# Top

**URL:** https://discuss.elastic.co/top.md?page=1587&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1588

---

## [Elasticsearch stop for uknown reason](https://discuss.elastic.co/t/elasticsearch-stop-for-uknown-reason/70868)

<div class="topic-metadata">

**Author:** [@DBS](https://discuss.elastic.co/u/DBS)\
**Replies:** 3\
**Last updated:** [January 8, 2017, 10:44am UTC](https://discuss.elastic.co/t/elasticsearch-stop-for-uknown-reason/70868 "2017-01-08T10:44:16Z")

</div>

I have elasticsearch running on server. However, I did not manually turn it off and attempt to keep it always running, and was not sure why it stopped somehow without any specific reason. Is there anyway e.g. log, that I…

---

## [TimeLion basic question](https://discuss.elastic.co/t/timelion-basic-question/70309)

<div class="topic-metadata">

**Author:** [@queenstownswords](https://discuss.elastic.co/u/queenstownswords)\
**Replies:** 3\
**Last updated:** [January 3, 2017, 7:26am UTC](https://discuss.elastic.co/t/timelion-basic-question/70309 "2017-01-03T07:26:03Z")

</div>

Hello, Please excuse, there is not a timelion category yet. I am new to elasticsearch/kibana so thanks for your patience. There is an index 'testindexname' with entries in the following format: {"\_index":"testindexna…

---

## [Understanding synchronisation after downtime](https://discuss.elastic.co/t/understanding-synchronisation-after-downtime/51325)

<div class="topic-metadata">

**Author:** [@ash85](https://discuss.elastic.co/u/ash85)\
**Replies:** 3\
**Last updated:** [May 30, 2016, 2:52pm UTC](https://discuss.elastic.co/t/understanding-synchronisation-after-downtime/51325 "2016-05-30T14:52:04Z")

</div>

hello, i'm wondering how elasticsearch synchronized the data after downtime. for example: create new index: curl -XPOST node1:9200/testindex1 now the data is in sync on both nodes: curl -XGET node1:9200/\_cat/in…

---

## [How to feed the below Schema file in the ELK Stack and receive the output](https://discuss.elastic.co/t/how-to-feed-the-below-schema-file-in-the-elk-stack-and-receive-the-output/45903)

<div class="topic-metadata">

**Author:** [@dsuriyadeepan](https://discuss.elastic.co/u/dsuriyadeepan)\
**Replies:** 3\
**Last updated:** [April 5, 2016, 10:29am UTC](https://discuss.elastic.co/t/how-to-feed-the-below-schema-file-in-the-elk-stack-and-receive-the-output/45903 "2016-04-05T10:29:39Z")

</div>

Hi Folks , Have a pleasant day ahead. We have installed ELK stack with NX log in windows 2008 R2 server.Now,we need to analyse the following log structure in this stack.I am not a programmer.Could,some…

---

## [Getting "Network is unreachable" while running elasticsearch from windows](https://discuss.elastic.co/t/getting-network-is-unreachable-while-running-elasticsearch-from-windows/16886)

<div class="topic-metadata">

**Author:** [@bagui](https://discuss.elastic.co/u/bagui)\
**Replies:** 0\
**Last updated:** [April 9, 2014, 6:51am UTC](https://discuss.elastic.co/t/getting-network-is-unreachable-while-running-elasticsearch-from-windows/16886 "2014-04-09T06:51:55Z")

</div>

Hi, I'm running elasticsearch through windows using command prompt. The same started as below. D:\\elasticsearch\\elasticsearch-1.0.1\\bin\>elasticsearch \[2014-04-08 13:39:00,199\]\[WARN \]\[bootstrap \] j…

---

## [Filtering nested documents for faceting](https://discuss.elastic.co/t/filtering-nested-documents-for-faceting/9913)

<div class="topic-metadata">

**Author:** [@Dan\_Spangenberger](https://discuss.elastic.co/u/Dan_Spangenberger)\
**Replies:** 3\
**Last updated:** [December 4, 2012, 6:00am UTC](https://discuss.elastic.co/t/filtering-nested-documents-for-faceting/9913 "2012-12-04T06:00:37Z")

</div>

Hi all- I'm trying to build a faceted navigation UX on a corpus with documents containing many (thousands of) properties. Users will be applying multiple filters (filter such as: documents must contain an assignme…

---

## [How to upgrade ElasticSearch In \`docker-compose.yml\`](https://discuss.elastic.co/t/how-to-upgrade-elasticsearch-in-docker-compose-yml/301408)

<div class="topic-metadata">

**Author:** [@linghengqian](https://discuss.elastic.co/u/linghengqian)\
**Replies:** 1\
**Last updated:** [April 4, 2022, 12:52am UTC](https://discuss.elastic.co/t/how-to-upgrade-elasticsearch-in-docker-compose-yml/301408 "2022-04-04T00:52:51Z")

</div>

According to Upgrade Elasticsearch | Elastic Installation and Upgrade Guide \[8.1\] | Elastic , if I wish to update the ElasticSearch instance started within docker-compose.yml, do I just need to stop all The insert data…

---

## [In Kibana vega can we give index pattern with filters in data source](https://discuss.elastic.co/t/in-kibana-vega-can-we-give-index-pattern-with-filters-in-data-source/292243)

<div class="topic-metadata">

**Author:** [@chandima\_jayamina](https://discuss.elastic.co/u/chandima_jayamina)\
**Replies:** 1\
**Last updated:** [December 17, 2021, 12:09pm UTC](https://discuss.elastic.co/t/in-kibana-vega-can-we-give-index-pattern-with-filters-in-data-source/292243 "2021-12-17T12:09:50Z")

</div>

Hi I have to show all the data on index pattern with some filters. In discover I have school and I want to filter out all the students in grade 5. When I add the filter and see in discover it has 6000 records. But all re…

---

## [How to communicate between ELS Nodes using Kubernetes cluster with namespace and SVC](https://discuss.elastic.co/t/how-to-communicate-between-els-nodes-using-kubernetes-cluster-with-namespace-and-svc/236723)

<div class="topic-metadata">

**Author:** [@Artur\_Drozdzyk](https://discuss.elastic.co/u/Artur_Drozdzyk)\
**Replies:** 1\
**Last updated:** [June 12, 2020, 11:12am UTC](https://discuss.elastic.co/t/how-to-communicate-between-els-nodes-using-kubernetes-cluster-with-namespace-and-svc/236723 "2020-06-12T11:12:13Z")

</div>

I am trying to communicate between Elasticsearch nodes, so that the master node will be chosen in a voting. Unfortunately, nodes are not seeing eachother (discovery.seed\_hosts), despite of fact, that these are chained us…

---

## [JSON queries in Kibana cause Discover: Internal Server Error](https://discuss.elastic.co/t/json-queries-in-kibana-cause-discover-internal-server-error/189075)

<div class="topic-metadata">

**Author:** [@werowe](https://discuss.elastic.co/u/werowe)\
**Replies:** 1\
**Last updated:** [July 5, 2019, 9:45pm UTC](https://discuss.elastic.co/t/json-queries-in-kibana-cause-discover-internal-server-error/189075 "2019-07-05T21:45:33Z")

</div>

I cannot execute the simplest of queries in Kibana that work just fine using curl. My understanding is that you you pick Lucene query language you can use JSON. So this query that works from curl: {"query":{"match":{…

---

## [Unit testing elasticsearch using Spock](https://discuss.elastic.co/t/unit-testing-elasticsearch-using-spock/160105)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 1\
**Last updated:** [December 10, 2018, 7:22am UTC](https://discuss.elastic.co/t/unit-testing-elasticsearch-using-spock/160105 "2018-12-10T07:22:52Z")

</div>

Hi I want to write unit test cases using spock framework. I read there is ES unit testing framework. How to use that?? Also I need examples of using ESTestCase. Please guide

---

## [Ruby to combine Object Array](https://discuss.elastic.co/t/ruby-to-combine-object-array/132050)

<div class="topic-metadata">

**Author:** [@Dhivya\_Buvanesh](https://discuss.elastic.co/u/Dhivya_Buvanesh)\
**Replies:** 1\
**Last updated:** [May 16, 2018, 12:16pm UTC](https://discuss.elastic.co/t/ruby-to-combine-object-array/132050 "2018-05-16T12:16:08Z")

</div>

Need Help with ruby code ( I have no knowledge with ruby) on how to combine nested array objects as one Dict ? , as I am facing issues with elastic getting"Object in arrays are not well supported Error" , Also I tried "…

---

## [Getting Authorization error for the x-pack internal user \_system after installing x-pack in elastic 5.1.1... action \[indices:admin/aliases/get\] is unauthorized for user \[\_system\]](https://discuss.elastic.co/t/getting-authorization-error-for-the-x-pack-internal-user-system-after-installing-x-pack-in-elastic-5-1-1-action-indices-admin-aliases-get-is-unauthorized-for-user-system/126239)

<div class="topic-metadata">

**Author:** [@sangamesh.asokan](https://discuss.elastic.co/u/sangamesh.asokan)\
**Replies:** 1\
**Last updated:** [March 30, 2018, 11:13pm UTC](https://discuss.elastic.co/t/getting-authorization-error-for-the-x-pack-internal-user-system-after-installing-x-pack-in-elastic-5-1-1-action-indices-admin-aliases-get-is-unauthorized-for-user-system/126239 "2018-03-30T23:13:22Z")

</div>

Hi All, Need help in fixing this issue. Getting the below logs while trying to start up the elasticsearch after upgrading the elasticsearch to 5.1 from 1.7 to install x-pack. Caused by: org.elasticsearch.Elasticsear…

---

## [Replica Shard stuck in INITIALIZING state](https://discuss.elastic.co/t/replica-shard-stuck-in-initializing-state/19380)

<div class="topic-metadata">

**Author:** [@Peeyush\_Chandel](https://discuss.elastic.co/u/Peeyush_Chandel)\
**Replies:** 1\
**Last updated:** [August 21, 2014, 7:04am UTC](https://discuss.elastic.co/t/replica-shard-stuck-in-initializing-state/19380 "2014-08-21T07:04:37Z")

</div>

Hi, I stopped one of my elastic search node & as a normal behavior elastic search started relocating my shard on that node to another node. But even after 15 hours it is still stuck in INITIALIZING state. Also …

---

## [ES data on JBOD or RAID](https://discuss.elastic.co/t/es-data-on-jbod-or-raid/17516)

<div class="topic-metadata">

**Author:** [@Ronny\_Vaningh\_2](https://discuss.elastic.co/u/Ronny_Vaningh_2)\
**Replies:** 1\
**Last updated:** [May 14, 2014, 4:11pm UTC](https://discuss.elastic.co/t/es-data-on-jbod-or-raid/17516 "2014-05-14T16:11:43Z")

</div>

Hi I want to set up a small search cluster and I was wondering if raid is really needed since ES already has replication built in. Can I use multpile data paths in the ES config pointing to /mnt/disk1 ... /mn…

---

## [Add AWS EKS Cluster name dynamically to metrics/logs collection via fleet agent](https://discuss.elastic.co/t/add-aws-eks-cluster-name-dynamically-to-metrics-logs-collection-via-fleet-agent/326341)

<div class="topic-metadata">

**Author:** [@ekane\_bksy](https://discuss.elastic.co/u/ekane_bksy)\
**Replies:** 0\
**Last updated:** [February 23, 2023, 3:41pm UTC](https://discuss.elastic.co/t/add-aws-eks-cluster-name-dynamically-to-metrics-logs-collection-via-fleet-agent/326341 "2023-02-23T15:41:04Z")

</div>

How to configure elastic-agent dynamically with AWS EKS cluster name to metrics and logs forwarded to ElasticCloud? Documentation details configuring ElasticCloud side with processor. What method can be used on agent-si…

---

## [Logstash: logstash-plugin install logstash-codec-protobuf, message: certificate verify failed](https://discuss.elastic.co/t/logstash-logstash-plugin-install-logstash-codec-protobuf-message-certificate-verify-failed/308504)

<div class="topic-metadata">

**Author:** [@vante](https://discuss.elastic.co/u/vante)\
**Replies:** 0\
**Last updated:** [June 29, 2022, 5:27pm UTC](https://discuss.elastic.co/t/logstash-logstash-plugin-install-logstash-codec-protobuf-message-certificate-verify-failed/308504 "2022-06-29T17:27:17Z")

</div>

Hey, i am trying to install protobuf codec plugin for my logstash but got this //ERROR: Something went wrong when installing logstash-codec-protobuf, message: certificate verify failed. Does anyone know how to go about …

---

## [RPM install](https://discuss.elastic.co/t/rpm-install/200886)

<div class="topic-metadata">

**Author:** [@Brendan1](https://discuss.elastic.co/u/Brendan1)\
**Replies:** 0\
**Last updated:** [September 24, 2019, 2:00pm UTC](https://discuss.elastic.co/t/rpm-install/200886 "2019-09-24T14:00:21Z")

</div>

We are trying to install a prod cluster using the RPM as root. We want it to run under a specific service account we have created. As per https://github.com/elastic/elasticsearch/issues/8419 . the home directory is ins…

---

## [Finding out offsets of query matches in indexed text](https://discuss.elastic.co/t/finding-out-offsets-of-query-matches-in-indexed-text/4645)

<div class="topic-metadata">

**Author:** [@Felix\_S](https://discuss.elastic.co/u/Felix_S)\
**Replies:** 0\
**Last updated:** [June 17, 2011, 8:30am UTC](https://discuss.elastic.co/t/finding-out-offsets-of-query-matches-in-indexed-text/4645 "2011-06-17T08:30:16Z")

</div>

Hi! I need to find out where exactly search queries I run match in the indexed documents, in order to highlight these positions; like, if I search for "squirrel", i'd like to highlight that term in the search resul…

---

## [Elasticsearch Keystore error: Device or Resource Busy while upgrading](https://discuss.elastic.co/t/elasticsearch-keystore-error-device-or-resource-busy-while-upgrading/362884)

<div class="topic-metadata">

**Author:** [@Umang\_Pachaury](https://discuss.elastic.co/u/Umang_Pachaury)\
**Replies:** 4\
**Last updated:** [September 18, 2025, 7:35am UTC](https://discuss.elastic.co/t/elasticsearch-keystore-error-device-or-resource-busy-while-upgrading/362884 "2025-09-18T07:35:00Z")

</div>

Hello, I have a multi node Elasticsearch cluster running on version 8.13.4. The cluster needed Slack Integration and AD/LDAP integration so it also has elasticsearch.keystore file bind mount to it. The cluster is set u…

---

## [Ingest pipeline created for filebeat log using grok pattern,but unable to run in dev tools](https://discuss.elastic.co/t/ingest-pipeline-created-for-filebeat-log-using-grok-pattern-but-unable-to-run-in-dev-tools/327660)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 4\
**Last updated:** [March 15, 2023, 11:43am UTC](https://discuss.elastic.co/t/ingest-pipeline-created-for-filebeat-log-using-grok-pattern-but-unable-to-run-in-dev-tools/327660 "2023-03-15T11:43:12Z")

</div>

Hello All, I'm successfully getting output of my log pattern using grok pattern,but when trying to create log ingest pipeline that can be used in template later,I'm getting exception while running the ingest pipeline in…

---

## [Unable to Upload File](https://discuss.elastic.co/t/unable-to-upload-file/261162)

<div class="topic-metadata">

**Author:** [@xenon-xenon](https://discuss.elastic.co/u/xenon-xenon)\
**Replies:** 4\
**Last updated:** [January 15, 2021, 8:16am UTC](https://discuss.elastic.co/t/unable-to-upload-file/261162 "2021-01-15T08:16:03Z")

</div>

I run kibana 7.10.1 on windows and have ES 7.10.1 on my linux machine , I configured ES IP on kibana.yml to connect and when i run the kibana there are some errors but I can open kibana on my browser and see sample data …

---

## [\[ERROR\]\[o.e.b.Bootstrap \] \[X.Y.Z\] Exception](https://discuss.elastic.co/t/error-o-e-b-bootstrap-x-y-z-exception/177340)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 4\
**Last updated:** [April 22, 2019, 2:38pm UTC](https://discuss.elastic.co/t/error-o-e-b-bootstrap-x-y-z-exception/177340 "2019-04-22T14:38:45Z")

</div>

Hello World! My environment: # cat /etc/redhat-release Red Hat Enterprise Linux Server release 7.6 (Maipo) # uname -a Linux X 3.10.0-957.5.1.el7.x86\_64 #1 SMP Wed Dec 19 10:46:58 EST 2018 x86\_64 x86\_64 x86\_64 GNU/Linu…

---

## [Logstash says ok but nog data in Elastic/Kibana](https://discuss.elastic.co/t/logstash-says-ok-but-nog-data-in-elastic-kibana/129294)

<div class="topic-metadata">

**Author:** [@Qux](https://discuss.elastic.co/u/Qux)\
**Replies:** 4\
**Last updated:** [April 24, 2018, 2:36pm UTC](https://discuss.elastic.co/t/logstash-says-ok-but-nog-data-in-elastic-kibana/129294 "2018-04-24T14:36:58Z")

</div>

I\`m having the problem that Logstash reads the config and says oke but doesnt push data to Elastic/Kibana. I have run the ELK stack on local first (windows) and that works perfect, but on my vps it doesnt want to push t…

---

## [Document size used for benchmarking](https://discuss.elastic.co/t/document-size-used-for-benchmarking/58260)

<div class="topic-metadata">

**Author:** [@vinayakshukre](https://discuss.elastic.co/u/vinayakshukre)\
**Replies:** 4\
**Last updated:** [August 18, 2016, 5:43am UTC](https://discuss.elastic.co/t/document-size-used-for-benchmarking/58260 "2016-08-18T05:43:56Z")

</div>

Hello All, I looked at Geonames benchmark results and Hardware details. Results are very impressive for indexing. On single node machine, they are able to index around 40000 documents per second. They have not…

---

## [Esrally error executing./esrally configure command](https://discuss.elastic.co/t/esrally-error-executing-esrally-configure-command/274894)

<div class="topic-metadata">

**Author:** [@liuliugang](https://discuss.elastic.co/u/liuliugang)\
**Replies:** 2\
**Last updated:** [June 4, 2021, 3:38am UTC](https://discuss.elastic.co/t/esrally-error-executing-esrally-configure-command/274894 "2021-06-04T03:38:16Z")

</div>

Please give advice or comments,thanks \[root@xm-ls001 bin\]# ./esrally configure Traceback (most recent call last): File "./esrally", line 7, in from esrally.rally import main File "/usr/local/python3.7/lib/python3.7…

---

## [Are there limits for the 14 day trial?](https://discuss.elastic.co/t/are-there-limits-for-the-14-day-trial/216730)

<div class="topic-metadata">

**Author:** [@fallenreaper](https://discuss.elastic.co/u/fallenreaper)\
**Replies:** 2\
**Last updated:** [January 28, 2020, 1:31pm UTC](https://discuss.elastic.co/t/are-there-limits-for-the-14-day-trial/216730 "2020-01-28T13:31:26Z")

</div>

I was wanting to try out the 14 day trial, but i was curious about a few things. It says free, but is it really, completely free? I was dabbling the opensource versions, but i wanted to try some of the most interesting…

---

## [Logstash WMI plugin help](https://discuss.elastic.co/t/logstash-wmi-plugin-help/55509)

<div class="topic-metadata">

**Author:** [@Jagadish\_Manepalli](https://discuss.elastic.co/u/Jagadish_Manepalli)\
**Replies:** 2\
**Last updated:** [July 4, 2017, 8:24am UTC](https://discuss.elastic.co/t/logstash-wmi-plugin-help/55509 "2017-07-04T08:24:14Z")

</div>

Hi, I am trying to collect the performance counters on the windows system using the below configuration. But I am getting the following error. Please suggest me any solution to overcome the error. The error reported …

---

## [Libbeat test failures on 32-bit systems](https://discuss.elastic.co/t/libbeat-test-failures-on-32-bit-systems/72418)

<div class="topic-metadata">

**Author:** [@spacewrangler](https://discuss.elastic.co/u/spacewrangler)\
**Replies:** 2\
**Last updated:** [January 23, 2017, 9:02pm UTC](https://discuss.elastic.co/t/libbeat-test-failures-on-32-bit-systems/72418 "2017-01-23T21:02:03Z")

</div>

I'm working on getting beats to build/run on my Raspberry Pi 3, running Raspbian, which is 32-bit. I'm running into a test build failure in libbeat/processors/processor\_test.go, and consequently, make unit-tests fails. …

---

## [Reverse engineer a log file](https://discuss.elastic.co/t/reverse-engineer-a-log-file/58861)

<div class="topic-metadata">

**Author:** [@Wikky](https://discuss.elastic.co/u/Wikky)\
**Replies:** 2\
**Last updated:** [August 25, 2016, 2:30pm UTC](https://discuss.elastic.co/t/reverse-engineer-a-log-file/58861 "2016-08-25T14:30:13Z")

</div>

Looking for ideas from /everybody/ Scenario: Error messages were found (via a Kibana visualization), but the original log file itself has rolled over, and the Errors I'm looking for are gone. I'd like to log a bug and…

---

## [Logs not pushed to elasticsearch](https://discuss.elastic.co/t/logs-not-pushed-to-elasticsearch/330590)

<div class="topic-metadata">

**Author:** [@aaronlbk](https://discuss.elastic.co/u/aaronlbk)\
**Replies:** 5\
**Last updated:** [May 2, 2023, 8:25pm UTC](https://discuss.elastic.co/t/logs-not-pushed-to-elasticsearch/330590 "2023-05-02T20:25:48Z")

</div>

I have an issue with logstash that is not pushing logs to elastic. Below is the config file filebeat.yml that is used. I have tried to check on kibana if the index is even created and it is not. # Sample Logstash config…

---

## [Can't put http\_endpoint messages to root](https://discuss.elastic.co/t/cant-put-http-endpoint-messages-to-root/290527)

<div class="topic-metadata">

**Author:** [@uhfath](https://discuss.elastic.co/u/uhfath)\
**Replies:** 5\
**Last updated:** [December 8, 2021, 2:38pm UTC](https://discuss.elastic.co/t/cant-put-http-endpoint-messages-to-root/290527 "2021-12-08T14:38:41Z")

</div>

Here is my config: filebeat.inputs: - type: http\_endpoint enabled: true listen\_address: 127.0.0.1 listen\_port: 20000 response\_code: 204 response\_body: null prefix: null fields: app\_name: "MedService.UI…

---

## [Error from stock auditbeat dashboards](https://discuss.elastic.co/t/error-from-stock-auditbeat-dashboards/259485)

<div class="topic-metadata">

**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\
**Replies:** 5\
**Last updated:** [December 30, 2020, 1:16pm UTC](https://discuss.elastic.co/t/error-from-stock-auditbeat-dashboards/259485 "2020-12-30T13:16:47Z")

</div>

I installed the 'stock' auditbeat dashboards for v7.10. Opening the 'System Overview ECS' I get this error on the majority of the panels: search\_phase\_execution\_exception Error: Bad Request at Fetch.\_callee3$ (http://10…

---

## [Build kibana via proxy](https://discuss.elastic.co/t/build-kibana-via-proxy/256212)

<div class="topic-metadata">

**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\
**Replies:** 5\
**Last updated:** [December 28, 2020, 8:48am UTC](https://discuss.elastic.co/t/build-kibana-via-proxy/256212 "2020-12-28T08:48:36Z")

</div>

i have a source code of kibana 7.3.3 i want to build kibana by : yarn build --skip-node-download --skip-os-packages --skip-archives i have no internet access except an http proxy! i want to build kibana by using this…

---

## [Security overview doesn't show any data](https://discuss.elastic.co/t/security-overview-doesnt-show-any-data/246099)

<div class="topic-metadata">

**Author:** [@s\_elk](https://discuss.elastic.co/u/s_elk)\
**Replies:** 5\
**Last updated:** [November 4, 2020, 12:54am UTC](https://discuss.elastic.co/t/security-overview-doesnt-show-any-data/246099 "2020-11-04T00:54:24Z")

</div>

Hi, I've installed the new version 7.9. I've 4 hosts (Linux/Windows) online in my Fleet tab under Ingest Manager (I've installed elastic agent correctly on them) with some active integrations (Elastic Endpoint Security…

---

## [How to find customer schema in APM?](https://discuss.elastic.co/t/how-to-find-customer-schema-in-apm/211952)

<div class="topic-metadata">

**Author:** [@Shubhangi](https://discuss.elastic.co/u/Shubhangi)\
**Replies:** 5\
**Last updated:** [December 18, 2019, 8:46am UTC](https://discuss.elastic.co/t/how-to-find-customer-schema-in-apm/211952 "2019-12-18T08:46:11Z")

</div>

Kibana version: 6.8 Elasticsearch version: 6.8 APM Server version: 6.8 APM Agent language and version: Java 8 Browser version: Firefox 66.0.3 (64-bit) Original install method (e.g. download page, yum, deb, from sour…

---

## [Delete index cause the Master node offline](https://discuss.elastic.co/t/delete-index-cause-the-master-node-offline/210457)

<div class="topic-metadata">

**Author:** [@KellyK313](https://discuss.elastic.co/u/KellyK313)\
**Replies:** 5\
**Last updated:** [December 4, 2019, 7:55pm UTC](https://discuss.elastic.co/t/delete-index-cause-the-master-node-offline/210457 "2019-12-04T19:55:21Z")

</div>

When I delete a big-data index,I saw my master node offline and recovery a while later. I just feel the delete syntax is calling in the data node,have nothing to do with the master node. Somebody help me to figure it o…

---

## [How to measure an 'Empty' operation](https://discuss.elastic.co/t/how-to-measure-an-empty-operation/195122)

<div class="topic-metadata">

**Author:** [@David\_Samokovlisky](https://discuss.elastic.co/u/David_Samokovlisky)\
**Replies:** 5\
**Last updated:** [August 14, 2019, 4:10pm UTC](https://discuss.elastic.co/t/how-to-measure-an-empty-operation/195122 "2019-08-14T16:10:50Z")

</div>

Hi Because esrally doesn't support upsert's I want to try a different approach, as to use esrally only for measurements, and do the operation externally. My question is, is there a way to make an empty operation, that …

---

## [SecurityException when connecting to ESCloud with TransportClient](https://discuss.elastic.co/t/securityexception-when-connecting-to-escloud-with-transportclient/161873)

<div class="topic-metadata">

**Author:** [@sschwell](https://discuss.elastic.co/u/sschwell)\
**Replies:** 5\
**Last updated:** [January 3, 2019, 3:27pm UTC](https://discuss.elastic.co/t/securityexception-when-connecting-to-escloud-with-transportclient/161873 "2019-01-03T15:27:27Z")

</div>

I'm following https://github.com/elastic/found-shield-example/blob/master/src/main/java/org/elasticsearch/cloud/transport/example/TransportExample.java to connect to ESCloud 6.5.4 instance. I am using admin creds. Is the…

---

## [What can I expect after restoring a snapshot?](https://discuss.elastic.co/t/what-can-i-expect-after-restoring-a-snapshot/119666)

<div class="topic-metadata">

**Author:** [@Marco\_Costantini](https://discuss.elastic.co/u/Marco_Costantini)\
**Replies:** 5\
**Last updated:** [February 14, 2018, 1:59pm UTC](https://discuss.elastic.co/t/what-can-i-expect-after-restoring-a-snapshot/119666 "2018-02-14T13:59:53Z")

</div>

I have put in place a snapshot restoration process. It's great, but I've chosen to delete the indices first (as opposed to 'closing' them). The reason I took this approach is because it is easy to know what data will exi…

---

## [Problem understanding the concept of filebeat -\> logstash](https://discuss.elastic.co/t/problem-understanding-the-concept-of-filebeat-logstash/105230)

<div class="topic-metadata">

**Author:** [@sd2j](https://discuss.elastic.co/u/sd2j)\
**Replies:** 5\
**Last updated:** [October 26, 2017, 3:26pm UTC](https://discuss.elastic.co/t/problem-understanding-the-concept-of-filebeat-logstash/105230 "2017-10-26T15:26:11Z")

</div>

Well I got everything running .. at least partially. I am able to get logs from filebeat -\> logstash -\> elastic -\> kibana I have to admit i haven't read all documentation - which is way to much for my short time. But I …

---

## [Elasticsearch parent child mergin two tables together](https://discuss.elastic.co/t/elasticsearch-parent-child-mergin-two-tables-together/72456)

<div class="topic-metadata">

**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\
**Replies:** 5\
**Last updated:** [February 9, 2017, 7:22am UTC](https://discuss.elastic.co/t/elasticsearch-parent-child-mergin-two-tables-together/72456 "2017-02-09T07:22:03Z")

</div>

How do I do something like a JOIN in elasticsearch. I have 2 index "index": "blacklist1", "type": "logs", "\_id": "KS8CI-XKSID8DKSLAKS" "index": "rawfirewall\_logs", "type": "logs", "id": "SADLFSJFOI3098WOIJFD", Assu…

---

## [Master node discovery problem](https://discuss.elastic.co/t/master-node-discovery-problem/356415)

<div class="topic-metadata">

**Author:** [@esrcon](https://discuss.elastic.co/u/esrcon)\
**Replies:** 6\
**Last updated:** [March 29, 2024, 5:10pm UTC](https://discuss.elastic.co/t/master-node-discovery-problem/356415 "2024-03-29T17:10:22Z")

</div>

Hello, My cluster has 3 master nodes. But during deployment, two nodes are not able to join cluster. Their log says "an election requires at least 2 nodes with ids" but only one is discovered and "not a quorum". Then I…

---

## [Gsub remove words less than 4 characters in length](https://discuss.elastic.co/t/gsub-remove-words-less-than-4-characters-in-length/247649)

<div class="topic-metadata">

**Author:** [@kopacko](https://discuss.elastic.co/u/kopacko)\
**Replies:** 6\
**Last updated:** [September 6, 2020, 11:50pm UTC](https://discuss.elastic.co/t/gsub-remove-words-less-than-4-characters-in-length/247649 "2020-09-06T23:50:52Z")

</div>

I am attempting to use a gsub mutate to remove words that are less than 4 characters in length. mutate { gsub =\> \[ "\[tag\]\[cloud\]\[chat\]", "(\\S+){1,3}", "" \] } But it is removing everything. Any suggestions?

---

## [Kibana login page detail "authenticity\_token is not allowed" when enable SAML to login](https://discuss.elastic.co/t/kibana-login-page-detail-authenticity-token-is-not-allowed-when-enable-saml-to-login/203972)

<div class="topic-metadata">

**Author:** [@rambo](https://discuss.elastic.co/u/rambo)\
**Replies:** 6\
**Last updated:** [October 21, 2019, 2:14pm UTC](https://discuss.elastic.co/t/kibana-login-page-detail-authenticity-token-is-not-allowed-when-enable-saml-to-login/203972 "2019-10-21T14:14:02Z")

</div>

Hi, I met an error after enable SSO function when I login kibana. The kibana login page detail below error message, I don't know how to fix it. {"statusCode":400,"error":"Bad Request","message":""utf8" is not allowed…

---

## [\[Machine Learning\] No document detection](https://discuss.elastic.co/t/machine-learning-no-document-detection/187519)

<div class="topic-metadata">

**Author:** [@fbonningues](https://discuss.elastic.co/u/fbonningues)\
**Replies:** 6\
**Last updated:** [June 26, 2019, 2:30pm UTC](https://discuss.elastic.co/t/machine-learning-no-document-detection/187519 "2019-06-26T14:30:14Z")

</div>

Hi, I have activated the trial licence to make some test with Machine Learning feature. I have a continus data feed with defined templates, each document having a field with a specific value (in this case, a shop\_id). …

---

## [Installing ELK 6.5.1 results in Kibana web app not loading properly](https://discuss.elastic.co/t/installing-elk-6-5-1-results-in-kibana-web-app-not-loading-properly/172404)

<div class="topic-metadata">

**Author:** [@Kleon](https://discuss.elastic.co/u/Kleon)\
**Replies:** 6\
**Last updated:** [March 29, 2019, 12:18pm UTC](https://discuss.elastic.co/t/installing-elk-6-5-1-results-in-kibana-web-app-not-loading-properly/172404 "2019-03-29T12:18:56Z")

</div>

I wanted to upgrade all ELK tools from 6.2 to 6.5.1, but I am encountering that same problem all the time, even if I uninstalled and installed all again, from chef cookbooks. The problem is that Kibana web app http://12…

---

## [Kibana 7.12.0 server.cors setting seems not work](https://discuss.elastic.co/t/kibana-7-12-0-server-cors-setting-seems-not-work/309561)

<div class="topic-metadata">

**Author:** [@Terry\_Li](https://discuss.elastic.co/u/Terry_Li)\
**Replies:** 1\
**Last updated:** [July 15, 2022, 2:57pm UTC](https://discuss.elastic.co/t/kibana-7-12-0-server-cors-setting-seems-not-work/309561 "2022-07-15T14:57:09Z")

</div>

Hi, I need to login Kibana via my application ("http://localhost:3000"). I post login data to "http://localhost:5601/internal/security/login" by ajax, but "Access-Control-Allow-Origin" header not show in the response $.…

---

## [JAVA Agent - Websphere not starting up with agent installed](https://discuss.elastic.co/t/java-agent-websphere-not-starting-up-with-agent-installed/198547)

<div class="topic-metadata">

**Author:** [@AbhishekBSGI](https://discuss.elastic.co/u/AbhishekBSGI)\
**Replies:** 1\
**Last updated:** [September 8, 2019, 10:21am UTC](https://discuss.elastic.co/t/java-agent-websphere-not-starting-up-with-agent-installed/198547 "2019-09-08T10:21:32Z")

</div>

Elasticsearch version: 7.3.1 APM Server version: 7.3.1 APM Agent language and version: JAVA agent 1.9.0 Websphere Application Server version: 8.5.5.0, Single cell-node-server configuration. Description of the problem:…

---

## [Java trace between different services, instances](https://discuss.elastic.co/t/java-trace-between-different-services-instances/188975)

<div class="topic-metadata">

**Author:** [@zolthar-z](https://discuss.elastic.co/u/zolthar-z)\
**Replies:** 7\
**Last updated:** [July 8, 2019, 3:01pm UTC](https://discuss.elastic.co/t/java-trace-between-different-services-instances/188975 "2019-07-08T15:01:09Z")

</div>

Good Day I have an application that is composed for several Java services distributed in different servers, right now I have apm java agent installed in each server and can collect the data from each server without pro…

[Previous page](https://discuss.elastic.co/top.md?page=1586&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1588&per_page=50&period=all)
