# Top **URL:** https://discuss.elastic.co/top.md?page=1622&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1623 --- ## [Incorrect feed in current logstash index](https://discuss.elastic.co/t/incorrect-feed-in-current-logstash-index/189296)
**Author:** [@Subramanian\_Chellapp](https://discuss.elastic.co/u/Subramanian_Chellapp)\ **Replies:** 6\ **Last updated:** [July 16, 2019, 6:40am UTC](https://discuss.elastic.co/t/incorrect-feed-in-current-logstash-index/189296 "2019-07-16T06:40:57Z")
Folks, We have one master node and 2 cluster node which configured on AWS EFS volume end(data1, data2 and data3) . The current version of ELK 6.8. We have configured the below Filebeat for feeding IIS server log, file… --- ## [Need help, multiple aggregations with filters extremely slow, where to look for optimizations?](https://discuss.elastic.co/t/need-help-multiple-aggregations-with-filters-extremely-slow-where-to-look-for-optimizations/18088)
**Author:** [@Thomas\_Bolis](https://discuss.elastic.co/u/Thomas_Bolis)\ **Replies:** 6\ **Last updated:** [June 13, 2014, 12:25pm UTC](https://discuss.elastic.co/t/need-help-multiple-aggregations-with-filters-extremely-slow-where-to-look-for-optimizations/18088 "2014-06-13T12:25:09Z")
Hi, I'm facing a performance issue with some aggregations I perform, and I need your help if possible: I have to documents, the \*request\* and the \*event\*. The request is the parent of the event. Below is a (sam… --- ## [StreamCorruptedException](https://discuss.elastic.co/t/streamcorruptedexception/6178)
**Author:** [@Matthew\_A\_Brown](https://discuss.elastic.co/u/Matthew_A_Brown)\ **Replies:** 6\ **Last updated:** [December 22, 2011, 2:19pm UTC](https://discuss.elastic.co/t/streamcorruptedexception/6178 "2011-12-22T14:19:34Z")
Hi all, We've got a cluster of 8 nodes. Recently we started experiencing intermittent hangs of our application (we've since added timeouts to prevent this)… at the time, all nodes in the cluster were reporting gre… --- ## [Setting up elastic cluster](https://discuss.elastic.co/t/setting-up-elastic-cluster/283673)
**Author:** [@elastic\_dev](https://discuss.elastic.co/u/elastic_dev)\ **Replies:** 2\ **Last updated:** [September 9, 2021, 5:25am UTC](https://discuss.elastic.co/t/setting-up-elastic-cluster/283673 "2021-09-09T05:25:28Z")
Hi, I am setting up the Elasticsearch with 2 nodes. whenever I start my node-2 it gives me error as below '\[2021-09-08T19:24:43,093\]\[ERROR\]\[o.e.i.g.DatabaseRegistry \] \[node-2\] failed to download database \[GeoLite2-ASN.m… --- ## [Logstash CIDR Filter : create new field with matched network](https://discuss.elastic.co/t/logstash-cidr-filter-create-new-field-with-matched-network/266282)
**Author:** [@Nybble](https://discuss.elastic.co/u/Nybble)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 6:22am UTC](https://discuss.elastic.co/t/logstash-cidr-filter-create-new-field-with-matched-network/266282 "2021-03-05T06:22:03Z")
Hello, I'm currently using the Logstash CIDR filter to tag private and public IP. Now, I want to use this plugin with a list of all the networks used within my company and add a field or a tag with network information … --- ## [Elasticsearch security warning when i connect to cluster from outside](https://discuss.elastic.co/t/elasticsearch-security-warning-when-i-connect-to-cluster-from-outside/262768)
**Author:** [@first100](https://discuss.elastic.co/u/first100)\ **Replies:** 2\ **Last updated:** [February 1, 2021, 10:32am UTC](https://discuss.elastic.co/t/elasticsearch-security-warning-when-i-connect-to-cluster-from-outside/262768 "2021-02-01T10:32:50Z")
Hello, i was able to secure my elastic cluster with certificates generated from elasticsearch-certutil command, but i f try to open my node : https://elk-001:9200 from outside , receive warning from browser, about the c… --- ## [Moved to OSS...xpack settings left behind. How to remove?](https://discuss.elastic.co/t/moved-to-oss-xpack-settings-left-behind-how-to-remove/236063)
**Author:** [@pszm](https://discuss.elastic.co/u/pszm)\ **Replies:** 2\ **Last updated:** [June 7, 2020, 8:40am UTC](https://discuss.elastic.co/t/moved-to-oss-xpack-settings-left-behind-how-to-remove/236063 "2020-06-07T08:40:46Z")
We upgraded from 6.8.1 default to 7.7.1 oss (unintentionally, but whats done is done). Now the issue is that there are xpack settings left behind. How to remove these? Specifically, in our cluster settings: curl -X GE… --- ## [Why is my curl not working properly?](https://discuss.elastic.co/t/why-is-my-curl-not-working-properly/176827)
**Author:** [@Ridwan\_Syarifudin](https://discuss.elastic.co/u/Ridwan_Syarifudin)\ **Replies:** 2\ **Last updated:** [April 16, 2019, 2:31am UTC](https://discuss.elastic.co/t/why-is-my-curl-not-working-properly/176827 "2019-04-16T02:31:07Z")
please help me, i think i got my pipelines and template correctly build but my curl its not working at all my template: PUT \_template/product\_template { "index\_patterns": \[ "master\_product\*" \], "settings": { "num… --- ## [Kibana: advanced watch where State = OK, yet Simulation "failed to execute watch input"](https://discuss.elastic.co/t/kibana-advanced-watch-where-state-ok-yet-simulation-failed-to-execute-watch-input/170984)
**Author:** [@Mariner191](https://discuss.elastic.co/u/Mariner191)\ **Replies:** 2\ **Last updated:** [March 6, 2019, 5:19pm UTC](https://discuss.elastic.co/t/kibana-advanced-watch-where-state-ok-yet-simulation-failed-to-execute-watch-input/170984 "2019-03-06T17:19:53Z")
Hello, How to troubleshoot advanced watch, where Simulation indicates "failed to execute watch input" . Thank you! --- ## [Confusion on disable automatic type creation](https://discuss.elastic.co/t/confusion-on-disable-automatic-type-creation/97624)
**Author:** [@cord\_thomas](https://discuss.elastic.co/u/cord_thomas)\ **Replies:** 2\ **Last updated:** [August 21, 2017, 6:45pm UTC](https://discuss.elastic.co/t/confusion-on-disable-automatic-type-creation/97624 "2017-08-21T18:45:38Z")
I have a collection of JSON files that all together have over 1,000 fields. After a first round ingestion, I identified ~65 fields that would be interesting. I am loading the JSON files into ES via the curl XPOST meth… --- ## [Transport Client 5.4.1 Failure](https://discuss.elastic.co/t/transport-client-5-4-1-failure/89823)
**Author:** [@Ed\_Brown](https://discuss.elastic.co/u/Ed_Brown)\ **Replies:** 2\ **Last updated:** [June 18, 2017, 7:52pm UTC](https://discuss.elastic.co/t/transport-client-5-4-1-failure/89823 "2017-06-18T19:52:23Z")
I can't get the Java API transport client to work with 5.4.1. Below is the code snippet: Settings settings = Settings.builder() .put("client.transport.sniff", true) .put("xpack.… --- ## [One filebeat server for multiple logs server](https://discuss.elastic.co/t/one-filebeat-server-for-multiple-logs-server/74394)
**Author:** [@ericpietro](https://discuss.elastic.co/u/ericpietro)\ **Replies:** 2\ **Last updated:** [February 9, 2017, 8:33am UTC](https://discuss.elastic.co/t/one-filebeat-server-for-multiple-logs-server/74394 "2017-02-09T08:33:57Z")
hello, I have an architecture choice to do. Very strategic. I have 200 hundred log servers. choice #1 : i install filebeat on every 200 servers choice #2 : i install filebeat on a windows 'central' server and i write m… --- ## [IllegalArgumentException lors d'un populate](https://discuss.elastic.co/t/illegalargumentexception-lors-dun-populate/60147)
**Author:** [@devandclick](https://discuss.elastic.co/u/devandclick)\ **Replies:** 2\ **Last updated:** [September 9, 2016, 9:38am UTC](https://discuss.elastic.co/t/illegalargumentexception-lors-dun-populate/60147 "2016-09-09T09:38:14Z")
Bonjour, J'ai un soucis depuis 2 jours sur mon projet SF2. J'utilise le bundle FOSElastica jusqu'ici pas de soucis... mais en ajoutant quelques entités j'ai eu l'erreur suivante : Console SF : \[Elastica\\Exception\\B… --- ## [Filebeat properties not indexed, topbeat properties all indexed](https://discuss.elastic.co/t/filebeat-properties-not-indexed-topbeat-properties-all-indexed/54803)
**Author:** [@bartvanbos](https://discuss.elastic.co/u/bartvanbos)\ **Replies:** 2\ **Last updated:** [July 11, 2016, 8:15am UTC](https://discuss.elastic.co/t/filebeat-properties-not-indexed-topbeat-properties-all-indexed/54803 "2016-07-11T08:15:15Z")
Hi all, I am trying to figure out why all the properties generated by topbeat are indexed by default (I can create visualizations on them using kibana), while those from filebeat are not indexed. I am comparing the two … --- ## [I have a problema with send data from filebeat to Logstash](https://discuss.elastic.co/t/i-have-a-problema-with-send-data-from-filebeat-to-logstash/324366)
**Author:** [@odelacruzc](https://discuss.elastic.co/u/odelacruzc)\ **Replies:** 3\ **Last updated:** [January 31, 2023, 8:40pm UTC](https://discuss.elastic.co/t/i-have-a-problema-with-send-data-from-filebeat-to-logstash/324366 "2023-01-31T20:40:01Z")
Hello, can you help me pleae, I have a filebeat in my local computer and logstash in a VM Ubuntu in VirtualBox, so I check conectivity from my PC to remote server ubuntu with telnet 192.168.1.12 5044 and was successfull … --- ## [Authentication through Nginx on Kibana 7.9](https://discuss.elastic.co/t/authentication-through-nginx-on-kibana-7-9/248318)
**Author:** [@barbarad](https://discuss.elastic.co/u/barbarad)\ **Replies:** 0\ **Last updated:** [September 11, 2020, 12:27pm UTC](https://discuss.elastic.co/t/authentication-through-nginx-on-kibana-7-9/248318 "2020-09-11T12:27:44Z")
Hi, I'm try to automatically authenticate in kibana 7.9 using nginx but it's not working. I'm using native default users define in elasticsearch. This is my nginx configuration running in docker, kibana is also deploy… --- ## [Region Map OR Map in Kibana doesn't show India Region correctly](https://discuss.elastic.co/t/region-map-or-map-in-kibana-doesnt-show-india-region-correctly/247532)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 3\ **Last updated:** [September 8, 2020, 10:07am UTC](https://discuss.elastic.co/t/region-map-or-map-in-kibana-doesnt-show-india-region-correctly/247532 "2020-09-08T10:07:54Z")
Hi Team, I have created a visualization to show the number of hits coming from different regions using Maps visualization available in Kibana. Map is not showing India correctly, it has POK(Pakistan occupied Kashmir) … --- ## [Advanced Search query](https://discuss.elastic.co/t/advanced-search-query/185739)
**Author:** [@jjarthur](https://discuss.elastic.co/u/jjarthur)\ **Replies:** 3\ **Last updated:** [June 21, 2019, 5:27pm UTC](https://discuss.elastic.co/t/advanced-search-query/185739 "2019-06-21T17:27:32Z")
I'm just starting with Elasticsearch but am required to create an 'advanced search' query. One of those searches where you select the drop-down boxes of your field, search accuracy, input value, and boolean condition. e… --- ## [Configuration file: setup.template.pattern usage?](https://discuss.elastic.co/t/configuration-file-setup-template-pattern-usage/183322)
**Author:** [@ORich](https://discuss.elastic.co/u/ORich)\ **Replies:** 3\ **Last updated:** [June 3, 2019, 12:27pm UTC](https://discuss.elastic.co/t/configuration-file-setup-template-pattern-usage/183322 "2019-06-03T12:27:06Z")
I am not clear in my mind regarding the option setup.template.pattern in FileBeat configuration file. From a general standpoint, I do not understand why we should tell Filebeat which index template to load ? According t… --- ## [Bulk insert of tables](https://discuss.elastic.co/t/bulk-insert-of-tables/110065)
**Author:** [@pragadeesh\_dharsha](https://discuss.elastic.co/u/pragadeesh_dharsha)\ **Replies:** 3\ **Last updated:** [December 5, 2017, 6:54am UTC](https://discuss.elastic.co/t/bulk-insert-of-tables/110065 "2017-12-05T06:54:31Z")
how to import a complete database into elasticsearch at once? --- ## [Parsing IIS log - remove part of string](https://discuss.elastic.co/t/parsing-iis-log-remove-part-of-string/103142)
**Author:** [@frumat\_l](https://discuss.elastic.co/u/frumat_l)\ **Replies:** 3\ **Last updated:** [October 8, 2017, 9:21am UTC](https://discuss.elastic.co/t/parsing-iis-log-remove-part-of-string/103142 "2017-10-08T09:21:16Z")
Hi, I have IIS log, example : 2017-10-01 08:29:30 10.70.4.52 GET /Lists/NewsFeed/AllItems.aspx AjaxDelta=1 80 0#.w|mad\\sp3\_dev 10.70.4.52 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.2;+WOW64;+Trident/6.0;+.NET4.0E;… --- ## [Help with Elasticsearch template definition](https://discuss.elastic.co/t/help-with-elasticsearch-template-definition/65901)
**Author:** [@espogian](https://discuss.elastic.co/u/espogian)\ **Replies:** 3\ **Last updated:** [November 14, 2016, 8:18am UTC](https://discuss.elastic.co/t/help-with-elasticsearch-template-definition/65901 "2016-11-14T08:18:10Z")
Hi, reading the documentation about index templates, I have some doubts on which should be the best practice to define a new template. My particular situation is very simple, I would like to: Define only one template … --- ## [Mapper Attachment in creating relationship](https://discuss.elastic.co/t/mapper-attachment-in-creating-relationship/52558)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 3\ **Last updated:** [June 13, 2016, 5:20pm UTC](https://discuss.elastic.co/t/mapper-attachment-in-creating-relationship/52558 "2016-06-13T17:20:08Z")
I am using mapper attachment plugin and creating different data with different ids. How can I create mapping relationship between data so that I am able to make relationship between data. For example, I have input data… --- ## [How to activate sysmon event ID 3](https://discuss.elastic.co/t/how-to-activate-sysmon-event-id-3/345977)
**Author:** [@yassinebad](https://discuss.elastic.co/u/yassinebad)\ **Replies:** 1\ **Last updated:** [October 29, 2023, 3:51pm UTC](https://discuss.elastic.co/t/how-to-activate-sysmon-event-id-3/345977 "2023-10-29T15:51:26Z")
Hey everyone, I am sending my logs from a windows node using winlogbeat and sysmon64 to my ELK stack. While in discover panel in kibana I can see my logs with different events ID of sysmon, but I have noticed that the … --- ## [OFFSET query \_sql is not recognizing](https://discuss.elastic.co/t/offset-query-sql-is-not-recognizing/324473)
**Author:** [@SergioFF](https://discuss.elastic.co/u/SergioFF)\ **Replies:** 1\ **Last updated:** [February 1, 2023, 7:21pm UTC](https://discuss.elastic.co/t/offset-query-sql-is-not-recognizing/324473 "2023-02-01T19:21:58Z")
Hello, I have version 8.5.2 of Elasticsearch and I am trying to use the OFFSET clause within a query, but it is not recognizing it, can this clause be used in the version we have? The query I am sending is as follows: G… --- ## [How to merge two arrays into single array](https://discuss.elastic.co/t/how-to-merge-two-arrays-into-single-array/247171)
**Author:** [@developer\_apk](https://discuss.elastic.co/u/developer_apk)\ **Replies:** 1\ **Last updated:** [September 14, 2020, 11:35am UTC](https://discuss.elastic.co/t/how-to-merge-two-arrays-into-single-array/247171 "2020-09-14T11:35:06Z")
How can i show values in kibana pie chart from multiple array fields ? I have document like below: { "field1": \["a", "b", "c"\], "field2": \["a", "x", "y", "z"\], } I want to see the aggregations combining both fiel… --- ## [Uploding a csv file from kibana with updating mapping](https://discuss.elastic.co/t/uploding-a-csv-file-from-kibana-with-updating-mapping/187621)
**Author:** [@Adil\_Bakkouri](https://discuss.elastic.co/u/Adil_Bakkouri)\ **Replies:** 1\ **Last updated:** [June 28, 2019, 1:43pm UTC](https://discuss.elastic.co/t/uploding-a-csv-file-from-kibana-with-updating-mapping/187621 "2019-06-28T13:43:49Z")
Hello, I'm trying to upload my csv file to elasticsearch via Kibana machine learning tool, I succeeded the add but i want to redefine my mapping, so juste before creating the index, i update my mapping to this : { … --- ## [APM for AWS Lambda 'APM Server transport error (ECONNREFUSED)'](https://discuss.elastic.co/t/apm-for-aws-lambda-apm-server-transport-error-econnrefused/169559)
**Author:** [@Marcin\_Druzgala](https://discuss.elastic.co/u/Marcin_Druzgala)\ **Replies:** 1\ **Last updated:** [February 23, 2019, 1:16am UTC](https://discuss.elastic.co/t/apm-for-aws-lambda-apm-server-transport-error-econnrefused/169559 "2019-02-23T01:16:30Z")
Kibana version: v6.6.0 Elasticsearch version:v6.6.0 APM Server version:v6.6.0 APM Agent language and version: "elastic-apm-node": "2.5.1" So I have followed the steps described on the APM site to set APM plugin in my… --- ## [Marvel support for monitoring multiple clusters](https://discuss.elastic.co/t/marvel-support-for-monitoring-multiple-clusters/52208)
**Author:** [@nielsoncr](https://discuss.elastic.co/u/nielsoncr)\ **Replies:** 1\ **Last updated:** [June 9, 2016, 12:27am UTC](https://discuss.elastic.co/t/marvel-support-for-monitoring-multiple-clusters/52208 "2016-06-09T00:27:27Z")
When will Marvel support for monitoring multiple clusters be available? Continuing the discussion from Marvel - monitoring multiple ES clusters by one Monitoring ES cluster: --- ## [Elastic Graph](https://discuss.elastic.co/t/elastic-graph/51573)
**Author:** [@Sivaprakash\_Shanmuga](https://discuss.elastic.co/u/Sivaprakash_Shanmuga)\ **Replies:** 1\ **Last updated:** [June 1, 2016, 3:01pm UTC](https://discuss.elastic.co/t/elastic-graph/51573 "2016-06-01T15:01:16Z")
Hi Elastic - Graph is an open source or commercial only? --- ## [Replacing @timestamp](https://discuss.elastic.co/t/replacing-timestamp/40993)
**Author:** [@tikejhya](https://discuss.elastic.co/u/tikejhya)\ **Replies:** 1\ **Last updated:** [February 4, 2016, 6:05pm UTC](https://discuss.elastic.co/t/replacing-timestamp/40993 "2016-02-04T18:05:22Z")
I am trying to replace @timestamp with actual logfile timestamp i find it not working with change in pattern: for instance: this works for 01/01/2016: match =\> \[ "timestamp" , "dd/MMM/yyyy:HH:mm:ss\] But not with … --- ## [Cardinality limit in elastic?](https://discuss.elastic.co/t/cardinality-limit-in-elastic/26188)
**Author:** [@Roman\_Margolis](https://discuss.elastic.co/u/Roman_Margolis)\ **Replies:** 1\ **Last updated:** [July 23, 2015, 9:41pm UTC](https://discuss.elastic.co/t/cardinality-limit-in-elastic/26188 "2015-07-23T21:41:08Z")
I was wondering if there is some kind of limit of possible string field cardinality in elastic index and shard. I know shard sizing is dependent on particular data and query patterns, and that massive shards will affec… --- ## [Kibana panels to display different Time slots](https://discuss.elastic.co/t/kibana-panels-to-display-different-time-slots/25688)
**Author:** [@anoban](https://discuss.elastic.co/u/anoban)\ **Replies:** 1\ **Last updated:** [July 16, 2015, 1:17pm UTC](https://discuss.elastic.co/t/kibana-panels-to-display-different-time-slots/25688 "2015-07-16T13:17:12Z")
A feature request I havent seen anywhere yet. I'd like to have one browser window (to maximise screen real estate) and have my various tiles refresh at different times (should be easy), but also display different time wi… --- ## [Link to trace no longer working if trace occurred more than 15 minutes ago after upgrade from 7.12.1 to 7.15.0](https://discuss.elastic.co/t/link-to-trace-no-longer-working-if-trace-occurred-more-than-15-minutes-ago-after-upgrade-from-7-12-1-to-7-15-0/286659)
**Author:** [@rrupp\_mgp](https://discuss.elastic.co/u/rrupp_mgp)\ **Replies:** 4\ **Last updated:** [October 14, 2021, 9:21am UTC](https://discuss.elastic.co/t/link-to-trace-no-longer-working-if-trace-occurred-more-than-15-minutes-ago-after-upgrade-from-7-12-1-to-7-15-0/286659 "2021-10-14T09:21:31Z")
Kibana version: 7.15.0 Elasticsearch version: 7.15.0 APM Server version: 7.15.0 APM Agent language and version: OpenTelemetry Java Agent Browser version: OSX Chrome 93.0.4577.82 Original install method (e.g. do… --- ## [Doubt about performance elastic 2.4 matchAll X boolQuery](https://discuss.elastic.co/t/doubt-about-performance-elastic-2-4-matchall-x-boolquery/108408)
**Author:** [@RafaelPosthaus](https://discuss.elastic.co/u/RafaelPosthaus)\ **Replies:** 4\ **Last updated:** [November 23, 2017, 1:41pm UTC](https://discuss.elastic.co/t/doubt-about-performance-elastic-2-4-matchall-x-boolquery/108408 "2017-11-23T13:41:43Z")
Good afternoon, Browsing a legacy font I found a search in elasticSearch 2.4, which did the following: create the filters and sorts, and then apply this to a matchAll Query. Would I have more performance if instead of … --- ## [Which is a better way?](https://discuss.elastic.co/t/which-is-a-better-way/82072)
**Author:** [@danielwalker](https://discuss.elastic.co/u/danielwalker)\ **Replies:** 4\ **Last updated:** [April 13, 2017, 2:44pm UTC](https://discuss.elastic.co/t/which-is-a-better-way/82072 "2017-04-13T14:44:31Z")
Hi guys, I am using elasticsearch php-api to write logs directly to Elasticsearch. There is another way that I put the logs to local machine, then filebeat send logs to logstash, then finally to Elasticsearch. My … --- ## [Invalid cron expression for schedule field of elasticsearch input plugin](https://discuss.elastic.co/t/invalid-cron-expression-for-schedule-field-of-elasticsearch-input-plugin/343478)
**Author:** [@mikec1](https://discuss.elastic.co/u/mikec1)\ **Replies:** 5\ **Last updated:** [September 20, 2023, 5:08pm UTC](https://discuss.elastic.co/t/invalid-cron-expression-for-schedule-field-of-elasticsearch-input-plugin/343478 "2023-09-20T17:08:07Z")
I have a pipeline whereby the input section looks like this: input { elasticsearch { hosts =\> \["elasticsearch.my.host.here:port"\] index =\> 'my\_index\_name\_pattern' query =\> '{ "query": { "mat… --- ## [Github URL to set on op.jwkset\_path parameter](https://discuss.elastic.co/t/github-url-to-set-on-op-jwkset-path-parameter/291474)
**Author:** [@Fabio\_Peruchi](https://discuss.elastic.co/u/Fabio_Peruchi)\ **Replies:** 5\ **Last updated:** [December 13, 2021, 8:12am UTC](https://discuss.elastic.co/t/github-url-to-set-on-op-jwkset-path-parameter/291474 "2021-12-13T08:12:38Z")
Hello. I'm struggling to find where is the GitHub URL to set here on this parameter from this documentation: Configuring single sign-on to the Elastic Stack using OpenID Connect | Elasticsearch Guide \[7.16\] | Elastic o… --- ## [Autoscaling api (basic license?)](https://discuss.elastic.co/t/autoscaling-api-basic-license/267859)
**Author:** [@sc75651](https://discuss.elastic.co/u/sc75651)\ **Replies:** 5\ **Last updated:** [March 24, 2021, 11:41am UTC](https://discuss.elastic.co/t/autoscaling-api-basic-license/267859 "2021-03-24T11:41:30Z")
is this feature part of basic license - Autoscaling | Elasticsearch Reference \[master\] | Elastic is yes then, was not able to find below settings Prerequisitesedit If the Elasticsearch security features are enabled,… --- ## [Visualizations has errors default page](https://discuss.elastic.co/t/visualizations-has-errors-default-page/245176)
**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\ **Replies:** 5\ **Last updated:** [August 18, 2020, 2:09am UTC](https://discuss.elastic.co/t/visualizations-has-errors-default-page/245176 "2020-08-18T02:09:39Z")
Hi All, Just started to play around with SIEM. When opening the menu, we are constantly presented with this error. The only logs we are ingesting is our building security logs, and I have manually created logstash filte… --- ## [Esrally hangs dead](https://discuss.elastic.co/t/esrally-hangs-dead/191498)
**Author:** [@baoshengzhu](https://discuss.elastic.co/u/baoshengzhu)\ **Replies:** 5\ **Last updated:** [July 22, 2019, 5:28pm UTC](https://discuss.elastic.co/t/esrally-hangs-dead/191498 "2019-07-22T17:28:55Z")
when I set bulk\_indexing\_clients equal to 500, esrally hangs dead, I need to set higher value of clients, how to solve? --- ## [Beats 6.2.x compatibility with ELK 5.6.x](https://discuss.elastic.co/t/beats-6-2-x-compatibility-with-elk-5-6-x/126062)
**Author:** [@adrian.aneci](https://discuss.elastic.co/u/adrian.aneci)\ **Replies:** 5\ **Last updated:** [April 4, 2018, 9:31am UTC](https://discuss.elastic.co/t/beats-6-2-x-compatibility-with-elk-5-6-x/126062 "2018-04-04T09:31:16Z")
Hi, Are the latest beats (version 6.2.x ) compatible with ELK 5.6.x? Based on the matrix compatibility found at https://www.elastic.co/support/matrix#matrix\_compatibility looks like they are not compatible, but I just … --- ## [Adding a node with data to cluster](https://discuss.elastic.co/t/adding-a-node-with-data-to-cluster/72386)
**Author:** [@gubr123](https://discuss.elastic.co/u/gubr123)\ **Replies:** 5\ **Last updated:** [January 22, 2017, 8:30pm UTC](https://discuss.elastic.co/t/adding-a-node-with-data-to-cluster/72386 "2017-01-22T20:30:36Z")
Hi. I am using elasticsearch 2.4.1 I have a cluster of ES nodes, and another standalone node with data stored. I want to add the standalone node to the ES cluster. when I do it, I loose all the data stored in the sta… --- ## [Not able to create visualization](https://discuss.elastic.co/t/not-able-to-create-visualization/192223)
**Author:** [@premkumar](https://discuss.elastic.co/u/premkumar)\ **Replies:** 8\ **Last updated:** [July 25, 2019, 12:50pm UTC](https://discuss.elastic.co/t/not-able-to-create-visualization/192223 "2019-07-25T12:50:57Z")
Hi All, I have extracted certain fields from the message through the GROK pattern in logstash. And the fields are available in kibana after indexing. But I am not able to use those fields to create a visualization. Cou… --- ## [Custom\_score requires specific attribute ordering](https://discuss.elastic.co/t/custom-score-requires-specific-attribute-ordering/3610)
**Author:** [@Timber](https://discuss.elastic.co/u/Timber)\ **Replies:** 8\ **Last updated:** [December 2, 2010, 4:49pm UTC](https://discuss.elastic.co/t/custom-score-requires-specific-attribute-ordering/3610 "2010-12-02T16:49:38Z")
Hi, I have the following query fragment which works fine in ES 0.13.0: "query" : { "custom\_score" : { "filtered" : { "query" : { "bool" : { … --- ## [Logstash pipelines reduces the number of events sent](https://discuss.elastic.co/t/logstash-pipelines-reduces-the-number-of-events-sent/300000)
**Author:** [@zpltn](https://discuss.elastic.co/u/zpltn)\ **Replies:** 1\ **Last updated:** [March 30, 2022, 8:22am UTC](https://discuss.elastic.co/t/logstash-pipelines-reduces-the-number-of-events-sent/300000 "2022-03-30T08:22:28Z")
Hi there, we have Metricbeat, Filebeat, Logstash and Elasticsearch running on an OpenShift Cluster. We are using Logstash to configure multiples pipelines to filter the logs for some namespaces and Beats types. Our sta… --- ## [Journalbeat - getting kubernetes metadata](https://discuss.elastic.co/t/journalbeat-getting-kubernetes-metadata/279456)
**Author:** [@DetlefG](https://discuss.elastic.co/u/DetlefG)\ **Replies:** 1\ **Last updated:** [July 29, 2021, 1:35pm UTC](https://discuss.elastic.co/t/journalbeat-getting-kubernetes-metadata/279456 "2021-07-29T13:35:45Z")
Hi, I'm trying to run Journalbeat with processor 'add\_kubernetes\_metadata' to get the metadata of the kubernetes cluster. Journalbeat is running on the kubernetes nodes started by a daemonset with the following configu… --- ## [Alert for kubernetes pods](https://discuss.elastic.co/t/alert-for-kubernetes-pods/348424)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 0\ **Last updated:** [December 1, 2023, 10:53am UTC](https://discuss.elastic.co/t/alert-for-kubernetes-pods/348424 "2023-12-01T10:53:12Z")
Hi Team, We are monitoring kubernetes pods and we need to set an alert when a pod is restart or down. How to do this using kibana alert as we are not able to find it. --- ## [Why the meta in registry file is always null?](https://discuss.elastic.co/t/why-the-meta-in-registry-file-is-always-null/233876)
**Author:** [@yanghuifeng](https://discuss.elastic.co/u/yanghuifeng)\ **Replies:** 0\ **Last updated:** [May 22, 2020, 9:36am UTC](https://discuss.elastic.co/t/why-the-meta-in-registry-file-is-always-null/233876 "2020-05-22T09:36:21Z")
I'm using a log input for my filebeat6.7, i get the registry file like this: \[ { "source": "/opt/log/test.log", "offset": 916, "timestamp": "2020-05-22T08:58:13.876693008Z", "ttl":… --- ## [TSVB "Your query attempted to fetch too much data."](https://discuss.elastic.co/t/tsvb-your-query-attempted-to-fetch-too-much-data/298620)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 1\ **Last updated:** [March 4, 2022, 2:23pm UTC](https://discuss.elastic.co/t/tsvb-your-query-attempted-to-fetch-too-much-data/298620 "2022-03-04T14:23:38Z")
Hello, I find using TSVB for my dashboard very handy but there is one drawback that I don't know how to overcome. Your query attempted to fetch too much data. Reducing the time range or changing the interval used usua… [Previous page](https://discuss.elastic.co/top.md?page=1621&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1623&per_page=50&period=all)