# Top **URL:** https://discuss.elastic.co/top.md?page=243&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 244 --- ## [Bug when scrolling?](https://discuss.elastic.co/t/bug-when-scrolling/3901)
**Author:** [@Karussell1](https://discuss.elastic.co/u/Karussell1)\ **Replies:** 9\ **Last updated:** [February 9, 2011, 9:35pm UTC](https://discuss.elastic.co/t/bug-when-scrolling/3901 "2011-02-09T21:35:19Z")
Hi, I simply want a functionality to reindex my docs currently indexed. Has someone some code for this :) ? There is a problem either in my code or in ES when doing some 'overwriting' updates and then scrolling. … --- ## [How do I publish my Kibana to access other machines?](https://discuss.elastic.co/t/how-do-i-publish-my-kibana-to-access-other-machines/237320)
**Author:** [@FernandoMOTA](https://discuss.elastic.co/u/FernandoMOTA)\ **Replies:** 11\ **Last updated:** [June 18, 2020, 2:50pm UTC](https://discuss.elastic.co/t/how-do-i-publish-my-kibana-to-access-other-machines/237320 "2020-06-18T14:50:17Z")
I am wanting to publish my Kibana for access to other machines via Browser, I have not yet entered a password and my license is basic ELK --- ## [Using custom analyzer and nGram to do partial search on a property](https://discuss.elastic.co/t/using-custom-analyzer-and-ngram-to-do-partial-search-on-a-property/14333)
**Author:** [@Aditya\_Herlambang](https://discuss.elastic.co/u/Aditya_Herlambang)\ **Replies:** 9\ **Last updated:** [November 11, 2013, 8:58am UTC](https://discuss.elastic.co/t/using-custom-analyzer-and-ngram-to-do-partial-search-on-a-property/14333 "2013-11-11T08:58:51Z")
I am trying to get partial search on a property of my entity working by using the nGram and edgeNGram working, however I am always getting 0 results all the time. Why is this? Here's my full code, mappings, and samp… --- ## [Grok filter](https://discuss.elastic.co/t/grok-filter/269194)
**Author:** [@Dinesh\_Sharma](https://discuss.elastic.co/u/Dinesh_Sharma)\ **Replies:** 10\ **Last updated:** [April 6, 2021, 10:54am UTC](https://discuss.elastic.co/t/grok-filter/269194 "2021-04-06T10:54:51Z")
Hi, I have a csv file which has currently three rows in it which are as follow: name,age,ip A,12,10.11.1.12 B,13,10.11.1 Now I want to check during the data ingestion via this csv that whether the IP is in proper fo… --- ## [Does anyone know about unique identifiers for synthetic multipage journey?](https://discuss.elastic.co/t/does-anyone-know-about-unique-identifiers-for-synthetic-multipage-journey/349213)
**Author:** [@surya\_dadi\_dhamarake](https://discuss.elastic.co/u/surya_dadi_dhamarake)\ **Replies:** 9\ **Last updated:** [December 14, 2023, 11:05am UTC](https://discuss.elastic.co/t/does-anyone-know-about-unique-identifiers-for-synthetic-multipage-journey/349213 "2023-12-14T11:05:30Z")
Hi Team, I have a deployment in elastic cloud where I need to create multi page synthetic journey but as the web application is deployed in AWS, we have cloudflare which is blocking unwanted requests and it is blocking … --- ## [Discover Histogram changed to use inches (from timestamps)](https://discuss.elastic.co/t/discover-histogram-changed-to-use-inches-from-timestamps/298438)
**Author:** [@Philip\_Nicolcev](https://discuss.elastic.co/u/Philip_Nicolcev)\ **Replies:** 9\ **Last updated:** [March 1, 2022, 6:08pm UTC](https://discuss.elastic.co/t/discover-histogram-changed-to-use-inches-from-timestamps/298438 "2022-03-01T18:08:08Z")
I have an issue where the Discover view's histogram has suddenly changed to using inches (or what I assume is inches, since it's broken into groups of 12) as a unit for its x axis instead of the usual timestamps. It's li… --- ## [Index to red state cluster](https://discuss.elastic.co/t/index-to-red-state-cluster/335763)
**Author:** [@DJ\_Zhu](https://discuss.elastic.co/u/DJ_Zhu)\ **Replies:** 10\ **Last updated:** [June 14, 2023, 6:59am UTC](https://discuss.elastic.co/t/index-to-red-state-cluster/335763 "2023-06-14T06:59:46Z")
I have a question regarding shard selection during index/bulk operations in Elasticsearch version 6.8.6. In my cluster, I have three data nodes: A, B, and C. The shards (with no replicas) are evenly allocated across the… --- ## [Logstash performance issues](https://discuss.elastic.co/t/logstash-performance-issues/327679)
**Author:** [@AKAM14](https://discuss.elastic.co/u/AKAM14)\ **Replies:** 9\ **Last updated:** [March 16, 2023, 1:50pm UTC](https://discuss.elastic.co/t/logstash-performance-issues/327679 "2023-03-16T13:50:28Z")
Hi , I Have a Logstash 7.17 version , i have two logstash servers in my Setup that gets connected to a 3 node ELK Cluster. One Kibana server We are experiencing less data getting populated in the kibana dashboards. wh… --- ## [Customer-Specific Data Access in Elasticsearch for Integrated Kibana Dashboards](https://discuss.elastic.co/t/customer-specific-data-access-in-elasticsearch-for-integrated-kibana-dashboards/354295)
**Author:** [@Usama\_Tariq](https://discuss.elastic.co/u/Usama_Tariq)\ **Replies:** 9\ **Last updated:** [March 1, 2024, 11:06am UTC](https://discuss.elastic.co/t/customer-specific-data-access-in-elasticsearch-for-integrated-kibana-dashboards/354295 "2024-03-01T11:06:43Z")
Hello Elastic Community, Our data model in Elasticsearch contains orders data from various brands. Our goal is to seamlessly embed the Kibana dashboard into our web application while ensuring that users do not encounter… --- ## [Kibana unable to parse syslog logs](https://discuss.elastic.co/t/kibana-unable-to-parse-syslog-logs/330972)
**Author:** [@ishan.abhinit](https://discuss.elastic.co/u/ishan.abhinit)\ **Replies:** 9\ **Last updated:** [May 1, 2023, 3:52pm UTC](https://discuss.elastic.co/t/kibana-unable-to-parse-syslog-logs/330972 "2023-05-01T15:52:33Z")
I have a text file which contains data in the below format (syslog). Oct 9 2019 23:39:37 myrtle sshd\[41925\]: pam\_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.49.202.135 user=… --- ## [ES indexing speed decreases substantially while doing refresh](https://discuss.elastic.co/t/es-indexing-speed-decreases-substantially-while-doing-refresh/11202)
**Author:** [@shadyabhi](https://discuss.elastic.co/u/shadyabhi)\ **Replies:** 9\ **Last updated:** [March 21, 2013, 3:52pm UTC](https://discuss.elastic.co/t/es-indexing-speed-decreases-substantially-while-doing-refresh/11202 "2013-03-21T15:52:00Z")
Hi, While indexes are being refreshed (checked it via hot\_threads) , indexing speed decreases substantially. Is there a way I can schedule refreshes? Also, my ES logs are occasionally filled with this (keeps gett… --- ## [Scrolling API Seems Inconsistent](https://discuss.elastic.co/t/scrolling-api-seems-inconsistent/377763)
**Author:** [@Moose](https://discuss.elastic.co/u/Moose)\ **Replies:** 10\ **Last updated:** [May 14, 2025, 10:03pm UTC](https://discuss.elastic.co/t/scrolling-api-seems-inconsistent/377763 "2025-05-14T22:03:10Z")
I'm using the .NET NEST client in my Azure function to retrieve data from our Elastic account. Some of the SearchAsync requests I make exceed the 10,000 search result limit and as such I have to use the ScrollAsync reque… --- ## [Logstash date filter](https://discuss.elastic.co/t/logstash-date-filter/340427)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 10\ **Last updated:** [August 9, 2023, 8:29am UTC](https://discuss.elastic.co/t/logstash-date-filter/340427 "2023-08-09T08:29:42Z")
Hi i have a short\_date field in the following format 09/Aug/2023:12:44:15 +0530 This field is created as text. To convert it to date i am doing the following date { match =\> \[ "short\_date", "dd/MMM/yyyy… --- ## [Where the conditional goes?](https://discuss.elastic.co/t/where-the-conditional-goes/208960)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 9\ **Last updated:** [November 21, 2019, 8:07pm UTC](https://discuss.elastic.co/t/where-the-conditional-goes/208960 "2019-11-21T20:07:42Z")
where in the file a conditional that check if a field contains certain string, and if contains it, drop the log, goes? it goes after the grok? it contains the grok? it goes in the output? The following code doesnt work… --- ## [Facet sort does not work?](https://discuss.elastic.co/t/facet-sort-does-not-work/356650)
**Author:** [@Deshant\_Pandit](https://discuss.elastic.co/u/Deshant_Pandit)\ **Replies:** 10\ **Last updated:** [April 4, 2024, 1:31pm UTC](https://discuss.elastic.co/t/facet-sort-does-not-work/356650 "2024-04-04T13:31:02Z")
export function buildFacetConfigFromConfig() { const config = getConfig(); const facets = (config.facets || \[\]).reduce((acc, n) =\> { acc = acc || {}; acc\[n\] = { "sort": { "value": "asc" }, // this is f… --- ## [Logstash: MalformedCSVError](https://discuss.elastic.co/t/logstash-malformedcsverror/340330)
**Author:** [@benhartwich](https://discuss.elastic.co/u/benhartwich)\ **Replies:** 9\ **Last updated:** [August 8, 2023, 8:20pm UTC](https://discuss.elastic.co/t/logstash-malformedcsverror/340330 "2023-08-08T20:20:56Z")
Hi, can anybody help me to find the right mutate =\> gsub definition to avoid these warnings / errors: \[WARN \] 2023-08-08 07:05:15.003 \[\[main\]\>worker20\] csv - Error parsing csv {:field=\>"message", :source=\>"16600,26200,… --- ## [Issue while upgrading elasticsearch from 7.17.3 to 8.5.1](https://discuss.elastic.co/t/issue-while-upgrading-elasticsearch-from-7-17-3-to-8-5-1/368214)
**Author:** [@VR29](https://discuss.elastic.co/u/VR29)\ **Replies:** 13\ **Last updated:** [October 22, 2024, 12:54pm UTC](https://discuss.elastic.co/t/issue-while-upgrading-elasticsearch-from-7-17-3-to-8-5-1/368214 "2024-10-22T12:54:32Z")
I'm trying to upgrade elasticsearch from 7.17.3 to 8.5.1, but it is throwing an error: "error.type":"java.lang.IllegalArgumentException". This is my yaml: Full Error: {"@timestamp":"2024-09-27T04:37:48.833Z", "log.… --- ## [Regarding visualization created for status code monitoring](https://discuss.elastic.co/t/regarding-visualization-created-for-status-code-monitoring/356393)
**Author:** [@vaishnavi1](https://discuss.elastic.co/u/vaishnavi1)\ **Replies:** 10\ **Last updated:** [April 3, 2024, 10:18am UTC](https://discuss.elastic.co/t/regarding-visualization-created-for-status-code-monitoring/356393 "2024-04-03T10:18:21Z")
We have created visualization for status code monitoring, for 15 days its showing 99.99 % and for 30 days' timeframe it is showing 100. query is that why it's not showing other status code rather than 401 and 400. --- ## [Joining node to cluster - what am I doing wrong?](https://discuss.elastic.co/t/joining-node-to-cluster-what-am-i-doing-wrong/356817)
**Author:** [@artschooldropout](https://discuss.elastic.co/u/artschooldropout)\ **Replies:** 12\ **Last updated:** [April 5, 2024, 2:48pm UTC](https://discuss.elastic.co/t/joining-node-to-cluster-what-am-i-doing-wrong/356817 "2024-04-05T14:48:03Z")
We have an existing cluster consisting of a single node. We would like to add another node to the cluster. Both nodes are running Elasticsearch 8.13. We followed the instructions in here, and additionally here. After c… --- ## [Data Storage](https://discuss.elastic.co/t/data-storage/314846)
**Author:** [@ibtissem\_Ben\_lafi](https://discuss.elastic.co/u/ibtissem_Ben_lafi)\ **Replies:** 12\ **Last updated:** [September 22, 2022, 2:01pm UTC](https://discuss.elastic.co/t/data-storage/314846 "2022-09-22T14:01:19Z")
Hello eveyone, I have an issue: The size of the data is not the same in MySQL and Elasticsearch . What can I do for this problem? Someone help me, please --- ## [Ingest json file containing several json objects (one per line) sent from java (over http) to logstash to elasticsearch](https://discuss.elastic.co/t/ingest-json-file-containing-several-json-objects-one-per-line-sent-from-java-over-http-to-logstash-to-elasticsearch/363478)
**Author:** [@taykara](https://discuss.elastic.co/u/taykara)\ **Replies:** 11\ **Last updated:** [July 20, 2024, 6:35pm UTC](https://discuss.elastic.co/t/ingest-json-file-containing-several-json-objects-one-per-line-sent-from-java-over-http-to-logstash-to-elasticsearch/363478 "2024-07-20T18:35:42Z")
Hi there, I'm very very new to ELK and I am facing an issue. I try to send a json file containing several json object (one per line) from a Java application to logstash. Here is the file I send over http post request … --- ## [My Elasticsearch experiences freezing 3 to 4 times a day](https://discuss.elastic.co/t/my-elasticsearch-experiences-freezing-3-to-4-times-a-day/346438)
**Author:** [@ihatecrypto](https://discuss.elastic.co/u/ihatecrypto)\ **Replies:** 9\ **Last updated:** [November 6, 2023, 8:39pm UTC](https://discuss.elastic.co/t/my-elasticsearch-experiences-freezing-3-to-4-times-a-day/346438 "2023-11-06T20:39:49Z")
Hello everyone, I'm currently facing an issue that's not well defined. . The freezing periods last approximately 30 to 60 seconds. During these periods, I'm unable to query it using Kibana or the Nodejs client. I've… --- ## [My Timestamp in audit log using SYSLOG input plugin not in correct format](https://discuss.elastic.co/t/my-timestamp-in-audit-log-using-syslog-input-plugin-not-in-correct-format/351127)
**Author:** [@Subrato1](https://discuss.elastic.co/u/Subrato1)\ **Replies:** 9\ **Last updated:** [January 19, 2024, 7:07pm UTC](https://discuss.elastic.co/t/my-timestamp-in-audit-log-using-syslog-input-plugin-not-in-correct-format/351127 "2024-01-19T19:07:22Z")
Configuration is below : input { syslog { port =\> 5514 type =\> "scylladb" } } filter { if \[type\] == "scylladb" { grok{ match =\> {"message" =\> "%{IP:server\_ip}:%{DATA:server\_port},\\s%{DATA:categ… --- ## [Speed indexing](https://discuss.elastic.co/t/speed-indexing/317295)
**Author:** [@Julie\_Montels](https://discuss.elastic.co/u/Julie_Montels)\ **Replies:** 9\ **Last updated:** [October 25, 2022, 2:03pm UTC](https://discuss.elastic.co/t/speed-indexing/317295 "2022-10-25T14:03:18Z")
Hello, When pushing our data to Elastic (we made sequential batches of 100), it takes a lot of time even for a small amount of data (24h for 1.5Million documents). Is it normal ? What do you recommend to speed the ind… --- ## [Spotting Anamolies from Log Data](https://discuss.elastic.co/t/spotting-anamolies-from-log-data/363727)
**Author:** [@robin2](https://discuss.elastic.co/u/robin2)\ **Replies:** 16\ **Last updated:** [August 12, 2024, 9:13am UTC](https://discuss.elastic.co/t/spotting-anamolies-from-log-data/363727 "2024-08-12T09:13:59Z")
I have the Elk framework setup on my local system with Kibana running on my localhost. I am able to view the logs on Kibana dashboard with the time range. Then I activated a trial license for a month to use the Machine L… --- ## [Very slow Get API requests on 0.18.5](https://discuss.elastic.co/t/very-slow-get-api-requests-on-0-18-5/6056)
**Author:** [@colinsurprenant](https://discuss.elastic.co/u/colinsurprenant)\ **Replies:** 10\ **Last updated:** [December 9, 2011, 9:57pm UTC](https://discuss.elastic.co/t/very-slow-get-api-requests-on-0-18-5/6056 "2011-12-09T21:57:20Z")
Hi, I am noticing \*very\* slow (timing out) Get API requests on my 0.18.5 cluster. These are simple http://{host}/{index}/{type}/{id} requests. Everything else is flowing, bulk inserts, search requests, etc. Absolut… --- ## [Slow Metricbeats dashboard](https://discuss.elastic.co/t/slow-metricbeats-dashboard/359538)
**Author:** [@SamehSaeed](https://discuss.elastic.co/u/SamehSaeed)\ **Replies:** 9\ **Last updated:** [May 26, 2024, 8:19am UTC](https://discuss.elastic.co/t/slow-metricbeats-dashboard/359538 "2024-05-26T08:19:36Z")
Hello, I'm currently using Metricbeats system dashboards to monitor machine hardware usage (CPU, memory ....etc). At first it was working fine when we had like 3 - 4 machines sending metrics, then as we installed metric… --- ## [Logstahs Filter](https://discuss.elastic.co/t/logstahs-filter/289078)
**Author:** [@John\_snow](https://discuss.elastic.co/u/John_snow)\ **Replies:** 9\ **Last updated:** [November 16, 2021, 5:57pm UTC](https://discuss.elastic.co/t/logstahs-filter/289078 "2021-11-16T17:57:46Z")
Can we apply 2 filter in 1 logstash conf file. I wanted to parse 1 log twice and send the message to multiple outputs. e-g 1 filter to remove some fields and send the message to output 2nd filter doing another check an… --- ## [Circuit breaker in Elasticsearch](https://discuss.elastic.co/t/circuit-breaker-in-elasticsearch/349508)
**Author:** [@pksinghal](https://discuss.elastic.co/u/pksinghal)\ **Replies:** 9\ **Last updated:** [December 17, 2023, 5:01pm UTC](https://discuss.elastic.co/t/circuit-breaker-in-elasticsearch/349508 "2023-12-17T17:01:15Z")
we are running an Elasticsearch cluster with 3 nodes. sometimes a heavy agg query comes(run manually from Kibana dev tools) and one of the nodes becomes inaccessible. So full cluster becomes inaccessible as ES takes so… --- ## [Char\_filter doesn't work properly](https://discuss.elastic.co/t/char-filter-doesnt-work-properly/339218)
**Author:** [@Vladimir\_Talabko](https://discuss.elastic.co/u/Vladimir_Talabko)\ **Replies:** 12\ **Last updated:** [July 27, 2023, 8:01am UTC](https://discuss.elastic.co/t/char-filter-doesnt-work-properly/339218 "2023-07-27T08:01:25Z")
Hello! I have an index with a char\_filter for avoiding special symbols like "-\_.": curl -X PUT "localhost:9200/test\_index?pretty" -H 'Content-Type: application/json' -d' { "settings": { "analysis": { … --- ## [Metrics system overview dashboard redirects to a 404 Dashboard not found page in Kibana](https://discuss.elastic.co/t/metrics-system-overview-dashboard-redirects-to-a-404-dashboard-not-found-page-in-kibana/351033)
**Author:** [@Patr123](https://discuss.elastic.co/u/Patr123)\ **Replies:** 10\ **Last updated:** [January 19, 2024, 2:22pm UTC](https://discuss.elastic.co/t/metrics-system-overview-dashboard-redirects-to-a-404-dashboard-not-found-page-in-kibana/351033 "2024-01-19T14:22:04Z")
Hello, We are using Kibana v8.10.4 and have installed elastic agent on one linux and a windows system. I do see logs/metrics coming in and see the dashboard visualizations getting populated for the Metrics system overv… --- ## [Filebeat ignoring closing bracket {](https://discuss.elastic.co/t/filebeat-ignoring-closing-bracket/348312)
**Author:** [@Venkata\_Raja](https://discuss.elastic.co/u/Venkata_Raja)\ **Replies:** 9\ **Last updated:** [November 30, 2023, 3:06pm UTC](https://discuss.elastic.co/t/filebeat-ignoring-closing-bracket/348312 "2023-11-30T15:06:19Z")
Hi Team,, I have a multiline JSON message in a file , I used custom log integration to parse it with below multiline config. multiline: match: after negate: true pattern: '^{' I was getting all the data except last… --- ## [V 8.5.0 update - boolean field not working in donut lens anymore](https://discuss.elastic.co/t/v-8-5-0-update-boolean-field-not-working-in-donut-lens-anymore/318949)
**Author:** [@mayer](https://discuss.elastic.co/u/mayer)\ **Replies:** 11\ **Last updated:** [November 30, 2022, 5:20pm UTC](https://discuss.elastic.co/t/v-8-5-0-update-boolean-field-not-working-in-donut-lens-anymore/318949 "2022-11-30T17:20:39Z")
Dear All, recently I updated to version 8.5.0 Since that time a donut lens isn't working. This mapping for this donat is defined with "bq\_DMZ": { "type": "boolean" }, With logstash I am importing the d… --- ## [Logstash filter mutate problem](https://discuss.elastic.co/t/logstash-filter-mutate-problem/339690)
**Author:** [@pero](https://discuss.elastic.co/u/pero)\ **Replies:** 12\ **Last updated:** [July 31, 2023, 3:01pm UTC](https://discuss.elastic.co/t/logstash-filter-mutate-problem/339690 "2023-07-31T15:01:14Z")
I have created a filter as shown below filter { if \[application\] == "today" { if field1 { mutate { add\_field =\> { mynewfield =\> "%{\[field1\]}" } … --- ## [Cannot restart(Stop and start) Logstash](https://discuss.elastic.co/t/cannot-restart-stop-and-start-logstash/378550)
**Author:** [@Clinton\_Pillay](https://discuss.elastic.co/u/Clinton_Pillay)\ **Replies:** 9\ **Last updated:** [May 27, 2025, 6:58pm UTC](https://discuss.elastic.co/t/cannot-restart-stop-and-start-logstash/378550 "2025-05-27T18:58:30Z")
So I start my logstash conf file, which works great and does exactly what I want it to do. I run iy by manually running: logstash -f csvedit.conf which runs logstash using my .conf file. I stop this script by pressing … --- ## [Performance problem](https://discuss.elastic.co/t/performance-problem/358502)
**Author:** [@bbreer](https://discuss.elastic.co/u/bbreer)\ **Replies:** 10\ **Last updated:** [April 30, 2024, 6:36pm UTC](https://discuss.elastic.co/t/performance-problem/358502 "2024-04-30T18:36:06Z")
I'm trying to figure why our cluster seems to be pertually maxed out. Nnode 3 does the majority of the ingesting and is consistently around 90 - 95% CPU utilization. The other two nodes vary from 30 - 85% CPU utilizatio… --- ## [Index Space Utilization On Elastic Nodes](https://discuss.elastic.co/t/index-space-utilization-on-elastic-nodes/355323)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 13\ **Last updated:** [March 22, 2024, 5:01pm UTC](https://discuss.elastic.co/t/index-space-utilization-on-elastic-nodes/355323 "2024-03-22T17:01:05Z")
Hi Team, In one of our elastic cluster having two nodes, created index with shards 6 and replica 0. In that index we had loaded a file of size is 1.1 GB. While checking the index size by using OS command in two nodes … --- ## [What does this error mean - Data too large, data for \[\\]](https://discuss.elastic.co/t/what-does-this-error-mean-data-too-large-data-for-transport-request/209345)
**Author:** [@Dmitry1](https://discuss.elastic.co/u/Dmitry1)\ **Replies:** 7\ **Last updated:** [September 4, 2021, 3:38am UTC](https://discuss.elastic.co/t/what-does-this-error-mean-data-too-large-data-for-transport-request/209345 "2021-09-04T03:38:37Z")
Hello, please explain me what this error mean ? And what I need to do to get rid of it : \[2019-11-25T00:20:58,521\]\[WARN \]\[o.e.x.m.e.l.LocalExporter\] \[host\] unexpected error while indexing monitoring document org.elastic… --- ## [Unable to get RUM Agent working](https://discuss.elastic.co/t/unable-to-get-rum-agent-working/359950)
**Author:** [@Eric-Domeier](https://discuss.elastic.co/u/Eric-Domeier)\ **Replies:** 10\ **Last updated:** [May 24, 2024, 7:09pm UTC](https://discuss.elastic.co/t/unable-to-get-rum-agent-working/359950 "2024-05-24T19:09:10Z")
Course: Elastic Observability Version: 8.2.3 Question: When attempting to follow section 3.4, I am unable to get the RUM agent to work properly, step 11 "You should see petclinic-react" appear in services, but it neve… --- ## [Filebeat's logs doesn't create](https://discuss.elastic.co/t/filebeats-logs-doesnt-create/316710)
**Author:** [@sevbans](https://discuss.elastic.co/u/sevbans)\ **Replies:** 10\ **Last updated:** [October 17, 2022, 6:40pm UTC](https://discuss.elastic.co/t/filebeats-logs-doesnt-create/316710 "2022-10-17T18:40:02Z")
This is my current configuration file. filebeat.inputs: - type: log enabled: true paths: - /var/log/\*.log output.elasticsearch: hosts: \["localhost:9200"\] username: "elastic" password: "1" enabled: false… --- ## [How to parse date field into @timestamp](https://discuss.elastic.co/t/how-to-parse-date-field-into-timestamp/349849)
**Author:** [@emoxam](https://discuss.elastic.co/u/emoxam)\ **Replies:** 11\ **Last updated:** [December 22, 2023, 2:26pm UTC](https://discuss.elastic.co/t/how-to-parse-date-field-into-timestamp/349849 "2023-12-22T14:26:55Z")
I want to move the fulltime from message field to @timestamp. That's what i created. filter { if \[message\] =~ /actions/ { json { source =\> "message" } date { match =\> \[ "message", "yyyy-MM-dd … --- ## [Starting Point to Tune Logstash](https://discuss.elastic.co/t/starting-point-to-tune-logstash/379301)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 9\ **Last updated:** [July 4, 2025, 7:10am UTC](https://discuss.elastic.co/t/starting-point-to-tune-logstash/379301 "2025-07-04T07:10:25Z")
Hi there i have a dedicated logstash machine with 16 cores and 32 Gb RAM and multiple pipelines inside it. There are 3 heavy pipelines(complex filters and high event rate). what is a good starting point to make a globa… --- ## [Setting up 3 node cluster for first time and getting errors](https://discuss.elastic.co/t/setting-up-3-node-cluster-for-first-time-and-getting-errors/378775)
**Author:** [@IamGuna](https://discuss.elastic.co/u/IamGuna)\ **Replies:** 12\ **Last updated:** [June 6, 2025, 1:24pm UTC](https://discuss.elastic.co/t/setting-up-3-node-cluster-for-first-time-and-getting-errors/378775 "2025-06-06T13:24:22Z")
I am trying to setup a 3 node cluster on RHEL 8.10 VMs with elasticsearch-8.18.1-linux-x86\_64.tar.gz. The ES\_JAVA\_HOME is configured with jdk-21.0.5 I have followed the steps from Set up HTTPS | Elastic Docs and generat… --- ## [What's next?](https://discuss.elastic.co/t/whats-next/3976)
**Author:** [@Berkay\_Mollamustafao](https://discuss.elastic.co/u/Berkay_Mollamustafao)\ **Replies:** 11\ **Last updated:** [February 28, 2011, 10:44am UTC](https://discuss.elastic.co/t/whats-next/3976 "2011-02-28T10:44:30Z")
Shay, Any hints on what's coming down the pipe, and when you think/hope/plan to have a 1.0 release? Regards, Berkay Mollamustafaoglu mberkay on yahoo, google and skype --- ## [Question about spring-elasticsearch](https://discuss.elastic.co/t/question-about-spring-elasticsearch/11191)
**Author:** [@yahia](https://discuss.elastic.co/u/yahia)\ **Replies:** 10\ **Last updated:** [March 19, 2013, 9:00am UTC](https://discuss.elastic.co/t/question-about-spring-elasticsearch/11191 "2013-03-19T09:00:03Z")
Hi all i use spring-elasticsearch, I want to know the documents indexed by this factory where they are stored ?? -- You received this message because you are subscribed to the Google Groups "elasticsearch" grou… --- ## [Fingerprint for json does not get resolved](https://discuss.elastic.co/t/fingerprint-for-json-does-not-get-resolved/346772)
**Author:** [@ranjini](https://discuss.elastic.co/u/ranjini)\ **Replies:** 9\ **Last updated:** [November 9, 2023, 5:12pm UTC](https://discuss.elastic.co/t/fingerprint-for-json-does-not-get-resolved/346772 "2023-11-09T17:12:08Z")
fingerprint for json is not working input { file { path =\> "/shared/logs/logi2/stats.\*" start\_position =\> "beginning" sincedb\_path =\> "/shared/logs/.sincedb" type =\> "logi2-stats" … --- ## [Calling Elastic search from remote server via https](https://discuss.elastic.co/t/calling-elastic-search-from-remote-server-via-https/330254)
**Author:** [@neil.maffitt](https://discuss.elastic.co/u/neil.maffitt)\ **Replies:** 12\ **Last updated:** [April 22, 2023, 10:48am UTC](https://discuss.elastic.co/t/calling-elastic-search-from-remote-server-via-https/330254 "2023-04-22T10:48:37Z")
This works fine on local machine curl --cacert /etc/elasticsearch/certs/http\_ca.crt -u elastic: https://localhost:9200 This does not work remotely curl --cacert /etc/elasticsearch/certs/http\_ca.crt -u elastic: https:/… --- ## [\[search\_phase\_execution\_exception\] without a root reason](https://discuss.elastic.co/t/search-phase-execution-exception-without-a-root-reason/382922)
**Author:** [@al123od](https://discuss.elastic.co/u/al123od)\ **Replies:** 10\ **Last updated:** [October 23, 2025, 2:20pm UTC](https://discuss.elastic.co/t/search-phase-execution-exception-without-a-root-reason/382922 "2025-10-23T14:20:37Z")
Hello. I’m using Elasticsearch 9.1.3, access with java client (no security, almost all setting but cluster name are default). If to execute query\_string query with wrong syntax like GET test/\_search { "query": {… --- ## [Kafka logstash logs are showing into filebeat logstash index](https://discuss.elastic.co/t/kafka-logstash-logs-are-showing-into-filebeat-logstash-index/337419)
**Author:** [@lalchand\_rajak](https://discuss.elastic.co/u/lalchand_rajak)\ **Replies:** 10\ **Last updated:** [July 14, 2023, 2:27pm UTC](https://discuss.elastic.co/t/kafka-logstash-logs-are-showing-into-filebeat-logstash-index/337419 "2023-07-14T14:27:36Z")
Hello, I have kafka-logstash conf and logstash reciveing the logs from kafka. here is the config. input { kafka { topics =\> \["sitlogtopic","locallogtopic"\] bootstrap\_servers =\> "ddr-kafkadev.pvt.cci… --- ## [RabbitMQ plugin filebeat questions](https://discuss.elastic.co/t/rabbitmq-plugin-filebeat-questions/361791)
**Author:** [@robbyq92](https://discuss.elastic.co/u/robbyq92)\ **Replies:** 9\ **Last updated:** [June 26, 2024, 2:41pm UTC](https://discuss.elastic.co/t/rabbitmq-plugin-filebeat-questions/361791 "2024-06-26T14:41:28Z")
I have a filebeat configured to pull data from a Rabbitmq with its module. Now on the official website it only gives var.paths: Question, if my Rabbitmq has a username and password and is on a host (ip or url) how do I … [Previous page](https://discuss.elastic.co/top.md?page=242&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=244&per_page=50&period=all)