# Top **URL:** https://discuss.elastic.co/top.md?page=184&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 185 --- ## [ES and multiple datacenters](https://discuss.elastic.co/t/es-and-multiple-datacenters/2869)
**Author:** [@Ori\_Lahav](https://discuss.elastic.co/u/Ori_Lahav)\ **Replies:** 10\ **Last updated:** [July 1, 2013, 5:57pm UTC](https://discuss.elastic.co/t/es-and-multiple-datacenters/2869 "2013-07-01T17:57:41Z")
Hi Shay. Just a question. Does ES is datacenter aware? Does it support some kind of replication of the index or the data if I want to sync it between 2 datacenters? 10x --- ## [\_bulk indexing problem](https://discuss.elastic.co/t/-bulk-indexing-problem/4869)
**Author:** [@michaelvalasanyan](https://discuss.elastic.co/u/michaelvalasanyan)\ **Replies:** 13\ **Last updated:** [July 15, 2011, 5:20pm UTC](https://discuss.elastic.co/t/-bulk-indexing-problem/4869 "2011-07-15T17:20:26Z")
Hi All, I had a problem with bulk indexing. here is a sample query that I was using for it. Not sure what's the problem butt getting an error message below: curl -X PUT "http://localhost:9200/\_bulk" -d '{ "index"… --- ## [How can I invite friends?](https://discuss.elastic.co/t/how-can-i-invite-friends/238434)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 13\ **Last updated:** [June 24, 2020, 12:52pm UTC](https://discuss.elastic.co/t/how-can-i-invite-friends/238434 "2020-06-24T12:52:54Z")
Hi, I want to invite some friends to this forum. How can I do this? Thanks, Defalt --- ## [Elasticsearch analysis on kibana without logstash ( + alerts or notifications)](https://discuss.elastic.co/t/elasticsearch-analysis-on-kibana-without-logstash-alerts-or-notifications/239613)
**Author:** [@Feriel\_Mufti](https://discuss.elastic.co/u/Feriel_Mufti)\ **Replies:** 11\ **Last updated:** [July 6, 2020, 11:09pm UTC](https://discuss.elastic.co/t/elasticsearch-analysis-on-kibana-without-logstash-alerts-or-notifications/239613 "2020-07-06T23:09:41Z")
Hello, i am using elasticsearch and kibana version 6.8 , and all different other beats , without logstash , so beats passes directly through elasticsearch to visualize the given data on kibana , i want to know how can i… --- ## [Howto connect Kibana 8 with ES8?](https://discuss.elastic.co/t/howto-connect-kibana-8-with-es8/303717)
**Author:** [@McLaine](https://discuss.elastic.co/u/McLaine)\ **Replies:** 12\ **Last updated:** [May 3, 2022, 7:30am UTC](https://discuss.elastic.co/t/howto-connect-kibana-8-with-es8/303717 "2022-05-03T07:30:16Z")
Hello! Es is running with: 128 \[::ffff:127.0.0.1\]:9200 : users:(("java",pid=43127,fd=463)) LISTEN 0 128 \[::1\]:9200 \[::\]… --- ## [Применение csv фильтра после grok](https://discuss.elastic.co/t/csv-grok/216068)
**Author:** [@artem33region](https://discuss.elastic.co/u/artem33region)\ **Replies:** 14\ **Last updated:** [January 30, 2020, 2:09pm UTC](https://discuss.elastic.co/t/csv-grok/216068 "2020-01-30T14:09:12Z")
Здравствуйте! Есть необходимость парсить csv фильтром то, что не распарсил grok. Я сделал конфиг: filter { if "ise" in \[tags\] and (\[message\] !~ "NetworkDeviceName=ASA1-VPN" and \[message\] !~ "NetworkDeviceName=ASA2-… --- ## [Elasticsearch 7.12.1](https://discuss.elastic.co/t/elasticsearch-7-12-1/273919)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 9\ **Last updated:** [May 26, 2021, 7:01pm UTC](https://discuss.elastic.co/t/elasticsearch-7-12-1/273919 "2021-05-26T19:01:08Z")
● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since mar. 2021-05-25 12:38:45 CEST; 3s ago D… --- ## [Ruby exception occurred: -1](https://discuss.elastic.co/t/ruby-exception-occurred-1/107148)
**Author:** [@Mojster](https://discuss.elastic.co/u/Mojster)\ **Replies:** 9\ **Last updated:** [November 15, 2017, 10:57am UTC](https://discuss.elastic.co/t/ruby-exception-occurred-1/107148 "2017-11-15T10:57:07Z")
I'm running Elastic stack 5.6.3. Since this version or 5.6.2. I'm getting random LS error: \[2017-11-09T07:50:24,829\]\[ERROR\]\[logstash.filters.ruby \] Ruby exception occurred: -1 I've tried to recreate it, but as it looks… --- ## [A plugin to change the result set before sending it back to the http client](https://discuss.elastic.co/t/a-plugin-to-change-the-result-set-before-sending-it-back-to-the-http-client/17934)
**Author:** [@Mario\_Mueller](https://discuss.elastic.co/u/Mario_Mueller)\ **Replies:** 17\ **Last updated:** [June 6, 2014, 6:02pm UTC](https://discuss.elastic.co/t/a-plugin-to-change-the-result-set-before-sending-it-back-to-the-http-client/17934 "2014-06-06T18:02:00Z")
Hey folks, I kindly ask for a hint to achieve the following thing: The goal is to deliver only a json array of source objects to the client. The php app that sits on the other side uses JMS\\Serializer to deserial… --- ## [Logstash parsing of statistics log file](https://discuss.elastic.co/t/logstash-parsing-of-statistics-log-file/181891)
**Author:** [@ankitachow](https://discuss.elastic.co/u/ankitachow)\ **Replies:** 14\ **Last updated:** [May 24, 2019, 8:26pm UTC](https://discuss.elastic.co/t/logstash-parsing-of-statistics-log-file/181891 "2019-05-24T20:26:07Z")
Below is my input log file format. 19-01-01 Name Succ Fail Timeout Reject Retransmission Duplicate Thrput Response time (ms) Detected Answered (/s) Av… --- ## [Logging in to Kibana 8 without security for LDAP auth ES cluster](https://discuss.elastic.co/t/logging-in-to-kibana-8-without-security-for-ldap-auth-es-cluster/324250)
**Author:** [@Chel](https://discuss.elastic.co/u/Chel)\ **Replies:** 10\ **Last updated:** [February 3, 2023, 7:47am UTC](https://discuss.elastic.co/t/logging-in-to-kibana-8-without-security-for-ldap-auth-es-cluster/324250 "2023-02-03T07:47:07Z")
Hi, We have 8.5.2 cluster running with LDAP authentication(xpack security) with basic license. Earlier Versions of Kibana in 7.x we use the same username and password of elastic to login to kibana but in 8.x versions lo… --- ## [Aggregations large data in real time in Elasticsearch. What solution is the best?](https://discuss.elastic.co/t/aggregations-large-data-in-real-time-in-elasticsearch-what-solution-is-the-best/222188)
**Author:** [@ndhcoder](https://discuss.elastic.co/u/ndhcoder)\ **Replies:** 10\ **Last updated:** [March 6, 2020, 10:30am UTC](https://discuss.elastic.co/t/aggregations-large-data-in-real-time-in-elasticsearch-what-solution-is-the-best/222188 "2020-03-06T10:30:21Z")
Hi all, I have a question ? With a system have about a billion logs each days, How can i get all my aggregations data like "count request error per host", "count request per days, per hours, ..", in time series in rea… --- ## [Understanding metrics filters](https://discuss.elastic.co/t/understanding-metrics-filters/322648)
**Author:** [@Dustin527](https://discuss.elastic.co/u/Dustin527)\ **Replies:** 11\ **Last updated:** [January 9, 2023, 10:15pm UTC](https://discuss.elastic.co/t/understanding-metrics-filters/322648 "2023-01-09T22:15:23Z")
Hi I am having trouble understanding the proper way to use metrics filter plugin to count the number of fields of a particular type. Say I have a file formatted with a name and age separated by a space e.g.: dustin 40 e… --- ## [Logstash UDP plugin](https://discuss.elastic.co/t/logstash-udp-plugin/105273)
**Author:** [@maddie0726](https://discuss.elastic.co/u/maddie0726)\ **Replies:** 11\ **Last updated:** [October 25, 2017, 8:19pm UTC](https://discuss.elastic.co/t/logstash-udp-plugin/105273 "2017-10-25T20:19:53Z")
I have Logstash, Kibana and Elasticsearch version 5.6.2 running on Windows 2012 R2. I am trying to read in live data over a udp port and I am getting no data. Here is my input in my config file: input { udp { port =\> … --- ## [Nodes do not release RAM when idle](https://discuss.elastic.co/t/nodes-do-not-release-ram-when-idle/314321)
**Author:** [@Thijsvdp](https://discuss.elastic.co/u/Thijsvdp)\ **Replies:** 17\ **Last updated:** [September 16, 2022, 6:17am UTC](https://discuss.elastic.co/t/nodes-do-not-release-ram-when-idle/314321 "2022-09-16T06:17:51Z")
Hi all, I have experienced some weird behavior on my development cluster while reading an index using the Elasticsearch-Hadoop connector. I am benchmarking the read performance, by running some scripts that read the ful… --- ## [Blank Visualisation and Dashboard](https://discuss.elastic.co/t/blank-visualisation-and-dashboard/221027)
**Author:** [@varunzz](https://discuss.elastic.co/u/varunzz)\ **Replies:** 17\ **Last updated:** [February 27, 2020, 5:11pm UTC](https://discuss.elastic.co/t/blank-visualisation-and-dashboard/221027 "2020-02-27T17:11:11Z")
Hey, my visualisations and dashboards were working fine till yesterday and today suddenly when I opened my dashboard it went blank. Same for visualisations. Although I can still access my visualisations and dashboards th… --- ## [Setting up cluster within same physical server which is divided into four VM's](https://discuss.elastic.co/t/setting-up-cluster-within-same-physical-server-which-is-divided-into-four-vms/176922)
**Author:** [@Abhinaw](https://discuss.elastic.co/u/Abhinaw)\ **Replies:** 13\ **Last updated:** [April 16, 2019, 6:55am UTC](https://discuss.elastic.co/t/setting-up-cluster-within-same-physical-server-which-is-divided-into-four-vms/176922 "2019-04-16T06:55:19Z")
HI, I have a 64GB physical server, i have converted this into 4 VM's , how do i create a cluster with 1 master node and 2 data node, as local ip will be same for all the servers, i don't want to allow access of data out… --- ## [Widget stay on "Edit" mode](https://discuss.elastic.co/t/widget-stay-on-edit-mode/270839)
**Author:** [@Arethusa](https://discuss.elastic.co/u/Arethusa)\ **Replies:** 12\ **Last updated:** [April 22, 2021, 7:49pm UTC](https://discuss.elastic.co/t/widget-stay-on-edit-mode/270839 "2021-04-22T19:49:36Z")
Hello everyone, I'm on Kibana v 7.12.0 I have strange problem, on the same dashboard, some widget stay on "edit" mode, with the gear on top right of them, and other widget switch good on "View mode" (so the gear leave … --- ## [All shards failed even after tuning](https://discuss.elastic.co/t/all-shards-failed-even-after-tuning/241080)
**Author:** [@gzucca](https://discuss.elastic.co/u/gzucca)\ **Replies:** 9\ **Last updated:** [July 16, 2020, 2:14pm UTC](https://discuss.elastic.co/t/all-shards-failed-even-after-tuning/241080 "2020-07-16T14:14:31Z")
Hi all, I took a look into lots of open thread related to the error I'm getting. In my company we are using ELK 7.5.1 for a development enviroment. Both ELK and Kibana stay on the same machine with 8GB of RAM. The JVM… --- ## [Alternatives to oversharding to handle index / cluster growth?](https://discuss.elastic.co/t/alternatives-to-oversharding-to-handle-index-cluster-growth/10724)
**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\ **Replies:** 9\ **Last updated:** [February 15, 2013, 3:08am UTC](https://discuss.elastic.co/t/alternatives-to-oversharding-to-handle-index-cluster-growth/10724 "2013-02-15T03:08:30Z")
Hello, Are there any known and good alternatives to handling index (and cluster) growth other than "Oversharding"? I see a few problems with oversharing the index: 1) You can't really guess well how your index/c… --- ## [Calling Alerts from Watchers to detection Signals](https://discuss.elastic.co/t/calling-alerts-from-watchers-to-detection-signals/250032)
**Author:** [@Suro](https://discuss.elastic.co/u/Suro)\ **Replies:** 14\ **Last updated:** [October 1, 2020, 8:36am UTC](https://discuss.elastic.co/t/calling-alerts-from-watchers-to-detection-signals/250032 "2020-10-01T08:36:40Z")
Hi, We are running multiple watchers and as the SIEM detection does not provide the level of customizations, I have been unable to create use cases which takes aggregation for example under consideration. So I want to c… --- ## [TimeOut ES 6.1.1](https://discuss.elastic.co/t/timeout-es-6-1-1/129417)
**Author:** [@RSTMAN](https://discuss.elastic.co/u/RSTMAN)\ **Replies:** 16\ **Last updated:** [May 28, 2018, 9:57am UTC](https://discuss.elastic.co/t/timeout-es-6-1-1/129417 "2018-05-28T09:57:23Z")
bonjour, j'utilise elasticsearch 6.1.1 dans un des projets sur lesquels je travaille. j'ai ES sur AZURE, le soucis que j'ai c'est que si je fais pas de requête à es pendant un moment (je n'ai pas le temps exacte, quelq… --- ## [Filebeat.sock file do not exists anymore when deploy and configure elastic-agent using Ansible](https://discuss.elastic.co/t/filebeat-sock-file-do-not-exists-anymore-when-deploy-and-configure-elastic-agent-using-ansible/301992)
**Author:** [@Danny\_Dumenigo](https://discuss.elastic.co/u/Danny_Dumenigo)\ **Replies:** 13\ **Last updated:** [April 11, 2022, 8:17pm UTC](https://discuss.elastic.co/t/filebeat-sock-file-do-not-exists-anymore-when-deploy-and-configure-elastic-agent-using-ansible/301992 "2022-04-11T20:17:44Z")
Hello Community: Im triying to automate the deployment of elastic-agents using Ansible. I have two roles for this. Using the first, I enroll the agent using the respective command, all well until this point. The agent … --- ## [Filebeat error when setting up data stream with working index](https://discuss.elastic.co/t/filebeat-error-when-setting-up-data-stream-with-working-index/365254)
**Author:** [@Tom\_N](https://discuss.elastic.co/u/Tom_N)\ **Replies:** 9\ **Last updated:** [August 24, 2024, 3:06pm UTC](https://discuss.elastic.co/t/filebeat-error-when-setting-up-data-stream-with-working-index/365254 "2024-08-24T15:06:26Z")
I am using filebeat version 7.17.22. At the start, my filebeat works and sends data to Elasticsearch, which can be seen using Kibana. It sends data to the index. I have been trying to setup a datastream, so I did so by… --- ## [Why Fleet server is not healthy?](https://discuss.elastic.co/t/why-fleet-server-is-not-healthy/358368)
**Author:** [@Intruder](https://discuss.elastic.co/u/Intruder)\ **Replies:** 9\ **Last updated:** [May 1, 2024, 3:44pm UTC](https://discuss.elastic.co/t/why-fleet-server-is-not-healthy/358368 "2024-05-01T15:44:16Z")
I am super new to ealstic , and I followed the instruction (Quick start) to start a fleet server and enroll the policy . It is healthy about 20mins ? But when I restart Kibana , and after 20 mins , it became unhealthy ,… --- ## [Doubt about Unicast discovery](https://discuss.elastic.co/t/doubt-about-unicast-discovery/65781)
**Author:** [@Balamurali](https://discuss.elastic.co/u/Balamurali)\ **Replies:** 11\ **Last updated:** [November 11, 2016, 12:42pm UTC](https://discuss.elastic.co/t/doubt-about-unicast-discovery/65781 "2016-11-11T12:42:17Z")
hi , i had discovery.zen.ping.unicast.hosts: hostIP:port in my config file all nodes specified in unicast are added to cluster ,thats fine but if i start new es node with same clustername without mentioning in uni… --- ## [Can give a examplge about how logstash use udp data to es?](https://discuss.elastic.co/t/can-give-a-examplge-about-how-logstash-use-udp-data-to-es/123661)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 16\ **Last updated:** [March 16, 2018, 10:47am UTC](https://discuss.elastic.co/t/can-give-a-examplge-about-how-logstash-use-udp-data-to-es/123661 "2018-03-16T10:47:19Z")
can give a example about use udp data ? how configure logstash with udp data as port 3232 input dat from as port 3242 , how filter configure how output to es configure. give me a example it's about the .conf file s… --- ## [Java APM with new SpringBoot 2.6.7 is erroring out on Zuul components](https://discuss.elastic.co/t/java-apm-with-new-springboot-2-6-7-is-erroring-out-on-zuul-components/304248)
**Author:** [@Kim\_Attree](https://discuss.elastic.co/u/Kim_Attree)\ **Replies:** 9\ **Last updated:** [May 17, 2022, 11:31am UTC](https://discuss.elastic.co/t/java-apm-with-new-springboot-2-6-7-is-erroring-out-on-zuul-components/304248 "2022-05-17T11:31:11Z")
Kibana version: 7.16.1 Elasticsearch version: 7.16.1 APM Server version: 7.16.1 APM Agent language and version: 1.30.1 Browser version: n/a Original install method (e.g. download page, yum, deb, from source, etc.) a… --- ## [Elastic : Problème avec format décimal à l'indexation (document non indexé)](https://discuss.elastic.co/t/elastic-probleme-avec-format-decimal-a-lindexation-document-non-indexe/257587)
**Author:** [@oldiequattro](https://discuss.elastic.co/u/oldiequattro)\ **Replies:** 9\ **Last updated:** [December 7, 2020, 8:00pm UTC](https://discuss.elastic.co/t/elastic-probleme-avec-format-decimal-a-lindexation-document-non-indexe/257587 "2020-12-07T20:00:00Z")
Bonjour, Je vous expose ici un souci rencontré chez nos environnement avec l'indexation d'une ligne dans Elasticsearch qui ne se fait pas dès que la valeur décimale contenue dans la clé dépasse 64 ( effet de bord d'un c… --- ## [Call Elastic API to get an info on a parameter](https://discuss.elastic.co/t/call-elastic-api-to-get-an-info-on-a-parameter/254762)
**Author:** [@Baptiste\_Orsoni](https://discuss.elastic.co/u/Baptiste_Orsoni)\ **Replies:** 9\ **Last updated:** [November 10, 2020, 4:37pm UTC](https://discuss.elastic.co/t/call-elastic-api-to-get-an-info-on-a-parameter/254762 "2020-11-10T16:37:04Z")
Hello, I would like to use the Elastic Search API in order to get information on a parameter I have in one of my index. In concrete terms, I would like to know if there have been any hits for a particular client . ( pa… --- ## [Match data from two arrays](https://discuss.elastic.co/t/match-data-from-two-arrays/294488)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 11\ **Last updated:** [January 19, 2022, 9:33pm UTC](https://discuss.elastic.co/t/match-data-from-two-arrays/294488 "2022-01-19T21:33:45Z")
Hi Can You help me for make a method for merge data between two arrays and match this into one document. pattern- \> name of fields \[a-b-c-d-e\] //we have a 3 events separated by the | value\_field = 5-7-10-12-9|5-7-9… --- ## [How to get licence expiration date](https://discuss.elastic.co/t/how-to-get-licence-expiration-date/342565)
**Author:** [@pratik\_jain163](https://discuss.elastic.co/u/pratik_jain163)\ **Replies:** 10\ **Last updated:** [October 1, 2023, 4:52am UTC](https://discuss.elastic.co/t/how-to-get-licence-expiration-date/342565 "2023-10-01T04:52:26Z")
This category relates to the Enterprise Search set of products - App Search, Site Search and Workplace Search. If your question relates to core Elasticsearch functionality, please head over to the Elasticsearch category… --- ## [How change index name in Heartbeat](https://discuss.elastic.co/t/how-change-index-name-in-heartbeat/264630)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 10\ **Last updated:** [February 18, 2021, 2:36pm UTC](https://discuss.elastic.co/t/how-change-index-name-in-heartbeat/264630 "2021-02-18T14:36:25Z")
Hi there guys i need help with a problem i have in heartbeat.yml look what I need is to change the name of the index of heartbeat, ie mapping to index it in kibana with another name other than heartbeat-7-10-2-2021-000… --- ## [How to make 2 separaotrs?](https://discuss.elastic.co/t/how-to-make-2-separaotrs/89187)
**Author:** [@Yimjunhyeok](https://discuss.elastic.co/u/Yimjunhyeok)\ **Replies:** 10\ **Last updated:** [June 15, 2017, 1:33am UTC](https://discuss.elastic.co/t/how-to-make-2-separaotrs/89187 "2017-06-15T01:33:58Z")
Hello guys. This is a my first question. I want to make 2 separaotrs For example, this is a example log ex: a, b, c|| d, f, g|| h Using logstash, how to declare 2 separators on logstash filter? filter { csv { … --- ## [Alert and connect mail format error](https://discuss.elastic.co/t/alert-and-connect-mail-format-error/268998)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 9\ **Last updated:** [April 2, 2021, 1:26pm UTC](https://discuss.elastic.co/t/alert-and-connect-mail-format-error/268998 "2021-04-02T13:26:14Z")
Hi all i have some question I was trying the version 7.12 for the first time, what interest me the most was that kibana finally have mail format for the siem rule, well i try cortext.alert just like how they show on gi… --- ## ["Legacy Collection" for Stack Monitoring](https://discuss.elastic.co/t/legacy-collection-for-stack-monitoring/259935)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 9\ **Last updated:** [January 6, 2021, 5:40pm UTC](https://discuss.elastic.co/t/legacy-collection-for-stack-monitoring/259935 "2021-01-06T17:40:10Z")
It appears you are using "Legacy Collection" for Stack Monitoring. This method of monitoring will no longer be supported in the next major release I am using metricbeat and filebeat for monitoring our cluster Why it is … --- ## [Elasticsearch Disk Space Issue](https://discuss.elastic.co/t/elasticsearch-disk-space-issue/369138)
**Author:** [@bagafoot](https://discuss.elastic.co/u/bagafoot)\ **Replies:** 13\ **Last updated:** [October 28, 2024, 5:31pm UTC](https://discuss.elastic.co/t/elasticsearch-disk-space-issue/369138 "2024-10-28T17:31:56Z")
Hello I have an elk and strugling with management disk space. "The indices on this server, with only 5 pages in total, do not even amount to 100GB, but the Elasticsearch data directory shows 1.4TB of usage. What is cons… --- ## [Cannot see my created saved\_object when creating it thru POST API](https://discuss.elastic.co/t/cannot-see-my-created-saved-object-when-creating-it-thru-post-api/243011)
**Author:** [@dao](https://discuss.elastic.co/u/dao)\ **Replies:** 16\ **Last updated:** [August 5, 2020, 1:07pm UTC](https://discuss.elastic.co/t/cannot-see-my-created-saved-object-when-creating-it-thru-post-api/243011 "2020-08-05T13:07:39Z")
I have created a space test and I want to fill it with the saved\_object API. I create a visualization (ID:nff) with the POST endpoint ( POST https://mykibana.flightwatching.com/bigdata/s/test/api/saved\_objects/visualiza… --- ## [No Logs appearing in Kibana](https://discuss.elastic.co/t/no-logs-appearing-in-kibana/336208)
**Author:** [@Shabu](https://discuss.elastic.co/u/Shabu)\ **Replies:** 15\ **Last updated:** [June 19, 2023, 8:21am UTC](https://discuss.elastic.co/t/no-logs-appearing-in-kibana/336208 "2023-06-19T08:21:27Z")
Those are my statistics. When I tcpdump port 5044 I see traffic coming from the host where I have winlogbeat running and when I tcpdump port 9200 on the server I see a lot of traffic. So I suppose Data is reaching ela… --- ## [Is this the correct impl' for customizing \`\_id\` meta data field](https://discuss.elastic.co/t/is-this-the-correct-impl-for-customizing-id-meta-data-field/349059)
**Author:** [@iby\_dev](https://discuss.elastic.co/u/iby_dev)\ **Replies:** 17\ **Last updated:** [December 13, 2023, 10:48am UTC](https://discuss.elastic.co/t/is-this-the-correct-impl-for-customizing-id-meta-data-field/349059 "2023-12-13T10:48:33Z")
To get Elasticsearch docker image version: image: docker.elastic.co/elasticsearch/elasticsearch:7.16.2 To accept a client side customized UUID on the \_id field i had to change the: dynamic: strict property to true. Al… --- ## [How to pass urlparam value to KQL](https://discuss.elastic.co/t/how-to-pass-urlparam-value-to-kql/279172)
**Author:** [@tangkalo](https://discuss.elastic.co/u/tangkalo)\ **Replies:** 10\ **Last updated:** [July 22, 2021, 9:01pm UTC](https://discuss.elastic.co/t/how-to-pass-urlparam-value-to-kql/279172 "2021-07-22T21:01:52Z")
Hi, I read about threads related to this need and know that there is currently not a way to directly plug in the value in the KQL using urlparam; however, is there a way to do it indirectly? I am thinking about using var… --- ## [Logstash pipeline output and elastic cloud](https://discuss.elastic.co/t/logstash-pipeline-output-and-elastic-cloud/263659)
**Author:** [@alfredo.deluca](https://discuss.elastic.co/u/alfredo.deluca)\ **Replies:** 10\ **Last updated:** [February 16, 2021, 12:17pm UTC](https://discuss.elastic.co/t/logstash-pipeline-output-and-elastic-cloud/263659 "2021-02-16T12:17:29Z")
Hi all. I have elastic cloud 7.10.2 and we are setting up logstash with a pipilne with input/filter/output. Also we are using helm to deploy. Of course I have cloud.id and cloud.auth and not sure how to configure the … --- ## [Elasticsearch Integration - unavailable?](https://discuss.elastic.co/t/elasticsearch-integration-unavailable/314315)
**Author:** [@Jack\_Judge2](https://discuss.elastic.co/u/Jack_Judge2)\ **Replies:** 9\ **Last updated:** [September 20, 2022, 11:34pm UTC](https://discuss.elastic.co/t/elasticsearch-integration-unavailable/314315 "2022-09-20T23:34:23Z")
Hi, I'm building a monitoring cluster built on an 8.1.1 stack and I noticed that the Elasticsearch integration for Agent isn't available but it is available on an older 7.17 stack. Elasticsearch integration docs This … --- ## [How can I search for the latest data entered in the indexes? ](https://discuss.elastic.co/t/how-can-i-search-for-the-latest-data-entered-in-the-indexes/349972)
**Author:** [@deep1](https://discuss.elastic.co/u/deep1)\ **Replies:** 17\ **Last updated:** [December 27, 2023, 5:32pm UTC](https://discuss.elastic.co/t/how-can-i-search-for-the-latest-data-entered-in-the-indexes/349972 "2023-12-27T17:32:15Z")
For example, I want to search in 100,000 documents from each index, and it is not possible to add to that, and they are first loaded into the cache, then only this data is searched --- ## [Is it possible to delete security index and then create it automatically on restart of Elasticsearch](https://discuss.elastic.co/t/is-it-possible-to-delete-security-index-and-then-create-it-automatically-on-restart-of-elasticsearch/322434)
**Author:** [@smiley\_tamy](https://discuss.elastic.co/u/smiley_tamy)\ **Replies:** 9\ **Last updated:** [January 16, 2023, 7:57pm UTC](https://discuss.elastic.co/t/is-it-possible-to-delete-security-index-and-then-create-it-automatically-on-restart-of-elasticsearch/322434 "2023-01-16T19:57:34Z")
x pack is enabled and now I want to delete security index. Then will it be automatically created on restart of Elasticsearch and will all the built users be created? --- ## [\[o.e.t.TransportService\] Received response for a request that has timed out](https://discuss.elastic.co/t/o-e-t-transportservice-received-response-for-a-request-that-has-timed-out/339056)
**Author:** [@EVINDX](https://discuss.elastic.co/u/EVINDX)\ **Replies:** 16\ **Last updated:** [July 31, 2023, 7:54am UTC](https://discuss.elastic.co/t/o-e-t-transportservice-received-response-for-a-request-that-has-timed-out/339056 "2023-07-31T07:54:54Z")
We are receiving the following error {ElasticsearchLogger} \[o.e.t.TransportService\] Received response for a request that has timed out, sent \[21.3s/21361ms\] ago, timed out \[5.6s/5682ms\] ago, action \[indices:monitor/stat… --- ## [Filebeat suricata](https://discuss.elastic.co/t/filebeat-suricata/305863)
**Author:** [@TARIK\_MAZOUZ](https://discuss.elastic.co/u/TARIK_MAZOUZ)\ **Replies:** 9\ **Last updated:** [May 31, 2022, 1:52pm UTC](https://discuss.elastic.co/t/filebeat-suricata/305863 "2022-05-31T13:52:44Z")
hey ELK STACK community, please i've installed filebeat , and i wanted to install suricata module, so i've did install it, the problem is i don't get any information in kibana from suricata ? did i've missed something or… --- ## [Migrate Data from Elastic Cloud to AWS ES](https://discuss.elastic.co/t/migrate-data-from-elastic-cloud-to-aws-es/163380)
**Author:** [@kaushik.vankayala](https://discuss.elastic.co/u/kaushik.vankayala)\ **Replies:** 10\ **Last updated:** [January 8, 2019, 5:36pm UTC](https://discuss.elastic.co/t/migrate-data-from-elastic-cloud-to-aws-es/163380 "2019-01-08T17:36:58Z")
Hello, I am trying to migrate some indices from my Elastic Cloud Cluster to AWS ES. Since everything is on cloud i am unable to achieve it with the tutorials and demos listed out in the internet; While there are coupl… --- ## [Elasticseach issue with some indicies not populating data](https://discuss.elastic.co/t/elasticseach-issue-with-some-indicies-not-populating-data/23313)
**Author:** [@Don\_Pich](https://discuss.elastic.co/u/Don_Pich)\ **Replies:** 12\ **Last updated:** [April 20, 2015, 4:45pm UTC](https://discuss.elastic.co/t/elasticseach-issue-with-some-indicies-not-populating-data/23313 "2015-04-20T16:45:10Z")
I am new to elasticsearch and have a problem. I have 5 indicies. At first all of them were running without issue. However, over the last 2 weeks, all but one have stopped generating data. I have run a tcpdump on … --- ## [Elasticsearch unassigned shards](https://discuss.elastic.co/t/elasticsearch-unassigned-shards/241296)
**Author:** [@apintilie](https://discuss.elastic.co/u/apintilie)\ **Replies:** 13\ **Last updated:** [July 16, 2020, 2:30pm UTC](https://discuss.elastic.co/t/elasticsearch-unassigned-shards/241296 "2020-07-16T14:30:16Z")
Hi all, I have an ES cluster, made from 3 nodes, all are master/ingest/data. The cluster is configured with 5 shards and 1 replica, so 5 primary shards and 5 replica shards. After a restart of the cluster, I have a lot… [Previous page](https://discuss.elastic.co/top.md?page=183&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=185&per_page=50&period=all)