# Top **URL:** https://discuss.elastic.co/top.md?page=381&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 382 --- ## [Security\_exception](https://discuss.elastic.co/t/security-exception/74494)
**Author:** [@sudharsan](https://discuss.elastic.co/u/sudharsan)\ **Replies:** 5\ **Last updated:** [March 17, 2017, 7:23am UTC](https://discuss.elastic.co/t/security-exception/74494 "2017-03-17T07:23:41Z")
Hello, I have deployed Elasticsearch and Kibana from Azure Marketplace.Elastic cluster is created with 3 data nodes,3 master nodes,1 Kibana node as per my selection during deployment. Kibana VM can be communicated with t… --- ## [One index vs multiple indexes?](https://discuss.elastic.co/t/one-index-vs-multiple-indexes/165984)
**Author:** [@akhisar](https://discuss.elastic.co/u/akhisar)\ **Replies:** 6\ **Last updated:** [January 29, 2019, 8:32am UTC](https://discuss.elastic.co/t/one-index-vs-multiple-indexes/165984 "2019-01-29T08:32:17Z")
Hello All, Which is a better approach: single index or should it to be split into multiple index. Please can you point out the pros and cons of both approaches. Rgds, -Akhil --- ## [Snapshot repository failure](https://discuss.elastic.co/t/snapshot-repository-failure/27887)
**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\ **Replies:** 6\ **Last updated:** [August 23, 2015, 4:16pm UTC](https://discuss.elastic.co/t/snapshot-repository-failure/27887 "2015-08-23T16:16:11Z")
Hey all, I'm attempting to setup snapshots on my ES cluster. So I came up with this command: curl --user admin:secret PUT http://logs.example.com:9200/\_snapshot/jf\_backup \\ '{ "type": "fs", "settings": {… --- ## [Kibana4 の Discover で表示したデータをダウンロードする方法は？](https://discuss.elastic.co/t/kibana4-discover/1275)
**Author:** [@suzuki](https://discuss.elastic.co/u/suzuki)\ **Replies:** 2\ **Last updated:** [May 26, 2015, 4:30am UTC](https://discuss.elastic.co/t/kibana4-discover/1275 "2015-05-26T04:30:37Z")
こんにちは。 Kibana4 の Discover を使って、ログデータの中から特徴あるデータを探そうとしています。 検索条件やフィルタでデータを絞り込み、表示するフィールドを選択し、それっぽいデータが表示されたので、このままデータをダウンロードしたい！！と思う時があるのですが、そういう場合はどうされていますか？ いまの Kibana4 ではその機能が無さそうなので、別のやり方を模索していますが、何かご存知の方がいらっしゃっ… --- ## [org.apache.lucene.index.CorruptIndexException: checksum failed](https://discuss.elastic.co/t/org-apache-lucene-index-corruptindexexception-checksum-failed/55856)
**Author:** [@suiyuan2009](https://discuss.elastic.co/u/suiyuan2009)\ **Replies:** 7\ **Last updated:** [July 20, 2016, 7:59am UTC](https://discuss.elastic.co/t/org-apache-lucene-index-corruptindexexception-checksum-failed/55856 "2016-07-20T07:59:51Z")
I use ubuntu to run lucene(not ES), and nfs to mount disk(actually is rocketstor) of macmini. I get this error constantly. I have already used org.apache.lucene.index.CheckIndex, but will still crash after restart progra… --- ## [Data corruption in a few elasticsearch indices](https://discuss.elastic.co/t/data-corruption-in-a-few-elasticsearch-indices/104824)
**Author:** [@amiexc](https://discuss.elastic.co/u/amiexc)\ **Replies:** 2\ **Last updated:** [October 24, 2017, 1:37am UTC](https://discuss.elastic.co/t/data-corruption-in-a-few-elasticsearch-indices/104824 "2017-10-24T01:37:12Z")
Hi all, We've encountered a data corruption in our main production elasticsearch instance. We started getting the following response when querying the corrupted index: {"error":{"root\_cause":\[{"type":"no\_shard\_availabl… --- ## [Fleet Server installation options](https://discuss.elastic.co/t/fleet-server-installation-options/274261)
**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\ **Replies:** 4\ **Last updated:** [May 31, 2021, 6:29am UTC](https://discuss.elastic.co/t/fleet-server-installation-options/274261 "2021-05-31T06:29:59Z")
Hey, currently, the only way to install fleet server is using a subprocess of elastic agent. This is very weird to me - Elastic Agent is a client component, and Fleet Server is an infrastructure component. I typically … --- ## [Elasticsearch crashes with "Certificate chain is not valid" exception](https://discuss.elastic.co/t/elasticsearch-crashes-with-certificate-chain-is-not-valid-exception/212611)
**Author:** [@fetch](https://discuss.elastic.co/u/fetch)\ **Replies:** 1\ **Last updated:** [December 20, 2019, 10:43am UTC](https://discuss.elastic.co/t/elasticsearch-crashes-with-certificate-chain-is-not-valid-exception/212611 "2019-12-20T10:43:48Z")
Hello, I have a cluster of 3 servers with ELK 6.8.6 stack. I'm trying to setup the 3rd server of the cluster, but it behaves somehow different. I specify the following configuration for ssl: xpack.security.enabled: t… --- ## [Elasticsearch aggregations, get additional field in bucket](https://discuss.elastic.co/t/elasticsearch-aggregations-get-additional-field-in-bucket/1689)
**Author:** [@Petar\_Pavlovic](https://discuss.elastic.co/u/Petar_Pavlovic)\ **Replies:** 2\ **Last updated:** [June 2, 2015, 8:35am UTC](https://discuss.elastic.co/t/elasticsearch-aggregations-get-additional-field-in-bucket/1689 "2015-06-02T08:35:26Z")
(note: the same query is asked on SO: http://stackoverflow.com/questions/30590729/elasticsearch-aggregations-get-additional-field-in-bucket) I query ES index to filter results and get aggregations by selected terms. A … --- ## [Remotely access an elasticsearch server using SSH tunnel](https://discuss.elastic.co/t/remotely-access-an-elasticsearch-server-using-ssh-tunnel/168278)
**Author:** [@amitnegi6190](https://discuss.elastic.co/u/amitnegi6190)\ **Replies:** 1\ **Last updated:** [March 9, 2019, 12:41am UTC](https://discuss.elastic.co/t/remotely-access-an-elasticsearch-server-using-ssh-tunnel/168278 "2019-03-09T00:41:32Z")
Hi, I have an elasticsearch node on a private network. This node is accessible through aws bastion. So I am trying to connect my local machine to the elasticsearch node by creating an SSH tunnel on port 9200. I use the … --- ## [Issue with curator - Schema error: extra keys not allowed @ data\['client'\]\['timoeut'\]](https://discuss.elastic.co/t/issue-with-curator-schema-error-extra-keys-not-allowed-data-client-timoeut/166095)
**Author:** [@Kok\_Sin\_See](https://discuss.elastic.co/u/Kok_Sin_See)\ **Replies:** 7\ **Last updated:** [January 30, 2019, 6:09am UTC](https://discuss.elastic.co/t/issue-with-curator-schema-error-extra-keys-not-allowed-data-client-timoeut/166095 "2019-01-30T06:09:32Z")
Hi, I am getting this error: Schema error: extra keys not allowed @ data\['client'\]\['timoeut'\] the timeout is spelled as aboved. Can advise? thanks --- ## [Snapshot and compression](https://discuss.elastic.co/t/snapshot-and-compression/77483)
**Author:** [@gphadke](https://discuss.elastic.co/u/gphadke)\ **Replies:** 3\ **Last updated:** [March 7, 2017, 12:52pm UTC](https://discuss.elastic.co/t/snapshot-and-compression/77483 "2017-03-07T12:52:02Z")
Hello I understand that the compress option of the snapshot repo works only on the meta data. Is there a way to compress the data files? I wanted to know if there is a way to configure the compression of data files dur… --- ## [Visualizations using time only not date](https://discuss.elastic.co/t/visualizations-using-time-only-not-date/77955)
**Author:** [@Pokecallum](https://discuss.elastic.co/u/Pokecallum)\ **Replies:** 5\ **Last updated:** [March 9, 2017, 2:48pm UTC](https://discuss.elastic.co/t/visualizations-using-time-only-not-date/77955 "2017-03-09T14:48:52Z")
I'm looking to create a graph that only uses the time data from my Date field which after going through a csv filter shows as February 28th 2017, 14:43:29.000 An being being able to see the time a user logs in over t… --- ## [Refresh Interval Value for Read-only index](https://discuss.elastic.co/t/refresh-interval-value-for-read-only-index/188976)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 7\ **Last updated:** [July 5, 2019, 12:01pm UTC](https://discuss.elastic.co/t/refresh-interval-value-for-read-only-index/188976 "2019-07-05T12:01:07Z")
Does it really matter what values we set in refresh\_interval for a read-only index? I'm re-indexing a huge index that contains legacy data and is never updated i.e read-only (RO). Before re-indexing, in order to boost p… --- ## [Azure AD authentication to Kibana](https://discuss.elastic.co/t/azure-ad-authentication-to-kibana/235230)
**Author:** [@brettlarsonwci](https://discuss.elastic.co/u/brettlarsonwci)\ **Replies:** 7\ **Last updated:** [June 2, 2020, 3:46pm UTC](https://discuss.elastic.co/t/azure-ad-authentication-to-kibana/235230 "2020-06-02T15:46:55Z")
Hello all - I've scowered the archives of blog posts and similar questions regarding configuration of Azure AD for authentication to Kibana. I have updated my elasticsearch.yml file with the settings as best as I can fi… --- ## [Kibana SSL "Unable to revive connection: https://localhost:9200/"](https://discuss.elastic.co/t/kibana-ssl-unable-to-revive-connection-https-localhost-9200/231037)
**Author:** [@derekmizak](https://discuss.elastic.co/u/derekmizak)\ **Replies:** 5\ **Last updated:** [May 5, 2020, 4:36pm UTC](https://discuss.elastic.co/t/kibana-ssl-unable-to-revive-connection-https-localhost-9200/231037 "2020-05-05T16:36:23Z")
I have elasticsearch and kibana working on the same node in the dev environment. I have configured TLS in elasticsearch and I can connect to it: root@host1:/home/admin# curl -k -0 https://localhost:9200 -u user:pas… --- ## [To snapshot one index to file and restore it from file](https://discuss.elastic.co/t/to-snapshot-one-index-to-file-and-restore-it-from-file/70539)
**Author:** [@dmitriiPopov](https://discuss.elastic.co/u/dmitriiPopov)\ **Replies:** 1\ **Last updated:** [January 4, 2017, 11:27am UTC](https://discuss.elastic.co/t/to-snapshot-one-index-to-file-and-restore-it-from-file/70539 "2017-01-04T11:27:09Z")
Hi. Can I snapshot/dump data from ONLY selected index to local file? And I need restore it from this file later. How can I do it via CURL interface? --- ## [Trying to set up TLS on Elastic CLuster](https://discuss.elastic.co/t/trying-to-set-up-tls-on-elastic-cluster/143323)
**Author:** [@bigdamhero](https://discuss.elastic.co/u/bigdamhero)\ **Replies:** 6\ **Last updated:** [August 7, 2018, 4:47pm UTC](https://discuss.elastic.co/t/trying-to-set-up-tls-on-elastic-cluster/143323 "2018-08-07T16:47:13Z")
I'm getting an error in the java log. Caused by: java.security.AccessControlException: access denied ("java.io.FilePermission" "/usr/share/elasticsearch/config/certs/elastic-node-tls-ca.p12" "read") Checking the permis… --- ## [Is it possible : Terms filter by ignorecase?](https://discuss.elastic.co/t/is-it-possible-terms-filter-by-ignorecase/78914)
**Author:** [@Gautam\_Vanani](https://discuss.elastic.co/u/Gautam_Vanani)\ **Replies:** 6\ **Last updated:** [March 16, 2017, 7:31pm UTC](https://discuss.elastic.co/t/is-it-possible-terms-filter-by-ignorecase/78914 "2017-03-16T19:31:01Z")
I'm new in elastic search...can anyone help to create a query that will search multiple values with ignoring case. if I use lower case then below search query is working properly but when I use UPPER case it is not retur… --- ## [Data node left the cluster due to \`master\_left - failed to ping, tried \[3\] times, each with maximum \[30s\] timeout\]\`](https://discuss.elastic.co/t/data-node-left-the-cluster-due-to-master-left-failed-to-ping-tried-3-times-each-with-maximum-30s-timeout/162618)
**Author:** [@David\_comp](https://discuss.elastic.co/u/David_comp)\ **Replies:** 5\ **Last updated:** [January 7, 2019, 7:53am UTC](https://discuss.elastic.co/t/data-node-left-the-cluster-due-to-master-left-failed-to-ping-tried-3-times-each-with-maximum-30s-timeout/162618 "2019-01-07T07:53:07Z")
we have Elaticsearch cluster that running over a year with 54 data nodes and 3 master nodes. ES version is 5.2.1. in the last month, some data node are left the cluster with the following error: failed to ping, tried \[… --- ## [Curator running problem](https://discuss.elastic.co/t/curator-running-problem/89257)
**Author:** [@Ximeng\_Zhao](https://discuss.elastic.co/u/Ximeng_Zhao)\ **Replies:** 7\ **Last updated:** [June 13, 2017, 9:56pm UTC](https://discuss.elastic.co/t/curator-running-problem/89257 "2017-06-13T21:56:44Z")
Hi all, I have installed curator via RPM package on CentOS 6.7. I tried to delete some indices on elastic search. But when I tried to run curator, it gives error as below. 2017-06-13 15:13:21,660 DEBUG … --- ## [KIbana Query: regexp of 10 numbers](https://discuss.elastic.co/t/kibana-query-regexp-of-10-numbers/217650)
**Author:** [@AndresL](https://discuss.elastic.co/u/AndresL)\ **Replies:** 4\ **Last updated:** [February 5, 2020, 11:18am UTC](https://discuss.elastic.co/t/kibana-query-regexp-of-10-numbers/217650 "2020-02-05T11:18:56Z")
Im trying to match in a search (discovery tool): 1234567890 or 123456-1234 Those expressions are not working (only catch 1 number) message: /\[0-9\]{10}/ or message: /\[0-9\]{6}-\[0-9\]{4}/ It should find numbers like … --- ## [Logstash is not open 5044 port on ubuntu server](https://discuss.elastic.co/t/logstash-is-not-open-5044-port-on-ubuntu-server/85660)
**Author:** [@Fly](https://discuss.elastic.co/u/Fly)\ **Replies:** 7\ **Last updated:** [May 15, 2017, 1:03am UTC](https://discuss.elastic.co/t/logstash-is-not-open-5044-port-on-ubuntu-server/85660 "2017-05-15T01:03:21Z")
Hi all, I configured the pipeline to collect windows firewall log of windows server 2012 as follows: etc/logstash/conf.d/10-input.conf input { beats { # The port to listen on for filebeat connections. port =\> 5044 … --- ## [Can someone point me to great live websites using ElasticSearch?](https://discuss.elastic.co/t/can-someone-point-me-to-great-live-websites-using-elasticsearch/1599)
**Author:** [@flavio](https://discuss.elastic.co/u/flavio)\ **Replies:** 7\ **Last updated:** [June 3, 2015, 5:50am UTC](https://discuss.elastic.co/t/can-someone-point-me-to-great-live-websites-using-elasticsearch/1599 "2015-06-03T05:50:48Z")
Can someone point me to great live websites using ElasticSearch? Preferably with complex search scenarios using aggregations and many of the newest advanced features. In Google Groups, wikipedia, stackoverflow and gi… --- ## [Working with elasticsearch-keystore](https://discuss.elastic.co/t/working-with-elasticsearch-keystore/234429)
**Author:** [@mcardozo](https://discuss.elastic.co/u/mcardozo)\ **Replies:** 4\ **Last updated:** [May 29, 2020, 5:46pm UTC](https://discuss.elastic.co/t/working-with-elasticsearch-keystore/234429 "2020-05-29T17:46:28Z")
I'm running through a basic install on a Ubuntu server 20.04 VM. I'm able to get ES installed with no trouble, but am having some issues when I start working through setting up security and encryption. Specifically I'm… --- ## [How to schedule a Watcher in local timezone?](https://discuss.elastic.co/t/how-to-schedule-a-watcher-in-local-timezone/214953)
**Author:** [@fim](https://discuss.elastic.co/u/fim)\ **Replies:** 1\ **Last updated:** [January 14, 2020, 4:42pm UTC](https://discuss.elastic.co/t/how-to-schedule-a-watcher-in-local-timezone/214953 "2020-01-14T16:42:26Z")
Hello Community, I'm bit confused why my watcher is not calculating the local timezone automatically. The below watcher should trigger hourly from 05:00 until 17:00. When I check the log in Kibana, the Watcher starts t… --- ## [Filebeat with Redis or just logstash?](https://discuss.elastic.co/t/filebeat-with-redis-or-just-logstash/66270)
**Author:** [@xon](https://discuss.elastic.co/u/xon)\ **Replies:** 6\ **Last updated:** [November 28, 2016, 2:57pm UTC](https://discuss.elastic.co/t/filebeat-with-redis-or-just-logstash/66270 "2016-11-28T14:57:50Z")
Hi there, I am planning to deploy filebeat (and some other beats such as the winlogbeat and maybe the packetbeat) with logstash and elasticsearch and I was thinking that it would make sense to have a queuing system so … --- ## [Calculating Average Daily Count over 30 Days](https://discuss.elastic.co/t/calculating-average-daily-count-over-30-days/262758)
**Author:** [@Clay\_Curtis](https://discuss.elastic.co/u/Clay_Curtis)\ **Replies:** 1\ **Last updated:** [February 1, 2021, 7:42am UTC](https://discuss.elastic.co/t/calculating-average-daily-count-over-30-days/262758 "2021-02-01T07:42:38Z")
I am trying to make a table visualization that shows the 30-day averages of the daily averages of log volume (count) per per log source split by type. For example, If I have 10 log sources, half are firewalls, and hal… --- ## [Index 404 error in logstash](https://discuss.elastic.co/t/index-404-error-in-logstash/91830)
**Author:** [@mkain](https://discuss.elastic.co/u/mkain)\ **Replies:** 3\ **Last updated:** [July 5, 2017, 6:37am UTC](https://discuss.elastic.co/t/index-404-error-in-logstash/91830 "2017-07-05T06:37:16Z")
I have started getting following error in logstash. I had installed x-pack on on 3 ELK components and it was working fine for a while. but after few hours I started getting following error. I have even tried to remove … --- ## [How to connect beats to AWS elasticsearch with authentication](https://discuss.elastic.co/t/how-to-connect-beats-to-aws-elasticsearch-with-authentication/83465)
**Author:** [@wb303](https://discuss.elastic.co/u/wb303)\ **Replies:** 3\ **Last updated:** [April 25, 2017, 7:02pm UTC](https://discuss.elastic.co/t/how-to-connect-beats-to-aws-elasticsearch-with-authentication/83465 "2017-04-25T19:02:11Z")
I am trying to send data from remote filebeats and metricbeats to AWS elasticsearch service. I have authentication enabled but I cannot figure out how I would put AWS credentials in the config. In the metricbeat.yml fi… --- ## [Timelion: Getting more than 100% for CPU usage](https://discuss.elastic.co/t/timelion-getting-more-than-100-for-cpu-usage/65688)
**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\ **Replies:** 4\ **Last updated:** [November 18, 2016, 8:56am UTC](https://discuss.elastic.co/t/timelion-getting-more-than-100-for-cpu-usage/65688 "2016-11-18T08:56:12Z")
I'm using metricbeat to collect metricdata for a few debian servers. I've built the following chart in Timelion: This is the query for it: .es(metric=cardinality:system.process.cpu.total.pct).trim().movingaverage(5)… --- ## [How to override @timestamp field by elasticsearch pipeline](https://discuss.elastic.co/t/how-to-override-timestamp-field-by-elasticsearch-pipeline/111262)
**Author:** [@Augustus1995](https://discuss.elastic.co/u/Augustus1995)\ **Replies:** 7\ **Last updated:** [December 13, 2017, 3:36am UTC](https://discuss.elastic.co/t/how-to-override-timestamp-field-by-elasticsearch-pipeline/111262 "2017-12-13T03:36:14Z")
Hi guys I use filebeat to collect logs and send to elasticesearch directly. And the log contain the time such as 2017-12-12 15:41:30.000 \[pool-8-thread-18\] DEBUG c.h.i.c.m.servicemanager.task.PassiveNodeHbTask - Passiv… --- ## [Filebeat is reading my logs, but logs with date time on name, stop incremet](https://discuss.elastic.co/t/filebeat-is-reading-my-logs-but-logs-with-date-time-on-name-stop-incremet/37589)
**Author:** [@adsqueiroz](https://discuss.elastic.co/u/adsqueiroz)\ **Replies:** 6\ **Last updated:** [December 22, 2015, 12:16pm UTC](https://discuss.elastic.co/t/filebeat-is-reading-my-logs-but-logs-with-date-time-on-name-stop-incremet/37589 "2015-12-22T12:16:18Z")
Hello folks! I'm new on FileBeat, Logstash and Elastiscsearch. I'm trying to implement in my work, but I'm having problem with FileBeat. When I start the service from FileBeat, my logs with date time on name, stop in… --- ## [Connecting FileBeats to Logstash](https://discuss.elastic.co/t/connecting-filebeats-to-logstash/44575)
**Author:** [@nateuni](https://discuss.elastic.co/u/nateuni)\ **Replies:** 3\ **Last updated:** [March 17, 2016, 4:17am UTC](https://discuss.elastic.co/t/connecting-filebeats-to-logstash/44575 "2016-03-17T04:17:58Z")
I have FileBeats running on an ubuntu webserver on EC2. I have opened up the ports, but still I cannot get them to talk to each other. filebeats starts without errors but I cannot get it to print the apache logs to th… --- ## [Monitoring Disk/CPU/RAM on Windows Nodes](https://discuss.elastic.co/t/monitoring-disk-cpu-ram-on-windows-nodes/65034)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 3\ **Last updated:** [November 4, 2016, 7:40pm UTC](https://discuss.elastic.co/t/monitoring-disk-cpu-ram-on-windows-nodes/65034 "2016-11-04T19:40:38Z")
Is there a known solution for monitoring disk/memory/cpu usage on Windows boxes? Ideally this could be monitored through winlogbeat, however if I need to install a similar beat, that is fine. In order to attempt this … --- ## [Kibana keep state (dashboards, visualizations, settings...) on Docker ELK](https://discuss.elastic.co/t/kibana-keep-state-dashboards-visualizations-settings-on-docker-elk/94302)
**Author:** [@nlybe](https://discuss.elastic.co/u/nlybe)\ **Replies:** 1\ **Last updated:** [July 24, 2017, 5:59pm UTC](https://discuss.elastic.co/t/kibana-keep-state-dashboards-visualizations-settings-on-docker-elk/94302 "2017-07-24T17:59:49Z")
Hello I am using Docker ELK and I keep Elasticsearch data permanently by using the following on .yml volumes: - /path/to/storage:/usr/share/elasticsearch/data As I have read around, Kibana saves state (dashboard… --- ## [How to handle many-to-many relationships](https://discuss.elastic.co/t/how-to-handle-many-to-many-relationships/47864)
**Author:** [@DMG](https://discuss.elastic.co/u/DMG)\ **Replies:** 1\ **Last updated:** [April 20, 2016, 8:42am UTC](https://discuss.elastic.co/t/how-to-handle-many-to-many-relationships/47864 "2016-04-20T08:42:19Z")
So far I have database with many to many relation. Tables is "lists" and "objects" where list contains many objects and objects could be in many lists. Now what I can not find is how to set such relations in Elasticsearc… --- ## [Kibana cannot connect to the Elastic Package Registry, which provides Elastic Agent integrations](https://discuss.elastic.co/t/kibana-cannot-connect-to-the-elastic-package-registry-which-provides-elastic-agent-integrations/314107)
**Author:** [@Sher\_Khan](https://discuss.elastic.co/u/Sher_Khan)\ **Replies:** 8\ **Last updated:** [September 14, 2022, 4:37am UTC](https://discuss.elastic.co/t/kibana-cannot-connect-to-the-elastic-package-registry-which-provides-elastic-agent-integrations/314107 "2022-09-14T04:37:54Z")
How to resolve this issue? --- ## [Could not find or load main class](https://discuss.elastic.co/t/could-not-find-or-load-main-class/85350)
**Author:** [@Ayoub\_Benzouine](https://discuss.elastic.co/u/Ayoub_Benzouine)\ **Replies:** 5\ **Last updated:** [May 12, 2017, 8:15am UTC](https://discuss.elastic.co/t/could-not-find-or-load-main-class/85350 "2017-05-12T08:15:24Z")
I am trying to install Elasticsearch 2.2.0 and I am getting this errors: ./elasticsearch: line 75: dirname: command not found ./elasticsearch: line 98: dirname: command not found ./elasticsearch: line 125: uname: comman… --- ## [String mapping: ignore\_above for not\_analyzed fields](https://discuss.elastic.co/t/string-mapping-ignore-above-for-not-analyzed-fields/26511)
**Author:** [@BradVido](https://discuss.elastic.co/u/BradVido)\ **Replies:** 3\ **Last updated:** [October 30, 2015, 4:56pm UTC](https://discuss.elastic.co/t/string-mapping-ignore-above-for-not-analyzed-fields/26511 "2015-10-30T16:56:41Z")
I have some string fields in ES with mappings like so: { "index": "analyzed", "type": "string", "fields": { "raw": { "index": "not\_analyzed", "ignore\_above": 256, "type": "string", "doc\_values": true … --- ## [Default timestamp in date Field](https://discuss.elastic.co/t/default-timestamp-in-date-field/122853)
**Author:** [@prasad\_kp](https://discuss.elastic.co/u/prasad_kp)\ **Replies:** 4\ **Last updated:** [March 15, 2018, 8:51am UTC](https://discuss.elastic.co/t/default-timestamp-in-date-field/122853 "2018-03-15T08:51:58Z")
I am looking for Replica of Default NOW() (MYSQL) in elasticsearch.As \_timestamp has been removed in the higher version,how we do this in 6.X { "properties":{ "defautlt\_time":{ "type":"date", … --- ## [Logstash stuck after Restart/Stop command](https://discuss.elastic.co/t/logstash-stuck-after-restart-stop-command/310797)
**Author:** [@Oriya](https://discuss.elastic.co/u/Oriya)\ **Replies:** 2\ **Last updated:** [July 31, 2022, 9:48pm UTC](https://discuss.elastic.co/t/logstash-stuck-after-restart-stop-command/310797 "2022-07-31T21:48:30Z")
Hi, i have a logstash server (8.1.3 version) with 3 pipelines. each pipeline configure with jdbc to collect data from sql server. everything works ok until i try to execute the : "systemctl restart logstash" and it'… --- ## [Different inputs logs with logstash](https://discuss.elastic.co/t/different-inputs-logs-with-logstash/93068)
**Author:** [@cazyfunlover](https://discuss.elastic.co/u/cazyfunlover)\ **Replies:** 6\ **Last updated:** [July 13, 2017, 7:15pm UTC](https://discuss.elastic.co/t/different-inputs-logs-with-logstash/93068 "2017-07-13T19:15:22Z")
I am trying to parse different logs with logstash . Right now i have only one log file coming from multiple servers at logstash . Parsing working OK . But i am planning to add multiple logs ( syslogs , apache , windows… --- ## [Notification/Alert for error labelled logs](https://discuss.elastic.co/t/notification-alert-for-error-labelled-logs/207268)
**Author:** [@Jegan\_Mariappan](https://discuss.elastic.co/u/Jegan_Mariappan)\ **Replies:** 6\ **Last updated:** [November 12, 2019, 4:55pm UTC](https://discuss.elastic.co/t/notification-alert-for-error-labelled-logs/207268 "2019-11-12T16:55:01Z")
Is there any option in Elastic cloud to send alerts or notifications to the customer via email in case of any specific occurrence of log levels from the logs collected by logstash? --- ## [Setting up IIS log collection with filebeat](https://discuss.elastic.co/t/setting-up-iis-log-collection-with-filebeat/136361)
**Author:** [@alexserd](https://discuss.elastic.co/u/alexserd)\ **Replies:** 6\ **Last updated:** [June 19, 2018, 4:16pm UTC](https://discuss.elastic.co/t/setting-up-iis-log-collection-with-filebeat/136361 "2018-06-19T16:16:44Z")
I'm trying to collect IIS logs with filebeat. Here is my filebeat yml file How do I configure logstash yml and do I need to create new index in kibana? I'm new to ELK stack any help is appreciated filebeat.prospectors… --- ## [Disk partition size](https://discuss.elastic.co/t/disk-partition-size/31557)
**Author:** [@weevil](https://discuss.elastic.co/u/weevil)\ **Replies:** 5\ **Last updated:** [October 5, 2015, 7:14pm UTC](https://discuss.elastic.co/t/disk-partition-size/31557 "2015-10-05T19:14:30Z")
I am new to ELK and I am looking to setup a CentOS server with 500GB of disk space. I found the data structure on the site but I don't see anything on how the file system should be partitioned before I install. I'm ass… --- ## [Trying to recover from 'red' after full disk](https://discuss.elastic.co/t/trying-to-recover-from-red-after-full-disk/52767)
**Author:** [@Lucas\_Graf](https://discuss.elastic.co/u/Lucas_Graf)\ **Replies:** 8\ **Last updated:** [June 17, 2016, 3:32am UTC](https://discuss.elastic.co/t/trying-to-recover-from-red-after-full-disk/52767 "2016-06-17T03:32:28Z")
Somehow our drive got full and caused our Elasticsearch install to go red. I've read most of the other topics on this and none really say how to fix it. Notable errors I'm seeing are.. \[2016-06-14 10:15:19,598\]\[IN… --- ## [Missing authentication token for REST](https://discuss.elastic.co/t/missing-authentication-token-for-rest/29373)
**Author:** [@JPVay](https://discuss.elastic.co/u/JPVay)\ **Replies:** 3\ **Last updated:** [November 12, 2015, 2:13am UTC](https://discuss.elastic.co/t/missing-authentication-token-for-rest/29373 "2015-11-12T02:13:02Z")
ES + SHIELD - 1 node (everythig is local) admin account (realm) SHIELD : trial version curl -u jpv -XGET 'http://localhost:9200/' works fine http://localhost:9200/ in browser (chrome) works fine (ask user/passw dia… --- ## [Browser throws server didn’t accept your login certificate, or one may not have been provided](https://discuss.elastic.co/t/browser-throws-server-didn-t-accept-your-login-certificate-or-one-may-not-have-been-provided/217112)
**Author:** [@VIGNESHkumar](https://discuss.elastic.co/u/VIGNESHkumar)\ **Replies:** 5\ **Last updated:** [February 5, 2020, 11:46am UTC](https://discuss.elastic.co/t/browser-throws-server-didn-t-accept-your-login-certificate-or-one-may-not-have-been-provided/217112 "2020-02-05T11:46:11Z")
Elasticsearch is configured and installed in local server. While calling http://servername:9200 It throws client sending HTTP request to https server. But when I send https://servername:9200 The browser throws serv… --- ## [Atomic insert/delete/update on multiple indices](https://discuss.elastic.co/t/atomic-insert-delete-update-on-multiple-indices/152864)
**Author:** [@JF2018](https://discuss.elastic.co/u/JF2018)\ **Replies:** 8\ **Last updated:** [October 18, 2018, 2:51pm UTC](https://discuss.elastic.co/t/atomic-insert-delete-update-on-multiple-indices/152864 "2018-10-18T14:51:30Z")
Hi I struggle with large documents in an index. When we want to extract something via source it is slow since it has to parse the entire source. We could use stored fields, but this seems like a bad solution, when we … [Previous page](https://discuss.elastic.co/top.md?page=380&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=382&per_page=50&period=all)