# Top **URL:** https://discuss.elastic.co/top.md?page=179&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 180 --- ## [Error while delete ml anomaly job](https://discuss.elastic.co/t/error-while-delete-ml-anomaly-job/243888)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 13\ **Last updated:** [August 6, 2020, 4:29pm UTC](https://discuss.elastic.co/t/error-while-delete-ml-anomaly-job/243888 "2020-08-06T16:29:52Z")
I'm trying to delete an ML job. I used Kibana to do so, and Kibana shows "deleting" status for this job. DELETE \_ml/anomaly\_detectors/jobid?force=true gives: "reason" : { "type" : "node\_disconnected\_exception", "r… --- ## [Using LDAP to set up Users and Roles in elasticsearch.yml file](https://discuss.elastic.co/t/using-ldap-to-set-up-users-and-roles-in-elasticsearch-yml-file/323440)
**Author:** [@sswilley88](https://discuss.elastic.co/u/sswilley88)\ **Replies:** 15\ **Last updated:** [January 20, 2023, 2:06pm UTC](https://discuss.elastic.co/t/using-ldap-to-set-up-users-and-roles-in-elasticsearch-yml-file/323440 "2023-01-20T14:06:44Z")
I am trying to set up user/role details in the elasticsearch.yaml file with LDAP settings, and need some support. I have followed elastic documentation, but it’s not working. I have added below details (with our own deta… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/339009)
**Author:** [@SUNA](https://discuss.elastic.co/u/SUNA)\ **Replies:** 9\ **Last updated:** [July 25, 2023, 4:27pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/339009 "2023-07-25T16:27:43Z")
Hi Team, My ELK cluster running in one node. while clearing Queue, I had restarted kibana and elk services. from now my URL is stuck with below error. Kibana server is not ready yet In order to fix this i have restar… --- ## [How to debug apm agent](https://discuss.elastic.co/t/how-to-debug-apm-agent/246478)
**Author:** [@manohar\_deepu](https://discuss.elastic.co/u/manohar_deepu)\ **Replies:** 9\ **Last updated:** [August 27, 2020, 11:30am UTC](https://discuss.elastic.co/t/how-to-debug-apm-agent/246478 "2020-08-27T11:30:12Z")
Hi, I have integrated apm agents to my app but the data is not getting populated. All the apm server are behind an elb and the agent is point to elb. I have verified the app machine is able to connect to elb by running … --- ## [Restore-elastic-search-snapshot-from-2-3-0-to-5-6-0](https://discuss.elastic.co/t/restore-elastic-search-snapshot-from-2-3-0-to-5-6-0/145512)
**Author:** [@deepsing](https://discuss.elastic.co/u/deepsing)\ **Replies:** 13\ **Last updated:** [August 23, 2018, 1:20pm UTC](https://discuss.elastic.co/t/restore-elastic-search-snapshot-from-2-3-0-to-5-6-0/145512 "2018-08-23T13:20:06Z")
Trying to restore elastic search backup from 2.3.0 to 5.6.0 Following the below steps: update elasticsearch.yml file. Added path.repo: \["C:/backup\_elasticsearch\_2\_3\_0"\] Run below command for backup from the postm… --- ## [Windows Local Magento Installation Elastic Search Unknown 503 error from Elasticsearch null](https://discuss.elastic.co/t/windows-local-magento-installation-elastic-search-unknown-503-error-from-elasticsearch-null/322174)
**Author:** [@kumar2023](https://discuss.elastic.co/u/kumar2023)\ **Replies:** 9\ **Last updated:** [January 5, 2023, 3:42pm UTC](https://discuss.elastic.co/t/windows-local-magento-installation-elastic-search-unknown-503-error-from-elasticsearch-null/322174 "2023-01-05T15:42:35Z")
Installed Magento 2.45 in windows 10 local setup. From the admin panel i do see Catalog Search index notification. Actually the notification says "One or more indexers are invalid. Make sure your Magento cron job is run… --- ## [Version mismatch message even though versions match](https://discuss.elastic.co/t/version-mismatch-message-even-though-versions-match/337819)
**Author:** [@McJava1967](https://discuss.elastic.co/u/McJava1967)\ **Replies:** 15\ **Last updated:** [July 12, 2023, 3:49pm UTC](https://discuss.elastic.co/t/version-mismatch-message-even-though-versions-match/337819 "2023-07-12T15:49:08Z")
Hi all. I'm trying out ELK 8.8.2, and getting this message: Job creation error The client noticed that the server is not Elasticsearch and we do not support this unknown product. All explanations in various posts s… --- ## [Python & elasticsearch](https://discuss.elastic.co/t/python-elasticsearch/172785)
**Author:** [@Digital](https://discuss.elastic.co/u/Digital)\ **Replies:** 9\ **Last updated:** [March 20, 2019, 1:53pm UTC](https://discuss.elastic.co/t/python-elasticsearch/172785 "2019-03-20T13:53:29Z")
Bonjour à tous :slight\_smile: J'utilise maintenant elasticsearch depuis plusieurs mois maintenant et j'aimerais m'orienter dans la partie API de celui-ci. Je suis entrain de préparer un développement qui devra aller re… --- ## [APM Java agent not capturing background running details and methods when enable sampling profiler](https://discuss.elastic.co/t/apm-java-agent-not-capturing-background-running-details-and-methods-when-enable-sampling-profiler/278531)
**Author:** [@Bhanu\_Praveen](https://discuss.elastic.co/u/Bhanu_Praveen)\ **Replies:** 13\ **Last updated:** [August 1, 2021, 4:06am UTC](https://discuss.elastic.co/t/apm-java-agent-not-capturing-background-running-details-and-methods-when-enable-sampling-profiler/278531 "2021-08-01T04:06:12Z")
Hello, I have enabled sampling profiler, only UI transactions and its stack trace methods are being captured. But if i have any background schedulers/processes running, those events are not being captured. v 7.8.0: v … --- ## [Can't run logstash. pathname contains null byte](https://discuss.elastic.co/t/cant-run-logstash-pathname-contains-null-byte/237008)
**Author:** [@Mahathir\_Mohammad](https://discuss.elastic.co/u/Mahathir_Mohammad)\ **Replies:** 13\ **Last updated:** [June 14, 2020, 7:25am UTC](https://discuss.elastic.co/t/cant-run-logstash-pathname-contains-null-byte/237008 "2020-06-14T07:25:54Z")
I'm trying to run logstash for elasticsearch but getting this error. I don't know what is the reason. Please help me. \[ERROR\] 2020-06-14 01:17:31.633 \[\[main\]-pipeline-manager\] javapipeline - Pipeline aborted due to … --- ## [Logstash 7.9.1 have issues in ARM](https://discuss.elastic.co/t/logstash-7-9-1-have-issues-in-arm/249596)
**Author:** [@goutham968](https://discuss.elastic.co/u/goutham968)\ **Replies:** 10\ **Last updated:** [September 25, 2020, 5:13pm UTC](https://discuss.elastic.co/t/logstash-7-9-1-have-issues-in-arm/249596 "2020-09-25T17:13:14Z")
\[2020-09-23T00:58:12,480\]\[ERROR\]\[logstash.javapipeline \]\[main\]\[167820c884ed4020909a7d2491232c40eac5b47a3f91495a85db21bdf02afeca\] A plugin had an unrecoverable error. Will restart this plugin. Pipeline\_id:main Plugin: \ **Author:** [@Abhishek\_Tiwari](https://discuss.elastic.co/u/Abhishek_Tiwari)\ **Replies:** 11\ **Last updated:** [February 7, 2020, 10:04am UTC](https://discuss.elastic.co/t/thread-pool-configuration/215683 "2020-02-07T10:04:50Z") Hi , I am new in elastic search . here i want to know that how one should configure thread pool. My current configuration is following thread\_pool: search: size: 64 queue\_size: 500 min\_queue\_size: 10 max\_queue\_si… --- ## [\_id value is getting changed in elastic](https://discuss.elastic.co/t/id-value-is-getting-changed-in-elastic/268905)
**Author:** [@gbandasha](https://discuss.elastic.co/u/gbandasha)\ **Replies:** 12\ **Last updated:** [April 12, 2021, 5:52pm UTC](https://discuss.elastic.co/t/id-value-is-getting-changed-in-elastic/268905 "2021-04-12T17:52:45Z")
I have a unique\_id value in my index and that is also used as the document\_id, but as my document count is increasing drastically I had changed the type from double because that was causing truncation of my values. I cha… --- ## [SIEM created and closed cases report](https://discuss.elastic.co/t/siem-created-and-closed-cases-report/270931)
**Author:** [@bnk](https://discuss.elastic.co/u/bnk)\ **Replies:** 9\ **Last updated:** [May 19, 2021, 9:53am UTC](https://discuss.elastic.co/t/siem-created-and-closed-cases-report/270931 "2021-05-19T09:53:21Z")
Hello, I looked information if there is a possibility to export info about created and closed cases (also tags associated with cases and other related info) in ELK SIEM, but I coudn't find any information. Is there a way… --- ## [GeoIP challenges - Custom-City.mmdb](https://discuss.elastic.co/t/geoip-challenges-custom-city-mmdb/355173)
**Author:** [@SteveB1963](https://discuss.elastic.co/u/SteveB1963)\ **Replies:** 16\ **Last updated:** [March 25, 2024, 2:08pm UTC](https://discuss.elastic.co/t/geoip-challenges-custom-city-mmdb/355173 "2024-03-25T14:08:57Z")
I am new to the forum, but not new to Elastic Stack. I have been using it for about 7 years. Started with Version 5 and upgraded to 8 over time. Sorry for the long post but felt that some foundation was necessary. Curr… --- ## [ElasticSearch 2.3 Purge of deleted documents](https://discuss.elastic.co/t/elasticsearch-2-3-purge-of-deleted-documents/296492)
**Author:** [@Shane\_Gannon](https://discuss.elastic.co/u/Shane_Gannon)\ **Replies:** 14\ **Last updated:** [March 4, 2022, 9:37am UTC](https://discuss.elastic.co/t/elasticsearch-2-3-purge-of-deleted-documents/296492 "2022-03-04T09:37:21Z")
I've a legacy Elasticsearch 2.3 index. It is no longer being updated with new entries, instead the only modifications are deletes. All our new data targets an Elasticsearch 7 cluster. Though we do still read from the ES2… --- ## [Out Of Memory errors after G1GC migration](https://discuss.elastic.co/t/out-of-memory-errors-after-g1gc-migration/284227)
**Author:** [@malcon-moreira-sm](https://discuss.elastic.co/u/malcon-moreira-sm)\ **Replies:** 12\ **Last updated:** [September 15, 2021, 2:26pm UTC](https://discuss.elastic.co/t/out-of-memory-errors-after-g1gc-migration/284227 "2021-09-15T14:26:14Z")
We have an Elastic environment with 83 nodes and 3 masters inside docker containers that recently were migrated from CMS Garbage Collector to G1. The version of the cluster is 7.4.2: "docker.elastic.co/elasticsearch/ela… --- ## [Kibana discover tab is lagging](https://discuss.elastic.co/t/kibana-discover-tab-is-lagging/277902)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 17\ **Last updated:** [July 30, 2021, 3:51pm UTC](https://discuss.elastic.co/t/kibana-discover-tab-is-lagging/277902 "2021-07-30T15:51:53Z")
Running elk stack 7.11 Issue is while searching 2 months data in kibana's discover it is taking more than 5 minutes to show the result the index size is 100gb we did top command and we didn't see any serious thing cpu i… --- ## [How to add filter panel in kibana custom plugin](https://discuss.elastic.co/t/how-to-add-filter-panel-in-kibana-custom-plugin/243080)
**Author:** [@Tejashree\_kate](https://discuss.elastic.co/u/Tejashree_kate)\ **Replies:** 9\ **Last updated:** [August 1, 2020, 12:12am UTC](https://discuss.elastic.co/t/how-to-add-filter-panel-in-kibana-custom-plugin/243080 "2020-08-01T00:12:32Z")
Hi I am trying to develop a custom kibana plugin and want to add the filter bar to my plugin similar to the one in discover How can I add the filter bar to mu custom kibana plugin? --- ## [Uneven IO usages on nodes](https://discuss.elastic.co/t/uneven-io-usages-on-nodes/1514)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 9\ **Last updated:** [June 1, 2015, 6:34pm UTC](https://discuss.elastic.co/t/uneven-io-usages-on-nodes/1514 "2015-06-01T18:34:50Z")
I'm currently running a bulk indexing job... Nothing else... 4 nodes the index is 8 shards + 1 replica evenly distributed on the 4 nodes, but in Marvel I see one node IO is higher then the rest Node 1: 500 iops Node … --- ## [Unable to send logs using Filebeat to Logstash](https://discuss.elastic.co/t/unable-to-send-logs-using-filebeat-to-logstash/326114)
**Author:** [@Chris\_W1](https://discuss.elastic.co/u/Chris_W1)\ **Replies:** 11\ **Last updated:** [February 22, 2023, 2:57pm UTC](https://discuss.elastic.co/t/unable-to-send-logs-using-filebeat-to-logstash/326114 "2023-02-22T14:57:53Z")
Hi Team, I am trying to send logs in .json file on one of my server to Logstash using Filebeat. Below are the configs I did on the Filebeat & Logstash but I am not able to send it successfully. Your suggestions and help… --- ## [Logstash and elasticsearch performing](https://discuss.elastic.co/t/logstash-and-elasticsearch-performing/69279)
**Author:** [@pierre](https://discuss.elastic.co/u/pierre)\ **Replies:** 11\ **Last updated:** [December 20, 2016, 10:37am UTC](https://discuss.elastic.co/t/logstash-and-elasticsearch-performing/69279 "2016-12-20T10:37:17Z")
hey , my configuration 40 G Ram, 2 CPU 4 core , elk and nginx in the same server il give 15g -Xmx for logstash and elactic input { file { start\_position =\> "beginning" path =\> "/var/log/StatVM/\*" sincedb\_path =\> … --- ## [Problem with Nested Data Inside the Objects Data](https://discuss.elastic.co/t/problem-with-nested-data-inside-the-objects-data/92936)
**Author:** [@abhishek5678](https://discuss.elastic.co/u/abhishek5678)\ **Replies:** 10\ **Last updated:** [July 17, 2017, 6:25am UTC](https://discuss.elastic.co/t/problem-with-nested-data-inside-the-objects-data/92936 "2017-07-17T06:25:48Z")
Hi Everyone, I have the data which contains object data inside the Nested data.I want to find out the correct mapping for this. If anybody knows about that then please help me to figure out this problem. Data: { "v… --- ## [Use Metricbeat to monitor LXC containers](https://discuss.elastic.co/t/use-metricbeat-to-monitor-lxc-containers/311329)
**Author:** [@SamTV12345](https://discuss.elastic.co/u/SamTV12345)\ **Replies:** 13\ **Last updated:** [August 8, 2022, 8:13am UTC](https://discuss.elastic.co/t/use-metricbeat-to-monitor-lxc-containers/311329 "2022-08-08T08:13:45Z")
I'd like to use metricbeat to collect cpu and memory usage so that I can better monitor running applications and be alerted when an application is crashing in a loop. I used this code to start metricbeat in docker in the… --- ## [Config elastic 2.2.0 with 5 nodes](https://discuss.elastic.co/t/config-elastic-2-2-0-with-5-nodes/102149)
**Author:** [@jeannot](https://discuss.elastic.co/u/jeannot)\ **Replies:** 13\ **Last updated:** [September 29, 2017, 2:42pm UTC](https://discuss.elastic.co/t/config-elastic-2-2-0-with-5-nodes/102149 "2017-09-29T14:42:38Z")
Hi all, I'm new in elastic. I thought number of master should be a quorum of data nodes ( so 3 master for 5 nodes) In fact I have 5 nodes for an elastic cluster and only one master. Is it a correct config ? May I hav… --- ## [Can't route incoming traffic to new nodes](https://discuss.elastic.co/t/cant-route-incoming-traffic-to-new-nodes/56852)
**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\ **Replies:** 9\ **Last updated:** [August 3, 2016, 3:42pm UTC](https://discuss.elastic.co/t/cant-route-incoming-traffic-to-new-nodes/56852 "2016-08-03T15:42:26Z")
I hope that someone can help as I have been banging my head for a couple weeks on this. I had a four node 2.0.0 cluster running on Azure VMs. They are all equal nodes, and any can be master. The VMs are part of a load… --- ## [Logstash - Slow data processing](https://discuss.elastic.co/t/logstash-slow-data-processing/371115)
**Author:** [@Harsh08](https://discuss.elastic.co/u/Harsh08)\ **Replies:** 19\ **Last updated:** [December 3, 2024, 3:02pm UTC](https://discuss.elastic.co/t/logstash-slow-data-processing/371115 "2024-12-03T15:02:52Z")
I am using Filebeat and Logstash to set up a logging system for handling logs from around 35 servers. Currently, I have large volume of logs, and Logstash is not able to process the data quickly enough. As a result, the… --- ## [How to Installing APM agent injava applications](https://discuss.elastic.co/t/how-to-installing-apm-agent-injava-applications/176158)
**Author:** [@Sajid\_Md](https://discuss.elastic.co/u/Sajid_Md)\ **Replies:** 10\ **Last updated:** [April 15, 2019, 5:45am UTC](https://discuss.elastic.co/t/how-to-installing-apm-agent-injava-applications/176158 "2019-04-15T05:45:52Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: -6.2… --- ## [APM Not Correlating Trace](https://discuss.elastic.co/t/apm-not-correlating-trace/172758)
**Author:** [@cuxoni](https://discuss.elastic.co/u/cuxoni)\ **Replies:** 10\ **Last updated:** [April 2, 2019, 7:50am UTC](https://discuss.elastic.co/t/apm-not-correlating-trace/172758 "2019-04-02T07:50:38Z")
Kibana version: 6.6.2 Elasticsearch version:6.6.2 APM Server version:6.6.2 APM Agent language and version:6.6.2 Browser version: Curl request? Original install method (e.g. download page, yum, deb, from source, etc.… --- ## [Unassigned primary + replica shard, minimise data loss](https://discuss.elastic.co/t/unassigned-primary-replica-shard-minimise-data-loss/317393)
**Author:** [@tg295](https://discuss.elastic.co/u/tg295)\ **Replies:** 11\ **Last updated:** [November 4, 2022, 2:27pm UTC](https://discuss.elastic.co/t/unassigned-primary-replica-shard-minimise-data-loss/317393 "2022-11-04T14:27:53Z")
Hello, my cluster is currently in red state due to one of both the primary and replica shard of an index becoming unassigned. This happened after a number of large tasks were executed simultaneously by accident on the sa… --- ## [I have added a custom analyzer to my index settings, but not getting results](https://discuss.elastic.co/t/i-have-added-a-custom-analyzer-to-my-index-settings-but-not-getting-results/244771)
**Author:** [@Saumya\_Mishra](https://discuss.elastic.co/u/Saumya_Mishra)\ **Replies:** 9\ **Last updated:** [August 13, 2020, 8:56pm UTC](https://discuss.elastic.co/t/i-have-added-a-custom-analyzer-to-my-index-settings-but-not-getting-results/244771 "2020-08-13T20:56:59Z")
// This the setting of my index { "hw\_transcriptionlogindex" : { "settings" : { "index" : { "number\_of\_shards" : "1", "provided\_name" : "hw\_t… --- ## [Release resources when Metricbeat stops](https://discuss.elastic.co/t/release-resources-when-metricbeat-stops/107542)
**Author:** [@mguggi](https://discuss.elastic.co/u/mguggi)\ **Replies:** 9\ **Last updated:** [November 16, 2017, 10:50pm UTC](https://discuss.elastic.co/t/release-resources-when-metricbeat-stops/107542 "2017-11-16T22:50:30Z")
Hi, I'm new in go and metricbeat. I want write a metricbeat module which collects data from an Oracle database. Unfortunately I found no function (or way) to cleanup my connection when metricbeat will be stopped. I als… --- ## [FIlebeat IIS module](https://discuss.elastic.co/t/filebeat-iis-module/293257)
**Author:** [@rckvwijk](https://discuss.elastic.co/u/rckvwijk)\ **Replies:** 11\ **Last updated:** [January 10, 2022, 1:31pm UTC](https://discuss.elastic.co/t/filebeat-iis-module/293257 "2022-01-10T13:31:31Z")
Hi there, We're using filebeat with great succes for most of our logging but we've received a new request from within the organisation. They want to ingest the IIS logs from our Windows Server 2016 machine but even thou… --- ## [Just downloaded elastic search version 8.13.2 and ran the elasticsearch.bat. it return with this error. Elasticsearch died while starting up, with exit code 1](https://discuss.elastic.co/t/just-downloaded-elastic-search-version-8-13-2-and-ran-the-elasticsearch-bat-it-return-with-this-error-elasticsearch-died-while-starting-up-with-exit-code-1/357752)
**Author:** [@Duke\_tlam](https://discuss.elastic.co/u/Duke_tlam)\ **Replies:** 9\ **Last updated:** [April 20, 2024, 2:07am UTC](https://discuss.elastic.co/t/just-downloaded-elastic-search-version-8-13-2-and-ran-the-elasticsearch-bat-it-return-with-this-error-elasticsearch-died-while-starting-up-with-exit-code-1/357752 "2024-04-20T02:07:56Z")
\[2024-04-18T16:13:57,555\]\[INFO \]\[o.e.n.NativeAccess \] \[DCAP919WAS905DB\] Using \[jdk\] native provider and native methods for \[Windows\] \[2024-04-18T16:13:57,937\]\[ERROR\]\[o.e.b.Elasticsearch \] \[DCAP919WAS905DB\] fa… --- ## [Lost indice without any warning](https://discuss.elastic.co/t/lost-indice-without-any-warning/317668)
**Author:** [@Henri\_L](https://discuss.elastic.co/u/Henri_L)\ **Replies:** 9\ **Last updated:** [October 28, 2022, 10:24am UTC](https://discuss.elastic.co/t/lost-indice-without-any-warning/317668 "2022-10-28T10:24:12Z")
Hi there I just notice that I lost my indice and this is a bit strange. Could you please help me with the log file below? The command curl -X GET "localhost:9200/\_cat/indices?v" only give me that health status index… --- ## [Need to disable all the steps snaps in Elastic Synthetic](https://discuss.elastic.co/t/need-to-disable-all-the-steps-snaps-in-elastic-synthetic/269916)
**Author:** [@shahidraza](https://discuss.elastic.co/u/shahidraza)\ **Replies:** 9\ **Last updated:** [April 26, 2021, 2:58pm UTC](https://discuss.elastic.co/t/need-to-disable-all-the-steps-snaps-in-elastic-synthetic/269916 "2021-04-26T14:58:22Z")
Hi Team, Are there any properties that allow us to capture images only when any errors happen in the configured flows? As of now, we can see more than 1 TB of Data utilized within 1 month and only with 2-3 flows. I am … --- ## [Logstash: Got response code '405' contacting Elasticsearch](https://discuss.elastic.co/t/logstash-got-response-code-405-contacting-elasticsearch/228723)
**Author:** [@tom55](https://discuss.elastic.co/u/tom55)\ **Replies:** 9\ **Last updated:** [April 27, 2020, 7:19am UTC](https://discuss.elastic.co/t/logstash-got-response-code-405-contacting-elasticsearch/228723 "2020-04-27T07:19:02Z")
When trying to connect Logstash to ElasticSearch I'm getting this error and I don't understand why. The error mentions a "dead ES instance" but ElasticSearch is running and I'm able to access the API with curl from the s… --- ## [Metricbeat on 10 hosts - how to config for low shards](https://discuss.elastic.co/t/metricbeat-on-10-hosts-how-to-config-for-low-shards/176982)
**Author:** [@Sushimaster](https://discuss.elastic.co/u/Sushimaster)\ **Replies:** 9\ **Last updated:** [April 26, 2019, 9:25pm UTC](https://discuss.elastic.co/t/metricbeat-on-10-hosts-how-to-config-for-low-shards/176982 "2019-04-26T21:25:03Z")
I'm running metricbeat on around 10 hosts. In ES each host is generating each day a shard or index. After upgrade to ES7 kibana throws an error like Validation Failed: 1: this action would add \[2\] total shards, but t… --- ## [Auditbeat setting unspecified rule](https://discuss.elastic.co/t/auditbeat-setting-unspecified-rule/157045)
**Author:** [@nlh](https://discuss.elastic.co/u/nlh)\ **Replies:** 9\ **Last updated:** [November 28, 2018, 1:24am UTC](https://discuss.elastic.co/t/auditbeat-setting-unspecified-rule/157045 "2018-11-28T01:24:05Z")
Hi, Running Auditbeat 6.4.2 and the rules in the .yml file are: audit\_rules: | -w /etc/auditbeat/auditbeat.yml -p wa -k auditbeat\_issue -w /etc/passwd -p wa -k passwd\_changes -w /PTC/ -p wr -k ptc\_code\_acc… --- ## [Error in custom plugin of Kibana](https://discuss.elastic.co/t/error-in-custom-plugin-of-kibana/188066)
**Author:** [@masterThomas](https://discuss.elastic.co/u/masterThomas)\ **Replies:** 19\ **Last updated:** [July 9, 2019, 1:10pm UTC](https://discuss.elastic.co/t/error-in-custom-plugin-of-kibana/188066 "2019-07-09T13:10:43Z")
hi team, Please, help with issue. Getting error while making a POST/PUT requests from custom plugin from browser to elastic index: status: 401, displayName: 'AuthenticationException', message: '\[security\_exception\] m… --- ## [Multiline](https://discuss.elastic.co/t/multiline/48158)
**Author:** [@Giulio](https://discuss.elastic.co/u/Giulio)\ **Replies:** 9\ **Last updated:** [April 29, 2016, 3:34pm UTC](https://discuss.elastic.co/t/multiline/48158 "2016-04-29T15:34:38Z")
Hi Sorry if I disturb you again but I but I'm totally out of ideas and I really need advice from the community... I'm trying to parse a multiline log like this one from file. \[Tue Apr 19 10:31:27 2016\] \[debug\] ssl\_en… --- ## [3 big indices with very slow query](https://discuss.elastic.co/t/3-big-indices-with-very-slow-query/172594)
**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\ **Replies:** 19\ **Last updated:** [March 27, 2019, 8:43pm UTC](https://discuss.elastic.co/t/3-big-indices-with-very-slow-query/172594 "2019-03-27T20:43:07Z")
I have 3 big indices (logs\_2016, logs\_2017 and logs\_2018). They are about 200gb size and 200000000 docs count. I'm doing 99% of my queries by parameter user\_id. Here's the mapping for logs\_2017 e.g.: { "logs\_2017": { … --- ## [Magento2: Elasticsearch failed to start: problem with java](https://discuss.elastic.co/t/magento2-elasticsearch-failed-to-start-problem-with-java/306321)
**Author:** [@Konstantina\_Gerou](https://discuss.elastic.co/u/Konstantina_Gerou)\ **Replies:** 11\ **Last updated:** [June 6, 2022, 11:19am UTC](https://discuss.elastic.co/t/magento2-elasticsearch-failed-to-start-problem-with-java/306321 "2022-06-06T11:19:07Z")
Hello, I've installed Magento2.4.4 in ubuntu20.04 VM. When i did the installation everything was fine. Now I am facing a failure . I tried almost everything to fix it, but nothing. Here is the output: Also in the E… --- ## [Primary Indices replicating to Warm Node](https://discuss.elastic.co/t/primary-indices-replicating-to-warm-node/246029)
**Author:** [@ajesh](https://discuss.elastic.co/u/ajesh)\ **Replies:** 9\ **Last updated:** [September 2, 2020, 11:15am UTC](https://discuss.elastic.co/t/primary-indices-replicating-to-warm-node/246029 "2020-09-02T11:15:23Z")
Hi There, Our current Elasticsearch stack is a 3 node testing cluster with 2 Data and 1 Warm node. All three are master. As per the cluster re-balancing policy its creating index replicas (Primary and replica) on the Wa… --- ## [Problem with dynamic-mapping.json](https://discuss.elastic.co/t/problem-with-dynamic-mapping-json/3170)
**Author:** [@talsalmona](https://discuss.elastic.co/u/talsalmona)\ **Replies:** 14\ **Last updated:** [July 31, 2010, 12:56pm UTC](https://discuss.elastic.co/t/problem-with-dynamic-mapping-json/3170 "2010-07-31T12:56:16Z")
Hi, We are working on a system that requires each tenant to have their own index. Each index may have multiple object types (in the example below: aaa and xxx). We need to control the field names so we wanted to us… --- ## [Kibana Index - Splitting Index Values and Adding to New Field](https://discuss.elastic.co/t/kibana-index-splitting-index-values-and-adding-to-new-field/242896)
**Author:** [@Kevin\_f](https://discuss.elastic.co/u/Kevin_f)\ **Replies:** 13\ **Last updated:** [July 28, 2020, 1:49pm UTC](https://discuss.elastic.co/t/kibana-index-splitting-index-values-and-adding-to-new-field/242896 "2020-07-28T13:49:44Z")
Hello, I am trying to figure out how to split the value of an index field and add that to a new field. Basically what I have on Kibana is as shown: This is the json document output of the index fields: I am trying… --- ## [Extract the Key from MQTT JSON message](https://discuss.elastic.co/t/extract-the-key-from-mqtt-json-message/295185)
**Author:** [@folderman](https://discuss.elastic.co/u/folderman)\ **Replies:** 11\ **Last updated:** [January 25, 2022, 9:26am UTC](https://discuss.elastic.co/t/extract-the-key-from-mqtt-json-message/295185 "2022-01-25T09:26:11Z")
Hi All, I have a problem with my testing device support MQTT. Here is the MQTT message: {"device\_info": {"uuid": "XXXXXX","fw\_ver": "V1.5.0" },"measures": \[{"n":"co2", "u":"ppm", "v":1155.995},{"n":"voc", "u":"ppm", "v… --- ## [Cannot get winlogbeats into logstash](https://discuss.elastic.co/t/cannot-get-winlogbeats-into-logstash/54787)
**Author:** [@Dalton\_Culp](https://discuss.elastic.co/u/Dalton_Culp)\ **Replies:** 11\ **Last updated:** [July 6, 2016, 8:57pm UTC](https://discuss.elastic.co/t/cannot-get-winlogbeats-into-logstash/54787 "2016-07-06T20:57:51Z")
i can show pictures of configurations if people need them. i think what is happening is elastic search is looking at loopback instead of eth0 --- ## [Elastic Synthetics Journey: Set \`playwrightOptions\` from parameters](https://discuss.elastic.co/t/elastic-synthetics-journey-set-playwrightoptions-from-parameters/330762)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 9\ **Last updated:** [May 18, 2023, 6:24pm UTC](https://discuss.elastic.co/t/elastic-synthetics-journey-set-playwrightoptions-from-parameters/330762 "2023-05-18T18:24:50Z")
I am writing an Elastic Journey with @elastic/synthetics=1.0.0-beta.43. I've got everything working as expected, however there is one issue. In my synthetics.config.ts file, I need to pass in the httpCredentials as part… --- ## [How to find a term (title: req.query\['q\]) with geo\_distance with elasticsearch 8.6](https://discuss.elastic.co/t/how-to-find-a-term-title-req-query-q-with-geo-distance-with-elasticsearch-8-6/325330)
**Author:** [@teoman\_kirac](https://discuss.elastic.co/u/teoman_kirac)\ **Replies:** 20\ **Last updated:** [February 13, 2023, 1:48pm UTC](https://discuss.elastic.co/t/how-to-find-a-term-title-req-query-q-with-geo-distance-with-elasticsearch-8-6/325330 "2023-02-13T13:48:39Z")
Years ago I had this working with elasticsearch 16.x.x. It looked like this: let body = { size: 200, from: 0, query: { bool: { must: { term: { title : req.query\['q'\] } }, … [Previous page](https://discuss.elastic.co/top.md?page=178&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=180&per_page=50&period=all)