# Top **URL:** https://discuss.elastic.co/top.md?page=155&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 156 --- ## [Machine Learning with unstructured log data freezes](https://discuss.elastic.co/t/machine-learning-with-unstructured-log-data-freezes/86017)
**Author:** [@Myles](https://discuss.elastic.co/u/Myles)\ **Replies:** 11\ **Last updated:** [May 17, 2017, 4:46pm UTC](https://discuss.elastic.co/t/machine-learning-with-unstructured-log-data-freezes/86017 "2017-05-17T16:46:23Z")
I have been using the new machine learning feature of 5.4 with great success with apache access logs and system metrics and wanted to try it out on my tomcat logs. I have about 50 tomcat applications all logging in the s… --- ## [How to increase autosuggest to 10?](https://discuss.elastic.co/t/how-to-increase-autosuggest-to-10/38960)
**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 9\ **Last updated:** [January 16, 2016, 5:09am UTC](https://discuss.elastic.co/t/how-to-increase-autosuggest-to-10/38960 "2016-01-16T05:09:02Z")
Now we are using completion suggester and the suggest we are getting is 5 results and we need to increase to 10 please help. Thanks in advance. --- ## [Lab material missing in "Elasticsearch Engineer 1 (On-Demand)" and Strigo not working](https://discuss.elastic.co/t/lab-material-missing-in-elasticsearch-engineer-1-on-demand-and-strigo-not-working/249337)
**Author:** [@marcus.konig](https://discuss.elastic.co/u/marcus.konig)\ **Replies:** 12\ **Last updated:** [September 30, 2020, 4:39pm UTC](https://discuss.elastic.co/t/lab-material-missing-in-elasticsearch-engineer-1-on-demand-and-strigo-not-working/249337 "2020-09-30T16:39:16Z")
Hi there, I am enrolled into "Elasticsearch Engineer 1 (On-Demand)" via my company account. Now there are several problems with the Strigo environment and a link to the dataset material ZIP is not provided - so I am loo… --- ## [Running Logstash from .NET Service](https://discuss.elastic.co/t/running-logstash-from-net-service/106946)
**Author:** [@sn001](https://discuss.elastic.co/u/sn001)\ **Replies:** 12\ **Last updated:** [November 14, 2017, 12:02pm UTC](https://discuss.elastic.co/t/running-logstash-from-net-service/106946 "2017-11-14T12:02:28Z")
Hi there, I am working on large scale data ingestion into Elastic Search indexes. We have a number of database records that we want to ingest into ES after we have detected delta changes in the database. We have .NET S… --- ## [Elasticsearch cluster corrupted](https://discuss.elastic.co/t/elasticsearch-cluster-corrupted/110721)
**Author:** [@dualcore](https://discuss.elastic.co/u/dualcore)\ **Replies:** 10\ **Last updated:** [December 8, 2017, 9:55pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-corrupted/110721 "2017-12-08T21:55:24Z")
I deleted my indices on account it filled up my hard drive and I couldn't login to Graylog. Now my Elasticsearch cluster is corrupted. Is there a way to remedy Elasticsearch to restore functionality to Graylog without a … --- ## [Kibana link is lost after authentication](https://discuss.elastic.co/t/kibana-link-is-lost-after-authentication/234362)
**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\ **Replies:** 11\ **Last updated:** [May 28, 2020, 7:25pm UTC](https://discuss.elastic.co/t/kibana-link-is-lost-after-authentication/234362 "2020-05-28T19:25:54Z")
When we click a kibana link to a dashboard, we occasionally lose the original link if the current session needs to re-authenticate, and we are left with the default screen after logging in. This is very problematic for s… --- ## [ES locks up and eat the heap](https://discuss.elastic.co/t/es-locks-up-and-eat-the-heap/9322)
**Author:** [@Julien\_Lancien](https://discuss.elastic.co/u/Julien_Lancien)\ **Replies:** 17\ **Last updated:** [October 16, 2012, 8:03am UTC](https://discuss.elastic.co/t/es-locks-up-and-eat-the-heap/9322 "2012-10-16T08:03:52Z")
Hey, So we had this cluster of 3 nodes, 2x32GB high mem/high cpu on ec2 + a smaller instance. No matter what we did, it would eventually run out of memory and lock up. So after a week of not sleeping keeping that … --- ## [Fleet Dashboard Not Loading or Taking Too Long to Load](https://discuss.elastic.co/t/fleet-dashboard-not-loading-or-taking-too-long-to-load/366657)
**Author:** [@prabhuteja](https://discuss.elastic.co/u/prabhuteja)\ **Replies:** 26\ **Last updated:** [November 11, 2024, 4:24am UTC](https://discuss.elastic.co/t/fleet-dashboard-not-loading-or-taking-too-long-to-load/366657 "2024-11-11T04:24:15Z")
Hi all, I am experiencing an issue with my Fleet dashboard in Kibana. It is either not loading or taking an extremely long time to load. Here are the details of my setup: Elasticsearch is running on svr15 (Ubuntu) in … --- ## [Elasticsearch audit log take more size](https://discuss.elastic.co/t/elasticsearch-audit-log-take-more-size/319627)
**Author:** [@Nitin08bisht](https://discuss.elastic.co/u/Nitin08bisht)\ **Replies:** 12\ **Last updated:** [December 12, 2022, 8:07am UTC](https://discuss.elastic.co/t/elasticsearch-audit-log-take-more-size/319627 "2022-12-12T08:07:01Z")
Hi Team, Elasticsearch audit log take 20-25 GB size every day. I'm using elasticsearch 7.16.2 and same version for filebeat. I have enable the audit key by enabling the below keys in elasticsearch.yml file. xpack.secur… --- ## [Datetime conversion error Logsatsh](https://discuss.elastic.co/t/datetime-conversion-error-logsatsh/213319)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 14\ **Last updated:** [January 2, 2020, 5:12am UTC](https://discuss.elastic.co/t/datetime-conversion-error-logsatsh/213319 "2020-01-02T05:12:50Z")
Hi Im having the below configuration in my logstash filter { xml { source =\> "result" target =\> "Incident" force\_array =\> false } date{ match =\> \[ "sys\_created\_on","yyyy-MM-dd HH:mm:ss"… --- ## [Bug in elasticsearch 5](https://discuss.elastic.co/t/bug-in-elasticsearch-5/75436)
**Author:** [@Kamaljit\_Pati](https://discuss.elastic.co/u/Kamaljit_Pati)\ **Replies:** 9\ **Last updated:** [February 17, 2017, 11:26am UTC](https://discuss.elastic.co/t/bug-in-elasticsearch-5/75436 "2017-02-17T11:26:52Z")
Hi All, I am going to update elasticsearch 2.3.3 to 5.2.0 in my organization. But 1 bug I noticed which was before in elasticsearch 2 also that if i run a script which continuously pushes data to elasticsearch without an… --- ## [Error in parse Geo\_point in logstash](https://discuss.elastic.co/t/error-in-parse-geo-point-in-logstash/112122)
**Author:** [@yaser](https://discuss.elastic.co/u/yaser)\ **Replies:** 11\ **Last updated:** [December 18, 2017, 9:32pm UTC](https://discuss.elastic.co/t/error-in-parse-geo-point-in-logstash/112122 "2017-12-18T21:32:12Z")
i send this json to logstash : { "location" :45.5 } this is my conf.d/config file :: input { rabbitmq { user =\> 'user' password =\> '' exchange =\> '' queue =\> '\*\*\*\*' durable =\> true host =\> 'ip' subscriptio… --- ## [My logstash conf file is not creating a test field](https://discuss.elastic.co/t/my-logstash-conf-file-is-not-creating-a-test-field/223711)
**Author:** [@Axl](https://discuss.elastic.co/u/Axl)\ **Replies:** 16\ **Last updated:** [March 24, 2020, 12:36pm UTC](https://discuss.elastic.co/t/my-logstash-conf-file-is-not-creating-a-test-field/223711 "2020-03-24T12:36:48Z")
I am using ELK 7.6.1. My configuration file /etc/logstash/conf.d/logstash-cowrie.conf does not appear to be taken in account. The logs show however that the file is being read (see below). So, probably it is not doing w… --- ## [Is there a filebat multline filter for 'start xxxx end' string?](https://discuss.elastic.co/t/is-there-a-filebat-multline-filter-for-start-xxxx-end-string/56772)
**Author:** [@zoplex](https://discuss.elastic.co/u/zoplex)\ **Replies:** 10\ **Last updated:** [August 2, 2016, 11:12pm UTC](https://discuss.elastic.co/t/is-there-a-filebat-multline-filter-for-start-xxxx-end-string/56772 "2016-08-02T23:12:30Z")
Hi, if there is a filebeat multiline filter for the following input lines: " STARTOFSTRING .. .... .... ... ENDOFSTRING could that be captured with filebeat.yml? The number of lines in between is variable, and the … --- ## [Logstash Input HTTP Plugin](https://discuss.elastic.co/t/logstash-input-http-plugin/42420)
**Author:** [@njbhatt18](https://discuss.elastic.co/u/njbhatt18)\ **Replies:** 9\ **Last updated:** [March 10, 2016, 6:44pm UTC](https://discuss.elastic.co/t/logstash-input-http-plugin/42420 "2016-03-10T18:44:39Z")
I am using logstash input plugin and capture all data post on specific port number. I would like to create custom field and during post method I want to capture data on custom field or variable. Can anyone help me for th… --- ## [Customizing Stack Management Page in Kibana](https://discuss.elastic.co/t/customizing-stack-management-page-in-kibana/258493)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 11\ **Last updated:** [February 26, 2021, 3:18pm UTC](https://discuss.elastic.co/t/customizing-stack-management-page-in-kibana/258493 "2021-02-26T15:18:37Z")
I would like to customize the stack management page as we only require access to the reporting link. I want to remove the other links since 99% of the user accessing this page will not have access to it. I would like t… --- ## [Can I upgrade my existing ELK setup to 8.x?](https://discuss.elastic.co/t/can-i-upgrade-my-existing-elk-setup-to-8-x/354129)
**Author:** [@Ravi\_Pattar](https://discuss.elastic.co/u/Ravi_Pattar)\ **Replies:** 28\ **Last updated:** [March 9, 2024, 1:53pm UTC](https://discuss.elastic.co/t/can-i-upgrade-my-existing-elk-setup-to-8-x/354129 "2024-03-09T13:53:14Z")
Hello, I have a query regarding the ELK stack upgrade from 7.17.15 to 8.11 or higher? Please note the current set up is of a production server and is on 7.17.15 and is also basic version (NOT a licensed version) also… --- ## [Elasticsearch ingest pipeline - not extract data passed from filebeat](https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-not-extract-data-passed-from-filebeat/279039)
**Author:** [@samiusan](https://discuss.elastic.co/u/samiusan)\ **Replies:** 12\ **Last updated:** [July 21, 2021, 1:55pm UTC](https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-not-extract-data-passed-from-filebeat/279039 "2021-07-21T13:55:19Z")
Hi, I'm slowly teaching myself the Elastic stack. Current project is attempting to ingest and modelling alerts from snort3 against the elastic common schema. I've run into an issue where an ingest pipeline is not correc… --- ## [SIEM app doesn't use Timezone setting](https://discuss.elastic.co/t/siem-app-doesnt-use-timezone-setting/216906)
**Author:** [@wconnell](https://discuss.elastic.co/u/wconnell)\ **Replies:** 12\ **Last updated:** [February 14, 2020, 4:28am UTC](https://discuss.elastic.co/t/siem-app-doesnt-use-timezone-setting/216906 "2020-02-14T04:28:39Z")
I set the "Timezone for date formatting" to UTC in the Advanced settings, so all my dashboards and visualizations use it as expected. However the SIEM app seems to use the browser settings which throws things off. Is the… --- ## [Could Not Index Event to Elasticsearch Error?](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-error/314188)
**Author:** [@Priyanka4](https://discuss.elastic.co/u/Priyanka4)\ **Replies:** 14\ **Last updated:** [September 13, 2022, 12:42pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-error/314188 "2022-09-13T12:42:43Z")
message: \[2022-09-12T11:02:46,381\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\]\[2a206be8e9b0598adfe625bef432d5a7f49b90230ff74f12fb3baf9c5024173f\] Could not index event to Elasticsearch. {:status=\>400, :action= --- ## [Logstash stopping randomly after few hours](https://discuss.elastic.co/t/logstash-stopping-randomly-after-few-hours/90383)
**Author:** [@gautamv](https://discuss.elastic.co/u/gautamv)\ **Replies:** 10\ **Last updated:** [June 29, 2017, 8:36am UTC](https://discuss.elastic.co/t/logstash-stopping-randomly-after-few-hours/90383 "2017-06-29T08:36:03Z")
Hi, I'm getting a random error when I run logstash: 16:30:26.240 \[\[main\]\>worker0\] ERROR logstash.pipeline - Exception in pipelineworker, the pipeline stopped processing new events, please check your filter configura… --- ## [Mutate join filter](https://discuss.elastic.co/t/mutate-join-filter/186884)
**Author:** [@Andreasky](https://discuss.elastic.co/u/Andreasky)\ **Replies:** 17\ **Last updated:** [July 5, 2019, 9:22am UTC](https://discuss.elastic.co/t/mutate-join-filter/186884 "2019-07-05T09:22:06Z")
Is it possible to use the mutate join filter to make it possible to make queries across indexes in Kibana? Like joining tables in SQL? --- ## [AWS metricbeat config, Access Denied](https://discuss.elastic.co/t/aws-metricbeat-config-access-denied/228548)
**Author:** [@kmroz](https://discuss.elastic.co/u/kmroz)\ **Replies:** 15\ **Last updated:** [April 21, 2020, 1:48pm UTC](https://discuss.elastic.co/t/aws-metricbeat-config-access-denied/228548 "2020-04-21T13:48:23Z")
Hello, I am trying to configure Metricbeat to collect AWS metrics. I have tried configuring it to use credential profile and even explicity setting the access keys inside the yml. It keeps saying I dont have enough perm… --- ## [Http requests as a beat](https://discuss.elastic.co/t/http-requests-as-a-beat/148019)
**Author:** [@mattz](https://discuss.elastic.co/u/mattz)\ **Replies:** 9\ **Last updated:** [September 13, 2018, 7:02pm UTC](https://discuss.elastic.co/t/http-requests-as-a-beat/148019 "2018-09-13T19:02:26Z")
I have a small golang application that listens to http post requests on various routes. The data received represents messages on a messaging bus. Our current solution is to write json to a file that's tail'd by filebeat. … --- ## [Community Beats - Unitybeat creation of binary](https://discuss.elastic.co/t/community-beats-unitybeat-creation-of-binary/243218)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 12\ **Last updated:** [August 6, 2020, 2:11am UTC](https://discuss.elastic.co/t/community-beats-unitybeat-creation-of-binary/243218 "2020-08-06T02:11:44Z")
Testing/Running this on a Windows 10 machine so that I can install it on a Dell EMC server. I'm trying to utilize the Community Beat, Unitybeat, and I've installed Go and tested it out with the instruction from here, ht… --- ## [@timestamp field slow range query "DocValuesFieldExistsQuery"](https://discuss.elastic.co/t/timestamp-field-slow-range-query-docvaluesfieldexistsquery/234995)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 12\ **Last updated:** [June 22, 2020, 2:27pm UTC](https://discuss.elastic.co/t/timestamp-field-slow-range-query-docvaluesfieldexistsquery/234995 "2020-06-22T14:27:31Z")
Hi! I was profiling my queries and I run into this: According to this thread there's isn't anything I can do to avoid this behavior and it seems that the newest ES version has older Lucene version (8.5) which doesn't… --- ## [Error metricbeat sending json data to elastic search](https://discuss.elastic.co/t/error-metricbeat-sending-json-data-to-elastic-search/192582)
**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\ **Replies:** 18\ **Last updated:** [August 1, 2019, 8:21pm UTC](https://discuss.elastic.co/t/error-metricbeat-sending-json-data-to-elastic-search/192582 "2019-08-01T20:21:06Z")
Hi I haven't tried this before. I am trying to send jenkins build data to elastic search. I am seeing some error. Elastic stack : 7.2 My jenkins url response is like this. http://master.example.com//job/Federated\_In… --- ## [Doubts about hardware requirements for elasticsearch](https://discuss.elastic.co/t/doubts-about-hardware-requirements-for-elasticsearch/235545)
**Author:** [@eayala](https://discuss.elastic.co/u/eayala)\ **Replies:** 10\ **Last updated:** [June 5, 2020, 1:18pm UTC](https://discuss.elastic.co/t/doubts-about-hardware-requirements-for-elasticsearch/235545 "2020-06-05T13:18:40Z")
I'm trying to setup elasticsearch cluster. I will get maximum of 4GB of data every day. So what will be hardware required to set up ElasticSearch 7.6.2 and kibana 7.6.2 What is ideal configuration for server- side RAM/… --- ## [Kibana do not see logstash and filebeat](https://discuss.elastic.co/t/kibana-do-not-see-logstash-and-filebeat/140767)
**Author:** [@m.sereda](https://discuss.elastic.co/u/m.sereda)\ **Replies:** 10\ **Last updated:** [July 25, 2018, 5:27pm UTC](https://discuss.elastic.co/t/kibana-do-not-see-logstash-and-filebeat/140767 "2018-07-25T17:27:04Z")
Hi, I have just installed ELK and got this mistake in Kibana. Could anyone help me? filebeat.yml #=========================== Filebeat inputs ============================= filebeat.prospectors: # Each - is an input.… --- ## [ECK Fleet startup failure on ECK on Cloud](https://discuss.elastic.co/t/eck-fleet-startup-failure-on-eck-on-cloud/281700)
**Author:** [@vaibhavsw](https://discuss.elastic.co/u/vaibhavsw)\ **Replies:** 9\ **Last updated:** [September 2, 2021, 10:27am UTC](https://discuss.elastic.co/t/eck-fleet-startup-failure-on-eck-on-cloud/281700 "2021-09-02T10:27:20Z")
I followed the latest documentation to start a fleet server on Kubernetes, though both Elastic Agent and Fleet Server are throwing below error. cp: cannot stat '/mnt/elastic-internal/elasticsearch-association/vulcan/ela… --- ## [Загрузка файлов с помощью Ingest attachment plugin](https://discuss.elastic.co/t/ingest-attachment-plugin/279297)
**Author:** [@Jenya87](https://discuss.elastic.co/u/Jenya87)\ **Replies:** 9\ **Last updated:** [July 26, 2021, 5:11pm UTC](https://discuss.elastic.co/t/ingest-attachment-plugin/279297 "2021-07-26T17:11:53Z")
Доброго времени суток. Использую версию ES 7.13 на Centos 7 + Ingest attachment плагин. Вопрос такой: возможно ли используя данный плагин брать файлы с сетевой папки windows, вытягивать из них текст (файлы .doc, .do… --- ## [Help writing Watcher](https://discuss.elastic.co/t/help-writing-watcher/119803)
**Author:** [@Adren](https://discuss.elastic.co/u/Adren)\ **Replies:** 11\ **Last updated:** [February 15, 2018, 7:36am UTC](https://discuss.elastic.co/t/help-writing-watcher/119803 "2018-02-15T07:36:08Z")
Hello, I have troubles writing a watcher which will watch (obviously) a field in my logs. I have a field called "sev" who has a number for each log, and I want to monitore it. For Example if I have sev = 1. It'll send m… --- ## [Unable to ship data to logstash 6.8 via Python](https://discuss.elastic.co/t/unable-to-ship-data-to-logstash-6-8-via-python/239677)
**Author:** [@Swetha\_B](https://discuss.elastic.co/u/Swetha_B)\ **Replies:** 10\ **Last updated:** [July 3, 2020, 4:32am UTC](https://discuss.elastic.co/t/unable-to-ship-data-to-logstash-6-8-via-python/239677 "2020-07-03T04:32:34Z")
We have a Python script to collect data and ship to Logstash. Please find the python script and logstash config below. import socket import json import logging from datetime import datetime import sys print("starting t… --- ## [Logstash JDBC Output to Postgres case-sensitive issue](https://discuss.elastic.co/t/logstash-jdbc-output-to-postgres-case-sensitive-issue/351881)
**Author:** [@h\_ng\_d\_ng](https://discuss.elastic.co/u/h_ng_d_ng)\ **Replies:** 9\ **Last updated:** [January 28, 2024, 9:53am UTC](https://discuss.elastic.co/t/logstash-jdbc-output-to-postgres-case-sensitive-issue/351881 "2024-01-28T09:53:03Z")
Hi, i got issue with logstash when trying to import data to postgres table. here are my output config: and it always show error that :\[ERROR\] 2024-01-26 20:22:38.348 \[\[main\]\>worker0\] jdbc - JDBC - Exception. Not retr… --- ## [New to ElasticSearch - killed at startup / ES 6.5 openjdk 11 OpenVZ Debian 9](https://discuss.elastic.co/t/new-to-elasticsearch-killed-at-startup-es-6-5-openjdk-11-openvz-debian-9/159551)
**Author:** [@sophierules](https://discuss.elastic.co/u/sophierules)\ **Replies:** 14\ **Last updated:** [December 27, 2018, 7:21pm UTC](https://discuss.elastic.co/t/new-to-elasticsearch-killed-at-startup-es-6-5-openjdk-11-openvz-debian-9/159551 "2018-12-27T19:21:23Z")
Hi, I just installed ES from your repository on an OpenVZ container running Debian 9 /64bit. The only messages I get from it at startup are below. It dies the same way when I call from systemd, or from the command line… --- ## [Forwarding logs from logstashA to LogstashB to Kibana](https://discuss.elastic.co/t/forwarding-logs-from-logstasha-to-logstashb-to-kibana/70609)
**Author:** [@Maria\_Delarosa](https://discuss.elastic.co/u/Maria_Delarosa)\ **Replies:** 9\ **Last updated:** [January 6, 2017, 3:53pm UTC](https://discuss.elastic.co/t/forwarding-logs-from-logstasha-to-logstashb-to-kibana/70609 "2017-01-06T15:53:24Z")
I am currently trying to implement my own "logstash-forwarder". I am running this from a local windows machine and I am succefully able to send logs from one logstash instance to Kibana. However, I would like to be able … --- ## [Elasticsearch migration plugin: Blank page](https://discuss.elastic.co/t/elasticsearch-migration-plugin-blank-page/55163)
**Author:** [@Moshe\_Sucaz](https://discuss.elastic.co/u/Moshe_Sucaz)\ **Replies:** 9\ **Last updated:** [July 13, 2016, 7:06am UTC](https://discuss.elastic.co/t/elasticsearch-migration-plugin-blank-page/55163 "2016-07-13T07:06:21Z")
In order to upgrade our 1.5.2 elasticsearch to 2.x, I have successfully installed elasticsearch migration plugin v1.18, but when linking to http://localhost:9200/\_plugin/migration/ I get blank page. also next command giv… --- ## [Is there any way to implement autofill and autogenerate results feature in Elasticsearch](https://discuss.elastic.co/t/is-there-any-way-to-implement-autofill-and-autogenerate-results-feature-in-elasticsearch/51501)
**Author:** [@ASN](https://discuss.elastic.co/u/ASN)\ **Replies:** 9\ **Last updated:** [June 2, 2016, 6:58am UTC](https://discuss.elastic.co/t/is-there-any-way-to-implement-autofill-and-autogenerate-results-feature-in-elasticsearch/51501 "2016-06-02T06:58:47Z")
Hi, I'm trying to do a document search application using Elastic search(NEST client)\[I'm indexing the word documents as an attachment as of now\]. I would like to know if there is way to do an auto fill feature using ES… --- ## [Threat Hunting Report for Elasticsearch](https://discuss.elastic.co/t/threat-hunting-report-for-elasticsearch/246540)
**Author:** [@syafeera](https://discuss.elastic.co/u/syafeera)\ **Replies:** 10\ **Last updated:** [September 9, 2020, 1:25am UTC](https://discuss.elastic.co/t/threat-hunting-report-for-elasticsearch/246540 "2020-09-09T01:25:13Z")
Hi there, Did anyone here know how to do Threat Hunting report using SIEM in Kibana? --- ## [Installation steps for logstash](https://discuss.elastic.co/t/installation-steps-for-logstash/2656)
**Author:** [@Yatish\_Gopal](https://discuss.elastic.co/u/Yatish_Gopal)\ **Replies:** 10\ **Last updated:** [August 5, 2015, 8:33am UTC](https://discuss.elastic.co/t/installation-steps-for-logstash/2656 "2015-08-05T08:33:56Z")
Hello everybody, is their any complete documents with clear steps to install logstash, kibanan, elastic & nginx on centos. We are doing a POC but still not able to install the suite. Can any body point to the good docume… --- ## [Building plugin in Kibana 7.8.0](https://discuss.elastic.co/t/building-plugin-in-kibana-7-8-0/259981)
**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\ **Replies:** 11\ **Last updated:** [January 11, 2021, 12:08pm UTC](https://discuss.elastic.co/t/building-plugin-in-kibana-7-8-0/259981 "2021-01-11T12:08:46Z")
I've built my own plugin in Kibana 7.8.0. I'm now trying to do a yarn build command to build the plugin so I can install it on our dev server. I created the plugin using the node scripts/generate-plugin command. However,… --- ## [Slowly Indexing speed](https://discuss.elastic.co/t/slowly-indexing-speed/241733)
**Author:** [@liron\_gofberg](https://discuss.elastic.co/u/liron_gofberg)\ **Replies:** 25\ **Last updated:** [July 21, 2020, 5:17am UTC](https://discuss.elastic.co/t/slowly-indexing-speed/241733 "2020-07-21T05:17:38Z")
Hi, I insert bulk into elasticsearch with c++ client each bulk contains 30,000 documents each document has 40 numeric fields indexing duration is about 13 seconds the data in each bulk is targeted to one shard in on… --- ## [Elasticsearch will not properly boot without localhost settings](https://discuss.elastic.co/t/elasticsearch-will-not-properly-boot-without-localhost-settings/238881)
**Author:** [@mevans1101](https://discuss.elastic.co/u/mevans1101)\ **Replies:** 10\ **Last updated:** [July 6, 2020, 2:44pm UTC](https://discuss.elastic.co/t/elasticsearch-will-not-properly-boot-without-localhost-settings/238881 "2020-07-06T14:44:13Z")
Hello everyone. I've exhausted nearly all forms of documentation and forum searches, and I've yet been able to get elasticsearch to outside of local settings. For some background: I need elasticsearch to be able to com… --- ## [Failed to load xpackplugin, please help, urgent](https://discuss.elastic.co/t/failed-to-load-xpackplugin-please-help-urgent/112719)
**Author:** [@Derrick](https://discuss.elastic.co/u/Derrick)\ **Replies:** 10\ **Last updated:** [December 21, 2017, 1:57am UTC](https://discuss.elastic.co/t/failed-to-load-xpackplugin-please-help-urgent/112719 "2017-12-21T01:57:47Z")
\[2017-12-20T20:55:32,603\]\[WARN \]\[o.e.d.c.s.Settings \] \[keystore.password\] setting was deprecated in Elasticsearch and will be removed in a future release! See the breaking changes documentation for the next major v… --- ## [Creating a watcher with more conditions - how to](https://discuss.elastic.co/t/creating-a-watcher-with-more-conditions-how-to/249815)
**Author:** [@mathric](https://discuss.elastic.co/u/mathric)\ **Replies:** 11\ **Last updated:** [October 22, 2020, 12:48pm UTC](https://discuss.elastic.co/t/creating-a-watcher-with-more-conditions-how-to/249815 "2020-10-22T12:48:39Z")
Hey. Imagine you have the following data set: { "\_index": "myindex", "\_type": "\_doc", "\_id": "0f3e7c49b480a4d7ea2352a424ae8550", "\_version": 1, "\_score": null, "\_source": { "Measurement.Warning": 0.2, … --- ## [Kibana Error when showing transaction details: TypeError: Cannot read property 'prototype' of undefined](https://discuss.elastic.co/t/kibana-error-when-showing-transaction-details-typeerror-cannot-read-property-prototype-of-undefined/168382)
**Author:** [@Messias\_2](https://discuss.elastic.co/u/Messias_2)\ **Replies:** 9\ **Last updated:** [February 22, 2019, 12:36pm UTC](https://discuss.elastic.co/t/kibana-error-when-showing-transaction-details-typeerror-cannot-read-property-prototype-of-undefined/168382 "2019-02-22T12:36:36Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: v6.6… --- ## [Filebeat clients unable to publish events to logstash](https://discuss.elastic.co/t/filebeat-clients-unable-to-publish-events-to-logstash/378592)
**Author:** [@MajorNickle](https://discuss.elastic.co/u/MajorNickle)\ **Replies:** 31\ **Last updated:** [December 31, 2025, 2:42am UTC](https://discuss.elastic.co/t/filebeat-clients-unable-to-publish-events-to-logstash/378592 "2025-12-31T02:42:21Z")
Hi all, I had a filebeat to logstash setup running successfully for the past months where both services where running on the same host. I recently moved filebeat to it's own server in a different zone. I am able to hit … --- ## [Create/delete index goes slow when shards number up to 10000](https://discuss.elastic.co/t/create-delete-index-goes-slow-when-shards-number-up-to-10000/80083)
**Author:** [@hooooly](https://discuss.elastic.co/u/hooooly)\ **Replies:** 10\ **Last updated:** [March 27, 2017, 2:18pm UTC](https://discuss.elastic.co/t/create-delete-index-goes-slow-when-shards-number-up-to-10000/80083 "2017-03-27T14:18:49Z")
create indexes with 30 shards one by one,when shards number up to 10000 in elasticsearch cluster,i found creation operation goes very slow. --- ## [ECE - SAML integration error](https://discuss.elastic.co/t/ece-saml-integration-error/180616)
**Author:** [@afuggetta](https://discuss.elastic.co/u/afuggetta)\ **Replies:** 11\ **Last updated:** [May 15, 2019, 2:33pm UTC](https://discuss.elastic.co/t/ece-saml-integration-error/180616 "2019-05-15T14:33:42Z")
Hello, I am trying to setup a SAML integration between ECE and PingFedaration. I have setup the new SAML provider and I get the following error: Authentication cluster failed to process the request Message: Authentica… --- ## [MySql Query is taking more to execute](https://discuss.elastic.co/t/mysql-query-is-taking-more-to-execute/149939)
**Author:** [@JoseRohit](https://discuss.elastic.co/u/JoseRohit)\ **Replies:** 14\ **Last updated:** [September 27, 2018, 12:58pm UTC](https://discuss.elastic.co/t/mysql-query-is-taking-more-to-execute/149939 "2018-09-27T12:58:37Z")
I'm migrating MYSQL data to ElasticSearch using logstash. The table has more than 9 crore records. I have tested the query in mysql workbeanch which is taking 0.032 sec to execute. When i run it from logstash, its taki… [Previous page](https://discuss.elastic.co/top.md?page=154&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=156&per_page=50&period=all)