# Top **URL:** https://discuss.elastic.co/top.md?page=171&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 172 --- ## [\[hadoop\] Getting elasticsearch-hadoop working with Shark](https://discuss.elastic.co/t/hadoop-getting-elasticsearch-hadoop-working-with-shark/15882)
**Author:** [@Max\_Lang](https://discuss.elastic.co/u/Max_Lang)\ **Replies:** 14\ **Last updated:** [May 16, 2014, 5:02pm UTC](https://discuss.elastic.co/t/hadoop-getting-elasticsearch-hadoop-working-with-shark/15882 "2014-05-16T17:02:08Z")
I set everything up using this guide: https://github.com/amplab/shark/wiki/Running-Shark-on-EC2 on an ec2 cluster. I've copied the elasticsearch-hadoop jars into the hive lib directory and I have elasticsearch runn… --- ## [Possible Bug pertaining to query engine](https://discuss.elastic.co/t/possible-bug-pertaining-to-query-engine/162286)
**Author:** [@jsontrotter](https://discuss.elastic.co/u/jsontrotter)\ **Replies:** 10\ **Last updated:** [December 29, 2018, 7:00am UTC](https://discuss.elastic.co/t/possible-bug-pertaining-to-query-engine/162286 "2018-12-29T07:00:00Z")
Hi, Probably this is a bug, but the following simple boolean query returns no results. Yet if I remove one or the other of the two expressions, it does return results and quite clearly (I can see anyway) that there are … --- ## [Kibana query performance](https://discuss.elastic.co/t/kibana-query-performance/279363)
**Author:** [@paigekim](https://discuss.elastic.co/u/paigekim)\ **Replies:** 13\ **Last updated:** [July 28, 2021, 11:46pm UTC](https://discuss.elastic.co/t/kibana-query-performance/279363 "2021-07-28T23:46:53Z")
Hello, I am currently drawing graphs and charts from Kibana, but it takes longer than the time that I started to draw. Compared to the beginning, there are obviously more data, but I am not sure it is still count as slo… --- ## [Integration with cisco ISE, PaloAlto and Fortigate Firewall](https://discuss.elastic.co/t/integration-with-cisco-ise-paloalto-and-fortigate-firewall/349848)
**Author:** [@Ganesh\_DV](https://discuss.elastic.co/u/Ganesh_DV)\ **Replies:** 15\ **Last updated:** [December 28, 2023, 3:08pm UTC](https://discuss.elastic.co/t/integration-with-cisco-ise-paloalto-and-fortigate-firewall/349848 "2023-12-28T15:08:46Z")
Hi team. im new to elasticsearch, kindly help me to resolve with below mentioned problem in integartion. I configured cisco ise, fortinet and paloalto firewalls to push logs to elasticsearch via Load balancer . Logs ar… --- ## [Multi node fail](https://discuss.elastic.co/t/multi-node-fail/244244)
**Author:** [@cadirol](https://discuss.elastic.co/u/cadirol)\ **Replies:** 15\ **Last updated:** [August 11, 2020, 11:47am UTC](https://discuss.elastic.co/t/multi-node-fail/244244 "2020-08-11T11:47:35Z")
Hi All For operational continuity in an multinode cluster i have two questions in my head: the cluster contains, 14 nodes, 7 nodes on site A, 7 nodes on site B, ES Version 6.4 What if a) one site goes down unexpected … --- ## [MultiSearchResponse.Item is not giving expected result](https://discuss.elastic.co/t/multisearchresponse-item-is-not-giving-expected-result/172627)
**Author:** [@srikanth\_muddu](https://discuss.elastic.co/u/srikanth_muddu)\ **Replies:** 15\ **Last updated:** [March 18, 2019, 3:02pm UTC](https://discuss.elastic.co/t/multisearchresponse-item-is-not-giving-expected-result/172627 "2019-03-18T15:02:02Z")
Hi, I have a total of 10000 docs in my index A. I am trying to access response hits in my custom plugin class to modify my output for a use case. When I am using the below for loop statement, response hits are only 994… --- ## [Elastic licences](https://discuss.elastic.co/t/elastic-licences/329174)
**Author:** [@Joel\_Goncalves](https://discuss.elastic.co/u/Joel_Goncalves)\ **Replies:** 21\ **Last updated:** [April 6, 2023, 1:17pm UTC](https://discuss.elastic.co/t/elastic-licences/329174 "2023-04-06T13:17:42Z")
Hello, I have a cluster with 1 master and 2 nodes, if I install the enterpise license on a node, will it move to the other node or to the master? --- ## [Advanced job can not be 'realtime search' with xpack5.4 machine learning](https://discuss.elastic.co/t/advanced-job-can-not-be-realtime-search-with-xpack5-4-machine-learning/90023)
**Author:** [@19e5057b4cab9cf379c9](https://discuss.elastic.co/u/19e5057b4cab9cf379c9)\ **Replies:** 9\ **Last updated:** [June 23, 2017, 7:13am UTC](https://discuss.elastic.co/t/advanced-job-can-not-be-realtime-search-with-xpack5-4-machine-learning/90023 "2017-06-23T07:13:01Z")
hey,gays when i created advanced job and chose ‘no end time(realtime search)’ . if data load finish, the process will sleep. after about 5min data keep push to elasticsearch ,but the process is not work. help me~ thx. … --- ## [How do you manage large filebeat installations?](https://discuss.elastic.co/t/how-do-you-manage-large-filebeat-installations/293755)
**Author:** [@mybyte](https://discuss.elastic.co/u/mybyte)\ **Replies:** 11\ **Last updated:** [January 18, 2022, 2:00pm UTC](https://discuss.elastic.co/t/how-do-you-manage-large-filebeat-installations/293755 "2022-01-18T14:00:17Z")
Elastic has made huge leaps in the direction of centralized management recently. Fleet and agent seem to be coming along. But while they seem to work well for metrics, syslog etc. I'm still struggling a bit with a useabl… --- ## [Nginx-ingress-controller-access, \_geoip\_database\_unavailable\_GeoLite2-City.mmdb, \_geoip\_database\_unavailable\_GeoLite2-ASN.mmdb](https://discuss.elastic.co/t/nginx-ingress-controller-access-geoip-database-unavailable-geolite2-city-mmdb-geoip-database-unavailable-geolite2-asn-mmdb/353325)
**Author:** [@Subrahmanyam\_Veerank](https://discuss.elastic.co/u/Subrahmanyam_Veerank)\ **Replies:** 30\ **Last updated:** [March 18, 2024, 8:48am UTC](https://discuss.elastic.co/t/nginx-ingress-controller-access-geoip-database-unavailable-geolite2-city-mmdb-geoip-database-unavailable-geolite2-asn-mmdb/353325 "2024-03-18T08:48:27Z")
Hi sir, Enabled the nginx ingress controller integration on elastic agent (kubernetes env) but the tags related to geo locations which were populated earlier are now not coming. kindly guide on this part. tags \[nginx-… --- ## [Filebeat not collection logs of elastic pods](https://discuss.elastic.co/t/filebeat-not-collection-logs-of-elastic-pods/259719)
**Author:** [@raulgs](https://discuss.elastic.co/u/raulgs)\ **Replies:** 9\ **Last updated:** [January 11, 2021, 7:47am UTC](https://discuss.elastic.co/t/filebeat-not-collection-logs-of-elastic-pods/259719 "2021-01-11T07:47:12Z")
I am not sure since when this is happening, but my filebeat has stopped collecting the logs of elastic pods that I have deployed using eck. In total I do have these 3 pods: elastic-es-masterdata-100-0 elastic-es-master… --- ## [Csv character limitation per row](https://discuss.elastic.co/t/csv-character-limitation-per-row/135309)
**Author:** [@bobbytan](https://discuss.elastic.co/u/bobbytan)\ **Replies:** 11\ **Last updated:** [June 12, 2018, 8:02am UTC](https://discuss.elastic.co/t/csv-character-limitation-per-row/135309 "2018-06-12T08:02:53Z")
Hello, I am new to the ELK,i have noticed that certain rows of my CSV file that exceed about 250 characters are having issues being visualized in kibana after importing using logstash. Is there a way to solve this? --- ## [How to setup kibana dashboard for windows](https://discuss.elastic.co/t/how-to-setup-kibana-dashboard-for-windows/135288)
**Author:** [@Saketh\_Chandra\_Kolis](https://discuss.elastic.co/u/Saketh_Chandra_Kolis)\ **Replies:** 10\ **Last updated:** [June 15, 2018, 8:42am UTC](https://discuss.elastic.co/t/how-to-setup-kibana-dashboard-for-windows/135288 "2018-06-15T08:42:02Z")
PS C:\\Program Files\\Packetbeat\> ./scripts/import\_dashboards -es http://localhost:9200/ Failed to set the mapping: 400 Bad Request Created temporary directory C:\\Users\\Mahe\\AppData\\Local\\Temp\\tmp300680327 Downloading http… --- ## [Не переезжает Master-нода в кластере](https://discuss.elastic.co/t/master/205198)
**Author:** [@111229](https://discuss.elastic.co/u/111229)\ **Replies:** 13\ **Last updated:** [October 28, 2019, 4:25pm UTC](https://discuss.elastic.co/t/master/205198 "2019-10-28T16:25:10Z")
Коллеги, привет. Помогите, пожалуйста. У меня кластер из 11 нод 2 мастера, 1 голосующая, 2 инжест-ноды. При выключении одной ноды клсатера, мастер не выбирается. Конфигурация мастер нод вот такая (см. ниже). Подскаж… --- ## [Is there a recommendation on the number of Indices that can be created using ILM](https://discuss.elastic.co/t/is-there-a-recommendation-on-the-number-of-indices-that-can-be-created-using-ilm/325716)
**Author:** [@siddhartha\_c](https://discuss.elastic.co/u/siddhartha_c)\ **Replies:** 9\ **Last updated:** [February 20, 2023, 2:13am UTC](https://discuss.elastic.co/t/is-there-a-recommendation-on-the-number-of-indices-that-can-be-created-using-ilm/325716 "2023-02-20T02:13:19Z")
Hi Team, I am quite new to Elasticsearch. We are migrating Data from a Licensed Product to Elastic. But the amount of data is huge, its about 100 TB/month. And we have to index data for 10 years. So effectively 1 Pet… --- ## [Swiftype-node & CORS](https://discuss.elastic.co/t/swiftype-node-cors/175025)
**Author:** [@katyd](https://discuss.elastic.co/u/katyd)\ **Replies:** 9\ **Last updated:** [April 10, 2019, 12:43pm UTC](https://discuss.elastic.co/t/swiftype-node-cors/175025 "2019-04-10T12:43:41Z")
I'm having trouble developing locally with GitHub - swiftype/swiftype-node: Node.js client for the Swiftype API as I'm running into CORS errors. I know I can open an instance of Chrome with web security disabled, but I'm… --- ## [Issues with Backup repository setup & shards allocation](https://discuss.elastic.co/t/issues-with-backup-repository-setup-shards-allocation/168848)
**Author:** [@Nithani25](https://discuss.elastic.co/u/Nithani25)\ **Replies:** 9\ **Last updated:** [March 13, 2019, 9:12am UTC](https://discuss.elastic.co/t/issues-with-backup-repository-setup-shards-allocation/168848 "2019-03-13T09:12:16Z")
HI Team, Below is my production setup. 10.XX.YY.ZZ 25 99 13 1.81 1.52 1.29 md - prodcution\_master\_data\_Server3 10.XX.YY.ZZ 41 99 7 0.25 0.25 0.29 d - prodcution\_data\_Server1 10.XX.YY.ZZ 21 99 10 1.61 1.47 1.28 - -… --- ## [White space breaks multi line nagate behavior](https://discuss.elastic.co/t/white-space-breaks-multi-line-nagate-behavior/130198)
**Author:** [@madurad](https://discuss.elastic.co/u/madurad)\ **Replies:** 12\ **Last updated:** [May 2, 2018, 3:28pm UTC](https://discuss.elastic.co/t/white-space-breaks-multi-line-nagate-behavior/130198 "2018-05-02T15:28:11Z")
Hi, I'm trying to send Error stack to ELK server using filebeat installed in one of my server. Following is the sample log entry. \[log-output\] And following is the multiline.patter I have configured, multiline.patter… --- ## [Transfering indices marked cold to the cold nodes cause GC overhead and other issues](https://discuss.elastic.co/t/transfering-indices-marked-cold-to-the-cold-nodes-cause-gc-overhead-and-other-issues/99529)
**Author:** [@John\_ax](https://discuss.elastic.co/u/John_ax)\ **Replies:** 11\ **Last updated:** [September 19, 2017, 6:01am UTC](https://discuss.elastic.co/t/transfering-indices-marked-cold-to-the-cold-nodes-cause-gc-overhead-and-other-issues/99529 "2017-09-19T06:01:00Z")
Hi,I am using ES 5.5 with the hot-cold architecture, by marking indices cold, he transfer indices to the cold nodes from hot nodes automatically. the cold nodes using 30GB jvm memory setting, still having the the follow… --- ## [Why so huge memory requirements when creating new replicas?](https://discuss.elastic.co/t/why-so-huge-memory-requirements-when-creating-new-replicas/248560)
**Author:** [@zdeseb](https://discuss.elastic.co/u/zdeseb)\ **Replies:** 14\ **Last updated:** [September 17, 2020, 5:04pm UTC](https://discuss.elastic.co/t/why-so-huge-memory-requirements-when-creating-new-replicas/248560 "2020-09-17T17:04:31Z")
Hello, does anyone know what exactly is going on on data nodes when number of replica setting is increased and new replicas are started to build? When I change the replica number from 0 to 1 on some slightly larger ind… --- ## [Cannot send logs from Logstash to Elastic Search](https://discuss.elastic.co/t/cannot-send-logs-from-logstash-to-elastic-search/291188)
**Author:** [@nevincansel](https://discuss.elastic.co/u/nevincansel)\ **Replies:** 12\ **Last updated:** [January 3, 2022, 6:28am UTC](https://discuss.elastic.co/t/cannot-send-logs-from-logstash-to-elastic-search/291188 "2022-01-03T06:28:07Z")
Hello, I deployed ELK Stack to k8s by using helm. In the cluster, Elasticsearch, Kibana and Filebeat are running. I also configured Logstash to send Filebeat logs and logs from external resource. My external resource i… --- ## [Elasticsearch monitoring tool - A chrome extension](https://discuss.elastic.co/t/elasticsearch-monitoring-tool-a-chrome-extension/388969)
**Author:** [@Musab\_Dogan](https://discuss.elastic.co/u/Musab_Dogan)\ **Replies:** 18\ **Last updated:** [September 28, 2026, 7:29am UTC](https://discuss.elastic.co/t/elasticsearch-monitoring-tool-a-chrome-extension/388969 "2026-09-28T07:29:15Z")
Hey guys, I've been debugging Elasticsearch clusters for years, and I got tired of jumping between \_cat APIs, and terminal tabs just to check cluster health. So I built a lightweight Chrome extension that surfaces the m… --- ## [Дикий \_score в match\_phrase\_prefix](https://discuss.elastic.co/t/score-match-phrase-prefix/249658)
**Author:** [@GreenX](https://discuss.elastic.co/u/GreenX)\ **Replies:** 11\ **Last updated:** [October 19, 2020, 5:18pm UTC](https://discuss.elastic.co/t/score-match-phrase-prefix/249658 "2020-10-19T17:18:47Z")
Доброго времени суток! Изначально задача выдавать результат в зависимости от приоритета подзапроса. Соответвенно, был dis\_max c match\_phrase, match\_phrase\_prefix и так далее. С boost соответвующим приоритету. По нашей … --- ## [Kibana doesn't work due to change ip](https://discuss.elastic.co/t/kibana-doesnt-work-due-to-change-ip/349282)
**Author:** [@Gabin\_17](https://discuss.elastic.co/u/Gabin_17)\ **Replies:** 13\ **Last updated:** [December 15, 2023, 2:47pm UTC](https://discuss.elastic.co/t/kibana-doesnt-work-due-to-change-ip/349282 "2023-12-15T14:47:39Z")
Hi Guys, I need your help ! I installed ELK few days ago, however, my Ip has changed and now i canno't reach the Kibana page. It's write " Kibana server is not ready yet". What's the process to fix it ? I guess, I have… --- ## [Logstash filter plugin (Grok) for custom pattern Not match curly bracket!](https://discuss.elastic.co/t/logstash-filter-plugin-grok-for-custom-pattern-not-match-curly-bracket/243053)
**Author:** [@AliMaleki21](https://discuss.elastic.co/u/AliMaleki21)\ **Replies:** 17\ **Last updated:** [July 29, 2020, 3:42pm UTC](https://discuss.elastic.co/t/logstash-filter-plugin-grok-for-custom-pattern-not-match-curly-bracket/243053 "2020-07-29T15:42:57Z")
i have problem with grok plugin, curly bracket not match on Grok filter plugin sample log: {Allowed/Denied} .... regex: ACTION\_FIREWALL (Allowed|Denied) Pattern: {%{ACTION\_FIREWALL:action\_firewall}} when try this … --- ## [Curator: Snapshotting Yesterday's Index](https://discuss.elastic.co/t/curator-snapshotting-yesterdays-index/132994)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 9\ **Last updated:** [May 29, 2018, 1:20pm UTC](https://discuss.elastic.co/t/curator-snapshotting-yesterdays-index/132994 "2018-05-29T13:20:31Z")
Hi, I'm using curator 5.5.1 and specifying tasks in yaml formatted config files. Would appreciate it if someone could explain to me how i can snapshot an index that has rolled over? Regards, D --- ## [Error fetching data for metricset kibana.node\_rules: error making http request](https://discuss.elastic.co/t/error-fetching-data-for-metricset-kibana-node-rules-error-making-http-request/349990)
**Author:** [@husoelasticbe](https://discuss.elastic.co/u/husoelasticbe)\ **Replies:** 10\ **Last updated:** [December 27, 2023, 8:15pm UTC](https://discuss.elastic.co/t/error-fetching-data-for-metricset-kibana-node-rules-error-making-http-request/349990 "2023-12-27T20:15:15Z")
Hi Folks, I am almost getting mad. Please help me our here. I am trying to collect kibana monitoring data with metricbeat. I get strangely the following error: {"file.name":"module/wrapper.go","file.line":256},"messa… --- ## [Slack alert not triggering to particular channel](https://discuss.elastic.co/t/slack-alert-not-triggering-to-particular-channel/220970)
**Author:** [@mathur7vidit](https://discuss.elastic.co/u/mathur7vidit)\ **Replies:** 10\ **Last updated:** [March 12, 2020, 10:10am UTC](https://discuss.elastic.co/t/slack-alert-not-triggering-to-particular-channel/220970 "2020-03-12T10:10:57Z")
Team, we have slack integrated and we are using it for sending alerts to multiple slack channels. currently we created few new channels and slack alerts are not being received in those channels. same watcher is sending a… --- ## [Created ML Job with bucket span 15m and 1d](https://discuss.elastic.co/t/created-ml-job-with-bucket-span-15m-and-1d/152839)
**Author:** [@shiv94](https://discuss.elastic.co/u/shiv94)\ **Replies:** 10\ **Last updated:** [October 24, 2018, 3:01pm UTC](https://discuss.elastic.co/t/created-ml-job-with-bucket-span-15m-and-1d/152839 "2018-10-24T15:01:20Z")
Hi All, I have created ML job of multi metric with bucket span of 15m and used the function Max(A), Max(B). Splitting it by hostname and also created other Job with bucket span of 1d. I would like to know how exactly bu… --- ## [Problems in my Cluster](https://discuss.elastic.co/t/problems-in-my-cluster/86057)
**Author:** [@McElroy](https://discuss.elastic.co/u/McElroy)\ **Replies:** 11\ **Last updated:** [May 23, 2017, 6:03am UTC](https://discuss.elastic.co/t/problems-in-my-cluster/86057 "2017-05-23T06:03:47Z")
Hi, We are experiencing some troubles with our cluster. When we come into the office on monday, one or two of our nodes are gone including the master. I also get this message in the logs: org.elasticsearch.cluster.met… --- ## [Bulk load has spiky behavior](https://discuss.elastic.co/t/bulk-load-has-spiky-behavior/11003)
**Author:** [@Travis\_Dempsey](https://discuss.elastic.co/u/Travis_Dempsey)\ **Replies:** 10\ **Last updated:** [March 6, 2013, 9:41pm UTC](https://discuss.elastic.co/t/bulk-load-has-spiky-behavior/11003 "2013-03-06T21:41:46Z")
We have a write heavy cluster that is showing only spiky activity during bulk loads. Incoming write speed is ~1500 documents per second, but the indexing speed is significantly slower, ~1500 a MINUTE, and the cpu u… --- ## [Разбор "необязательных" полей лога, состоящих только из символов кириллицы](https://discuss.elastic.co/t/topic/276701)
**Author:** [@lkfmasd](https://discuss.elastic.co/u/lkfmasd)\ **Replies:** 10\ **Last updated:** [June 23, 2021, 6:48pm UTC](https://discuss.elastic.co/t/topic/276701 "2021-06-23T18:48:21Z")
Добрый день. Есть лог вида MethodName, Level, Process, A=Value1,B=Value2,C=Иванов Иван Иванович,D=Value3,E=Value4. Поля(подстроки лога) A=Value1,B=Value2,C=Иванов Иван Иванович,D=Value3,E=Value4 являются необязательным… --- ## [Error parsing csv file // logstash](https://discuss.elastic.co/t/error-parsing-csv-file-logstash/211963)
**Author:** [@frangolzmil](https://discuss.elastic.co/u/frangolzmil)\ **Replies:** 12\ **Last updated:** [December 17, 2019, 12:55pm UTC](https://discuss.elastic.co/t/error-parsing-csv-file-logstash/211963 "2019-12-17T12:55:27Z")
Hi, I'm checking my logstash logs and see many entries with WARN "Error parsing csv" (80% cases are well parsed). ¿could u help me out? Many thanks in advance. Furthermore, "date" field is not added to timestamp index. … --- ## [\[LOGSTASH\] Input http-poller POST](https://discuss.elastic.co/t/logstash-input-http-poller-post/189667)
**Author:** [@Benjamin\_Carriou](https://discuss.elastic.co/u/Benjamin_Carriou)\ **Replies:** 9\ **Last updated:** [July 10, 2019, 10:21am UTC](https://discuss.elastic.co/t/logstash-input-http-poller-post/189667 "2019-07-10T10:21:22Z")
Bonjour tout le monde, J'essaye dans Logstash, de contacter une API REST au travers d'une méthode POST quoi doit me retourner un document JSON. Voici ma configuration: input { http\_poller { urls =\> { … --- ## [Invalid setting for jdbc streaming filter plugin](https://discuss.elastic.co/t/invalid-setting-for-jdbc-streaming-filter-plugin/217498)
**Author:** [@Mohan\_vel](https://discuss.elastic.co/u/Mohan_vel)\ **Replies:** 11\ **Last updated:** [February 3, 2020, 2:00pm UTC](https://discuss.elastic.co/t/invalid-setting-for-jdbc-streaming-filter-plugin/217498 "2020-02-03T14:00:29Z")
Hi All i am trying to use jdbc streaming in logstash but i am getting below error. Below is my config input { jdbc { jdbc\_driver\_library =\> "mssql-jdbc-7.4.1.jre12-shaded" jdbc\_driver\_class =\> "com.microsoft.sqlserv… --- ## [Проблема при разборе лога](https://discuss.elastic.co/t/topic/220106)
**Author:** [@ImMushroom](https://discuss.elastic.co/u/ImMushroom)\ **Replies:** 9\ **Last updated:** [February 25, 2020, 2:49pm UTC](https://discuss.elastic.co/t/topic/220106 "2020-02-25T14:49:52Z")
Добрый день! Пытаюсь загнать в ELK технологический журнал от 1С, но при разборе лога не могу занести кириллическое значение в индекс. Есть сообщение вида 49:38.102017-17,CALL,1,p:processName=ut,Context=ОбщийМодуль.Вы… --- ## [Same filter which is working for 2.x in Elk not working for 6.1.3](https://discuss.elastic.co/t/same-filter-which-is-working-for-2-x-in-elk-not-working-for-6-1-3/123176)
**Author:** [@ashish\_khulbe](https://discuss.elastic.co/u/ashish_khulbe)\ **Replies:** 9\ **Last updated:** [March 14, 2018, 1:07pm UTC](https://discuss.elastic.co/t/same-filter-which-is-working-for-2-x-in-elk-not-working-for-6-1-3/123176 "2018-03-14T13:07:43Z")
Hi, I have 2 queries :- I configured Elk 2.x with Kibana 4.x a week back and everything working fine. Now I am working with 6.1.3 of Elk and file beat but I can see whole message but not filters. Is there any dif… --- ## [RPM names do not match their contents](https://discuss.elastic.co/t/rpm-names-do-not-match-their-contents/193782)
**Author:** [@akshatsharma](https://discuss.elastic.co/u/akshatsharma)\ **Replies:** 11\ **Last updated:** [September 6, 2019, 3:06pm UTC](https://discuss.elastic.co/t/rpm-names-do-not-match-their-contents/193782 "2019-09-06T15:06:12Z")
filebeat RPM file names do not match their contents. Specifically, filebeat-1.2.3-x86\_64.rpm should be filebeat-1.2.3-1.x86\_64.rpm (is missing the release and the dot before the arch) and filebeat-5.2.1.rpm should be fi… --- ## [ES attempting to parse dates automatically (possibly Hadoop related)](https://discuss.elastic.co/t/es-attempting-to-parse-dates-automatically-possibly-hadoop-related/16480)
**Author:** [@Brian\_Stempin](https://discuss.elastic.co/u/Brian_Stempin)\ **Replies:** 11\ **Last updated:** [March 24, 2014, 4:23pm UTC](https://discuss.elastic.co/t/es-attempting-to-parse-dates-automatically-possibly-hadoop-related/16480 "2014-03-24T16:23:39Z")
Hi List, I have an ES cluster that takes in some data from our logs. We use Hadoop to parse the individual log entries into JSON strings, which does a bulk insert using ES's output format. For whatever reason, ES … --- ## [Netflow setup giving me error](https://discuss.elastic.co/t/netflow-setup-giving-me-error/200761)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 15\ **Last updated:** [September 27, 2019, 7:55pm UTC](https://discuss.elastic.co/t/netflow-setup-giving-me-error/200761 "2019-09-27T19:55:26Z")
Trying to setup simple netflow for test. What am I missing? install new elasticsearch/kibana and all working fine install metricbeat and it works fine as well my kibana and elasticsearch is setup with hostname:9200 a… --- ## [Is it possible to select which event to be processed by each worker?](https://discuss.elastic.co/t/is-it-possible-to-select-which-event-to-be-processed-by-each-worker/182096)
**Author:** [@jcaballero](https://discuss.elastic.co/u/jcaballero)\ **Replies:** 15\ **Last updated:** [June 16, 2019, 6:48pm UTC](https://discuss.elastic.co/t/is-it-possible-to-select-which-event-to-be-processed-by-each-worker/182096 "2019-06-16T18:48:23Z")
Hi, Logstash 6.7.1 As my workflows are a little bit complicate, since I need to parse together different lines (events) lines are non consecutive lines do not have any common label or tag I implemented the filtering… --- ## [Cluster restart deletes xpack license and kibana indexes](https://discuss.elastic.co/t/cluster-restart-deletes-xpack-license-and-kibana-indexes/138906)
**Author:** [@hokiegeek2](https://discuss.elastic.co/u/hokiegeek2)\ **Replies:** 16\ **Last updated:** [July 9, 2018, 1:29pm UTC](https://discuss.elastic.co/t/cluster-restart-deletes-xpack-license-and-kibana-indexes/138906 "2018-07-09T13:29:30Z")
Hi Everyone, I am running a Elasticsearch cluster deployed in Docker containers. When I restarted the cluster the Elasticsearch license appeared to be deleted along with all of the Kibana dashboards. Anyone know why thi… --- ## [X-Pack Report Blank](https://discuss.elastic.co/t/x-pack-report-blank/85670)
**Author:** [@GJahchan](https://discuss.elastic.co/u/GJahchan)\ **Replies:** 10\ **Last updated:** [May 19, 2017, 4:42pm UTC](https://discuss.elastic.co/t/x-pack-report-blank/85670 "2017-05-19T16:42:56Z")
Installed X-Pack on Kibana 5.3.2 running on CentOS 7.3. Reporting successfully generates PDFs. But the PDFs are one A4 page, with only about 1/3 of actual column headings, entry delimiters (horizontal lines), and absol… --- ## [Not able to see the traces of my applicaton(mule4)](https://discuss.elastic.co/t/not-able-to-see-the-traces-of-my-applicaton-mule4/340421)
**Author:** [@vikascateina](https://discuss.elastic.co/u/vikascateina)\ **Replies:** 20\ **Last updated:** [August 22, 2023, 1:47pm UTC](https://discuss.elastic.co/t/not-able-to-see-the-traces-of-my-applicaton-mule4/340421 "2023-08-22T13:47:14Z")
Kibana version:7.17.9 Elasticsearch version:7.17.9 APM Server version:7.17.9 APM Agent language and version:mule4 agent Browser version:Version 114.0.5735.198 (Official Build) (64-bit) I am using elasticsearch,kiban… --- ## [Parse Delimited values from JSON log](https://discuss.elastic.co/t/parse-delimited-values-from-json-log/234637)
**Author:** [@pawankumardv](https://discuss.elastic.co/u/pawankumardv)\ **Replies:** 11\ **Last updated:** [May 29, 2020, 8:35pm UTC](https://discuss.elastic.co/t/parse-delimited-values-from-json-log/234637 "2020-05-29T20:35:41Z")
Hello i have logs in the following format { "timeMillis" : 1590564813191, "thread" : "JOBSCHEDULER\_THREAD\_2", "level" : "ALERT", "loggerName" : "JobScheduler", "message" : "value1\*value2\*value3\*value4\*", "endOfBa… --- ## [Issue in building Kibana rpm 7.0.1 from src](https://discuss.elastic.co/t/issue-in-building-kibana-rpm-7-0-1-from-src/224606)
**Author:** [@chaitra\_hegde](https://discuss.elastic.co/u/chaitra_hegde)\ **Replies:** 11\ **Last updated:** [March 31, 2020, 9:04pm UTC](https://discuss.elastic.co/t/issue-in-building-kibana-rpm-7-0-1-from-src/224606 "2020-03-31T21:04:59Z")
Hi, I am trying to build Kibana rpm 7.0.1 from src code on CentOS 7.4. I am facing issue while running yarn kbn bootstrap. I have also followed https://github.com/elastic/kibana/issues/47214 .But it did not help me. … --- ## [Logstash start successfully but no result](https://discuss.elastic.co/t/logstash-start-successfully-but-no-result/237611)
**Author:** [@Katia](https://discuss.elastic.co/u/Katia)\ **Replies:** 18\ **Last updated:** [June 19, 2020, 12:55pm UTC](https://discuss.elastic.co/t/logstash-start-successfully-but-no-result/237611 "2020-06-19T12:55:18Z")
Hello, I really need help importing my log files. If I create a file right now, this will be imported successfully, but if I try to import a file that already exists since about 11 hours, logstash will not show any out… --- ## [7.6.0 vs new signals and futher enrich ingestion](https://discuss.elastic.co/t/7-6-0-vs-new-signals-and-futher-enrich-ingestion/219211)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 9\ **Last updated:** [February 17, 2020, 8:14am UTC](https://discuss.elastic.co/t/7-6-0-vs-new-signals-and-futher-enrich-ingestion/219211 "2020-02-17T08:14:17Z")
Just updated our cluster to 7.6.0 and are wondering where to read up on utilizing the new SIEM signals and if needed how to do further ingestion enriching to enhance signals eta. Currently got winlog(+sysmon) and audit … --- ## [Finding optimal solution to use filter in aggregations of transform index](https://discuss.elastic.co/t/finding-optimal-solution-to-use-filter-in-aggregations-of-transform-index/242980)
**Author:** [@InfiniteDreamer](https://discuss.elastic.co/u/InfiniteDreamer)\ **Replies:** 9\ **Last updated:** [August 14, 2020, 7:59am UTC](https://discuss.elastic.co/t/finding-optimal-solution-to-use-filter-in-aggregations-of-transform-index/242980 "2020-08-14T07:59:09Z")
We are trying to create transform index, Following sample data is our subset where we want to find most recent event date based our duty code. code enterprise duty visitdate 2247 HASTY&TASTY 1 Jul 27, 2020 @ … --- ## [GROK filter for specific keyword and values](https://discuss.elastic.co/t/grok-filter-for-specific-keyword-and-values/238808)
**Author:** [@Akshara](https://discuss.elastic.co/u/Akshara)\ **Replies:** 9\ **Last updated:** [June 26, 2020, 11:11am UTC](https://discuss.elastic.co/t/grok-filter-for-specific-keyword-and-values/238808 "2020-06-26T11:11:47Z")
LOG MSG : "2020-05-13 09:30:15.405 \[localhost\] \[Services\] \[Request Id : 06118032-ba2f-406e-b6b3-89f0511924ba\] \[User Id : HUNTER@UK.B-AND-Q.COM\] INFO com.logging.aspect.AspectController:120 - \[1242,124202,\] Exit LookupLa… [Previous page](https://discuss.elastic.co/top.md?page=170&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=172&per_page=50&period=all)