# Top

**URL:** https://discuss.elastic.co/top.md?page=1681&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1682

---

## [Filebeat dashboards are not loaded in kibana---filebeat version 7.10](https://discuss.elastic.co/t/filebeat-dashboards-are-not-loaded-in-kibana-filebeat-version-7-10/257933)

<div class="topic-metadata">

**Author:** [@prakash22](https://discuss.elastic.co/u/prakash22)\
**Replies:** 4\
**Last updated:** [December 8, 2020, 8:11pm UTC](https://discuss.elastic.co/t/filebeat-dashboards-are-not-loaded-in-kibana-filebeat-version-7-10/257933 "2020-12-08T20:11:49Z")

</div>

2020-12-08T09:58:34.256+0530 INFO instance/beat.go:299 Setup Beat: filebeat; Version: 7.10.0 2020-12-08T09:58:34.256+0530 DEBUG \[beat\] instance/beat.go:325 Initializing output plugins 2020-12-08T09:58…

---

## [Function all in canvas and asset](https://discuss.elastic.co/t/function-all-in-canvas-and-asset/231990)

<div class="topic-metadata">

**Author:** [@Jcarlovich](https://discuss.elastic.co/u/Jcarlovich)\
**Replies:** 4\
**Last updated:** [May 11, 2020, 8:14pm UTC](https://discuss.elastic.co/t/function-all-in-canvas-and-asset/231990 "2020-05-11T20:14:39Z")

</div>

Hi, I want to create a condition and use asset for the next query: query="SELECT count(\*) as y , ESTADO as e FROM "vdf-procesos-tareas" WHERE ESTACION = 'IMS' GROUP BY ESTADO" result: now I want to create the follo…

---

## [ArgumentError when consuming a message with the jms plugin](https://discuss.elastic.co/t/argumenterror-when-consuming-a-message-with-the-jms-plugin/217398)

<div class="topic-metadata">

**Author:** [@ghost\_recon](https://discuss.elastic.co/u/ghost_recon)\
**Replies:** 4\
**Last updated:** [February 10, 2020, 3:03pm UTC](https://discuss.elastic.co/t/argumenterror-when-consuming-a-message-with-the-jms-plugin/217398 "2020-02-10T15:03:49Z")

</div>

Hello everyone, I'am new to logstash and i've been trying to establish using the jms plugin a connection to a jboss queue and it worked, but whenever a message is been consumed instead of displaying it logstash throws t…

---

## [Removing GREEDYDATA from Filter leaves empty "curly brace" at result?](https://discuss.elastic.co/t/removing-greedydata-from-filter-leaves-empty-curly-brace-at-result/172315)

<div class="topic-metadata">

**Author:** [@samyo](https://discuss.elastic.co/u/samyo)\
**Replies:** 4\
**Last updated:** [March 15, 2019, 7:50am UTC](https://discuss.elastic.co/t/removing-greedydata-from-filter-leaves-empty-curly-brace-at-result/172315 "2019-03-15T07:50:04Z")

</div>

hello Folks, i have following issue, i am using Grok filter with GREEDYDATA wich i want to remove(drop it of) out of my result, this is what i used , but at result it is still giving me an empty curly brace {} wich i do…

---

## [No handler found for uri \[/\_xpack/rollup/job/test\_id\] and method \[PUT\]](https://discuss.elastic.co/t/no-handler-found-for-uri-xpack-rollup-job-test-id-and-method-put/132648)

<div class="topic-metadata">

**Author:** [@randomuser](https://discuss.elastic.co/u/randomuser)\
**Replies:** 4\
**Last updated:** [May 21, 2018, 11:39am UTC](https://discuss.elastic.co/t/no-handler-found-for-uri-xpack-rollup-job-test-id-and-method-put/132648 "2018-05-21T11:39:03Z")

</div>

Trying to PUT a rollup job, getting this error: No handler found for uri \[/\_xpack/rollup/job/test\_id\] and method \[PUT\] I've just updated my xpack licence, hopefully it isn't the problem. This is my rollup: PUT \_xpack…

---

## [Change node settings at runtime](https://discuss.elastic.co/t/change-node-settings-at-runtime/13546)

<div class="topic-metadata">

**Author:** [@jschelle\_2](https://discuss.elastic.co/u/jschelle_2)\
**Replies:** 4\
**Last updated:** [October 13, 2013, 9:54am UTC](https://discuss.elastic.co/t/change-node-settings-at-runtime/13546 "2013-10-13T09:54:34Z")

</div>

Is it possible to change node level settings at runtime? Specifically I'm looking to change node.data, node.master, and node.river. -- You received this message because you are subscribed to the Google Groups "elas…

---

## [Podman containers wont start after creating podman-compose](https://discuss.elastic.co/t/podman-containers-wont-start-after-creating-podman-compose/350483)

<div class="topic-metadata">

**Author:** [@Mike\_Kirby](https://discuss.elastic.co/u/Mike_Kirby)\
**Replies:** 2\
**Last updated:** [January 10, 2024, 2:55pm UTC](https://discuss.elastic.co/t/podman-containers-wont-start-after-creating-podman-compose/350483 "2024-01-10T14:55:24Z")

</div>

Hello Elastic Guru's. I am back with a new and exciting question. I am in a new project, where I am running a Podman/Docker configuration for my Elastic SIEM. I have the Kibana and Logstash installed and their contain…

---

## [Change elastic ip from localhost to x.x.x.x](https://discuss.elastic.co/t/change-elastic-ip-from-localhost-to-x-x-x-x/242534)

<div class="topic-metadata">

**Author:** [@hariskhalique](https://discuss.elastic.co/u/hariskhalique)\
**Replies:** 2\
**Last updated:** [July 27, 2020, 7:16am UTC](https://discuss.elastic.co/t/change-elastic-ip-from-localhost-to-x-x-x-x/242534 "2020-07-27T07:16:38Z")

</div>

Hi, Elastic search by default running on 127.0.0.1:9200. I change it to some IP address. Question is how I can change or tell logstash to connect with given IP address. Thanks in Advance

---

## [Graph Entity Icons/Pictures?](https://discuss.elastic.co/t/graph-entity-icons-pictures/233591)

<div class="topic-metadata">

**Author:** [@mehta.svarun](https://discuss.elastic.co/u/mehta.svarun)\
**Replies:** 2\
**Last updated:** [June 6, 2020, 5:21pm UTC](https://discuss.elastic.co/t/graph-entity-icons-pictures/233591 "2020-06-06T17:21:31Z")

</div>

Is there a way we can edit the base set of icons on Graphs in Kibana? More over if there is a way to add pictures instead of icons for specific node type?

---

## [Math operation with aggregated fields](https://discuss.elastic.co/t/math-operation-with-aggregated-fields/233569)

<div class="topic-metadata">

**Author:** [@Thanura\_Kannangara](https://discuss.elastic.co/u/Thanura_Kannangara)\
**Replies:** 2\
**Last updated:** [May 26, 2020, 9:41am UTC](https://discuss.elastic.co/t/math-operation-with-aggregated-fields/233569 "2020-05-26T09:41:35Z")

</div>

Hello Folks, A newbie (to watchers at least) is here :slight\_smile: I'm trying to create a watcher for disk\_space usage we have multiple hosts send data to same index pattern, so I was planning to aggregate hits with …

---

## [Manage CA certificate in GO and Java APM Agents](https://discuss.elastic.co/t/manage-ca-certificate-in-go-and-java-apm-agents/230394)

<div class="topic-metadata">

**Author:** [@iorfix](https://discuss.elastic.co/u/iorfix)\
**Replies:** 2\
**Last updated:** [April 30, 2020, 2:16am UTC](https://discuss.elastic.co/t/manage-ca-certificate-in-go-and-java-apm-agents/230394 "2020-04-30T02:16:04Z")

</div>

Hi there, I'm using APM-Server and APM-Agents clients in go and Java. I'm moving to use https, but I'm using a private CA to issue server certificates (it is the same CA used for logstash, elastic and beat client authe…

---

## [Created a new ILP how to start it?](https://discuss.elastic.co/t/created-a-new-ilp-how-to-start-it/207367)

<div class="topic-metadata">

**Author:** [@L33T](https://discuss.elastic.co/u/L33T)\
**Replies:** 2\
**Last updated:** [November 12, 2019, 12:40am UTC](https://discuss.elastic.co/t/created-a-new-ilp-how-to-start-it/207367 "2019-11-12T00:40:35Z")

</div>

Hi, I have created a new Index lifecycle Policy and i understand that it will not kick in on existing indexes so how do i get ingest\`s to start using it / create a new index with the ILP? Cheers,

---

## [Logstash спорадически перестаёт отправлять логи в elastic](https://discuss.elastic.co/t/logstash-elastic/204231)

<div class="topic-metadata">

**Author:** [@111167](https://discuss.elastic.co/u/111167)\
**Replies:** 2\
**Last updated:** [October 21, 2019, 8:42am UTC](https://discuss.elastic.co/t/logstash-elastic/204231 "2019-10-21T08:42:01Z")

</div>

Коллеги, доброго дня. Конфигурация: elasticsearch: 6.4.2, logstash: 6.6.1 Cluster health: { "cluster\_name" : "elastic-kibana", "status" : "yellow", "timed\_out" : false, "number\_of\_nodes" : 1, "number\_of\_data\_nodes…

---

## [Snapshot and restore - Time](https://discuss.elastic.co/t/snapshot-and-restore-time/176780)

<div class="topic-metadata">

**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\
**Replies:** 2\
**Last updated:** [April 17, 2019, 6:42pm UTC](https://discuss.elastic.co/t/snapshot-and-restore-time/176780 "2019-04-17T18:42:34Z")

</div>

Just wondering how long would it take to take a snapshot of 1 TB cluster data and how much time to restore the same. Is there any data available in terms of how much time would it take ?

---

## [Kibana Dashboard showing parser errors on date filter. Error: "failed to parse date field \[1542281539000\] with format \[yyyy-MM-dd'T'HH:mm:ss.SSSZ\]"](https://discuss.elastic.co/t/kibana-dashboard-showing-parser-errors-on-date-filter-error-failed-to-parse-date-field-1542281539000-with-format-yyyy-mm-ddthhss-sssz/167338)

<div class="topic-metadata">

**Author:** [@BHAVIK\_CHITRODA](https://discuss.elastic.co/u/BHAVIK_CHITRODA)\
**Replies:** 2\
**Last updated:** [February 13, 2019, 7:40pm UTC](https://discuss.elastic.co/t/kibana-dashboard-showing-parser-errors-on-date-filter-error-failed-to-parse-date-field-1542281539000-with-format-yyyy-mm-ddthhss-sssz/167338 "2019-02-13T19:40:51Z")

</div>

I have an index with field "timeCreated". In the format yyyy-MM-dd'T'HH:mm:ss.SSSZ. It is mapped in the field mapping template and shows up as MMMM Do YYYY, HH:mm:ss.SSS in the field on Kibana. I have created a visualiz…

---

## [Alias with custom timestamp - time Field Name](https://discuss.elastic.co/t/alias-with-custom-timestamp-time-field-name/159148)

<div class="topic-metadata">

**Author:** [@wheelq](https://discuss.elastic.co/u/wheelq)\
**Replies:** 2\
**Last updated:** [December 4, 2018, 8:41am UTC](https://discuss.elastic.co/t/alias-with-custom-timestamp-time-field-name/159148 "2018-12-04T08:41:51Z")

</div>

I know how to update index with custom timeFieldName, I also know how to create an alias, but I do not know how to create an alias of an index with custom timeFieldName. Target? To have one index, with multiple aliases …

---

## [Can't get data from timelion API using curl when in the dev mode](https://discuss.elastic.co/t/cant-get-data-from-timelion-api-using-curl-when-in-the-dev-mode/143384)

<div class="topic-metadata">

**Author:** [@trex](https://discuss.elastic.co/u/trex)\
**Replies:** 2\
**Last updated:** [August 8, 2018, 12:31pm UTC](https://discuss.elastic.co/t/cant-get-data-from-timelion-api-using-curl-when-in-the-dev-mode/143384 "2018-08-08T12:31:34Z")

</div>

Kibana, tag v6.2.4, official repo https://github.com/elastic/kibana. Run Kibana cd kibana npm start Run curl curl -XPOST -H "Content-Type: application/json" -H "Accept: application/json, text/plain, \*/\*" -H "kbn-xsrf…

---

## [How to chnage Kibana title icon in window title?](https://discuss.elastic.co/t/how-to-chnage-kibana-title-icon-in-window-title/133253)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 2\
**Last updated:** [May 25, 2018, 9:47am UTC](https://discuss.elastic.co/t/how-to-chnage-kibana-title-icon-in-window-title/133253 "2018-05-25T09:47:01Z")

</div>

Hello, I want to change kibana favicon/icon in title window. How to change that? please guide. thanks Sunil.

---

## [DNS request timed out - logstash filter](https://discuss.elastic.co/t/dns-request-timed-out-logstash-filter/123221)

<div class="topic-metadata">

**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\
**Replies:** 2\
**Last updated:** [March 9, 2018, 11:46am UTC](https://discuss.elastic.co/t/dns-request-timed-out-logstash-filter/123221 "2018-03-09T11:46:52Z")

</div>

Hi All, Hi there, This with regards to DNS request time out in logstash filter for cisco firewall logs, after restarting the logstash service it will work for one day and next day i get the logstash stops parsing data …

---

## [Count metric trends](https://discuss.elastic.co/t/count-metric-trends/116960)

<div class="topic-metadata">

**Author:** [@Vladi](https://discuss.elastic.co/u/Vladi)\
**Replies:** 2\
**Last updated:** [January 27, 2018, 5:15am UTC](https://discuss.elastic.co/t/count-metric-trends/116960 "2018-01-27T05:15:56Z")

</div>

Hello, Is it possible to display trends in the count metric? So if the query returns 77 results now, but it shows 60 results for now-1h the display result will be 77 UP trend 17. So the number of documents increased in…

---

## [Define logstash's jdbc-input-plugin json message root object](https://discuss.elastic.co/t/define-logstashs-jdbc-input-plugin-json-message-root-object/115157)

<div class="topic-metadata">

**Author:** [@endersonmaia](https://discuss.elastic.co/u/endersonmaia)\
**Replies:** 2\
**Last updated:** [January 16, 2018, 5:16pm UTC](https://discuss.elastic.co/t/define-logstashs-jdbc-input-plugin-json-message-root-object/115157 "2018-01-16T17:16:55Z")

</div>

I'm using jdbc-input-plugin to get some orders data and send it to a rabbitmq queue. To make the json message compatible with the queue consuming system, I need to add a root named order. I'm getting { "id" : 123, "pr…

---

## [How to pack mybeat to mybeat.rpm?](https://discuss.elastic.co/t/how-to-pack-mybeat-to-mybeat-rpm/100655)

<div class="topic-metadata">

**Author:** [@caibaoying](https://discuss.elastic.co/u/caibaoying)\
**Replies:** 2\
**Last updated:** [September 18, 2017, 1:51am UTC](https://discuss.elastic.co/t/how-to-pack-mybeat-to-mybeat-rpm/100655 "2017-09-18T01:51:51Z")

</div>

I am based on https://www.elastic.co/guide/en/beats/devguide/current/beater-interface.html to build my own beat. Then I wrote my codes. Finally I go build main.go and Now i have ./main and \*.yml , nothing else. I want t…

---

## [Filebeat keeps crashing](https://discuss.elastic.co/t/filebeat-keeps-crashing/75444)

<div class="topic-metadata">

**Author:** [@ArjunSISA](https://discuss.elastic.co/u/ArjunSISA)\
**Replies:** 2\
**Last updated:** [March 13, 2017, 1:26pm UTC](https://discuss.elastic.co/t/filebeat-keeps-crashing/75444 "2017-03-13T13:26:25Z")

</div>

hi everyone I have recently installed filbeat on to my systems so that i can push the logs to logstash. the problem i am facing is that the systems keep crashing and i believe it is because of the data congestions thr…

---

## [Primary shard is closed but still marked as ok and cluster was green](https://discuss.elastic.co/t/primary-shard-is-closed-but-still-marked-as-ok-and-cluster-was-green/75652)

<div class="topic-metadata">

**Author:** [@Slava\_G](https://discuss.elastic.co/u/Slava_G)\
**Replies:** 2\
**Last updated:** [February 20, 2017, 10:21pm UTC](https://discuss.elastic.co/t/primary-shard-is-closed-but-still-marked-as-ok-and-cluster-was-green/75652 "2017-02-20T22:21:49Z")

</div>

During massive delete operation one of the shards (primary) is closed, but marked as ok and cluster was green showing 39 shards of 40 are working. I found what cluster is from logs and see that shard\[14\] is closed with t…

---

## [Cannot install plugin environment](https://discuss.elastic.co/t/cannot-install-plugin-environment/64853)

<div class="topic-metadata">

**Author:** [@sizgiyaev](https://discuss.elastic.co/u/sizgiyaev)\
**Replies:** 2\
**Last updated:** [February 7, 2017, 1:25am UTC](https://discuss.elastic.co/t/cannot-install-plugin-environment/64853 "2017-02-07T01:25:44Z")

</div>

Hello, I'm trying to install the plugin envrionment for my logstash forwarders that are running logstash 5.0. Here is the out put i get: Validating logstash-filter-environment Installing logstash-filter-environment Plugi…

---

## [Index created with wrong name](https://discuss.elastic.co/t/index-created-with-wrong-name/71326)

<div class="topic-metadata">

**Author:** [@John\_Woo\_Lee](https://discuss.elastic.co/u/John_Woo_Lee)\
**Replies:** 2\
**Last updated:** [January 12, 2017, 8:04am UTC](https://discuss.elastic.co/t/index-created-with-wrong-name/71326 "2017-01-12T08:04:48Z")

</div>

Hi, I have a server with below setup #cat /etc/redhat-release CentOS Linux release 7.3.1611 (Core) #timedatectl Local time: Thu 2017-01-12 07:21:08 GMT Universal time: Thu 2017-01-12 07:21:08 UTC RT…

---

## [\[SOLVED\] Measuring duration without using elapsed](https://discuss.elastic.co/t/solved-measuring-duration-without-using-elapsed/67392)

<div class="topic-metadata">

**Author:** [@aeva\_assured](https://discuss.elastic.co/u/aeva_assured)\
**Replies:** 2\
**Last updated:** [November 30, 2016, 1:19pm UTC](https://discuss.elastic.co/t/solved-measuring-duration-without-using-elapsed/67392 "2016-11-30T13:19:48Z")

</div>

I've been using the elapsed plugin Github Link to determine the duration of events in my syslog parse and the plugin is not yet compatible with v5. I've subscribed to the GitHub to see when it gets updated, does anyone…

---

## [Ingest Node - Convert Processor](https://discuss.elastic.co/t/ingest-node-convert-processor/66954)

<div class="topic-metadata">

**Author:** [@JoarSvensson](https://discuss.elastic.co/u/JoarSvensson)\
**Replies:** 2\
**Last updated:** [November 23, 2016, 9:39am UTC](https://discuss.elastic.co/t/ingest-node-convert-processor/66954 "2016-11-23T09:39:20Z")

</div>

I'm having difficulties using the Convert Processor on nested fields. The fields seems to be skipped in the pipeline. Can't find any information in the docs regarding if it's supported or not. Running ES 5.0.1, any hi…

---

## [Date Mapping Format Not Working](https://discuss.elastic.co/t/date-mapping-format-not-working/62216)

<div class="topic-metadata">

**Author:** [@chromechris](https://discuss.elastic.co/u/chromechris)\
**Replies:** 2\
**Last updated:** [October 6, 2016, 7:19am UTC](https://discuss.elastic.co/t/date-mapping-format-not-working/62216 "2016-10-06T07:19:10Z")

</div>

Hello guys, I have used a timestamp the comes from Logstash looking like this: 2016-09-30 02:45:22,533-0700 In mappings I have set it as: "timestamp": { "type": "date", "format": "…

---

## [Install Timelion plugin](https://discuss.elastic.co/t/install-timelion-plugin/61495)

<div class="topic-metadata">

**Author:** [@Senninp](https://discuss.elastic.co/u/Senninp)\
**Replies:** 2\
**Last updated:** [September 26, 2016, 10:43am UTC](https://discuss.elastic.co/t/install-timelion-plugin/61495 "2016-09-26T10:43:09Z")

</div>

Hi, I try to install Timeplion plugin with following command : /opt/kibana/bin/kibana plugin --install /home/user/timelion-latest.tar.gz Respond : {"name":"Kibana","hostname":"NOLA-VII1029","pid":77877,"level…

---

## [How to query write query for given mapping?](https://discuss.elastic.co/t/how-to-query-write-query-for-given-mapping/50598)

<div class="topic-metadata">

**Author:** [@tester](https://discuss.elastic.co/u/tester)\
**Replies:** 2\
**Last updated:** [May 23, 2016, 8:39am UTC](https://discuss.elastic.co/t/how-to-query-write-query-for-given-mapping/50598 "2016-05-23T08:39:46Z")

</div>

Hi, Thank you reading this newbie question. Elasticsearch instance has mapping (see below) and 10+MM documents. Question is how to query? e.g. consider name is "official\_mail\_id" and description is "tester@gmail.com" …

---

## [Lumberjack Beats Connection ConnectionClosed in logstash 2.2](https://discuss.elastic.co/t/lumberjack-beats-connection-connectionclosed-in-logstash-2-2/48660)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 2\
**Last updated:** [May 2, 2016, 6:07am UTC](https://discuss.elastic.co/t/lumberjack-beats-connection-connectionclosed-in-logstash-2-2/48660 "2016-05-02T06:07:52Z")

</div>

Hi , I am running the LS-shipper on 5000 port. input { beats { port=\>"5000" ssl\_certificate =\> "/opt/logstash-elk/SSL/hostName.lij.fi.cer" ssl\_key =\> "/opt/logstash-elk/SSL/logstash.key" } } When I conect using…

---

## [ElasticSearch with Java Version](https://discuss.elastic.co/t/elasticsearch-with-java-version/42195)

<div class="topic-metadata">

**Author:** [@kannan](https://discuss.elastic.co/u/kannan)\
**Replies:** 2\
**Last updated:** [February 19, 2016, 4:04pm UTC](https://discuss.elastic.co/t/elasticsearch-with-java-version/42195 "2016-02-19T16:04:26Z")

</div>

Hi we are using the ElasticSearch 0.90.13, does this version is compatible with the latest version of Java ?

---

## [Snapshot with multiple indices fails on closed one](https://discuss.elastic.co/t/snapshot-with-multiple-indices-fails-on-closed-one/35063)

<div class="topic-metadata">

**Author:** [@skundrik](https://discuss.elastic.co/u/skundrik)\
**Replies:** 2\
**Last updated:** [November 20, 2015, 7:43am UTC](https://discuss.elastic.co/t/snapshot-with-multiple-indices-fails-on-closed-one/35063 "2015-11-20T07:43:05Z")

</div>

Hi, I'm trying to do a backup of indices using wildcard where some are closed and I get error (see below). I'm using version 2.0.0. Is this expected or is it a bug? Request: PUT /\_snapshot/logstash\_backup/snaps…

---

## [Snapshot fails if previously unknown index exists?](https://discuss.elastic.co/t/snapshot-fails-if-previously-unknown-index-exists/25792)

<div class="topic-metadata">

**Author:** [@lrt\_rmeindl](https://discuss.elastic.co/u/lrt_rmeindl)\
**Replies:** 2\
**Last updated:** [July 20, 2015, 8:41am UTC](https://discuss.elastic.co/t/snapshot-fails-if-previously-unknown-index-exists/25792 "2015-07-20T08:41:11Z")

</div>

Trying to create a new snapshot (not first) from an existing ES 1.5.2 cluster, but snapshot mechanism failed on two indexes which were previously not existing with FileNotFoundException ... is this intentionally or an er…

---

## [Setup Elasticsearch Cluster over Oracle Virtualbox](https://discuss.elastic.co/t/setup-elasticsearch-cluster-over-oracle-virtualbox/13071)

<div class="topic-metadata">

**Author:** [@mjunaiddar](https://discuss.elastic.co/u/mjunaiddar)\
**Replies:** 0\
**Last updated:** [August 5, 2013, 11:49am UTC](https://discuss.elastic.co/t/setup-elasticsearch-cluster-over-oracle-virtualbox/13071 "2013-08-05T11:49:22Z")

</div>

Hello, I am learning ES fro a while now, the standalone version is working without any issue but now I want to built a Cluster over Virtualbox and am failing again and again. This is what I have done up to now: …

---

## [Logs of elastic stack components should go to their respective log file](https://discuss.elastic.co/t/logs-of-elastic-stack-components-should-go-to-their-respective-log-file/257732)

<div class="topic-metadata">

**Author:** [@prat](https://discuss.elastic.co/u/prat)\
**Replies:** 4\
**Last updated:** [December 9, 2020, 7:48am UTC](https://discuss.elastic.co/t/logs-of-elastic-stack-components-should-go-to-their-respective-log-file/257732 "2020-12-09T07:48:19Z")

</div>

Hi Team, I am seeing logs of elastic stack components such as Kibana, Logstash, filebeat are going everywhere like in /var/log/message , /var/log/daemon, journal.log and flooding filesystem. how to make sure logs of el…

---

## [Reporting Diagnostics tool fails on capture screenshot](https://discuss.elastic.co/t/reporting-diagnostics-tool-fails-on-capture-screenshot/330080)

<div class="topic-metadata">

**Author:** [@sblack](https://discuss.elastic.co/u/sblack)\
**Replies:** 1\
**Last updated:** [April 23, 2023, 10:59pm UTC](https://discuss.elastic.co/t/reporting-diagnostics-tool-fails-on-capture-screenshot/330080 "2023-04-23T22:59:32Z")

</div>

I ran the Reporting Diagnostics tool and after sometime, the following error is displayed: Something isn't working properly. There was a problem running the diagnostic: Error For additional debugging information, I …

---

## [Failed to start Ping remote services for availability and log results to Elasticsearch or send to Logstash](https://discuss.elastic.co/t/failed-to-start-ping-remote-services-for-availability-and-log-results-to-elasticsearch-or-send-to-logstash/319343)

<div class="topic-metadata">

**Author:** [@bta16](https://discuss.elastic.co/u/bta16)\
**Replies:** 1\
**Last updated:** [November 19, 2022, 3:26pm UTC](https://discuss.elastic.co/t/failed-to-start-ping-remote-services-for-availability-and-log-results-to-elasticsearch-or-send-to-logstash/319343 "2022-11-19T15:26:23Z")

</div>

i have config heartbeat like tutorial quickstart, when i enable and start heartbeat, it noticed me: heartbeat-elastic.service - Ping remote services for availability and log results to Elasticsearch or send to Logstash.…

---

## [Elasticsearch reindex search\_context\_missing\_exception](https://discuss.elastic.co/t/elasticsearch-reindex-search-context-missing-exception/290890)

<div class="topic-metadata">

**Author:** [@sathish-ykone](https://discuss.elastic.co/u/sathish-ykone)\
**Replies:** 1\
**Last updated:** [December 6, 2021, 2:08am UTC](https://discuss.elastic.co/t/elasticsearch-reindex-search-context-missing-exception/290890 "2021-12-06T02:08:15Z")

</div>

We have 30 million entries in our current index, and we're getting a search context missing exception problem during reindexing. Can somebody assist me with this? error "type": "search\_phase\_execution\_exception", "reas…

---

## [Matching query issue, fetching results even fields are not matching](https://discuss.elastic.co/t/matching-query-issue-fetching-results-even-fields-are-not-matching/235314)

<div class="topic-metadata">

**Author:** [@vinay123](https://discuss.elastic.co/u/vinay123)\
**Replies:** 1\
**Last updated:** [June 2, 2020, 10:44am UTC](https://discuss.elastic.co/t/matching-query-issue-fetching-results-even-fields-are-not-matching/235314 "2020-06-02T10:44:29Z")

</div>

Hello , i have array json file loaded a document in index , and i am trying to run a match query on that, results are fetching if the field parameter are wrong. , , , ' { "name":"B", "city":"B", "phone":"…

---

## [Logstash to logstash communication: Connection reset by peer error](https://discuss.elastic.co/t/logstash-to-logstash-communication-connection-reset-by-peer-error/219858)

<div class="topic-metadata">

**Author:** [@Riddhesh](https://discuss.elastic.co/u/Riddhesh)\
**Replies:** 1\
**Last updated:** [February 20, 2020, 3:33pm UTC](https://discuss.elastic.co/t/logstash-to-logstash-communication-connection-reset-by-peer-error/219858 "2020-02-20T15:33:08Z")

</div>

I'm trying to setup logstash to logstash setup(veresion 6.1.3 on both), using lumberjack output and beats input as per guide. My sender config output looks like (the sender input produces around 600 events per sec): ou…

---

## [License error with Filebeat 6.7.1 Docker image and AWS ElasticSearch](https://discuss.elastic.co/t/license-error-with-filebeat-6-7-1-docker-image-and-aws-elasticsearch/180003)

<div class="topic-metadata">

**Author:** [@spiffytech](https://discuss.elastic.co/u/spiffytech)\
**Replies:** 1\
**Last updated:** [May 8, 2019, 7:16am UTC](https://discuss.elastic.co/t/license-error-with-filebeat-6-7-1-docker-image-and-aws-elasticsearch/180003 "2019-05-08T07:16:07Z")

</div>

I'm trying to upgrade my Kubernetes cluster to use the 6.7.1 Docker image and I'm getting the following error when the container starts: Failed to connect to backoff(myserver.es.amazonaws.com:443)): Connection marked as…

---

## [Failing to generate pdf from UI (and hence watcher)](https://discuss.elastic.co/t/failing-to-generate-pdf-from-ui-and-hence-watcher/97832)

<div class="topic-metadata">

**Author:** [@Manas\_Paldhe](https://discuss.elastic.co/u/Manas_Paldhe)\
**Replies:** 1\
**Last updated:** [August 22, 2017, 12:05am UTC](https://discuss.elastic.co/t/failing-to-generate-pdf-from-ui-and-hence-watcher/97832 "2017-08-22T00:05:01Z")

</div>

I am trying to generate pdf of the dashboard that I have. I am unable to do so both from watcher and UI. Relevant logs are: log \[23:40:50.939\] \[debug\]\[esqueue\]\[job\]\[reporting\] j6mt1ldd0kzb470804c6vevm - Job created …

---

## [Remove filter from bar when click on chart](https://discuss.elastic.co/t/remove-filter-from-bar-when-click-on-chart/78704)

<div class="topic-metadata">

**Author:** [@valereds](https://discuss.elastic.co/u/valereds)\
**Replies:** 1\
**Last updated:** [March 15, 2017, 7:32pm UTC](https://discuss.elastic.co/t/remove-filter-from-bar-when-click-on-chart/78704 "2017-03-15T19:32:23Z")

</div>

Hi all I'm trying to implement the functionality to remove the filter added when click on piece of a chart (used to add the filter before). Is it possibile to make?

---

## [Using Active Directory for authentication and Native Realm for role mapping](https://discuss.elastic.co/t/using-active-directory-for-authentication-and-native-realm-for-role-mapping/68197)

<div class="topic-metadata">

**Author:** [@ksoucy](https://discuss.elastic.co/u/ksoucy)\
**Replies:** 1\
**Last updated:** [December 6, 2016, 9:06pm UTC](https://discuss.elastic.co/t/using-active-directory-for-authentication-and-native-realm-for-role-mapping/68197 "2016-12-06T21:06:06Z")

</div>

Is it possible to use an Active Directory realm for user authentication, and let the Native Realm do the user-to-role mapping in x-pack (5.0)? Elastic created this nice Kibana interface for adding users and roles and map…

---

## [Udp listener died warning in logstash udp input plugin](https://discuss.elastic.co/t/udp-listener-died-warning-in-logstash-udp-input-plugin/65709)

<div class="topic-metadata">

**Author:** [@sha198989](https://discuss.elastic.co/u/sha198989)\
**Replies:** 1\
**Last updated:** [November 15, 2016, 6:43am UTC](https://discuss.elastic.co/t/udp-listener-died-warning-in-logstash-udp-input-plugin/65709 "2016-11-15T06:43:52Z")

</div>

HI all, i am getting logs from the syslog server. i have used logstash udp input plugin to get logs via the network. my logstash configuration is this input{ udp{ port =\> 5000 type=\> syslog } } i am using logstash2.2…

---

## [How to search for non english utf-8 symbols](https://discuss.elastic.co/t/how-to-search-for-non-english-utf-8-symbols/53568)

<div class="topic-metadata">

**Author:** [@TealFawn](https://discuss.elastic.co/u/TealFawn)\
**Replies:** 1\
**Last updated:** [June 21, 2016, 8:33pm UTC](https://discuss.elastic.co/t/how-to-search-for-non-english-utf-8-symbols/53568 "2016-06-21T20:33:34Z")

</div>

Trying a very simple query on an analyzed text field and getting no results back. This is the query GET \_search { "query": { "match": { "receipt": { "query": "₡" } } }, "size": 10 } W…

---

## [Why marvel's free license always register error?](https://discuss.elastic.co/t/why-marvels-free-license-always-register-error/47985)

<div class="topic-metadata">

**Author:** [@famoss](https://discuss.elastic.co/u/famoss)\
**Replies:** 1\
**Last updated:** [April 21, 2016, 1:30pm UTC](https://discuss.elastic.co/t/why-marvels-free-license-always-register-error/47985 "2016-04-21T13:30:10Z")

</div>

My register infomation is : first name:zzq last name:zzq Business Email:13281440@qq.com Company:tc Country:china And the response is: Thank You for Registering! I tried many times.But,i never received any email.

---

## [How to ingest logstash logs ...so we can see them from elasticsearch](https://discuss.elastic.co/t/how-to-ingest-logstash-logs-so-we-can-see-them-from-elasticsearch/43939)

<div class="topic-metadata">

**Author:** [@naga1](https://discuss.elastic.co/u/naga1)\
**Replies:** 1\
**Last updated:** [March 9, 2016, 8:24pm UTC](https://discuss.elastic.co/t/how-to-ingest-logstash-logs-so-we-can-see-them-from-elasticsearch/43939 "2016-03-09T20:24:16Z")

</div>

Hi, Is there a way to ingest Logstash logs into elasticsearch, as I am noticing the logstash logs are useful, is there a way to ingest these logs instead of installing filebeats on this machine and loopback to itself. …

[Previous page](https://discuss.elastic.co/top.md?page=1680&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1682&per_page=50&period=all)
