# Top **URL:** https://discuss.elastic.co/top.md?page=1521&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1522 --- ## [There is Expected one of \[ \\\\t\\\\r\\\\n\] error in docker](https://discuss.elastic.co/t/there-is-expected-one-of-t-r-n-error-in-docker/218287)
**Author:** [@fuzes](https://discuss.elastic.co/u/fuzes)\ **Replies:** 4\ **Last updated:** [February 10, 2020, 2:23am UTC](https://discuss.elastic.co/t/there-is-expected-one-of-t-r-n-error-in-docker/218287 "2020-02-10T02:23:53Z")
when i running logstash in mac os, it works well. but when i running docker container with same logstash.conf file, logstash container die with "exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of \[ \\… --- ## [Monitoring files in a directory](https://discuss.elastic.co/t/monitoring-files-in-a-directory/136289)
**Author:** [@rohitnrl](https://discuss.elastic.co/u/rohitnrl)\ **Replies:** 4\ **Last updated:** [June 18, 2018, 12:21pm UTC](https://discuss.elastic.co/t/monitoring-files-in-a-directory/136289 "2018-06-18T12:21:03Z")
Hi, I have a directory where files are being written really quick. Is there a way i can access the newly written file to that directory and then pass the information to elasticsearch. --- ## [One Index for one user](https://discuss.elastic.co/t/one-index-for-one-user/85951)
**Author:** [@Baco](https://discuss.elastic.co/u/Baco)\ **Replies:** 4\ **Last updated:** [May 17, 2017, 9:19am UTC](https://discuss.elastic.co/t/one-index-for-one-user/85951 "2017-05-17T09:19:39Z")
Please, I want to know if it is possible to configure one index for one user and don't permit to another user to see this index. If it is possible, how to do it? Thanks --- ## [Does es can solve below requirement?](https://discuss.elastic.co/t/does-es-can-solve-below-requirement/45177)
**Author:** [@Kramer\_Li](https://discuss.elastic.co/u/Kramer_Li)\ **Replies:** 4\ **Last updated:** [March 23, 2016, 4:06am UTC](https://discuss.elastic.co/t/does-es-can-solve-below-requirement/45177 "2016-03-23T04:06:41Z")
Firstly I know ES can do it functionally. But the performance is not very good. So I want to know if I am doing wrong or ES just can not. My requirements is like I have some data in below format appID, clientID,clie… --- ## [Excluding terms from highlighting](https://discuss.elastic.co/t/excluding-terms-from-highlighting/8770)
**Author:** [@Beau\_Keogh](https://discuss.elastic.co/u/Beau_Keogh)\ **Replies:** 4\ **Last updated:** [August 18, 2012, 10:14am UTC](https://discuss.elastic.co/t/excluding-terms-from-highlighting/8770 "2012-08-18T10:14:19Z")
Hi, I have an index with documents which contain a "companyid" and some other text fields. The companyid refers to our clients' id number. So in our application when presenting results to each client we need to const… --- ## [How to create birds eye visualization in kibana?](https://discuss.elastic.co/t/how-to-create-birds-eye-visualization-in-kibana/290628)
**Author:** [@sidharth\_vijayakumar](https://discuss.elastic.co/u/sidharth_vijayakumar)\ **Replies:** 6\ **Last updated:** [December 6, 2021, 3:51am UTC](https://discuss.elastic.co/t/how-to-create-birds-eye-visualization-in-kibana/290628 "2021-12-06T03:51:35Z")
Hi Team, I want to create a similar visualization in kibana dashboard which kind of visualization should I use? I am trying to create a visualization where users could see pod distribution across the nodes. I want s… --- ## [ECE node name or type not known](https://discuss.elastic.co/t/ece-node-name-or-type-not-known/239030)
**Author:** [@bharat1](https://discuss.elastic.co/u/bharat1)\ **Replies:** 6\ **Last updated:** [June 30, 2020, 4:30pm UTC](https://discuss.elastic.co/t/ece-node-name-or-type-not-known/239030 "2020-06-30T16:30:08Z")
Hi All, Configured a poc with hot warm ml master etc... but I am unable to see what type of container is it. How do I know whether the instances created are of which type like is it hot node or warm node or master or ml… --- ## [Simple example of new configuration of three node cluster, since v7.x update uses new settings](https://discuss.elastic.co/t/simple-example-of-new-configuration-of-three-node-cluster-since-v7-x-update-uses-new-settings/203922)
**Author:** [@AnitaL](https://discuss.elastic.co/u/AnitaL)\ **Replies:** 6\ **Last updated:** [October 17, 2019, 8:00am UTC](https://discuss.elastic.co/t/simple-example-of-new-configuration-of-three-node-cluster-since-v7-x-update-uses-new-settings/203922 "2019-10-17T08:00:27Z")
Hi, I took the Elasticsearch Engineer 1 training this summer (ES 6.x), then completed the Engineer 2 training (ES 7.x) Since I learned this the config settings no longer use : discovery.zen.ping.unicast.hosts: \["server… --- ## [Bytes Sent shown as 0 for beats monitoring](https://discuss.elastic.co/t/bytes-sent-shown-as-0-for-beats-monitoring/163928)
**Author:** [@Hari\_Prasad](https://discuss.elastic.co/u/Hari_Prasad)\ **Replies:** 6\ **Last updated:** [January 14, 2019, 12:10pm UTC](https://discuss.elastic.co/t/bytes-sent-shown-as-0-for-beats-monitoring/163928 "2019-01-14T12:10:02Z")
I have enabled beats monitoring by setting the below in the filebeats.yml xpack.monitoring: enabled: true elasticsearch: hosts: \["http://host1:port","http://host2:port"\] But in Kibana, though i am getting … --- ## [Kuery search](https://discuss.elastic.co/t/kuery-search/147542)
**Author:** [@vara0855](https://discuss.elastic.co/u/vara0855)\ **Replies:** 6\ **Last updated:** [September 6, 2018, 11:02am UTC](https://discuss.elastic.co/t/kuery-search/147542 "2018-09-06T11:02:20Z")
Kibana 6.3.2 OSS Elasticsearch 6.3.2 OSS Hello. Can someone tell me if I can use in the OSS version of kibana "Kuery" to search on discover, visualization and other? Or only on X-pack? https://www.elastic.co/guide/en/… --- ## [Elasticsearch-Hadoop repository plugin Cloudera Hadoop 2.0.0-cdh4.6.0](https://discuss.elastic.co/t/elasticsearch-hadoop-repository-plugin-cloudera-hadoop-2-0-0-cdh4-6-0/19291)
**Author:** [@Mateusz\_Kaczynski](https://discuss.elastic.co/u/Mateusz_Kaczynski)\ **Replies:** 6\ **Last updated:** [October 14, 2014, 11:58pm UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-repository-plugin-cloudera-hadoop-2-0-0-cdh4-6-0/19291 "2014-10-14T23:58:54Z")
I'm trying to get es-hadoop repository plugin working on our hadoop 2.0.0-cdh4.6.0 distribution and it seems like I'm quite lost. I installed plugin's -hadoop2 version on the machines on our hadoop cluster (which also… --- ## ['TokenStream contract violation' error after update to 0.90.10](https://discuss.elastic.co/t/tokenstream-contract-violation-error-after-update-to-0-90-10/15224)
**Author:** [@jorjives](https://discuss.elastic.co/u/jorjives)\ **Replies:** 6\ **Last updated:** [January 13, 2014, 9:26pm UTC](https://discuss.elastic.co/t/tokenstream-contract-violation-error-after-update-to-0-90-10/15224 "2014-01-13T21:26:58Z")
Hello folks, I've just updgraded to 0.90.10 from 0.90.3. When indexing I'm now getting the following message: \[2014-01-13 15:34:37,116\]\[WARN \]\[cluster.action.shard \] \[Kogar\] \[ corpusv5\]\[4\] sending failed sh… --- ## [Detection engine scheduler stuck after upgrade](https://discuss.elastic.co/t/detection-engine-scheduler-stuck-after-upgrade/238034)
**Author:** [@j91321](https://discuss.elastic.co/u/j91321)\ **Replies:** 5\ **Last updated:** [June 23, 2020, 5:48pm UTC](https://discuss.elastic.co/t/detection-engine-scheduler-stuck-after-upgrade/238034 "2020-06-23T17:48:56Z")
Hello, I have encountered an issue where after the detection engine rule scheduling, got stuck after upgrade from 7.7.1 to 7.8. I have a setup with two Kibana nodes and there were no other issues during the upgrade, but… --- ## [Find a date range witch donc exist](https://discuss.elastic.co/t/find-a-date-range-witch-donc-exist/105358)
**Author:** [@devozanges](https://discuss.elastic.co/u/devozanges)\ **Replies:** 5\ **Last updated:** [October 26, 2017, 11:25am UTC](https://discuss.elastic.co/t/find-a-date-range-witch-donc-exist/105358 "2017-10-26T11:25:53Z")
Hi, I'm a new Elasticsearch user (v1.7). I have an index who look like this : // house with occuped planning { "id": "54", "city": "foo", "planning": \[ { … --- ## [Filebeat module not in OSS licensed version](https://discuss.elastic.co/t/filebeat-module-not-in-oss-licensed-version/233243)
**Author:** [@mcardlesam](https://discuss.elastic.co/u/mcardlesam)\ **Replies:** 1\ **Last updated:** [May 19, 2020, 5:14am UTC](https://discuss.elastic.co/t/filebeat-module-not-in-oss-licensed-version/233243 "2020-05-19T05:14:16Z")
I am wanting to use the OSS version of filebeat to send log data to the AWS Elasticsearch service One of the log producers I have is rabbitmq - The rabbitmq module is not included in the OSS version of filebeat. Why is… --- ## [Configuring security in Logstash 7.1 - Path to cacert giving exception "Pipeline aborted due to error {:pipeline\_id=\>"main", :exception=\>#\ **Author:** [@ymishra](https://discuss.elastic.co/u/ymishra)\ **Replies:** 1\ **Last updated:** [July 8, 2019, 5:34am UTC](https://discuss.elastic.co/t/configuring-security-in-logstash-7-1-path-to-cacert-giving-exception-pipeline-aborted-due-to-error-pipeline-id-main-exception-errno-is-a-directory/188002 "2019-07-08T05:34:25Z") Hello, I am working on configuring security in ELK stack. I am using a trial license of Logstash 7.1, Kibana 7.1 and Elasticsearch 7.1 As per the instructions on configuring security in ELK, I have configured security… --- ## [Grok pattern / content management](https://discuss.elastic.co/t/grok-pattern-content-management/188162)
**Author:** [@anon15412260](https://discuss.elastic.co/u/anon15412260)\ **Replies:** 1\ **Last updated:** [June 30, 2019, 1:46am UTC](https://discuss.elastic.co/t/grok-pattern-content-management/188162 "2019-06-30T01:46:59Z")
Is there any ability in the platform today to build out grok patterns within the UI and distribute them to filebeats agents or push these into updated logstash pipelines? If not, could this be a feature request? Would be… --- ## [Averaging more than 10,000 results](https://discuss.elastic.co/t/averaging-more-than-10-000-results/126552)
**Author:** [@cohenran](https://discuss.elastic.co/u/cohenran)\ **Replies:** 1\ **Last updated:** [April 6, 2018, 12:51pm UTC](https://discuss.elastic.co/t/averaging-more-than-10-000-results/126552 "2018-04-06T12:51:16Z")
I have millions of records. I want to get the average of a specific field, but can only return less that 10,000 rows. Is the average returned is the real average of the millions of rows, or the average of the returned r… --- ## [Create Percentage Data](https://discuss.elastic.co/t/create-percentage-data/89219)
**Author:** [@monishkibana](https://discuss.elastic.co/u/monishkibana)\ **Replies:** 1\ **Last updated:** [June 13, 2017, 7:15pm UTC](https://discuss.elastic.co/t/create-percentage-data/89219 "2017-06-13T19:15:20Z")
I have couple of questions which I am facing related to percentage representations.. I wanted to use the data table to show percentage of the failure and success counts.. As of now I am getting only the counts. Pleas… --- ## [Will packetbeat support TNS protocol?](https://discuss.elastic.co/t/will-packetbeat-support-tns-protocol/34491)
**Author:** [@oraant](https://discuss.elastic.co/u/oraant)\ **Replies:** 1\ **Last updated:** [November 13, 2015, 7:36am UTC](https://discuss.elastic.co/t/will-packetbeat-support-tns-protocol/34491 "2015-11-13T07:36:49Z")
Seems like it's a new product,will it support monitor Oracle? If will,then what's the time? And I want to know release date about this product. --- ## [Harvet : (offset snapshot:0) error in logstash-forwarder](https://discuss.elastic.co/t/harvet-offset-snapshot-0-error-in-logstash-forwarder/1166)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 1\ **Last updated:** [May 24, 2015, 2:56am UTC](https://discuss.elastic.co/t/harvet-offset-snapshot-0-error-in-logstash-forwarder/1166 "2015-05-24T02:56:39Z")
Hello friends, I have just configured LSF to read some crm and sales logs under /var/log. For some old files it says Skipping file (older than dead time of 24h0m0s): which is fine. However for remaining files it says … --- ## [Filebeat autodiscover for Kubernetes uses incorrect log path](https://discuss.elastic.co/t/filebeat-autodiscover-for-kubernetes-uses-incorrect-log-path/317635)
**Author:** [@nlang](https://discuss.elastic.co/u/nlang)\ **Replies:** 2\ **Last updated:** [May 29, 2023, 8:05am UTC](https://discuss.elastic.co/t/filebeat-autodiscover-for-kubernetes-uses-incorrect-log-path/317635 "2023-05-29T08:05:04Z")
I'm trying to configure filebeat and my pods in kubernetes to use auto disscover and hints. I found this previous topic: Filebeat autodiscover for Kubernetes uses inconsistent log files path by default but it's now close… --- ## [How to view SNMP Traps with Logstash /Filebeat configuration](https://discuss.elastic.co/t/how-to-view-snmp-traps-with-logstash-filebeat-configuration/161919)
**Author:** [@JeyaNachiaban](https://discuss.elastic.co/u/JeyaNachiaban)\ **Replies:** 0\ **Last updated:** [December 22, 2018, 2:03pm UTC](https://discuss.elastic.co/t/how-to-view-snmp-traps-with-logstash-filebeat-configuration/161919 "2018-12-22T14:03:19Z")
I am new to ELK. I want to get the snmp traps through filebeat/logstash and show it in Kibana. Can you provide the documentation/procedure to do that? Configuration I tried in logstash. input { snmptrap { type =\> "s… --- ## [Date parse failure, cannot figure out pattern for literal characters in time stamp field](https://discuss.elastic.co/t/date-parse-failure-cannot-figure-out-pattern-for-literal-characters-in-time-stamp-field/179412)
**Author:** [@tomj](https://discuss.elastic.co/u/tomj)\ **Replies:** 2\ **Last updated:** [May 2, 2019, 8:37pm UTC](https://discuss.elastic.co/t/date-parse-failure-cannot-figure-out-pattern-for-literal-characters-in-time-stamp-field/179412 "2019-05-02T20:37:30Z")
Using Logstash 6.4.3 I am processing Kinesis records from the Kinesis input plugin, where the 'timestamp' field looks like this: 2019-05-02T16:25:17.850884549Z I am using the following date filter syntax (following su… --- ## [Received an event that has a different character encoding than you configured:)](https://discuss.elastic.co/t/received-an-event-that-has-a-different-character-encoding-than-you-configured/173513)
**Author:** [@nejmeddine\_ammar](https://discuss.elastic.co/u/nejmeddine_ammar)\ **Replies:** 2\ **Last updated:** [April 3, 2019, 12:47pm UTC](https://discuss.elastic.co/t/received-an-event-that-has-a-different-character-encoding-than-you-configured/173513 "2019-04-03T12:47:09Z")
when using logstash I see an error like this one : \[2019-03-14T12:59:39,516\]\[WARN \]\[logstash.codecs.plain \] Received an event that has a different character encoding than you configured. { :text=\>"08/02/2019 22:45:0… --- ## [What version of bootstrap is Kibana using?](https://discuss.elastic.co/t/what-version-of-bootstrap-is-kibana-using/168476)
**Author:** [@adrianpop](https://discuss.elastic.co/u/adrianpop)\ **Replies:** 2\ **Last updated:** [February 14, 2019, 11:02pm UTC](https://discuss.elastic.co/t/what-version-of-bootstrap-is-kibana-using/168476 "2019-02-14T23:02:24Z")
Hello there! We are using the ELK stack at work for a bigger project and recently we come across creating some custom plugins. However, I'm not sure what version of bootstrap is embedded into Kibana. I'm trying to use s… --- ## [How to tell the "exists"-query to include empty fields](https://discuss.elastic.co/t/how-to-tell-the-exists-query-to-include-empty-fields/163221)
**Author:** [@cherry-wave](https://discuss.elastic.co/u/cherry-wave)\ **Replies:** 2\ **Last updated:** [January 7, 2019, 3:07pm UTC](https://discuss.elastic.co/t/how-to-tell-the-exists-query-to-include-empty-fields/163221 "2019-01-07T15:07:13Z")
Hello =) I am using elastic search in version 5.6.4 and want to find entries where a field "tags" is existent. One rule of this query is "At least one non- null value is required." However, I want to treat empty fields… --- ## [Filebeat and Elasticsearch combination not showing realtime logs in Kibana](https://discuss.elastic.co/t/filebeat-and-elasticsearch-combination-not-showing-realtime-logs-in-kibana/146596)
**Author:** [@Dean\_Armada](https://discuss.elastic.co/u/Dean_Armada)\ **Replies:** 2\ **Last updated:** [August 31, 2018, 1:42am UTC](https://discuss.elastic.co/t/filebeat-and-elasticsearch-combination-not-showing-realtime-logs-in-kibana/146596 "2018-08-31T01:42:22Z")
I am using Filebeat, ElasticSearch and Kibana for scraping all the logs in our Docker Swarm. We used to use logspout for scraping logs then ELK but it consumes too much resources so we switched to Filebeat. But the probl… --- ## [How to refer to an object's sub field in a filter](https://discuss.elastic.co/t/how-to-refer-to-an-objects-sub-field-in-a-filter/144809)
**Author:** [@Jing\_Wang](https://discuss.elastic.co/u/Jing_Wang)\ **Replies:** 2\ **Last updated:** [August 24, 2018, 1:36am UTC](https://discuss.elastic.co/t/how-to-refer-to-an-objects-sub-field-in-a-filter/144809 "2018-08-24T01:36:18Z")
I have 3 datetime string fileds, and i want to parse them by date filter and make the last one as the @timestamp of the doc date { match =\> \["syslog.timestamp", "MMM dd HH:mm:ss"\] target =\> "syslog.timestamp… --- ## [Logstash Configuration throwing 400](https://discuss.elastic.co/t/logstash-configuration-throwing-400/141173)
**Author:** [@Raghuveer\_SJ](https://discuss.elastic.co/u/Raghuveer_SJ)\ **Replies:** 2\ **Last updated:** [July 23, 2018, 12:34pm UTC](https://discuss.elastic.co/t/logstash-configuration-throwing-400/141173 "2018-07-23T12:34:32Z")
I am new to ELK stack and trying the below configuration and i've mentioned the exception as well please suggest :slight\_smile: input { file { type =\> "java" path =\> "C:\\data\\Logs\_20180720\\eis\_log\_file.log" start\_p… --- ## [Ingest of logs slows down over time](https://discuss.elastic.co/t/ingest-of-logs-slows-down-over-time/129382)
**Author:** [@Forsteri](https://discuss.elastic.co/u/Forsteri)\ **Replies:** 2\ **Last updated:** [May 4, 2018, 8:10pm UTC](https://discuss.elastic.co/t/ingest-of-logs-slows-down-over-time/129382 "2018-05-04T20:10:47Z")
First of all, a big "thanks" to all of the Logstash and ELK Stack developers. Your product is certainly improving my job and a mind-blowing improvement over the tool that we are transitioning away from. We get the logs… --- ## [Not able to read large csv file in logstash](https://discuss.elastic.co/t/not-able-to-read-large-csv-file-in-logstash/95987)
**Author:** [@developer\_apk](https://discuss.elastic.co/u/developer_apk)\ **Replies:** 2\ **Last updated:** [August 8, 2017, 8:16pm UTC](https://discuss.elastic.co/t/not-able-to-read-large-csv-file-in-logstash/95987 "2017-08-08T20:16:06Z")
I am using below config to read large file of 1gb size having around 5m records, it is not giving any output or errors input { file { path =\> “/filepath/filename.txt” } } filter { csv { separator =\> “|” } } ou… --- ## [Grok Parse Failure](https://discuss.elastic.co/t/grok-parse-failure/56775)
**Author:** [@Sully1](https://discuss.elastic.co/u/Sully1)\ **Replies:** 2\ **Last updated:** [August 2, 2016, 4:13pm UTC](https://discuss.elastic.co/t/grok-parse-failure/56775 "2016-08-02T16:13:45Z")
Hello Logstash Community! I'm having trouble parsing my logs in Kibana. The logs are being sent to log stash (file beat) just fine. Additionally, the grok patterns/filters are showing up in Kibana (settings--Indicies).… --- ## [Q about enabling \_size with mapper-size plugin](https://discuss.elastic.co/t/q-about-enabling--size-with-mapper-size-plugin/45981)
**Author:** [@jeffkirk1](https://discuss.elastic.co/u/jeffkirk1)\ **Replies:** 2\ **Last updated:** [May 10, 2016, 9:02pm UTC](https://discuss.elastic.co/t/q-about-enabling--size-with-mapper-size-plugin/45981 "2016-05-10T21:02:36Z")
I've installed the mapper-size plugin on my Elasticsearch 2.2.1 cluster, restarted all the nodes, and have attempted to follow the instructions to enable it on an existing index (which might be the problem). Here's wh… --- ## [Python helpers equivalent for java](https://discuss.elastic.co/t/python-helpers-equivalent-for-java/38310)
**Author:** [@dinushan\_m](https://discuss.elastic.co/u/dinushan_m)\ **Replies:** 2\ **Last updated:** [January 5, 2016, 10:20am UTC](https://discuss.elastic.co/t/python-helpers-equivalent-for-java/38310 "2016-01-05T10:20:58Z")
Hi all, I'm new to elasticsearch. I'm facing issue when indexing with java APIs. I'm able to index documents with '\_id' field using helpers.bulk in python. But when I'm trying to index the same with java API's I get th… --- ## [Duplicated records returned using pagination after update](https://discuss.elastic.co/t/duplicated-records-returned-using-pagination-after-update/12912)
**Author:** [@Jak\_Charlton](https://discuss.elastic.co/u/Jak_Charlton)\ **Replies:** 2\ **Last updated:** [July 25, 2013, 12:04am UTC](https://discuss.elastic.co/t/duplicated-records-returned-using-pagination-after-update/12912 "2013-07-25T00:04:08Z")
I'm using v0.90.0 of ES, and I just implemented pagination. All was going fine until I updated one of my records, then I noticed that the returned results had a record duplicated. Update another record and a new d… --- ## [Query string on an attachment field](https://discuss.elastic.co/t/query-string-on-an-attachment-field/7005)
**Author:** [@Alexandre\_Heimburger](https://discuss.elastic.co/u/Alexandre_Heimburger)\ **Replies:** 2\ **Last updated:** [March 14, 2012, 11:12pm UTC](https://discuss.elastic.co/t/query-string-on-an-attachment-field/7005 "2012-03-14T23:12:24Z")
Hi, Is it possible to perform a query string on a specific attachment field : { "query\_string" : { "fields" : \["files", "content"\], "query" : "my text" } } This query shoul… --- ## [Restart leave unassigned shards](https://discuss.elastic.co/t/restart-leave-unassigned-shards/17112)
**Author:** [@sulemanmubarik](https://discuss.elastic.co/u/sulemanmubarik)\ **Replies:** 0\ **Last updated:** [April 21, 2014, 5:08pm UTC](https://discuss.elastic.co/t/restart-leave-unassigned-shards/17112 "2014-04-21T17:08:56Z")
Hi we have 5 data nodes and 3 master in cluster and we are on ES 1.0 2 week ago when we restarted the it leave 1 shard unassigned for some indices. We check the Lucien index and they are fine. We create a test in… --- ## [I receive this error in filebeat can I help me](https://discuss.elastic.co/t/i-receive-this-error-in-filebeat-can-i-help-me/344919)
**Author:** [@alex\_base](https://discuss.elastic.co/u/alex_base)\ **Replies:** 3\ **Last updated:** [October 13, 2023, 9:23am UTC](https://discuss.elastic.co/t/i-receive-this-error-in-filebeat-can-i-help-me/344919 "2023-10-13T09:23:44Z")
I receive this error in filebeat {"log.level":"error","@timestamp":"2023-10-12T12:30:33.238Z","log.logger":"publisher\_pipeline\_output","log.origin":{"file.name":"pipeline/client\_worker.go","file.line":148},"message":"Fai… --- ## [How to config APM output to kafka with topic name using event's processor event name](https://discuss.elastic.co/t/how-to-config-apm-output-to-kafka-with-topic-name-using-events-processor-event-name/213289)
**Author:** [@zangma121](https://discuss.elastic.co/u/zangma121)\ **Replies:** 3\ **Last updated:** [December 30, 2019, 8:06am UTC](https://discuss.elastic.co/t/how-to-config-apm-output-to-kafka-with-topic-name-using-events-processor-event-name/213289 "2019-12-30T08:06:03Z")
I want to ouput my apm server to kafka. according to offical document have provided. Configed my apm-server.yml in output kafka section. output.kafka: hosts: \["localhost:9092"\] topic: '%{\[fields.log\_topic\]}' partitio… --- ## [Categorize products using significant\_text of previously categorized ones](https://discuss.elastic.co/t/categorize-products-using-significant-text-of-previously-categorized-ones/198414)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 3\ **Last updated:** [September 6, 2019, 12:48pm UTC](https://discuss.elastic.co/t/categorize-products-using-significant-text-of-previously-categorized-ones/198414 "2019-09-06T12:48:06Z")
Hello I need a little help on how to approach a problem I'm facing right now. Imagine I have "categorized-products" index where I store a bunch of products, each one containing a description and a manually selected ca… --- ## [Request for this panel failed for metricbeat dashboard](https://discuss.elastic.co/t/request-for-this-panel-failed-for-metricbeat-dashboard/161793)
**Author:** [@sourav\_dixit](https://discuss.elastic.co/u/sourav_dixit)\ **Replies:** 3\ **Last updated:** [January 4, 2019, 7:53am UTC](https://discuss.elastic.co/t/request-for-this-panel-failed-for-metricbeat-dashboard/161793 "2019-01-04T07:53:02Z")
For metricbeat system dashboard , on selecting for last 24 hours there is no issue and every visualization is loading as per expectation. Please see the screenshot: But Once I am trying to visualize for last 7 days , … --- ## [S3 repository snapshot human readable folder name?](https://discuss.elastic.co/t/s3-repository-snapshot-human-readable-folder-name/147492)
**Author:** [@nutchalum.k](https://discuss.elastic.co/u/nutchalum.k)\ **Replies:** 3\ **Last updated:** [September 6, 2018, 10:38am UTC](https://discuss.elastic.co/t/s3-repository-snapshot-human-readable-folder-name/147492 "2018-09-06T10:38:15Z")
Hello, Is it possible to create a snapshot as a human readable folder? I've snapshot indices that are older than 7 days and store them in s3 as a backup And I want to delete them after 30 days via bucket policies us… --- ## [Couchdb\_changes plugin resetting .couchdb\_seq](https://discuss.elastic.co/t/couchdb-changes-plugin-resetting-couchdb-seq/100038)
**Author:** [@uschtwill](https://discuss.elastic.co/u/uschtwill)\ **Replies:** 3\ **Last updated:** [September 17, 2017, 10:13am UTC](https://discuss.elastic.co/t/couchdb-changes-plugin-resetting-couchdb-seq/100038 "2017-09-17T10:13:23Z")
I am using the Couchdb\_changes plugin. Recently, irregularly, during a 3 day index, the .couchdb\_seq file is deleted/resetted, so Logstash starts indexing from the start. I am fairly certain the file is not deleted from… --- ## [Can shield setup a defalut pass for admin for 2.3.2?](https://discuss.elastic.co/t/can-shield-setup-a-defalut-pass-for-admin-for-2-3-2/46975)
**Author:** [@makeyang](https://discuss.elastic.co/u/makeyang)\ **Replies:** 3\ **Last updated:** [April 12, 2016, 11:47am UTC](https://discuss.elastic.co/t/can-shield-setup-a-defalut-pass-for-admin-for-2-3-2/46975 "2016-04-12T11:47:54Z")
since rest API to manipulate users/roles, so is it possible to add a well-known password for admin to operation everything and forget about esusers at all? --- ## [Courier Fetch: 10 of 185 shards failed](https://discuss.elastic.co/t/courier-fetch-10-of-185-shards-failed/38558)
**Author:** [@constantino](https://discuss.elastic.co/u/constantino)\ **Replies:** 3\ **Last updated:** [January 8, 2016, 1:14am UTC](https://discuss.elastic.co/t/courier-fetch-10-of-185-shards-failed/38558 "2016-01-08T01:14:03Z")
Hello, I have this problem when i connetc to elasticsearch from Kibana, Courier Fetch: 10 of 185 shards failed. I not can solve problem, I add this line to file elasticsearch.in.sh ES\_HEAP\_SIZE=3G but it not solve t… --- ## [A case for Redis as broker](https://discuss.elastic.co/t/a-case-for-redis-as-broker/14355)
**Author:** [@Nicholas\_Rios](https://discuss.elastic.co/u/Nicholas_Rios)\ **Replies:** 3\ **Last updated:** [November 12, 2013, 12:03am UTC](https://discuss.elastic.co/t/a-case-for-redis-as-broker/14355 "2013-11-12T00:03:39Z")
Hi all, we are building an elasticsearch stack currently but hitting some uncertainty whether to include Redis or not. I am writing up an argument for it's inclusion and hoped to gain additional insight from this … --- ## [Slow query with aggregations](https://discuss.elastic.co/t/slow-query-with-aggregations/283143)
**Author:** [@Drept](https://discuss.elastic.co/u/Drept)\ **Replies:** 7\ **Last updated:** [September 2, 2021, 3:47pm UTC](https://discuss.elastic.co/t/slow-query-with-aggregations/283143 "2021-09-02T15:47:17Z")
I have implemented a system of aggregations for search filters and am enduring speed problems with a bit longer queries: there are no problems when a query contains up to 4 words but extremely slow queries onward. I hav… --- ## [Logstash unable to Access AWS elasticsearch getting 403 role permissions seems fine](https://discuss.elastic.co/t/logstash-unable-to-access-aws-elasticsearch-getting-403-role-permissions-seems-fine/275059)
**Author:** [@Akhil\_Beeravalli05](https://discuss.elastic.co/u/Akhil_Beeravalli05)\ **Replies:** 1\ **Last updated:** [June 6, 2021, 11:43am UTC](https://discuss.elastic.co/t/logstash-unable-to-access-aws-elasticsearch-getting-403-role-permissions-seems-fine/275059 "2021-06-06T11:43:34Z")
\[2021-06-06T08:38:50,640\]\[WARN \]\[logstash.outputs.amazonelasticsearch\] Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>"https://search-xxxxxx-elasticsearch-n2wtsxzzf23iyifadn4mi2fmfy.us-ea… --- ## [Grok Data in curly braces](https://discuss.elastic.co/t/grok-data-in-curly-braces/237680)
**Author:** [@marco2005](https://discuss.elastic.co/u/marco2005)\ **Replies:** 1\ **Last updated:** [June 18, 2020, 4:52pm UTC](https://discuss.elastic.co/t/grok-data-in-curly-braces/237680 "2020-06-18T16:52:46Z")
I have section in the log in curly braces Thu Jun 18 08:01:42 CEST 2020|{"timestamp":1592460102635,"caller":"test.customer@customer1","action":"LOGIN","message":"ID000066 User \[test.customer@customer1\] logged in success… [Previous page](https://discuss.elastic.co/top.md?page=1520&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1522&per_page=50&period=all)