# Top **URL:** https://discuss.elastic.co/top.md?page=314&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 315 --- ## [Unable to configure 'x-pack-security' under basic license](https://discuss.elastic.co/t/unable-to-configure-x-pack-security-under-basic-license/194236)
**Author:** [@asad\_ali](https://discuss.elastic.co/u/asad_ali)\ **Replies:** 6\ **Last updated:** [August 8, 2019, 5:54am UTC](https://discuss.elastic.co/t/unable-to-configure-x-pack-security-under-basic-license/194236 "2019-08-08T05:54:13Z")
I'm using ELK 7.1 , I want to configure basic authentication. So far I have performed the following:- curl -u elastic:change http://127.0.0.1:9200/\_security/\_authenticate?pretty { "error" : { "root\_cause" : \[ … --- ## [Elastic search query to check if property is empty/non-empty](https://discuss.elastic.co/t/elastic-search-query-to-check-if-property-is-empty-non-empty/308290)
**Author:** [@newelastic](https://discuss.elastic.co/u/newelastic)\ **Replies:** 1\ **Last updated:** [June 27, 2022, 9:12pm UTC](https://discuss.elastic.co/t/elastic-search-query-to-check-if-property-is-empty-non-empty/308290 "2022-06-27T21:12:14Z")
Hello, I was trying to find out all my documents which has property with empty value or non-empty value. The type of this property is "keyword". I'm using ES 6.8.1 version. I couldn't find anything in the documentation… --- ## [Removing the old reports](https://discuss.elastic.co/t/removing-the-old-reports/215021)
**Author:** [@emnioj](https://discuss.elastic.co/u/emnioj)\ **Replies:** 2\ **Last updated:** [February 6, 2020, 4:58pm UTC](https://discuss.elastic.co/t/removing-the-old-reports/215021 "2020-02-06T16:58:48Z")
Hi Team, i have created so many reports and now would like to delete the old reports. Since i can not find any tab existing to deleting the old reports. Is there any way we could delete the reports only? all these ar… --- ## [Search data in discover tab, then apply unique count to results](https://discuss.elastic.co/t/search-data-in-discover-tab-then-apply-unique-count-to-results/76466)
**Author:** [@darkPotato](https://discuss.elastic.co/u/darkPotato)\ **Replies:** 2\ **Last updated:** [February 28, 2017, 2:22am UTC](https://discuss.elastic.co/t/search-data-in-discover-tab-then-apply-unique-count-to-results/76466 "2017-02-28T02:22:15Z")
I have a saved search in the discover tab that looks like this I am wanting to sort this data based on the unique count of the username field. In this case, because all of the ip's in the data are the same, I want onl… --- ## [XPack Watcher - SSL Error on Slack action](https://discuss.elastic.co/t/xpack-watcher-ssl-error-on-slack-action/119297)
**Author:** [@aaronloesattv](https://discuss.elastic.co/u/aaronloesattv)\ **Replies:** 2\ **Last updated:** [February 9, 2018, 10:28pm UTC](https://discuss.elastic.co/t/xpack-watcher-ssl-error-on-slack-action/119297 "2018-02-09T22:28:18Z")
I'm trying out the slack integration with watcher on our monitoring cluster. sending to slack is failing with the below exception. "sent\_messages": \[ { "status": "failure", "error": { … --- ## [How to split values from a column in a table in Kibana?](https://discuss.elastic.co/t/how-to-split-values-from-a-column-in-a-table-in-kibana/196531)
**Author:** [@whalien52](https://discuss.elastic.co/u/whalien52)\ **Replies:** 6\ **Last updated:** [August 28, 2019, 5:37am UTC](https://discuss.elastic.co/t/how-to-split-values-from-a-column-in-a-table-in-kibana/196531 "2019-08-28T05:37:25Z")
Hi guys, I am trying to visualize a Data Table where there is a field called transactiondata which is a column in the table and the column contains values like Key1:Value1. What I need to do is I need to display only v… --- ## [Deleted Index Patterns, how do i get back up and running?](https://discuss.elastic.co/t/deleted-index-patterns-how-do-i-get-back-up-and-running/129050)
**Author:** [@L33T](https://discuss.elastic.co/u/L33T)\ **Replies:** 6\ **Last updated:** [April 23, 2018, 3:19pm UTC](https://discuss.elastic.co/t/deleted-index-patterns-how-do-i-get-back-up-and-running/129050 "2018-04-23T15:19:33Z")
Hi, I made a silly mistake and removed the index patterns, now when i add them back all my dashboards are broken as is the searches that i had created. Is it possible to fix that and re-associate to the index patterns i… --- ## ["Mapper for \[title\] conflicts..." error message](https://discuss.elastic.co/t/mapper-for-title-conflicts-error-message/47914)
**Author:** [@mbanders](https://discuss.elastic.co/u/mbanders)\ **Replies:** 6\ **Last updated:** [May 3, 2016, 7:59pm UTC](https://discuss.elastic.co/t/mapper-for-title-conflicts-error-message/47914 "2016-05-03T19:59:57Z")
An error message is displayed in the developer console when we visit kibana: https://discuss.elastic.co/t/graphs-not-being-displayed/46604/7?u=mbanders Error: \[illegal\_argument\_exception\] Mapper for \[title\] conflicts … --- ## [Json Input in Kibana](https://discuss.elastic.co/t/json-input-in-kibana/97136)
**Author:** [@Lidiya\_Chernova](https://discuss.elastic.co/u/Lidiya_Chernova)\ **Replies:** 2\ **Last updated:** [August 21, 2017, 11:40am UTC](https://discuss.elastic.co/t/json-input-in-kibana/97136 "2017-08-21T11:40:16Z")
Hi there! How can I use Json Input in visualizations? More than this example: { “script” : “doc\[‘grade’\].value \* 1.2” } I haven’t find. Do you have some more examples of using Json Input? My task: List item I have d… --- ## [Kibana stuck with "Elasticsearch is still initializing the Monitoring indices" error](https://discuss.elastic.co/t/kibana-stuck-with-elasticsearch-is-still-initializing-the-monitoring-indices-error/105480)
**Author:** [@Jeff\_I](https://discuss.elastic.co/u/Jeff_I)\ **Replies:** 4\ **Last updated:** [October 27, 2017, 6:08pm UTC](https://discuss.elastic.co/t/kibana-stuck-with-elasticsearch-is-still-initializing-the-monitoring-indices-error/105480 "2017-10-27T18:08:28Z")
I have booted the es servers and restarted kibana, but in the status break down in kibana has one error: plugin:monitoring@5.6.3 Elasticsearch is still initializing the Monitoring indices Details: Nodes es version 5.… --- ## [APM agent cannot connect to apm server](https://discuss.elastic.co/t/apm-agent-cannot-connect-to-apm-server/217130)
**Author:** [@kumar\_kung](https://discuss.elastic.co/u/kumar_kung)\ **Replies:** 8\ **Last updated:** [January 30, 2020, 12:52pm UTC](https://discuss.elastic.co/t/apm-agent-cannot-connect-to-apm-server/217130 "2020-01-30T12:52:39Z")
Kibana version: 7.5.2 Elasticsearch version: 7.5.2 APM Server version: 7.5.2 \*\*APM Agent language \*\*: java \*Original install method: ECK operator 1.0.0 GA Description of the problem including expected versus actual … --- ## [ELK license model](https://discuss.elastic.co/t/elk-license-model/142147)
**Author:** [@adavous](https://discuss.elastic.co/u/adavous)\ **Replies:** 7\ **Last updated:** [July 31, 2018, 9:57am UTC](https://discuss.elastic.co/t/elk-license-model/142147 "2018-07-31T09:57:47Z")
Sorry to ask about very basic information. Well, I have installed and configured ELK on my own server to ingest and analyze IIS logs and Windows events of few servers. Having a standalone ELK server is filling my needs … --- ## [Kibana 7.5 disable authentication](https://discuss.elastic.co/t/kibana-7-5-disable-authentication/213935)
**Author:** [@J\_Warner](https://discuss.elastic.co/u/J_Warner)\ **Replies:** 8\ **Last updated:** [January 6, 2020, 11:24pm UTC](https://discuss.elastic.co/t/kibana-7-5-disable-authentication/213935 "2020-01-06T23:24:16Z")
Hey I've configured Elasticsearch for Anonymous access which works. but because of this I can't login inside of my kibana instance is there a way to disable the login auth screen for kibana ? --- ## [Basic authentication on ES helm chart](https://discuss.elastic.co/t/basic-authentication-on-es-helm-chart/244337)
**Author:** [@Harsh2](https://discuss.elastic.co/u/Harsh2)\ **Replies:** 8\ **Last updated:** [August 10, 2020, 1:10pm UTC](https://discuss.elastic.co/t/basic-authentication-on-es-helm-chart/244337 "2020-08-10T13:10:25Z")
i want setup basic authentication on helm cluster. helm ES chart using :https://github.com/elastic/helm-charts/tree/master/elasticsearch i am confuse about using setting parameters in elasticsearch.yaml right now i hav… --- ## [How to read emails from Exchange or Outlook to ES or logstash](https://discuss.elastic.co/t/how-to-read-emails-from-exchange-or-outlook-to-es-or-logstash/123945)
**Author:** [@Srikanth\_FT](https://discuss.elastic.co/u/Srikanth_FT)\ **Replies:** 2\ **Last updated:** [March 27, 2018, 10:50am UTC](https://discuss.elastic.co/t/how-to-read-emails-from-exchange-or-outlook-to-es-or-logstash/123945 "2018-03-27T10:50:54Z")
Hi Team, Can someone help me on how can i read Outlook/exchange emails and send them to ES (directly or via logstasth) Thank you --- ## [Check if a field string start with a determinate string](https://discuss.elastic.co/t/check-if-a-field-string-start-with-a-determinate-string/108612)
**Author:** [@mad-max](https://discuss.elastic.co/u/mad-max)\ **Replies:** 5\ **Last updated:** [November 21, 2017, 9:48pm UTC](https://discuss.elastic.co/t/check-if-a-field-string-start-with-a-determinate-string/108612 "2017-11-21T21:48:19Z")
hello to everyone, i want to know how to create a screpted fields. the field is a string and I have to check if it starts with edi. if so the value of the field e EDI else "-". how can I do. I need some help because I'… --- ## [How to filter the logs which has the numeric value greater than specific number in particular field?](https://discuss.elastic.co/t/how-to-filter-the-logs-which-has-the-numeric-value-greater-than-specific-number-in-particular-field/1360)
**Author:** [@selvam](https://discuss.elastic.co/u/selvam)\ **Replies:** 5\ **Last updated:** [May 29, 2015, 4:39am UTC](https://discuss.elastic.co/t/how-to-filter-the-logs-which-has-the-numeric-value-greater-than-specific-number-in-particular-field/1360 "2015-05-29T04:39:44Z")
I am running tomcat service in client. I would like to monitor tomcat access logs and filter the logs which has response time greater than specific number. e.g : I have the tomcat access log. 192.168.1.10 - - \[26/Ma… --- ## [Logstash do not create an output to elasticsearch](https://discuss.elastic.co/t/logstash-do-not-create-an-output-to-elasticsearch/82422)
**Author:** [@Marcus\_Muller](https://discuss.elastic.co/u/Marcus_Muller)\ **Replies:** 6\ **Last updated:** [April 25, 2017, 4:35pm UTC](https://discuss.elastic.co/t/logstash-do-not-create-an-output-to-elasticsearch/82422 "2017-04-25T16:35:14Z")
Hi all, I'm using the latest ELK-Stack (5.3.0) and installed ES, Kibana, and Logstash on the same machine (Win 2016 Server). In addition to that, I installed Filebeat on another machine (my notebook \[Win 8.2\]) that is … --- ## [Delete old data](https://discuss.elastic.co/t/delete-old-data/29640)
**Author:** [@chinmoyd](https://discuss.elastic.co/u/chinmoyd)\ **Replies:** 6\ **Last updated:** [October 9, 2015, 6:11pm UTC](https://discuss.elastic.co/t/delete-old-data/29640 "2015-10-09T18:11:22Z")
I want to delete all data from elastic search that is more than one week old. I have tried a command as below: curl -XDELETE 'http://localhost:9200/logstash\_2015\_09\_12'. But the data for that day is still displayed in Ki… --- ## [Can we import a CSV file in kibana 5.3](https://discuss.elastic.co/t/can-we-import-a-csv-file-in-kibana-5-3/81668)
**Author:** [@Bhavana](https://discuss.elastic.co/u/Bhavana)\ **Replies:** 5\ **Last updated:** [April 12, 2017, 5:01am UTC](https://discuss.elastic.co/t/can-we-import-a-csv-file-in-kibana-5-3/81668 "2017-04-12T05:01:46Z")
Hello Everyone, I tried using import option in kibana 5.3 in saved searches category to upload a CSV file and visualize the data.I am getting the the error "Saved Objects: The file could not be processed". Can i actu… --- ## [Returning partial strings in Kibana visualisation](https://discuss.elastic.co/t/returning-partial-strings-in-kibana-visualisation/23468)
**Author:** [@Stuart\_Kenworthy](https://discuss.elastic.co/u/Stuart_Kenworthy)\ **Replies:** 1\ **Last updated:** [May 2, 2015, 1:41am UTC](https://discuss.elastic.co/t/returning-partial-strings-in-kibana-visualisation/23468 "2015-05-02T01:41:06Z")
I have a number of different load injector boxes and processes that generate load through our system under test. The tool in use produces masses of logs out but none of it is easily accessible or readable. I am the… --- ## [Index.query.bool.max\_clause\_count Setting and TermsQueryParser](https://discuss.elastic.co/t/index-query-bool-max-clause-count-setting-and-termsqueryparser/4604)
**Author:** [@jrawlings](https://discuss.elastic.co/u/jrawlings)\ **Replies:** 7\ **Last updated:** [June 13, 2011, 5:31pm UTC](https://discuss.elastic.co/t/index-query-bool-max-clause-count-setting-and-termsqueryparser/4604 "2011-06-13T17:31:14Z")
In issue #482 (https://github.com/elasticsearch/elasticsearch/issues/ 482), Shay mentioned to set the property 'index.query.bool.max\_clause\_count' in order to raise the max clause count for a lucene bool query. I've t… --- ## [How to convert data types?](https://discuss.elastic.co/t/how-to-convert-data-types/180250)
**Author:** [@orx](https://discuss.elastic.co/u/orx)\ **Replies:** 3\ **Last updated:** [May 9, 2019, 1:40pm UTC](https://discuss.elastic.co/t/how-to-convert-data-types/180250 "2019-05-09T13:40:16Z")
Hi, I want to parse the following data which is in the .txt file (separated by tabs): 1 apple tree-a city1 2 banana tree-b city2 input { file { path =\> "path-to-file" start\_positi… --- ## [Hardware requirements for production cluster](https://discuss.elastic.co/t/hardware-requirements-for-production-cluster/170478)
**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\ **Replies:** 2\ **Last updated:** [March 1, 2019, 2:17pm UTC](https://discuss.elastic.co/t/hardware-requirements-for-production-cluster/170478 "2019-03-01T14:17:30Z")
Hi there, This has likely been discussed many times so apologies in advance for any veteran Elastic members! As someone reasonably new to the Stack (despite being a forum member for a while now). I'd like to get some a… --- ## [Is hsperfdata file critical?](https://discuss.elastic.co/t/is-hsperfdata-file-critical/44586)
**Author:** [@doremon](https://discuss.elastic.co/u/doremon)\ **Replies:** 3\ **Last updated:** [March 21, 2016, 5:26pm UTC](https://discuss.elastic.co/t/is-hsperfdata-file-critical/44586 "2016-03-21T17:26:32Z")
Hi, Recently I started getting /tmp directory full error although it's not an individual partition. root@ubuntu:~# df -h Filesystem Size Used Avail Use% Mounted on udev … --- ## [How to Cleanup Full Disk on Elasticsearch Node while Elasticsearch is not running](https://discuss.elastic.co/t/how-to-cleanup-full-disk-on-elasticsearch-node-while-elasticsearch-is-not-running/249640)
**Author:** [@Rohail\_Abbas](https://discuss.elastic.co/u/Rohail_Abbas)\ **Replies:** 5\ **Last updated:** [September 30, 2020, 9:36am UTC](https://discuss.elastic.co/t/how-to-cleanup-full-disk-on-elasticsearch-node-while-elasticsearch-is-not-running/249640 "2020-09-30T09:36:06Z")
I have Elasticsearch 7.4 with 1 master and 5 data nodes (Amazon ec2 instances). I have cluster.routing.allocation.disk.threshold\_enabled setting = false Now one of the disk in a node became full and elasticsearch stopped… --- ## [How many nodes should an ElasticSearch cluster have?](https://discuss.elastic.co/t/how-many-nodes-should-an-elasticsearch-cluster-have/227674)
**Author:** [@Robert\_Ga](https://discuss.elastic.co/u/Robert_Ga)\ **Replies:** 2\ **Last updated:** [April 13, 2020, 9:00am UTC](https://discuss.elastic.co/t/how-many-nodes-should-an-elasticsearch-cluster-have/227674 "2020-04-13T09:00:47Z")
Hi everyone! I am trying to understand how to better configure my ELS Cluster. From what I understand, a node is an Elasticsearch instance (please correct me if I\`m wrong). What I want to know is: Should each node … --- ## [Compressor detection can only be called on some xcontent bytes or compressed xcontent bytes](https://discuss.elastic.co/t/compressor-detection-can-only-be-called-on-some-xcontent-bytes-or-compressed-xcontent-bytes/72194)
**Author:** [@sup3race](https://discuss.elastic.co/u/sup3race)\ **Replies:** 3\ **Last updated:** [January 20, 2017, 8:07pm UTC](https://discuss.elastic.co/t/compressor-detection-can-only-be-called-on-some-xcontent-bytes-or-compressed-xcontent-bytes/72194 "2017-01-20T20:07:33Z")
I wrote this easy connection on python: class ElasticS(object): def \_\_init\_\_(self,portI,ip): try: self.es = Elasticsearch(\[ip\],port=portI ) print ("Connected: ", self.es.info()) except Excepti… --- ## [Warning regarding jvm option UseConcMarkSweepGC was deprecated](https://discuss.elastic.co/t/warning-regarding-jvm-option-useconcmarksweepgc-was-deprecated/241398)
**Author:** [@pratiksha](https://discuss.elastic.co/u/pratiksha)\ **Replies:** 5\ **Last updated:** [August 4, 2020, 6:10am UTC](https://discuss.elastic.co/t/warning-regarding-jvm-option-useconcmarksweepgc-was-deprecated/241398 "2020-08-04T06:10:21Z")
Hi, We are currently on elasticsearch version 7.0.1 and about to upgrade to 7.8. In our elastic search logs, we observe a warning "OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version … --- ## [Beats handler syslog errors every minute](https://discuss.elastic.co/t/beats-handler-syslog-errors-every-minute/60822)
**Author:** [@xternal](https://discuss.elastic.co/u/xternal)\ **Replies:** 6\ **Last updated:** [July 6, 2017, 3:14pm UTC](https://discuss.elastic.co/t/beats-handler-syslog-errors-every-minute/60822 "2017-07-06T15:14:41Z")
Hi Im testing the 5-alpha ELK stack on Ubuntu 16.04 (x64) and when I enable the beats input (no ssl) the syslog on the logstash server shows this error every 1 minute: \[nioEventLoopGroup-3-1\] ERROR org.logstash.beats.B… --- ## [Rejecting mapping update for new index](https://discuss.elastic.co/t/rejecting-mapping-update-for-new-index/109576)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 4\ **Last updated:** [November 29, 2017, 12:43pm UTC](https://discuss.elastic.co/t/rejecting-mapping-update-for-new-index/109576 "2017-11-29T12:43:27Z")
Hi, I am using ELK GA 6, and I am trying to create a brand new index. Before pushing into the topic using Logstash, I have created a template like below; PUT \_template/my\_template { "index\_patterns": \["mylogs\*"\], "… --- ## [Search query containing an equal character](https://discuss.elastic.co/t/search-query-containing-an-equal-character/16385)
**Author:** [@Guillaume\_Loetscher](https://discuss.elastic.co/u/Guillaume_Loetscher)\ **Replies:** 4\ **Last updated:** [March 18, 2014, 9:29am UTC](https://discuss.elastic.co/t/search-query-containing-an-equal-character/16385 "2014-03-18T09:29:10Z")
Hello, I'm trying to do a query search containing an equal ("=") character in it. I've got plenty of logs looking like this : postfix/smtpd\[9136\]: E4A4E34AA5: client=localhost.localdomain\[127.0.0.1\] I want to… --- ## [How to monitor logstash logs](https://discuss.elastic.co/t/how-to-monitor-logstash-logs/133077)
**Author:** [@Dan](https://discuss.elastic.co/u/Dan)\ **Replies:** 7\ **Last updated:** [May 25, 2018, 6:16am UTC](https://discuss.elastic.co/t/how-to-monitor-logstash-logs/133077 "2018-05-25T06:16:33Z")
Please suggest me how to monitor Logstash logs. I am trying below solution but it's not working... Generating my logstash logs in json format in logstash log folder... By using File input to logstash ingesting this lo… --- ## [Delete data folder](https://discuss.elastic.co/t/delete-data-folder/144307)
**Author:** [@Raghuveer\_SJ](https://discuss.elastic.co/u/Raghuveer_SJ)\ **Replies:** 3\ **Last updated:** [August 14, 2018, 10:40am UTC](https://discuss.elastic.co/t/delete-data-folder/144307 "2018-08-14T10:40:44Z")
I am experimenting, I got some bad data loaded on to elasticsearch so thought to reload and deleted the path.data folder. The command rm -rf \* removed many things but ls: cannot access global-12.st: No such file or dire… --- ## [How to create build in user without interactive mode or auto](https://discuss.elastic.co/t/how-to-create-build-in-user-without-interactive-mode-or-auto/183420)
**Author:** [@Jiri\_Safar](https://discuss.elastic.co/u/Jiri_Safar)\ **Replies:** 4\ **Last updated:** [May 30, 2019, 7:30am UTC](https://discuss.elastic.co/t/how-to-create-build-in-user-without-interactive-mode-or-auto/183420 "2019-05-30T07:30:47Z")
Hi, I need to automate create build in user for which I should use /usr/share/elasticsearch/bin/elasticsearch-setup-passwords interactive or /usr/share/elasticsearch/bin/elasticsearch-setup-passwords auto In first scen… --- ## [How to config kibana if xpack.security.http.ssl.enabled is false](https://discuss.elastic.co/t/how-to-config-kibana-if-xpack-security-http-ssl-enabled-is-false/307350)
**Author:** [@yjm17865195865](https://discuss.elastic.co/u/yjm17865195865)\ **Replies:** 7\ **Last updated:** [June 21, 2022, 11:55pm UTC](https://discuss.elastic.co/t/how-to-config-kibana-if-xpack-security-http-ssl-enabled-is-false/307350 "2022-06-21T23:55:22Z")
I'm starting a Elasticsearch v8.2.2 throuth docker images. After started i found that TLS/SSL is enabled in default and I want to disable that( however it's fine that between es'node keep using the TLS/SSL to communicate… --- ## [Using an offline map in kibana](https://discuss.elastic.co/t/using-an-offline-map-in-kibana/36056)
**Author:** [@aviv.ratzon](https://discuss.elastic.co/u/aviv.ratzon)\ **Replies:** 8\ **Last updated:** [March 2, 2017, 12:59pm UTC](https://discuss.elastic.co/t/using-an-offline-map-in-kibana/36056 "2017-03-02T12:59:02Z")
Hi there, I am looking for a way to use the map visualization with no internet connection. This seems pretty possible, but I realy don't know much about this and can't seem to find a lead as to how to start. The company … --- ## [Logstash can't establish pipeline with ssl](https://discuss.elastic.co/t/logstash-cant-establish-pipeline-with-ssl/191434)
**Author:** [@johnbchron](https://discuss.elastic.co/u/johnbchron)\ **Replies:** 8\ **Last updated:** [July 23, 2019, 8:02am UTC](https://discuss.elastic.co/t/logstash-cant-establish-pipeline-with-ssl/191434 "2019-07-23T08:02:29Z")
So I have been trying to implement ssl security across my single-node stack, and I got kibana-elasticsearch ssl working (didn't enable https), but I'm having a hard time getting logstash to communicate with elasticsearch… --- ## [Enabling X-pack monitoring for logstash](https://discuss.elastic.co/t/enabling-x-pack-monitoring-for-logstash/105951)
**Author:** [@kenny123](https://discuss.elastic.co/u/kenny123)\ **Replies:** 4\ **Last updated:** [October 31, 2017, 9:42pm UTC](https://discuss.elastic.co/t/enabling-x-pack-monitoring-for-logstash/105951 "2017-10-31T21:42:53Z")
HI, I recently started learning ELK . I am trying to setup monitoring X-pack on logstash but couldn't find the directory called plugins like in Elasticsearch or kibana . Moreover , can I please know how to configure be… --- ## [message=\>"Could not execute action: PipelineAction::Create\, action\_result: false", :backtrace=\>nil](https://discuss.elastic.co/t/message-could-not-execute-action-pipelineaction-create-main-action-result-false-backtrace-nil/171284)
**Author:** [@Shubham\_Yadav1](https://discuss.elastic.co/u/Shubham_Yadav1)\ **Replies:** 4\ **Last updated:** [March 25, 2019, 11:35am UTC](https://discuss.elastic.co/t/message-could-not-execute-action-pipelineaction-create-main-action-result-false-backtrace-nil/171284 "2019-03-25T11:35:02Z")
trying to parse a file with logstash.conf present in /usr/local/cellar/logstash/6.6.1/libexec/config directory, and i am running the command logstash -f logstash.conf from bin folder. the logstash.conf file contents are… --- ## [ES 5.1.2 Java API: Suggester: Source fields not returned](https://discuss.elastic.co/t/es-5-1-2-java-api-suggester-source-fields-not-returned/72711)
**Author:** [@Fuad\_Efendi](https://discuss.elastic.co/u/Fuad_Efendi)\ **Replies:** 1\ **Last updated:** [January 24, 2017, 11:42pm UTC](https://discuss.elastic.co/t/es-5-1-2-java-api-suggester-source-fields-not-returned/72711 "2017-01-24T23:42:45Z")
I have following Java CLient snippet and I have difficulties in finding "fields" from "\_source": CompletionSuggestionBuilder completionSuggestionBuilder = SuggestBuilders.completionSuggestion("country\_suggest").prefix(… --- ## [When to use mmapfs and niofs](https://discuss.elastic.co/t/when-to-use-mmapfs-and-niofs/176536)
**Author:** [@dbakti7](https://discuss.elastic.co/u/dbakti7)\ **Replies:** 8\ **Last updated:** [April 12, 2019, 8:54am UTC](https://discuss.elastic.co/t/when-to-use-mmapfs-and-niofs/176536 "2019-04-12T08:54:46Z")
I'm trying to benchmark search performance (Elasticsearch 6.0.1) on different FS mode. Index size is around 5GB each (10 indexes in total). Search is done by doing the following: Open Index1 --\> Search on Index1 --\> O… --- ## [Retrying failed action with response code: 503 unavailable\_shards\_exception, reason - logstash primary shard is not active](https://discuss.elastic.co/t/retrying-failed-action-with-response-code-503-unavailable-shards-exception-reason-logstash-primary-shard-is-not-active/226576)
**Author:** [@vignesh.s2](https://discuss.elastic.co/u/vignesh.s2)\ **Replies:** 5\ **Last updated:** [April 6, 2020, 7:27am UTC](https://discuss.elastic.co/t/retrying-failed-action-with-response-code-503-unavailable-shards-exception-reason-logstash-primary-shard-is-not-active/226576 "2020-04-06T07:27:49Z")
After upgrading to the latest version of the ELK 7.6.2 , I tried to restart the all the services. But elasticsearch has errors Below mentioned is the errors, Apr 03 21:56:46 CLMserver logstash\[3216\]: \[2020-04-03T21:56:… --- ## [How to extract the fields using regex?](https://discuss.elastic.co/t/how-to-extract-the-fields-using-regex/8688)
**Author:** [@Dong\_Aihua](https://discuss.elastic.co/u/Dong_Aihua)\ **Replies:** 8\ **Last updated:** [October 23, 2015, 3:17pm UTC](https://discuss.elastic.co/t/how-to-extract-the-fields-using-regex/8688 "2015-10-23T15:17:48Z")
Hi, I want to extract fields using regex. for example, I have a doc {body: jackie's email is xxx@gmail.com}. I want to extract the email address from the body using a regex. I know that script fields seem f… --- ## [Setting the correct timezone in date filter plugin](https://discuss.elastic.co/t/setting-the-correct-timezone-in-date-filter-plugin/143457)
**Author:** [@espogian](https://discuss.elastic.co/u/espogian)\ **Replies:** 3\ **Last updated:** [August 8, 2018, 2:12pm UTC](https://discuss.elastic.co/t/setting-the-correct-timezone-in-date-filter-plugin/143457 "2018-08-08T14:12:57Z")
Hello, I'm using a date filter plugin to match a date field, which is in the format yyyy-MM-dd (so the field does not provide the time, for example 2018-07-03). My desire would be to obtain Logstash parsing the date @00:… --- ## [Kibana should not be run as root. Use --allow-root to continue](https://discuss.elastic.co/t/kibana-should-not-be-run-as-root-use-allow-root-to-continue/219253)
**Author:** [@dsv](https://discuss.elastic.co/u/dsv)\ **Replies:** 4\ **Last updated:** [February 17, 2020, 8:11am UTC](https://discuss.elastic.co/t/kibana-should-not-be-run-as-root-use-allow-root-to-continue/219253 "2020-02-17T08:11:10Z")
CentOS Linux release 7.7.1908 (Core) I have the lastest version of the kibana installed from the elasticsearch repo by yum: kibana-7.5.2-1.x86\_64 When I try to install a plugin: /usr/share/kibana/bin/kibana-plugin in… --- ## [OR filter with Kibana 5.0](https://discuss.elastic.co/t/or-filter-with-kibana-5-0/65699)
**Author:** [@dav3860](https://discuss.elastic.co/u/dav3860)\ **Replies:** 3\ **Last updated:** [November 14, 2016, 3:46pm UTC](https://discuss.elastic.co/t/or-filter-with-kibana-5-0/65699 "2016-11-14T15:46:03Z")
Hi, I used to create "bool" filters in Kibana to mimic an "OR". For example see : Since I upgraded to elasticsearch and Kibana 5.0, this doesn't work anymore. I imagine that it's because the bool filter was replaced … --- ## [Error 400 during parsing logs from logstash](https://discuss.elastic.co/t/error-400-during-parsing-logs-from-logstash/214352)
**Author:** [@akshay\_singh2](https://discuss.elastic.co/u/akshay_singh2)\ **Replies:** 7\ **Last updated:** [January 16, 2020, 11:06pm UTC](https://discuss.elastic.co/t/error-400-during-parsing-logs-from-logstash/214352 "2020-01-16T23:06:24Z")
Hello Team, I have recently moved ES from 6.x to 7.x and faced a issue in one of pipeline which was working fine in ES 6.x version, but in ES 7.x I'm getting 400 error in logstash. Logstash is flooded with this error: … --- ## [Managing "is\_write\_index"](https://discuss.elastic.co/t/managing-is-write-index/256089)
**Author:** [@koos](https://discuss.elastic.co/u/koos)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 8:50am UTC](https://discuss.elastic.co/t/managing-is-write-index/256089 "2020-11-20T08:50:38Z")
Hi there, We've created a Lambda function (python) in order to steam logs from AWS CloudWatch to our ELK stack. I'm also making use of life cycle policies to rotate the index on a specific size and delete after the spe… --- ## [Saved objects API use example](https://discuss.elastic.co/t/saved-objects-api-use-example/168742)
**Author:** [@pup\_seba](https://discuss.elastic.co/u/pup_seba)\ **Replies:** 4\ **Last updated:** [February 19, 2019, 3:52pm UTC](https://discuss.elastic.co/t/saved-objects-api-use-example/168742 "2019-02-19T15:52:49Z")
Hi, I'm trying to restore an export but I can't get it right. The export was done via webUI, and the result is 1 file in .json format with all the info about dashboards, visualizations, etc. I'm trying to use the saved… [Previous page](https://discuss.elastic.co/top.md?page=313&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=315&per_page=50&period=all)