# Top **URL:** https://discuss.elastic.co/top.md?page=1555&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1556 --- ## [How to simulate output from Winlogbeat to logstash for testing](https://discuss.elastic.co/t/how-to-simulate-output-from-winlogbeat-to-logstash-for-testing/154309)
**Author:** [@gasparuben](https://discuss.elastic.co/u/gasparuben)\ **Replies:** 3\ **Last updated:** [October 28, 2018, 11:14pm UTC](https://discuss.elastic.co/t/how-to-simulate-output-from-winlogbeat-to-logstash-for-testing/154309 "2018-10-28T23:14:08Z")
hello, I am trying to write some logstash rules to capture log on/off events on Windows machines. To extract security events from the Eventvwr I do something like that on eventvwr: $starttime = (get-date).addhours(-1… --- ## [Logstash plugin is successfully installed but not found](https://discuss.elastic.co/t/logstash-plugin-is-successfully-installed-but-not-found/58596)
**Author:** [@sen](https://discuss.elastic.co/u/sen)\ **Replies:** 0\ **Last updated:** [August 22, 2016, 5:01pm UTC](https://discuss.elastic.co/t/logstash-plugin-is-successfully-installed-but-not-found/58596 "2016-08-22T17:01:59Z")
Hi folks, I am using logstash 2.3.2 and for one of my project I have to save some data in RAM. I asked a question on stackoverflow (Logstash: is it possible to save documents in memory?) to get a filter for that and the… --- ## [OutOfMemory Error occurred When Flush shard](https://discuss.elastic.co/t/outofmemory-error-occurred-when-flush-shard/22462)
**Author:** [@xiaoliang\_tian](https://discuss.elastic.co/u/xiaoliang_tian)\ **Replies:** 3\ **Last updated:** [March 2, 2015, 9:20am UTC](https://discuss.elastic.co/t/outofmemory-error-occurred-when-flush-shard/22462 "2015-03-02T09:20:22Z")
The Version is 0.90.13 There is Out of memory error occurred when flushing shard How could I resolve this error? Any suggestion to prevent it. Below is the cluster situation: 5 data node,1 master and 1 searc… --- ## [Asciifolding character filter](https://discuss.elastic.co/t/asciifolding-character-filter/21716)
**Author:** [@Mathijs\_Biesmans](https://discuss.elastic.co/u/Mathijs_Biesmans)\ **Replies:** 3\ **Last updated:** [January 20, 2015, 11:38pm UTC](https://discuss.elastic.co/t/asciifolding-character-filter/21716 "2015-01-20T23:38:47Z")
I'm curious whether there exists an asciifolding \*character\* filter, I know there is a asciifolding \*token\* filter and that the analysis chain works as follows: input text \> char\_filter \> tokenizer \> token filter \> o… --- ## [ELK APM .NET System.NullReferenceException](https://discuss.elastic.co/t/elk-apm-net-system-nullreferenceexception/321765)
**Author:** [@aysekisik\_kisilan](https://discuss.elastic.co/u/aysekisik_kisilan)\ **Replies:** 5\ **Last updated:** [December 22, 2022, 11:53am UTC](https://discuss.elastic.co/t/elk-apm-net-system-nullreferenceexception/321765 "2022-12-22T11:53:15Z")
Kibana version: 8.5.3 Elasticsearch version: 8.5.3 APM Server version: 8.5.3 APM Agent language and version: C# .NET 4.7.3, Agent Profiler Version: v1.19.0 Browser version: N/A Profiler Auto instrumentation: Inter… --- ## [Elastic unable to start after turning it off](https://discuss.elastic.co/t/elastic-unable-to-start-after-turning-it-off/313532)
**Author:** [@pabloochoa](https://discuss.elastic.co/u/pabloochoa)\ **Replies:** 5\ **Last updated:** [September 14, 2022, 6:37am UTC](https://discuss.elastic.co/t/elastic-unable-to-start-after-turning-it-off/313532 "2022-09-14T06:37:43Z")
Hello, I have a cluster of 3 ES nodes that use 7.16.3. All of them are both masters and data (as I am trying to deploy a minimal ES cluster that is resistant to the failure of one of the nodes). Maybe this is not a good… --- ## [1h difference between rollover time and action time](https://discuss.elastic.co/t/1h-difference-between-rollover-time-and-action-time/300895)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 5\ **Last updated:** [March 31, 2022, 9:07am UTC](https://discuss.elastic.co/t/1h-difference-between-rollover-time-and-action-time/300895 "2022-03-31T09:07:23Z")
Hi, I noticed that despite my indexes are being rolled over at midnight, the "index phase time" and "index action time" are with 2h difference apart, like: { "indices" : { "suricata-ids-2022.03.28-000021" : { … --- ## [Filtering by fIeld not suggesting/showing any values](https://discuss.elastic.co/t/filtering-by-field-not-suggesting-showing-any-values/194033)
**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\ **Replies:** 5\ **Last updated:** [August 14, 2019, 6:00am UTC](https://discuss.elastic.co/t/filtering-by-field-not-suggesting-showing-any-values/194033 "2019-08-14T06:00:41Z")
Hi, I am using ELK stack version 5.5.0 . I am not able to see suggestions or autocomplete values in filter by filed section of kibana. I tried even with fileld .keyword but its not suggesting any values. Please help … --- ## [Kibana Failed to start after creating a new plugin](https://discuss.elastic.co/t/kibana-failed-to-start-after-creating-a-new-plugin/191685)
**Author:** [@fathi\_rida](https://discuss.elastic.co/u/fathi_rida)\ **Replies:** 5\ **Last updated:** [July 23, 2019, 3:24pm UTC](https://discuss.elastic.co/t/kibana-failed-to-start-after-creating-a-new-plugin/191685 "2019-07-23T15:24:02Z")
please, brothers, do you have any suggestions? --- ## [Unable to use alias in index pattern creation](https://discuss.elastic.co/t/unable-to-use-alias-in-index-pattern-creation/176122)
**Author:** [@justinw](https://discuss.elastic.co/u/justinw)\ **Replies:** 5\ **Last updated:** [April 15, 2019, 11:04pm UTC](https://discuss.elastic.co/t/unable-to-use-alias-in-index-pattern-creation/176122 "2019-04-15T23:04:06Z")
Hi, I've seen a few old discuss posts about this, and this PR claims to fix it, but myself and others are still having issues using an alias for index pattern creation. Furthermore, creating the pattern on an older ver… --- ## [Visulaization error](https://discuss.elastic.co/t/visulaization-error/136201)
**Author:** [@Shree](https://discuss.elastic.co/u/Shree)\ **Replies:** 5\ **Last updated:** [June 17, 2018, 10:58am UTC](https://discuss.elastic.co/t/visulaization-error/136201 "2018-06-17T10:58:55Z")
Hi, I am new to ELK, while installing Metricbeat i got the mentioned error, but i'm getting the results in discover. Could any one help me to solve this please???? Saved Visualization Service: Visualization type of "m… --- ## [Not forced awareness](https://discuss.elastic.co/t/not-forced-awareness/78880)
**Author:** [@theundefined](https://discuss.elastic.co/u/theundefined)\ **Replies:** 5\ **Last updated:** [March 20, 2017, 10:25am UTC](https://discuss.elastic.co/t/not-forced-awareness/78880 "2017-03-20T10:25:39Z")
Hi! I play with awareness. I have 2 racks: rack1 and rack2. In rack1 i have 2 elastic nodes(rack1-node1 and rack1-node2), in rack2 i have 1 elastic node(rack2-node1). I've configured on rack1-node1 and rack1-node2: nod… --- ## [Snapshot to AWS S3 failing ES 1.2.2 Cloud AWS 2.2.0](https://discuss.elastic.co/t/snapshot-to-aws-s3-failing-es-1-2-2-cloud-aws-2-2-0/19871)
**Author:** [@rhea\_ghosh](https://discuss.elastic.co/u/rhea_ghosh)\ **Replies:** 5\ **Last updated:** [September 18, 2014, 10:02pm UTC](https://discuss.elastic.co/t/snapshot-to-aws-s3-failing-es-1-2-2-cloud-aws-2-2-0/19871 "2014-09-18T22:02:26Z")
Hi I'm trying to get snapshots up to an AWS S3 bucket from an elasticsearch cluster. I've successfully managed to install cloud-aws 2.2.0 and I believe this should be the right version that I need. So when I c… --- ## [termQuery vs. termFilter](https://discuss.elastic.co/t/termquery-vs-termfilter/4839)
**Author:** [@Karussell1](https://discuss.elastic.co/u/Karussell1)\ **Replies:** 5\ **Last updated:** [July 12, 2011, 5:40pm UTC](https://discuss.elastic.co/t/termquery-vs-termfilter/4839 "2011-07-12T17:40:37Z")
Which query should I prefer? This filter query: srb.setQuery(QueryBuilders.filteredQuery(QueryBuilders.matchAllQuery(), FilterBuilders.termFilter("someField", "someValue"))); or this termQuery: s… --- ## [2 agents on a machine?](https://discuss.elastic.co/t/2-agents-on-a-machine/346114)
**Author:** [@Nightingale\_John](https://discuss.elastic.co/u/Nightingale_John)\ **Replies:** 1\ **Last updated:** [October 31, 2023, 12:36pm UTC](https://discuss.elastic.co/t/2-agents-on-a-machine/346114 "2023-10-31T12:36:41Z")
Hi All, I'm wondering if anyone has any experience of putting 2 elastic agents on a machine? We've got a client who is using elastic for monitoring, and we need to have the elastic agent on for security.. this is on Mi… --- ## [Some fleet agent are not reporting to fleet server and cpu,memory metrics are not showing on fleet manager UI .Please suggest how i can troubleshoot](https://discuss.elastic.co/t/some-fleet-agent-are-not-reporting-to-fleet-server-and-cpu-memory-metrics-are-not-showing-on-fleet-manager-ui-please-suggest-how-i-can-troubleshoot/336068)
**Author:** [@irshadalam](https://discuss.elastic.co/u/irshadalam)\ **Replies:** 1\ **Last updated:** [July 3, 2023, 9:16am UTC](https://discuss.elastic.co/t/some-fleet-agent-are-not-reporting-to-fleet-server-and-cpu-memory-metrics-are-not-showing-on-fleet-manager-ui-please-suggest-how-i-can-troubleshoot/336068 "2023-07-03T09:16:31Z")
Hi,Some fleet agent are not reporting cpu,memory metrics on fleet manager UI portal. I have checked below - 1.Agent installed and showing in healthy state. 2.telnet to fleet server is fine. 3.ca certificate are also … --- ## [Setup to optimize Kibana performance](https://discuss.elastic.co/t/setup-to-optimize-kibana-performance/139811)
**Author:** [@dr\_dob](https://discuss.elastic.co/u/dr_dob)\ **Replies:** 1\ **Last updated:** [July 12, 2018, 7:36pm UTC](https://discuss.elastic.co/t/setup-to-optimize-kibana-performance/139811 "2018-07-12T19:36:49Z")
Hi, Hoping to get some input and guidance on my Kibana setup to optimize its performance for clients. Currently, Kibana is running on a separate AWS machine than ES and connecting remotely The machine hosting Kibana i… --- ## [Logstash + Elasticsearch returns class\_cast\_exception error](https://discuss.elastic.co/t/logstash-elasticsearch-returns-class-cast-exception-error/117774)
**Author:** [@riccardo](https://discuss.elastic.co/u/riccardo)\ **Replies:** 1\ **Last updated:** [January 31, 2018, 12:09pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-returns-class-cast-exception-error/117774 "2018-01-31T12:09:52Z")
Hi, I currently have an intermittent problem: logstash fails to index documents in elasticsearch and gets: \[logstash.outputs.elasticsearch\] retrying failed action with response code: 500 ({"type"=\>"class\_cast\_exceptio… --- ## [Fulltext search with fuzziness on strings containing numbers](https://discuss.elastic.co/t/fulltext-search-with-fuzziness-on-strings-containing-numbers/116034)
**Author:** [@nampord](https://discuss.elastic.co/u/nampord)\ **Replies:** 1\ **Last updated:** [January 26, 2018, 11:40pm UTC](https://discuss.elastic.co/t/fulltext-search-with-fuzziness-on-strings-containing-numbers/116034 "2018-01-26T23:40:20Z")
I have a use case where I need to match address strings. Since the addresses come in many different shapes and forms I decided to put all fields in one string and do a full text search. The main match will be done on t… --- ## [S3 Input Plugin randomly fails](https://discuss.elastic.co/t/s3-input-plugin-randomly-fails/115342)
**Author:** [@kpaulsenegain](https://discuss.elastic.co/u/kpaulsenegain)\ **Replies:** 1\ **Last updated:** [January 12, 2018, 5:18pm UTC](https://discuss.elastic.co/t/s3-input-plugin-randomly-fails/115342 "2018-01-12T17:18:02Z")
I'm using Logstash version 6.0.1 and S3 plugin logstash-input 3.2.0. I'm trying to process Web Server IIS Access logs files from a S3 bucket. The files are large 2.4 GB. The issue is that it works basically but random… --- ## [Use Kibana to find API endpoints with most number of inter-service calls](https://discuss.elastic.co/t/use-kibana-to-find-api-endpoints-with-most-number-of-inter-service-calls/89481)
**Author:** [@feicipet](https://discuss.elastic.co/u/feicipet)\ **Replies:** 1\ **Last updated:** [June 15, 2017, 8:59am UTC](https://discuss.elastic.co/t/use-kibana-to-find-api-endpoints-with-most-number-of-inter-service-calls/89481 "2017-06-15T08:59:59Z")
Hi, I have a bunch of microservices that are calling each other. Say I have serviceA, serviceB and serviceC, the call sequence may look like: API GW -\> ServiceA.endpointA1 -\> ServiceB.endpointB1 -\> ServiceC.endpointC… --- ## [How do I turn on access logs for Elasticsearch REST API?](https://discuss.elastic.co/t/how-do-i-turn-on-access-logs-for-elasticsearch-rest-api/75938)
**Author:** [@lin-zhao](https://discuss.elastic.co/u/lin-zhao)\ **Replies:** 1\ **Last updated:** [February 21, 2017, 11:22pm UTC](https://discuss.elastic.co/t/how-do-i-turn-on-access-logs-for-elasticsearch-rest-api/75938 "2017-02-21T23:22:52Z")
I would like to log HTTP queries to elasticsearch API and their responses, similar to access logs to Apache. Is there a way to do so? --- ## [Logstash failed to open file](https://discuss.elastic.co/t/logstash-failed-to-open-file/65019)
**Author:** [@Salafer](https://discuss.elastic.co/u/Salafer)\ **Replies:** 1\ **Last updated:** [November 23, 2016, 4:24pm UTC](https://discuss.elastic.co/t/logstash-failed-to-open-file/65019 "2016-11-23T16:24:14Z")
Hi i have a simple problem. Logstash 5.0 can't open my log file. It simply say: \[2016-11-04T16:11:39,838\]\[WARN \]\[logstash.inputs.file \] failed to open /logs/icp2/localhost\_access\_log.2016-10-31.txt: \\logs\\icp2\\loca… --- ## [Error installing plugin shield in Kibana](https://discuss.elastic.co/t/error-installing-plugin-shield-in-kibana/61267)
**Author:** [@scosta](https://discuss.elastic.co/u/scosta)\ **Replies:** 1\ **Last updated:** [October 10, 2016, 7:30pm UTC](https://discuss.elastic.co/t/error-installing-plugin-shield-in-kibana/61267 "2016-10-10T19:30:17Z")
Good Morning. I'm having trouble putting an authentication method for login and password in my Kibana interface. When I install the shield plugin returns me the error: root@elk:/opt/kibana# bin/kibana plugin --install … --- ## [Synonyms path vs inline array?](https://discuss.elastic.co/t/synonyms-path-vs-inline-array/57948)
**Author:** [@Kevin\_Christensen](https://discuss.elastic.co/u/Kevin_Christensen)\ **Replies:** 1\ **Last updated:** [August 12, 2016, 6:59pm UTC](https://discuss.elastic.co/t/synonyms-path-vs-inline-array/57948 "2016-08-12T18:59:26Z")
In the documentation for synonyms it is recommended to use synonyms\_path instead of a string array in synonyms. In my environment, file access is not simple, and I plan on updating my synonyms frequently. As such I've … --- ## [Rebalancing and Spark Ingest Slow Down](https://discuss.elastic.co/t/rebalancing-and-spark-ingest-slow-down/52393)
**Author:** [@nathann](https://discuss.elastic.co/u/nathann)\ **Replies:** 1\ **Last updated:** [July 20, 2016, 8:11pm UTC](https://discuss.elastic.co/t/rebalancing-and-spark-ingest-slow-down/52393 "2016-07-20T20:11:09Z")
Hi, I have a decently sized cluster and notice that while re-balancing my Spark ingest job crushes only the nodes with lower shard counts. It appears that the only nodes that the new shards are allocated to are the ones … --- ## [Gpu beats for metricbeat](https://discuss.elastic.co/t/gpu-beats-for-metricbeat/248036)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [September 10, 2020, 1:31pm UTC](https://discuss.elastic.co/t/gpu-beats-for-metricbeat/248036 "2020-09-10T13:31:02Z")
Is there a beats to monitor GPU stats ? --- ## [Define score value for searches and sum the total](https://discuss.elastic.co/t/define-score-value-for-searches-and-sum-the-total/204194)
**Author:** [@Reemface](https://discuss.elastic.co/u/Reemface)\ **Replies:** 2\ **Last updated:** [October 21, 2019, 7:05pm UTC](https://discuss.elastic.co/t/define-score-value-for-searches-and-sum-the-total/204194 "2019-10-21T19:05:53Z")
Hi All! I am fairly new in the world of ElasticSearch, and using it in a very basic way. I would like to use Elastic in a more complex way, but i can't get it to work in the way i would like. At this moment we have ou… --- ## ["Unboosting" with the caret (^) notation on a multi\_match query?](https://discuss.elastic.co/t/unboosting-with-the-caret-notation-on-a-multi-match-query/112840)
**Author:** [@Sheker](https://discuss.elastic.co/u/Sheker)\ **Replies:** 2\ **Last updated:** [December 22, 2017, 12:39pm UTC](https://discuss.elastic.co/t/unboosting-with-the-caret-notation-on-a-multi-match-query/112840 "2017-12-22T12:39:56Z")
Hi, Can I use decimals smaller than 1 with the caret (^) notation on a multi\_match query? Something like : "fields": \[ "title^3","text","extra\_text^0.5"\] Would this work as an "unbooster" for the field extra\_text? I… --- ## [Logstash service exits when it gets log](https://discuss.elastic.co/t/logstash-service-exits-when-it-gets-log/85224)
**Author:** [@BrunoC](https://discuss.elastic.co/u/BrunoC)\ **Replies:** 2\ **Last updated:** [May 10, 2017, 1:04pm UTC](https://discuss.elastic.co/t/logstash-service-exits-when-it-gets-log/85224 "2017-05-10T13:04:06Z")
I use ELK stack to monitor logs from pfSense but I have a problem. As soon as I enable the remote logs on pfSense, Logstash stops, the service status is : active (exited). The last logs from logstash.log : {:timestam… --- ## [FileBeat integration with Logstash](https://discuss.elastic.co/t/filebeat-integration-with-logstash/34819)
**Author:** [@learn2287](https://discuss.elastic.co/u/learn2287)\ **Replies:** 2\ **Last updated:** [November 17, 2015, 5:26pm UTC](https://discuss.elastic.co/t/filebeat-integration-with-logstash/34819 "2015-11-17T17:26:17Z")
I have configured my ELK stack on one of our server & file beat on a remote server. The setup failed initially to listen to my changes on the remote server as i started logstash first and then the filebeat. Then i change… --- ## [Zabbix plugin is missing](https://discuss.elastic.co/t/zabbix-plugin-is-missing/25020)
**Author:** [@MrAV](https://discuss.elastic.co/u/MrAV)\ **Replies:** 2\ **Last updated:** [July 7, 2015, 9:25am UTC](https://discuss.elastic.co/t/zabbix-plugin-is-missing/25020 "2015-07-07T09:25:59Z")
Hi, Could you please advise how to install logstash-output-zabbix plugin on Linux (RedHat 6.X)? Unfortunately, it's absent in bin/plugin list output. My Logstash version is 1.5.2 bin/plugin list with output plugins i… --- ## [Automated ELK V5.x deployment on AWS using CloudFormation Templates](https://discuss.elastic.co/t/automated-elk-v5-x-deployment-on-aws-using-cloudformation-templates/73241)
**Author:** [@Patrick\_Maroney](https://discuss.elastic.co/u/Patrick_Maroney)\ **Replies:** 0\ **Last updated:** [January 30, 2017, 4:22pm UTC](https://discuss.elastic.co/t/automated-elk-v5-x-deployment-on-aws-using-cloudformation-templates/73241 "2017-01-30T16:22:08Z")
Looking for templates and Lessons Learned for automated deployment of production ready Kibana and ElasticSearch Clusters on AWS using CloudFormation Templates (V5.x with X-Pack, Kibana/ElasticSearch API SSL, Cluster Tran… --- ## [Don't index but search JSON Fields](https://discuss.elastic.co/t/dont-index-but-search-json-fields/58942)
**Author:** [@Daniel\_Tebernum](https://discuss.elastic.co/u/Daniel_Tebernum)\ **Replies:** 1\ **Last updated:** [August 26, 2016, 7:32am UTC](https://discuss.elastic.co/t/dont-index-but-search-json-fields/58942 "2016-08-26T07:32:14Z")
Hello! I'm really sorry if this is a noob question, but in my research I didn't find any solution to my problem. My ELK-Stack gets a lot JSON formed Activity Stream like data (xAPI). Sadly, they are sometimes very hu… --- ## [Possible to query by token type?](https://discuss.elastic.co/t/possible-to-query-by-token-type/37597)
**Author:** [@ehowe](https://discuss.elastic.co/u/ehowe)\ **Replies:** 1\ **Last updated:** [December 18, 2015, 8:18pm UTC](https://discuss.elastic.co/t/possible-to-query-by-token-type/37597 "2015-12-18T20:18:58Z")
Suppose you use the UAX29URLEmailTokenizer for indexing a field. It generates tokens of type and in addition to and (and some others). Is there any way to, say, query for all documents that contain an token? Sure… --- ## [Not being able to receive the verification key to login to Kibana for ElasticSearch](https://discuss.elastic.co/t/not-being-able-to-receive-the-verification-key-to-login-to-kibana-for-elasticsearch/374091)
**Author:** [@remoteconn-7891](https://discuss.elastic.co/u/remoteconn-7891)\ **Replies:** 7\ **Last updated:** [February 5, 2025, 11:41pm UTC](https://discuss.elastic.co/t/not-being-able-to-receive-the-verification-key-to-login-to-kibana-for-elasticsearch/374091 "2025-02-05T23:41:35Z")
Hello guys, I'm relatively new to Elasticsearch and I'm trying to login to the Kibana dashboard, but on the login page, it's asking me to provide the verification code, which I'm not able to find. For some context, I'm … --- ## [Count fields with the same value as one](https://discuss.elastic.co/t/count-fields-with-the-same-value-as-one/260466)
**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\ **Replies:** 1\ **Last updated:** [January 7, 2021, 7:31pm UTC](https://discuss.elastic.co/t/count-fields-with-the-same-value-as-one/260466 "2021-01-07T19:31:29Z")
Hi! I have many fields which have the same value. So let's we have those document in different time periods: @timestamp Jan 6, 2021 @ 23:00:00 field.mess value1 field.sub examp1 @timestamp Jan 6, 2021 @ 23:00:01 fie… --- ## [How do I set number of replica to zero in metricbeat?](https://discuss.elastic.co/t/how-do-i-set-number-of-replica-to-zero-in-metricbeat/256618)
**Author:** [@Webtrend\_Inc](https://discuss.elastic.co/u/Webtrend_Inc)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 5:52am UTC](https://discuss.elastic.co/t/how-do-i-set-number-of-replica-to-zero-in-metricbeat/256618 "2020-11-26T05:52:05Z")
I have only 1 node cluster and hence I need only 1 shard and 0 replica for all my indices. I cannot set the number of replica to 0 for metricbeat index. My yml file looks like this: setup.template.name: "metricbeat"… --- ## [All shards failed for phase error in elastic](https://discuss.elastic.co/t/all-shards-failed-for-phase-error-in-elastic/201527)
**Author:** [@Behzad\_Rezaie](https://discuss.elastic.co/u/Behzad_Rezaie)\ **Replies:** 1\ **Last updated:** [September 29, 2019, 11:46am UTC](https://discuss.elastic.co/t/all-shards-failed-for-phase-error-in-elastic/201527 "2019-09-29T11:46:20Z")
Hi pals, When running the Kibana, I am getting the following error. Could you please help me solve the issue? \[2019-09-29T12:47:00,780\]\[WARN \]\[r.suppressed \] \[ELASTIC-SRV1\] path: /.kibana/doc/kql-telemetry… --- ## [Parsing logs from Dockerized NGinx](https://discuss.elastic.co/t/parsing-logs-from-dockerized-nginx/198274)
**Author:** [@JamesRamm](https://discuss.elastic.co/u/JamesRamm)\ **Replies:** 1\ **Last updated:** [September 6, 2019, 11:43am UTC](https://discuss.elastic.co/t/parsing-logs-from-dockerized-nginx/198274 "2019-09-06T11:43:07Z")
Hi I am trying to use the ELK stack to view & index logs from a bunch of services running in docker containers. One such service is NGinX and I would like to start with this. I have deployed filebeat, logstash, elastic… --- ## [\[ANNOUNCEMENT\] - Elasticsearch Beyonder 6.5 released](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-6-5-released/162971)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 1\ **Last updated:** [January 6, 2019, 10:34pm UTC](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-6-5-released/162971 "2019-01-06T22:34:25Z")
The Elasticsearch Beyonder team is pleased to announce the elasticsearch-beyonder-6.5 release! Elasticsearch Beyonder Elasticsearch beyonder provides automatic index, mapping, alias or template creation when an elastic… --- ## [Enable Slow Log in Elastic Cloud](https://discuss.elastic.co/t/enable-slow-log-in-elastic-cloud/135116)
**Author:** [@merlinv](https://discuss.elastic.co/u/merlinv)\ **Replies:** 1\ **Last updated:** [June 9, 2018, 9:46pm UTC](https://discuss.elastic.co/t/enable-slow-log-in-elastic-cloud/135116 "2018-06-09T21:46:24Z")
I follow the manual from document to enable slow log for my index. I set thresholds to 0ms - 1ms for testing purpose then make a query to ES. I check Log tab in ES Cloud but no log showed except INFO log about setting … --- ## [What does the 'system load' Metricbeat chart show?](https://discuss.elastic.co/t/what-does-the-system-load-metricbeat-chart-show/121042)
**Author:** [@muhammadrehansaeed](https://discuss.elastic.co/u/muhammadrehansaeed)\ **Replies:** 1\ **Last updated:** [February 23, 2018, 9:39am UTC](https://discuss.elastic.co/t/what-does-the-system-load-metricbeat-chart-show/121042 "2018-02-23T09:39:41Z")
What does system load actually mean? CPU? Memory? IO? Disk? A combination of all of these things? If so, how is system load calculated? --- ## [Date match issue in logstash filter](https://discuss.elastic.co/t/date-match-issue-in-logstash-filter/79486)
**Author:** [@whyapenny](https://discuss.elastic.co/u/whyapenny)\ **Replies:** 1\ **Last updated:** [March 21, 2017, 6:54pm UTC](https://discuss.elastic.co/t/date-match-issue-in-logstash-filter/79486 "2017-03-21T18:54:09Z")
"Tue Mar 21 2017 11:55:00 GMT-0400 (EDT)" Could use a little help figuring out what I have wrong: date{ match =\> \[ "\[ENTRY\]\[Timestamp\]", "YYYY-MM-dd HH:mm:ss.SSS Z", "ISO8601", "EEE MMM dd yyyy HH:mm:ss z"… --- ## [S3 input plugin with multiline codec. Last one is always lost](https://discuss.elastic.co/t/s3-input-plugin-with-multiline-codec-last-one-is-always-lost/37727)
**Author:** [@Den3](https://discuss.elastic.co/u/Den3)\ **Replies:** 1\ **Last updated:** [August 16, 2016, 6:34pm UTC](https://discuss.elastic.co/t/s3-input-plugin-with-multiline-codec-last-one-is-always-lost/37727 "2016-08-16T18:34:13Z")
I have log format like this \<\<\<\\n Accept:application/json, text/javascript, \*/\*; q=0.01\\r\\n Content-Type:application/x-www-form-urlencoded; charset=UTF-8\\r\\n Origin:https://discuss.elastic.co\\r\\n Referer:https://disc… --- ## [\\r\\n as a row separator](https://discuss.elastic.co/t/r-n-as-a-row-separator/52560)
**Author:** [@baneshbanna](https://discuss.elastic.co/u/baneshbanna)\ **Replies:** 1\ **Last updated:** [June 14, 2016, 6:38pm UTC](https://discuss.elastic.co/t/r-n-as-a-row-separator/52560 "2016-06-14T18:38:25Z")
How to configure \\r\\n as a row separator in logstash file input plugin. path =\> \["/logs/\*"\] start\_position =\> "beginning" type=\>"API" delimiter=\>"\\r\\n" close\_older=\>"300" max\_ope… --- ## [Weird bugs when using elasticsearch2.3.3 .jar to start transportclient to connect to 2.3.3 es cluster](https://discuss.elastic.co/t/weird-bugs-when-using-elasticsearch2-3-3-jar-to-start-transportclient-to-connect-to-2-3-3-es-cluster/52608)
**Author:** [@Ju\_Yuan](https://discuss.elastic.co/u/Ju_Yuan)\ **Replies:** 1\ **Last updated:** [June 13, 2016, 12:35pm UTC](https://discuss.elastic.co/t/weird-bugs-when-using-elasticsearch2-3-3-jar-to-start-transportclient-to-connect-to-2-3-3-es-cluster/52608 "2016-06-13T12:35:31Z")
the es cluster version is 2.3.3, both client and client version has java version of 1.7\_update80 when i using elasticsearch 2.3.3 jar to start a Transport client . code like this: client =TransportClient.builder().a… --- ## [Not analyzed vs Analyzed](https://discuss.elastic.co/t/not-analyzed-vs-analyzed/43414)
**Author:** [@es1024](https://discuss.elastic.co/u/es1024)\ **Replies:** 1\ **Last updated:** [March 3, 2016, 7:32pm UTC](https://discuss.elastic.co/t/not-analyzed-vs-analyzed/43414 "2016-03-03T19:32:38Z")
I basically have data where I'm only going to do database like queries such as where car = 'mustang' (Exact queries). In some cases I might do where car like 'mustan%' I'm going to do lots of aggregates on the da… --- ## [How to use TermQueryBuilder to search Chinese word?](https://discuss.elastic.co/t/how-to-use-termquerybuilder-to-search-chinese-word/28295)
**Author:** [@KennFalcon](https://discuss.elastic.co/u/KennFalcon)\ **Replies:** 1\ **Last updated:** [September 1, 2015, 4:32pm UTC](https://discuss.elastic.co/t/how-to-use-termquerybuilder-to-search-chinese-word/28295 "2015-09-01T16:32:44Z")
I put a Chinese word in the ElasticSearch. But when I want to search it by using TermQueryBuilder in Java API, I couldn't find the data. So, how to do? --- ## [Range Facet doesn't work](https://discuss.elastic.co/t/range-facet-doesnt-work/8541)
**Author:** [@Guram\_Kajaia](https://discuss.elastic.co/u/Guram_Kajaia)\ **Replies:** 7\ **Last updated:** [July 28, 2012, 9:20am UTC](https://discuss.elastic.co/t/range-facet-doesnt-work/8541 "2012-07-28T09:20:21Z")
Hello guys. I'm playing with range facet but it's not working for me. I'm running query as mentioned in guide : Here is query { "query" : { "match\_all" : {} }, "facets" : { "range1" : { "range" : { "my\_field"… [Previous page](https://discuss.elastic.co/top.md?page=1554&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1556&per_page=50&period=all)