaut)\
**Replies:** 2\
**Last updated:** [August 13, 2015, 11:28am UTC](https://discuss.elastic.co/t/recuperer-lid-du-document-dans-un-script-score/27322 "2015-08-13T11:28:08Z")

</div>

Bonjour, Depuis 2 heures, je m'arrache les cheveux à tenter de récupérer l'id du document dans mon script pour mon script\_score. Je donne en paramètre de mon script un tableau qui contient des valeurs pour faire vari…

---

## [Custom filter handler plugin](https://discuss.elastic.co/t/custom-filter-handler-plugin/16392)

<div class="topic-metadata">

**Author:** [@Karol\_Gwaj](https://discuss.elastic.co/u/Karol_Gwaj)\
**Replies:** 2\
**Last updated:** [March 16, 2014, 5:29pm UTC](https://discuss.elastic.co/t/custom-filter-handler-plugin/16392 "2014-03-16T17:29:21Z")

</div>

Hi, is it possible, with current elasticsearch extensibility model, to create custom filter handlers ? so i could do something like this: { "query" : { "filtered" : { "…

---

## [Autodiscover hints.enabled logs all pods](https://discuss.elastic.co/t/autodiscover-hints-enabled-logs-all-pods/203669)

<div class="topic-metadata">

**Author:** [@symjar](https://discuss.elastic.co/u/symjar)\
**Replies:** 1\
**Last updated:** [October 16, 2019, 12:27pm UTC](https://discuss.elastic.co/t/autodiscover-hints-enabled-logs-all-pods/203669 "2019-10-16T12:27:53Z")

</div>

Hey! I've attempted to implement kubernetes logging to elasticsearch. What I want to achieve: Ship all the logs from pods in the default namespace. Configure templates per pod type That was my first attempt and it w…

---

## [Modify netflow index creation name](https://discuss.elastic.co/t/modify-netflow-index-creation-name/173185)

<div class="topic-metadata">

**Author:** [@Ryne\_Keel](https://discuss.elastic.co/u/Ryne_Keel)\
**Replies:** 1\
**Last updated:** [March 22, 2019, 5:07pm UTC](https://discuss.elastic.co/t/modify-netflow-index-creation-name/173185 "2019-03-22T17:07:19Z")

</div>

I am running into an issue where my netflow index template is called netflow, with index pattern netflow-\*. When a new index is created, it is called netflow-date. I created a lifecycle rollover policy for this index te…

---

## [Filebeat does not send logs](https://discuss.elastic.co/t/filebeat-does-not-send-logs/170562)

<div class="topic-metadata">

**Author:** [@jonathanhher](https://discuss.elastic.co/u/jonathanhher)\
**Replies:** 1\
**Last updated:** [March 6, 2019, 4:23pm UTC](https://discuss.elastic.co/t/filebeat-does-not-send-logs/170562 "2019-03-06T16:23:24Z")

</div>

good day, everyone, thank you in advance for the collaboration. I have installed a filebeat agent on a Linux Debian server and it does not send data through the network. I have verified the configuration and did not id…

---

## [Info about aggregation and periodic tasks](https://discuss.elastic.co/t/info-about-aggregation-and-periodic-tasks/23997)

<div class="topic-metadata">

**Author:** [@alexgt](https://discuss.elastic.co/u/alexgt)\
**Replies:** 1\
**Last updated:** [June 19, 2015, 4:09pm UTC](https://discuss.elastic.co/t/info-about-aggregation-and-periodic-tasks/23997 "2015-06-19T16:09:03Z")

</div>

Hello, I've installed ELK stack on a CentOS box recently and I'm testing what is capable of. I've read some docs, but I can't figure out how to: do some advanced aggregations I'm used to in MongoDB add periodic aggreg…

---

## [Elasticsearch/Elastica timeout while indexing](https://discuss.elastic.co/t/elasticsearch-elastica-timeout-while-indexing/13225)

<div class="topic-metadata">

**Author:** [@LucasVanryb](https://discuss.elastic.co/u/LucasVanryb)\
**Replies:** 1\
**Last updated:** [August 17, 2013, 4:29pm UTC](https://discuss.elastic.co/t/elasticsearch-elastica-timeout-while-indexing/13225 "2013-08-17T16:29:14Z")

</div>

Hello, I'm using elasticsearch 0.90.2 with Elastica (PHP Client), and I am experiencing some trouble indexing 10,000,000 documents using elasticsearch. I'm indexing using bulk queries only, by batch of 500. T…

---

## [Getting JSON data out of message field imported with filebeat](https://discuss.elastic.co/t/getting-json-data-out-of-message-field-imported-with-filebeat/335872)

<div class="topic-metadata">

**Author:** [@Lou003](https://discuss.elastic.co/u/Lou003)\
**Replies:** 3\
**Last updated:** [June 22, 2023, 8:49am UTC](https://discuss.elastic.co/t/getting-json-data-out-of-message-field-imported-with-filebeat/335872 "2023-06-22T08:49:29Z")

</div>

Hi everybody, I have a problem with indexing filebeat output generated from a JSON file. This JSON file has been created by converting a PCAP file and using jq to make it not pretty. After using filebeat this file has b…

---

## [Organize Weekly Bar Graph by correct day order](https://discuss.elastic.co/t/organize-weekly-bar-graph-by-correct-day-order/216932)

<div class="topic-metadata">

**Author:** [@jamesyone](https://discuss.elastic.co/u/jamesyone)\
**Replies:** 3\
**Last updated:** [February 17, 2020, 5:19pm UTC](https://discuss.elastic.co/t/organize-weekly-bar-graph-by-correct-day-order/216932 "2020-02-17T17:19:37Z")

</div>

Hi, I currently created a weekly bar graph with the following scripted field : LocalDateTime.ofInstant(Instant.ofEpochMilli(doc\['xxx'\].value.millis),ZoneId.of('Asia/Tokyo')).getDayOfWeek() and the graph looks somethin…

---

## [Optimizing Kibana / Elastic for SIEM to stop Discover: Gateway Timeout errors](https://discuss.elastic.co/t/optimizing-kibana-elastic-for-siem-to-stop-discover-gateway-timeout-errors/163501)

<div class="topic-metadata">

**Author:** [@CamTheMan](https://discuss.elastic.co/u/CamTheMan)\
**Replies:** 3\
**Last updated:** [January 9, 2019, 10:40am UTC](https://discuss.elastic.co/t/optimizing-kibana-elastic-for-siem-to-stop-discover-gateway-timeout-errors/163501 "2019-01-09T10:40:43Z")

</div>

Hello, I have a 5 server cluster running each with: 24 CPU Cores 64 GB RAM (30 for elastic the rest for file caches) Lots of SSD disk (No spinners) We have: Nodes: 5 Indices: 455 Memory: 38.9 GB / 154.5 GB To…

---

## [Elasticsearch mapping template not getting uploaded](https://discuss.elastic.co/t/elasticsearch-mapping-template-not-getting-uploaded/135180)

<div class="topic-metadata">

**Author:** [@Vikrant\_Aggarwal](https://discuss.elastic.co/u/Vikrant_Aggarwal)\
**Replies:** 3\
**Last updated:** [June 8, 2018, 6:42pm UTC](https://discuss.elastic.co/t/elasticsearch-mapping-template-not-getting-uploaded/135180 "2018-06-08T18:42:14Z")

</div>

Getting the following error while uploading the ES index template. $ curl -H 'Content-Type: application/json' -XPUT http://localhost:9200/\_template/logs\_template?pretty -d @logs\_template.json { "error" : { "root…

---

## [Filebeat is taking too long to pick up new files](https://discuss.elastic.co/t/filebeat-is-taking-too-long-to-pick-up-new-files/117450)

<div class="topic-metadata">

**Author:** [@shankar1](https://discuss.elastic.co/u/shankar1)\
**Replies:** 3\
**Last updated:** [January 31, 2018, 6:32am UTC](https://discuss.elastic.co/t/filebeat-is-taking-too-long-to-pick-up-new-files/117450 "2018-01-31T06:32:40Z")

</div>

Problem : Initially the time taken between posting a new file and picking up by the filebeat harvester was fast (seconds). After a week I realized that filebeat speed of picking up got reduced (minutes / hours) and few…

---

## [Drop processor in Ingest Pipeline](https://discuss.elastic.co/t/drop-processor-in-ingest-pipeline/114075)

<div class="topic-metadata">

**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\
**Replies:** 3\
**Last updated:** [January 4, 2018, 12:28pm UTC](https://discuss.elastic.co/t/drop-processor-in-ingest-pipeline/114075 "2018-01-04T12:28:00Z")

</div>

Is there any processor or any option where i can drop the event based some condition? similar to remove field processor

---

## [Mutate change field to another](https://discuss.elastic.co/t/mutate-change-field-to-another/55121)

<div class="topic-metadata">

**Author:** [@belette](https://discuss.elastic.co/u/belette)\
**Replies:** 3\
**Last updated:** [July 13, 2016, 10:01pm UTC](https://discuss.elastic.co/t/mutate-change-field-to-another/55121 "2016-07-13T22:01:47Z")

</div>

Hi, I am trying to change filed but I am not able to do it I think it is an issue of my if statement where I probably not put the right way to find it... I would like to change "fieldId" : 16 to "fieldId' : "Applicatio…

---

## [Default Shard Search preference](https://discuss.elastic.co/t/default-shard-search-preference/51531)

<div class="topic-metadata">

**Author:** [@anks](https://discuss.elastic.co/u/anks)\
**Replies:** 3\
**Last updated:** [June 1, 2016, 1:00pm UTC](https://discuss.elastic.co/t/default-shard-search-preference/51531 "2016-06-01T13:00:36Z")

</div>

I am wondering what is default search behavior in term of shard selection. When a search execute will it either primary or replica shards or use few primary and few replica ? Please explain. Thanks!

---

## [Has\_child filter and min\_children](https://discuss.elastic.co/t/has-child-filter-and-min-children/20221)

<div class="topic-metadata">

**Author:** [@Darren\_McDaniel](https://discuss.elastic.co/u/Darren_McDaniel)\
**Replies:** 3\
**Last updated:** [October 15, 2014, 1:13pm UTC](https://discuss.elastic.co/t/has-child-filter-and-min-children/20221 "2014-10-15T13:13:42Z")

</div>

I have ES 1.3.4 installed and i am trying to use a filter on has child, but I keep getting the error "\[has\_child\] filter does not support \[min\_children\]" Even though the documents specifically show it... T…

---

## [How to deploy an elastic-agent in fleet against an elasticsearch with a self-signed certificate?](https://discuss.elastic.co/t/how-to-deploy-an-elastic-agent-in-fleet-against-an-elasticsearch-with-a-self-signed-certificate/276575)

<div class="topic-metadata">

**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\
**Replies:** 0\
**Last updated:** [June 21, 2021, 7:31pm UTC](https://discuss.elastic.co/t/how-to-deploy-an-elastic-agent-in-fleet-against-an-elasticsearch-with-a-self-signed-certificate/276575 "2021-06-21T19:31:58Z")

</div>

Hi, I deployed a fleet server using elastic-agent, which runs fine. For the deployment of an elastic-agent I use --insecure, because the fleet server, Kibana, and elasticsearch use a self-signed certificate. I get a c…

---

## [java.io.StreamCorruptedException: invalid internal transport message format](https://discuss.elastic.co/t/java-io-streamcorruptedexception-invalid-internal-transport-message-format/269899)

<div class="topic-metadata">

**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\
**Replies:** 6\
**Last updated:** [April 24, 2021, 9:21am UTC](https://discuss.elastic.co/t/java-io-streamcorruptedexception-invalid-internal-transport-message-format/269899 "2021-04-24T09:21:45Z")

</div>

Hi all, I have a three node ES cluster with IP (10.0.1.10,10.0.1.11,10.0.1.12), following WARN has been found in the log. in the following log, a remote address has been mentioned which is not a member of cluster (10.0…

---

## [How to import Sample kibana 6.3 dashboards](https://discuss.elastic.co/t/how-to-import-sample-kibana-6-3-dashboards/145729)

<div class="topic-metadata">

**Author:** [@Anil\_Bind](https://discuss.elastic.co/u/Anil_Bind)\
**Replies:** 6\
**Last updated:** [August 24, 2018, 1:43pm UTC](https://discuss.elastic.co/t/how-to-import-sample-kibana-6-3-dashboards/145729 "2018-08-24T13:43:30Z")

</div>

Hi, I am a newbie in elk, just practicing it on my home network. I have an ELK 6.3 server setup with NGINX (for authentication) configured two nodes, one is centos 7 which has metricbeat and filebeat; and other one is…

---

## [ELK 6.3 XPACK is not supported for WIN-x86](https://discuss.elastic.co/t/elk-6-3-xpack-is-not-supported-for-win-x86/135842)

<div class="topic-metadata">

**Author:** [@TechGeek](https://discuss.elastic.co/u/TechGeek)\
**Replies:** 6\
**Last updated:** [June 14, 2018, 11:35am UTC](https://discuss.elastic.co/t/elk-6-3-xpack-is-not-supported-for-win-x86/135842 "2018-06-14T11:35:59Z")

</div>

Please suggest, if any workaround is available ? Exception org.elasticsearch.ElasticsearchException: X-Pack is not supported and Machine Learning is not available for \[windows-x86\]; you can use the other X-Pack featur…

---

## [CSV not parsing logs](https://discuss.elastic.co/t/csv-not-parsing-logs/135605)

<div class="topic-metadata">

**Author:** [@jkevan](https://discuss.elastic.co/u/jkevan)\
**Replies:** 6\
**Last updated:** [June 13, 2018, 3:43pm UTC](https://discuss.elastic.co/t/csv-not-parsing-logs/135605 "2018-06-13T15:43:51Z")

</div>

Hi there, I'm new to the elastic stack, so please forgive me if i ask some obvious questions. I currently have logstash collecting logs from our palo alto firewall and im not able to see any new fields pop up from the f…

---

## [Networking issues + dumb ES clients = FAIL](https://discuss.elastic.co/t/networking-issues-dumb-es-clients-fail/5980)

<div class="topic-metadata">

**Author:** [@AEvar\_Arnfjord\_Bjarm](https://discuss.elastic.co/u/AEvar_Arnfjord_Bjarm)\
**Replies:** 6\
**Last updated:** [November 28, 2011, 5:44pm UTC](https://discuss.elastic.co/t/networking-issues-dumb-es-clients-fail/5980 "2011-11-28T17:44:19Z")

</div>

This week I had a severe issue with ElasticSearch in a production environment related to the particulars of the setup I had. I thought I'd share it in case anyone else had a similar setup, and especially if someone ha…

---

## [Network Packet Capture over Logstash](https://discuss.elastic.co/t/network-packet-capture-over-logstash/344976)

<div class="topic-metadata">

**Author:** [@lduvnjak](https://discuss.elastic.co/u/lduvnjak)\
**Replies:** 3\
**Last updated:** [October 24, 2023, 7:15am UTC](https://discuss.elastic.co/t/network-packet-capture-over-logstash/344976 "2023-10-24T07:15:14Z")

</div>

Hi Everyone, I've been having issues trying to use the Network Packet Capture (packetbeat) integration over Logstash. Whenever the Logstash output is configured for fleet, it seems like the integration stops sending da…

---

## [Logstash geoip databasemanager with outgoing proxy](https://discuss.elastic.co/t/logstash-geoip-databasemanager-with-outgoing-proxy/280751)

<div class="topic-metadata">

**Author:** [@cknz](https://discuss.elastic.co/u/cknz)\
**Replies:** 2\
**Last updated:** [August 9, 2021, 7:47am UTC](https://discuss.elastic.co/t/logstash-geoip-databasemanager-with-outgoing-proxy/280751 "2021-08-09T07:47:32Z")

</div>

Hi all, I've upgraded to Logstash 7.14 from 7.11, and now I'm having to deal with the geoip databasemanager. My servers do not have direct database access and need to go out via proxy. Current observed behaviour is that…

---

## [Installing from the APT repository](https://discuss.elastic.co/t/installing-from-the-apt-repository/239391)

<div class="topic-metadata">

**Author:** [@Anthony\_Allen](https://discuss.elastic.co/u/Anthony_Allen)\
**Replies:** 2\
**Last updated:** [July 1, 2020, 4:32pm UTC](https://discuss.elastic.co/t/installing-from-the-apt-repository/239391 "2020-07-01T16:32:14Z")

</div>

I have been unable to install ES 7.8 per the instructions here Steps: wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add - sudo apt-get install apt-transport-https echo "deb https://arti…

---

## [APM agent not sending data with Docker](https://discuss.elastic.co/t/apm-agent-not-sending-data-with-docker/236361)

<div class="topic-metadata">

**Author:** [@Dario\_Boverio](https://discuss.elastic.co/u/Dario_Boverio)\
**Replies:** 2\
**Last updated:** [June 9, 2020, 6:05pm UTC](https://discuss.elastic.co/t/apm-agent-not-sending-data-with-docker/236361 "2020-06-09T18:05:34Z")

</div>

Environment: Go version: 1.14 Kibana version: 7.7.1 Elasticsearch version: 7.7.1 APM Server version: 7.7.1 APM Agent language and version: go get go.elastic.co/apm and go.elastic.co/apm/module/apmhttp Browser versi…

---

## [Javapipeline unrecoverable error - Logstash](https://discuss.elastic.co/t/javapipeline-unrecoverable-error-logstash/198957)

<div class="topic-metadata">

**Author:** [@Matthew\_Graville](https://discuss.elastic.co/u/Matthew_Graville)\
**Replies:** 2\
**Last updated:** [September 10, 2019, 7:31pm UTC](https://discuss.elastic.co/t/javapipeline-unrecoverable-error-logstash/198957 "2019-09-10T19:31:18Z")

</div>

I am unsure what I am doing wrong. Any help is much appreciated: Logstash cmd: \[root@logstash bin\]# ./logstash -f /etc/logstash/conf.d/rsyslog.conf --config.reload.automatic Logstash Error1: \[ERROR\] 2019-09-10 13:48:…

---

## [Programmatic self-attach configuration](https://discuss.elastic.co/t/programmatic-self-attach-configuration/173381)

<div class="topic-metadata">

**Author:** [@fredgalvao](https://discuss.elastic.co/u/fredgalvao)\
**Replies:** 2\
**Last updated:** [March 22, 2019, 1:49pm UTC](https://discuss.elastic.co/t/programmatic-self-attach-configuration/173381 "2019-03-22T13:49:18Z")

</div>

Kibana version: 6.6.1 Elasticsearch version: 6.6.1 APM Server version: 6.6.1 APM Agent language and version: java-agent-1.4.0 Issue I have a few grails@2.2.4 applications, a few grails@3.3.1 applications, and a c…

---

## [Copy to curl button does not work in 6.5](https://discuss.elastic.co/t/copy-to-curl-button-does-not-work-in-6-5/157662)

<div class="topic-metadata">

**Author:** [@james.knight](https://discuss.elastic.co/u/james.knight)\
**Replies:** 2\
**Last updated:** [November 26, 2018, 5:36pm UTC](https://discuss.elastic.co/t/copy-to-curl-button-does-not-work-in-6-5/157662 "2018-11-26T17:36:37Z")

</div>

Kibana Version: 6.5 Elasticsearch Version 6.5 I was testing some changes in the Kibana console window and once I had them working I wanted to copy my commands as curl. I found that when the copy as curl button is click…

---

## [FIlebeat Dynamic Configuration](https://discuss.elastic.co/t/filebeat-dynamic-configuration/85978)

<div class="topic-metadata">

**Author:** [@ogba](https://discuss.elastic.co/u/ogba)\
**Replies:** 2\
**Last updated:** [May 17, 2017, 2:50pm UTC](https://discuss.elastic.co/t/filebeat-dynamic-configuration/85978 "2017-05-17T14:50:21Z")

</div>

Hello i am a new user, I currently have Filebeat installed on a VM. I have several config files corresponding to all the applications that can be installed on the VM. I know where all the application files would be if th…

[Previous page](https://discuss.elastic.co/top.md?page=1490&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1492&per_page=50&period=all)
