# Top **URL:** https://discuss.elastic.co/top.md?page=153&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 154 --- ## [Null values for optional fields](https://discuss.elastic.co/t/null-values-for-optional-fields/5458)
**Author:** [@Alex\_2](https://discuss.elastic.co/u/Alex_2)\ **Replies:** 14\ **Last updated:** [October 2, 2011, 11:08pm UTC](https://discuss.elastic.co/t/null-values-for-optional-fields/5458 "2011-10-02T23:08:23Z")
Hi Shay I found a problem that arises when using this line: getResponse = client.prepareGet(INDEX\_NAME, TYPE, documentId) .setFields("\_source.field1", "\_source.field2", "\_source.optional\_field") … --- ## [Data from ESSQL not available to bubble chart, in Canvas and Vega](https://discuss.elastic.co/t/data-from-essql-not-available-to-bubble-chart-in-canvas-and-vega/259816)
**Author:** [@Hugo\_Pires](https://discuss.elastic.co/u/Hugo_Pires)\ **Replies:** 14\ **Last updated:** [December 29, 2020, 8:07pm UTC](https://discuss.elastic.co/t/data-from-essql-not-available-to-bubble-chart-in-canvas-and-vega/259816 "2020-12-29T20:07:40Z")
Hello I am trying to create a scatter plot from an index (created with a transform). The data is available at the datasource preview of the query but it doesn't show up in the chart. Running the chart in debug mode giv… --- ## [How should I configure the number of node, shard and replica?](https://discuss.elastic.co/t/how-should-i-configure-the-number-of-node-shard-and-replica/263840)
**Author:** [@rider9581](https://discuss.elastic.co/u/rider9581)\ **Replies:** 17\ **Last updated:** [February 11, 2021, 8:38am UTC](https://discuss.elastic.co/t/how-should-i-configure-the-number-of-node-shard-and-replica/263840 "2021-02-11T08:38:10Z")
I have one server of the following spec: RAM: 128 GB HDD: 10TB \* 2 SSD: 256 GB CPU: 32 cores and I am going to manage up to 10TB of text data using Elasticsearch 7.9.3. Also, I plan to use Docker for the deployment o… --- ## [How to set up mutual SSL authentication between an ELK server (Logstash) and a remote Filebeat server?](https://discuss.elastic.co/t/how-to-set-up-mutual-ssl-authentication-between-an-elk-server-logstash-and-a-remote-filebeat-server/180456)
**Author:** [@zenimagine](https://discuss.elastic.co/u/zenimagine)\ **Replies:** 12\ **Last updated:** [May 14, 2019, 4:14pm UTC](https://discuss.elastic.co/t/how-to-set-up-mutual-ssl-authentication-between-an-elk-server-logstash-and-a-remote-filebeat-server/180456 "2019-05-14T16:14:38Z")
I have 2 servers with Ubuntu 18.04: monitoring.example.com (with ELK on a single server) www.example.com (with Filebeat) Here is the configuration file /etc/logstash/conf.d/logstash.conf on the server monitoring.exa… --- ## [Can not restart Elasticsearch service](https://discuss.elastic.co/t/can-not-restart-elasticsearch-service/334688)
**Author:** [@lcsb-sysadmins](https://discuss.elastic.co/u/lcsb-sysadmins)\ **Replies:** 18\ **Last updated:** [June 1, 2023, 12:57pm UTC](https://discuss.elastic.co/t/can-not-restart-elasticsearch-service/334688 "2023-06-01T12:57:02Z")
Hi, Elastic Stack Version - 7.17.5 We had an issue with our server (iDRAC is unable to successfully communicate with the device RAID Controller) which caused disruption for our elastic stack. However we solved that is… --- ## [How to put Geo\_type mapping with JsonObject](https://discuss.elastic.co/t/how-to-put-geo-type-mapping-with-jsonobject/171045)
**Author:** [@ChenSijia](https://discuss.elastic.co/u/ChenSijia)\ **Replies:** 10\ **Last updated:** [March 8, 2019, 4:11pm UTC](https://discuss.elastic.co/t/how-to-put-geo-type-mapping-with-jsonobject/171045 "2019-03-08T16:11:06Z")
Hi all ,does everyone knows how to use : IndexResponse createData(Client client, String jsonObject, String index, String type, String id); to put Geo\_type and other mappings? I used Map resolve this issue,but I also … --- ## [Login failed on GUI of service.bat](https://discuss.elastic.co/t/login-failed-on-gui-of-service-bat/80810)
**Author:** [@s\_b92](https://discuss.elastic.co/u/s_b92)\ **Replies:** 16\ **Last updated:** [April 5, 2017, 1:50pm UTC](https://discuss.elastic.co/t/login-failed-on-gui-of-service-bat/80810 "2017-04-05T13:50:07Z")
Hey guys, I have a problem to login over service.bat with a specific account. The only thing I see the service doesn't start. And it isn't nothing logged in the Elasticsearch logs. What can I do. Please help me! Gree… --- ## [Filebeat Cisco AMP Module and host.name Error](https://discuss.elastic.co/t/filebeat-cisco-amp-module-and-host-name-error/268510)
**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\ **Replies:** 21\ **Last updated:** [March 30, 2021, 2:21pm UTC](https://discuss.elastic.co/t/filebeat-cisco-amp-module-and-host-name-error/268510 "2021-03-30T14:21:22Z")
We are currently using Python to poll the Cisco AMP API, then Logstash picks up the results, but I noticed there is a new Cisco AMP module for Filebeat, so I figured I would give it a try. There are a few issues I have n… --- ## [Average calculation problem (round-off 0) on CPULoad via JMX](https://discuss.elastic.co/t/average-calculation-problem-round-off-0-on-cpuload-via-jmx/104689)
**Author:** [@ChuckNoxis](https://discuss.elastic.co/u/ChuckNoxis)\ **Replies:** 13\ **Last updated:** [October 26, 2017, 9:31am UTC](https://discuss.elastic.co/t/average-calculation-problem-round-off-0-on-cpuload-via-jmx/104689 "2017-10-26T09:31:32Z")
Hi, I've installed an ELK on Ubuntu, i'm trying to monitor some data from a Java app with JMX (I followed this tutorial). When I want to create a visualization for my CPU Load, the result of the average equals 0. \[Sé… --- ## [Difficultés de chargement de données (mysql) via logstash](https://discuss.elastic.co/t/difficultes-de-chargement-de-donnees-mysql-via-logstash/335596)
**Author:** [@adimi\_worou](https://discuss.elastic.co/u/adimi_worou)\ **Replies:** 22\ **Last updated:** [July 24, 2023, 5:55am UTC](https://discuss.elastic.co/t/difficultes-de-chargement-de-donnees-mysql-via-logstash/335596 "2023-07-24T05:55:13Z")
Bonjour, je viens solliciter votre aide pour debugger cette app. Je veux mettre en place un moteur de recherche avec élasticseach. J'ai créé mon docker-compose avec les services suivants: mysql, elasticsearch, kibana et… --- ## ["No JVMs were found" in JVM tab after APM upgrade from 1.38 to 1.43](https://discuss.elastic.co/t/no-jvms-were-found-in-jvm-tab-after-apm-upgrade-from-1-38-to-1-43/346537)
**Author:** [@jandry](https://discuss.elastic.co/u/jandry)\ **Replies:** 23\ **Last updated:** [November 24, 2023, 3:25pm UTC](https://discuss.elastic.co/t/no-jvms-were-found-in-jvm-tab-after-apm-upgrade-from-1-38-to-1-43/346537 "2023-11-24T15:25:36Z")
Kibana version: 7.16.3 APM Jva agent version: 1.43 Hi, For my previous ticket we did an upgrade of our apm agent from 1.38 to 1.43 and only that We now have the transaction correctly but we lost the JVM tab But w… --- ## [Jupyter spark connect to elasticsearch](https://discuss.elastic.co/t/jupyter-spark-connect-to-elasticsearch/326585)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 11\ **Last updated:** [March 1, 2023, 3:14pm UTC](https://discuss.elastic.co/t/jupyter-spark-connect-to-elasticsearch/326585 "2023-03-01T15:14:21Z")
I'm trying to connect from spark to elasticsearch , so as first I've build docker images from spark3.2.1 for kubernetes then from jupyter notebook I've opened a session to spark a build the context to elasticsearch on t… --- ## [Help required](https://discuss.elastic.co/t/help-required/94059)
**Author:** [@Akhil\_Prashar](https://discuss.elastic.co/u/Akhil_Prashar)\ **Replies:** 17\ **Last updated:** [July 24, 2017, 8:17am UTC](https://discuss.elastic.co/t/help-required/94059 "2017-07-24T08:17:44Z")
Hi everyone, I am trying to search a keyword in date range. Can anyone help me out? curl -XGET 'http://localhost:9200/201706/\_search' -d '{ "query" :{ "bool" : { "must" : \[{ "match" : { "message": "isis"} }, { "range" … --- ## [ElasticSearch 0.19.2 heap space shortage, becoming unresponsive and not recovering or releasing memory](https://discuss.elastic.co/t/elasticsearch-0-19-2-heap-space-shortage-becoming-unresponsive-and-not-recovering-or-releasing-memory/7488)
**Author:** [@sujoysett](https://discuss.elastic.co/u/sujoysett)\ **Replies:** 27\ **Last updated:** [May 6, 2012, 5:00am UTC](https://discuss.elastic.co/t/elasticsearch-0-19-2-heap-space-shortage-becoming-unresponsive-and-not-recovering-or-releasing-memory/7488 "2012-05-06T05:00:53Z")
Hi, We have been using elasticsearch 0.19.2 for storing and analyzing data from social media blogs and forums. The data volume is going up to 500000 documents per index, and size of this volume of data in Elasticse… --- ## [Filebeat - Multiple VPC logs from different S3 buckets not working](https://discuss.elastic.co/t/filebeat-multiple-vpc-logs-from-different-s3-buckets-not-working/292711)
**Author:** [@antondubek](https://discuss.elastic.co/u/antondubek)\ **Replies:** 14\ **Last updated:** [January 28, 2022, 2:54pm UTC](https://discuss.elastic.co/t/filebeat-multiple-vpc-logs-from-different-s3-buckets-not-working/292711 "2022-01-28T14:54:45Z")
HI All, Within our AWS account, we have 2 VPC's that output flow logs into individual separate S3 buckets. I have enabled event notifications and connected them to SQS which all works. I also have WAF and ALB logs which… --- ## [How to refresh view of a field](https://discuss.elastic.co/t/how-to-refresh-view-of-a-field/56897)
**Author:** [@yazidi](https://discuss.elastic.co/u/yazidi)\ **Replies:** 9\ **Last updated:** [August 4, 2016, 1:39pm UTC](https://discuss.elastic.co/t/how-to-refresh-view-of-a-field/56897 "2016-08-04T13:39:23Z")
I tried to change the value of one fields in a search table and I realized that the value really changes except that at the level of the view(sight) that does not change. Would have you a solution to refresh the view(sig… --- ## [Elastic stuck and flooded with "monitoring execution failed"](https://discuss.elastic.co/t/elastic-stuck-and-flooded-with-monitoring-execution-failed/247881)
**Author:** [@ludaca](https://discuss.elastic.co/u/ludaca)\ **Replies:** 9\ **Last updated:** [September 9, 2020, 1:14pm UTC](https://discuss.elastic.co/t/elastic-stuck-and-flooded-with-monitoring-execution-failed/247881 "2020-09-09T13:14:20Z")
Hello, ES 5.6.10 under k8s cluster v1.9 xpack.security disabled 16 data nodes Large number of unassigned shards that do not go down at all. \[2020-09-08T11:15:40,655\]\[WARN \]\[o.e.x.m.MonitoringService\] \[es-data05-0\] … --- ## [Query response time when search query hits across HOT and WARM phase in ILM](https://discuss.elastic.co/t/query-response-time-when-search-query-hits-across-hot-and-warm-phase-in-ilm/324699)
**Author:** [@siddhartha\_c](https://discuss.elastic.co/u/siddhartha_c)\ **Replies:** 12\ **Last updated:** [February 10, 2023, 6:02pm UTC](https://discuss.elastic.co/t/query-response-time-when-search-query-hits-across-hot-and-warm-phase-in-ilm/324699 "2023-02-10T18:02:58Z")
Hi Team, We have to implement HOT, WARM and COLD phase with ILM implementation as a part of our requirement, wherein the HOT phase Nodes are in SSD and the WARM and COLD are not. Most of the searches will be fired for … --- ## [Elastic search getting timeout](https://discuss.elastic.co/t/elastic-search-getting-timeout/70624)
**Author:** [@dubul](https://discuss.elastic.co/u/dubul)\ **Replies:** 12\ **Last updated:** [January 5, 2017, 5:11pm UTC](https://discuss.elastic.co/t/elastic-search-getting-timeout/70624 "2017-01-05T17:11:52Z")
Here is the error i'm getting, I have no clue about this error. Can anyone help me why this is erroring out. 2017-01-04 17:19:24,207\]\[WARN \]\[rest.suppressed \] /logs-2017.01.05/logEvent Params: {index=logs-201… --- ## [Sensible increase of load average since using metricbeat with docker](https://discuss.elastic.co/t/sensible-increase-of-load-average-since-using-metricbeat-with-docker/110874)
**Author:** [@nsteinmetz](https://discuss.elastic.co/u/nsteinmetz)\ **Replies:** 10\ **Last updated:** [December 14, 2017, 3:52pm UTC](https://discuss.elastic.co/t/sensible-increase-of-load-average-since-using-metricbeat-with-docker/110874 "2017-12-14T15:52:30Z")
Hi there, As soon as I deployed metricbeat using the following rules (https://logz.io/blog/docker-metricbeat/), load average started to raise significantly. I only have on my server (4 CPU, 4Go RAM) : 37 containers f… --- ## [RestFilters for ES 5.x](https://discuss.elastic.co/t/restfilters-for-es-5-x/134123)
**Author:** [@Vinh\_Nguyen](https://discuss.elastic.co/u/Vinh_Nguyen)\ **Replies:** 12\ **Last updated:** [June 22, 2018, 2:11pm UTC](https://discuss.elastic.co/t/restfilters-for-es-5-x/134123 "2018-06-22T14:11:38Z")
Goal: log all REST requests made to ElasticSearch 5.6.4 cluster. \*Note: in ES 2.x, this can done via RestFilter and RestFilterChain but I am struggle to find the equivalent for ES 5.x . Implementation 1: I wrote a … --- ## [After installing x-pack on ELK, Logstash not create index to elasticsearch](https://discuss.elastic.co/t/after-installing-x-pack-on-elk-logstash-not-create-index-to-elasticsearch/131106)
**Author:** [@SK5277-SINGH](https://discuss.elastic.co/u/SK5277-SINGH)\ **Replies:** 15\ **Last updated:** [May 10, 2018, 6:07am UTC](https://discuss.elastic.co/t/after-installing-x-pack-on-elk-logstash-not-create-index-to-elasticsearch/131106 "2018-05-10T06:07:52Z")
Before x-pack installed on ELK, There was no any issue This my logstash.conf file input{ file{ path =\> "E:\\ELK\\data\\actor.csv" start\_position =\> "beginning" } } filter { csv { separator =\> "," columns =\> \["act… --- ## [Newbie, stuck in 1st tutorial](https://discuss.elastic.co/t/newbie-stuck-in-1st-tutorial/74660)
**Author:** [@Asperamanca](https://discuss.elastic.co/u/Asperamanca)\ **Replies:** 9\ **Last updated:** [March 8, 2017, 7:39pm UTC](https://discuss.elastic.co/t/newbie-stuck-in-1st-tutorial/74660 "2017-03-08T19:39:45Z")
I have ElasticSearch 5.2 and Kibana 5.2 up and running, and I am connected to Kibana via browser (localhost:5601). I tried to get the "Loading sample data" tutorial to run, but lack some information. Where am I suppo… --- ## [How to debug filebeat module, it doesn't seem to be getting syslog data](https://discuss.elastic.co/t/how-to-debug-filebeat-module-it-doesnt-seem-to-be-getting-syslog-data/307307)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 9\ **Last updated:** [June 16, 2022, 7:24pm UTC](https://discuss.elastic.co/t/how-to-debug-filebeat-module-it-doesnt-seem-to-be-getting-syslog-data/307307 "2022-06-16T19:24:42Z")
I'm trying to use the panw module receiving data via a syslog port. I've enabled the module and can see that filebeat is listening on the proper udp port. I can see traffic arrive in tcpdump and the events look valid. … --- ## [Filebeat lit des lignes 2 fois](https://discuss.elastic.co/t/filebeat-lit-des-lignes-2-fois/236452)
**Author:** [@IneedHelp](https://discuss.elastic.co/u/IneedHelp)\ **Replies:** 12\ **Last updated:** [August 2, 2020, 11:28am UTC](https://discuss.elastic.co/t/filebeat-lit-des-lignes-2-fois/236452 "2020-08-02T11:28:13Z")
Bonjour, J'accuse filebeat mais je ne suis sûr de rien. J'utilise ELK pour analyser des logs et des fichiers csv. Pendant plusieurs semaines tout fonctionnait comme il faut mais hier en voulant ingérer des fichiers, j'… --- ## [When rewriting multiterm query, add constant\_score to every term, not to the whole query \[SOLVED\]](https://discuss.elastic.co/t/when-rewriting-multiterm-query-add-constant-score-to-every-term-not-to-the-whole-query-solved/29806)
**Author:** [@beowulfenator](https://discuss.elastic.co/u/beowulfenator)\ **Replies:** 9\ **Last updated:** [September 23, 2015, 3:19pm UTC](https://discuss.elastic.co/t/when-rewriting-multiterm-query-add-constant-score-to-every-term-not-to-the-whole-query-solved/29806 "2015-09-23T15:19:18Z")
I am looking for cities from geonames db. A typical search string would be "San Francisco CA". I have documents that have a city and a state field. I do a match query, matching search string to city and state, then combi… --- ## [For example, I have machine A running as a Server and I would like to manage other clients such as machine B, C, D,...etc So, how to do that? How to get many hosts?](https://discuss.elastic.co/t/for-example-i-have-machine-a-running-as-a-server-and-i-would-like-to-manage-other-clients-such-as-machine-b-c-d-etc-so-how-to-do-that-how-to-get-many-hosts/201330)
**Author:** [@pbona](https://discuss.elastic.co/u/pbona)\ **Replies:** 20\ **Last updated:** [October 22, 2019, 12:44am UTC](https://discuss.elastic.co/t/for-example-i-have-machine-a-running-as-a-server-and-i-would-like-to-manage-other-clients-such-as-machine-b-c-d-etc-so-how-to-do-that-how-to-get-many-hosts/201330 "2019-10-22T00:44:10Z")
--- ## [No data after CSV Export - Kibana](https://discuss.elastic.co/t/no-data-after-csv-export-kibana/290547)
**Author:** [@njain213](https://discuss.elastic.co/u/njain213)\ **Replies:** 10\ **Last updated:** [December 27, 2021, 6:27pm UTC](https://discuss.elastic.co/t/no-data-after-csv-export-kibana/290547 "2021-12-27T18:27:26Z")
Hi Team, On follow up on below issue can anyone help me out? --- ## [Unable to convert date from string/ change @timestamp value](https://discuss.elastic.co/t/unable-to-convert-date-from-string-change-timestamp-value/216394)
**Author:** [@Charles\_Yuliansen](https://discuss.elastic.co/u/Charles_Yuliansen)\ **Replies:** 14\ **Last updated:** [January 28, 2020, 1:00am UTC](https://discuss.elastic.co/t/unable-to-convert-date-from-string-change-timestamp-value/216394 "2020-01-28T01:00:58Z")
I've tried everything i found on the forum but nothing helps, i hope someone could kindly share their experiences with me. newts 2019-12-01 00:19:03 here is my log config trying to change @timestamp value doesnt wor… --- ## [Topbeat not talking to Logstash](https://discuss.elastic.co/t/topbeat-not-talking-to-logstash/45406)
**Author:** [@Patrick\_Barker](https://discuss.elastic.co/u/Patrick_Barker)\ **Replies:** 10\ **Last updated:** [March 25, 2016, 4:18pm UTC](https://discuss.elastic.co/t/topbeat-not-talking-to-logstash/45406 "2016-03-25T16:18:04Z")
Hey, I am just getting going with Topbeat and am having trouble getting it to talk to logstash. I have installed to plugin and followed all the instructions, but am still not getting data. Topbeat says it is connected an… --- ## [Kibana 7.11 problems with spaces and roles -](https://discuss.elastic.co/t/kibana-7-11-problems-with-spaces-and-roles/265679)
**Author:** [@byteandbit](https://discuss.elastic.co/u/byteandbit)\ **Replies:** 13\ **Last updated:** [March 1, 2021, 6:48am UTC](https://discuss.elastic.co/t/kibana-7-11-problems-with-spaces-and-roles/265679 "2021-03-01T06:48:19Z")
Hello, We have created a new space just for read only user to access - Visibility in Analytics-\>Dashboard, Discover and Visualise. Then we created a new role within new space only, with read only privileges again fo… --- ## [Can't even parse very simple data and get \_grokparsefailure as a tag](https://discuss.elastic.co/t/cant-even-parse-very-simple-data-and-get-grokparsefailure-as-a-tag/156437)
**Author:** [@Mustapha\_MJ](https://discuss.elastic.co/u/Mustapha_MJ)\ **Replies:** 18\ **Last updated:** [November 14, 2018, 11:30am UTC](https://discuss.elastic.co/t/cant-even-parse-very-simple-data-and-get-grokparsefailure-as-a-tag/156437 "2018-11-14T11:30:24Z")
i want to get started with ELK but i'm stuck every-time, after 2 weeks of complication i can finally ingest my sample log into elastic search, but fell into another problem, i can't see all my records in kibana and those… --- ## [Filebeat events doesnt come with ECS compatibility while coming through Logstash](https://discuss.elastic.co/t/filebeat-events-doesnt-come-with-ecs-compatibility-while-coming-through-logstash/266744)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 11\ **Last updated:** [March 18, 2021, 9:52am UTC](https://discuss.elastic.co/t/filebeat-events-doesnt-come-with-ecs-compatibility-while-coming-through-logstash/266744 "2021-03-18T09:52:11Z")
I am using the Filebeat AWS module to fetch Cloudtrail logs. To load the dashboards, first I configured Filebet output to Elasticsearch and send some data to test and it was having ECS field names. However, while I sent … --- ## [Canvas - Datatable](https://discuss.elastic.co/t/canvas-datatable/208560)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 12\ **Last updated:** [November 26, 2019, 5:26pm UTC](https://discuss.elastic.co/t/canvas-datatable/208560 "2019-11-26T17:26:33Z")
Hi There, Am trying to create a datatable in canvas , but Iam not sure how to execute this condition. I have a fields hostname and risk\_factor (critical, high, medium, low ) and Iam trying to create a datable on top h… --- ## [Single host OS, multiple nodes for simplicity over availability](https://discuss.elastic.co/t/single-host-os-multiple-nodes-for-simplicity-over-availability/125814)
**Author:** [@rfs42](https://discuss.elastic.co/u/rfs42)\ **Replies:** 12\ **Last updated:** [April 7, 2018, 8:38am UTC](https://discuss.elastic.co/t/single-host-os-multiple-nodes-for-simplicity-over-availability/125814 "2018-04-07T08:38:28Z")
I'm interested in building a log management Elasticsearch implementation with simplicity prioritized over availability. We can live with some down time, but not data loss, and our upstream infrastructure will accumulat… --- ## [System.diskio obtaining NaN (Failed to serialize the event: unsupported float value: NaN)](https://discuss.elastic.co/t/system-diskio-obtaining-nan-failed-to-serialize-the-event-unsupported-float-value-nan/156877)
**Author:** [@niteman](https://discuss.elastic.co/u/niteman)\ **Replies:** 9\ **Last updated:** [November 21, 2018, 9:35pm UTC](https://discuss.elastic.co/t/system-diskio-obtaining-nan-failed-to-serialize-the-event-unsupported-float-value-nan/156877 "2018-11-21T21:35:31Z")
We're just setting up metricbeat and getting in a bunch of machines communication errors with logstash: |2018-11-15T12:01:59.051+0100|INFO|pipeline/output.go:95|Connecting to backoff(async(tcp://anonDEST\_HOST:anonDEST\_P… --- ## [JSON log, only root level fields being indexed](https://discuss.elastic.co/t/json-log-only-root-level-fields-being-indexed/137955)
**Author:** [@jro](https://discuss.elastic.co/u/jro)\ **Replies:** 9\ **Last updated:** [June 29, 2018, 5:45pm UTC](https://discuss.elastic.co/t/json-log-only-root-level-fields-being-indexed/137955 "2018-06-29T17:45:06Z")
The logfile contains json log entries like this: {"priority":"INFO","messageType":"HTTP\_RESPONSE","message":{"type":"HTTP\_RESPONSE","name":"Create User","status":"200","reason":"OK","response":"{id=1234, name=My Name}"}… --- ## [How to enable remote publish on Elasticsearch 5.2 Installation?](https://discuss.elastic.co/t/how-to-enable-remote-publish-on-elasticsearch-5-2-installation/79025)
**Author:** [@pythonl1](https://discuss.elastic.co/u/pythonl1)\ **Replies:** 15\ **Last updated:** [April 3, 2017, 8:28am UTC](https://discuss.elastic.co/t/how-to-enable-remote-publish-on-elasticsearch-5-2-installation/79025 "2017-04-03T08:28:15Z")
Hi, I have one server which has MYSQL and Logstash 5.2 install and another server on which KIbana and Elasticsearch 5.2 have been installed. The problem I am facing right now is that Logstash fails to add indices or … --- ## [Remote\_addr showing 127.0.01](https://discuss.elastic.co/t/remote-addr-showing-127-0-01/315738)
**Author:** [@AkankshaSS](https://discuss.elastic.co/u/AkankshaSS)\ **Replies:** 21\ **Last updated:** [October 7, 2022, 4:20pm UTC](https://discuss.elastic.co/t/remote-addr-showing-127-0-01/315738 "2022-10-07T16:20:46Z")
Hi,I am able to see only 127.0.01 in http-x\_forwarded\_for.Can someone please help me what's the changes required. --- ## [Customize Detection Columns?](https://discuss.elastic.co/t/customize-detection-columns/254455)
**Author:** [@ikiril01](https://discuss.elastic.co/u/ikiril01)\ **Replies:** 10\ **Last updated:** [November 13, 2020, 9:14pm UTC](https://discuss.elastic.co/t/customize-detection-columns/254455 "2020-11-13T21:14:01Z")
Is it possible to customize the columns in the detections alerts view? I'd like to incorporate some fields from the underlying events, if possible. --- ## [Kibana Discover view is very slow after upgrade - not compressing HTTP responses](https://discuss.elastic.co/t/kibana-discover-view-is-very-slow-after-upgrade-not-compressing-http-responses/276991)
**Author:** [@salvoj](https://discuss.elastic.co/u/salvoj)\ **Replies:** 9\ **Last updated:** [July 5, 2021, 8:28pm UTC](https://discuss.elastic.co/t/kibana-discover-view-is-very-slow-after-upgrade-not-compressing-http-responses/276991 "2021-07-05T20:28:34Z")
We have updated from 7.4.0 to 7.13.2 a few days ago. Performance in Discover view has greatly deteriorated. Query times are still good. Problem seems to be the long time it takes to render page: Query time: 1.3 sec T… --- ## [After changing the server ip address , Kibana does not work](https://discuss.elastic.co/t/after-changing-the-server-ip-address-kibana-does-not-work/265840)
**Author:** [@John\_biryon](https://discuss.elastic.co/u/John_biryon)\ **Replies:** 9\ **Last updated:** [March 15, 2021, 7:15pm UTC](https://discuss.elastic.co/t/after-changing-the-server-ip-address-kibana-does-not-work/265840 "2021-03-15T19:15:47Z")
Where do i go about to update the Kibana for the new IP address ? the ip address of the server had to be changed . Microsoft Windows 2012 r2, was working nicly before the change. many thanks John --- ## [Make variable configurable for plugin and reference in code](https://discuss.elastic.co/t/make-variable-configurable-for-plugin-and-reference-in-code/139414)
**Author:** [@rakey](https://discuss.elastic.co/u/rakey)\ **Replies:** 12\ **Last updated:** [August 30, 2018, 4:35pm UTC](https://discuss.elastic.co/t/make-variable-configurable-for-plugin-and-reference-in-code/139414 "2018-08-30T16:35:22Z")
using kibana 5.5.1. The aim is to make a variable through kibana.yml whose edits can be implemented without deleting and re-compiling the optimization folder. Below is the index.js export default function (kibana) { re… --- ## [Failed load Suricata Dashboard](https://discuss.elastic.co/t/failed-load-suricata-dashboard/219960)
**Author:** [@fgonzalez](https://discuss.elastic.co/u/fgonzalez)\ **Replies:** 11\ **Last updated:** [February 21, 2020, 3:42pm UTC](https://discuss.elastic.co/t/failed-load-suricata-dashboard/219960 "2020-02-21T15:42:05Z")
Good afternoon, I leave this post because in my ELK 7.6 I get the error you see below when loading the Meerkat Dashboard (the one that comes in the Stack) some idea of where the problem can go. Thank you very much for … --- ## [Adding a warm node](https://discuss.elastic.co/t/adding-a-warm-node/301663)
**Author:** [@Chris\_Stone](https://discuss.elastic.co/u/Chris_Stone)\ **Replies:** 15\ **Last updated:** [April 5, 2022, 11:07pm UTC](https://discuss.elastic.co/t/adding-a-warm-node/301663 "2022-04-05T23:07:26Z")
I've started with 4 ELK nodes: Host 1 Logstash & Kibana Host 2 Elasticsearch node-1 Host 3 Elasticsearch node-2 Host 4 Elasticsearch node-3 The stack is running 7.16.1 and has just over a years' worth of data. I'… --- ## [I want to import a 3GB system file to ELK in one go](https://discuss.elastic.co/t/i-want-to-import-a-3gb-system-file-to-elk-in-one-go/240572)
**Author:** [@Deepika\_Rawat](https://discuss.elastic.co/u/Deepika_Rawat)\ **Replies:** 21\ **Last updated:** [July 13, 2020, 9:08am UTC](https://discuss.elastic.co/t/i-want-to-import-a-3gb-system-file-to-elk-in-one-go/240572 "2020-07-13T09:08:52Z")
But it is showing Disk error.I installed graylog now but it is also not working .Will anyone be able to tell me how to read a 3 GB file in ELK or any other free open source software just like ELK if you will be able to t… --- ## [Elasticsearch with OpenJDK Early Access build](https://discuss.elastic.co/t/elasticsearch-with-openjdk-early-access-build/217439)
**Author:** [@Sourav\_Paul](https://discuss.elastic.co/u/Sourav_Paul)\ **Replies:** 9\ **Last updated:** [February 9, 2020, 4:45pm UTC](https://discuss.elastic.co/t/elasticsearch-with-openjdk-early-access-build/217439 "2020-02-09T16:45:42Z")
Elasticsearch does not allow OpenJDK Early access build to start with. Is there a way to bypass this check? --- ## [Help/Advice needed setting up geo-ip filters in an on-prem Logstash to SIEM in Elastic Cloud instance](https://discuss.elastic.co/t/help-advice-needed-setting-up-geo-ip-filters-in-an-on-prem-logstash-to-siem-in-elastic-cloud-instance/273593)
**Author:** [@ronmer](https://discuss.elastic.co/u/ronmer)\ **Replies:** 11\ **Last updated:** [May 27, 2021, 5:26am UTC](https://discuss.elastic.co/t/help-advice-needed-setting-up-geo-ip-filters-in-an-on-prem-logstash-to-siem-in-elastic-cloud-instance/273593 "2021-05-27T05:26:54Z")
I need help confirming the exact steps required to get geo-ip information to map to the SIEM network map in Kabana My environment: Windows and Linux hosts running either Auditbeat, Packetbeat or Winlogbeat, Packetbeat … --- ## [Help me get my cluster actually clustering, please](https://discuss.elastic.co/t/help-me-get-my-cluster-actually-clustering-please/14326)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 11\ **Last updated:** [November 8, 2013, 9:26pm UTC](https://discuss.elastic.co/t/help-me-get-my-cluster-actually-clustering-please/14326 "2013-11-08T21:26:03Z")
I have a single elasticsearch vm running and receiving data from logstash. To see about improving performance, and to learn how to use clustering, I created a second elasticsearch vm, and told it to use the same clus… --- ## ["stacktrace": \["org.apache.lucene.index.CorruptIndexException: compound sub-files must have a valid codec header and footer: file is too small (0 bytes) (resource=BufferedChecksumIndexInput)](https://discuss.elastic.co/t/stacktrace-org-apache-lucene-index-corruptindexexception-compound-sub-files-must-have-a-valid-codec-header-and-footer-file-is-too-small-0-bytes-resource-bufferedchecksumindexinput/338323)
**Author:** [@Aravindh\_M](https://discuss.elastic.co/u/Aravindh_M)\ **Replies:** 21\ **Last updated:** [July 28, 2023, 8:00am UTC](https://discuss.elastic.co/t/stacktrace-org-apache-lucene-index-corruptindexexception-compound-sub-files-must-have-a-valid-codec-header-and-footer-file-is-too-small-0-bytes-resource-bufferedchecksumindexinput/338323 "2023-07-28T08:00:43Z")
Recently, we have been encountering the "CorruptIndexException" frequently, accompanied by the following stacktrace: "org.apache.lucene.index.CorruptIndexException: compound sub-files must have a valid codec header and f… [Previous page](https://discuss.elastic.co/top.md?page=152&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=154&per_page=50&period=all)