# Top **URL:** https://discuss.elastic.co/top.md?page=212&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 213 --- ## [Remote Cluster Of Connection Problem With Xpack](https://discuss.elastic.co/t/remote-cluster-of-connection-problem-with-xpack/241545)
**Author:** [@3c3m](https://discuss.elastic.co/u/3c3m)\ **Replies:** 9\ **Last updated:** [July 20, 2020, 9:23am UTC](https://discuss.elastic.co/t/remote-cluster-of-connection-problem-with-xpack/241545 "2020-07-20T09:23:53Z")
Hi All, Without x-pack, I provided a seamless connection as remote clusters in Kibana. But, Xpack is enabled, remote cluster connections were broken. How can I use both together without problems? Thanks. --- ## [Memory leak on kubernetes nodes](https://discuss.elastic.co/t/memory-leak-on-kubernetes-nodes/372389)
**Author:** [@dimaz](https://discuss.elastic.co/u/dimaz)\ **Replies:** 17\ **Last updated:** [October 8, 2025, 11:25am UTC](https://discuss.elastic.co/t/memory-leak-on-kubernetes-nodes/372389 "2025-10-08T11:25:15Z")
Hi, I see memory issue when i'm using Auditbeat on kubernetes nodes. I am trying with Auditbeat 8.12 and 8.13. Here is the config I'm running: auditbeat.modules: - module: auditd processors: - add\_session\_metad… --- ## [Access fields from input plugin (cloudwatch\_logs\_importer)](https://discuss.elastic.co/t/access-fields-from-input-plugin-cloudwatch-logs-importer/336585)
**Author:** [@Maarten\_Dekker](https://discuss.elastic.co/u/Maarten_Dekker)\ **Replies:** 19\ **Last updated:** [June 23, 2023, 4:13pm UTC](https://discuss.elastic.co/t/access-fields-from-input-plugin-cloudwatch-logs-importer/336585 "2023-06-23T16:13:27Z")
Hi, I am using the cloudwatch\_logs\_importer plugin to read and grok logs from cloudwatch. It all works fine, but I am facing issues to access a field which is created by the input module itself: \[cloudwatch\_logs\]\[log\_… --- ## [Using URL query Elasticsearch problem](https://discuss.elastic.co/t/using-url-query-elasticsearch-problem/263366)
**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\ **Replies:** 11\ **Last updated:** [February 9, 2021, 9:32am UTC](https://discuss.elastic.co/t/using-url-query-elasticsearch-problem/263366 "2021-02-09T09:32:09Z")
Hi, I am trying to use URL to query Elasticsearch using the below URL: https://xxxxxx.xxxx.xxx:9200/xxx-xxxxxx/\_search/scroll?q="+scroll:10m +scroll\_id:DnF1ZXJ5VGhlbkZldGNoBgAAAAAAALjLFjQ1X0c5Q0dkVDB1X215YUFOQ0NIWmcAA… --- ## [Logstash is not connecting on muliple port for different beats](https://discuss.elastic.co/t/logstash-is-not-connecting-on-muliple-port-for-different-beats/146379)
**Author:** [@Nirpendra\_Kumar](https://discuss.elastic.co/u/Nirpendra_Kumar)\ **Replies:** 11\ **Last updated:** [August 31, 2018, 9:34am UTC](https://discuss.elastic.co/t/logstash-is-not-connecting-on-muliple-port-for-different-beats/146379 "2018-08-31T09:34:42Z")
I have 3 server with beat service installed , passing the logs to logstash on different ports 5044,5045,4046 with different index .but all indexes have the same data . --- ## [Elastic fleet change datastream name based on field value](https://discuss.elastic.co/t/elastic-fleet-change-datastream-name-based-on-field-value/301155)
**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\ **Replies:** 9\ **Last updated:** [April 11, 2022, 10:49am UTC](https://discuss.elastic.co/t/elastic-fleet-change-datastream-name-based-on-field-value/301155 "2022-04-11T10:49:37Z")
Hi, I need to set different ILM policies based on logs field value (one for PROD , other for NONPROD), so I created an ingest pipeline that renames the \_index field as @ruflin suggested in a github issue and works good w… --- ## [Question about indexing and language in ScrutMyDocs](https://discuss.elastic.co/t/question-about-indexing-and-language-in-scrutmydocs/12779)
**Author:** [@Fatima\_Castiglione\_M](https://discuss.elastic.co/u/Fatima_Castiglione_M)\ **Replies:** 17\ **Last updated:** [July 15, 2013, 12:39pm UTC](https://discuss.elastic.co/t/question-about-indexing-and-language-in-scrutmydocs/12779 "2013-07-15T12:39:34Z")
Hi, I am exploring the code in ScrutMyDocs and find something I do not truly understand. The file named /resources/estemplate/\_setting.json has this contents: { "index" : { "analysis":{ … --- ## [Filebeat Cisco ASA Module failing to parse](https://discuss.elastic.co/t/filebeat-cisco-asa-module-failing-to-parse/254304)
**Author:** [@hueyg](https://discuss.elastic.co/u/hueyg)\ **Replies:** 11\ **Last updated:** [December 1, 2020, 10:18am UTC](https://discuss.elastic.co/t/filebeat-cisco-asa-module-failing-to-parse/254304 "2020-12-01T10:18:01Z")
I have a Filebeat 7.9.3 shipper confirmed sending logs using two modules panw and cisco, specifically the ASA feature. I am only seeing entries for the panw module, but I know the cisco logs are there somewhere. After … --- ## [Grok parse does not work, but looks fine on the debugger](https://discuss.elastic.co/t/grok-parse-does-not-work-but-looks-fine-on-the-debugger/238974)
**Author:** [@tenaz3](https://discuss.elastic.co/u/tenaz3)\ **Replies:** 9\ **Last updated:** [June 28, 2020, 8:26pm UTC](https://discuss.elastic.co/t/grok-parse-does-not-work-but-looks-fine-on-the-debugger/238974 "2020-06-28T20:26:28Z")
ELK: 7.71 On the debugger grok looks good, but when I send filebeat-\>logstash-\>elasticsearch, on kibana none of the fields I mapped is there. Any on has an idea? I have the following log structure: 2020-06-18T23:10:43… --- ## [Not able to search with date range filter](https://discuss.elastic.co/t/not-able-to-search-with-date-range-filter/345088)
**Author:** [@bhumika](https://discuss.elastic.co/u/bhumika)\ **Replies:** 22\ **Last updated:** [October 16, 2023, 11:35am UTC](https://discuss.elastic.co/t/not-able-to-search-with-date-range-filter/345088 "2023-10-16T11:35:07Z")
I had integrated Elasticsearch in my ruby on rails project with chewy gem. All the searches are working fine except date range filter I tried every approach but not getting any error or response is always blank array th… --- ## [Simple elasticsearch database designe help](https://discuss.elastic.co/t/simple-elasticsearch-database-designe-help/164935)
**Author:** [@Mart](https://discuss.elastic.co/u/Mart)\ **Replies:** 13\ **Last updated:** [January 22, 2019, 5:45am UTC](https://discuss.elastic.co/t/simple-elasticsearch-database-designe-help/164935 "2019-01-22T05:45:49Z")
Hello! I have a question about elastic database design. My data is 10 different collections spread to tapes. Every tape can have one or more collections stored and on every tape there are 100K+ unique files. In elastic I… --- ## [Runtime fields can't be saved because highlighted errors need to be fixed but none are highlighted](https://discuss.elastic.co/t/runtime-fields-cant-be-saved-because-highlighted-errors-need-to-be-fixed-but-none-are-highlighted/359121)
**Author:** [@rasmus.torkel](https://discuss.elastic.co/u/rasmus.torkel)\ **Replies:** 16\ **Last updated:** [May 16, 2024, 8:39am UTC](https://discuss.elastic.co/t/runtime-fields-cant-be-saved-because-highlighted-errors-need-to-be-fixed-but-none-are-highlighted/359121 "2024-05-16T08:39:49Z")
The message says invalid Painless script but does not highlight any errors. Of course, I want to write a more involved script, but even this basic script is getting rejected without explanation. --- ## [\[elasticsearch 8.3\] Master node 'dies' once per week](https://discuss.elastic.co/t/elasticsearch-8-3-master-node-dies-once-per-week/311493)
**Author:** [@Roberto\_D\_Arco](https://discuss.elastic.co/u/Roberto_D_Arco)\ **Replies:** 10\ **Last updated:** [August 26, 2022, 12:53pm UTC](https://discuss.elastic.co/t/elasticsearch-8-3-master-node-dies-once-per-week/311493 "2022-08-26T12:53:28Z")
We have 2 very similar self managed cluster, staging and production, on AWS and on arm architecture (graviton2) and amazon linux 2 base image: 3 master nodes and 3 datanodes. In all instances we have installed monit that… --- ## [Elasticsearch 7.0 SQL ACCESS request cache](https://discuss.elastic.co/t/elasticsearch-7-0-sql-access-request-cache/186467)
**Author:** [@c81b4c93b1f70af5398f](https://discuss.elastic.co/u/c81b4c93b1f70af5398f)\ **Replies:** 11\ **Last updated:** [June 26, 2019, 8:31am UTC](https://discuss.elastic.co/t/elasticsearch-7-0-sql-access-request-cache/186467 "2019-06-26T08:31:31Z")
Looks like SQL query is not cached, and equivalent dsl qeury is cached. Every single time this SQL query is executed, it takes over 3 seconds. (The number of documents is about 6,000,000) POST /\_sql?format=json … --- ## [Not able to download track](https://discuss.elastic.co/t/not-able-to-download-track/305712)
**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\ **Replies:** 10\ **Last updated:** [June 23, 2022, 1:15pm UTC](https://discuss.elastic.co/t/not-able-to-download-track/305712 "2022-06-23T13:15:59Z")
Hi i am using below script to download track https://raw.githubusercontent.com/elastic/rally-tracks/master/download.sh i am able to download tracks on ubuntu 20.04 Cloning into '/home/user/.rally/benchmarks/tracks/def… --- ## [PDF, jpeg/jpg and other file types ingests](https://discuss.elastic.co/t/pdf-jpeg-jpg-and-other-file-types-ingests/313860)
**Author:** [@cheshirecat](https://discuss.elastic.co/u/cheshirecat)\ **Replies:** 15\ **Last updated:** [September 14, 2022, 7:08am UTC](https://discuss.elastic.co/t/pdf-jpeg-jpg-and-other-file-types-ingests/313860 "2022-09-14T07:08:19Z")
Hello There! I am looking for a tutorial how can I ingest/parse/analyze files like \*.pdf or .jpeg/.jpg and other types. I have found this article but I don't use docker/k8s. Could you be so kind and show me other tuto… --- ## [Security settings make my ES not start](https://discuss.elastic.co/t/security-settings-make-my-es-not-start/237522)
**Author:** [@FernandoMOTA](https://discuss.elastic.co/u/FernandoMOTA)\ **Replies:** 15\ **Last updated:** [June 18, 2020, 2:44pm UTC](https://discuss.elastic.co/t/security-settings-make-my-es-not-start/237522 "2020-06-18T14:44:00Z")
I made the security settings and added the following to the yml file: xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.verification\_mode: certificate xpack.security.tr… --- ## [Correct configuration Elastic Search 8.10.4](https://discuss.elastic.co/t/correct-configuration-elastic-search-8-10-4/345238)
**Author:** [@Fernando\_Oliveira](https://discuss.elastic.co/u/Fernando_Oliveira)\ **Replies:** 9\ **Last updated:** [October 23, 2023, 1:50pm UTC](https://discuss.elastic.co/t/correct-configuration-elastic-search-8-10-4/345238 "2023-10-23T13:50:11Z")
I'm starting a new Elastic installation search and Kibana, version 8.10.4.. My goal is to make a better distribution following some recommendations I saw, for example 3 master, 2 data hot, 2 warm in different zones.. S… --- ## [Is setting up elk stack on docker intentionaly this complicated?](https://discuss.elastic.co/t/is-setting-up-elk-stack-on-docker-intentionaly-this-complicated/376622)
**Author:** [@batttererere](https://discuss.elastic.co/u/batttererere)\ **Replies:** 11\ **Last updated:** [April 1, 2025, 12:42pm UTC](https://discuss.elastic.co/t/is-setting-up-elk-stack-on-docker-intentionaly-this-complicated/376622 "2025-04-01T12:42:41Z")
I've been dealing with this for a couple hours now, followed half a dozen tutorials i am not a noob, i've set up a thousand servers, i run my own stack at home with a dozen containers. but this? impossible. does anyo… --- ## [Filters Not Working At All](https://discuss.elastic.co/t/filters-not-working-at-all/222150)
**Author:** [@ck\_montco](https://discuss.elastic.co/u/ck_montco)\ **Replies:** 10\ **Last updated:** [March 13, 2020, 1:55pm UTC](https://discuss.elastic.co/t/filters-not-working-at-all/222150 "2020-03-13T13:55:16Z")
I have the following filter set up to drop certain logs and add tags to syslog events from my Sophos XG550 firewalls: input { tcp { port =\> 6000 type =\> syslog } udp { port =\> 6000 type =\> syslog … --- ## [Java Client Connection issue and AWS Security Group](https://discuss.elastic.co/t/java-client-connection-issue-and-aws-security-group/11710)
**Author:** [@Fish\_Tastic](https://discuss.elastic.co/u/Fish_Tastic)\ **Replies:** 10\ **Last updated:** [August 20, 2013, 2:06pm UTC](https://discuss.elastic.co/t/java-client-connection-issue-and-aws-security-group/11710 "2013-08-20T14:06:27Z")
On AWS, I am connecting to a ES node using Java Transport Client. The client has security group A The search node has security group B. For security group B, I opened all TCP/UDP ports from security group A. I … --- ## [ES busy : Hot thread and xpack.monitoring.exporter full errors](https://discuss.elastic.co/t/es-busy-hot-thread-and-xpack-monitoring-exporter-full-errors/252090)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 9\ **Last updated:** [October 16, 2020, 8:27am UTC](https://discuss.elastic.co/t/es-busy-hot-thread-and-xpack-monitoring-exporter-full-errors/252090 "2020-10-16T08:27:32Z")
Hello, I see many errors in hot thread API. Overview Version: 5.5.1 Uptime: 13 days Nodes: 60 Disk Available: 247TB / 413TB (59.74%) JVM Heap: 68.38% (1TB / 2TB) Indices: 2,857 Documents: 24,414,223,409 Disk Usage:… --- ## [Discovery and Federation services](https://discuss.elastic.co/t/discovery-and-federation-services/82546)
**Author:** [@satishpp](https://discuss.elastic.co/u/satishpp)\ **Replies:** 11\ **Last updated:** [April 18, 2017, 9:04am UTC](https://discuss.elastic.co/t/discovery-and-federation-services/82546 "2017-04-18T09:04:08Z")
Hi, At present, we have a third party Federation services which does online search with various e-resources subscribed by Libraries thro' the platform. It does not store any index or data with it. It is a live search v… --- ## [Need help to have space on elasticsearch](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220)
**Author:** [@Pacous](https://discuss.elastic.co/u/Pacous)\ **Replies:** 13\ **Last updated:** [September 9, 2021, 9:42am UTC](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220 "2021-09-09T09:42:03Z")
When I replay the logs from logstash to elasticsearch, I no longer see them on kibana. I think there is no more storage space. So I go to Stack Management -\> Index Management to delete Indices. But, that does not solve… --- ## [APM-Server unable to fetch sourcemaps from Kibana](https://discuss.elastic.co/t/apm-server-unable-to-fetch-sourcemaps-from-kibana/342098)
**Author:** [@apt-get\_install\_skil](https://discuss.elastic.co/u/apt-get_install_skil)\ **Replies:** 9\ **Last updated:** [September 8, 2023, 7:10am UTC](https://discuss.elastic.co/t/apm-server-unable-to-fetch-sourcemaps-from-kibana/342098 "2023-09-08T07:10:22Z")
I'm trying to instruct our standalone ("legacy") APM-Server to get the JavaScript sourcemaps from Kibana, which I've already uploaded. Here is the relevant APM-Server config: --- apm-server: ... kibana: enabled… --- ## [Esrally benchmark takes longer time to run while the report service time doesn't change](https://discuss.elastic.co/t/esrally-benchmark-takes-longer-time-to-run-while-the-report-service-time-doesnt-change/324597)
**Author:** [@fatcloud](https://discuss.elastic.co/u/fatcloud)\ **Replies:** 9\ **Last updated:** [February 21, 2023, 5:34am UTC](https://discuss.elastic.co/t/esrally-benchmark-takes-longer-time-to-run-while-the-report-service-time-doesnt-change/324597 "2023-02-21T05:34:52Z")
Hi, I'm trying to run some test to see how the number of index affect the elasticsearch cluster performance. I tested from 1k indices to 8k indices, and ran some random requests against those indices. One weird thing … --- ## [How to distribute documents across shards equally, using \_routing in Elasticsearch](https://discuss.elastic.co/t/how-to-distribute-documents-across-shards-equally-using-routing-in-elasticsearch/300802)
**Author:** [@likhith1995](https://discuss.elastic.co/u/likhith1995)\ **Replies:** 9\ **Last updated:** [March 28, 2022, 11:41am UTC](https://discuss.elastic.co/t/how-to-distribute-documents-across-shards-equally-using-routing-in-elasticsearch/300802 "2022-03-28T11:41:50Z")
Hi Team, We are ingesting the data into Elasticsearch, using 3 routing values (namely 3g, 4g, 5g). We assigned 3 primary shards and 1 replica. Index Rollover is configured to 1gb (max per primary shard) for testing. Wh… --- ## [Two different shard exceptions](https://discuss.elastic.co/t/two-different-shard-exceptions/3350)
**Author:** [@ppearcy](https://discuss.elastic.co/u/ppearcy)\ **Replies:** 15\ **Last updated:** [September 24, 2010, 9:03pm UTC](https://discuss.elastic.co/t/two-different-shard-exceptions/3350 "2010-09-24T21:03:38Z")
Hi Shay, Experienced some weird behavior over the weekend on 0.10 that I haven't seen before. Running a 2 node mirrored cluster. Searching a certain shard on certain node fails. Here is the exception I was getting: … --- ## [Elastic search not working on 3g network](https://discuss.elastic.co/t/elastic-search-not-working-on-3g-network/10179)
**Author:** [@sandipp](https://discuss.elastic.co/u/sandipp)\ **Replies:** 10\ **Last updated:** [December 27, 2012, 2:44pm UTC](https://discuss.elastic.co/t/elastic-search-not-working-on-3g-network/10179 "2012-12-27T14:44:08Z")
i am using a dongle to connect to the INTERNET which uses 3g technology . I cannot connect to my elastic search which is on port 9200 . Same server is working from my normal wired connection . Thanking you in ad… --- ## [Elastic Cloud - This might not be the site you want](https://discuss.elastic.co/t/elastic-cloud-this-might-not-be-the-site-you-want/306323)
**Author:** [@milesich](https://discuss.elastic.co/u/milesich)\ **Replies:** 11\ **Last updated:** [June 6, 2022, 3:50am UTC](https://discuss.elastic.co/t/elastic-cloud-this-might-not-be-the-site-you-want/306323 "2022-06-06T03:50:05Z")
I am using latest Microsoft Edge browser and every time I access Kibana on Elastic Cloud I get warning about suspicious site. I have 2 clusters in Azure West Europe. Url: https://xxx.kb.westeurope.azure.elastic-cloud.co… --- ## [How to create a document where the \_id has spaces (Dev Tools)](https://discuss.elastic.co/t/how-to-create-a-document-where-the-id-has-spaces-dev-tools/346404)
**Author:** [@thadc](https://discuss.elastic.co/u/thadc)\ **Replies:** 9\ **Last updated:** [November 4, 2023, 10:08pm UTC](https://discuss.elastic.co/t/how-to-create-a-document-where-the-id-has-spaces-dev-tools/346404 "2023-11-04T22:08:45Z")
I am attempting to create a document in an index where \_id has spaces. I get a parsing exception in Dev Tools. Here is the start of POST statement: POST /label-expression/\_doc/(AB\_123 | CD\_123) I must have the spaces, … --- ## [How to check total required heap for ES 8.8](https://discuss.elastic.co/t/how-to-check-total-required-heap-for-es-8-8/336821)
**Author:** [@Geunmoon\_Oh](https://discuss.elastic.co/u/Geunmoon_Oh)\ **Replies:** 13\ **Last updated:** [June 28, 2023, 2:46am UTC](https://discuss.elastic.co/t/how-to-check-total-required-heap-for-es-8-8/336821 "2023-06-28T02:46:06Z")
To set my ES node's heap minimum, I referenced Size your shards (Size your shards | Elasticsearch Guide \[8.8\] | Elastic). "total\_deduplicated\_mapping\_size" : "4.1kb“ "total\_estimated\_overhead" : “13.5mb“ "extra heap f… --- ## [Disable Docker Support?](https://discuss.elastic.co/t/disable-docker-support/178228)
**Author:** [@Helflym](https://discuss.elastic.co/u/Helflym)\ **Replies:** 10\ **Last updated:** [April 29, 2019, 12:17pm UTC](https://discuss.elastic.co/t/disable-docker-support/178228 "2019-04-29T12:17:14Z")
Hi, I'm trying to make beats/filebeat and maybe the other beats' packages available on AIX. I've managed to make it locally by porting elastic/go-txfile (I'll submit it soon) and by modifying vendor packages manually (… --- ## [Replica stuck in relocation, high cpu usage](https://discuss.elastic.co/t/replica-stuck-in-relocation-high-cpu-usage/11970)
**Author:** [@Bill\_de\_hOra](https://discuss.elastic.co/u/Bill_de_hOra)\ **Replies:** 10\ **Last updated:** [May 17, 2013, 11:30am UTC](https://discuss.elastic.co/t/replica-stuck-in-relocation-high-cpu-usage/11970 "2013-05-17T11:30:27Z")
We experienced a master re-election, seemingly due to a timeout (or underlying throttling of the ec2 discovery mechanism in AWS, we're working through that with Amazon) . Regardless, the previous master got into a bad s… --- ## [Document attachment question](https://discuss.elastic.co/t/document-attachment-question/312008)
**Author:** [@MK817664](https://discuss.elastic.co/u/MK817664)\ **Replies:** 9\ **Last updated:** [August 30, 2022, 9:03pm UTC](https://discuss.elastic.co/t/document-attachment-question/312008 "2022-08-30T21:03:44Z")
Hi Everyone, when it comes to PDF indexing, is the proper way to do this, is to use a pipeline with and attachment? So here is the sceario. We have a number of PDFs that range in size from under a meg to over 50. My und… --- ## [ElasticSearch with CouchDB and memory consumption](https://discuss.elastic.co/t/elasticsearch-with-couchdb-and-memory-consumption/5922)
**Author:** [@yojimbo87](https://discuss.elastic.co/u/yojimbo87)\ **Replies:** 13\ **Last updated:** [November 22, 2011, 8:26pm UTC](https://discuss.elastic.co/t/elasticsearch-with-couchdb-and-memory-consumption/5922 "2011-11-22T20:26:04Z")
Hi folks! Let's say that I have a data in CouchDB which are indexed for searching by ElasticSearch through River. I want to ask: 1. How ES deals with a situation when the dataset stored in CouchDB and indexed by ES … --- ## [Space and data retention question](https://discuss.elastic.co/t/space-and-data-retention-question/322403)
**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\ **Replies:** 11\ **Last updated:** [January 12, 2023, 4:20pm UTC](https://discuss.elastic.co/t/space-and-data-retention-question/322403 "2023-01-12T16:20:47Z")
Good Afternoon and Happy New Year to all my Elastic Stack friends and Guru's. I have been having an issue with my Elasticsearch and syslog retention. In the /var/lib/elasticsearch/log folder I have 4.3 Terrabytes of sp… --- ## [Updated geoip](https://discuss.elastic.co/t/updated-geoip/263043)
**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\ **Replies:** 11\ **Last updated:** [February 8, 2021, 8:53pm UTC](https://discuss.elastic.co/t/updated-geoip/263043 "2021-02-08T20:53:24Z")
I configured the geoip in logstash. I have it updated. Can you help me with a sample configuration? --- ## [Logstash мониторинг file input](https://discuss.elastic.co/t/logstash-file-input/264934)
**Author:** [@artem33region](https://discuss.elastic.co/u/artem33region)\ **Replies:** 10\ **Last updated:** [March 4, 2021, 12:18am UTC](https://discuss.elastic.co/t/logstash-file-input/264934 "2021-03-04T00:18:30Z")
Добрый день, подскажите, кто нибудь сталкивался с мониторингом входящих данных? Есть несколько серверов которые каждый день по sftp скидывают логи в директорию на сервер logstash, можно ли настроить мониторинг файлов на… --- ## [How can have a custom TransportAction which runs for each index request like TransportReplicationAction?](https://discuss.elastic.co/t/how-can-have-a-custom-transportaction-which-runs-for-each-index-request-like-transportreplicationaction/42677)
**Author:** [@mahdi\_malaki](https://discuss.elastic.co/u/mahdi_malaki)\ **Replies:** 9\ **Last updated:** [March 1, 2016, 11:43am UTC](https://discuss.elastic.co/t/how-can-have-a-custom-transportaction-which-runs-for-each-index-request-like-transportreplicationaction/42677 "2016-03-01T11:43:52Z")
I need something like filter's in servlet containers so that catch arrived request before launching indexing process. When I debugged elastic source code, I found TransportReplicationAction is called and i'd like to hav… --- ## [Why can't i connect kibana with Elasticsearch?](https://discuss.elastic.co/t/why-cant-i-connect-kibana-with-elasticsearch/379574)
**Author:** [@cherokeexxx](https://discuss.elastic.co/u/cherokeexxx)\ **Replies:** 26\ **Last updated:** [July 1, 2025, 7:34pm UTC](https://discuss.elastic.co/t/why-cant-i-connect-kibana-with-elasticsearch/379574 "2025-07-01T19:34:43Z")
Hi there, Currently i trying hard to connect kibana with ES, by using Docker, through a docker-compose.yml. Here my docker-compose.yml services: elastic: container\_name: elastic image: docker.elastic.co/elast… --- ## [Nullpointer Exception thrown at WebfluxHelper.java:306](https://discuss.elastic.co/t/nullpointer-exception-thrown-at-webfluxhelper-java-306/360479)
**Author:** [@VVK](https://discuss.elastic.co/u/VVK)\ **Replies:** 10\ **Last updated:** [September 3, 2024, 9:48pm UTC](https://discuss.elastic.co/t/nullpointer-exception-thrown-at-webfluxhelper-java-306/360479 "2024-09-03T21:48:04Z")
Hello Elastic APM server and Agent APM Server version: 8.10.4 APM Agent language and version: java : apm-agent-attach:jar:1.46.0, 1.48.0, 1.43.0 java : apm-agent-attach:jar:1.50.0 ( yesterday's build) Programmatic… --- ## [Nest - Search path](https://discuss.elastic.co/t/nest-search-path/273946)
**Author:** [@silentw](https://discuss.elastic.co/u/silentw)\ **Replies:** 10\ **Last updated:** [May 26, 2021, 1:18am UTC](https://discuss.elastic.co/t/nest-search-path/273946 "2021-05-26T01:18:28Z")
I am trying to use the Nest client to consume an Elasticsearch instance. However, the /\_search endpoint is in fact /search . Is there any possible way to change the behavior of the client to reflect this change? I hav… --- ## [Masking logic is not working](https://discuss.elastic.co/t/masking-logic-is-not-working/261827)
**Author:** [@shree2](https://discuss.elastic.co/u/shree2)\ **Replies:** 10\ **Last updated:** [January 29, 2021, 3:31pm UTC](https://discuss.elastic.co/t/masking-logic-is-not-working/261827 "2021-01-29T15:31:49Z")
Hi, I want to mask the few fields input is coming from json . Please find the configuration below. input { file { path =\> "xxx/sample.log" } } filter { mutate { gsub =\> \["message", "PASSWORD:((?=.\[a-z\])(?=.\[… --- ## [Is ML capable to detect RAM saturation?](https://discuss.elastic.co/t/is-ml-capable-to-detect-ram-saturation/138185)
**Author:** [@genPz01](https://discuss.elastic.co/u/genPz01)\ **Replies:** 9\ **Last updated:** [July 6, 2018, 6:03am UTC](https://discuss.elastic.co/t/is-ml-capable-to-detect-ram-saturation/138185 "2018-07-06T06:03:40Z")
Hi, I test with ML a situation where RAM usage keeps increasing linearly and eats almost all RAM capacity. The Machine Learning constructs the appropriate model but doesn't consider the fact that RAM usage is so close … --- ## [Retrieve metadata of document in response to queries](https://discuss.elastic.co/t/retrieve-metadata-of-document-in-response-to-queries/208939)
**Author:** [@chari](https://discuss.elastic.co/u/chari)\ **Replies:** 11\ **Last updated:** [November 22, 2019, 6:39pm UTC](https://discuss.elastic.co/t/retrieve-metadata-of-document-in-response-to-queries/208939 "2019-11-22T18:39:15Z")
I am indexing the text content of a file by using res = es.index(index=myIndex,body=jsonDict), where jsonDict is just the text of a pdf file in a json dictionary. I am able to query the content and retrieve the relevan… --- ## [Auditbeat to Logstash SSL errors with "Not an SSL/TLS record"](https://discuss.elastic.co/t/auditbeat-to-logstash-ssl-errors-with-not-an-ssl-tls-record/359211)
**Author:** [@ken.harvey](https://discuss.elastic.co/u/ken.harvey)\ **Replies:** 13\ **Last updated:** [May 17, 2024, 5:28pm UTC](https://discuss.elastic.co/t/auditbeat-to-logstash-ssl-errors-with-not-an-ssl-tls-record/359211 "2024-05-17T17:28:02Z")
My goal is connect Auditbeat to Logstash and encrypt the communication. I am not worried about having Logstash verify the client. I do have client certificates on some servers, but I would prefer not to use them, as I do… --- ## [Не работают стоп слова](https://discuss.elastic.co/t/topic/247972)
**Author:** [@Ivan\_Filonenko](https://discuss.elastic.co/u/Ivan_Filonenko)\ **Replies:** 10\ **Last updated:** [September 21, 2020, 8:36am UTC](https://discuss.elastic.co/t/topic/247972 "2020-09-21T08:36:38Z")
Continuing the discussion from Не работают стоп слова: У меня схожая проблема, что и описанная выше. Только в индексе есть все нужные настройки, а поиск все равно осуществляется без стоп-слов. Вот так выглядят настройк… --- ## [Get requests get slower as the index grow](https://discuss.elastic.co/t/get-requests-get-slower-as-the-index-grow/13114)
**Author:** [@oreno](https://discuss.elastic.co/u/oreno)\ **Replies:** 10\ **Last updated:** [August 10, 2013, 2:03am UTC](https://discuss.elastic.co/t/get-requests-get-slower-as-the-index-grow/13114 "2013-08-10T02:03:48Z")
Hi, I'm running an index loader which indexes 1000 doc each bulk. before indexing, the loader runs a get request for each doc id in order to see if exist. If it exist, I'm doing a merge(my own) for the document and… --- ## [Geo-Containment Issues](https://discuss.elastic.co/t/geo-containment-issues/332598)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 14\ **Last updated:** [May 9, 2023, 2:51pm UTC](https://discuss.elastic.co/t/geo-containment-issues/332598 "2023-05-09T14:51:11Z")
I've been trying to get a geo-containment rule to work, but it just wont alert. Anybody able to identify where I'm going wrong? I can't get it to trigger either of the actions. Running Elastic Stack 8.7.1. Here's the… [Previous page](https://discuss.elastic.co/top.md?page=211&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=213&per_page=50&period=all)