# Top **URL:** https://discuss.elastic.co/top.md?page=301&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 302 --- ## [Kibana4: How to set "EventTime" as time field instead of @timestamp](https://discuss.elastic.co/t/kibana4-how-to-set-eventtime-as-time-field-instead-of-timestamp/25693)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 6\ **Last updated:** [July 17, 2015, 6:40am UTC](https://discuss.elastic.co/t/kibana4-how-to-set-eventtime-as-time-field-instead-of-timestamp/25693 "2015-07-17T06:40:59Z")
Hi, I am using Kibana4. I have one customized time field in db ("EventTime") and @timestamp as default entry time. EventTime the timestamp when even was created in the log file at source. I want EventTime as timefiled so… --- ## [Escape double quotes - query error with curl](https://discuss.elastic.co/t/escape-double-quotes-query-error-with-curl/166139)
**Author:** [@sabdoul](https://discuss.elastic.co/u/sabdoul)\ **Replies:** 4\ **Last updated:** [January 29, 2019, 10:37am UTC](https://discuss.elastic.co/t/escape-double-quotes-query-error-with-curl/166139 "2019-01-29T10:37:42Z")
Hello, I have my request below that works in Kibana DevTools that I also want to run with curl: curl -XGET "http://localhost:9200/"index-"$(date -d "yesterday" '+%Y.%m.%d')/\_search" -H'Content-Type: application/json' … --- ## [Adding Image to the Markdown of Kibana dashboard](https://discuss.elastic.co/t/adding-image-to-the-markdown-of-kibana-dashboard/192992)
**Author:** [@samnayak](https://discuss.elastic.co/u/samnayak)\ **Replies:** 5\ **Last updated:** [July 31, 2019, 5:08pm UTC](https://discuss.elastic.co/t/adding-image-to-the-markdown-of-kibana-dashboard/192992 "2019-07-31T17:08:55Z")
Hi All, Can I include an image in the markdown for Kibana dashboard? My image source is either from a local computer or the internet. Thank you! --- ## [Logstash Plugin for Cloudwatch logs](https://discuss.elastic.co/t/logstash-plugin-for-cloudwatch-logs/125677)
**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\ **Replies:** 5\ **Last updated:** [March 29, 2018, 5:33pm UTC](https://discuss.elastic.co/t/logstash-plugin-for-cloudwatch-logs/125677 "2018-03-29T17:33:03Z")
Hi, I am trying to integrate AWS Lambda logs onto ELK Stack. My AWS Lambda is writing logs into Cloudwatch logs. I am trying to get this data into logstash using logstash-input-cloudwatch plugin. But, having difficulti… --- ## [Getting authentication error](https://discuss.elastic.co/t/getting-authentication-error/123258)
**Author:** [@Bharathkumarraju](https://discuss.elastic.co/u/Bharathkumarraju)\ **Replies:** 8\ **Last updated:** [March 12, 2018, 9:35am UTC](https://discuss.elastic.co/t/getting-authentication-error/123258 "2018-03-12T09:35:05Z")
I am installing elasticsearch freshly and installed x-pack as well. It is elasticsearch6.2.1 test@test\[~\] $ curl -XPOST -u elastic -ks 'https://10.192.87.187:9200/\_xpack/security/user/elastic/\_password' -H 'Content-Type… --- ## ["object mapping for \[host\] tried to parse field \[host\] as object, but found a concrete value"](https://discuss.elastic.co/t/object-mapping-for-host-tried-to-parse-field-host-as-object-but-found-a-concrete-value/141761)
**Author:** [@Marcos\_Felix](https://discuss.elastic.co/u/Marcos_Felix)\ **Replies:** 6\ **Last updated:** [July 27, 2018, 2:32pm UTC](https://discuss.elastic.co/t/object-mapping-for-host-tried-to-parse-field-host-as-object-but-found-a-concrete-value/141761 "2018-07-27T14:32:24Z")
I am getting this error on my logstash log: "object mapping for \[host\] tried to parse field \[host\] as object, but found a concrete value" this started happening when I tried to log the syslog coming from fortigate, her… --- ## [Error connecting to Kibana](https://discuss.elastic.co/t/error-connecting-to-kibana/184294)
**Author:** [@Min\_Mah](https://discuss.elastic.co/u/Min_Mah)\ **Replies:** 5\ **Last updated:** [June 7, 2019, 7:17am UTC](https://discuss.elastic.co/t/error-connecting-to-kibana/184294 "2019-06-07T07:17:03Z")
Hi, when i was typing metricbeat setup then this error appear \[root@localhost share\]# metricbeat setup Index setup complete. Loading dashboards (Kibana must be running and reachable) Exiting: error connecting t… --- ## [Elasticsearch 2.1.0 and 2.0.1 released](https://discuss.elastic.co/t/elasticsearch-2-1-0-and-2-0-1-released/35478)
**Author:** [@Clinton\_Gormley](https://discuss.elastic.co/u/Clinton_Gormley)\ **Replies:** 0\ **Last updated:** [November 24, 2015, 6:42pm UTC](https://discuss.elastic.co/t/elasticsearch-2-1-0-and-2-0-1-released/35478 "2015-11-24T18:42:07Z")
Today we are pleased to announce the release of Elasticsearch 2.1.0 based on Lucene 5.3.1 and a bug fix release of Elasticsearch 2.0.1. Latest stable release: Download Elasticsearch 2.1.0 Release notes for Elas… --- ## [Match query with "operator":"and" via the Java API](https://discuss.elastic.co/t/match-query-with-operator-and-via-the-java-api/67863)
**Author:** [@jenamon](https://discuss.elastic.co/u/jenamon)\ **Replies:** 3\ **Last updated:** [December 2, 2016, 9:01pm UTC](https://discuss.elastic.co/t/match-query-with-operator-and-via-the-java-api/67863 "2016-12-02T21:01:09Z")
This is in the Elasticsearch documentation. I want to do this via the java API. GET /\_search { "query": { "match" : { "message" : { "query" : "this is a test", "o… --- ## [How to retrieve the raw documents](https://discuss.elastic.co/t/how-to-retrieve-the-raw-documents/116056)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 5\ **Last updated:** [February 2, 2018, 8:41am UTC](https://discuss.elastic.co/t/how-to-retrieve-the-raw-documents/116056 "2018-02-02T08:41:15Z")
Hi All, I have query with regards to raw documents, for example if we send syslogs, netflow data, firewall logs and windows event logs, we can either send it via logstash or directly elasticsearch. If we send through l… --- ## [ERR Kafka (topic={topic}): dropping too large message of size](https://discuss.elastic.co/t/err-kafka-topic-topic-dropping-too-large-message-of-size/109560)
**Author:** [@olololll](https://discuss.elastic.co/u/olololll)\ **Replies:** 2\ **Last updated:** [November 30, 2017, 9:03am UTC](https://discuss.elastic.co/t/err-kafka-topic-topic-dropping-too-large-message-of-size/109560 "2017-11-30T09:03:25Z")
Im using Filebeat(5.6.3) connecting to Kafka(0.10.2.1). However, i got an error as below in filebeat: \> 2017-11-29T17:12:28+08:00 ERR Kafka (topic=message): dropping too large message of large size 3038538. It means i… --- ## [Nodejs Agent NestJS and Typeorm](https://discuss.elastic.co/t/nodejs-agent-nestjs-and-typeorm/164171)
**Author:** [@Juan\_Colo](https://discuss.elastic.co/u/Juan_Colo)\ **Replies:** 6\ **Last updated:** [January 15, 2019, 9:00pm UTC](https://discuss.elastic.co/t/nodejs-agent-nestjs-and-typeorm/164171 "2019-01-15T21:00:34Z")
Hello everyone, I'm currently testing the NodeJs APM agent. I did a basic integration of the agent in my NestJS API, but the automatic registration request transactions did not work. Therefore, create a custom intercept… --- ## [Not an SSL/TLS record when Enable SSL/TLS for HTTP](https://discuss.elastic.co/t/not-an-ssl-tls-record-when-enable-ssl-tls-for-http/202477)
**Author:** [@rambo](https://discuss.elastic.co/u/rambo)\ **Replies:** 7\ **Last updated:** [October 7, 2019, 8:55am UTC](https://discuss.elastic.co/t/not-an-ssl-tls-record-when-enable-ssl-tls-for-http/202477 "2019-10-07T08:55:17Z")
Hi team, I want to configure Elasticsearch for SAML authentication when I follow below official link: https://www.elastic.co/guide/en/elastic-stack-overview/6.7/saml-guide-authentication.html#saml-guide-authentication, … --- ## [ILM policy being over written](https://discuss.elastic.co/t/ilm-policy-being-over-written/188582)
**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\ **Replies:** 7\ **Last updated:** [July 10, 2019, 11:55pm UTC](https://discuss.elastic.co/t/ilm-policy-being-over-written/188582 "2019-07-10T23:55:44Z")
Hi This is a basic question. But can you please clarify. I have a setting in my file beat configuration. setup.ilm.enabled: auto # Configure the ILM write alias name. setup.ilm.rollover\_alias: "metricbeat" # Configu… --- ## [Current license is non-compliant for \[security\]](https://discuss.elastic.co/t/current-license-is-non-compliant-for-security/137272)
**Author:** [@stevizik](https://discuss.elastic.co/u/stevizik)\ **Replies:** 3\ **Last updated:** [July 4, 2018, 7:54am UTC](https://discuss.elastic.co/t/current-license-is-non-compliant-for-security/137272 "2018-07-04T07:54:45Z")
Hi all, i have a test Elasticsearch/Kibana installation and on Console giving the command cluster/health returns the following { "error": { "root\_cause": \[ { "type": "security\_exception", "r… --- ## [How many Shards / Replicas](https://discuss.elastic.co/t/how-many-shards-replicas/45545)
**Author:** [@MikeM](https://discuss.elastic.co/u/MikeM)\ **Replies:** 8\ **Last updated:** [March 28, 2016, 7:47pm UTC](https://discuss.elastic.co/t/how-many-shards-replicas/45545 "2016-03-28T19:47:50Z")
I've been reading alot on how many shards / replicas I need, and I'm seeing multiple opinions. We have a 3 node cluster that mainly receives logs through logstash from multiple sources. We have around 30 different t… --- ## [Terms aggregations - Getting a total of each word across all documents](https://discuss.elastic.co/t/terms-aggregations-getting-a-total-of-each-word-across-all-documents/57345)
**Author:** [@markwalsh-liverpool](https://discuss.elastic.co/u/markwalsh-liverpool)\ **Replies:** 8\ **Last updated:** [August 5, 2016, 5:03pm UTC](https://discuss.elastic.co/t/terms-aggregations-getting-a-total-of-each-word-across-all-documents/57345 "2016-08-05T17:03:45Z")
Currently I am performing a terms aggregation like so: "aggs": { "wordcloud": { "terms": { "field": "transcription.raw", "size": 40, } } } I get back results like look like this (for… --- ## [ElasticSearch Query with Powershell Invoke-RestMethod](https://discuss.elastic.co/t/elasticsearch-query-with-powershell-invoke-restmethod/218228)
**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\ **Replies:** 5\ **Last updated:** [February 7, 2020, 5:02am UTC](https://discuss.elastic.co/t/elasticsearch-query-with-powershell-invoke-restmethod/218228 "2020-02-07T05:02:34Z")
Hi- I have a Elastic Search Rest API to query along with range condition, which would need to be executed thru Powershell using Invoke-RestMethod command, but it fails. It works alright using Curl. Curl command: curl … --- ## [Elasticsearch - searching with "keyword" type don't work](https://discuss.elastic.co/t/elasticsearch-searching-with-keyword-type-dont-work/118050)
**Author:** [@Nikita\_Krasnov](https://discuss.elastic.co/u/Nikita_Krasnov)\ **Replies:** 7\ **Last updated:** [February 2, 2018, 9:36am UTC](https://discuss.elastic.co/t/elasticsearch-searching-with-keyword-type-dont-work/118050 "2018-02-02T09:36:43Z")
I use Elasticsearch Java rest client 6.1. When I try to find logs due to a few parametrs than can be in one field I get nothing Here is my code: @Override public SearchResponse findLogsByValues(ElasticSearchLogReq… --- ## [Calculate duration between two events using scripted fields](https://discuss.elastic.co/t/calculate-duration-between-two-events-using-scripted-fields/81814)
**Author:** [@Robert\_Schwerdtner](https://discuss.elastic.co/u/Robert_Schwerdtner)\ **Replies:** 1\ **Last updated:** [April 10, 2017, 2:38pm UTC](https://discuss.elastic.co/t/calculate-duration-between-two-events-using-scripted-fields/81814 "2017-04-10T14:38:51Z")
Hello is it possible to calculate the duration between two events (Dates) while using scripted fields and painless? I tried a lot but I can't get it working. --- ## [Logstash JDBC Plugin Driver Not Loaded Error](https://discuss.elastic.co/t/logstash-jdbc-plugin-driver-not-loaded-error/35000)
**Author:** [@jeromefroe](https://discuss.elastic.co/u/jeromefroe)\ **Replies:** 6\ **Last updated:** [December 2, 2015, 2:05pm UTC](https://discuss.elastic.co/t/logstash-jdbc-plugin-driver-not-loaded-error/35000 "2015-12-02T14:05:08Z")
Hello all, I have been trying to use the jdbc input plugin for logstash but keep getting a driver not loaded error. Specifically, I am using logstash-2.0.0 and the oracle jdbc jar (ojdbc6.jar). I have seen similar issues… --- ## [defaultRoute parameter on Kibana \[7.9.x\]](https://discuss.elastic.co/t/defaultroute-parameter-on-kibana-7-9-x/247529)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 2\ **Last updated:** [September 7, 2020, 5:45am UTC](https://discuss.elastic.co/t/defaultroute-parameter-on-kibana-7-9-x/247529 "2020-09-07T05:45:40Z")
Hi, everyone I have noticed that kibana.defaultAppId is deprecated and will be removed in 8.0. Kibana's documentation inform to use defaultRoute. This parameter can be used on kibana.yml? Thanks in advance, Rodrigo --- ## [Filebeat Failed to connect to backoff(async(tcp:logstash:5044](https://discuss.elastic.co/t/filebeat-failed-to-connect-to-backoff-async-tcp5044/182147)
**Author:** [@hari.v](https://discuss.elastic.co/u/hari.v)\ **Replies:** 2\ **Last updated:** [May 23, 2019, 2:37am UTC](https://discuss.elastic.co/t/filebeat-failed-to-connect-to-backoff-async-tcp5044/182147 "2019-05-23T02:37:21Z")
Hi i tried to setup filebeat 7 in my client server.. log message shows: May 22 22:50:06 beat filebeat: 2019-05-22T22:50:06.108+0800#011ERROR#011pipeline/output.go:100#011Failed to connect to backoff(async(tcp://192.16… --- ## [Let's Encrypt and Filebeat TLS](https://discuss.elastic.co/t/lets-encrypt-and-filebeat-tls/55882)
**Author:** [@Zorlin](https://discuss.elastic.co/u/Zorlin)\ **Replies:** 7\ **Last updated:** [July 20, 2016, 2:57pm UTC](https://discuss.elastic.co/t/lets-encrypt-and-filebeat-tls/55882 "2016-07-20T14:57:35Z")
Hey there, I've been following this guide to get an ELK stack up and running - https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elk-stack-on-ubuntu-14-04 However, I do… --- ## [ISO8601 date format : malformed error message in elasticsearch](https://discuss.elastic.co/t/iso8601-date-format-malformed-error-message-in-elasticsearch/103250)
**Author:** [@ORich](https://discuss.elastic.co/u/ORich)\ **Replies:** 8\ **Last updated:** [October 12, 2017, 8:45am UTC](https://discuss.elastic.co/t/iso8601-date-format-malformed-error-message-in-elasticsearch/103250 "2017-10-12T08:45:57Z")
Dear experts, I am dealing with parsing issues with date format. The date format looks like ISO 8601 : grok filter is perfectly running but no way to keep the log date time stamp as @timestamp in the date section. This … --- ## [ElasticSearch.Net Bulk - JsonParseException\[Unexpected character (',' (code 44)):](https://discuss.elastic.co/t/elasticsearch-net-bulk-jsonparseexception-unexpected-character-code-44/27540)
**Author:** [@Garrett\_Johnson](https://discuss.elastic.co/u/Garrett_Johnson)\ **Replies:** 4\ **Last updated:** [August 20, 2015, 8:43pm UTC](https://discuss.elastic.co/t/elasticsearch-net-bulk-jsonparseexception-unexpected-character-code-44/27540 "2015-08-20T20:43:48Z")
I'm trying to do bulk inserts using ElasticSearch.net but am getting this issue: {"error":"JsonParseException\[Unexpected character (',' (code 44)): expected a valid value (number, String, array, object, 'true', 'false'… --- ## [Safely disable/enable replicas to fix unassigned shards](https://discuss.elastic.co/t/safely-disable-enable-replicas-to-fix-unassigned-shards/151432)
**Author:** [@steven.walsh](https://discuss.elastic.co/u/steven.walsh)\ **Replies:** 3\ **Last updated:** [October 8, 2018, 6:44pm UTC](https://discuss.elastic.co/t/safely-disable-enable-replicas-to-fix-unassigned-shards/151432 "2018-10-08T18:44:44Z")
Hi all, We ran into an issue in our production ELK cluster last Friday. The system has since recovered but is in a yellow state with 778 unassigned shards. I've tried to reroute but the two errors coming back say the ma… --- ## [How to create email notifications in kibana with filters?](https://discuss.elastic.co/t/how-to-create-email-notifications-in-kibana-with-filters/115475)
**Author:** [@Abdul\_Gaffar\_Shaikh](https://discuss.elastic.co/u/Abdul_Gaffar_Shaikh)\ **Replies:** 2\ **Last updated:** [January 17, 2018, 1:30pm UTC](https://discuss.elastic.co/t/how-to-create-email-notifications-in-kibana-with-filters/115475 "2018-01-17T13:30:51Z")
HI Team, I was able to generate email notifications as per the documentation in kibana, however i need to apply some filters before sending them to the respective user. The filter would be to apply hostname to the line… --- ## [Kibana 6.0 - pivot table](https://discuss.elastic.co/t/kibana-6-0-pivot-table/91529)
**Author:** [@ppseal](https://discuss.elastic.co/u/ppseal)\ **Replies:** 6\ **Last updated:** [July 20, 2017, 8:44pm UTC](https://discuss.elastic.co/t/kibana-6-0-pivot-table/91529 "2017-07-20T20:44:43Z")
Hi. In the Kibana 6.0.0. Elastic{ON} video : https://www.elastic.co/elasticon/conf/2017/sf/what-is-cookin-in-kibana Jim Goodwin showed a slide describing the upcoming capabilities and PIVOT table was there. However, I … --- ## [Conditional for empty string in field](https://discuss.elastic.co/t/conditional-for-empty-string-in-field/77182)
**Author:** [@ENG618](https://discuss.elastic.co/u/ENG618)\ **Replies:** 6\ **Last updated:** [March 21, 2017, 4:03pm UTC](https://discuss.elastic.co/t/conditional-for-empty-string-in-field/77182 "2017-03-21T16:03:08Z")
I'm trying to drop logs from the config that contain a field with blank string for a particular field. e.g. if \[foo\] == "" { drop{} } This is not working as when the logs come through it shows as "foo" =\> "\\"\\"" A … --- ## [Elasticsearch DSL: How to use QueryString + Time Range properly?](https://discuss.elastic.co/t/elasticsearch-dsl-how-to-use-querystring-time-range-properly/93566)
**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\ **Replies:** 1\ **Last updated:** [July 18, 2017, 2:36pm UTC](https://discuss.elastic.co/t/elasticsearch-dsl-how-to-use-querystring-time-range-properly/93566 "2017-07-18T14:36:57Z")
I’ve used the search.from\_dict() to construct my query and received my results correctly. es = Elasticsearch() s = Search(using=es, index="logstash-\*") s = s.from\_dict({ "query": { "query\_string": { … --- ## [Elasticsearch started and running, but only for a few seconds](https://discuss.elastic.co/t/elasticsearch-started-and-running-but-only-for-a-few-seconds/153267)
**Author:** [@Karen](https://discuss.elastic.co/u/Karen)\ **Replies:** 6\ **Last updated:** [November 16, 2018, 1:33pm UTC](https://discuss.elastic.co/t/elasticsearch-started-and-running-but-only-for-a-few-seconds/153267 "2018-11-16T13:33:21Z")
I started elasticsearch on ubuntu. When I checked right after started, the status showed as active(running), but after just a few seconds the second status check showed failed. I've tried a few times and it always happen… --- ## [Update document with Logstash without updating the @timestamp](https://discuss.elastic.co/t/update-document-with-logstash-without-updating-the-timestamp/58792)
**Author:** [@rdev](https://discuss.elastic.co/u/rdev)\ **Replies:** 0\ **Last updated:** [August 24, 2016, 9:32am UTC](https://discuss.elastic.co/t/update-document-with-logstash-without-updating-the-timestamp/58792 "2016-08-24T09:32:15Z")
When I update a document through the Update API, I can change and add fields without updating the timestamp. I am now trying to achieve this with Logstash using the Elasticsearch output action "update" with no success. … --- ## [Sincedb files not created](https://discuss.elastic.co/t/sincedb-files-not-created/25542)
**Author:** [@vilas](https://discuss.elastic.co/u/vilas)\ **Replies:** 5\ **Last updated:** [July 15, 2015, 6:12pm UTC](https://discuss.elastic.co/t/sincedb-files-not-created/25542 "2015-07-15T18:12:44Z")
Hi, The following is my sample Logstash configuration for file input: file { path =\> ".../logs/sample.log" start\_position =\> "beginning" type =\> "sample" … --- ## [Dec 16th, 2019: \[DE\]\[Elasticsearch\] Zusammengesetzte Worte in Elasticsearch](https://discuss.elastic.co/t/dec-16th-2019-de-elasticsearch-zusammengesetzte-worte-in-elasticsearch/161003)
**Author:** [@xeraa](https://discuss.elastic.co/u/xeraa)\ **Replies:** 2\ **Last updated:** [December 16, 2018, 4:50pm UTC](https://discuss.elastic.co/t/dec-16th-2019-de-elasticsearch-zusammengesetzte-worte-in-elasticsearch/161003 "2018-12-16T16:50:21Z")
Zusammengesetzte Worte in Elasticsearch Deutsch, Finnisch, Koreanisch und die skandinavischen Sprachen haben die, für Volltextsuche unpraktische, Eigenschaft, dass sie Komposita bilden, also mehrere Worte zu einem kombin… --- ## [How to parse two different kind of format of log files at same time?](https://discuss.elastic.co/t/how-to-parse-two-different-kind-of-format-of-log-files-at-same-time/39512)
**Author:** [@Chi\_Heng\_Chou](https://discuss.elastic.co/u/Chi_Heng_Chou)\ **Replies:** 4\ **Last updated:** [January 21, 2016, 8:33am UTC](https://discuss.elastic.co/t/how-to-parse-two-different-kind-of-format-of-log-files-at-same-time/39512 "2016-01-21T08:33:04Z")
Hello, I have 2 log files need to parse, which are aaa.log and bbb.log. The contents of log files are different and no specific strings to differentiate both of them. So I add type to differentiate them in input. Howev… --- ## [How to apply a kibana dashboard to a different index?](https://discuss.elastic.co/t/how-to-apply-a-kibana-dashboard-to-a-different-index/42108)
**Author:** [@Natarajan\_venkataram](https://discuss.elastic.co/u/Natarajan_venkataram)\ **Replies:** 3\ **Last updated:** [February 18, 2016, 6:57pm UTC](https://discuss.elastic.co/t/how-to-apply-a-kibana-dashboard-to-a-different-index/42108 "2016-02-18T18:57:09Z")
I'm testing kibana with logs, and everytime create a new index ( with same fields), I'm recreating the entire kibana dashboard afresh, which seems to be a duplicate task. Is there any way to apply a dashboard/visualizati… --- ## [Beats from the Open Source Community](https://discuss.elastic.co/t/beats-from-the-open-source-community/32700)
**Author:** [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\ **Replies:** 2\ **Last updated:** [December 5, 2015, 9:47pm UTC](https://discuss.elastic.co/t/beats-from-the-open-source-community/32700 "2015-12-05T21:47:57Z")
We keep a list of Beats that are maintained by the open source community here: https://www.elastic.co/guide/en/beats/libbeat/master/community-beats.html. Edit: replaced the list here with the link to the authoritative… --- ## [Filebeat: Exiting: couldn't connect to any of the configured Elasticsearch hosts](https://discuss.elastic.co/t/filebeat-exiting-couldnt-connect-to-any-of-the-configured-elasticsearch-hosts/297997)
**Author:** [@RomanKau](https://discuss.elastic.co/u/RomanKau)\ **Replies:** 6\ **Last updated:** [March 23, 2022, 8:01am UTC](https://discuss.elastic.co/t/filebeat-exiting-couldnt-connect-to-any-of-the-configured-elasticsearch-hosts/297997 "2022-03-23T08:01:08Z")
Running Windows 10 the Elastic and Kibana as .bat work fine but configuring beats from .zip download fails for me. I run all on the same machine and only changed the .yml file with this guide: Even after a reset to de… --- ## [ElasticSearch as a (reverse) Geocoding tool](https://discuss.elastic.co/t/elasticsearch-as-a-reverse-geocoding-tool/33364)
**Author:** [@karussell](https://discuss.elastic.co/u/karussell)\ **Replies:** 4\ **Last updated:** [October 30, 2015, 2:20pm UTC](https://discuss.elastic.co/t/elasticsearch-as-a-reverse-geocoding-tool/33364 "2015-10-30T14:20:16Z")
Hi all, komoot has build the address search called photon where Sarah from Nominatim, Svantulden from Route.nl, sdole, yohanboniface and I are involved a bit in development. Photon turns OpenStreetMap data into Nominat… --- ## [Ingest vs Data](https://discuss.elastic.co/t/ingest-vs-data/299662)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 3\ **Last updated:** [March 16, 2022, 3:57pm UTC](https://discuss.elastic.co/t/ingest-vs-data/299662 "2022-03-16T15:57:55Z")
I have read the Node Roles documentation, but am still unclear on the difference between the ingest and data roles. In particular, if a node has the data role but not the ingest role, does that mean that incoming data (e… --- ## [Kibana POST 403 (forbidden) on create index](https://discuss.elastic.co/t/kibana-post-403-forbidden-on-create-index/136766)
**Author:** [@databeata](https://discuss.elastic.co/u/databeata)\ **Replies:** 7\ **Last updated:** [June 22, 2018, 4:06pm UTC](https://discuss.elastic.co/t/kibana-post-403-forbidden-on-create-index/136766 "2018-06-22T16:06:22Z")
kibana POST 403 (forbidden) on create index. kibana \> management \> index patterns \> create index pattern index pattern: a\_test\_index nothing happened. index was not created. browser chrome developer tools f12 POST h… --- ## [Elasticsearch 6.0: failed to obtain node locks](https://discuss.elastic.co/t/elasticsearch-6-0-failed-to-obtain-node-locks/110994)
**Author:** [@lanlin](https://discuss.elastic.co/u/lanlin)\ **Replies:** 7\ **Last updated:** [December 20, 2017, 10:14am UTC](https://discuss.elastic.co/t/elasticsearch-6-0-failed-to-obtain-node-locks/110994 "2017-12-20T10:14:56Z")
failed to start multi instance on one server after upgrade from 5.x to 6.0. system: centos 7.4 elasticsearch: 6.0.1 i use the systemd to start elasticsearch, one master node and two data node. it works fine under 5.x… --- ## [@timestamp picked as string instead of date](https://discuss.elastic.co/t/timestamp-picked-as-string-instead-of-date/108876)
**Author:** [@gvdm90](https://discuss.elastic.co/u/gvdm90)\ **Replies:** 7\ **Last updated:** [November 24, 2017, 5:00pm UTC](https://discuss.elastic.co/t/timestamp-picked-as-string-instead-of-date/108876 "2017-11-24T17:00:30Z")
Hi all, I'm using Elasticsearch 6.0.0 and Filebeat 6.0.0 to forward and analyze some JMeter CSV test files. I configured Filebeat to send some CSV data to an Elasticsearch instance through a pipeline, defined this way … --- ## [Kibana 5.4 behind Nginx](https://discuss.elastic.co/t/kibana-5-4-behind-nginx/98114)
**Author:** [@Nikhanj](https://discuss.elastic.co/u/Nikhanj)\ **Replies:** 8\ **Last updated:** [August 28, 2017, 7:18pm UTC](https://discuss.elastic.co/t/kibana-5-4-behind-nginx/98114 "2017-08-28T19:18:37Z")
Hello, I have researched a lot of posts about configuring Kibana 5 behind Nginx, but I am not able to achieve it. I am trying to set up like this : http://myhost/kibana to work. I tried this in kibana.conf location /… --- ## [SYSLOG, convert string message to JSON format](https://discuss.elastic.co/t/syslog-convert-string-message-to-json-format/219490)
**Author:** [@jakemeandi](https://discuss.elastic.co/u/jakemeandi)\ **Replies:** 8\ **Last updated:** [February 19, 2020, 7:01am UTC](https://discuss.elastic.co/t/syslog-convert-string-message-to-json-format/219490 "2020-02-19T07:01:02Z")
Hello all, Please allow me to declare that I am a newbie into logstash filtering (and in coding in general). I am a systems / networks engineer trying to learn something new. That being said, I have set up a 3node ELK… --- ## [Passing variables to ES query](https://discuss.elastic.co/t/passing-variables-to-es-query/46895)
**Author:** [@anon55368183](https://discuss.elastic.co/u/anon55368183)\ **Replies:** 1\ **Last updated:** [April 15, 2016, 11:16am UTC](https://discuss.elastic.co/t/passing-variables-to-es-query/46895 "2016-04-15T11:16:46Z")
Hi, I am searching for a solution to this problem for quite some time and I cannot make it work. I am using es.query to perform an Elasticsearch range query on a date field. GET /index/type/\_search?pretty=true { "… --- ## [Logstash Successfully started but not index in created in Elastic Search](https://discuss.elastic.co/t/logstash-successfully-started-but-not-index-in-created-in-elastic-search/151347)
**Author:** [@Venkatraman\_Muthukri](https://discuss.elastic.co/u/Venkatraman_Muthukri)\ **Replies:** 8\ **Last updated:** [October 16, 2018, 12:25am UTC](https://discuss.elastic.co/t/logstash-successfully-started-but-not-index-in-created-in-elastic-search/151347 "2018-10-16T00:25:05Z")
Hi-All, I am a newbie to logstash, When I tried to dump a csv file data by creating a index through logstash The console output says "\[2018-10-07T16:00:42,081\]\[INFO \]\[logstash.agent \] Successfully started Log… --- ## [Multiple output options in logstash.conf](https://discuss.elastic.co/t/multiple-output-options-in-logstash-conf/259877)
**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\ **Replies:** 8\ **Last updated:** [December 30, 2020, 1:45pm UTC](https://discuss.elastic.co/t/multiple-output-options-in-logstash-conf/259877 "2020-12-30T13:45:54Z")
Hi, I'm trying to come up with a logstash.conf to seperate the indexing method between 2 different sources. One will be daily index and other will be monthly index. I came up with something like this but it didn't work. … --- ## [Shard allocation says max retry but fails to allocate on retry\_failed=true](https://discuss.elastic.co/t/shard-allocation-says-max-retry-but-fails-to-allocate-on-retry-failed-true/170396)
**Author:** [@redcho](https://discuss.elastic.co/u/redcho)\ **Replies:** 6\ **Last updated:** [March 5, 2019, 5:52am UTC](https://discuss.elastic.co/t/shard-allocation-says-max-retry-but-fails-to-allocate-on-retry-failed-true/170396 "2019-03-05T05:52:26Z")
Hey guys, We have a cluster running on version 6.5.4. When we look at the unassigned shards it shows the following shard for example: { "index" : "facebook-post-comment\_v1", "shard" : 3, "primary" : false, "cu… [Previous page](https://discuss.elastic.co/top.md?page=300&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=302&per_page=50&period=all)