# Top **URL:** https://discuss.elastic.co/top.md?page=275&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 276 --- ## [How to Fix Unallocated Shards?](https://discuss.elastic.co/t/how-to-fix-unallocated-shards/72434)
**Author:** [@Siva\_Sai](https://discuss.elastic.co/u/Siva_Sai)\ **Replies:** 8\ **Last updated:** [January 24, 2017, 7:27pm UTC](https://discuss.elastic.co/t/how-to-fix-unallocated-shards/72434 "2017-01-24T19:27:44Z")
now stuck at 75.2% curl -XGET -u elastic:changeme 'localhost:9200/\_cat/health?pretty' 1484915420 12:30:20 elasticsearch red 5 5 5656 2828 0 0 1870 0 - 75.2% I can't fix it - tried to restore many times - gets up to 67.… --- ## [Logstash can't read files ( Permission denied )](https://discuss.elastic.co/t/logstash-cant-read-files-permission-denied/53728)
**Author:** [@kayyazka](https://discuss.elastic.co/u/kayyazka)\ **Replies:** 5\ **Last updated:** [July 1, 2016, 1:37am UTC](https://discuss.elastic.co/t/logstash-cant-read-files-permission-denied/53728 "2016-07-01T01:37:21Z")
Hi All, I have problem about Logstash,. Log from logstash.log {:timestamp=\>"2016-06-23T09:17:41.150000+0700", :message=\>"failed to open /var/log/messages: Permission denied - /var/log/messages", :level=\>:warn} {:ti… --- ## [RestHighLevelClient - Accessing an elastic http endpoint behind reverse proxy](https://discuss.elastic.co/t/resthighlevelclient-accessing-an-elastic-http-endpoint-behind-reverse-proxy/117306)
**Author:** [@missourian](https://discuss.elastic.co/u/missourian)\ **Replies:** 2\ **Last updated:** [January 30, 2018, 4:46am UTC](https://discuss.elastic.co/t/resthighlevelclient-accessing-an-elastic-http-endpoint-behind-reverse-proxy/117306 "2018-01-30T04:46:31Z")
My elasticsearch http endpoint has been fronted with a corporate reverse proxy and also it has a path prefix. I am in the process of migrating from Transport client to HighLevelHttpClient can someone help me how to conf… --- ## [How to use filebeat fields name value in logstash config](https://discuss.elastic.co/t/how-to-use-filebeat-fields-name-value-in-logstash-config/79791)
**Author:** [@Jayanna\_Hallur](https://discuss.elastic.co/u/Jayanna_Hallur)\ **Replies:** 4\ **Last updated:** [April 4, 2017, 6:37pm UTC](https://discuss.elastic.co/t/how-to-use-filebeat-fields-name-value-in-logstash-config/79791 "2017-04-04T18:37:36Z")
Hi All Below are my config files for 2 filebeats & logstash.. I set the fields index=my\_data\_1 in filebeat config. & send to logstash.. in the logstash i want use the value passed in fields.index from filebeat to use… --- ## [Metrics Beat](https://discuss.elastic.co/t/metrics-beat/1495)
**Author:** [@webmat](https://discuss.elastic.co/u/webmat)\ **Replies:** 7\ **Last updated:** [June 2, 2015, 12:06pm UTC](https://discuss.elastic.co/t/metrics-beat/1495 "2015-06-02T12:06:37Z")
More general than Graphite Beat, I would suggest a beat that can generate metrics and send it to Logstash (which can in turn send it to Graphite / Influx / OpenTSDB / other). I love the nagios / sensu model of simply h… --- ## [How to move the data from one index to another](https://discuss.elastic.co/t/how-to-move-the-data-from-one-index-to-another/37317)
**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\ **Replies:** 6\ **Last updated:** [January 2, 2016, 7:33pm UTC](https://discuss.elastic.co/t/how-to-move-the-data-from-one-index-to-another/37317 "2016-01-02T19:33:28Z")
Hi , I have few queries regarding the es : (1) : can we move the data from one index to another : - I have some data in one index called latest-index and after some action triggered from back-end , I want to move my… --- ## [Head plugin](https://discuss.elastic.co/t/head-plugin/143829)
**Author:** [@Arun\_Murugappan](https://discuss.elastic.co/u/Arun_Murugappan)\ **Replies:** 3\ **Last updated:** [August 11, 2018, 9:29am UTC](https://discuss.elastic.co/t/head-plugin/143829 "2018-08-11T09:29:09Z")
Head plugin is used to check the status of the cluster (servers/indices/ shards). Are they up and running? But this is not supported in elasticsearch 5.x. Are there alternatives to serve the same purpose? --- ## [Elastic Python API Authentication](https://discuss.elastic.co/t/elastic-python-api-authentication/58887)
**Author:** [@pstarconsult](https://discuss.elastic.co/u/pstarconsult)\ **Replies:** 8\ **Last updated:** [August 26, 2016, 8:12am UTC](https://discuss.elastic.co/t/elastic-python-api-authentication/58887 "2016-08-26T08:12:29Z")
I have installed elasticsearch Python library into my PyCharm IDE and using sample code found at link below: https://elasticsearch-py.readthedocs.io/en/master/ (see Example Usage) I am getting the following error an… --- ## [\[s3\_repository\] path is not accessible on master node](https://discuss.elastic.co/t/s3-repository-path-is-not-accessible-on-master-node/111570)
**Author:** [@clk2018](https://discuss.elastic.co/u/clk2018)\ **Replies:** 1\ **Last updated:** [December 13, 2017, 7:54pm UTC](https://discuss.elastic.co/t/s3-repository-path-is-not-accessible-on-master-node/111570 "2017-12-13T19:54:56Z")
My EC2 elasticsearch 2.4.6 cluster (hosted on amazon east data center) is having issues with the aws-cloud 2.4.6 plugin, I have configured my elasticsearch.yml file as instructed by configuration . cloud: aws: access\_… --- ## [Elastic Search Version Conflict](https://discuss.elastic.co/t/elastic-search-version-conflict/249699)
**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\ **Replies:** 7\ **Last updated:** [September 25, 2020, 5:49am UTC](https://discuss.elastic.co/t/elastic-search-version-conflict/249699 "2020-09-25T05:49:00Z")
I am using an elastic search for search purpose. But recently I observer that some random error while adding data into elastic search. The error looks like: version conflict, required seqNo \[113789\], primary term \[19\]. … --- ## [Docker image for Elasticsearch - Raspberry PI](https://discuss.elastic.co/t/docker-image-for-elasticsearch-raspberry-pi/249584)
**Author:** [@javidr](https://discuss.elastic.co/u/javidr)\ **Replies:** 0\ **Last updated:** [September 22, 2020, 9:09pm UTC](https://discuss.elastic.co/t/docker-image-for-elasticsearch-raspberry-pi/249584 "2020-09-22T21:09:38Z")
Hi I did open a topic the other day asking for support to run ELK in a raspberry pi and i had little support there. For me this is a great functionality for pi so i was surprised to see so little info about it I have c… --- ## [Filebeat exclude line not working :(](https://discuss.elastic.co/t/filebeat-exclude-line-not-working/113358)
**Author:** [@funtimes](https://discuss.elastic.co/u/funtimes)\ **Replies:** 6\ **Last updated:** [January 3, 2018, 11:13pm UTC](https://discuss.elastic.co/t/filebeat-exclude-line-not-working/113358 "2018-01-03T23:13:43Z")
Hello all! I've tried doing the best I can and research on my issue, however everything i've tried and research doesn't seem to work :frowning: Was hoping somebody on here might be able to help me out. I have a very si… --- ## [Is there a reason not to use NOTSPACE pattern in Grok](https://discuss.elastic.co/t/is-there-a-reason-not-to-use-notspace-pattern-in-grok/62442)
**Author:** [@anhlqn](https://discuss.elastic.co/u/anhlqn)\ **Replies:** 2\ **Last updated:** [October 7, 2016, 6:24pm UTC](https://discuss.elastic.co/t/is-there-a-reason-not-to-use-notspace-pattern-in-grok/62442 "2016-10-07T18:24:36Z")
I have written some grok patterns to parse Barracuda Spam Firewall Mail log. I initially used patterns like NUMBER, IPORHOST, WORD.It turned out that some number fields contained a - or some weird characters, so I replac… --- ## [Exiting: error unpacking config data: more than one namespace configured accessing 'output' (source:'filebeat.yml')](https://discuss.elastic.co/t/exiting-error-unpacking-config-data-more-than-one-namespace-configured-accessing-output-source-filebeat-yml/240640)
**Author:** [@Bhavin\_Varsur](https://discuss.elastic.co/u/Bhavin_Varsur)\ **Replies:** 7\ **Last updated:** [July 16, 2020, 2:04pm UTC](https://discuss.elastic.co/t/exiting-error-unpacking-config-data-more-than-one-namespace-configured-accessing-output-source-filebeat-yml/240640 "2020-07-16T14:04:00Z")
when i enable elasticsearch output and logstash output in filebeat.yml i get this error. Exiting: error unpacking config data: more than one namespace configured accessing 'output' (source:'filebeat.yml') please give m… --- ## [How to filter json log file in logstash and send it to elastic search](https://discuss.elastic.co/t/how-to-filter-json-log-file-in-logstash-and-send-it-to-elastic-search/155981)
**Author:** [@Jin1129](https://discuss.elastic.co/u/Jin1129)\ **Replies:** 4\ **Last updated:** [November 9, 2018, 7:44am UTC](https://discuss.elastic.co/t/how-to-filter-json-log-file-in-logstash-and-send-it-to-elastic-search/155981 "2018-11-09T07:44:50Z")
This is my json log file. I'm trying to store the file to my elastic-Search through my logstash. { "id": "135569", "title" : "Star Trek Beyond", "year":2016 , "genre": \["Action", "Adventure", "Sci-Fi"\] } after… --- ## [What is difference in Basic and open source type license?](https://discuss.elastic.co/t/what-is-difference-in-basic-and-open-source-type-license/184313)
**Author:** [@sanntosh](https://discuss.elastic.co/u/sanntosh)\ **Replies:** 1\ **Last updated:** [June 5, 2019, 9:33am UTC](https://discuss.elastic.co/t/what-is-difference-in-basic-and-open-source-type-license/184313 "2019-06-05T09:33:44Z")
What is difference between Basic and Open Source type license ? Why Basic license when Open Source is there ? Can we deploy commercially using open source license ? And will security be free with that starting 7.1.1 ev… --- ## [Storing binary files in Elastic](https://discuss.elastic.co/t/storing-binary-files-in-elastic/63078)
**Author:** [@stevenmwall](https://discuss.elastic.co/u/stevenmwall)\ **Replies:** 7\ **Last updated:** [October 19, 2016, 4:34pm UTC](https://discuss.elastic.co/t/storing-binary-files-in-elastic/63078 "2016-10-19T16:34:15Z")
For my project, I have two requirements regarding documents (i.e. the actual binaries): be able to search the text within the document binary; and allow the user to download the document after I display the search res… --- ## [Data Retention](https://discuss.elastic.co/t/data-retention/81629)
**Author:** [@saad](https://discuss.elastic.co/u/saad)\ **Replies:** 6\ **Last updated:** [April 11, 2017, 1:59am UTC](https://discuss.elastic.co/t/data-retention/81629 "2017-04-11T01:59:56Z")
Hi, How can I assign the data retention in elasticsearch for example 3 months. Regards --- ## [10 billion records writen to ES ervery day,how many nodes and hardware should need?](https://discuss.elastic.co/t/10-billion-records-writen-to-es-ervery-day-how-many-nodes-and-hardware-should-need/45307)
**Author:** [@kewn21](https://discuss.elastic.co/u/kewn21)\ **Replies:** 6\ **Last updated:** [March 24, 2016, 9:19pm UTC](https://discuss.elastic.co/t/10-billion-records-writen-to-es-ervery-day-how-many-nodes-and-hardware-should-need/45307 "2016-03-24T21:19:41Z")
100 thousand records per second writen in realtime from log files.Why has some suggest or experience? --- ## [Logstash SNMP Interface Monitoring Configuration with Bandwidth Utilization Calculation](https://discuss.elastic.co/t/logstash-snmp-interface-monitoring-configuration-with-bandwidth-utilization-calculation/372068)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 0\ **Last updated:** [December 17, 2024, 12:34pm UTC](https://discuss.elastic.co/t/logstash-snmp-interface-monitoring-configuration-with-bandwidth-utilization-calculation/372068 "2024-12-17T12:34:45Z")
Hi everyone, I'd like to share my Logstash configuration for monitoring network interfaces via SNMP with bandwidth utilization calculation. This configuration collects interface statistics from network devices (tested w… --- ## [Syntax to specify multiple hosts using ELASTICSEARCH\_HOSTS env?](https://discuss.elastic.co/t/syntax-to-specify-multiple-hosts-using-elasticsearch-hosts-env/221306)
**Author:** [@Supermathie](https://discuss.elastic.co/u/Supermathie)\ **Replies:** 8\ **Last updated:** [March 27, 2020, 7:30pm UTC](https://discuss.elastic.co/t/syntax-to-specify-multiple-hosts-using-elasticsearch-hosts-env/221306 "2020-03-27T19:30:22Z")
follow-up to: https://discuss.elastic.co/t/kibana-docker-list-multiple-es-hosts/189594?u=supermathie I have tried various values for this environment variable: http://elasticsearch-1:9200,http://elasticsearch-2:9200,ht… --- ## [Can't start service elasticsearch](https://discuss.elastic.co/t/cant-start-service-elasticsearch/100570)
**Author:** [@TK\_CyberOne](https://discuss.elastic.co/u/TK_CyberOne)\ **Replies:** 6\ **Last updated:** [September 20, 2017, 4:30am UTC](https://discuss.elastic.co/t/cant-start-service-elasticsearch/100570 "2017-09-20T04:30:04Z")
\[root@localhost ~\]# systemctl status elasticsearch ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; disabled; vendor preset: disabled) Active: failed (Result: exi… --- ## [Aggregation Query possible input ES plugin](https://discuss.elastic.co/t/aggregation-query-possible-input-es-plugin/28159)
**Author:** [@Jungmi\_Yoo](https://discuss.elastic.co/u/Jungmi_Yoo)\ **Replies:** 3\ **Last updated:** [July 20, 2016, 9:07pm UTC](https://discuss.elastic.co/t/aggregation-query-possible-input-es-plugin/28159 "2016-07-20T21:07:22Z")
I really want to know that aggregation is possible in input / output plugin ? input { # Read all documents from Elasticsearch matching the given query elasticsearch { hosts =\> \["192.168.1.5"\] index =\> "m… --- ## [Help on: Can't get text on a START\_OBJECT](https://discuss.elastic.co/t/help-on-cant-get-text-on-a-start-object/172193)
**Author:** [@mobidyc](https://discuss.elastic.co/u/mobidyc)\ **Replies:** 7\ **Last updated:** [March 15, 2019, 8:39pm UTC](https://discuss.elastic.co/t/help-on-cant-get-text-on-a-start-object/172193 "2019-03-15T20:39:56Z")
Hello, I know it is a widely discussed subject but I don't know understand how to solve it. from what I understood, it is a conflict between the filebeat mapping and my template, but I just can't rename the conflictin… --- ## [Logstash error with elasticsearch output plugin - Unrecognized SSL message](https://discuss.elastic.co/t/logstash-error-with-elasticsearch-output-plugin-unrecognized-ssl-message/175695)
**Author:** [@HaranKumar](https://discuss.elastic.co/u/HaranKumar)\ **Replies:** 1\ **Last updated:** [April 7, 2019, 6:07am UTC](https://discuss.elastic.co/t/logstash-error-with-elasticsearch-output-plugin-unrecognized-ssl-message/175695 "2019-04-07T06:07:46Z")
Hello Team, I am getting unrecognised SSL error when i use elasticsearch output pipeline in my logstash located in different machine. I am using another logstash in my elasticsearch machine and it is indexing data prop… --- ## [Setting up SSL in Kibana - Permissions Error](https://discuss.elastic.co/t/setting-up-ssl-in-kibana-permissions-error/100926)
**Author:** [@r\_garrett](https://discuss.elastic.co/u/r_garrett)\ **Replies:** 2\ **Last updated:** [September 19, 2017, 1:37pm UTC](https://discuss.elastic.co/t/setting-up-ssl-in-kibana-permissions-error/100926 "2017-09-19T13:37:49Z")
Hey, I am trying to setup SSL with Kibana, and am running into an odd permission error. It is an RPM install on Linux and I am using the same file for Elasticsearch and it is working without issue. Error received when… --- ## [ES fails to delete index](https://discuss.elastic.co/t/es-fails-to-delete-index/52757)
**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\ **Replies:** 1\ **Last updated:** [June 15, 2016, 4:28pm UTC](https://discuss.elastic.co/t/es-fails-to-delete-index/52757 "2016-06-15T16:28:15Z")
Hey guys, I'm trying to delete an index, and it doesn't seem to be working. This is the message I'm seeing in the terminal when I run the delete command: curl -uadmin:$ES\_PASS logs.example.com:9200/topbeat--2016.06… --- ## [Maximum document size](https://discuss.elastic.co/t/maximum-document-size/13086)
**Author:** [@Antonios\_Giannopoulo](https://discuss.elastic.co/u/Antonios_Giannopoulo)\ **Replies:** 4\ **Last updated:** [August 8, 2013, 6:25am UTC](https://discuss.elastic.co/t/maximum-document-size/13086 "2013-08-08T06:25:53Z")
I am new to ES, and i made a search the past days to determine if there is a limitation on the size of a single document (i know from mongo that a single document can't exceed 16 MB). I didn't found any relevant topi… --- ## [Logging from within Ruby Filter](https://discuss.elastic.co/t/logging-from-within-ruby-filter/127983)
**Author:** [@Shaoranlaos](https://discuss.elastic.co/u/Shaoranlaos)\ **Replies:** 2\ **Last updated:** [April 18, 2018, 8:44am UTC](https://discuss.elastic.co/t/logging-from-within-ruby-filter/127983 "2018-04-18T08:44:23Z")
Hello, is it possible to write to the logfile of Logstash from within the Rubyfilter? And when yes how? Thanks in advance --- ## [SSL certificate error - no cipher suites in common](https://discuss.elastic.co/t/ssl-certificate-error-no-cipher-suites-in-common/27311)
**Author:** [@Babadofar](https://discuss.elastic.co/u/Babadofar)\ **Replies:** 7\ **Last updated:** [November 1, 2015, 10:49pm UTC](https://discuss.elastic.co/t/ssl-certificate-error-no-cipher-suites-in-common/27311 "2015-11-01T22:49:17Z")
Using an SSL certificate issued by Comodo, I get this error \[2015-08-13 09:10:41,902\]\[WARN \]\[shield.transport.netty \] \[-es-1\] exception caught on transport layer \[\[id: 0xcc16773e, /10.87.80.15:58445 =\> /10.87.80.15:9… --- ## [Monitoring restore progress in Elasticsearch](https://discuss.elastic.co/t/monitoring-restore-progress-in-elasticsearch/58166)
**Author:** [@turena](https://discuss.elastic.co/u/turena)\ **Replies:** 5\ **Last updated:** [August 18, 2016, 2:17pm UTC](https://discuss.elastic.co/t/monitoring-restore-progress-in-elasticsearch/58166 "2016-08-18T14:17:41Z")
This question deals with getting progress percentage during snapshot restore. I know we can use the RecoveryRequest java API to get totalRecoveredBytes, totalRecoveredFiles, recoveredBytePercent, etc. during the yellow … --- ## [How to paging the buckets after aggregation](https://discuss.elastic.co/t/how-to-paging-the-buckets-after-aggregation/154577)
**Author:** [@iamazy](https://discuss.elastic.co/u/iamazy)\ **Replies:** 6\ **Last updated:** [November 15, 2018, 8:58am UTC](https://discuss.elastic.co/t/how-to-paging-the-buckets-after-aggregation/154577 "2018-11-15T08:58:12Z")
I remove the duplicate result and got the final result of this format, how to paging ths buckets ? "aggregations": { "ip\_aggs": { "doc\_count\_error\_upper\_bound": 1391, "sum\_other\_doc\_count": 5071763, … --- ## [Metricbeat SSL to Elastic Setup](https://discuss.elastic.co/t/metricbeat-ssl-to-elastic-setup/244024)
**Author:** [@PiperMp3](https://discuss.elastic.co/u/PiperMp3)\ **Replies:** 1\ **Last updated:** [August 7, 2020, 11:15am UTC](https://discuss.elastic.co/t/metricbeat-ssl-to-elastic-setup/244024 "2020-08-07T11:15:52Z")
Hello, I'm about to lose my mind and scratch ELK all together due to this problem. Let me start with explaining the goal. There are 3 VMs. 2 are public VPS' and 1 is a local VM. All are Ubuntu 20.04. I will call th… --- ## [Kibana server is not ready yet issue after upgrade to 6.5.0](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-issue-after-upgrade-to-6-5-0/157021)
**Author:** [@nuwan](https://discuss.elastic.co/u/nuwan)\ **Replies:** 7\ **Last updated:** [December 20, 2018, 6:22pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-issue-after-upgrade-to-6-5-0/157021 "2018-12-20T18:22:29Z")
Since last night I experience the error message "Kibana server is not ready yet" in the browser when I want to open Kibana. I have upgrade kibana and Elasticsearch to V 6.5.0 . I've done a lot of research, but I can't … --- ## [Set default column to display only a specific field under \_source](https://discuss.elastic.co/t/set-default-column-to-display-only-a-specific-field-under--source/84449)
**Author:** [@jriver](https://discuss.elastic.co/u/jriver)\ **Replies:** 7\ **Last updated:** [May 3, 2017, 7:07pm UTC](https://discuss.elastic.co/t/set-default-column-to-display-only-a-specific-field-under--source/84449 "2017-05-03T19:07:00Z")
Hi, We are new to Kibana and the ELK stack, and are trying to mold the Kibana interface to our desired use case. One of the things we are trying to do it cleanup the "noise" that is displayed by default (all the infor… --- ## [View a Kibana dashboard without login](https://discuss.elastic.co/t/view-a-kibana-dashboard-without-login/164822)
**Author:** [@tonybh](https://discuss.elastic.co/u/tonybh)\ **Replies:** 3\ **Last updated:** [January 18, 2019, 4:48pm UTC](https://discuss.elastic.co/t/view-a-kibana-dashboard-without-login/164822 "2019-01-18T16:48:56Z")
Is it possible to set up a Kibana dashboard so that it can be embedded in an IFrame on my website and not require the user to log in to Kibana to view it? I'm running Kibana version 6.5.4 Thanks. --- ## ["The bulk request must be terminated by a newline \[\\\\n\]"](https://discuss.elastic.co/t/the-bulk-request-must-be-terminated-by-a-newline-n/179081)
**Author:** [@Miao](https://discuss.elastic.co/u/Miao)\ **Replies:** 3\ **Last updated:** [April 30, 2019, 4:36pm UTC](https://discuss.elastic.co/t/the-bulk-request-must-be-terminated-by-a-newline-n/179081 "2019-04-30T16:36:10Z")
I have found similar questions both here as well as on StackOverflow, but unfortunately none of the answers helped. I am currently using ElasticSearch 7.0. I want to make a bulk request to my ElasticSearch server. My J… --- ## [Kibana - server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/181035)
**Author:** [@decodeit](https://discuss.elastic.co/u/decodeit)\ **Replies:** 8\ **Last updated:** [May 15, 2019, 1:55am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/181035 "2019-05-15T01:55:26Z")
I have two containers one for each elasticsearch and kibana. started elasticsearch as : docker start elasticsearch I go to localhost:9200 I can see elasticsearch is running up. now I do docker start kibana I type ki… --- ## [Turning Monitor with Metricbeat on (Metricbeat -\> ElasticSearch)](https://discuss.elastic.co/t/turning-monitor-with-metricbeat-on-metricbeat-elasticsearch/229632)
**Author:** [@tjmartins](https://discuss.elastic.co/u/tjmartins)\ **Replies:** 2\ **Last updated:** [May 20, 2020, 4:59pm UTC](https://discuss.elastic.co/t/turning-monitor-with-metricbeat-on-metricbeat-elasticsearch/229632 "2020-05-20T16:59:34Z")
Hi all, I'm trying to turning my "Monitor with Metricbeat" on but i'm getting the following errors: - From Metricbeat log: Apr 24 12:06:40 l-qa-bes48 metricbeat\[47280\]: 2020-04-24T12:06:40.332+0100 INFO … --- ## [Metricbeat 8.11.0 - system module using excessive amount of memory](https://discuss.elastic.co/t/metricbeat-8-11-0-system-module-using-excessive-amount-of-memory/347236)
**Author:** [@twilson](https://discuss.elastic.co/u/twilson)\ **Replies:** 4\ **Last updated:** [November 20, 2023, 4:51pm UTC](https://discuss.elastic.co/t/metricbeat-8-11-0-system-module-using-excessive-amount-of-memory/347236 "2023-11-20T16:51:43Z")
I'm using the system integration with the Elastic agent and have the ' Collect metrics from System instances' option enabled, with all the default datasets within that selected. With the 8.11.0 version of this integrati… --- ## [Prefix vs Wildcard vs Regexp in terms of performance and usability](https://discuss.elastic.co/t/prefix-vs-wildcard-vs-regexp-in-terms-of-performance-and-usability/98460)
**Author:** [@BentCoder](https://discuss.elastic.co/u/BentCoder)\ **Replies:** 1\ **Last updated:** [September 1, 2017, 12:38pm UTC](https://discuss.elastic.co/t/prefix-vs-wildcard-vs-regexp-in-terms-of-performance-and-usability/98460 "2017-09-01T12:38:54Z")
Hi, I have queries below which work like SELECT \* FROM table WHERE raw.name LIKE 'Product1\*'. I just want to find out which one would be the best in terms of performance and usability? Thanks {"query":{"prefix":{"name… --- ## [Indexing and Searching XML documents](https://discuss.elastic.co/t/indexing-and-searching-xml-documents/22725)
**Author:** [@Venkat\_Ankam](https://discuss.elastic.co/u/Venkat_Ankam)\ **Replies:** 4\ **Last updated:** [March 18, 2015, 7:06pm UTC](https://discuss.elastic.co/t/indexing-and-searching-xml-documents/22725 "2015-03-18T19:06:31Z")
I have a requirement to index and search millions of XML documents related to mortgage (Uniform Closing Dataset XMLs). Indexed data will be requested by a web services of many internal applications through REST API.… --- ## [Cannot execute binary file](https://discuss.elastic.co/t/cannot-execute-binary-file/59942)
**Author:** [@lunar](https://discuss.elastic.co/u/lunar)\ **Replies:** 2\ **Last updated:** [September 9, 2016, 8:17am UTC](https://discuss.elastic.co/t/cannot-execute-binary-file/59942 "2016-09-09T08:17:01Z")
I have tried all version binary of kibana from the download page, but none of them can start. The error is "/node/bin/node: cannot execute binary file", please help me. thank you! --- ## [Need configuration to send JSON string to ELK server through Filebeat](https://discuss.elastic.co/t/need-configuration-to-send-json-string-to-elk-server-through-filebeat/72493)
**Author:** [@Honda\_fred\_elk](https://discuss.elastic.co/u/Honda_fred_elk)\ **Replies:** 7\ **Last updated:** [January 25, 2017, 7:31pm UTC](https://discuss.elastic.co/t/need-configuration-to-send-json-string-to-elk-server-through-filebeat/72493 "2017-01-25T19:31:01Z")
Hello, I am trying to export log message (JSON) from client side log to ELK Server through FileBeat. My custom log (log4j) will produce JSON output in a file through log4j.RollingFileAppender. I know, I have to have… --- ## [UDP listener died (SYSLOG) when running as a service](https://discuss.elastic.co/t/udp-listener-died-syslog-when-running-as-a-service/128890)
**Author:** [@packetferret](https://discuss.elastic.co/u/packetferret)\ **Replies:** 5\ **Last updated:** [April 20, 2018, 8:18pm UTC](https://discuss.elastic.co/t/udp-listener-died-syslog-when-running-as-a-service/128890 "2018-04-20T20:18:30Z")
Hello and thanks for taking a moment of your time to read over this. I am running Logstash as a collector for SYSLOG messages from networking equipment. Executing the binary while pointing to the configuration file with… --- ## [Failed to connect to 127.0.0.1: Cannot assign requested address](https://discuss.elastic.co/t/failed-to-connect-to-127-0-0-1-cannot-assign-requested-address/9320)
**Author:** [@Martin\_Rode](https://discuss.elastic.co/u/Martin_Rode)\ **Replies:** 8\ **Last updated:** [February 6, 2013, 12:44pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-127-0-0-1-cannot-assign-requested-address/9320 "2013-02-06T12:44:56Z")
Hi everybody, I am testing elasticsearch since a while and all the sudden today, I am getting a weird error without having changed anything. My PHP script indexes ~ 180k documents, and currently stops reliably a… --- ## [Dec 10th, 2018: \[EN\]\[Elastic Stack\] Correlate and Alert for Security Analytics](https://discuss.elastic.co/t/dec-10th-2018-en-elastic-stack-correlate-and-alert-for-security-analytics/159612)
**Author:** [@Sherry\_Ger](https://discuss.elastic.co/u/Sherry_Ger)\ **Replies:** 0\ **Last updated:** [December 10, 2018, 12:00am UTC](https://discuss.elastic.co/t/dec-10th-2018-en-elastic-stack-correlate-and-alert-for-security-analytics/159612 "2018-12-10T00:00:03Z")
Security analytics is a common use case for the Elastic Stack. In this short topic, we will set up a rule based alert that triggers a notification when network or log events correlate with indicators of compromise. We wo… --- ## [How to conditionally set the type?](https://discuss.elastic.co/t/how-to-conditionally-set-the-type/32862)
**Author:** [@WoJ](https://discuss.elastic.co/u/WoJ)\ **Replies:** 5\ **Last updated:** [October 23, 2015, 5:24pm UTC](https://discuss.elastic.co/t/how-to-conditionally-set-the-type/32862 "2015-10-23T17:24:31Z")
Hello I am new to logstash (using logstash 2.0 beta) so please bear with me. I have log files in a JSON format similar to {"TAGS":".source.s\_src","SOURCEIP":"127.0.0.1","SEQNUM":"2","PROGRAM":"logstash","PRIORITY":"inf… --- ## [Show multi-metric machine learning job heatmap in Dashoard](https://discuss.elastic.co/t/show-multi-metric-machine-learning-job-heatmap-in-dashoard/142774)
**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\ **Replies:** 3\ **Last updated:** [August 13, 2018, 11:14am UTC](https://discuss.elastic.co/t/show-multi-metric-machine-learning-job-heatmap-in-dashoard/142774 "2018-08-13T11:14:16Z")
Hello, Can we illustrate multi-metric ml job heatmap in Dashoard? I have read through the forum and I tried to create a heatmap or swimlane but I cannot see the values of anomaly score when I split the data (e.g. by pr… --- ## [Visualization between two indexes](https://discuss.elastic.co/t/visualization-between-two-indexes/75854)
**Author:** [@fetch](https://discuss.elastic.co/u/fetch)\ **Replies:** 8\ **Last updated:** [February 27, 2017, 8:41am UTC](https://discuss.elastic.co/t/visualization-between-two-indexes/75854 "2017-02-27T08:41:24Z")
Hello, I have two indexes - "logstash-\*" and let's call it "myindex". The first one contains basic information I need. It has the following fields related to my question: "timestamp" "event" - string field "myinfo"… [Previous page](https://discuss.elastic.co/top.md?page=274&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=276&per_page=50&period=all)