# Top

**URL:** https://discuss.elastic.co/top.md?page=1597&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1598

---

## [Track individual sql statements executed in a DB](https://discuss.elastic.co/t/track-individual-sql-statements-executed-in-a-db/149721)

<div class="topic-metadata">

**Author:** [@wat0075](https://discuss.elastic.co/u/wat0075)\
**Replies:** 5\
**Last updated:** [September 27, 2018, 12:44am UTC](https://discuss.elastic.co/t/track-individual-sql-statements-executed-in-a-db/149721 "2018-09-27T00:44:29Z")

</div>

Hello group, I am an ES newbie and one of the things I am looking at is to use ES to monitor our databases to track the sql statements that are being executed in the database over time. With this solution I would like …

---

## [Kibana is not getting](https://discuss.elastic.co/t/kibana-is-not-getting/107497)

<div class="topic-metadata">

**Author:** [@saafianihan](https://discuss.elastic.co/u/saafianihan)\
**Replies:** 5\
**Last updated:** [November 14, 2017, 10:28am UTC](https://discuss.elastic.co/t/kibana-is-not-getting/107497 "2017-11-14T10:28:10Z")

</div>

Both elasticsearch and kibana running fine. But i am getting following screen only for long time. why?what happened to my kibana? i am using kibana 5.5.2. \[loading\] Please help me. i am middle of one work...

---

## [Beats and Elastic Agent data streams](https://discuss.elastic.co/t/beats-and-elastic-agent-data-streams/359670)

<div class="topic-metadata">

**Author:** [@Gelinski](https://discuss.elastic.co/u/Gelinski)\
**Replies:** 3\
**Last updated:** [May 17, 2024, 2:08am UTC](https://discuss.elastic.co/t/beats-and-elastic-agent-data-streams/359670 "2024-05-17T02:08:01Z")

</div>

Hello folks, I am researching a little bit about how to send Beats data to Elasticsearch using a Logstash and data streams instead of indexes. Beats -\> Logstash (data stream config) -\> Elasticsearch I know that some B…

---

## [Index and search multiple indices and fields](https://discuss.elastic.co/t/index-and-search-multiple-indices-and-fields/329324)

<div class="topic-metadata">

**Author:** [@Adarsh\_R\_K](https://discuss.elastic.co/u/Adarsh_R_K)\
**Replies:** 3\
**Last updated:** [April 5, 2023, 12:14pm UTC](https://discuss.elastic.co/t/index-and-search-multiple-indices-and-fields/329324 "2023-04-05T12:14:45Z")

</div>

I am new to elasticsearch I am using elasticsearch java-client library to in spring boot application for a global search functionality.I have 5 entity classes with multiple fileds to search for , how can I do that ? I …

---

## [How in elasticsearch do a search for several words working in case the words stand not together?](https://discuss.elastic.co/t/how-in-elasticsearch-do-a-search-for-several-words-working-in-case-the-words-stand-not-together/99595)

<div class="topic-metadata">

**Author:** [@sergei\_kurbako](https://discuss.elastic.co/u/sergei_kurbako)\
**Replies:** 3\
**Last updated:** [September 15, 2017, 10:36pm UTC](https://discuss.elastic.co/t/how-in-elasticsearch-do-a-search-for-several-words-working-in-case-the-words-stand-not-together/99595 "2017-09-15T22:36:23Z")

</div>

How in elasticsearch do a search for several words working in case the words stand not together?

---

## [Unable to parse Grok Filter on Proxy Logs](https://discuss.elastic.co/t/unable-to-parse-grok-filter-on-proxy-logs/79194)

<div class="topic-metadata">

**Author:** [@supercup](https://discuss.elastic.co/u/supercup)\
**Replies:** 3\
**Last updated:** [March 21, 2017, 8:05am UTC](https://discuss.elastic.co/t/unable-to-parse-grok-filter-on-proxy-logs/79194 "2017-03-21T08:05:53Z")

</div>

I am attempting to parse and structured a raw proxy data using GROK filter in the ELK stack and I can,t get the timestamp and user agent string in the correct format. Do refer to sample log as follows: "1488852784.440 …

---

## [How to improve search results with fuzziness on?](https://discuss.elastic.co/t/how-to-improve-search-results-with-fuzziness-on/61803)

<div class="topic-metadata">

**Author:** [@pkulas](https://discuss.elastic.co/u/pkulas)\
**Replies:** 3\
**Last updated:** [October 1, 2016, 11:52am UTC](https://discuss.elastic.co/t/how-to-improve-search-results-with-fuzziness-on/61803 "2016-10-01T11:52:37Z")

</div>

Hello, I'm trying to understand and improve search results. Analyzer use ngram min=3, max=3, language='Swedish', filter=\['lowercase'\]. For search fuzziness is set for 1. It doesn't work bad but we search for query "Fri…

---

## [NodeDisconnectedException when using optimize ; "received ping response with no matching id"](https://discuss.elastic.co/t/nodedisconnectedexception-when-using-optimize-received-ping-response-with-no-matching-id/3193)

<div class="topic-metadata">

**Author:** [@Ein\_Droid](https://discuss.elastic.co/u/Ein_Droid)\
**Replies:** 3\
**Last updated:** [August 13, 2010, 11:36am UTC](https://discuss.elastic.co/t/nodedisconnectedexception-when-using-optimize-received-ping-response-with-no-matching-id/3193 "2010-08-13T11:36:17Z")

</div>

Hi Shay, I experienced some strange behaviour, but "all is good" at the end :) Thats the story:: just indexed 17 M documents with default index, after that invoked optimizing index: $ time curl -XPOST ' http:…

---

## [File\_completed\_action not deleting files](https://discuss.elastic.co/t/file-completed-action-not-deleting-files/236424)

<div class="topic-metadata">

**Author:** [@zfmoto](https://discuss.elastic.co/u/zfmoto)\
**Replies:** 0\
**Last updated:** [June 9, 2020, 10:34pm UTC](https://discuss.elastic.co/t/file-completed-action-not-deleting-files/236424 "2020-06-09T22:34:11Z")

</div>

I enabled file\_completed\_action to delete, however the files still exist & are not logged after parsing. I've tried enabling permissions for these files as well to allow write. Here's a view of my config + permissions. i…

---

## [Monitoring cluster logstash error](https://discuss.elastic.co/t/monitoring-cluster-logstash-error/238795)

<div class="topic-metadata">

**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\
**Replies:** 4\
**Last updated:** [June 30, 2020, 12:53am UTC](https://discuss.elastic.co/t/monitoring-cluster-logstash-error/238795 "2020-06-30T00:53:18Z")

</div>

Hi all, I currently have a ELK stack in product and have metricbeat setup on every node logstash instances pushing metric and monitoring data to a separate monitoring cluster. Everything was working in 7.7.1, but since…

---

## [Link external data to Elastic](https://discuss.elastic.co/t/link-external-data-to-elastic/226964)

<div class="topic-metadata">

**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\
**Replies:** 4\
**Last updated:** [April 24, 2020, 6:39pm UTC](https://discuss.elastic.co/t/link-external-data-to-elastic/226964 "2020-04-24T18:39:49Z")

</div>

Kibana version : 7.6 Elasticsearch version : 7.6 APM Server version : 7.3.2 APM Agent language and version : java 1.9.0 Fresh install or upgraded from other version? fresh install Is there anything special in your s…

---

## [Dynamic variable for http poller input plugin](https://discuss.elastic.co/t/dynamic-variable-for-http-poller-input-plugin/223912)

<div class="topic-metadata">

**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\
**Replies:** 4\
**Last updated:** [March 20, 2020, 1:08pm UTC](https://discuss.elastic.co/t/dynamic-variable-for-http-poller-input-plugin/223912 "2020-03-20T13:08:15Z")

</div>

I want to download and parse a list of csv with yearly weather data with logstash. "YEAR" would be my variable and I need to increase from 1998 to 2019. I tried to use this simple conf file but not even works. input {…

---

## [Machine Learning Data Visualizer "Error loading data in index"](https://discuss.elastic.co/t/machine-learning-data-visualizer-error-loading-data-in-index/219161)

<div class="topic-metadata">

**Author:** [@steveg](https://discuss.elastic.co/u/steveg)\
**Replies:** 4\
**Last updated:** [March 2, 2020, 4:42pm UTC](https://discuss.elastic.co/t/machine-learning-data-visualizer-error-loading-data-in-index/219161 "2020-03-02T16:42:35Z")

</div>

I am attempting to use Machine Learning Data Visualisation - On Prem ELK stack 7.5, Basic Licence, I have an index which is receiving log data and displaying data in Custom dashboards However, I get the following error…

---

## [Coordinate map with additional layers provided by elasticsearch](https://discuss.elastic.co/t/coordinate-map-with-additional-layers-provided-by-elasticsearch/215997)

<div class="topic-metadata">

**Author:** [@rameez\_ibrahim](https://discuss.elastic.co/u/rameez_ibrahim)\
**Replies:** 4\
**Last updated:** [January 28, 2020, 8:05am UTC](https://discuss.elastic.co/t/coordinate-map-with-additional-layers-provided-by-elasticsearch/215997 "2020-01-28T08:05:37Z")

</div>

How to create a coordinate map in kibana with additional LAYERS which is provided by elastic-search? (Default wms layers) What are the values for : WMS url WMS layers WMS version

---

## [Update ELK-Stack with new security features in docker](https://discuss.elastic.co/t/update-elk-stack-with-new-security-features-in-docker/182127)

<div class="topic-metadata">

**Author:** [@J143](https://discuss.elastic.co/u/J143)\
**Replies:** 4\
**Last updated:** [May 22, 2019, 6:57am UTC](https://discuss.elastic.co/t/update-elk-stack-with-new-security-features-in-docker/182127 "2019-05-22T06:57:26Z")

</div>

Hello, I want to setup the ELK-Stack with docker-compose. The version 6.7 works fine. But now I want to add the new free elasticsearch security features (only create users and roles, no ssl certificate). Does anybody kno…

---

## [ClusterBlockException issue](https://discuss.elastic.co/t/clusterblockexception-issue/80477)

<div class="topic-metadata">

**Author:** [@Balamurali](https://discuss.elastic.co/u/Balamurali)\
**Replies:** 4\
**Last updated:** [March 29, 2017, 2:11pm UTC](https://discuss.elastic.co/t/clusterblockexception-issue/80477 "2017-03-29T14:11:16Z")

</div>

Hi All, We are using elasticsearch 1.3.7 cluster with 5 data only nodes and 3 master only nodes with 6 GB heap size for each node. FYI,already we are in ES upgrading progress. Today suddenly one node got removed , sh…

---

## [Tying an ID back to it's name which resolves in a different log](https://discuss.elastic.co/t/tying-an-id-back-to-its-name-which-resolves-in-a-different-log/52472)

<div class="topic-metadata">

**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\
**Replies:** 4\
**Last updated:** [June 10, 2016, 7:07pm UTC](https://discuss.elastic.co/t/tying-an-id-back-to-its-name-which-resolves-in-a-different-log/52472 "2016-06-10T19:07:51Z")

</div>

I'm monitoring our Mesos Master for metrics on different Mesos Frameworks. The issue is that the logs which provide metrics for frameworks only provide a numeric ID, such as 20160603-064656-2785394442-5050-26628-2075,…

---

## [Elasticsearch performance enhancements on heavy index](https://discuss.elastic.co/t/elasticsearch-performance-enhancements-on-heavy-index/49170)

<div class="topic-metadata">

**Author:** [@andrea\_patricelli](https://discuss.elastic.co/u/andrea_patricelli)\
**Replies:** 4\
**Last updated:** [May 9, 2016, 8:58am UTC](https://discuss.elastic.co/t/elasticsearch-performance-enhancements-on-heavy-index/49170 "2016-05-09T08:58:03Z")

</div>

I'll try to generalize my special case in a few words. I've an elasticsearch index "sample" with two types: type1, type2. I have index size of about 1000000 (one million) entries, and parent-child relations between ent…

---

## [Exceptions with this morning's ES snapshot](https://discuss.elastic.co/t/exceptions-with-this-mornings-es-snapshot/11108)

<div class="topic-metadata">

**Author:** [@Jilles\_van\_Gurp](https://discuss.elastic.co/u/Jilles_van_Gurp)\
**Replies:** 4\
**Last updated:** [March 12, 2013, 12:10pm UTC](https://discuss.elastic.co/t/exceptions-with-this-mornings-es-snapshot/11108 "2013-03-12T12:10:44Z")

</div>

I saw Simon has landed his 4.2 branch and built a snapshot this morning. Now my tests are failing with the exception pasted below. It seems some class has disappeared that is still needed. Is something broken on …

---

## [Settings to create minimalistic embedded node](https://discuss.elastic.co/t/settings-to-create-minimalistic-embedded-node/9506)

<div class="topic-metadata">

**Author:** [@amjath\_khan](https://discuss.elastic.co/u/amjath_khan)\
**Replies:** 4\
**Last updated:** [November 6, 2012, 9:46am UTC](https://discuss.elastic.co/t/settings-to-create-minimalistic-embedded-node/9506 "2012-11-06T09:46:28Z")

</div>

As part of my application deployment in an application server, I am creating an embedded Node. This Node will be used to perform index related operations from my web application. As per the log, it takes around 5-8 …

---

## [ElasticSearch statefulset not using data volume](https://discuss.elastic.co/t/elasticsearch-statefulset-not-using-data-volume/270636)

<div class="topic-metadata">

**Author:** [@yeyus](https://discuss.elastic.co/u/yeyus)\
**Replies:** 1\
**Last updated:** [April 20, 2021, 5:01am UTC](https://discuss.elastic.co/t/elasticsearch-statefulset-not-using-data-volume/270636 "2021-04-20T05:01:57Z")

</div>

Hi fellow users, I've deployed the following single-node setup in my k8s cluster: eck operator: 1.5.0 elasticsearch: 7.12.0 with the following config: apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasti…

---

## [Error: Resource is under maintenance / recovery](https://discuss.elastic.co/t/error-resource-is-under-maintenance-recovery/266056)

<div class="topic-metadata">

**Author:** [@Arjun\_S](https://discuss.elastic.co/u/Arjun_S)\
**Replies:** 1\
**Last updated:** [March 3, 2021, 7:32am UTC](https://discuss.elastic.co/t/error-resource-is-under-maintenance-recovery/266056 "2021-03-03T07:32:25Z")

</div>

We have hosted the ES in the ES cloud, and we got this error multiple times while doing a write operation request(POST) to one of our indices. Elasticsearch\\Common\\Exceptions\\ServerErrorResponseException: {"ok":false,"m…

---

## [How to use multiple statement inside the watcher transform?](https://discuss.elastic.co/t/how-to-use-multiple-statement-inside-the-watcher-transform/195078)

<div class="topic-metadata">

**Author:** [@saurabh06](https://discuss.elastic.co/u/saurabh06)\
**Replies:** 1\
**Last updated:** [August 14, 2019, 7:50am UTC](https://discuss.elastic.co/t/how-to-use-multiple-statement-inside-the-watcher-transform/195078 "2019-08-14T07:50:26Z")

</div>

I have to write script inside the watcher transform i.e adding the loop and condition under watcher transform using groovy then how to add multiple statement under transform. while creating it throwing me error \[script\] …

---

## [Reading multiple CSV file with multiple header](https://discuss.elastic.co/t/reading-multiple-csv-file-with-multiple-header/191582)

<div class="topic-metadata">

**Author:** [@Makra](https://discuss.elastic.co/u/Makra)\
**Replies:** 1\
**Last updated:** [July 22, 2019, 12:04pm UTC](https://discuss.elastic.co/t/reading-multiple-csv-file-with-multiple-header/191582 "2019-07-22T12:04:57Z")

</div>

Hi I am trying to read multiple CSV file(bulk) those contains multiple headers. The no of column and their names are dynamic. While parsing the CSV files, I don't want to loose mapping between column header and the cor…

---

## ["http client did not trust this server's certificate"](https://discuss.elastic.co/t/http-client-did-not-trust-this-servers-certificate/146136)

<div class="topic-metadata">

**Author:** [@wangqinghuan](https://discuss.elastic.co/u/wangqinghuan)\
**Replies:** 1\
**Last updated:** [August 27, 2018, 9:32am UTC](https://discuss.elastic.co/t/http-client-did-not-trust-this-servers-certificate/146136 "2018-08-27T09:32:23Z")

</div>

Hi I enabled ssl on http layer between http client and elasticsearch. When I login in cerebro, I get a exception "http client did not trust this server's certificate,". So how to configure cerebro supported ssl ?

---

## [Bootstrap checks failed - no specifics](https://discuss.elastic.co/t/bootstrap-checks-failed-no-specifics/130295)

<div class="topic-metadata">

**Author:** [@Josh\_McDonald](https://discuss.elastic.co/u/Josh_McDonald)\
**Replies:** 1\
**Last updated:** [May 2, 2018, 9:01pm UTC](https://discuss.elastic.co/t/bootstrap-checks-failed-no-specifics/130295 "2018-05-02T21:01:26Z")

</div>

Environment: ES 6.2.4 (installed via apt-get) Ubuntu 16.04 I'm trying to start ES bound to the proper IP in effort to follow the Getting Started Guide for Filebeats. I'm attempting to send syslog information from anot…

---

## [Get logs from an remote SSH server without tools on remote server](https://discuss.elastic.co/t/get-logs-from-an-remote-ssh-server-without-tools-on-remote-server/92011)

<div class="topic-metadata">

**Author:** [@pcouas](https://discuss.elastic.co/u/pcouas)\
**Replies:** 1\
**Last updated:** [July 8, 2017, 3:54pm UTC](https://discuss.elastic.co/t/get-logs-from-an-remote-ssh-server-without-tools-on-remote-server/92011 "2017-07-08T15:54:20Z")

</div>

Hi, Currently i have an Windows Comptuter with Kibana 5 and two tomcat remote server. I could connect only with SSH vith putty to acces remote tomcat logs. I could not install tools on theses linux server Could i con…

---

## ["match\_pattern": "regex" problem](https://discuss.elastic.co/t/match-pattern-regex-problem/77385)

<div class="topic-metadata">

**Author:** [@dkspace](https://discuss.elastic.co/u/dkspace)\
**Replies:** 1\
**Last updated:** [March 7, 2017, 8:31pm UTC](https://discuss.elastic.co/t/match-pattern-regex-problem/77385 "2017-03-07T20:31:46Z")

</div>

Could you help me why not working my regexp "match\_pattern": "regex", for "count" but next one for "ID" is working. el 5.2.0 "mappings" : { "default" : { "all" : {"enabled" : true, "omitnorms" : true}, …

---

## [DATESTAMP\_OTHER seems not parsing properly](https://discuss.elastic.co/t/datestamp-other-seems-not-parsing-properly/52657)

<div class="topic-metadata">

**Author:** [@Adam\_M](https://discuss.elastic.co/u/Adam_M)\
**Replies:** 1\
**Last updated:** [June 14, 2016, 6:47am UTC](https://discuss.elastic.co/t/datestamp-other-seems-not-parsing-properly/52657 "2016-06-14T06:47:36Z")

</div>

Hello! I started playing with Logstash and Kibana and I got stuck with my logfile. I tried different approaches but I just can't parse timestamp properly, elastic keeps mapping that field as string... Anybody help, ple…

---

## [Percentage Graphs](https://discuss.elastic.co/t/percentage-graphs/44457)

<div class="topic-metadata">

**Author:** [@daneitz](https://discuss.elastic.co/u/daneitz)\
**Replies:** 1\
**Last updated:** [March 18, 2016, 1:59pm UTC](https://discuss.elastic.co/t/percentage-graphs/44457 "2016-03-18T13:59:02Z")

</div>

I created a visualization that counts the data for a field based on date. The field is further broken down by ranges. I'm displaying the graph as a percentage so I can get an idea of how much of each range occurred in a…

---

## [SparkSQL Index Mapping, Partition issues](https://discuss.elastic.co/t/sparksql-index-mapping-partition-issues/33419)

<div class="topic-metadata">

**Author:** [@tridib](https://discuss.elastic.co/u/tridib)\
**Replies:** 1\
**Last updated:** [November 7, 2015, 9:16pm UTC](https://discuss.elastic.co/t/sparksql-index-mapping-partition-issues/33419 "2015-11-07T21:16:05Z")

</div>

I am saving a DataFrame into ElasticSearch. The resource look like as follows: {partitionField}/{docType} JavaEsSparkSQL.saveToEs(dataFrame, "{partitionField}/{docType}") It creates one index for each partition value. …

---

## [Not able to connect OneDrive source](https://discuss.elastic.co/t/not-able-to-connect-onedrive-source/276205)

<div class="topic-metadata">

**Author:** [@Francisco\_Gomez1](https://discuss.elastic.co/u/Francisco_Gomez1)\
**Replies:** 6\
**Last updated:** [June 22, 2021, 2:51pm UTC](https://discuss.elastic.co/t/not-able-to-connect-onedrive-source/276205 "2021-06-22T14:51:03Z")

</div>

After i created the application in my azure portal, take the credentials and everything i need as suggested by this documentation: Connecting OneDrive | Workplace Search Guide \[7.13\] | Elastic Im founding myself withou…

---

## [Issue with a WMS layer](https://discuss.elastic.co/t/issue-with-a-wms-layer/246306)

<div class="topic-metadata">

**Author:** [@m4rk](https://discuss.elastic.co/u/m4rk)\
**Replies:** 6\
**Last updated:** [August 28, 2020, 3:41pm UTC](https://discuss.elastic.co/t/issue-with-a-wms-layer/246306 "2020-08-28T15:41:41Z")

</div>

I have a problem which seems to be caused by a WMS layer. I have created a map in Kibana. The first layer contains some geo markers (created from a geoJSON file). I have set this layer to "visible". The second layer l…

---

## [Different scroll id for each subsequent scroll request?](https://discuss.elastic.co/t/different-scroll-id-for-each-subsequent-scroll-request/229580)

<div class="topic-metadata">

**Author:** [@A\_google\_user](https://discuss.elastic.co/u/A_google_user)\
**Replies:** 6\
**Last updated:** [April 27, 2020, 11:27am UTC](https://discuss.elastic.co/t/different-scroll-id-for-each-subsequent-scroll-request/229580 "2020-04-27T11:27:14Z")

</div>

I am using scroll to fetch docs from elasticsearch, modify them, and reindex them. I have read everywhere and it is mentioned here and here that each subsequent request sends different scroll\_id. But I don't see that hap…

---

## [I can't parse my logs anymore](https://discuss.elastic.co/t/i-cant-parse-my-logs-anymore/139117)

<div class="topic-metadata">

**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\
**Replies:** 6\
**Last updated:** [July 10, 2018, 1:29pm UTC](https://discuss.elastic.co/t/i-cant-parse-my-logs-anymore/139117 "2018-07-10T13:29:12Z")

</div>

\[2018-07-09T10:56:45,779\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>"c5653e88eeea542ff562333cfea5db5e6bba4f3e", :\_index=\>"logstash-2018.07.09"…

---

## [Elastic repos](https://discuss.elastic.co/t/elastic-repos/75165)

<div class="topic-metadata">

**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\
**Replies:** 6\
**Last updated:** [February 15, 2017, 5:57pm UTC](https://discuss.elastic.co/t/elastic-repos/75165 "2017-02-15T17:57:15Z")

</div>

Anyone know, where elasticsearch registered repos are saved..? (not the snapshots)

---

## [Help figureing out the thread pool distribution](https://discuss.elastic.co/t/help-figureing-out-the-thread-pool-distribution/69078)

<div class="topic-metadata">

**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\
**Replies:** 6\
**Last updated:** [December 15, 2016, 1:41am UTC](https://discuss.elastic.co/t/help-figureing-out-the-thread-pool-distribution/69078 "2016-12-15T01:41:08Z")

</div>

Hello, I have 15 node cluster, 3 masters, 2 queries and 10 data nodes. At the moment, I am running into some ingestion issues by this application, while other indices are ok. I have been playing with the index.queueSize…

---

## [Grokparse failure even grok debugger fine](https://discuss.elastic.co/t/grokparse-failure-even-grok-debugger-fine/340023)

<div class="topic-metadata">

**Author:** [@shailendra1](https://discuss.elastic.co/u/shailendra1)\
**Replies:** 8\
**Last updated:** [August 4, 2023, 4:17am UTC](https://discuss.elastic.co/t/grokparse-failure-even-grok-debugger-fine/340023 "2023-08-04T04:17:25Z")

</div>

Hi All, i am facing the grokparsefailure for my logs even the grok debugger is showing all parsed data but logstash is failing for all fields. below is my filter of logstash filter { grok { …

---

## [Filebeat keystore permissions](https://discuss.elastic.co/t/filebeat-keystore-permissions/262962)

<div class="topic-metadata">

**Author:** [@Coyz](https://discuss.elastic.co/u/Coyz)\
**Replies:** 0\
**Last updated:** [February 2, 2021, 10:58am UTC](https://discuss.elastic.co/t/filebeat-keystore-permissions/262962 "2021-02-02T10:58:12Z")

</div>

Hello, i'm trying to setup filebeat as non root user. Here the service file ; \[Unit\] Description=Filebeat sends log files to Logstash or directly to Elasticsearch. Documentation=https://www.elastic.co/products/beats/f…

---

## [Download new version of filebeat](https://discuss.elastic.co/t/download-new-version-of-filebeat/241607)

<div class="topic-metadata">

**Author:** [@JoseSaborido](https://discuss.elastic.co/u/JoseSaborido)\
**Replies:** 8\
**Last updated:** [July 23, 2020, 1:25pm UTC](https://discuss.elastic.co/t/download-new-version-of-filebeat/241607 "2020-07-23T13:25:04Z")

</div>

Hi! I've been trying to configure filebeat to create an index every day but it seems to be impossible. I have seen this issue https://github.com/elastic/beats/issues/11595 So I have been trying to download the version …

---

## [JDBC Connection to SAP HANA](https://discuss.elastic.co/t/jdbc-connection-to-sap-hana/123193)

<div class="topic-metadata">

**Author:** [@Chandra\_Bhandaru](https://discuss.elastic.co/u/Chandra_Bhandaru)\
**Replies:** 0\
**Last updated:** [March 9, 2018, 5:41am UTC](https://discuss.elastic.co/t/jdbc-connection-to-sap-hana/123193 "2018-03-09T05:41:01Z")

</div>

Below is my config and I am not able to connect to SAP HANA. I have right driver and am able to connect via standalone java program. input { jdbc { jdbc\_connection\_string =\> "jdbc:sap://\<host:port\>" jdbc\_user …

---

## [Semantic search and text expansion query with self-deployed model](https://discuss.elastic.co/t/semantic-search-and-text-expansion-query-with-self-deployed-model/339708)

<div class="topic-metadata">

**Author:** [@camoneme](https://discuss.elastic.co/u/camoneme)\
**Replies:** 2\
**Last updated:** [August 8, 2023, 7:17am UTC](https://discuss.elastic.co/t/semantic-search-and-text-expansion-query-with-self-deployed-model/339708 "2023-08-08T07:17:42Z")

</div>

I'm trying to use the text expansion query to implement semantic search on a rank features field. I've read the ELSER documentation and understand the process. I'm using a local/downloaded elasticsearch on docker (not co…

---

## [Mapper Parsing Exception](https://discuss.elastic.co/t/mapper-parsing-exception/270050)

<div class="topic-metadata">

**Author:** [@hussshe](https://discuss.elastic.co/u/hussshe)\
**Replies:** 2\
**Last updated:** [April 18, 2021, 6:35pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception/270050 "2021-04-18T18:35:22Z")

</div>

Hello, I am trying to add mappings to the index named ecommerce. But this throws "mapper\_parsing\_exception" error. Any help on rectifying this error would be appreciated. Elastic Search version is 7.12.0 PUT /ecommerc…

---

## [Change kibana logo in 7.5v](https://discuss.elastic.co/t/change-kibana-logo-in-7-5v/216232)

<div class="topic-metadata">

**Author:** [@prasannarajan](https://discuss.elastic.co/u/prasannarajan)\
**Replies:** 2\
**Last updated:** [January 23, 2020, 8:15pm UTC](https://discuss.elastic.co/t/change-kibana-logo-in-7-5v/216232 "2020-01-23T20:15:50Z")

</div>

Hi everyone, im in need of changing the kibana logo, Help needed thanks.

---

## [Elastic 里面有数据，但是无法拆解](https://discuss.elastic.co/t/elastic/170837)

<div class="topic-metadata">

**Author:** [@mytea003](https://discuss.elastic.co/u/mytea003)\
**Replies:** 2\
**Last updated:** [March 5, 2019, 9:51am UTC](https://discuss.elastic.co/t/elastic/170837 "2019-03-05T09:51:16Z")

</div>

如图所示，数据已经在Elastic里面了。但是无法拆解出来按照规定的字段进行查看相应的信息。 这个如何处理呀？ 怎么把原来不能拆解出来的记录，重新匹配拆解呢？

---

## [Install kibana plugin without optimizing step?](https://discuss.elastic.co/t/install-kibana-plugin-without-optimizing-step/133676)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 2\
**Last updated:** [June 22, 2018, 8:41pm UTC](https://discuss.elastic.co/t/install-kibana-plugin-without-optimizing-step/133676 "2018-06-22T20:41:03Z")

</div>

Hi, When I am installing a plugin via kibana-plugin install xy kibana starts the optimizing process directly after installation, which takes a lot of time. I need to install multiple plugins. So my question is, is it p…

---

## [Issues regarding metricsbeat 5.0.0 beta](https://discuss.elastic.co/t/issues-regarding-metricsbeat-5-0-0-beta/61900)

<div class="topic-metadata">

**Author:** [@macymin](https://discuss.elastic.co/u/macymin)\
**Replies:** 2\
**Last updated:** [October 3, 2016, 1:35pm UTC](https://discuss.elastic.co/t/issues-regarding-metricsbeat-5-0-0-beta/61900 "2016-10-03T13:35:43Z")

</div>

hi today i just start to explore metricbeat, all the way we are using topbeat for the metrics. there are few issues I notice. 1 The system.process.memory.rss.pct alwasy shows 0, please see the attached screenshot for t…

---

## [Elasticsearch performance tuning on elastic 1.7](https://discuss.elastic.co/t/elasticsearch-performance-tuning-on-elastic-1-7/37446)

<div class="topic-metadata">

**Author:** [@guy93r](https://discuss.elastic.co/u/guy93r)\
**Replies:** 2\
**Last updated:** [December 17, 2015, 10:03am UTC](https://discuss.elastic.co/t/elasticsearch-performance-tuning-on-elastic-1-7/37446 "2015-12-17T10:03:15Z")

</div>

Hi, Thanks in advance for any kind of help! My environment has very restrictive security policy so the sending of any kind of logs and media is forbidden. My environment is built with 3 master nodes, 3 data nodes and u…

---

## [Elastic Search with ChatGPT](https://discuss.elastic.co/t/elastic-search-with-chatgpt/351166)

<div class="topic-metadata">

**Author:** [@Pey](https://discuss.elastic.co/u/Pey)\
**Replies:** 1\
**Last updated:** [January 16, 2024, 5:27pm UTC](https://discuss.elastic.co/t/elastic-search-with-chatgpt/351166 "2024-01-16T17:27:30Z")

</div>

Hi, I am very interested in combining the usage of GPT + Elasticsearch for enterprise data (link: ChatGPT and Elasticsearch: OpenAI meets private data — Elastic Search Labs). We have used Azure Cognitive Search + Open AI…

---

## [Filebeat Fortinet module not working](https://discuss.elastic.co/t/filebeat-fortinet-module-not-working/247063)

<div class="topic-metadata">

**Author:** [@bornatalebi](https://discuss.elastic.co/u/bornatalebi)\
**Replies:** 3\
**Last updated:** [September 1, 2020, 9:51am UTC](https://discuss.elastic.co/t/filebeat-fortinet-module-not-working/247063 "2020-09-01T09:51:15Z")

</div>

I have a FortiGate 200E firewall and I can see the logs reaching the filebeat machine (using tcpdump listening on port 9004). but filebeat doesn't process them ( no logs in discover tab the output of journalctl -xeu file…

[Previous page](https://discuss.elastic.co/top.md?page=1596&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1598&per_page=50&period=all)
