# Top

**URL:** https://discuss.elastic.co/top.md?page=1494&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1495

---

## [SIEM custom rule to generate an alert if multiple users attempts with same source IP or same mac address](https://discuss.elastic.co/t/siem-custom-rule-to-generate-an-alert-if-multiple-users-attempts-with-same-source-ip-or-same-mac-address/289265)

<div class="topic-metadata">

**Author:** [@Priyanka\_chauhan](https://discuss.elastic.co/u/Priyanka_chauhan)\
**Replies:** 2\
**Last updated:** [December 2, 2021, 6:50am UTC](https://discuss.elastic.co/t/siem-custom-rule-to-generate-an-alert-if-multiple-users-attempts-with-same-source-ip-or-same-mac-address/289265 "2021-12-02T06:50:00Z")

</div>

I am trying to generate alerts using siem new rule if more than one user attempts with same source IP like vpn ip or vice versa ,so I want to know that It is possible or not via eql query or any kind of rule type If it i…

---

## [How to add elasticsearch as a service in background in mac OS](https://discuss.elastic.co/t/how-to-add-elasticsearch-as-a-service-in-background-in-mac-os/278563)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 2\
**Last updated:** [July 13, 2021, 3:43pm UTC](https://discuss.elastic.co/t/how-to-add-elasticsearch-as-a-service-in-background-in-mac-os/278563 "2021-07-13T15:43:55Z")

</div>

Hi all, I installed elasticsearch using tar package in mac OS. To run elasticsearch, i run elasticsearch exe file in terminal. If i close the terminal, elasticsearch service stops. How do i run elasticsearch in backg…

---

## [How to read logs from docker containers running in a docker swarm cluster](https://discuss.elastic.co/t/how-to-read-logs-from-docker-containers-running-in-a-docker-swarm-cluster/257564)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 2\
**Last updated:** [December 3, 2020, 9:28pm UTC](https://discuss.elastic.co/t/how-to-read-logs-from-docker-containers-running-in-a-docker-swarm-cluster/257564 "2020-12-03T21:28:33Z")

</div>

Hello, I have several java applications that are running as different services in a docker swarm cluster. I would like filebeat to be able to read the logs of the containers and I can see that it has a docker input but …

---

## [Configuring Pipeline To Handle Duplicates In Rollover Indices](https://discuss.elastic.co/t/configuring-pipeline-to-handle-duplicates-in-rollover-indices/196563)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 2\
**Last updated:** [August 23, 2019, 5:00pm UTC](https://discuss.elastic.co/t/configuring-pipeline-to-handle-duplicates-in-rollover-indices/196563 "2019-08-23T17:00:38Z")

</div>

For awhile, I've been using the fingerprint filter and setting the resulting value to the document id when outputting to Elasticsearch to handle duplicate prevention. I've recently discovered (the hard way) that this me…

---

## [Logstash enriching data with lookup](https://discuss.elastic.co/t/logstash-enriching-data-with-lookup/194909)

<div class="topic-metadata">

**Author:** [@philippkahr](https://discuss.elastic.co/u/philippkahr)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 8:28pm UTC](https://discuss.elastic.co/t/logstash-enriching-data-with-lookup/194909 "2019-08-12T20:28:31Z")

</div>

Hi guys, I currently struggeling in understanding how this can be done within the elastic stack properly. I take netflow data as an input source in netflow. Specifically, I use elastiflow https://github.com/robcowart/el…

---

## [How to manage logstash within Kibana](https://discuss.elastic.co/t/how-to-manage-logstash-within-kibana/119624)

<div class="topic-metadata">

**Author:** [@jdavey-enable](https://discuss.elastic.co/u/jdavey-enable)\
**Replies:** 2\
**Last updated:** [February 13, 2018, 7:27pm UTC](https://discuss.elastic.co/t/how-to-manage-logstash-within-kibana/119624 "2018-02-13T19:27:12Z")

</div>

Hi, I'm new to Kibana, logstash and elasticsearch. I have just been give a system that was built by someone else and I'm trying to get to grips with how it all connects together. I've read through a lot of the documentat…

---

## [How to know if search query contains numbers](https://discuss.elastic.co/t/how-to-know-if-search-query-contains-numbers/105403)

<div class="topic-metadata">

**Author:** [@Karolinebryn](https://discuss.elastic.co/u/Karolinebryn)\
**Replies:** 2\
**Last updated:** [October 30, 2017, 1:36pm UTC](https://discuss.elastic.co/t/how-to-know-if-search-query-contains-numbers/105403 "2017-10-30T13:36:38Z")

</div>

I posted a question earlier, but nobody seems to be able to answer it so I am trying a gain with a different explanation. Is there a way to know if a search query contains numbers (or not words)? Take the following exa…

---

## [Logstash doesnt work with ECC/ECDSA](https://discuss.elastic.co/t/logstash-doesnt-work-with-ecc-ecdsa/99687)

<div class="topic-metadata">

**Author:** [@aubreybox](https://discuss.elastic.co/u/aubreybox)\
**Replies:** 2\
**Last updated:** [September 10, 2017, 4:45pm UTC](https://discuss.elastic.co/t/logstash-doesnt-work-with-ecc-ecdsa/99687 "2017-09-10T16:45:00Z")

</div>

Hello, I tried to setup logstash and filebeat over selfmade ssl certificates using an own rootca and an intermediate ca. The problem is: I cant connect to the running logstash curl: (35) gnutls\_handshake() failed: Han…

---

## [Courier Fetch: 30 of 50 shards failed](https://discuss.elastic.co/t/courier-fetch-30-of-50-shards-failed/93466)

<div class="topic-metadata">

**Author:** [@austinyu0922](https://discuss.elastic.co/u/austinyu0922)\
**Replies:** 2\
**Last updated:** [July 18, 2017, 12:37am UTC](https://discuss.elastic.co/t/courier-fetch-30-of-50-shards-failed/93466 "2017-07-18T00:37:54Z")

</div>

Hi, I'm trying to create a scripted field where if the source IP host name is available, that will be shown, otherwise the IP itself will be displayed. Currently, if I were to set the term to just the source IP or just…

---

## [Mapping Explosion in Nested Datatype](https://discuss.elastic.co/t/mapping-explosion-in-nested-datatype/90835)

<div class="topic-metadata">

**Author:** [@Rory](https://discuss.elastic.co/u/Rory)\
**Replies:** 2\
**Last updated:** [June 26, 2017, 3:09pm UTC](https://discuss.elastic.co/t/mapping-explosion-in-nested-datatype/90835 "2017-06-26T15:09:21Z")

</div>

The documentation for nested datatype (https://www.elastic.co/guide/en/elasticsearch/reference/current/nested.html) says that in order to prevent mapping explosion the number of nested fields per index is limited to 50. …

---

## [Testing and benchmarking log collection pipeline](https://discuss.elastic.co/t/testing-and-benchmarking-log-collection-pipeline/42942)

<div class="topic-metadata">

**Author:** [@gaspaio](https://discuss.elastic.co/u/gaspaio)\
**Replies:** 2\
**Last updated:** [February 29, 2016, 7:58am UTC](https://discuss.elastic.co/t/testing-and-benchmarking-log-collection-pipeline/42942 "2016-02-29T07:58:58Z")

</div>

I'm looking for tools, or a set of tools, to test and benchmark logstash+kafka+ES setups : - define test cases (log types, throughputs) - maintain a base of log examples - generate inputs for logstash at a given rate fr…

---

## [How to measure the performance of ELK system?](https://discuss.elastic.co/t/how-to-measure-the-performance-of-elk-system/21891)

<div class="topic-metadata">

**Author:** [@Yiming\_Li](https://discuss.elastic.co/u/Yiming_Li)\
**Replies:** 2\
**Last updated:** [January 29, 2015, 11:22pm UTC](https://discuss.elastic.co/t/how-to-measure-the-performance-of-elk-system/21891 "2015-01-29T23:22:07Z")

</div>

Dear all, I just started to learn and experiment with ELK in a logging related project at work. The answer I am looking for is that: say I am shipping tons of data into logstash, do some basic transformation, …

---

## [Update document while scrolling](https://discuss.elastic.co/t/update-document-while-scrolling/15687)

<div class="topic-metadata">

**Author:** [@Arinto\_Murdopo](https://discuss.elastic.co/u/Arinto_Murdopo)\
**Replies:** 2\
**Last updated:** [February 10, 2014, 8:50am UTC](https://discuss.elastic.co/t/update-document-while-scrolling/15687 "2014-02-10T08:50:06Z")

</div>

Hi all, I plan to update my data while performing scrolling. Is this use case valid for ElasticSearch? and is there any best practice for this use case? What I plan to do is something like this (using Java API)…

---

## [Metricbeat-7.16.2 does not support billing api version 2019-10-01](https://discuss.elastic.co/t/metricbeat-7-16-2-does-not-support-billing-api-version-2019-10-01/293582)

<div class="topic-metadata">

**Author:** [@adhiraj-g](https://discuss.elastic.co/u/adhiraj-g)\
**Replies:** 3\
**Last updated:** [January 20, 2022, 1:53pm UTC](https://discuss.elastic.co/t/metricbeat-7-16-2-does-not-support-billing-api-version-2019-10-01/293582 "2022-01-20T13:53:28Z")

</div>

Hi @MarianaD , Hope you had a great Christmas and New year Break. Sorry to bother you again. I had upgraded to Elasticsearch version 7.16-2. I am now using metricbeat version 7.16.2. Still its showing that the billing…

---

## [Drop filter to avoid documents to be sent to ES not working](https://discuss.elastic.co/t/drop-filter-to-avoid-documents-to-be-sent-to-es-not-working/306584)

<div class="topic-metadata">

**Author:** [@Carlos\_T](https://discuss.elastic.co/u/Carlos_T)\
**Replies:** 8\
**Last updated:** [June 8, 2022, 6:29pm UTC](https://discuss.elastic.co/t/drop-filter-to-avoid-documents-to-be-sent-to-es-not-working/306584 "2022-06-08T18:29:50Z")

</div>

Hi everybody. I've have a ES + Kib + Logstash + Filebeat environment ready for testing purposes, and after installing Filebeat so it sends the data to Logstash, I've realiced that I'm recieving more documents than necce…

---

## [Upgrade to Master and Data only node configuration from master-data node](https://discuss.elastic.co/t/upgrade-to-master-and-data-only-node-configuration-from-master-data-node/201923)

<div class="topic-metadata">

**Author:** [@Ilayda\_Akinalan](https://discuss.elastic.co/u/Ilayda_Akinalan)\
**Replies:** 8\
**Last updated:** [October 4, 2019, 11:14am UTC](https://discuss.elastic.co/t/upgrade-to-master-and-data-only-node-configuration-from-master-data-node/201923 "2019-10-04T11:14:49Z")

</div>

Currently I have 3 nodes, 330 indices and 1,822 shards and approx 3 TB of memory. Currently these 3 nodes are master-data nodes and its not coping well with the load. I was planning to keep these 3 nodes as data nodes,…

---

## [APM for Elasticsearch](https://discuss.elastic.co/t/apm-for-elasticsearch/168958)

<div class="topic-metadata">

**Author:** [@manoj\_faria](https://discuss.elastic.co/u/manoj_faria)\
**Replies:** 8\
**Last updated:** [February 21, 2019, 7:27pm UTC](https://discuss.elastic.co/t/apm-for-elasticsearch/168958 "2019-02-21T19:27:03Z")

</div>

Can one setup APM to monitor elasticsearch 6.6+? If yes, how does one specify/configure the apm agent when using elasticsearch docker-compose.yml file to start elasticsearch cluster? If APM is not yet supported for ela…

---

## [Kibana Visualization Regex Exclusion issue](https://discuss.elastic.co/t/kibana-visualization-regex-exclusion-issue/338695)

<div class="topic-metadata">

**Author:** [@turboz](https://discuss.elastic.co/u/turboz)\
**Replies:** 4\
**Last updated:** [July 19, 2023, 7:14pm UTC](https://discuss.elastic.co/t/kibana-visualization-regex-exclusion-issue/338695 "2023-07-19T19:14:30Z")

</div>

I'm trying to create a table that shows the top 5 source IPs, but only public IPs. I notice there is an advanced section with "Exclude values" I turned on regex and put in the following regex. /(^127\\.)|(^10\\.)|(^172\\.…

---

## [API: Exporting the data into CSV file](https://discuss.elastic.co/t/api-exporting-the-data-into-csv-file/328967)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 4\
**Last updated:** [March 31, 2023, 6:05am UTC](https://discuss.elastic.co/t/api-exporting-the-data-into-csv-file/328967 "2023-03-31T06:05:09Z")

</div>

Is there any API which supports the exports of data in CSV format from elasticsearch?

---

## [Problem CPU Usage Gauge](https://discuss.elastic.co/t/problem-cpu-usage-gauge/297936)

<div class="topic-metadata">

**Author:** [@jorge\_Flores\_Machuca](https://discuss.elastic.co/u/jorge_Flores_Machuca)\
**Replies:** 4\
**Last updated:** [February 24, 2022, 8:57pm UTC](https://discuss.elastic.co/t/problem-cpu-usage-gauge/297936 "2022-02-24T20:57:03Z")

</div>

Hello, I have configured metricbeats from windows and for the part of memory use or CPU use, sometimes when it refreshes it shows me all the GAUGE in green without a usage metric some samaritan who can guide me, so th…

---

## [ILM in kubernetes](https://discuss.elastic.co/t/ilm-in-kubernetes/255603)

<div class="topic-metadata">

**Author:** [@Armen\_Khachikyan](https://discuss.elastic.co/u/Armen_Khachikyan)\
**Replies:** 4\
**Last updated:** [November 22, 2020, 8:09pm UTC](https://discuss.elastic.co/t/ilm-in-kubernetes/255603 "2020-11-22T20:09:24Z")

</div>

community I need your help, I am using ELK like 3 months, and now I need to add ILM policy in elasticsearch pod in kubernetes with curl -XPUT -u username:password http://localhost:9200/\_ilm/policy/name --header "Conte…

---

## [¿Como puedo extraer información de un windows server a un ubuntu server?](https://discuss.elastic.co/t/como-puedo-extraer-informacion-de-un-windows-server-a-un-ubuntu-server/232881)

<div class="topic-metadata">

**Author:** [@Serge2020](https://discuss.elastic.co/u/Serge2020)\
**Replies:** 4\
**Last updated:** [May 22, 2020, 4:53pm UTC](https://discuss.elastic.co/t/como-puedo-extraer-informacion-de-un-windows-server-a-un-ubuntu-server/232881 "2020-05-22T16:53:37Z")

</div>

Hola a todos! Hace un mes que me he introducido a este gran mudo de elasticsearch y por supuesto estoy en pañales con el tema, pero sin duda me esta gustando muchísimo. El caso es que tengo un problema el cual no he pod…

---

## [Missing documentation for ECK stack in non-default namespace](https://discuss.elastic.co/t/missing-documentation-for-eck-stack-in-non-default-namespace/198802)

<div class="topic-metadata">

**Author:** [@sarjeet](https://discuss.elastic.co/u/sarjeet)\
**Replies:** 4\
**Last updated:** [September 10, 2019, 5:30pm UTC](https://discuss.elastic.co/t/missing-documentation-for-eck-stack-in-non-default-namespace/198802 "2019-09-10T17:30:16Z")

</div>

I haven't found any documentation that states on how to run ECK stack on k8s with non-default namespace. Currently, Elasticsearch and kibana samples also provided with default namespace. I tried to run ECK stack with no…

---

## [Calculate date using another field?](https://discuss.elastic.co/t/calculate-date-using-another-field/89093)

<div class="topic-metadata">

**Author:** [@adyjayex](https://discuss.elastic.co/u/adyjayex)\
**Replies:** 4\
**Last updated:** [June 12, 2017, 10:09pm UTC](https://discuss.elastic.co/t/calculate-date-using-another-field/89093 "2017-06-12T22:09:42Z")

</div>

Hello, I have a few documents which contain relative dates such as: 2 Weeks Ago 3 Months Ago I've been looking into formatting the date field as well as date math but was unable to find something which would specif…

---

## [API for Managing Synthetic monitoring](https://discuss.elastic.co/t/api-for-managing-synthetic-monitoring/350819)

<div class="topic-metadata">

**Author:** [@Raj\_Jikadra](https://discuss.elastic.co/u/Raj_Jikadra)\
**Replies:** 6\
**Last updated:** [January 24, 2024, 2:58am UTC](https://discuss.elastic.co/t/api-for-managing-synthetic-monitoring/350819 "2024-01-24T02:58:10Z")

</div>

To manage Monitors created via Synthetic monitoring, we can use @elastic/synthetics package, as per the code of @elastic/synthetics , it internally uses API to communicate with Kibana regarding monitor changes. I want t…

---

## [Multiple bulk actions on the same document](https://discuss.elastic.co/t/multiple-bulk-actions-on-the-same-document/329650)

<div class="topic-metadata">

**Author:** [@Tudor\_Plugaru](https://discuss.elastic.co/u/Tudor_Plugaru)\
**Replies:** 6\
**Last updated:** [April 12, 2023, 12:44pm UTC](https://discuss.elastic.co/t/multiple-bulk-actions-on-the-same-document/329650 "2023-04-12T12:44:52Z")

</div>

Hi, To index data into Elasticsearch, we are using an Apache Flink pipeline that is consuming from Kafka topics. The index mapping looks something like below, a document with nested documents: { "name": "email documen…

---

## [ECK Coordinating only node 7.10.2 has all node roles](https://discuss.elastic.co/t/eck-coordinating-only-node-7-10-2-has-all-node-roles/270591)

<div class="topic-metadata">

**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\
**Replies:** 6\
**Last updated:** [April 21, 2021, 11:04am UTC](https://discuss.elastic.co/t/eck-coordinating-only-node-7-10-2-has-all-node-roles/270591 "2021-04-21T11:04:03Z")

</div>

Hi, Deploying ECK and trying to configure a client/coordinating-only node. The node roles is configured to: node.roles: \[ \] As stated here. But the client node seem to have all the roles and shards are wrongfully cr…

---

## [Xpack security(formerly SHIELD) module source code](https://discuss.elastic.co/t/xpack-security-formerly-shield-module-source-code/134114)

<div class="topic-metadata">

**Author:** [@sachinjose](https://discuss.elastic.co/u/sachinjose)\
**Replies:** 6\
**Last updated:** [June 2, 2018, 12:21am UTC](https://discuss.elastic.co/t/xpack-security-formerly-shield-module-source-code/134114 "2018-06-02T00:21:11Z")

</div>

Looks like elastic open sourced xpack last month through this announcement, I search for xpack - security(SHIELD) in the elastic public github repo, however I couldn't find the sourcecode. Can someone help me to find Xp…

---

## [Pipelines stops grok filter in Logstash](https://discuss.elastic.co/t/pipelines-stops-grok-filter-in-logstash/130676)

<div class="topic-metadata">

**Author:** [@shine](https://discuss.elastic.co/u/shine)\
**Replies:** 6\
**Last updated:** [May 16, 2018, 1:55pm UTC](https://discuss.elastic.co/t/pipelines-stops-grok-filter-in-logstash/130676 "2018-05-16T13:55:58Z")

</div>

PROBLEM: The grok filter is skipped when I run two .conf files using pipelines in Logstash. All the data respectively goes into each index but it skips the grok filter. The grok filter works once for the 1st record Logs…

---

## [How getting document match rate?](https://discuss.elastic.co/t/how-getting-document-match-rate/22963)

<div class="topic-metadata">

**Author:** [@terrasacer](https://discuss.elastic.co/u/terrasacer)\
**Replies:** 6\
**Last updated:** [March 31, 2015, 12:07pm UTC](https://discuss.elastic.co/t/how-getting-document-match-rate/22963 "2015-03-31T12:07:44Z")

</div>

Hello everyone, For example my data \[ { "id" : 1, "type" : "article", "title" : "About the Java Technology" }, { "id" : 2, "type" : "article", "title" : "How does ElasticSearch work" }, { "id" …

---

## [Query on multiple fields](https://discuss.elastic.co/t/query-on-multiple-fields/9313)

<div class="topic-metadata">

**Author:** [@hemant\_pahilwani](https://discuss.elastic.co/u/hemant_pahilwani)\
**Replies:** 6\
**Last updated:** [October 11, 2012, 10:59pm UTC](https://discuss.elastic.co/t/query-on-multiple-fields/9313 "2012-10-11T22:59:32Z")

</div>

I am new to elastic search and am currently migrating the lucene queries that i have. Following is the setup for index properties : index : analysis : analyzer : myStandard : …

---

## [Kibana 7.9 Decrypt .key problem](https://discuss.elastic.co/t/kibana-7-9-decrypt-key-problem/247888)

<div class="topic-metadata">

**Author:** [@AleksandrN](https://discuss.elastic.co/u/AleksandrN)\
**Replies:** 1\
**Last updated:** [September 10, 2020, 10:59am UTC](https://discuss.elastic.co/t/kibana-7-9-decrypt-key-problem/247888 "2020-09-10T10:59:15Z")

</div>

I have configured Kibana to use HTTPS and TLS. TLS key is somehow not encrypted (can read it in a cleartext, just encoded), despite I used --password option. But HTTPS key is encrypted, and it seems like Kibana at the …

---

## [Hadoop/Mapr and ELK](https://discuss.elastic.co/t/hadoop-mapr-and-elk/204912)

<div class="topic-metadata">

**Author:** [@lcui\_dxc](https://discuss.elastic.co/u/lcui_dxc)\
**Replies:** 1\
**Last updated:** [November 14, 2019, 8:47pm UTC](https://discuss.elastic.co/t/hadoop-mapr-and-elk/204912 "2019-11-14T20:47:18Z")

</div>

Hello there: We have a request to use ELK to access/fetch some log files stored on a Mapr cluster file system (HDFS or MFS), but don't know how and where to setup the ES for Hadoop... Any suggestions on how to fetch (l…

---

## [Cannot remove "host" field](https://discuss.elastic.co/t/cannot-remove-host-field/141232)

<div class="topic-metadata">

**Author:** [@MartinCorrado](https://discuss.elastic.co/u/MartinCorrado)\
**Replies:** 1\
**Last updated:** [July 25, 2018, 8:13pm UTC](https://discuss.elastic.co/t/cannot-remove-host-field/141232 "2018-07-25T20:13:38Z")

</div>

Hi! I'm trying to remove the "host" field but it seems that it's not working for me and every time I recreate the logstash instance, the second time that my queries are executed the following error appears over and over …

---

## [Filebeat plugin to send Varnish log](https://discuss.elastic.co/t/filebeat-plugin-to-send-varnish-log/141368)

<div class="topic-metadata">

**Author:** [@Vignesh\_S](https://discuss.elastic.co/u/Vignesh_S)\
**Replies:** 1\
**Last updated:** [July 24, 2018, 1:38pm UTC](https://discuss.elastic.co/t/filebeat-plugin-to-send-varnish-log/141368 "2018-07-24T13:38:08Z")

</div>

Is there any plugin to send my varnish logs to logstash to parse and display on my Kibana dashboard? If yes, please give me the link or how to e=install it. Thanks

---

## [Filebeat-god is stopped](https://discuss.elastic.co/t/filebeat-god-is-stopped/136103)

<div class="topic-metadata">

**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\
**Replies:** 1\
**Last updated:** [June 15, 2018, 2:30pm UTC](https://discuss.elastic.co/t/filebeat-god-is-stopped/136103 "2018-06-15T14:30:15Z")

</div>

Can someone explain to me this error ? \[root@frghcslnetv03 filebeat\]# service filebeat status filebeat-god is stopped

---

## [MySQL (MariaDB) Overview dashboard empty](https://discuss.elastic.co/t/mysql-mariadb-overview-dashboard-empty/117115)

<div class="topic-metadata">

**Author:** [@castle9mm](https://discuss.elastic.co/u/castle9mm)\
**Replies:** 1\
**Last updated:** [January 26, 2018, 11:07am UTC](https://discuss.elastic.co/t/mysql-mariadb-overview-dashboard-empty/117115 "2018-01-26T11:07:44Z")

</div>

Hello, sorry for what's probably a basic beginner issue but my MySQL Overview dashboard in Kibana is empty. I'm trying to use Filebeat with AutoDiscover to capture the mysql error & slow query logs from a MariaDB contai…

---

## [What is no MTA installed](https://discuss.elastic.co/t/what-is-no-mta-installed/105964)

<div class="topic-metadata">

**Author:** [@RajeshGarre](https://discuss.elastic.co/u/RajeshGarre)\
**Replies:** 1\
**Last updated:** [November 1, 2017, 4:15am UTC](https://discuss.elastic.co/t/what-is-no-mta-installed/105964 "2017-11-01T04:15:46Z")

</div>

Oct 31 16:55:01 elk02-logstash02 CRON\[29696\]: (root) CMD (/opt/ELK/UCC/pipelineHealthCheck/testprocess.sh) Oct 31 16:55:01 elk02-logstash02 CRON\[29695\]: (CRON) info (No MTA installed, discarding output) Oct 31 16:59:06…

---

## [Jest mvn package running error!](https://discuss.elastic.co/t/jest-mvn-package-running-error/79986)

<div class="topic-metadata">

**Author:** [@laoyang360](https://discuss.elastic.co/u/laoyang360)\
**Replies:** 1\
**Last updated:** [March 25, 2017, 3:28pm UTC](https://discuss.elastic.co/t/jest-mvn-package-running-error/79986 "2017-03-25T15:28:17Z")

</div>

Hello, My es version is 2.3.4, I download the jest from github, and changed the pom.xml as below: \<groupId\>io.searchbox\</groupId\> \<artifactId\>jest-parent\</artifactId\> \<packaging\>pom\</packaging\> \<version\>2.…

---

## [JSON-\>D3.js-\>DOM in a table or grid or other visualization](https://discuss.elastic.co/t/json-d3-js-dom-in-a-table-or-grid-or-other-visualization/28296)

<div class="topic-metadata">

**Author:** [@coderextreme](https://discuss.elastic.co/u/coderextreme)\
**Replies:** 1\
**Last updated:** [September 1, 2015, 4:01am UTC](https://discuss.elastic.co/t/json-d3-js-dom-in-a-table-or-grid-or-other-visualization/28296 "2015-09-01T04:01:33Z")

</div>

I would like to send messages in JSON to a function which will display the DOM (JSON-\>D3.js-\>DOM\[SVG or X3DOM\]) element produced in a table or grid. Is there a way to do this in Kibana?

---

## [Integrations / Kibana /Message d'erreur Kibana cannot connect to the Elastic Package Registry](https://discuss.elastic.co/t/integrations-kibana-message-derreur-kibana-cannot-connect-to-the-elastic-package-registry/314332)

<div class="topic-metadata">

**Author:** [@Phildefer](https://discuss.elastic.co/u/Phildefer)\
**Replies:** 3\
**Last updated:** [September 15, 2022, 12:56am UTC](https://discuss.elastic.co/t/integrations-kibana-message-derreur-kibana-cannot-connect-to-the-elastic-package-registry/314332 "2022-09-15T00:56:08Z")

</div>

Bonjour, Je creuse un peu l'utilisation d'ELK (installé chez moi en local sur un NAS et j'accède à Kibana via une adresse du type 192;XXX.XXX.XXX:5601) et je souhaiterais tester quelques intégrations. Mon problème est …

---

## [Beats Management - SSL Configuration in Logstash Output](https://discuss.elastic.co/t/beats-management-ssl-configuration-in-logstash-output/174552)

<div class="topic-metadata">

**Author:** [@perryparktung](https://discuss.elastic.co/u/perryparktung)\
**Replies:** 3\
**Last updated:** [April 2, 2019, 3:45am UTC](https://discuss.elastic.co/t/beats-management-ssl-configuration-in-logstash-output/174552 "2019-04-02T03:45:38Z")

</div>

Hi, I have 2 questions about Beat Central Management in Kibana UI. Brief explanation: I have 5 Logstash servers, all using SSL config, and I am exploring capability on Beat Central Management. Questions: Would you…

---

## [Add a coordinating/client node to my existing Elasticsearch cluster](https://discuss.elastic.co/t/add-a-coordinating-client-node-to-my-existing-elasticsearch-cluster/166692)

<div class="topic-metadata">

**Author:** [@nikhil1991](https://discuss.elastic.co/u/nikhil1991)\
**Replies:** 3\
**Last updated:** [February 1, 2019, 9:56am UTC](https://discuss.elastic.co/t/add-a-coordinating-client-node-to-my-existing-elasticsearch-cluster/166692 "2019-02-01T09:56:33Z")

</div>

I already have a 3 node Elastic search cluster setup with Kibana installed on all the nodes.. PROBLEM: The problem is when we stop master node in Elastic search, the entire Kibana goes down and is inaccessible. What I …

---

## [Elasticsearch email alert question](https://discuss.elastic.co/t/elasticsearch-email-alert-question/157507)

<div class="topic-metadata">

**Author:** [@S\_Z](https://discuss.elastic.co/u/S_Z)\
**Replies:** 3\
**Last updated:** [December 4, 2018, 1:28am UTC](https://discuss.elastic.co/t/elasticsearch-email-alert-question/157507 "2018-12-04T01:28:07Z")

</div>

Hi When I tried the x-pack alarm function, I had a problem. Kibana told me Failed to send e-mail to songzhao@union400.com. Below is the log I found in elasticsearch. I don't quite understand the problem. Where is it bec…

---

## [Logstash output streaming when ES is down](https://discuss.elastic.co/t/logstash-output-streaming-when-es-is-down/128230)

<div class="topic-metadata">

**Author:** [@mww1](https://discuss.elastic.co/u/mww1)\
**Replies:** 3\
**Last updated:** [April 16, 2018, 5:47pm UTC](https://discuss.elastic.co/t/logstash-output-streaming-when-es-is-down/128230 "2018-04-16T17:47:04Z")

</div>

Hi, what happens when I want to stream my output data from logstash to ElasticSearch when ES is down ? how do I configure my logstash?

---

## [Ignore value that is too large](https://discuss.elastic.co/t/ignore-value-that-is-too-large/76414)

<div class="topic-metadata">

**Author:** [@John16](https://discuss.elastic.co/u/John16)\
**Replies:** 3\
**Last updated:** [February 28, 2017, 12:37am UTC](https://discuss.elastic.co/t/ignore-value-that-is-too-large/76414 "2017-02-28T00:37:01Z")

</div>

Hello, A am making a graph of the request duration time. Sometimes, I get very large value in my log and the entire graph rescales to fit that single large value. Is it possible to set the highest value of the time and…

---

## [How to extract relevant tags from docs?](https://discuss.elastic.co/t/how-to-extract-relevant-tags-from-docs/50118)

<div class="topic-metadata">

**Author:** [@bibi8](https://discuss.elastic.co/u/bibi8)\
**Replies:** 3\
**Last updated:** [May 16, 2016, 3:45pm UTC](https://discuss.elastic.co/t/how-to-extract-relevant-tags-from-docs/50118 "2016-05-16T15:45:48Z")

</div>

Hi everyone, First, sorry for my english. To ask my question i will expose to you an example. I have a type tags who contains list of tags : "\_source": { "name": "tablet-sony", } "\_source": { "name"…

---

## [Logstash issue with %{UNIXPATH} in version 1.5.5 and up](https://discuss.elastic.co/t/logstash-issue-with-unixpath-in-version-1-5-5-and-up/37122)

<div class="topic-metadata">

**Author:** [@m1k3ga](https://discuss.elastic.co/u/m1k3ga)\
**Replies:** 3\
**Last updated:** [December 14, 2015, 1:00pm UTC](https://discuss.elastic.co/t/logstash-issue-with-unixpath-in-version-1-5-5-and-up/37122 "2015-12-14T13:00:41Z")

</div>

In our (grok) logstash configuration we use a matching pattern like "%{UNIXPATH}%{UNIXPATH:filename}" with example log file entry file path /opt/foo/bar/file.xml found Until version 1.5.4 i get a field "filenam…

---

## [Extension Point for Custom Lucene Collectors?](https://discuss.elastic.co/t/extension-point-for-custom-lucene-collectors/8501)

<div class="topic-metadata">

**Author:** [@davrob](https://discuss.elastic.co/u/davrob)\
**Replies:** 3\
**Last updated:** [August 6, 2012, 10:28am UTC](https://discuss.elastic.co/t/extension-point-for-custom-lucene-collectors/8501 "2012-08-06T10:28:46Z")

</div>

Hi, I would like to use a custom org.apache.lucene.search.TopFieldCollector in my searches. Does ES have an extension point where I can do this? - David.

---

## [Dropping specific container labels from fields](https://discuss.elastic.co/t/dropping-specific-container-labels-from-fields/298309)

<div class="topic-metadata">

**Author:** [@Dario\_Louzado](https://discuss.elastic.co/u/Dario_Louzado)\
**Replies:** 2\
**Last updated:** [March 8, 2022, 12:47pm UTC](https://discuss.elastic.co/t/dropping-specific-container-labels-from-fields/298309 "2022-03-08T12:47:13Z")

</div>

Hello. I'm trying to clean-up my logging events as much as possible in order to save bandwidth and disk space in Elasticsearch. I want to delete specific labels and preserve others. Below is my full YAML file: name: …

[Previous page](https://discuss.elastic.co/top.md?page=1493&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1495&per_page=50&period=all)
