# Top **URL:** https://discuss.elastic.co/top.md?page=400&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 401 --- ## [Can't set listen all network interfaces](https://discuss.elastic.co/t/cant-set-listen-all-network-interfaces/68987)
**Author:** [@111126](https://discuss.elastic.co/u/111126)\ **Replies:** 4\ **Last updated:** [December 14, 2016, 10:58am UTC](https://discuss.elastic.co/t/cant-set-listen-all-network-interfaces/68987 "2016-12-14T10:58:32Z")
Hello. Default setting elastic listen 127.0.0.1:9200. I need that elastic listen all network interfaces - 0 0.0.0.0:9200 If I set network.host: "0.0.0.0" in /etc/elasticsearch/elaticsearch.yml, I have the next error: E… --- ## [Kibana cannot connect to elasticsearch cluster](https://discuss.elastic.co/t/kibana-cannot-connect-to-elasticsearch-cluster/152262)
**Author:** [@Ryne\_Keel](https://discuss.elastic.co/u/Ryne_Keel)\ **Replies:** 1\ **Last updated:** [October 12, 2018, 5:32pm UTC](https://discuss.elastic.co/t/kibana-cannot-connect-to-elasticsearch-cluster/152262 "2018-10-12T17:32:02Z")
Cannot connect to the Elasticsearch cluster currently configured for Kibana. Refer to the Kibana logs for more details and refresh to try again. When I connect to kibana I get the above message ^ elastic.yml: cluster… --- ## [How to urldecode %uXXXX type of strings?](https://discuss.elastic.co/t/how-to-urldecode-uxxxx-type-of-strings/27718)
**Author:** [@foresightyj](https://discuss.elastic.co/u/foresightyj)\ **Replies:** 2\ **Last updated:** [August 20, 2015, 5:26am UTC](https://discuss.elastic.co/t/how-to-urldecode-uxxxx-type-of-strings/27718 "2015-08-20T05:26:13Z")
I needed a javascript equivalent of unescape in logstash. I know %uXXXX is not standard but this is still quite common. A lot of our users' browsers send urls in this format. I am reserving the use of ruby filter in logs… --- ## [A plugin had an unrecoverable error](https://discuss.elastic.co/t/a-plugin-had-an-unrecoverable-error/33176)
**Author:** [@Daniel\_Silva1](https://discuss.elastic.co/u/Daniel_Silva1)\ **Replies:** 3\ **Last updated:** [October 29, 2015, 4:00pm UTC](https://discuss.elastic.co/t/a-plugin-had-an-unrecoverable-error/33176 "2015-10-29T16:00:11Z")
Hi When I start logstash it crashes sometimes after one minute, sometimes take more time, but in resume crash. Did you have any suggestion? I already google it, but didn't find a good fix... Here is my input and t… --- ## [Recovering from cluster.blocks.read\_only=true in dynamic settings](https://discuss.elastic.co/t/recovering-from-cluster-blocks-read-only-true-in-dynamic-settings/27050)
**Author:** [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Replies:** 4\ **Last updated:** [August 10, 2015, 8:50am UTC](https://discuss.elastic.co/t/recovering-from-cluster-blocks-read-only-true-in-dynamic-settings/27050 "2015-08-10T08:50:46Z")
I managed to get cluster.blocks.read\_only=true into my persistent dynamic settings. Unfortunately, when the cluster is read only it doesn't seem to allow changes in the dynamic settings so I can't figure out how to get o… --- ## [Is there a way to make automated CREATED\_AT date field?](https://discuss.elastic.co/t/is-there-a-way-to-make-automated-created-at-date-field/1043)
**Author:** [@virtuman](https://discuss.elastic.co/u/virtuman)\ **Replies:** 4\ **Last updated:** [May 21, 2015, 12:54am UTC](https://discuss.elastic.co/t/is-there-a-way-to-make-automated-created-at-date-field/1043 "2015-05-21T00:54:05Z")
We do a lot of updating of the same documents and would be absolutely awesome to have a way for us to tell when the document was originally created. Our processing scripts push data to elasticsearch whenever new changes … --- ## [Logstash Does not extract timestamp from JSON](https://discuss.elastic.co/t/logstash-does-not-extract-timestamp-from-json/52151)
**Author:** [@sunnysharma](https://discuss.elastic.co/u/sunnysharma)\ **Replies:** 5\ **Last updated:** [February 15, 2017, 6:17pm UTC](https://discuss.elastic.co/t/logstash-does-not-extract-timestamp-from-json/52151 "2017-02-15T18:17:32Z")
Hi Folks, Logstash noob here. I am trying to put some JSON data but logstash is not setting my log data timestamp to @timestamp field. It continues to use the time when the data is read into logstash. Here's the log… --- ## [Low level client VS high level client API](https://discuss.elastic.co/t/low-level-client-vs-high-level-client-api/56856)
**Author:** [@Harinath](https://discuss.elastic.co/u/Harinath)\ **Replies:** 3\ **Last updated:** [August 1, 2016, 12:22pm UTC](https://discuss.elastic.co/t/low-level-client-vs-high-level-client-api/56856 "2016-08-01T12:22:36Z")
What is the difference between low level client and high level client in Elasticsearch? --- ## [Logstash Reached open files limit](https://discuss.elastic.co/t/logstash-reached-open-files-limit/167331)
**Author:** [@Rocky\_RK](https://discuss.elastic.co/u/Rocky_RK)\ **Replies:** 4\ **Last updated:** [February 6, 2019, 5:53pm UTC](https://discuss.elastic.co/t/logstash-reached-open-files-limit/167331 "2019-02-06T17:53:32Z")
I understand this question with the title has been asked many times before and almost every thread i has opened and learned here, but the doesn't come across any concrete answer so far specially for the Linux with syst… --- ## [Unable to establish SSL connection with ElasticSearch 6.x using Rest Client](https://discuss.elastic.co/t/unable-to-establish-ssl-connection-with-elasticsearch-6-x-using-rest-client/133320)
**Author:** [@Aishwarya\_S](https://discuss.elastic.co/u/Aishwarya_S)\ **Replies:** 3\ **Last updated:** [May 26, 2018, 7:13pm UTC](https://discuss.elastic.co/t/unable-to-establish-ssl-connection-with-elasticsearch-6-x-using-rest-client/133320 "2018-05-26T19:13:09Z")
I am using the following code snippet to establish an SSL connection to ElasticSearch. KeyStore sslAuth = KeyStore.getInstance("jks"); OpenOption\[\] options = new OpenOption\[\] { StandardOpenOption.READ }… --- ## [Logstash dont use all available CPU-Cores](https://discuss.elastic.co/t/logstash-dont-use-all-available-cpu-cores/46538)
**Author:** [@german23](https://discuss.elastic.co/u/german23)\ **Replies:** 7\ **Last updated:** [March 8, 2017, 12:31pm UTC](https://discuss.elastic.co/t/logstash-dont-use-all-available-cpu-cores/46538 "2017-03-08T12:31:00Z")
Hey guys, sorry if this is already handled in another topic here, i did not find any matching. Last week we installed logstash on a new physical server, that have 28(+28 Multithreading) CPU Threads and 64GB RAM. Fi… --- ## [Extract timestamp from the logline](https://discuss.elastic.co/t/extract-timestamp-from-the-logline/195277)
**Author:** [@justin1](https://discuss.elastic.co/u/justin1)\ **Replies:** 6\ **Last updated:** [August 15, 2019, 11:52pm UTC](https://discuss.elastic.co/t/extract-timestamp-from-the-logline/195277 "2019-08-15T23:52:37Z")
I am trying to index log files to Elastic search. All the log entries are being indexed into a field named message. @timestamp field shows the time the entry was indexed and not the timestamp from log entry. I created a… --- ## [Unable to install Plugin in Elastic Search 2.1](https://discuss.elastic.co/t/unable-to-install-plugin-in-elastic-search-2-1/37081)
**Author:** [@soodlikesjava](https://discuss.elastic.co/u/soodlikesjava)\ **Replies:** 4\ **Last updated:** [January 19, 2016, 8:34pm UTC](https://discuss.elastic.co/t/unable-to-install-plugin-in-elastic-search-2-1/37081 "2016-01-19T20:34:57Z")
I am trying to install custom plugin in ES 2.1 using plugin tool in bin/plugin and i am getting exception of plugin descriptor even though plugin-descriptor.properties is available in resources folder of my project and i… --- ## [How to delete system indices?](https://discuss.elastic.co/t/how-to-delete-system-indices/338510)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 3\ **Last updated:** [July 18, 2023, 1:37am UTC](https://discuss.elastic.co/t/how-to-delete-system-indices/338510 "2023-07-18T01:37:09Z")
Hi all, My current cluster is an upgraded cluster from version 7.x to 8.x It has alot of system indices that nolonger require in the cluster but whenever i tried to delete it. I got this message { "error": { "ro… --- ## [Elasticsearch says the disk is out of space, but \[df -h\] shows not](https://discuss.elastic.co/t/elasticsearch-says-the-disk-is-out-of-space-but-df-h-shows-not/123223)
**Author:** [@helloEson](https://discuss.elastic.co/u/helloEson)\ **Replies:** 6\ **Last updated:** [March 9, 2018, 3:23pm UTC](https://discuss.elastic.co/t/elasticsearch-says-the-disk-is-out-of-space-but-df-h-shows-not/123223 "2018-03-09T15:23:35Z")
Today hours ago, when we found the Kibana shows an error like below: Error: Request to Elasticsearch failed: {"error":{"root\_cause":\[\],"type":"search\_phase\_execution\_exception","reason":"all shards failed","phase":"quer… --- ## [Best Practices for supporting Test vs Production environments and different data sources](https://discuss.elastic.co/t/best-practices-for-supporting-test-vs-production-environments-and-different-data-sources/105512)
**Author:** [@jonsrose](https://discuss.elastic.co/u/jonsrose)\ **Replies:** 2\ **Last updated:** [October 30, 2017, 10:50pm UTC](https://discuss.elastic.co/t/best-practices-for-supporting-test-vs-production-environments-and-different-data-sources/105512 "2017-10-30T22:50:53Z")
I have couple of related questions Test vs Prod environments I need to manage 2 shared environments for Elastic Search, one for testing and one for production. I am interested in what are the best practices for managi… --- ## [Internal server 500 error - \[illegal\_argument\_exception\] application privileges must refer to at least one resource"}](https://discuss.elastic.co/t/internal-server-500-error-illegal-argument-exception-application-privileges-must-refer-to-at-least-one-resource/282564)
**Author:** [@rishabhcldcvr](https://discuss.elastic.co/u/rishabhcldcvr)\ **Replies:** 5\ **Last updated:** [August 30, 2021, 11:33am UTC](https://discuss.elastic.co/t/internal-server-500-error-illegal-argument-exception-application-privileges-must-refer-to-at-least-one-resource/282564 "2021-08-30T11:33:27Z")
ES master: curl localhost:9200/ { "name" : "AZPRDBRK007", "cluster\_name" : "monitoring-cluster", "cluster\_uuid" : "7n4PuY7FQgWSIS0-2LxCRg", "version" : { "number" : "7.9.0", "build\_flavor" : "default", "build\_ty… --- ## [Solr metricbeat module?](https://discuss.elastic.co/t/solr-metricbeat-module/298547)
**Author:** [@MyrdhinBZH](https://discuss.elastic.co/u/MyrdhinBZH)\ **Replies:** 0\ **Last updated:** [March 1, 2022, 6:36pm UTC](https://discuss.elastic.co/t/solr-metricbeat-module/298547 "2022-03-01T18:36:14Z")
Hello, I would like to monitor my solr servers with my ELK stack but I did not find Solr beat module... has Anyone ever retrieved metrics from solr instances to ELK? Thanks, --- ## [Ignorecase in exclude pattern](https://discuss.elastic.co/t/ignorecase-in-exclude-pattern/89534)
**Author:** [@erion](https://discuss.elastic.co/u/erion)\ **Replies:** 8\ **Last updated:** [June 19, 2017, 12:50pm UTC](https://discuss.elastic.co/t/ignorecase-in-exclude-pattern/89534 "2017-06-19T12:50:54Z")
Hi, i have a filter like (.\*.png) that match only .png lowercase. how can i add case-insensitive? i've tried to add to query (?i) but nothing go. Thanks for attention. --- ## [Filebeat and ECS](https://discuss.elastic.co/t/filebeat-and-ecs/231429)
**Author:** [@edmond.qiu](https://discuss.elastic.co/u/edmond.qiu)\ **Replies:** 7\ **Last updated:** [May 12, 2020, 8:50am UTC](https://discuss.elastic.co/t/filebeat-and-ecs/231429 "2020-05-12T08:50:42Z")
Hey guys, We currently have filebeat running parallel with other ecs tasks in our ecs cluster. Each filebeat logs data from /var/lib/dockers/containers//.log and sends them to our elasticsearch and ultimately shows up i… --- ## [Change time zone using date filter](https://discuss.elastic.co/t/change-time-zone-using-date-filter/325461)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 5\ **Last updated:** [February 15, 2023, 12:37pm UTC](https://discuss.elastic.co/t/change-time-zone-using-date-filter/325461 "2023-02-15T12:37:36Z")
Hi there, i have a problem with timezone in date filter. so this is the situation: i have a field contain an epoch timestamp like this i try to convert it using date filter like this but it didn't work mutate{ … --- ## [Filebeat not considering all file matched via wildcard (\*)](https://discuss.elastic.co/t/filebeat-not-considering-all-file-matched-via-wildcard/56406)
**Author:** [@s8sg](https://discuss.elastic.co/u/s8sg)\ **Replies:** 5\ **Last updated:** [August 8, 2016, 8:34am UTC](https://discuss.elastic.co/t/filebeat-not-considering-all-file-matched-via-wildcard/56406 "2016-08-08T08:34:29Z")
I'm using filebeat from an custom docker container. Where /var/log is mounted as /data/system and /var/lib/nomad/alloc as /data/nomad I have the below files in the mounted directory: 1. /data/system $ docker exec… --- ## [Query malformed, no start\_object after query name](https://discuss.elastic.co/t/query-malformed-no-start-object-after-query-name/81786)
**Author:** [@chrillewoodz](https://discuss.elastic.co/u/chrillewoodz)\ **Replies:** 2\ **Last updated:** [April 10, 2017, 10:15am UTC](https://discuss.elastic.co/t/query-malformed-no-start-object-after-query-name/81786 "2017-04-10T10:15:19Z")
My data looks like this: \[ ... { title: 'My first event', guestlist: { list: \[ { name: 'Christoffer' } \] } } ... \] And I'm trying to use this query: body: … --- ## [Add\_field =\> \[ "EventDate", "%{@timestamp}" \]](https://discuss.elastic.co/t/add-field-eventdate-timestamp/33543)
**Author:** [@Erik\_Parienty](https://discuss.elastic.co/u/Erik_Parienty)\ **Replies:** 2\ **Last updated:** [November 3, 2015, 8:14am UTC](https://discuss.elastic.co/t/add-field-eventdate-timestamp/33543 "2015-11-03T08:14:44Z")
when i using add\_field =\> \[ "EventDate", "%{@timestamp}" \] i see this { "@version" =\> "1", "@timestamp" =\> "2015-11-02T16:23:57.815Z", "type" =\> "blabla", "EventDate" =\> "%{@timest… --- ## [Append tag in Elasticsearch using Logstash](https://discuss.elastic.co/t/append-tag-in-elasticsearch-using-logstash/150161)
**Author:** [@georgeRD](https://discuss.elastic.co/u/georgeRD)\ **Replies:** 6\ **Last updated:** [September 28, 2018, 2:31pm UTC](https://discuss.elastic.co/t/append-tag-in-elasticsearch-using-logstash/150161 "2018-09-28T14:31:03Z")
Hi all, Quick question about tagging with Logstash. I am using the following filter: filter { mutate { add\_tag =\> \[ "test" \] } } It appears that the add\_tag replaces any existing in tags field. Is there any way to… --- ## [How to configure logstash to index json logs including all fields](https://discuss.elastic.co/t/how-to-configure-logstash-to-index-json-logs-including-all-fields/58874)
**Author:** [@lin-zhao](https://discuss.elastic.co/u/lin-zhao)\ **Replies:** 5\ **Last updated:** [August 29, 2016, 5:41pm UTC](https://discuss.elastic.co/t/how-to-configure-logstash-to-index-json-logs-including-all-fields/58874 "2016-08-29T17:41:47Z")
Say the input of my logstash job is already in line delimited json format. I want to have each json key indexed as a field to elasticsearch, is there to make this work? For example, the input looks like: { "a": "valu… --- ## ['took' field on the ES response](https://discuss.elastic.co/t/took-field-on-the-es-response/127147)
**Author:** [@yiliang](https://discuss.elastic.co/u/yiliang)\ **Replies:** 2\ **Last updated:** [April 9, 2018, 6:31pm UTC](https://discuss.elastic.co/t/took-field-on-the-es-response/127147 "2018-04-09T18:31:12Z")
Hi, I have a question on the 'took' filed from ES response. I run a profile request to one specific index And get following response(partial). { "took": 944, "timed\_out": false, "\_shards": { "total": 5, "successfu… --- ## [MySQL yyyy-MM-dd HH:mm:ss datetime into ElasticSearch](https://discuss.elastic.co/t/mysql-yyyy-mm-dd-hh-mm-ss-datetime-into-elasticsearch/78775)
**Author:** [@adrienpp](https://discuss.elastic.co/u/adrienpp)\ **Replies:** 2\ **Last updated:** [March 16, 2017, 3:21pm UTC](https://discuss.elastic.co/t/mysql-yyyy-mm-dd-hh-mm-ss-datetime-into-elasticsearch/78775 "2017-03-16T15:21:02Z")
Hello, I am trying to insert a date such as 2017-03-15 23:39:03 into ElasticSearch. My mapping is: "inserted": { "type": "date", "format": "yyyy-MM-dd HH:mm:ss } But I'm getting the … --- ## [Kibana Query for Max Date?](https://discuss.elastic.co/t/kibana-query-for-max-date/32804)
**Author:** [@tmo\_bgc](https://discuss.elastic.co/u/tmo_bgc)\ **Replies:** 2\ **Last updated:** [October 24, 2015, 2:18pm UTC](https://discuss.elastic.co/t/kibana-query-for-max-date/32804 "2015-10-24T14:18:31Z")
Hi, Using Logstash I have JSON docs that gets stored into Elastic Search every minute with the most current timestamp, and with c1 being the count of rows returned by a SQL Query. { "c1" =\> 0, "@ve… --- ## [DNS filter performance issue?](https://discuss.elastic.co/t/dns-filter-performance-issue/2544)
**Author:** [@yuphing](https://discuss.elastic.co/u/yuphing)\ **Replies:** 5\ **Last updated:** [June 18, 2015, 8:35am UTC](https://discuss.elastic.co/t/dns-filter-performance-issue/2544 "2015-06-18T08:35:52Z")
I'm trying to use the DNS filter to do reverse DNS lookups for various IPs in netflow data, like so: dns { reverse =\> \[ "ipv4\_src\_hostname", "ipv4\_dst\_hostname" \] action =\> "replace" } The filter is working i.e. i… --- ## [Filebeat/module nginx ; problem with permissions](https://discuss.elastic.co/t/filebeat-module-nginx-problem-with-permissions/80647)
**Author:** [@Gounlaf](https://discuss.elastic.co/u/Gounlaf)\ **Replies:** 5\ **Last updated:** [March 30, 2017, 10:44am UTC](https://discuss.elastic.co/t/filebeat-module-nginx-problem-with-permissions/80647 "2017-03-30T10:44:40Z")
Hi, I updated filebeat to version 5.3.0 on a linux server (Ubuntu 16.04 LTS). I wanted to enable the module nginx; but I got an this error (when executing filebeat as a service). 2017-03-30T11:41:38+02:00 INFO Metric… --- ## [Combining multiple beats into a single beat](https://discuss.elastic.co/t/combining-multiple-beats-into-a-single-beat/110781)
**Author:** [@nick-george](https://discuss.elastic.co/u/nick-george)\ **Replies:** 2\ **Last updated:** [December 8, 2017, 10:06pm UTC](https://discuss.elastic.co/t/combining-multiple-beats-into-a-single-beat/110781 "2017-12-08T22:06:56Z")
Hi there, I know this topic has been discussed before (and I'd add to it if it wasn't closed Combining multiple beats into a single agent). However, I'd like to investigate how hard it would be for me as a developer (wi… --- ## [Overcome 2600 msg/seconds with Logstash/Filebeat](https://discuss.elastic.co/t/overcome-2600-msg-seconds-with-logstash-filebeat/50626)
**Author:** [@carrot](https://discuss.elastic.co/u/carrot)\ **Replies:** 2\ **Last updated:** [May 22, 2016, 3:52am UTC](https://discuss.elastic.co/t/overcome-2600-msg-seconds-with-logstash-filebeat/50626 "2016-05-22T03:52:46Z")
I'm currently testing performance of file ingest but I'm not getting much right now. About 2500-2600 msg/secs. filebeat (1.2.3) -\> logstash (2.3.2) -\> elastic (2.3.3) with default configurations. I've got a directory w… --- ## [Generating matrix heatmap in Kibana](https://discuss.elastic.co/t/generating-matrix-heatmap-in-kibana/94564)
**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\ **Replies:** 5\ **Last updated:** [July 26, 2017, 8:54am UTC](https://discuss.elastic.co/t/generating-matrix-heatmap-in-kibana/94564 "2017-07-26T08:54:21Z")
Hi, I want to create a matrix-type heatmap as shown here: https://github.com/stormpython/heatmap Sample image: My X-axis will be date histogram and Y-axis will be the multiple fields being monitored. For e.g. First… --- ## [How should I parse date time for below string](https://discuss.elastic.co/t/how-should-i-parse-date-time-for-below-string/46336)
**Author:** [@macymin](https://discuss.elastic.co/u/macymin)\ **Replies:** 5\ **Last updated:** [April 6, 2016, 9:08am UTC](https://discuss.elastic.co/t/how-should-i-parse-date-time-for-below-string/46336 "2016-04-06T09:08:02Z")
In my file, the content is like this: 2016040417350700, \> '/home/prbdata/esda/prod/spool.6/esda/f12masc1d0/7882201\_001\_' \[1:2:1\] how can I parse 2016040417350700 into a field with correct date time format ? --- ## [High CPU usage for auditbeat](https://discuss.elastic.co/t/high-cpu-usage-for-auditbeat/133430)
**Author:** [@gbmzjy](https://discuss.elastic.co/u/gbmzjy)\ **Replies:** 6\ **Last updated:** [July 16, 2020, 10:40am UTC](https://discuss.elastic.co/t/high-cpu-usage-for-auditbeat/133430 "2020-07-16T10:40:04Z")
Hi, I am trying to use auditbeat to collect Linux Audit log and send them to our elasticsearch server. In order to compare performance with auditd, I tried the following configuration: auditbeat.modules: -module: audi… --- ## [Kibana 7.17.23/8.14.0 Security Update (ESA-2024-16)](https://discuss.elastic.co/t/kibana-7-17-23-8-14-0-security-update-esa-2024-16/364094)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [July 30, 2024, 9:22pm UTC](https://discuss.elastic.co/t/kibana-7-17-23-8-14-0-security-update-esa-2024-16/364094 "2024-07-30T21:22:31Z")
Kibana Denial of Service issue (ESA-2024-16) An issue was discovered in Kibana where a user with Viewer role could cause a Kibana instance to crash by sending a large number of maliciously crafted requests to a specific… --- ## [Multi match query searching on fields not specified](https://discuss.elastic.co/t/multi-match-query-searching-on-fields-not-specified/28711)
**Author:** [@John\_D\_Ament](https://discuss.elastic.co/u/John_D_Ament)\ **Replies:** 8\ **Last updated:** [September 8, 2015, 2:26pm UTC](https://discuss.elastic.co/t/multi-match-query-searching-on-fields-not-specified/28711 "2015-09-08T14:26:17Z")
I've setup index settings on my cluster that include an ngram analyzer. The definition looks like { "index": { "analysis": { "filter": { "ngrams\_filter": { "type": "nGram", "min… --- ## [How to create API Key for user with \`viewer\` role?](https://discuss.elastic.co/t/how-to-create-api-key-for-user-with-viewer-role/318359)
**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\ **Replies:** 7\ **Last updated:** [November 8, 2022, 4:57pm UTC](https://discuss.elastic.co/t/how-to-create-api-key-for-user-with-viewer-role/318359 "2022-11-08T16:57:16Z")
I've been able to successfully create api keys for super user accounts. But I don't seem to have the option to create api keys for users that only have the role viewer. So for example, I made this user: But when I … --- ## [YUM Repos Hosed?](https://discuss.elastic.co/t/yum-repos-hosed/27985)
**Author:** [@mklein201](https://discuss.elastic.co/u/mklein201)\ **Replies:** 7\ **Last updated:** [August 25, 2015, 8:01pm UTC](https://discuss.elastic.co/t/yum-repos-hosed/27985 "2015-08-25T20:01:56Z")
From the docs at: https://www.elastic.co/guide/en/elasticsearch/reference/current/setup-repositories.html, I've set up yum and tried to do an install: \[\[root@esm1 elasticsearch\]# yum install elasticsearch Loaded plugins… --- ## [Using event API for timestamp formatting](https://discuss.elastic.co/t/using-event-api-for-timestamp-formatting/85374)
**Author:** [@arnold79](https://discuss.elastic.co/u/arnold79)\ **Replies:** 3\ **Last updated:** [May 17, 2017, 2:53pm UTC](https://discuss.elastic.co/t/using-event-api-for-timestamp-formatting/85374 "2017-05-17T14:53:30Z")
Hi all, I need to escalate events towards a separate output. The events are received in UTC timezone and need to be converted to Europe/Amsterdam. I've created a date filter to add additional two hours and ruby filter … --- ## [Filebeat escaping backslashes on its own](https://discuss.elastic.co/t/filebeat-escaping-backslashes-on-its-own/52899)
**Author:** [@fiunchinho](https://discuss.elastic.co/u/fiunchinho)\ **Replies:** 8\ **Last updated:** [June 16, 2016, 9:18am UTC](https://discuss.elastic.co/t/filebeat-escaping-backslashes-on-its-own/52899 "2016-06-16T09:18:46Z")
I have a file with the following entry logs. Some Java stack traces with \\n instead of break lines, so it's only one line per log entry 2016-05-30 11:25:53,907 WARN 4209 \[DiscoveryClient-InstanceInfoReplicator-0\] com.… --- ## [Escaping special characters in regex](https://discuss.elastic.co/t/escaping-special-characters-in-regex/173071)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 1\ **Last updated:** [March 20, 2019, 1:26pm UTC](https://discuss.elastic.co/t/escaping-special-characters-in-regex/173071 "2019-03-20T13:26:02Z")
I was writing pipeline and in the gsub processor I wrote a regex. As per the documentation Allowed characters Any Unicode characters may be used in the pattern, but certain characters are reserved and must be escaped. … --- ## [Elasticsearch6 on MAC - Bootstrap failed: 5: Input/output error](https://discuss.elastic.co/t/elasticsearch6-on-mac-bootstrap-failed-5-input-output-error/282263)
**Author:** [@Mike\_Fritzsche](https://discuss.elastic.co/u/Mike_Fritzsche)\ **Replies:** 1\ **Last updated:** [August 23, 2021, 5:20pm UTC](https://discuss.elastic.co/t/elasticsearch6-on-mac-bootstrap-failed-5-input-output-error/282263 "2021-08-23T17:20:00Z")
Hi all, I can not get run Elasticsearch 6 on my MAC Big Sure. I installed with Brew and all the time when brew services start elasticsearch@6 I get the following error: Bootstrap failed: 5: Input/output error Error:… --- ## [Passing parameters or filter in kibana URL from Web-App](https://discuss.elastic.co/t/passing-parameters-or-filter-in-kibana-url-from-web-app/141568)
**Author:** [@Kexplorer](https://discuss.elastic.co/u/Kexplorer)\ **Replies:** 1\ **Last updated:** [July 25, 2018, 2:06pm UTC](https://discuss.elastic.co/t/passing-parameters-or-filter-in-kibana-url-from-web-app/141568 "2018-07-25T14:06:35Z")
Hi I am trying to show Dash Board in my web application using URL share option of Kibana , I am able to achieve it but i want to pass a parameter/Filter in the URL and filter the dashboard results(Example; pass userid … --- ## [Options for synchronizing SQL (Oracle) with Elasticsearch](https://discuss.elastic.co/t/options-for-synchronizing-sql-oracle-with-elasticsearch/10745)
**Author:** [@radu\_gheorghe](https://discuss.elastic.co/u/radu_gheorghe)\ **Replies:** 8\ **Last updated:** [February 15, 2013, 5:50pm UTC](https://discuss.elastic.co/t/options-for-synchronizing-sql-oracle-with-elasticsearch/10745 "2013-02-15T17:50:19Z")
Hello, I have quite a lot of data in Oracle and I need to keep all its data indexed in ES. I'm having trouble finding a good solution, so I hope you guys can give me some feedback. My use-case goes like this: - … --- ## [Send Headers in HTTP post request](https://discuss.elastic.co/t/send-headers-in-http-post-request/80172)
**Author:** [@suvitt](https://discuss.elastic.co/u/suvitt)\ **Replies:** 5\ **Last updated:** [March 31, 2017, 12:02pm UTC](https://discuss.elastic.co/t/send-headers-in-http-post-request/80172 "2017-03-31T12:02:21Z")
Hi All, I am not able to send additional headers in the http POST request. yml file heartbeat.monitors: - type: http # List or urls to query #urls: urls: \["http://localhost:8724/service/XXX/YYY"\] # request… --- ## [Document Count is same however index size is growing - How?](https://discuss.elastic.co/t/document-count-is-same-however-index-size-is-growing-how/89138)
**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\ **Replies:** 7\ **Last updated:** [June 13, 2017, 9:00am UTC](https://discuss.elastic.co/t/document-count-is-same-however-index-size-is-growing-how/89138 "2017-06-13T09:00:11Z")
Hi All, As shown below in the snaphot, even though document count is same for a index, index size is growing marginally. Could you please provide some insights why this might happen?. Is it due to merge process? ES 2.3… --- ## [Check if index exist in elasticsearch 8.2](https://discuss.elastic.co/t/check-if-index-exist-in-elasticsearch-8-2/305356)
**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\ **Replies:** 8\ **Last updated:** [May 24, 2022, 11:47am UTC](https://discuss.elastic.co/t/check-if-index-exist-in-elasticsearch-8-2/305356 "2022-05-24T11:47:07Z")
Hi, How do I check if index exist in JAVA API 8.2. In v.7.x I used: GetIndexRequest request = new GetIndexRequest("yourindexname"); restHighLevelclient.indices().exists(request, RequestOptions.DEFAULT); --- ## [How to set filter to check for multiple conditions?](https://discuss.elastic.co/t/how-to-set-filter-to-check-for-multiple-conditions/107491)
**Author:** [@Aswin\_Francis](https://discuss.elastic.co/u/Aswin_Francis)\ **Replies:** 3\ **Last updated:** [November 14, 2017, 12:34pm UTC](https://discuss.elastic.co/t/how-to-set-filter-to-check-for-multiple-conditions/107491 "2017-11-14T12:34:19Z")
I want to add a filter to my existing saved search where I want hide message based on source\_name and event\_id. So basically if source\_name=Microsoft-Windows-Perflib and event\_id=1008 then it should display on the discov… [Previous page](https://discuss.elastic.co/top.md?page=399&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=401&per_page=50&period=all)