# Top **URL:** https://discuss.elastic.co/top.md?page=1572&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1573 --- ## [Upgrading a field to multi-field doesn't work](https://discuss.elastic.co/t/upgrading-a-field-to-multi-field-doesnt-work/31672)
**Author:** [@dash](https://discuss.elastic.co/u/dash)\ **Replies:** 2\ **Last updated:** [October 6, 2015, 3:53pm UTC](https://discuss.elastic.co/t/upgrading-a-field-to-multi-field-doesnt-work/31672 "2015-10-06T15:53:31Z")
Hi, Need some help in figuring out how to upgrade a field to multi-field properly. I am using Elasticsearch-1.7.2 on linux. Here is the put json { "filelog": { "properties": { "signals": { … --- ## [Issues with packetbeat](https://discuss.elastic.co/t/issues-with-packetbeat/26414)
**Author:** [@CaptTofu](https://discuss.elastic.co/u/CaptTofu)\ **Replies:** 2\ **Last updated:** [July 29, 2015, 9:19am UTC](https://discuss.elastic.co/t/issues-with-packetbeat/26414 "2015-07-29T09:19:39Z")
Hi there! I've been testing out packetbeat as a hobby and I have a couple issues. First, one where packetbeat won't start: Fail to set the IP addresses: ERR command not allowed when used memory \> 'maxmemory' /usr/… --- ## [Min\_score doesn't seem to be working with \_count api](https://discuss.elastic.co/t/min-score-doesnt-seem-to-be-working-with--count-api/20664)
**Author:** [@Roly\_Vicaria](https://discuss.elastic.co/u/Roly_Vicaria)\ **Replies:** 2\ **Last updated:** [November 10, 2014, 4:39pm UTC](https://discuss.elastic.co/t/min-score-doesnt-seem-to-be-working-with--count-api/20664 "2014-11-10T16:39:19Z")
Hello, I'm trying to pass a min\_score parameter using the \_count api, but it doesn't seem to work. When I add it via query string, it just gets ignored and returns the full count. When I add it to the query using … --- ## ["not opting out of query cache; authorization is not alowed"](https://discuss.elastic.co/t/not-opting-out-of-query-cache-authorization-is-not-alowed/214487)
**Author:** [@dstromberg](https://discuss.elastic.co/u/dstromberg)\ **Replies:** 0\ **Last updated:** [January 9, 2020, 8:15pm UTC](https://discuss.elastic.co/t/not-opting-out-of-query-cache-authorization-is-not-alowed/214487 "2020-01-09T20:15:56Z")
Hello people. I'm getting a lot of the following in my Elasticsearch 7.3.2 logs: \[index\_name\] not opting out of the query cache; authorization is not allowed ...for several indexes, and the messages repeat. I googled… --- ## [New logstash 6.6 fail to start](https://discuss.elastic.co/t/new-logstash-6-6-fail-to-start/166854)
**Author:** [@yossiv](https://discuss.elastic.co/u/yossiv)\ **Replies:** 8\ **Last updated:** [February 5, 2019, 12:39pm UTC](https://discuss.elastic.co/t/new-logstash-6-6-fail-to-start/166854 "2019-02-05T12:39:28Z")
Hi Guys, i have new logstash installed. but for some reason it faile to start. 1 input and output ( the input and output works fine to my on other logstash system i have) plugin were installed already appreciate … --- ## [Attempted to resurrect connection to dead ES instance](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance/84983)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 0\ **Last updated:** [May 8, 2017, 9:27pm UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance/84983 "2017-05-08T21:27:00Z")
I keep getting flooded with following messages inside of my /var/log/logstash/logstash-plain.log: \[2017-05-08T21:24:21,589\]\[INFO \]\[logstash.outputs.elasticsearch\] Running health check to see if an Elasticsearch connect… --- ## [Max documents 10,500?](https://discuss.elastic.co/t/max-documents-10-500/23514)
**Author:** [@blake1024](https://discuss.elastic.co/u/blake1024)\ **Replies:** 8\ **Last updated:** [May 1, 2015, 9:41pm UTC](https://discuss.elastic.co/t/max-documents-10-500/23514 "2015-05-01T21:41:36Z")
Greetings, I have two similar but unrelated machines. I am adding 50,000+ documents to each. Afterwards, one shows the 50,000+ documents and the other only shows 10,500. The second machine seems to be capping o… --- ## [7.16.2 =\> Error loading map features in Security \> Network dashboard](https://discuss.elastic.co/t/7-16-2-error-loading-map-features-in-security-network-dashboard/293732)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 5\ **Last updated:** [February 21, 2022, 2:35pm UTC](https://discuss.elastic.co/t/7-16-2-error-loading-map-features-in-security-network-dashboard/293732 "2022-02-21T14:35:01Z")
Hello, Just noticed I'm getting "Error loading map features" errors in the Security Network Dashboard.. Found another (unaswered) thread about this =\> SIEM network map states "Error loading map features" at all end … --- ## [Certificate error on database update](https://discuss.elastic.co/t/certificate-error-on-database-update/286550)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 5\ **Last updated:** [October 15, 2021, 5:51pm UTC](https://discuss.elastic.co/t/certificate-error-on-database-update/286550 "2021-10-15T17:51:04Z")
After upgrading to logstash 7.14.1, I'm getting this error daily in the logstash-plain.log: \[ERROR\]\[logstash.filters.geoip.databasemanager\] certificate verify failed {:cause=\>#\ **Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\ **Replies:** 5\ **Last updated:** [May 31, 2021, 5:22am UTC](https://discuss.elastic.co/t/i-want-to-save-all-grokparsefailure-entries-in-a-file-to-review-them-later-however/273477 "2021-05-31T05:22:17Z") My output configuration portion: if "\_grokparsefailure" in \[tags\] { file { path =\> "/home/myaccount/testfolder/grokfailures" file\_mode =\> 0600 } } else { file { path =\> "/home/myaccount/testfolder/groksuccess" … --- ## [Cant reach elasticsearch](https://discuss.elastic.co/t/cant-reach-elasticsearch/144288)
**Author:** [@Raghuveer\_SJ](https://discuss.elastic.co/u/Raghuveer_SJ)\ **Replies:** 5\ **Last updated:** [August 16, 2018, 6:17pm UTC](https://discuss.elastic.co/t/cant-reach-elasticsearch/144288 "2018-08-16T18:17:57Z")
I have 2 questions : I have installed ELK on a different machine and am able to reach kibana but not elasticsearch. When I ping I see http://:9200/ "mmm...can’t reach this page" as if the address is incorrect. When log… --- ## [How to verify that yml settings were indeed loaded](https://discuss.elastic.co/t/how-to-verify-that-yml-settings-were-indeed-loaded/46542)
**Author:** [@apt275](https://discuss.elastic.co/u/apt275)\ **Replies:** 5\ **Last updated:** [April 6, 2016, 7:28pm UTC](https://discuss.elastic.co/t/how-to-verify-that-yml-settings-were-indeed-loaded/46542 "2016-04-06T19:28:48Z")
I am running ES 2.3. I am trying to specify some settings in my yaml file as indices.fielddata.cache.size:40% and i try to get /\_cluster/settings i get no results back. However, if i do PUT /\_cluster/setting… --- ## [Filebeat not shipping logs to Elasticsearch service on K8S](https://discuss.elastic.co/t/filebeat-not-shipping-logs-to-elasticsearch-service-on-k8s/322227)
**Author:** [@Max9998](https://discuss.elastic.co/u/Max9998)\ **Replies:** 7\ **Last updated:** [January 5, 2023, 3:28am UTC](https://discuss.elastic.co/t/filebeat-not-shipping-logs-to-elasticsearch-service-on-k8s/322227 "2023-01-05T03:28:23Z")
Hello, I have deployed Filebeat using the Helm chart on K8s as a daemonset. We would like to use Filebeat to send Kubelet, Containerd, and docker logs to Elasticsearch Service. The config yaml is below: filebeat.inputs… --- ## [Snapshot and restore : communication entre deux cluster](https://discuss.elastic.co/t/snapshot-and-restore-communication-entre-deux-cluster/257380)
**Author:** [@Dominique\_Lechaudel](https://discuss.elastic.co/u/Dominique_Lechaudel)\ **Replies:** 7\ **Last updated:** [December 3, 2020, 2:51pm UTC](https://discuss.elastic.co/t/snapshot-and-restore-communication-entre-deux-cluster/257380 "2020-12-03T14:51:06Z")
Bonjour, Je cherche à paramétrer la fonctionnalité snapshot/restore et utiliser un repository de type read-only URL pour utiliser le snapshot d'un autre cluster (communications prod/pre-prod) Les cluster sont protégés … --- ## [Enrich SIEM Data](https://discuss.elastic.co/t/enrich-siem-data/255749)
**Author:** [@austinsonger](https://discuss.elastic.co/u/austinsonger)\ **Replies:** 1\ **Last updated:** [November 22, 2020, 8:10am UTC](https://discuss.elastic.co/t/enrich-siem-data/255749 "2020-11-22T08:10:55Z")
How to enrich SIEM data with Threat Intelligence? SIEM data can be overwhelming, how to implement Threat Intelligence feed like OTX Alienvault or other Intel feeds? --- ## [ECK- Discovery GCE plugin not working in GKE cluster](https://discuss.elastic.co/t/eck-discovery-gce-plugin-not-working-in-gke-cluster/240209)
**Author:** [@aman26ps](https://discuss.elastic.co/u/aman26ps)\ **Replies:** 7\ **Last updated:** [July 15, 2020, 10:48am UTC](https://discuss.elastic.co/t/eck-discovery-gce-plugin-not-working-in-gke-cluster/240209 "2020-07-15T10:48:45Z")
Hi All, I am trying to install gce discovery plugin in elasticsearch but unable to set the following parameters # get the IP address from network interface 1 network.host: \_gce:privateIp:1\_ # Using GCE internal hostnam… --- ## [Single quote json](https://discuss.elastic.co/t/single-quote-json/211837)
**Author:** [@Kod](https://discuss.elastic.co/u/Kod)\ **Replies:** 1\ **Last updated:** [December 16, 2019, 9:02am UTC](https://discuss.elastic.co/t/single-quote-json/211837 "2019-12-16T09:02:26Z")
I was given a json file to work on. I want to do it elasticsearch and kibana. Problem is that instead of double quotes, it is wrapped with single quotes. How can I post it to elasticsearch? --- ## [Error while trying to install X-Pack](https://discuss.elastic.co/t/error-while-trying-to-install-x-pack/132874)
**Author:** [@bossi6of9](https://discuss.elastic.co/u/bossi6of9)\ **Replies:** 1\ **Last updated:** [May 23, 2018, 1:23am UTC](https://discuss.elastic.co/t/error-while-trying-to-install-x-pack/132874 "2018-05-23T01:23:32Z")
Hi, I'm getting an error while trying to install X-Pack. I'm running this as root, in the ES\_HOME directory (but it's not the standard location). Elastic is running, along with Kibana on this server, and it has inter… --- ## [Kibana not showing data \[No results found\]](https://discuss.elastic.co/t/kibana-not-showing-data-no-results-found/132560)
**Author:** [@omid](https://discuss.elastic.co/u/omid)\ **Replies:** 1\ **Last updated:** [May 19, 2018, 8:02pm UTC](https://discuss.elastic.co/t/kibana-not-showing-data-no-results-found/132560 "2018-05-19T20:02:18Z")
Hi im elasticsearch & logstash & kibana services is up! but not showing received data from other servers But until yesterday it was not a problem and showed up this command and report Does it help? root@l-elk1:~# c… --- ## [Elasticsearch for DNA sequence analysis](https://discuss.elastic.co/t/elasticsearch-for-dna-sequence-analysis/128057)
**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\ **Replies:** 1\ **Last updated:** [April 14, 2018, 9:11pm UTC](https://discuss.elastic.co/t/elasticsearch-for-dna-sequence-analysis/128057 "2018-04-14T21:11:29Z")
I am interested if Elasticsearch has been used for this before. I saw one article about using Elasticsearch for DNA, but it didn't go into much detail about how it was used and from the looks of it I'd imagine with wasn'… --- ## [Visualizing network traffic timelion (metricbeat)](https://discuss.elastic.co/t/visualizing-network-traffic-timelion-metricbeat/126333)
**Author:** [@dinon](https://discuss.elastic.co/u/dinon)\ **Replies:** 1\ **Last updated:** [April 2, 2018, 7:12pm UTC](https://discuss.elastic.co/t/visualizing-network-traffic-timelion-metricbeat/126333 "2018-04-02T19:12:53Z")
Hi, I am using metricbeat to send network data to kibana from window mchine, What hapens is that these counters are reaching max value and then going back to zero \[43\] When using below timelion formula it causes a bi… --- ## [Storing Twitter Data - What would be the best choice?](https://discuss.elastic.co/t/storing-twitter-data-what-would-be-the-best-choice/105383)
**Author:** [@DavidK](https://discuss.elastic.co/u/DavidK)\ **Replies:** 1\ **Last updated:** [October 26, 2017, 11:02am UTC](https://discuss.elastic.co/t/storing-twitter-data-what-would-be-the-best-choice/105383 "2017-10-26T11:02:14Z")
I am currently working on a project involving Twitter Data. The team has been advised not to use Elasticsearch to store tweets because it's not a best practice. (they are thinking to use Amazon RDS...) I've seen that i… --- ## [Accessing \_index variable inside painless script?](https://discuss.elastic.co/t/accessing--index-variable-inside-painless-script/82362)
**Author:** [@olalonde](https://discuss.elastic.co/u/olalonde)\ **Replies:** 1\ **Last updated:** [April 13, 2017, 10:27pm UTC](https://discuss.elastic.co/t/accessing--index-variable-inside-painless-script/82362 "2017-04-13T22:27:12Z")
I've noticed the deprecation warning for Groovy script so I'm trying to port a groovy script to painless. However, it looks like painless scripts don't have access to the \_index variable (which I need to access)? Here's … --- ## [Multiple pattern in log file - logstash config file](https://discuss.elastic.co/t/multiple-pattern-in-log-file-logstash-config-file/55919)
**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\ **Replies:** 1\ **Last updated:** [July 21, 2016, 11:32am UTC](https://discuss.elastic.co/t/multiple-pattern-in-log-file-logstash-config-file/55919 "2016-07-21T11:32:14Z")
Hi, I have 2 different patterns in my logs..how do I take them both into account in my logstash configuration file? Pattern 1: 2016-06-03 08:44:52 | INFO | \[\[ACTIVE\] ExecuteThread: '0' for queue: 'weblogic.kernel.Defa… --- ## [Issues installing custom plugin](https://discuss.elastic.co/t/issues-installing-custom-plugin/36908)
**Author:** [@Russ\_Lavoie](https://discuss.elastic.co/u/Russ_Lavoie)\ **Replies:** 1\ **Last updated:** [December 21, 2015, 9:54pm UTC](https://discuss.elastic.co/t/issues-installing-custom-plugin/36908 "2015-12-21T21:54:42Z")
I am having issues installing a custom plugin and it is driving me nuts. Environment Ubuntu 12.0.4 64 Bit Installed Logstash via provided deb package (1.5.2) Followed the link https://www.elastic.co/guide/en/logstash… --- ## [Memory issue in 0.15.1](https://discuss.elastic.co/t/memory-issue-in-0-15-1/4031)
**Author:** [@Steve](https://discuss.elastic.co/u/Steve)\ **Replies:** 7\ **Last updated:** [June 2, 2011, 12:25am UTC](https://discuss.elastic.co/t/memory-issue-in-0-15-1/4031 "2011-06-02T00:25:03Z")
Hi, We're seeing a constant growth in memory usage when using 0.15.1. The heap grew at a steady rate from 350M to about 600M overnight before leveling off. The number of new objects added was quite small, and there… --- ## [How can we include a standalone html page with scripts inside a custom Kibana plugin](https://discuss.elastic.co/t/how-can-we-include-a-standalone-html-page-with-scripts-inside-a-custom-kibana-plugin/228799)
**Author:** [@pranay\_bhatnagar](https://discuss.elastic.co/u/pranay_bhatnagar)\ **Replies:** 3\ **Last updated:** [April 21, 2020, 7:55pm UTC](https://discuss.elastic.co/t/how-can-we-include-a-standalone-html-page-with-scripts-inside-a-custom-kibana-plugin/228799 "2020-04-21T19:55:11Z")
I am using custom Kibana plugin in which i want to use a external html page with many script tags inside a plugin UI. How can i include external html page and scripts inside my Kibana plugin UI. --- ## [Remote Access kibana from windows vm hosted on Azure](https://discuss.elastic.co/t/remote-access-kibana-from-windows-vm-hosted-on-azure/224400)
**Author:** [@aman97](https://discuss.elastic.co/u/aman97)\ **Replies:** 3\ **Last updated:** [March 23, 2020, 8:17am UTC](https://discuss.elastic.co/t/remote-access-kibana-from-windows-vm-hosted-on-azure/224400 "2020-03-23T08:17:32Z")
Hi All, My Elasticsearch and kibana is installed on windows VM in Azure both are working fine but I want to access my kibana outside the VM, I have read documents mentioned that change server.host: "0.0.0.0" but when I… --- ## [Printing PDF reports](https://discuss.elastic.co/t/printing-pdf-reports/222800)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 3\ **Last updated:** [March 13, 2020, 6:34pm UTC](https://discuss.elastic.co/t/printing-pdf-reports/222800 "2020-03-13T18:34:13Z")
In the following document: https://www.elastic.co/guide/en/kibana/7.6/reporting-getting-started.html#optimize-pdf, the printed pages are A4. How do yo switch it to US letter? Optimize PDF for print—dashboard only (http… --- ## [Data loss using Json filter, messages dropped without any errors or warnings](https://discuss.elastic.co/t/data-loss-using-json-filter-messages-dropped-without-any-errors-or-warnings/194255)
**Author:** [@sherifabdlnaby](https://discuss.elastic.co/u/sherifabdlnaby)\ **Replies:** 3\ **Last updated:** [August 7, 2019, 3:48pm UTC](https://discuss.elastic.co/t/data-loss-using-json-filter-messages-dropped-without-any-errors-or-warnings/194255 "2019-08-07T15:48:50Z")
During setting up our ELK stack for application logs, some logs come structured and some aren't, I am running the JSON filter on every message to tag logs if they're structured or not. After some errors happened and we … --- ## [Index nested json](https://discuss.elastic.co/t/index-nested-json/127854)
**Author:** [@chrigui94](https://discuss.elastic.co/u/chrigui94)\ **Replies:** 3\ **Last updated:** [April 13, 2018, 8:32am UTC](https://discuss.elastic.co/t/index-nested-json/127854 "2018-04-13T08:32:08Z")
I have a nested file each document is like the following (contains a field "gateways" contains diffents number of gateways each one contains a latitude and longitude) { field1: "aa", field2:"bb", "gateways"\[ {antenn… --- ## [Visualization Filter](https://discuss.elastic.co/t/visualization-filter/78731)
**Author:** [@Conall\_Prendergast](https://discuss.elastic.co/u/Conall_Prendergast)\ **Replies:** 3\ **Last updated:** [March 16, 2017, 12:01pm UTC](https://discuss.elastic.co/t/visualization-filter/78731 "2017-03-16T12:01:47Z")
Hi, I am trying to make a visualization in Kibana that has a filter in it. I decided to do a "script" filter that returns true if two of a documents fields are equal. I can do the filter in the dev console no bother,… --- ## [A scrollable dashboard?](https://discuss.elastic.co/t/a-scrollable-dashboard/69012)
**Author:** [@markd](https://discuss.elastic.co/u/markd)\ **Replies:** 3\ **Last updated:** [December 14, 2016, 7:57pm UTC](https://discuss.elastic.co/t/a-scrollable-dashboard/69012 "2016-12-14T19:57:27Z")
Hi, I have a visualization where I track CPU load of a few hosts. I noticed that the graphs are scaled down to fit the dashboard (Split Chart / Size field). Is there a way to implement a slide bar on a side of a visuali… --- ## [Throttling fixed bitset cache](https://discuss.elastic.co/t/throttling-fixed-bitset-cache/43639)
**Author:** [@jxerome](https://discuss.elastic.co/u/jxerome)\ **Replies:** 3\ **Last updated:** [March 8, 2016, 1:18pm UTC](https://discuss.elastic.co/t/throttling-fixed-bitset-cache/43639 "2016-03-08T13:18:02Z")
Hello, Is there any way to throttle fixed bitset cache (in 1.7 or at least in 2.x)? I have a client cluster whose 8 GB heap memory is saturated by fixed bitset cache after five minutes. The cluster avoid OutOfMemoryE… --- ## [Identical node name for all cluster nodes](https://discuss.elastic.co/t/identical-node-name-for-all-cluster-nodes/6822)
**Author:** [@Vikram\_Adukia](https://discuss.elastic.co/u/Vikram_Adukia)\ **Replies:** 3\ **Last updated:** [February 28, 2012, 8:42pm UTC](https://discuss.elastic.co/t/identical-node-name-for-all-cluster-nodes/6822 "2012-02-28T20:42:10Z")
I just set up a 3 node elasticsearch cluster with version 0.18.7. For some reason, all the nodes are coming up with the node name of "Aardwolf". All nodes are able to find each other. All nodes are using the same c… --- ## [Structured Logging with Serilog & Elasticsearch – How to Avoid Mapping Explosion?](https://discuss.elastic.co/t/structured-logging-with-serilog-elasticsearch-how-to-avoid-mapping-explosion/378266)
**Author:** [@a\_mandel](https://discuss.elastic.co/u/a_mandel)\ **Replies:** 6\ **Last updated:** [June 5, 2025, 12:35pm UTC](https://discuss.elastic.co/t/structured-logging-with-serilog-elasticsearch-how-to-avoid-mapping-explosion/378266 "2025-06-05T12:35:08Z")
Hi, I'm using Serilog with Elasticsearch in a .NET application, and I'm writing logs to Elasticsearch data streams using a basic setup like this: Log.Logger = new LoggerConfiguration() .MinimumLevel.Information … --- ## [Could not index event to Elasticsearch](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/312023)
**Author:** [@syedabdullah](https://discuss.elastic.co/u/syedabdullah)\ **Replies:** 6\ **Last updated:** [August 16, 2022, 3:57pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/312023 "2022-08-16T15:57:58Z")
Hi I am getting this error in Elasticsearch (Please look at the bolded statements), any sort of help will be welcome. Thank you so much in advance: \[2022-05-03T12:41:26,871\]\[WARN \]\[logstash.outputs.elasticsearch\]\[rtt\_kf… --- ## [Filebeat modules via Logstash](https://discuss.elastic.co/t/filebeat-modules-via-logstash/263612)
**Author:** [@st1988](https://discuss.elastic.co/u/st1988)\ **Replies:** 6\ **Last updated:** [February 8, 2021, 9:19pm UTC](https://discuss.elastic.co/t/filebeat-modules-via-logstash/263612 "2021-02-08T21:19:01Z")
Hi everyone, I have an issue where when I try and integrate Filebeat PANOS module with Elasticsearch via Logstash it fails to bring across the pre-built dashboards that is does when integrating Filebeat directly with El… --- ## [How many shards should I have in Elasticsearch Node with v7.7?](https://discuss.elastic.co/t/how-many-shards-should-i-have-in-elasticsearch-node-with-v7-7/240452)
**Author:** [@begin](https://discuss.elastic.co/u/begin)\ **Replies:** 6\ **Last updated:** [July 10, 2020, 6:34am UTC](https://discuss.elastic.co/t/how-many-shards-should-i-have-in-elasticsearch-node-with-v7-7/240452 "2020-07-10T06:34:47Z")
Hello, I know, I keep number of shards per node below 20 per GB heap it has configured. https://www.elastic.co/blog/how-many-shards-should-i-have-in-my-elasticsearch-cluster But, I know Elasticsearch heap memory usag… --- ## [Error while running under Windows](https://discuss.elastic.co/t/error-while-running-under-windows/3128)
**Author:** [@James\_Cook](https://discuss.elastic.co/u/James_Cook)\ **Replies:** 6\ **Last updated:** [July 21, 2010, 5:00pm UTC](https://discuss.elastic.co/t/error-while-running-under-windows/3128 "2010-07-21T17:00:12Z")
Hi, I have been running ES on Mac OS X for a couple weeks now. One of our developers recently tried to bring our embedded ES up under WIndows, and he receives the following stack trace. I am attempting to do a map.p… --- ## [Access forbidden to download filebeat deb package](https://discuss.elastic.co/t/access-forbidden-to-download-filebeat-deb-package/391055)
**Author:** [@helioxensam](https://discuss.elastic.co/u/helioxensam)\ **Replies:** 5\ **Last updated:** [October 21, 2026, 2:04pm UTC](https://discuss.elastic.co/t/access-forbidden-to-download-filebeat-deb-package/391055 "2026-10-21T14:04:00Z")
We use a nordic provider for cloud services, and one of our VMs is getting blocked. curl https://artifacts.elastic.co/packages/8.x/apt/dists/stable/InRelease 403 Forbidden Error: Forbidden Your client does not have… --- ## [Unable to create index with %{type} in logstash output](https://discuss.elastic.co/t/unable-to-create-index-with-type-in-logstash-output/334079)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 2\ **Last updated:** [May 24, 2023, 1:18pm UTC](https://discuss.elastic.co/t/unable-to-create-index-with-type-in-logstash-output/334079 "2023-05-24T13:18:10Z")
Hi here is my logstash config file input { beats { port =\> 5044 } } output { elasticsearch { hosts =\> "http://IP:9200" index =\> "%{type}%{+YYYY.MM.dd}" user =\> "elastic" password =\> "pwd" } … --- ## [Exiting: 1 error: failed to create audit client: failed to get audit status: operation not permitted](https://discuss.elastic.co/t/exiting-1-error-failed-to-create-audit-client-failed-to-get-audit-status-operation-not-permitted/309579)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 2\ **Last updated:** [July 15, 2022, 3:07am UTC](https://discuss.elastic.co/t/exiting-1-error-failed-to-create-audit-client-failed-to-get-audit-status-operation-not-permitted/309579 "2022-07-15T03:07:56Z")
Hello World! I'm trying to Run Auditbeat on Docker | Auditbeat Reference \[7.17\] | Elastic, yet running into following issue: # docker compose logs --tail 1 auditbeat | Exiting: 1 error: failed to create audit client: … --- ## [Combine two different aggregation results into one](https://discuss.elastic.co/t/combine-two-different-aggregation-results-into-one/307143)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 2\ **Last updated:** [June 16, 2022, 6:00pm UTC](https://discuss.elastic.co/t/combine-two-different-aggregation-results-into-one/307143 "2022-06-16T18:00:19Z")
We have traffic logs from and to WAN. We need to :slight\_smile: We need to add/aggregate the sentbytes when the source interface is WAN. We need to add/aggregate the receivedbytes when the destination interface is WAN… --- ## [APM not showing logs in Transactions Page](https://discuss.elastic.co/t/apm-not-showing-logs-in-transactions-page/302251)
**Author:** [@Raushan](https://discuss.elastic.co/u/Raushan)\ **Replies:** 2\ **Last updated:** [April 17, 2022, 5:58am UTC](https://discuss.elastic.co/t/apm-not-showing-logs-in-transactions-page/302251 "2022-04-17T05:58:30Z")
Kibana version : 8.0.0 Elasticsearch version : 8.0.0 APM Server version : 8.0.0 APM Agent language and version : Java & 1.29.0 Browser version : Chrome Original install method (e.g. download page, yum, deb, from sou… --- ## [Kibana 7.6.0 - Unable to generate report. Error: Failed to decrypt report job data](https://discuss.elastic.co/t/kibana-7-6-0-unable-to-generate-report-error-failed-to-decrypt-report-job-data/244721)
**Author:** [@chris.murray](https://discuss.elastic.co/u/chris.murray)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 1:41pm UTC](https://discuss.elastic.co/t/kibana-7-6-0-unable-to-generate-report-error-failed-to-decrypt-report-job-data/244721 "2020-08-12T13:41:54Z")
I've been googling around for a solution for this, and all the answers seem to be pretty much the exact same. But they don't seem to be my problem. Generating a report by any used results in the following error: Unabl… --- ## [GenerateCustomBeat - logs was keep rooling with mage -debug GenerateCustomBeat](https://discuss.elastic.co/t/generatecustombeat-logs-was-keep-rooling-with-mage-debug-generatecustombeat/228596)
**Author:** [@visasimbu](https://discuss.elastic.co/u/visasimbu)\ **Replies:** 2\ **Last updated:** [April 20, 2020, 8:39pm UTC](https://discuss.elastic.co/t/generatecustombeat-logs-was-keep-rooling-with-mage-debug-generatecustombeat/228596 "2020-04-20T20:39:16Z")
I have followed below steps to create custom beat and which results me to infinite loop. I was digging for past 2 days. Kindly help me. Go version source editor go version go1.13.10 windows/amd64 Go environment varia… --- ## [Automatic Report in Postman](https://discuss.elastic.co/t/automatic-report-in-postman/202978)
**Author:** [@jolo-dev](https://discuss.elastic.co/u/jolo-dev)\ **Replies:** 2\ **Last updated:** [October 12, 2019, 7:52am UTC](https://discuss.elastic.co/t/automatic-report-in-postman/202978 "2019-10-12T07:52:43Z")
Hello, how can I use this in Postman for example? I have problems to understand what authentication informations are needed. Cheers! --- ## [How to create multi indices with multi logs from filebeat?](https://discuss.elastic.co/t/how-to-create-multi-indices-with-multi-logs-from-filebeat/130779)
**Author:** [@alantany](https://discuss.elastic.co/u/alantany)\ **Replies:** 2\ **Last updated:** [May 31, 2018, 8:22am UTC](https://discuss.elastic.co/t/how-to-create-multi-indices-with-multi-logs-from-filebeat/130779 "2018-05-31T08:22:05Z")
Hi, Recently I use filebeat+logstash+ES (all is 6.x) to colect some logs ,I want diferent log create diferent index,how can I do with it? I read docs and said document\_type was deprecated in 6.x，So I configured with FI… --- ## [Splitting IP addresses](https://discuss.elastic.co/t/splitting-ip-addresses/126117)
**Author:** [@ecamero2](https://discuss.elastic.co/u/ecamero2)\ **Replies:** 2\ **Last updated:** [March 29, 2018, 6:14pm UTC](https://discuss.elastic.co/t/splitting-ip-addresses/126117 "2018-03-29T18:14:07Z")
Good Morning, I have a need to remove part of a field if it exists. I have a field that contains either one or two ip addresses: ie: "1.2.3.4" OR "1.2.3.4,5.6.7.8" I only want to retain the first address (before the… [Previous page](https://discuss.elastic.co/top.md?page=1571&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1573&per_page=50&period=all)