# Top **URL:** https://discuss.elastic.co/top.md?page=373&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 374 --- ## [Why is mlockall setting failing on Elasticsearch?](https://discuss.elastic.co/t/why-is-mlockall-setting-failing-on-elasticsearch/87)
**Author:** [@shaunak](https://discuss.elastic.co/u/shaunak)\ **Replies:** 0\ **Last updated:** [May 1, 2015, 10:11am UTC](https://discuss.elastic.co/t/why-is-mlockall-setting-failing-on-elasticsearch/87 "2015-05-01T10:11:08Z")
QUESTION According to the elasticsearch.yml: bootstrap.mlockall: true But according to ES when queried they are all false. curl 'http://127.0.0.1:9200/\_nodes/process?pretty; | grep mlockall "mlockall" : false … --- ## [Unable to start Kibana and \[circuit\_breaking\_exception\]](https://discuss.elastic.co/t/unable-to-start-kibana-and-circuit-breaking-exception/191860)
**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\ **Replies:** 6\ **Last updated:** [July 24, 2019, 11:35am UTC](https://discuss.elastic.co/t/unable-to-start-kibana-and-circuit-breaking-exception/191860 "2019-07-24T11:35:22Z")
Hi, I am unable to start KIbana 7.2. I get the following message in the browser "{"statusCode":429,"error":"Too Many Requests","message":"\[circuit\_breaking\_exception\] \[parent\] Data too large, data for \[\\]… --- ## [Log Enrichment with Logstash and the Elastic Filter Plugin - How to Handle Ordering / Relationships?](https://discuss.elastic.co/t/log-enrichment-with-logstash-and-the-elastic-filter-plugin-how-to-handle-ordering-relationships/36822)
**Author:** [@Craig\_Roberts](https://discuss.elastic.co/u/Craig_Roberts)\ **Replies:** 6\ **Last updated:** [January 16, 2016, 11:16am UTC](https://discuss.elastic.co/t/log-enrichment-with-logstash-and-the-elastic-filter-plugin-how-to-handle-ordering-relationships/36822 "2016-01-16T11:16:33Z")
Howdy, We're building an analytics system, most likely using the ELK stack from start to finish, and while we understand the document-oriented nature of Elastic, we're having some headaches figuring out how to get that… --- ## [Cant get regex to exclude line to work](https://discuss.elastic.co/t/cant-get-regex-to-exclude-line-to-work/95432)
**Author:** [@Puk](https://discuss.elastic.co/u/Puk)\ **Replies:** 5\ **Last updated:** [August 3, 2017, 2:33am UTC](https://discuss.elastic.co/t/cant-get-regex-to-exclude-line-to-work/95432 "2017-08-03T02:33:16Z")
Newbie to ELK Stack and Filebeat here. Managed to get log shipping from my linux hosts working fine and have 2x prospectors for my syslogs and secure logs as going to try filtering them in logstash differently. Anyway,… --- ## [SNMP ingested into Logstash is garbled](https://discuss.elastic.co/t/snmp-ingested-into-logstash-is-garbled/125809)
**Author:** [@gbarrett](https://discuss.elastic.co/u/gbarrett)\ **Replies:** 8\ **Last updated:** [April 18, 2018, 7:55pm UTC](https://discuss.elastic.co/t/snmp-ingested-into-logstash-is-garbled/125809 "2018-04-18T19:55:15Z")
I'm having a strange problem ingesting snmp into Logstash. This is my pipeline: input { snmptrap { port =\> 162 type =\> "snmp" } } output { if \[type\] == "snmp" { stdout { codec =\> rubydebug } } } T… --- ## [Curl to add an index pattern and a json file to create dashboard](https://discuss.elastic.co/t/curl-to-add-an-index-pattern-and-a-json-file-to-create-dashboard/156818)
**Author:** [@saisimo02](https://discuss.elastic.co/u/saisimo02)\ **Replies:** 7\ **Last updated:** [November 15, 2018, 10:10am UTC](https://discuss.elastic.co/t/curl-to-add-an-index-pattern-and-a-json-file-to-create-dashboard/156818 "2018-11-15T10:10:13Z")
Hello, I would like to use a curl command to add an index pattern to my kibana index. I am using logstash to index my data and indexes looks like that: logstash-{the current date} I am using this command: curl -XPOST … --- ## [Where are the elastic password?](https://discuss.elastic.co/t/where-are-the-elastic-password/318112)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 4\ **Last updated:** [November 3, 2022, 3:55pm UTC](https://discuss.elastic.co/t/where-are-the-elastic-password/318112 "2022-11-03T15:55:54Z")
i installed with sudo yum install --enablerepo=elasticsearch elasticsearch ======================================================================================================================== Package … --- ## [Aggregation query size?](https://discuss.elastic.co/t/aggregation-query-size/28393)
**Author:** [@linlma](https://discuss.elastic.co/u/linlma)\ **Replies:** 4\ **Last updated:** [September 18, 2015, 1:31am UTC](https://discuss.elastic.co/t/aggregation-query-size/28393 "2015-09-18T01:31:24Z")
Hello ElasticSearch experts, I have about 100M documents and want to run aggregation query on a random subset (500k) documents on their features/terms (for query to ElasticSearch, I can input the random 500k document a… --- ## [Parsing Windows DHCP Logs with Filebeat Microsoft Module](https://discuss.elastic.co/t/parsing-windows-dhcp-logs-with-filebeat-microsoft-module/254814)
**Author:** [@kkojouri](https://discuss.elastic.co/u/kkojouri)\ **Replies:** 5\ **Last updated:** [November 20, 2020, 3:22pm UTC](https://discuss.elastic.co/t/parsing-windows-dhcp-logs-with-filebeat-microsoft-module/254814 "2020-11-20T15:22:33Z")
Hello, We're trying to use the new microsoft.yml module in Filebeat 7.9.0 to ingest and parse Windows DHCP logs. The configuration seems pretty straightfoward, we just pointed it to the default C:\\Windows\\System32\\dhcp\\… --- ## [Elasticsearch very high load - 100% cpu](https://discuss.elastic.co/t/elasticsearch-very-high-load-100-cpu/57331)
**Author:** [@DDE](https://discuss.elastic.co/u/DDE)\ **Replies:** 3\ **Last updated:** [August 6, 2016, 5:26am UTC](https://discuss.elastic.co/t/elasticsearch-very-high-load-100-cpu/57331 "2016-08-06T05:26:01Z")
Hi, We have our production cluster at 100% with load average of 100. - JDK 1.7u55\_64bits - ELS 1.7.5 - 9 nodes 30GB heap - centos 6.5-6.6 in ELS : 1700 indices / 3200 shards / 5B docs / 5 TB For the requests : Only… --- ## [Maximum RAM recommended for data node](https://discuss.elastic.co/t/maximum-ram-recommended-for-data-node/214928)
**Author:** [@malshan](https://discuss.elastic.co/u/malshan)\ **Replies:** 5\ **Last updated:** [January 14, 2020, 7:11am UTC](https://discuss.elastic.co/t/maximum-ram-recommended-for-data-node/214928 "2020-01-14T07:11:40Z")
Hi all, I'm new here, for please forgive for any changes from expected format. ES version: 7.5 I'm going to deploy a hot-warm-cold architecture, with dedicated data, master and ingest nodes. However, even our 'hot' se… --- ## [I am getting "json\_parse\_exception"](https://discuss.elastic.co/t/i-am-getting-json-parse-exception/119991)
**Author:** [@Anilg](https://discuss.elastic.co/u/Anilg)\ **Replies:** 4\ **Last updated:** [February 15, 2018, 2:17pm UTC](https://discuss.elastic.co/t/i-am-getting-json-parse-exception/119991 "2018-02-15T14:17:20Z")
$ curl -H 'Content-Type: application/x-ndjson' -XPOST 'localhost:9200/\_bulk?pretty' --data-binary @satendra.log { "error" : { "root\_cause" : \[ { "type" : "json\_parse\_exception", "reason" : "Illegal character ((CTRL… --- ## [Could not resolve host](https://discuss.elastic.co/t/could-not-resolve-host/70399)
**Author:** [@shaharz](https://discuss.elastic.co/u/shaharz)\ **Replies:** 5\ **Last updated:** [January 3, 2017, 1:14pm UTC](https://discuss.elastic.co/t/could-not-resolve-host/70399 "2017-01-03T13:14:33Z")
Hello, One of the training in the documentation is bulk upload a Json file named account to the elasticsearch. im running this command as written curl -XPOST 'localhost:9200/bank/account/\_bulk?pretty&refresh' --da… --- ## [Scripted field and "Too many dynamic script compilations within one minute,"](https://discuss.elastic.co/t/scripted-field-and-too-many-dynamic-script-compilations-within-one-minute/101671)
**Author:** [@amichaim](https://discuss.elastic.co/u/amichaim)\ **Replies:** 2\ **Last updated:** [October 2, 2017, 11:30am UTC](https://discuss.elastic.co/t/scripted-field-and-too-many-dynamic-script-compilations-within-one-minute/101671 "2017-10-02T11:30:24Z")
Hi I'm using elastic/kibana 5.5.1 My scripted field get the "Too many dynamic script compilations within one minute" error. Now I saw the recommendation to use indexed scripts, file based scripts or to use parameters … --- ## [JAVA failed; error='Cannot allocate memory'](https://discuss.elastic.co/t/java-failed-error-cannot-allocate-memory/187340)
**Author:** [@Deep\_Manavadaria](https://discuss.elastic.co/u/Deep_Manavadaria)\ **Replies:** 5\ **Last updated:** [July 16, 2019, 8:14am UTC](https://discuss.elastic.co/t/java-failed-error-cannot-allocate-memory/187340 "2019-07-16T08:14:13Z")
I tried to start ES using command sudo -i service elasticsearch start Got an error sudo -i service elasticsearch start Starting elasticsearch: warning: Falling back to java on path. This behavior is deprecated. Specify… --- ## [How to setup Kafka input in Logstash](https://discuss.elastic.co/t/how-to-setup-kafka-input-in-logstash/67155)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 2\ **Last updated:** [December 14, 2016, 12:59pm UTC](https://discuss.elastic.co/t/how-to-setup-kafka-input-in-logstash/67155 "2016-12-14T12:59:13Z")
Hi, I want to read from Kafka and I have the following configuration; kafka{ group\_id =\> "test-consumer-group" topics =\> \["testtopic"\] bootstrap\_servers =\> "192.168.0.1:\" codec =\> json } What port should I… --- ## [検索文字からドキュメントの完全一致をしたい](https://discuss.elastic.co/t/topic/74635)
**Author:** [@soraiyu](https://discuss.elastic.co/u/soraiyu)\ **Replies:** 7\ **Last updated:** [February 22, 2017, 2:43am UTC](https://discuss.elastic.co/t/topic/74635 "2017-02-22T02:43:29Z")
専門用語の辞書を作成しています。 以下のようなドキュメントが入っています。 1. 赤パジャマ 2. 青パジャマ 3. 黄パジャマ この文字を以下で検索します。 僕は黄パジャマを着たい。貴方は赤パジャマにしたら？ 文字列が以下のように形態素解析されるとして、 僕 は 黄 パジャマ を 着たい。 貴方 は 赤 パジャマ に したら？ その結果以下が欲しいです。 - 青パジャマ - 赤パジャマ 試した方法と考えた解決… --- ## [NoSQL Injection](https://discuss.elastic.co/t/nosql-injection/65003)
**Author:** [@rgr78](https://discuss.elastic.co/u/rgr78)\ **Replies:** 2\ **Last updated:** [November 7, 2016, 5:27pm UTC](https://discuss.elastic.co/t/nosql-injection/65003 "2016-11-07T17:27:46Z")
Hello. What are the recommended techniques to protect ES queries against NoSQL injection? It's common for some parameters to be specified externally (by the user, for example). How can we prevent them from abusing the qu… --- ## [PFsense 2.3.3 and ELK](https://discuss.elastic.co/t/pfsense-2-3-3-and-elk/83928)
**Author:** [@hispeed](https://discuss.elastic.co/u/hispeed)\ **Replies:** 6\ **Last updated:** [May 10, 2017, 6:50pm UTC](https://discuss.elastic.co/t/pfsense-2-3-3-and-elk/83928 "2017-05-10T18:50:09Z")
After I successfully integrated the logs from my Synology. I now go over to my pfsense. There a some tutorials out in the www. Unfortunately none of them is working properly or just with old versions. I'm following the … --- ## [Unable to Install Fleet Server - EOF](https://discuss.elastic.co/t/unable-to-install-fleet-server-eof/319847)
**Author:** [@tmeuze](https://discuss.elastic.co/u/tmeuze)\ **Replies:** 8\ **Last updated:** [November 26, 2022, 6:08pm UTC](https://discuss.elastic.co/t/unable-to-install-fleet-server-eof/319847 "2022-11-26T18:08:16Z")
Hello, I'm hitting a wall trying to install Fleet Server on the same host as my ELK stack (v8.5.2). The result is always the same: Elastic Agent will be installed at /opt/Elastic/Agent and will run as a service. Do you… --- ## [Server certificate CA fingerprint does not match the value configured in caFingerprint](https://discuss.elastic.co/t/server-certificate-ca-fingerprint-does-not-match-the-value-configured-in-cafingerprint/304783)
**Author:** [@Karuna](https://discuss.elastic.co/u/Karuna)\ **Replies:** 6\ **Last updated:** [June 1, 2022, 10:57am UTC](https://discuss.elastic.co/t/server-certificate-ca-fingerprint-does-not-match-the-value-configured-in-cafingerprint/304783 "2022-06-01T10:57:56Z")
Hey, I'm using Elasticsearch with a Javascript proxy, almost exactly the same as the example provided here: https://github.com/elastic/elasticsearch-js. We have a few proxies around the world and three servers in our c… --- ## [Perform Union on Two Sorted Queries](https://discuss.elastic.co/t/perform-union-on-two-sorted-queries/494)
**Author:** [@wajahat\_Javaid](https://discuss.elastic.co/u/wajahat_Javaid)\ **Replies:** 3\ **Last updated:** [June 10, 2015, 11:11am UTC](https://discuss.elastic.co/t/perform-union-on-two-sorted-queries/494 "2015-06-10T11:11:42Z")
Hi all, I have a use case where I have to run two elastic search Queries which are paginated, have a sorting criteria, but the number of results are same, I would like to know if there is a possibility to UNION both que… --- ## [ES Kotlin Wrapper Client now supports ES 7.0.0](https://discuss.elastic.co/t/es-kotlin-wrapper-client-now-supports-es-7-0-0/176631)
**Author:** [@jillesvangurp](https://discuss.elastic.co/u/jillesvangurp)\ **Replies:** 0\ **Last updated:** [April 12, 2019, 1:19pm UTC](https://discuss.elastic.co/t/es-kotlin-wrapper-client-now-supports-es-7-0-0/176631 "2019-04-12T13:19:13Z")
V0.10.0 of my Kotlin client for elasticsearch has been updated for Elasticsearch 7.0.0 --- ## [Logstash: Error jdbc\_driver\_library not loaded](https://discuss.elastic.co/t/logstash-error-jdbc-driver-library-not-loaded/73654)
**Author:** [@zegdene](https://discuss.elastic.co/u/zegdene)\ **Replies:** 3\ **Last updated:** [February 2, 2017, 11:29am UTC](https://discuss.elastic.co/t/logstash-error-jdbc-driver-library-not-loaded/73654 "2017-02-02T11:29:40Z")
Hi, I need to get data from a PostgreSQL DB and index it into Elasticsearch. When I run /opt/logstash-2.3.3/bin/logstash -f contacts-index-logstash.conf I receive the following error: Could not find log4j2 configurati… --- ## [Is there any way of tracking request id?](https://discuss.elastic.co/t/is-there-any-way-of-tracking-request-id/20832)
**Author:** [@krzysztof\_dawid\_mako](https://discuss.elastic.co/u/krzysztof_dawid_mako)\ **Replies:** 4\ **Last updated:** [November 22, 2014, 10:04pm UTC](https://discuss.elastic.co/t/is-there-any-way-of-tracking-request-id/20832 "2014-11-22T22:04:25Z")
Dear community, I am looking for a feature which allows to attach requestId to the commands that my app is passing to the elasticsearch. It is because of our client requirements regarding ability to track user r… --- ## [\[KIBANA\] Export et import dashboards et visualisations en ligne de commande](https://discuss.elastic.co/t/kibana-export-et-import-dashboards-et-visualisations-en-ligne-de-commande/48071)
**Author:** [@Benjamin\_Carriou](https://discuss.elastic.co/u/Benjamin_Carriou)\ **Replies:** 3\ **Last updated:** [April 22, 2016, 8:56am UTC](https://discuss.elastic.co/t/kibana-export-et-import-dashboards-et-visualisations-en-ligne-de-commande/48071 "2016-04-22T08:56:17Z")
Bonjour ! Actuellement, j'ai créé des dashboards et visualisations via Kibana. A des fins de scripting, je souhaiterai réimporter ces dashboards et visualisations à partir de mon petit script. Comment puis-je le fa… --- ## [New to ES/Compare daily data to previous date's data](https://discuss.elastic.co/t/new-to-es-compare-daily-data-to-previous-dates-data/125392)
**Author:** [@PaulCarsten](https://discuss.elastic.co/u/PaulCarsten)\ **Replies:** 6\ **Last updated:** [April 3, 2018, 8:19am UTC](https://discuss.elastic.co/t/new-to-es-compare-daily-data-to-previous-dates-data/125392 "2018-04-03T08:19:53Z")
Hi everyone! I'm a relative newcomer to a project that has a big Elasticsearch cluster with netflow data in it. We've been tasked with coming up with analytics, and one that has been suggested is some way of comparing a … --- ## [Routing\_missing\_exception](https://discuss.elastic.co/t/routing-missing-exception/71272)
**Author:** [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\ **Replies:** 1\ **Last updated:** [January 11, 2017, 8:00pm UTC](https://discuss.elastic.co/t/routing-missing-exception/71272 "2017-01-11T20:00:43Z")
I'm trying to delete using the query DELETE /title\_data/docs\_child/\_query It's throwing me an error { "error": { "root\_cause": \[ { "type": "routing\_missing\_exception", "reason": "routing is required for \[title\_d… --- ## [How to compile filebeat source code?](https://discuss.elastic.co/t/how-to-compile-filebeat-source-code/174158)
**Author:** [@mortezaipo](https://discuss.elastic.co/u/mortezaipo)\ **Replies:** 7\ **Last updated:** [March 29, 2019, 1:10pm UTC](https://discuss.elastic.co/t/how-to-compile-filebeat-source-code/174158 "2019-03-29T13:10:37Z")
Hi, I've developed my own 'output' and I've introduced it to the publisher. Now I have a problem that I want to compile it and use it in a production mode. I've checked the 'developer' doc and I didn't find anything f… --- ## [How to escape character in logstash](https://discuss.elastic.co/t/how-to-escape-character-in-logstash/171327)
**Author:** [@mandar.raj](https://discuss.elastic.co/u/mandar.raj)\ **Replies:** 2\ **Last updated:** [March 7, 2019, 3:28pm UTC](https://discuss.elastic.co/t/how-to-escape-character-in-logstash/171327 "2019-03-07T15:28:58Z")
I want to execute below sql statement in input of logstash configuration file but it fails to compile statement =\> "select ALERT\_ID, regexp\_replace(regexp\_substr(html\_file\_key,'(.?)'),'|','') as alertDate, regexp\_replac… --- ## [How to get current date in script](https://discuss.elastic.co/t/how-to-get-current-date-in-script/19794)
**Author:** [@Abhishek\_Gupta](https://discuss.elastic.co/u/Abhishek_Gupta)\ **Replies:** 1\ **Last updated:** [September 15, 2014, 4:23pm UTC](https://discuss.elastic.co/t/how-to-get-current-date-in-script/19794 "2014-09-15T16:23:42Z")
Hi, I want to write a script to calculate the number of days from current date on a date field. I can use a script like: "script\_fields": { "test": { "script": "doc\['date'\].date.year \* doc\['date'\].date.… --- ## [Is there any way to remove the old monitoring-es logs?](https://discuss.elastic.co/t/is-there-any-way-to-remove-the-old-monitoring-es-logs/79738)
**Author:** [@jayqie](https://discuss.elastic.co/u/jayqie)\ **Replies:** 2\ **Last updated:** [March 24, 2017, 4:55pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-remove-the-old-monitoring-es-logs/79738 "2017-03-24T16:55:01Z")
I use Kibana and X-Pack to monitor my es cluster, but the monitor indices are not automatically deleted. How can I change the config to automatically delete old monitoring-es-logs? --- ## [Disk space filled up with ES indices](https://discuss.elastic.co/t/disk-space-filled-up-with-es-indices/11526)
**Author:** [@Sunny\_Jaisinghani](https://discuss.elastic.co/u/Sunny_Jaisinghani)\ **Replies:** 6\ **Last updated:** [April 13, 2013, 4:59am UTC](https://discuss.elastic.co/t/disk-space-filled-up-with-es-indices/11526 "2013-04-13T04:59:37Z")
Hello, I recently setup ES 0.20.6 on a AWS EC2 instance along with logstash and kibana. After i setup up all 3 of them, everything was good for few days, before my monitoring started complaining about the disk… --- ## [Couldn't find any filter plugin named 'uuid'](https://discuss.elastic.co/t/couldnt-find-any-filter-plugin-named-uuid/143144)
**Author:** [@Maheen\_Nasir](https://discuss.elastic.co/u/Maheen_Nasir)\ **Replies:** 1\ **Last updated:** [August 6, 2018, 11:03am UTC](https://discuss.elastic.co/t/couldnt-find-any-filter-plugin-named-uuid/143144 "2018-08-06T11:03:24Z")
I have upgraded my logstash from 5.5 version to 6.3 but now my configurations are not working. UUID plugin has stopped working. I am getting following errors: \[2018-08-06T15:34:12,513\]\[ERROR\]\[logstash.agent \]… --- ## [Elasticsearch suddenly stops working](https://discuss.elastic.co/t/elasticsearch-suddenly-stops-working/69797)
**Author:** [@Eldad\_Moneta](https://discuss.elastic.co/u/Eldad_Moneta)\ **Replies:** 6\ **Last updated:** [January 1, 2017, 6:45am UTC](https://discuss.elastic.co/t/elasticsearch-suddenly-stops-working/69797 "2017-01-01T06:45:34Z")
Hi, I've recently upgraded my 3 node cluster to elastic 2.4.2 from 1.5. Since the upgrade (I think), I experience random shutdowns of the elasticsearch service: about once a day (at no specific hour), one of the nodes … --- ## [Kibana failed to connect to ElasticSearch with error Request Timeout after 3000ms](https://discuss.elastic.co/t/kibana-failed-to-connect-to-elasticsearch-with-error-request-timeout-after-3000ms/141970)
**Author:** [@kkr78](https://discuss.elastic.co/u/kkr78)\ **Replies:** 2\ **Last updated:** [July 30, 2018, 4:20pm UTC](https://discuss.elastic.co/t/kibana-failed-to-connect-to-elasticsearch-with-error-request-timeout-after-3000ms/141970 "2018-07-30T16:20:27Z")
Elastic Search 6.3.2 Installed the opensource version of Elastic Search Cluster in AWS. Its configured to reach via domain. No Username and password configured. The setup has been validate using /\_cat/health and can c… --- ## [Kibana 6.3: Text alignment in Markdown widget](https://discuss.elastic.co/t/kibana-6-3-text-alignment-in-markdown-widget/138399)
**Author:** [@Shafique](https://discuss.elastic.co/u/Shafique)\ **Replies:** 2\ **Last updated:** [July 3, 2018, 6:56pm UTC](https://discuss.elastic.co/t/kibana-6-3-text-alignment-in-markdown-widget/138399 "2018-07-03T18:56:47Z")
Hello, By default Markdown text is left-aligned. Could you please suggest how I can center align the text? (When using table, I was able to center-align text within a table; but the table itself was left-aligned by defa… --- ## [Filebeat not connecting to logstach (getting started config)](https://discuss.elastic.co/t/filebeat-not-connecting-to-logstach-getting-started-config/85015)
**Author:** [@mninoruiz](https://discuss.elastic.co/u/mninoruiz)\ **Replies:** 7\ **Last updated:** [May 12, 2017, 11:21am UTC](https://discuss.elastic.co/t/filebeat-not-connecting-to-logstach-getting-started-config/85015 "2017-05-12T11:21:16Z")
Hi forum, following the getting started guide got the issue: 2017/05/09 03:36:24.059273 single.go:140: ERR Connecting error publishing events (retrying): Get http://localhost:5043: read tcp \[::1\]:34784-\>\[::1\]:5043: … --- ## [X-pack installed on Kibana - Reporting: Error 403 Forbidden: Sorry, you don't have access to Reporting](https://discuss.elastic.co/t/x-pack-installed-on-kibana-reporting-error-403-forbidden-sorry-you-dont-have-access-to-reporting/175003)
**Author:** [@npalanis](https://discuss.elastic.co/u/npalanis)\ **Replies:** 3\ **Last updated:** [April 18, 2019, 11:43am UTC](https://discuss.elastic.co/t/x-pack-installed-on-kibana-reporting-error-403-forbidden-sorry-you-dont-have-access-to-reporting/175003 "2019-04-18T11:43:22Z")
I installed X-pack monitoring and tried to generate the report (.CSV) using reporting feature but getting this error: "Reporting: Error 403 Forbidden: Sorry, you don't have access to Reporting" As an elastic user, I abl… --- ## [How to uninstall old metric beat version in linux](https://discuss.elastic.co/t/how-to-uninstall-old-metric-beat-version-in-linux/129317)
**Author:** [@kolli\_dilip](https://discuss.elastic.co/u/kolli_dilip)\ **Replies:** 3\ **Last updated:** [April 24, 2018, 3:21pm UTC](https://discuss.elastic.co/t/how-to-uninstall-old-metric-beat-version-in-linux/129317 "2018-04-24T15:21:48Z")
Hi team I was using metric beat 5, and want to upgrade to metric beat 6, so how to uninstall the old version os: linux Thanks in advance --- ## [Parsing an array in Ruby](https://discuss.elastic.co/t/parsing-an-array-in-ruby/121254)
**Author:** [@Karanushah.1992](https://discuss.elastic.co/u/Karanushah.1992)\ **Replies:** 4\ **Last updated:** [February 23, 2018, 7:04pm UTC](https://discuss.elastic.co/t/parsing-an-array-in-ruby/121254 "2018-02-23T19:04:40Z")
Hi, I have an array field which has epoch time values. I am trying to use Ruby filter to parse it. I am getting a syntax error. I am new to Ruby so I am unable to spot the error. Can you help me out. Below is my code i… --- ## [New build docker-compose multi-node cluster fails to retrieve password hash for reserved user \[elastic\] / at least one primary shard for the index \[.security-7\] is unavailable](https://discuss.elastic.co/t/new-build-docker-compose-multi-node-cluster-fails-to-retrieve-password-hash-for-reserved-user-elastic-at-least-one-primary-shard-for-the-index-security-7-is-unavailable/326389)
**Author:** [@cookersjs](https://discuss.elastic.co/u/cookersjs)\ **Replies:** 3\ **Last updated:** [March 16, 2023, 11:07am UTC](https://discuss.elastic.co/t/new-build-docker-compose-multi-node-cluster-fails-to-retrieve-password-hash-for-reserved-user-elastic-at-least-one-primary-shard-for-the-index-security-7-is-unavailable/326389 "2023-03-16T11:07:35Z")
Hi there, I've been following the instructions from Install Elasticsearch with Docker | Elasticsearch Guide \[8.6\] | Elastic (#docker-compose-file for multi-node cluster) and I keep running into an error that seems commo… --- ## [\[Resolved\]\[ES7.0.1\] Exception \[o.e.d.SeedHostsResolver \] \[node-1\] failed to resolve host \[node-1\] when starting es](https://discuss.elastic.co/t/resolved-es7-0-1-exception-o-e-d-seedhostsresolver-node-1-failed-to-resolve-host-node-1-when-starting-es/197960)
**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\ **Replies:** 6\ **Last updated:** [September 5, 2019, 8:51am UTC](https://discuss.elastic.co/t/resolved-es7-0-1-exception-o-e-d-seedhostsresolver-node-1-failed-to-resolve-host-node-1-when-starting-es/197960 "2019-09-05T08:51:56Z")
Hi team, I got below error when starting es7.0.1, how to correct the yml configuration file to resolve it? \[2019-09-04T08:40:22,339\]\[INFO \]\[o.e.h.AbstractHttpServerTransport\] \[node-1\] publish\_address {10.59.181.210:9… --- ## [Convert a field datatype to object or nested in logstash](https://discuss.elastic.co/t/convert-a-field-datatype-to-object-or-nested-in-logstash/51419)
**Author:** [@star](https://discuss.elastic.co/u/star)\ **Replies:** 6\ **Last updated:** [June 2, 2016, 10:42am UTC](https://discuss.elastic.co/t/convert-a-field-datatype-to-object-or-nested-in-logstash/51419 "2016-06-02T10:42:56Z")
I am unable to convert datatype of field to object or nested datatype. I get following error. Any suggestions appreciated. --- ## [Kibana 502 Bad gateway in logs](https://discuss.elastic.co/t/kibana-502-bad-gateway-in-logs/75625)
**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\ **Replies:** 3\ **Last updated:** [February 21, 2017, 2:21am UTC](https://discuss.elastic.co/t/kibana-502-bad-gateway-in-logs/75625 "2017-02-21T02:21:59Z")
Hi, I have successfully installed kibana 5.2 with ES 5.2. I am able to open the UI page but nothing seems to be visible. Just an empty page. Looking at the kibana logs i see the following error. I have no idea what doe… --- ## [Multiple Different Clients](https://discuss.elastic.co/t/multiple-different-clients/258935)
**Author:** [@austinsonger](https://discuss.elastic.co/u/austinsonger)\ **Replies:** 4\ **Last updated:** [January 4, 2021, 7:25pm UTC](https://discuss.elastic.co/t/multiple-different-clients/258935 "2021-01-04T19:25:00Z")
Is it possible to use a single instance of Elastic SIEM to monitor two different companies networks and separate them so their information will be separated? --- ## [Cluster deteriorates after a couple of days](https://discuss.elastic.co/t/cluster-deteriorates-after-a-couple-of-days/1285)
**Author:** [@helium](https://discuss.elastic.co/u/helium)\ **Replies:** 8\ **Last updated:** [November 16, 2015, 9:38pm UTC](https://discuss.elastic.co/t/cluster-deteriorates-after-a-couple-of-days/1285 "2015-11-16T21:38:08Z")
Hi, My ES cluster works great, for a couple of days, and then becomes virtually unusable. It refuses to accept data from logstash and queries becomes extremely slow. Optimizing the indices doesn't seem to help but prun… --- ## [Elasticsearch query to filter count by aggregate](https://discuss.elastic.co/t/elasticsearch-query-to-filter-count-by-aggregate/147077)
**Author:** [@Ambuj\_Jauhari](https://discuss.elastic.co/u/Ambuj_Jauhari)\ **Replies:** 0\ **Last updated:** [September 3, 2018, 12:39pm UTC](https://discuss.elastic.co/t/elasticsearch-query-to-filter-count-by-aggregate/147077 "2018-09-03T12:39:33Z")
I am writing a query to count documents, group by modifiedDateTime. This query works fine as below { "aggs" : { "types\_count" : { "value\_count" : { "field" : "id" } }, "group\_by\_st… --- ## [Two or more filters in Logstash](https://discuss.elastic.co/t/two-or-more-filters-in-logstash/212351)
**Author:** [@Paul\_Sternberg](https://discuss.elastic.co/u/Paul_Sternberg)\ **Replies:** 7\ **Last updated:** [December 19, 2019, 1:47pm UTC](https://discuss.elastic.co/t/two-or-more-filters-in-logstash/212351 "2019-12-19T13:47:01Z")
Hi folks! May be somebody know how to use 2 or more filters block or 2 or more grok blocks in logstash configuration? My current configuration looks like this: input { udp { port =\> 5514 type =\> syslog } } input … --- ## [Indexing documents to elasticsearch monthly?](https://discuss.elastic.co/t/indexing-documents-to-elasticsearch-monthly/58793)
**Author:** [@i5513](https://discuss.elastic.co/u/i5513)\ **Replies:** 4\ **Last updated:** [August 26, 2016, 12:35pm UTC](https://discuss.elastic.co/t/indexing-documents-to-elasticsearch-monthly/58793 "2016-08-26T12:35:25Z")
Hello, We have a 3 node ELK cluster with 83000000 documents and 53 gb Our cluster is populated by logstash who create a index by day We have this scheme since 2014 january Now elasticsearch is going slow. It have 484… [Previous page](https://discuss.elastic.co/top.md?page=372&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=374&per_page=50&period=all)