# Top

**URL:** https://discuss.elastic.co/top.md?page=202&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 203

---

## [I get "There are no log messages to display" under Logs tab of Trace sample](https://discuss.elastic.co/t/i-get-there-are-no-log-messages-to-display-under-logs-tab-of-trace-sample/361157)

<div class="topic-metadata">

**Author:** [@minilik](https://discuss.elastic.co/u/minilik)\
**Replies:** 14\
**Last updated:** [September 20, 2024, 4:10am UTC](https://discuss.elastic.co/t/i-get-there-are-no-log-messages-to-display-under-logs-tab-of-trace-sample/361157 "2024-09-20T04:10:56Z")

</div>

I've followed \[Programmatic API setup to self-attach | APM Java Agent Reference \[1.x\] | Elastic\](https://Programmatic setup to self-attach) and I was able to see everything being tracked except the Logs tab under Trace s…

---

## [Unable to Parse Syslog messages into Elasticsearch](https://discuss.elastic.co/t/unable-to-parse-syslog-messages-into-elasticsearch/288755)

<div class="topic-metadata">

**Author:** [@Elie\_Sbat1](https://discuss.elastic.co/u/Elie_Sbat1)\
**Replies:** 9\
**Last updated:** [November 18, 2021, 5:34pm UTC](https://discuss.elastic.co/t/unable-to-parse-syslog-messages-into-elasticsearch/288755 "2021-11-18T17:34:48Z")

</div>

Hello, I am sending syslog messages from barracuda mail spammer directly into Elasticsearch database. The index got populated with data but the data are not parsed correctly. The log attributes are all shown in the mes…

---

## [Is it possible to create multiple index with multiple folder name](https://discuss.elastic.co/t/is-it-possible-to-create-multiple-index-with-multiple-folder-name/321457)

<div class="topic-metadata">

**Author:** [@guhi\_rockky](https://discuss.elastic.co/u/guhi_rockky)\
**Replies:** 18\
**Last updated:** [December 18, 2022, 2:43pm UTC](https://discuss.elastic.co/t/is-it-possible-to-create-multiple-index-with-multiple-folder-name/321457 "2022-12-18T14:43:05Z")

</div>

Am monitoring logs files in different folders. I have 3 folders, folder1,folder2,folder3. Is it possible to Create different index name with name of folders using logstash.?

---

## [Why index\_patterns add join datatype, but show string in kibana](https://discuss.elastic.co/t/why-index-patterns-add-join-datatype-but-show-string-in-kibana/163642)

<div class="topic-metadata">

**Author:** [@cythwell](https://discuss.elastic.co/u/cythwell)\
**Replies:** 18\
**Last updated:** [January 10, 2019, 10:31am UTC](https://discuss.elastic.co/t/why-index-patterns-add-join-datatype-but-show-string-in-kibana/163642 "2019-01-10T10:31:26Z")

</div>

I add a join datatype for parent-child relationship { "mappings" : { "test\_data" : { "properties" : { "levelStatus" : { "type" : "join", "relations" : { "user" : "unique", "unique" : "report" } } My point is …

---

## [Logstash logging problem](https://discuss.elastic.co/t/logstash-logging-problem/178169)

<div class="topic-metadata">

**Author:** [@ahmetkumas1](https://discuss.elastic.co/u/ahmetkumas1)\
**Replies:** 15\
**Last updated:** [April 24, 2019, 3:22pm UTC](https://discuss.elastic.co/t/logstash-logging-problem/178169 "2019-04-24T15:22:47Z")

</div>

Hello everyone, I'm having trouble with logstash when I want to log a CSV file into elasticsearch and my config file is below. elastic search version:6.5.4 Logstash version:6.6.0 There is that kind of warning \[WARN …

---

## [Kibana Alerts](https://discuss.elastic.co/t/kibana-alerts/256849)

<div class="topic-metadata">

**Author:** [@werner.fletcher](https://discuss.elastic.co/u/werner.fletcher)\
**Replies:** 12\
**Last updated:** [December 4, 2020, 2:40pm UTC](https://discuss.elastic.co/t/kibana-alerts/256849 "2020-12-04T14:40:10Z")

</div>

Good day, We've upgraded our subscription to Gold today but i still cannot see the Alerting option for Kibana. I want to set up email alerts to notify me when certain keywords appear in the logs shipped by the Filebeat…

---

## [On scaling](https://discuss.elastic.co/t/on-scaling/6048)

<div class="topic-metadata">

**Author:** [@BARNEY](https://discuss.elastic.co/u/BARNEY)\
**Replies:** 9\
**Last updated:** [January 3, 2012, 5:47pm UTC](https://discuss.elastic.co/t/on-scaling/6048 "2012-01-03T17:47:37Z")

</div>

Let us assume we create index with 2 shards and 1 replica on two nodes in a elasticsearch box1.After indexing some documents,disk space(say 1000GB) in the box1 will get filled. To index more documents, I will have 2 m…

---

## [Elastic Heap Size issue](https://discuss.elastic.co/t/elastic-heap-size-issue/133548)

<div class="topic-metadata">

**Author:** [@kapoorvarun23](https://discuss.elastic.co/u/kapoorvarun23)\
**Replies:** 12\
**Last updated:** [May 30, 2018, 9:16am UTC](https://discuss.elastic.co/t/elastic-heap-size-issue/133548 "2018-05-30T09:16:45Z")

</div>

Hi, I have elastic running on 2 nodes with 32 core, 16 core and 64 GB, 32 GB ram respectively. Heap allocated to elastic node 1 is 24 GB (node with 64 GB ram). Heap allocated to elastic node 2 is 15 GB (node with 32 GB…

---

## [Is it possible to auth kibana with kibana-plugin?](https://discuss.elastic.co/t/is-it-possible-to-auth-kibana-with-kibana-plugin/116678)

<div class="topic-metadata">

**Author:** [@596375269](https://discuss.elastic.co/u/596375269)\
**Replies:** 9\
**Last updated:** [January 23, 2018, 3:47pm UTC](https://discuss.elastic.co/t/is-it-possible-to-auth-kibana-with-kibana-plugin/116678 "2018-01-23T15:47:26Z")

</div>

is it possible to auth kibana with coding a kibana plugin? or another way is kibana plugin system support authentication? thanks for your answer.

---

## [Elasticsearch upgrade from elasticsearch 5.1.2 to 5.6.14, index operation tps rise cause bulk rejected](https://discuss.elastic.co/t/elasticsearch-upgrade-from-elasticsearch-5-1-2-to-5-6-14-index-operation-tps-rise-cause-bulk-rejected/182594)

<div class="topic-metadata">

**Author:** [@songfj](https://discuss.elastic.co/u/songfj)\
**Replies:** 11\
**Last updated:** [May 24, 2019, 11:47am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-from-elasticsearch-5-1-2-to-5-6-14-index-operation-tps-rise-cause-bulk-rejected/182594 "2019-05-24T11:47:34Z")

</div>

my bulk queue size = 200 I find the bulk queue always reject like follow, I find the rejected size can't reduce hot thread like fllow: $ curl localhost:8200/\_cat/thread\_pool/bulk?h=node\_id,name,queue,queue\_size,reje…

---

## [How to individualize the data that has an array objects](https://discuss.elastic.co/t/how-to-individualize-the-data-that-has-an-array-objects/272836)

<div class="topic-metadata">

**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\
**Replies:** 10\
**Last updated:** [May 14, 2021, 7:30pm UTC](https://discuss.elastic.co/t/how-to-individualize-the-data-that-has-an-array-objects/272836 "2021-05-14T19:30:07Z")

</div>

I need to be able to extract the data that it brings me in logstash, to be able to graph I have to extract the metrics, but when it sends them to me to kibana I cannot graph because they are in an array, I need help as I…

---

## [Questions on ELK architecture](https://discuss.elastic.co/t/questions-on-elk-architecture/156600)

<div class="topic-metadata">

**Author:** [@Eva](https://discuss.elastic.co/u/Eva)\
**Replies:** 10\
**Last updated:** [November 19, 2018, 8:54am UTC](https://discuss.elastic.co/t/questions-on-elk-architecture/156600 "2018-11-19T08:54:02Z")

</div>

Hello there I have a cluster with two node, the second node added recently and only has Elasticsearch installed. Both are running on two different aws instances. Instance 1 has ELK installed and instance 2 has only Elas…

---

## [Kibana 5.4 and ES 5.5 made work together](https://discuss.elastic.co/t/kibana-5-4-and-es-5-5-made-work-together/90113)

<div class="topic-metadata">

**Author:** [@leonmex](https://discuss.elastic.co/u/leonmex)\
**Replies:** 10\
**Last updated:** [June 21, 2017, 11:39am UTC](https://discuss.elastic.co/t/kibana-5-4-and-es-5-5-made-work-together/90113 "2017-06-21T11:39:02Z")

</div>

Hello, Any one can get work Kibana 5.4 and Elasticsearch 5.5.0 Right now I running ES 5.5.0 and in The dashboard of kibana i get the next error: This version of Kibana requires Elasticsearch v5.4.1 on all nodes. I…

---

## [Logstash geo\_point](https://discuss.elastic.co/t/logstash-geo-point/149434)

<div class="topic-metadata">

**Author:** [@DhavalKansara](https://discuss.elastic.co/u/DhavalKansara)\
**Replies:** 15\
**Last updated:** [September 27, 2018, 8:34am UTC](https://discuss.elastic.co/t/logstash-geo-point/149434 "2018-09-27T08:34:01Z")

</div>

Hello, I want to create a geographical coordinate map. Can you please help me guide through the process of creating the geo\_point or any other way to create coordinate map. I have tried the option from some website. I r…

---

## [Script\_fields issue?](https://discuss.elastic.co/t/script-fields-issue/3169)

<div class="topic-metadata">

**Author:** [@Lukas\_Vlcek1](https://discuss.elastic.co/u/Lukas_Vlcek1)\
**Replies:** 13\
**Last updated:** [July 30, 2010, 11:36am UTC](https://discuss.elastic.co/t/script-fields-issue/3169 "2010-07-30T11:36:21Z")

</div>

Hi, I am experiencing script\_fields issue. Below is a shell script with curl examples. In short: I prepare an index, index three objects into it, verify that I can query objects from index and that I can extract val…

---

## [Does every index have its own shard?](https://discuss.elastic.co/t/does-every-index-have-its-own-shard/327526)

<div class="topic-metadata">

**Author:** [@emrethedev](https://discuss.elastic.co/u/emrethedev)\
**Replies:** 10\
**Last updated:** [March 13, 2023, 3:02pm UTC](https://discuss.elastic.co/t/does-every-index-have-its-own-shard/327526 "2023-03-13T15:02:47Z")

</div>

Hi, (Sorry if this is a double post but i could not find answer.) Does every index have its own shard or may they have common shards? We know that when we create an index, it has 5 shards by default. So when we create a…

---

## [Ingest AWS-CloudTrail Logs](https://discuss.elastic.co/t/ingest-aws-cloudtrail-logs/273464)

<div class="topic-metadata">

**Author:** [@vishakh](https://discuss.elastic.co/u/vishakh)\
**Replies:** 10\
**Last updated:** [June 10, 2021, 7:45pm UTC](https://discuss.elastic.co/t/ingest-aws-cloudtrail-logs/273464 "2021-06-10T19:45:46Z")

</div>

I’m trying to extract & ingest AWS-Cloudtrail logs using Filebeat-7.10.0 AWS-module. I’m seeing the below error when filebeat is started & fails in starting further until I disable the AWS filebeat module. {"file.name"…

---

## [Incorrect status on Cluster Overview](https://discuss.elastic.co/t/incorrect-status-on-cluster-overview/136037)

<div class="topic-metadata">

**Author:** [@iremmats](https://discuss.elastic.co/u/iremmats)\
**Replies:** 9\
**Last updated:** [June 19, 2018, 11:54am UTC](https://discuss.elastic.co/t/incorrect-status-on-cluster-overview/136037 "2018-06-19T11:54:05Z")

</div>

Hi, Anyone else having issues with the Cloud Admin UI not showing the correct status for clusters in the cluster overview? In the detailed view everything is correct but in the overview a cluster with no pending changes…

---

## [Date math in index name error in 8.1.3](https://discuss.elastic.co/t/date-math-in-index-name-error-in-8-1-3/305186)

<div class="topic-metadata">

**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Replies:** 12\
**Last updated:** [May 27, 2022, 2:19am UTC](https://discuss.elastic.co/t/date-math-in-index-name-error-in-8-1-3/305186 "2022-05-27T02:19:31Z")

</div>

Per the doc, I'm trying to create an index with the date in it's name: PUT /%3Call-dns-%7Bnow%2Fd%7D%-0000013E?pretty { "aliases": { "all-dns": { "is\_write\_index": true } } } But I'm getting this erro…

---

## ["\_source" : {"error":"NoClassSettingsException\[Failed to load class with value \[jdbc\]\]; nested: ClassNotFoundException\[jdbc\]; "](https://discuss.elastic.co/t/-source-error-noclasssettingsexception-failed-to-load-class-with-value-jdbc-nested-classnotfoundexception-jdbc/14874)

<div class="topic-metadata">

**Author:** [@fzhou](https://discuss.elastic.co/u/fzhou)\
**Replies:** 16\
**Last updated:** [December 17, 2013, 8:32am UTC](https://discuss.elastic.co/t/-source-error-noclasssettingsexception-failed-to-load-class-with-value-jdbc-nested-classnotfoundexception-jdbc/14874 "2013-12-17T08:32:10Z")

</div>

Hi, I have 10 nodes ES setup, node1 and node 10 are master nodes, the rest are data nodes. I installed river jdbc on node1, ES master is running on node10 now. I already load about 3/4 of large table from mys…

---

## [Erro after install](https://discuss.elastic.co/t/erro-after-install/135923)

<div class="topic-metadata">

**Author:** [@Andras\_Klambauer](https://discuss.elastic.co/u/Andras_Klambauer)\
**Replies:** 14\
**Last updated:** [June 15, 2018, 4:22pm UTC](https://discuss.elastic.co/t/erro-after-install/135923 "2018-06-15T16:22:23Z")

</div>

I just installed the logstash next to graylog and I got this erros all the time: 2018-06-14T13:33:05,268\]\[INFO \]\[logstash.runner \] Starting Logstash {"logstash.version"=\>"6.3.0"} \[2018-06-14T13:33:06,013\]\[ERRO…

---

## [Analyzer processing when indexing and searching](https://discuss.elastic.co/t/analyzer-processing-when-indexing-and-searching/183028)

<div class="topic-metadata">

**Author:** [@ludehon](https://discuss.elastic.co/u/ludehon)\
**Replies:** 9\
**Last updated:** [June 3, 2019, 4:26pm UTC](https://discuss.elastic.co/t/analyzer-processing-when-indexing-and-searching/183028 "2019-06-03T16:26:07Z")

</div>

Hello, I am using the Elastic Python API and having difficulties to process a document through analyzer. My goal is to process the content of ingest's document with analyzer, but I cannot achieve any result with a regula…

---

## [Changing mapping](https://discuss.elastic.co/t/changing-mapping/94981)

<div class="topic-metadata">

**Author:** [@vinpereira](https://discuss.elastic.co/u/vinpereira)\
**Replies:** 9\
**Last updated:** [August 14, 2017, 6:49pm UTC](https://discuss.elastic.co/t/changing-mapping/94981 "2017-08-14T18:49:24Z")

</div>

Hi everyone, Finally, my company will switch from ES 1.7 to ES 5.5 (in fact, the new one is for new projects … and the old for that already exists … anyway) ! "Old" Mapping { "properties": { // some fields …

---

## [Logstash Config File Error2](https://discuss.elastic.co/t/logstash-config-file-error2/170528)

<div class="topic-metadata">

**Author:** [@brandonstephens922](https://discuss.elastic.co/u/brandonstephens922)\
**Replies:** 12\
**Last updated:** [March 1, 2019, 7:48pm UTC](https://discuss.elastic.co/t/logstash-config-file-error2/170528 "2019-03-01T19:48:08Z")

</div>

Can someone please review this file for errors? I have been over it and over it and I keep getting this error: \[2019-03-01T14:46:07,935\]\[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::Pip…

---

## [Issue enrolling into fleet](https://discuss.elastic.co/t/issue-enrolling-into-fleet/383470)

<div class="topic-metadata">

**Author:** [@f4n-1nh1b1t10n](https://discuss.elastic.co/u/f4n-1nh1b1t10n)\
**Replies:** 16\
**Last updated:** [November 19, 2025, 4:26pm UTC](https://discuss.elastic.co/t/issue-enrolling-into-fleet/383470 "2025-11-19T16:26:58Z")

</div>

Hello, I seem to stumble on the issue of enrolling my agent securely into fleet. i’ve tried the FAQ where they suggest to install the agent first, and then enroll it into fleet (upgrading the agent to a fleet server wi…

---

## [How to enriching events with "dynamic" data from a file](https://discuss.elastic.co/t/how-to-enriching-events-with-dynamic-data-from-a-file/328019)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 9\
**Last updated:** [March 21, 2023, 3:10am UTC](https://discuss.elastic.co/t/how-to-enriching-events-with-dynamic-data-from-a-file/328019 "2023-03-21T03:10:25Z")

</div>

Tinkering with how to enrich filebeat events by tagging/labelling with data picked from a text that might change infrequently but still change (days, weeks, months). We're talking off application version data, so wheneve…

---

## [Is there a API which can get all beat.hostname in an index?](https://discuss.elastic.co/t/is-there-a-api-which-can-get-all-beat-hostname-in-an-index/308528)

<div class="topic-metadata">

**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\
**Replies:** 9\
**Last updated:** [June 30, 2022, 5:13pm UTC](https://discuss.elastic.co/t/is-there-a-api-which-can-get-all-beat-hostname-in-an-index/308528 "2022-06-30T17:13:56Z")

</div>

Or some other way...

---

## [Failed parsing date from field Oracle alert log](https://discuss.elastic.co/t/failed-parsing-date-from-field-oracle-alert-log/351590)

<div class="topic-metadata">

**Author:** [@Prabhu\_Athithan](https://discuss.elastic.co/u/Prabhu_Athithan)\
**Replies:** 19\
**Last updated:** [January 23, 2024, 7:00pm UTC](https://discuss.elastic.co/t/failed-parsing-date-from-field-oracle-alert-log/351590 "2024-01-23T19:00:26Z")

</div>

Failed parsing date from field {:field=\>"timestamp", :value=\>"%{year} %{month} %{monthday} %{time}", :exception=\>"Invalid format: "%{year} %{month} %{monthday} %{t..."", :config\_parsers=\>"yyyy MMM dd HH:mm:ss", :config\_l…

---

## [GREEDYDATA in Grok doesn't pick up a leading \[](https://discuss.elastic.co/t/greedydata-in-grok-doesnt-pick-up-a-leading/250999)

<div class="topic-metadata">

**Author:** [@joesheps](https://discuss.elastic.co/u/joesheps)\
**Replies:** 11\
**Last updated:** [October 8, 2020, 8:18am UTC](https://discuss.elastic.co/t/greedydata-in-grok-doesnt-pick-up-a-leading/250999 "2020-10-08T08:18:05Z")

</div>

I am receiving syslogs like this: Oct 5 13:37:13 10.20.30.40 %ASA-4-733100: \[ HTTP 80\] drop rate-1 exceeded. Current burst rate is 7 per second, max configured rate is 40; Current average rate is 23 per seco…

---

## [Cannot select index pattern having geo\_point field when creating map layer](https://discuss.elastic.co/t/cannot-select-index-pattern-having-geo-point-field-when-creating-map-layer/241910)

<div class="topic-metadata">

**Author:** [@mattiapdo](https://discuss.elastic.co/u/mattiapdo)\
**Replies:** 9\
**Last updated:** [July 23, 2020, 3:08pm UTC](https://discuss.elastic.co/t/cannot-select-index-pattern-having-geo-point-field-when-creating-map-layer/241910 "2020-07-23T15:08:28Z")

</div>

Hi there, I'm having troubles adding a new level creating a map in Kibana 7.6.1. I have two index patterns: index\_pat-\* and index\_pat-x-\*, both containing at least one field of type geo\_point named geoSensor.geoPoint. …

---

## [ES shards optimisation and improvement to cluster health](https://discuss.elastic.co/t/es-shards-optimisation-and-improvement-to-cluster-health/216102)

<div class="topic-metadata">

**Author:** [@Norman\_Khine](https://discuss.elastic.co/u/Norman_Khine)\
**Replies:** 9\
**Last updated:** [January 28, 2020, 3:33pm UTC](https://discuss.elastic.co/t/es-shards-optimisation-and-improvement-to-cluster-health/216102 "2020-01-28T15:33:11Z")

</div>

Hello, On my cluster,(version 7.1), I keep getting a Yellow state from time to time and an increase in x400 errors, currently, the cluster has 3 master nodes and 4 data nodes with 640Gb of disk space per data node. cur…

---

## [I had a difficult issue need to be fixed in terms of logstash drop fileds](https://discuss.elastic.co/t/i-had-a-difficult-issue-need-to-be-fixed-in-terms-of-logstash-drop-fileds/92198)

<div class="topic-metadata">

**Author:** [@Robin\_Guo](https://discuss.elastic.co/u/Robin_Guo)\
**Replies:** 9\
**Last updated:** [July 13, 2017, 9:32am UTC](https://discuss.elastic.co/t/i-had-a-difficult-issue-need-to-be-fixed-in-terms-of-logstash-drop-fileds/92198 "2017-07-13T09:32:06Z")

</div>

Dear folks, I had a difficult issue need to be fixed in terms of logstash drop fileds. the thing like this: I predefined some fileds in metricbeat config file in order to send the difference index name to elasticsear…

---

## [Connecting Tribe node to EC2 cluster](https://discuss.elastic.co/t/connecting-tribe-node-to-ec2-cluster/16848)

<div class="topic-metadata">

**Author:** [@Matt\_Dainty](https://discuss.elastic.co/u/Matt_Dainty)\
**Replies:** 9\
**Last updated:** [April 14, 2014, 9:24am UTC](https://discuss.elastic.co/t/connecting-tribe-node-to-ec2-cluster/16848 "2014-04-14T09:24:23Z")

</div>

Hi, I have a ES cluster built in EC2, using the cloud-aws plugin for discovery. The nodes are using their private IP addresses for communication and everything works ok. I want to run one or more tribe nodes remo…

---

## [LogStash - Upload using MySQL](https://discuss.elastic.co/t/logstash-upload-using-mysql/257604)

<div class="topic-metadata">

**Author:** [@nottyheadedboss](https://discuss.elastic.co/u/nottyheadedboss)\
**Replies:** 12\
**Last updated:** [December 8, 2020, 2:52pm UTC](https://discuss.elastic.co/t/logstash-upload-using-mysql/257604 "2020-12-08T14:52:52Z")

</div>

I am new to the world of ELK and trying to learn. But Logstash is proving to be a big hurdle. I tried loading data from a CSV file and that caused lot of issues and I have been unable to upload using CSV. So I tried a ne…

---

## [Snapshots stopped working after switching from a single server to cluster (getting the server married?)](https://discuss.elastic.co/t/snapshots-stopped-working-after-switching-from-a-single-server-to-cluster-getting-the-server-married/192531)

<div class="topic-metadata">

**Author:** [@rihad](https://discuss.elastic.co/u/rihad)\
**Replies:** 10\
**Last updated:** [July 28, 2019, 10:56am UTC](https://discuss.elastic.co/t/snapshots-stopped-working-after-switching-from-a-single-server-to-cluster-getting-the-server-married/192531 "2019-07-28T10:56:44Z")

</div>

Simple as that. I'm attempting to take snapshots from the same server as before, which isn't the master anymore. path.repo: \["/var/db/elasticsearch"\] Snapshot directory is /var/db/elasticsearch/backup. For some reason …

---

## [App Search Rate limiting search requests?](https://discuss.elastic.co/t/app-search-rate-limiting-search-requests/357518)

<div class="topic-metadata">

**Author:** [@Chenko](https://discuss.elastic.co/u/Chenko)\
**Replies:** 11\
**Last updated:** [April 16, 2024, 6:28pm UTC](https://discuss.elastic.co/t/app-search-rate-limiting-search-requests/357518 "2024-04-16T18:28:34Z")

</div>

Hi, I currently have a cloud instance of elastic and an application, the application sends a lot of search request to App Search, around 2-5/s however some of these search requests return an empty body\*, if I then wait …

---

## [Split multi- nested XML in Logstash](https://discuss.elastic.co/t/split-multi-nested-xml-in-logstash/220077)

<div class="topic-metadata">

**Author:** [@katara](https://discuss.elastic.co/u/katara)\
**Replies:** 11\
**Last updated:** [February 27, 2020, 6:40am UTC](https://discuss.elastic.co/t/split-multi-nested-xml-in-logstash/220077 "2020-02-27T06:40:06Z")

</div>

Hi All, Here's a sample of my xml data \<metric-datas\> \<metric-data\> \<metricId\>120778\</metricId\> \<metricName\> Average Response Time (ms) \</metricName\> \<metricPath\>…

---

## [Beats Pipeline blocked on the hour](https://discuss.elastic.co/t/beats-pipeline-blocked-on-the-hour/65765)

<div class="topic-metadata">

**Author:** [@Omar\_Al\_Zabir](https://discuss.elastic.co/u/Omar_Al_Zabir)\
**Replies:** 9\
**Last updated:** [November 18, 2016, 11:25am UTC](https://discuss.elastic.co/t/beats-pipeline-blocked-on-the-hour/65765 "2016-11-18T11:25:35Z")

</div>

Every hour, pipeline gets blocked and I get this error from logstash. I have a simple logstash config file which has in input { beats { ... } } and no filter, direct output { ... } do elasticsearch. Elasticsearch has no …

---

## [Beat setup dashboards don't work in different spaces](https://discuss.elastic.co/t/beat-setup-dashboards-dont-work-in-different-spaces/346925)

<div class="topic-metadata">

**Author:** [@litsegaard](https://discuss.elastic.co/u/litsegaard)\
**Replies:** 19\
**Last updated:** [November 17, 2023, 12:58pm UTC](https://discuss.elastic.co/t/beat-setup-dashboards-dont-work-in-different-spaces/346925 "2023-11-17T12:58:02Z")

</div>

I'm running the 8.10.4 stack and having trouble settings up the dashboards for various beats. I run a simple setup command using Docker and all the dashboards for a given beat are imported. However, when clicking a link …

---

## [Java APM Agent connecting to SSL APM Server](https://discuss.elastic.co/t/java-apm-agent-connecting-to-ssl-apm-server/288355)

<div class="topic-metadata">

**Author:** [@Trinity\_Rolling](https://discuss.elastic.co/u/Trinity_Rolling)\
**Replies:** 9\
**Last updated:** [November 4, 2021, 1:58pm UTC](https://discuss.elastic.co/t/java-apm-agent-connecting-to-ssl-apm-server/288355 "2021-11-04T13:58:43Z")

</div>

Kibana version: 7.15.1 Elasticsearch version: 7.15.1 APM Server version: 7.15.1 APM Agent language and version: Java 1.26.0 Browser version: Chrome 94.0.4606.81 Is there anything special in your setup? Windows base…

---

## [Regexp character '!' doesnt work in ES dsl query even on type set as 'keyword' in mappings](https://discuss.elastic.co/t/regexp-character-doesnt-work-in-es-dsl-query-even-on-type-set-as-keyword-in-mappings/143842)

<div class="topic-metadata">

**Author:** [@nikitag](https://discuss.elastic.co/u/nikitag)\
**Replies:** 11\
**Last updated:** [August 14, 2018, 3:52am UTC](https://discuss.elastic.co/t/regexp-character-doesnt-work-in-es-dsl-query-even-on-type-set-as-keyword-in-mappings/143842 "2018-08-14T03:52:59Z")

</div>

The mapping of my Elastic search looks like below: { "settings": { "index": { "number\_of\_shards": "5", "number\_of\_replicas": "1" } }, "mappings": { "node": { "properties": { "…

---

## [Sending Data to Nodes](https://discuss.elastic.co/t/sending-data-to-nodes/149573)

<div class="topic-metadata">

**Author:** [@lkenetadmin](https://discuss.elastic.co/u/lkenetadmin)\
**Replies:** 10\
**Last updated:** [September 25, 2018, 2:42am UTC](https://discuss.elastic.co/t/sending-data-to-nodes/149573 "2018-09-25T02:42:59Z")

</div>

We have 2 data nodes but we want to use first node-2 until the storage is full then send the data to node-3. Is there anyway to address the way we want to send data to elasticsearch? Thank you.

---

## [Configure the right analyzer](https://discuss.elastic.co/t/configure-the-right-analyzer/6586)

<div class="topic-metadata">

**Author:** [@louis\_gueye](https://discuss.elastic.co/u/louis_gueye)\
**Replies:** 9\
**Last updated:** [February 9, 2012, 10:25am UTC](https://discuss.elastic.co/t/configure-the-right-analyzer/6586 "2012-02-09T10:25:14Z")

</div>

Hi all, I'm having a hard time configuring correctly ES to find accented and non-accented words the same way. Here is a sequence anyone can execute : -----------------------------------------------------------…

---

## [Beat : vsphere module](https://discuss.elastic.co/t/beat-vsphere-module/130494)

<div class="topic-metadata">

**Author:** [@adelbot](https://discuss.elastic.co/u/adelbot)\
**Replies:** 11\
**Last updated:** [May 25, 2018, 12:09pm UTC](https://discuss.elastic.co/t/beat-vsphere-module/130494 "2018-05-25T12:09:48Z")

</div>

Is it possible to retrieve Tag Field like Custom field ? These "custom" field seems be in end of life at vmware. Why not retrieve the distributed network port group ?

---

## [ES Cluster behavior has abnormal](https://discuss.elastic.co/t/es-cluster-behavior-has-abnormal/224354)

<div class="topic-metadata">

**Author:** [@AshokBachchan](https://discuss.elastic.co/u/AshokBachchan)\
**Replies:** 18\
**Last updated:** [March 20, 2020, 4:36pm UTC](https://discuss.elastic.co/t/es-cluster-behavior-has-abnormal/224354 "2020-03-20T16:36:09Z")

</div>

Hello @Christian\_Dahlqvist Dear Christian, In our production cluster, some of the Indices looks abnormal, as if first it is showing GREEN state, then after sometimes it is showing RED state. How it is possible, ex. g…

---

## [Metricbeat module docker vs memory dataset](https://discuss.elastic.co/t/metricbeat-module-docker-vs-memory-dataset/224802)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 15\
**Last updated:** [March 27, 2020, 8:04pm UTC](https://discuss.elastic.co/t/metricbeat-module-docker-vs-memory-dataset/224802 "2020-03-27T20:04:08Z")

</div>

When I try to run metricbeat 7.6.1 on a CentOS 7 box with docker-engine-17.05.0.ce-1.el7.centos.x86\_64, I see these warning logged every time docker attempts to ship the memory metricset: 2020-03-24T11:14:00.316+0100\<ta…

---

## [Getting error while running logstash with multiple beats data](https://discuss.elastic.co/t/getting-error-while-running-logstash-with-multiple-beats-data/146401)

<div class="topic-metadata">

**Author:** [@ravikt](https://discuss.elastic.co/u/ravikt)\
**Replies:** 15\
**Last updated:** [September 3, 2018, 8:58pm UTC](https://discuss.elastic.co/t/getting-error-while-running-logstash-with-multiple-beats-data/146401 "2018-09-03T20:58:59Z")

</div>

Currently I am sending metricbeat and winlogbeat data from same source to same logstash instance A. Now I would like to send filebeat data from another source to same logstash instance A. When I restart logstash, am get…

---

## [Winlogbeat configuration - exact selection](https://discuss.elastic.co/t/winlogbeat-configuration-exact-selection/235895)

<div class="topic-metadata">

**Author:** [@RRadim](https://discuss.elastic.co/u/RRadim)\
**Replies:** 10\
**Last updated:** [June 11, 2020, 2:09pm UTC](https://discuss.elastic.co/t/winlogbeat-configuration-exact-selection/235895 "2020-06-11T14:09:25Z")

</div>

Hello :slight\_smile: Hope someone could help me :wink: I want to collect ALL events of level Critical, Error and Warning + from level Information JUST events id 1074, 6005, 6006, 6008. (Due to monitoring restart/shutdo…

---

## [JaxRS Async distrubuted tracing not works](https://discuss.elastic.co/t/jaxrs-async-distrubuted-tracing-not-works/189531)

<div class="topic-metadata">

**Author:** [@suikast42](https://discuss.elastic.co/u/suikast42)\
**Replies:** 14\
**Last updated:** [August 8, 2019, 10:41am UTC](https://discuss.elastic.co/t/jaxrs-async-distrubuted-tracing-not-works/189531 "2019-08-08T10:41:22Z")

</div>

Have a Simple test scenario SeriveA:method1 -\> SeriveB:method1 -\> SeriveA:method2. \*\* \*\* But if I change the call to ServiceB:method1 to async via client.target("http://localhost:8080/wms/backendapi/serivceB/method1"…

---

## [Upgrading Kibana 7.17.15 -\> 7.17.18 FATAL ERROR](https://discuss.elastic.co/t/upgrading-kibana-7-17-15-7-17-18-fatal-error/353299)

<div class="topic-metadata">

**Author:** [@jasonperrone](https://discuss.elastic.co/u/jasonperrone)\
**Replies:** 9\
**Last updated:** [March 5, 2024, 4:16pm UTC](https://discuss.elastic.co/t/upgrading-kibana-7-17-15-7-17-18-fatal-error/353299 "2024-03-05T16:16:48Z")

</div>

I upgraded my Kibana from 7.17.15 -\> 7.17.18. On startup received: FATAL Error: EACCES: permission denied, stat '/nonexistent/.config/puppeteer'. Downgraded back to 7.17.15 =\> Problem disappeared.

[Previous page](https://discuss.elastic.co/top.md?page=201&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=203&per_page=50&period=all)
