# Top **URL:** https://discuss.elastic.co/top.md?page=454&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 455 --- ## [Syslog Configuration on logstash pfSense](https://discuss.elastic.co/t/syslog-configuration-on-logstash-pfsense/28312)
**Author:** [@killmasta93](https://discuss.elastic.co/u/killmasta93)\ **Replies:** 3\ **Last updated:** [September 20, 2015, 10:43pm UTC](https://discuss.elastic.co/t/syslog-configuration-on-logstash-pfsense/28312 "2015-09-20T22:43:28Z")
Hi, I was wondering if someone could help me out or guide me. So I got everything up and running my only issue that when im trying to filter my syslog dashboard (the system logs of pfSense) it shows nothing while on my… --- ## [Endpoint v8.10.4 Security Update](https://discuss.elastic.co/t/endpoint-v8-10-4-security-update/345203)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [October 17, 2023, 12:07pm UTC](https://discuss.elastic.co/t/endpoint-v8-10-4-security-update/345203 "2023-10-17T12:07:38Z")
Elastic Endpoint Insertion of Sensitive Information into Log File (ESA-2023-21) If Elastic Endpoint (v7.9.0 - v8.10.3) is configured to use a non-default option in which the logging level is explicitly set to debug, and… --- ## [Filebeat: Exiting: Error while initializing input: Error creating input. No such input type exist: 'aws-cloudwatch'](https://discuss.elastic.co/t/filebeat-exiting-error-while-initializing-input-error-creating-input-no-such-input-type-exist-aws-cloudwatch/295942)
**Author:** [@h4rdl0ck](https://discuss.elastic.co/u/h4rdl0ck)\ **Replies:** 7\ **Last updated:** [February 2, 2022, 10:24am UTC](https://discuss.elastic.co/t/filebeat-exiting-error-while-initializing-input-error-creating-input-no-such-input-type-exist-aws-cloudwatch/295942 "2022-02-02T10:24:30Z")
Hello everyone, filebeat stopped because it supposedly doesn't exist for the input type aws-cloudwatch. That's the error-messsage: 2022-02-01T11:02:36.673Z ERROR instance/beat.go:933 Exiting: Error while initializing i… --- ## [Trouble using elasticsearch filter plugin](https://discuss.elastic.co/t/trouble-using-elasticsearch-filter-plugin/99981)
**Author:** [@cito.ets](https://discuss.elastic.co/u/cito.ets)\ **Replies:** 7\ **Last updated:** [September 28, 2017, 2:47pm UTC](https://discuss.elastic.co/t/trouble-using-elasticsearch-filter-plugin/99981 "2017-09-28T14:47:24Z")
Hi, A bit new into SSL/TLS. I do have managed to get Logstash to work with Searchguard/Elasticsearch (elasticsearch output) on a test server but when trying to use the elasticsearch filter plugin I get a ConnectionFaile… --- ## [Filebeat Index Name Pattern - timestamp](https://discuss.elastic.co/t/filebeat-index-name-pattern-timestamp/296255)
**Author:** [@danielc](https://discuss.elastic.co/u/danielc)\ **Replies:** 7\ **Last updated:** [March 2, 2022, 12:11am UTC](https://discuss.elastic.co/t/filebeat-index-name-pattern-timestamp/296255 "2022-03-02T00:11:29Z")
Is %{+yyyy.MM.dd} the system time or log file timestamp? Configure the Elasticsearch output | Filebeat Reference \[7.10\] | Elastic output.elasticsearch: hosts: \["http://localhost:9200"\] index: "%{\[fields.log\_type\]}… --- ## [How to get count, Avg response time and number of errors in a single visualisation?](https://discuss.elastic.co/t/how-to-get-count-avg-response-time-and-number-of-errors-in-a-single-visualisation/102051)
**Author:** [@mounika](https://discuss.elastic.co/u/mounika)\ **Replies:** 1\ **Last updated:** [October 2, 2017, 8:57pm UTC](https://discuss.elastic.co/t/how-to-get-count-avg-response-time-and-number-of-errors-in-a-single-visualisation/102051 "2017-10-02T20:57:57Z")
Hi, I want to build a visualisation where I can see count(number of hits), Average response time(where response time is a field in the event) and count of type:errors(where type is a field in the event). Can someone pl… --- ## [Kibana vega context and timefield](https://discuss.elastic.co/t/kibana-vega-context-and-timefield/295102)
**Author:** [@Tingda\_Du](https://discuss.elastic.co/u/Tingda_Du)\ **Replies:** 8\ **Last updated:** [January 23, 2022, 5:09pm UTC](https://discuss.elastic.co/t/kibana-vega-context-and-timefield/295102 "2022-01-23T17:09:05Z")
When I include the lines of // Apply dashboard context filters when set %context%: true // Filter the time picker (upper right corner) with this field %timefield%: @timestamp I got this error: \* Infinite extent for fi… --- ## [Aggregate-filter to create nested arrays](https://discuss.elastic.co/t/aggregate-filter-to-create-nested-arrays/115367)
**Author:** [@bosar](https://discuss.elastic.co/u/bosar)\ **Replies:** 0\ **Last updated:** [January 12, 2018, 9:20pm UTC](https://discuss.elastic.co/t/aggregate-filter-to-create-nested-arrays/115367 "2018-01-12T21:20:57Z")
I'm new to logstash and have been browsing the web for a couple of day for a solution for my problem to create an nested array for a company structure to load into elasticsearch. I want to create an array of companys wit… --- ## [Logstash and filebeat configuration for ports](https://discuss.elastic.co/t/logstash-and-filebeat-configuration-for-ports/145576)
**Author:** [@rohitg](https://discuss.elastic.co/u/rohitg)\ **Replies:** 4\ **Last updated:** [August 23, 2018, 7:07pm UTC](https://discuss.elastic.co/t/logstash-and-filebeat-configuration-for-ports/145576 "2018-08-23T19:07:59Z")
I have setup one elk cluster (Elasticsearch + Logstash + Kibana) on a windows server. And installed beats(filebeat+winlogbeat) on 3 windows servers. Question about ports that need to be configure in beats and logstash.… --- ## [Helm-chart and ExtraVolumes](https://discuss.elastic.co/t/helm-chart-and-extravolumes/227907)
**Author:** [@jgato](https://discuss.elastic.co/u/jgato)\ **Replies:** 2\ **Last updated:** [April 16, 2020, 9:56am UTC](https://discuss.elastic.co/t/helm-chart-and-extravolumes/227907 "2020-04-16T09:56:49Z")
Hi there, I am deploying a cluster using your helm-chart package and everything goes ok. Now I would like to make something more advanced, like creating a backup repo, and export this directory as a volume. Trying some… --- ## [How to monitor the beats using prometheus](https://discuss.elastic.co/t/how-to-monitor-the-beats-using-prometheus/275394)
**Author:** [@PeterFulier](https://discuss.elastic.co/u/PeterFulier)\ **Replies:** 2\ **Last updated:** [June 15, 2021, 10:26am UTC](https://discuss.elastic.co/t/how-to-monitor-the-beats-using-prometheus/275394 "2021-06-15T10:26:11Z")
Hello, I am trying to find a way to expose beats (especially the metricbeat) statistics to prometheus to have the option to monitor the correct functionality of metricbeat in terms of its connection to elastic. Current… --- ## [Please install java in your PATH or set JAVA\_HOME while running logstash](https://discuss.elastic.co/t/please-install-java-in-your-path-or-set-java-home-while-running-logstash/155114)
**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\ **Replies:** 5\ **Last updated:** [November 16, 2018, 12:06pm UTC](https://discuss.elastic.co/t/please-install-java-in-your-path-or-set-java-home-while-running-logstash/155114 "2018-11-16T12:06:42Z")
I am facing the error while running logstash " Could not find any executable java binary. Please install java in your PATH or set JAVA\_HOME. " have searched a lot please someone guide me Best Regards Shrikant --- ## [Java.lang.NoClassDefFoundError: org.elasticsearch.common.settings.ImmutableSettings](https://discuss.elastic.co/t/java-lang-noclassdeffounderror-org-elasticsearch-common-settings-immutablesettings/21940)
**Author:** [@4m7u1](https://discuss.elastic.co/u/4m7u1)\ **Replies:** 4\ **Last updated:** [February 2, 2015, 2:48am UTC](https://discuss.elastic.co/t/java-lang-noclassdeffounderror-org-elasticsearch-common-settings-immutablesettings/21940 "2015-02-02T02:48:55Z")
I have a custom method for indexing data into elasticsearch. When i run this, i get the error as :\* java.lang.NoClassDefFoundError: org.elasticsearch.common.settings.ImmutableSettings\* I have included all the requ… --- ## [Elastic run by Docker on Windows Server fails, when Docker upgraded to 2.2.0](https://discuss.elastic.co/t/elastic-run-by-docker-on-windows-server-fails-when-docker-upgraded-to-2-2-0/216149)
**Author:** [@Slavik\_Fursov](https://discuss.elastic.co/u/Slavik_Fursov)\ **Replies:** 1\ **Last updated:** [February 11, 2020, 10:15am UTC](https://discuss.elastic.co/t/elastic-run-by-docker-on-windows-server-fails-when-docker-upgraded-to-2-2-0/216149 "2020-02-11T10:15:55Z")
I'm not sure, if running elastic on Docker on Windows Server 2019 is a recommended setup. But that's what I have and so far it was working very stable. Today, I upgraded Docker to 2.2.0, and Elastic fails to start. Her… --- ## [How does beat communicate with applications and logstash?](https://discuss.elastic.co/t/how-does-beat-communicate-with-applications-and-logstash/147392)
**Author:** [@Malay\_Peaas](https://discuss.elastic.co/u/Malay_Peaas)\ **Replies:** 4\ **Last updated:** [September 6, 2018, 5:09am UTC](https://discuss.elastic.co/t/how-does-beat-communicate-with-applications-and-logstash/147392 "2018-09-06T05:09:59Z")
Hi, I am new to Elastic stack, I read about how to configure FileBeat/WinLogBeat etc. to read logs from application/OS and output them to logstash. I would like to know that how does beat communicate with logstash and a… --- ## [Null Responses and deadlocks when using the Elasticsearch.Net APIs](https://discuss.elastic.co/t/null-responses-and-deadlocks-when-using-the-elasticsearch-net-apis/46756)
**Author:** [@Fritz](https://discuss.elastic.co/u/Fritz)\ **Replies:** 7\ **Last updated:** [April 19, 2016, 4:46pm UTC](https://discuss.elastic.co/t/null-responses-and-deadlocks-when-using-the-elasticsearch-net-apis/46756 "2016-04-19T16:46:24Z")
Hi folks, We’re using the C# Elasticsearch.Net API to write to an index. There are many bulk requests, most succeed, some fail because of queue pressure and we retry, etc. Every response object of a client call is of t… --- ## [Elastic agent install error: already installed at: /opt/Elastic/Agent](https://discuss.elastic.co/t/elastic-agent-install-error-already-installed-at-opt-elastic-agent/327926)
**Author:** [@Nicolas\_Pelletier](https://discuss.elastic.co/u/Nicolas_Pelletier)\ **Replies:** 4\ **Last updated:** [March 18, 2023, 4:32pm UTC](https://discuss.elastic.co/t/elastic-agent-install-error-already-installed-at-opt-elastic-agent/327926 "2023-03-18T16:32:36Z")
Hello, I'm trying to enroll an agent on a healthy fleet server which is also an agent (what i've understood). I'm following the step by step guide from kibana interface in integration panel (see the image below) I'… --- ## [Problems with "fielddata" : true](https://discuss.elastic.co/t/problems-with-fielddata-true/71438)
**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\ **Replies:** 7\ **Last updated:** [January 17, 2017, 5:03pm UTC](https://discuss.elastic.co/t/problems-with-fielddata-true/71438 "2017-01-17T17:03:25Z")
Here is my mapping: PUT bats\_analytics { "mappings":{ "VIDEO":{ "properties":{ "total\_events":{ "type": "integer", "fielddata": true }, "unique\_plays":{… --- ## [Best way to set a field value to be a (json) object?](https://discuss.elastic.co/t/best-way-to-set-a-field-value-to-be-a-json-object/165654)
**Author:** [@jdmcalee](https://discuss.elastic.co/u/jdmcalee)\ **Replies:** 2\ **Last updated:** [January 25, 2019, 1:49pm UTC](https://discuss.elastic.co/t/best-way-to-set-a-field-value-to-be-a-json-object/165654 "2019-01-25T13:49:05Z")
I'm trying to configure a logstash filter to add a field that contains one of more objects. In other words, I want the document json for the field to end up looking something like this: {"links":\[{"label":"google","url"… --- ## [Incomplete jdk.app in the installation package｜Unable to start Elasticsearch｜macOS x86\_64 | elasticsearch-8.13.2](https://discuss.elastic.co/t/incomplete-jdk-app-in-the-installation-package-unable-to-start-elasticsearch-macos-x86-64-elasticsearch-8-13-2/357275)
**Author:** [@Joanna\_Chang](https://discuss.elastic.co/u/Joanna_Chang)\ **Replies:** 4\ **Last updated:** [June 7, 2024, 10:19pm UTC](https://discuss.elastic.co/t/incomplete-jdk-app-in-the-installation-package-unable-to-start-elasticsearch-macos-x86-64-elasticsearch-8-13-2/357275 "2024-06-07T22:19:10Z")
Downloaded the installation package, elasticsearch-8.13.2, several times, but the system indicates that jdk.app is incomplete. Privacy and security settings are configured to allow open. Unable to start Elasticse… --- ## [SSLHandshakeException when enabling security](https://discuss.elastic.co/t/sslhandshakeexception-when-enabling-security/186680)
**Author:** [@MacAni](https://discuss.elastic.co/u/MacAni)\ **Replies:** 5\ **Last updated:** [June 21, 2019, 6:13am UTC](https://discuss.elastic.co/t/sslhandshakeexception-when-enabling-security/186680 "2019-06-21T06:13:25Z")
Hi we have a working cluster but when we enable xpack security the transport communication fails. Configuration: bootstrap.memory\_lock: true cluster.initial\_master\_nodes: - elk.mydomain.dk - elk-02.mydomain.dk - el… --- ## [Invalid Frame Type, received: 82 and 79](https://discuss.elastic.co/t/invalid-frame-type-received-82-and-79/140113)
**Author:** [@nutchalum.k](https://discuss.elastic.co/u/nutchalum.k)\ **Replies:** 5\ **Last updated:** [July 26, 2018, 8:43pm UTC](https://discuss.elastic.co/t/invalid-frame-type-received-82-and-79/140113 "2018-07-26T20:43:27Z")
I've deploy Logstash (6.3.1) behind kubernetes ingress nginx that expose via TCP method and ELB (kubernetes service type is LoadBalancer). kind: ConfigMap apiVersion: v1 metadata: name: configmap-ingress-tcp-conf n… --- ## [Migrate from 6.8 to 7.10](https://discuss.elastic.co/t/migrate-from-6-8-to-7-10/260498)
**Author:** [@blukit](https://discuss.elastic.co/u/blukit)\ **Replies:** 6\ **Last updated:** [January 12, 2021, 3:19am UTC](https://discuss.elastic.co/t/migrate-from-6-8-to-7-10/260498 "2021-01-12T03:19:19Z")
Hi folks... Need to know whats the proper way to migrate & upgrade from our current ELK 6.8 cluster to our new ELK 7.10 cluster. Should I first do rolling upgrade in our current cluster then rsync to 7.10 cluster? Or … --- ## [Kibana 5.5.2 and 4.6.5 security update](https://discuss.elastic.co/t/kibana-5-5-2-and-4-6-5-security-update/97462)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [August 17, 2017, 5:32pm UTC](https://discuss.elastic.co/t/kibana-5-5-2-and-4-6-5-security-update/97462 "2017-08-17T17:32:58Z")
Kibana markdown parser Cross Site Scripting (XSS) error (ESA-2017-16) Kibana versions prior to 5.5.2 had a cross-site scripting (XSS) vulnerability in the markdown parser that could allow an attacker to obtain sensitive… --- ## [Elasticsearch status "elasticsearch dead but pid file exists"](https://discuss.elastic.co/t/elasticsearch-status-elasticsearch-dead-but-pid-file-exists/33600)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 3\ **Last updated:** [November 3, 2015, 10:06am UTC](https://discuss.elastic.co/t/elasticsearch-status-elasticsearch-dead-but-pid-file-exists/33600 "2015-11-03T10:06:58Z")
Hi, I am trying to start master node of elasticsearch. It stops suddenly and shows status as "elasticsearch dead but pid file exists" I deleted pid file then it says syslock is locked. I deleted the same again it start … --- ## [Easy example with histogram](https://discuss.elastic.co/t/easy-example-with-histogram/216422)
**Author:** [@icirco](https://discuss.elastic.co/u/icirco)\ **Replies:** 1\ **Last updated:** [January 24, 2020, 3:04pm UTC](https://discuss.elastic.co/t/easy-example-with-histogram/216422 "2020-01-24T15:04:11Z")
hello, I'm using Elastic 7.5, I have an indice with fields : site pourcent\_ok site : site1, site2, site3... pourcent\_ok : 98.4, 99.5, 100, 80.2 ... How to build a graph with : on axis X : the sites on axis Y : t… --- ## [Using the xpack.encryptedSavedObjects.encryptionKey for Alerts and Actions in kibana 7.9](https://discuss.elastic.co/t/using-the-xpack-encryptedsavedobjects-encryptionkey-for-alerts-and-actions-in-kibana-7-9/248647)
**Author:** [@kennedy](https://discuss.elastic.co/u/kennedy)\ **Replies:** 2\ **Last updated:** [September 15, 2020, 12:04pm UTC](https://discuss.elastic.co/t/using-the-xpack-encryptedsavedobjects-encryptionkey-for-alerts-and-actions-in-kibana-7-9/248647 "2020-09-15T12:04:39Z")
Hi, I'm using a docker compose file for ELK setup and using the latest 7.9 version for kibana. Now i want to set the xpack.encryptedSavedObjects.encryptionKey parameter in the kibana.yml so that i can use the alert and… --- ## [Error in using dynamic mapping: Elasticsearch 6.2](https://discuss.elastic.co/t/error-in-using-dynamic-mapping-elasticsearch-6-2/133699)
**Author:** [@aditya7](https://discuss.elastic.co/u/aditya7)\ **Replies:** 2\ **Last updated:** [May 30, 2018, 6:47am UTC](https://discuss.elastic.co/t/error-in-using-dynamic-mapping-elasticsearch-6-2/133699 "2018-05-30T06:47:55Z")
I have upgraded to Elasticsearch 6.2 from 5.0. I am facing challenges in dynamic template. Template I have uploaded to ES is: curl -XPOST localhost:9200/\_template/mytemplate -H 'Content-Type: application/json' -d' { … --- ## [Missing authentication credential for REST request](https://discuss.elastic.co/t/missing-authentication-credential-for-rest-request/337339)
**Author:** [@kbfifi](https://discuss.elastic.co/u/kbfifi)\ **Replies:** 2\ **Last updated:** [July 8, 2023, 1:24pm UTC](https://discuss.elastic.co/t/missing-authentication-credential-for-rest-request/337339 "2023-07-08T13:24:06Z")
I'm trying to finish my single node setup with elasticsearch(ES) and kibana. I'm using docker-compose and ES version 7.17. I wanted to go without security however it is my understanding that adding adapters like Mongo DB… --- ## [Auto resharding capabilities](https://discuss.elastic.co/t/auto-resharding-capabilities/205515)
**Author:** [@marb](https://discuss.elastic.co/u/marb)\ **Replies:** 5\ **Last updated:** [October 31, 2019, 6:10am UTC](https://discuss.elastic.co/t/auto-resharding-capabilities/205515 "2019-10-31T06:10:56Z")
Hi, I had recently some discussions about auto resharding capabilities in Elasticsearch: basically, at some point in time, without any human intervention, the system would "detect" that for a given index resharding is n… --- ## [Vega visualization in Kibana - unable to load data json](https://discuss.elastic.co/t/vega-visualization-in-kibana-unable-to-load-data-json/149062)
**Author:** [@deuskars](https://discuss.elastic.co/u/deuskars)\ **Replies:** 8\ **Last updated:** [October 2, 2018, 10:29am UTC](https://discuss.elastic.co/t/vega-visualization-in-kibana-unable-to-load-data-json/149062 "2018-10-02T10:29:28Z")
Hi, I am a beginner at Vega - I successfully got a "line chart" working with a inline dataset (specified with "Values") and wanted to take it to next step of getting the dataset from a json served via a URL. When I try… --- ## [GeoIP logstash 5.3 with filebeat, elasticsearch and Kibana - geoip lookup failure](https://discuss.elastic.co/t/geoip-logstash-5-3-with-filebeat-elasticsearch-and-kibana-geoip-lookup-failure/89499)
**Author:** [@blackOcean](https://discuss.elastic.co/u/blackOcean)\ **Replies:** 8\ **Last updated:** [June 16, 2017, 7:37am UTC](https://discuss.elastic.co/t/geoip-logstash-5-3-with-filebeat-elasticsearch-and-kibana-geoip-lookup-failure/89499 "2017-06-16T07:37:48Z")
Using filebeat to send apache logs from Windows System and to my logstash server in linux EC2 and then to elastic search and Kibana. Elastic search and Kibana - 5.3 Logstash and filebeat - 5.3 filebeat.yml : fil… --- ## [Grok Pattern not parsing](https://discuss.elastic.co/t/grok-pattern-not-parsing/49750)
**Author:** [@dlopez](https://discuss.elastic.co/u/dlopez)\ **Replies:** 8\ **Last updated:** [May 11, 2016, 2:43pm UTC](https://discuss.elastic.co/t/grok-pattern-not-parsing/49750 "2016-05-11T14:43:17Z")
Hi, I'm trying to parse a log file with content like this: 2016-05-09 12:00:00,006 INFO \[com.level2.quartz.BaseLevel2EngineJob\] (MVCScheduler\_Worker-1) Executing job It removes expired activation codes 2016-05-09 12:0… --- ## [Getting "EngineClosedException" in ES server with new index](https://discuss.elastic.co/t/getting-engineclosedexception-in-es-server-with-new-index/42902)
**Author:** [@tbessie](https://discuss.elastic.co/u/tbessie)\ **Replies:** 8\ **Last updated:** [March 1, 2016, 7:58am UTC](https://discuss.elastic.co/t/getting-engineclosedexception-in-es-server-with-new-index/42902 "2016-03-01T07:58:34Z")
In indexing a bunch of documents, I'm deleting all indexes, recreating them, and indexing. I'm not sure exactly what in the client code is causing this, but here's the exception(s) I'm getting (in ES 2.2.0) - any clues… --- ## [ERROR: input state for file was not removed, CreateFile: Access is denied](https://discuss.elastic.co/t/error-input-state-for-file-was-not-removed-createfile-access-is-denied/187560)
**Author:** [@Astarandel](https://discuss.elastic.co/u/Astarandel)\ **Replies:** 1\ **Last updated:** [June 28, 2019, 8:41am UTC](https://discuss.elastic.co/t/error-input-state-for-file-was-not-removed-createfile-access-is-denied/187560 "2019-06-28T08:41:40Z")
Hello, a FileBeat on one of our machines started giving this error: ERROR log/input.go:222 input state for C:\\tmp\\InstalledPrograms.log was not removed: CreateFile C:\\tmp\\InstalledPrograms.log: Access is denied. INFO l… --- ## [Kibana not starting on server1](https://discuss.elastic.co/t/kibana-not-starting-on-server1/250542)
**Author:** [@marcus.konig](https://discuss.elastic.co/u/marcus.konig)\ **Replies:** 6\ **Last updated:** [November 5, 2020, 8:46am UTC](https://discuss.elastic.co/t/kibana-not-starting-on-server1/250542 "2020-11-05T08:46:33Z")
Moved here from last thread: I can now access the environment, but Kibana is not working. Elasticsearch is started and responds fine, but when trying to start Kibana from a fresh tar extraction, I am getting: log \[15… --- ## [Need help in creating grok patterns for haproxy logs](https://discuss.elastic.co/t/need-help-in-creating-grok-patterns-for-haproxy-logs/134180)
**Author:** [@nareshreddyp](https://discuss.elastic.co/u/nareshreddyp)\ **Replies:** 7\ **Last updated:** [June 1, 2018, 4:08pm UTC](https://discuss.elastic.co/t/need-help-in-creating-grok-patterns-for-haproxy-logs/134180 "2018-06-01T16:08:40Z")
Hello, I am new to logstash and trying to filter the haproxy logs. Example of my haproxy logs. \<134\>0 2018-05-29T03:45:29+02:00 localhost epic-webservicefrontend 18645 - \[type=haproxy\] \[18645\] \[1527558316.602\] 3/3/1/… --- ## [APM RUM JS agent no tracing headers added](https://discuss.elastic.co/t/apm-rum-js-agent-no-tracing-headers-added/219217)
**Author:** [@Harm](https://discuss.elastic.co/u/Harm)\ **Replies:** 4\ **Last updated:** [March 4, 2020, 7:12pm UTC](https://discuss.elastic.co/t/apm-rum-js-agent-no-tracing-headers-added/219217 "2020-03-04T19:12:36Z")
Kibana version: 7.4 Elasticsearch version: 7.4 APM Server version: 7.4.0 APM Agent language and version: APM RUM 4.7.1 Browser version: Chrome 80 Original install method: https://unpkg.com/@elastic/apm-rum@4.7.1/dis… --- ## [Problems receiving data from large number of logstash-forwarders on logstash](https://discuss.elastic.co/t/problems-receiving-data-from-large-number-of-logstash-forwarders-on-logstash/33584)
**Author:** [@Medelwr](https://discuss.elastic.co/u/Medelwr)\ **Replies:** 8\ **Last updated:** [November 5, 2015, 2:50am UTC](https://discuss.elastic.co/t/problems-receiving-data-from-large-number-of-logstash-forwarders-on-logstash/33584 "2015-11-05T02:50:57Z")
Hi, I have 60+ clients that I am trying to connect to my logstash instance. They are sending logs on a short interval using LSF (Lumberjack). Versions: Logstash 2.0 Elasticsearch 2.0 Kibana 4.2 Logstash-forwarder 0.… --- ## [Using @timestamp field in SQL queries](https://discuss.elastic.co/t/using-timestamp-field-in-sql-queries/147701)
**Author:** [@prwillmot](https://discuss.elastic.co/u/prwillmot)\ **Replies:** 2\ **Last updated:** [September 10, 2018, 7:04am UTC](https://discuss.elastic.co/t/using-timestamp-field-in-sql-queries/147701 "2018-09-10T07:04:36Z")
given a simple sample index, the following works perfectly running from Kibana dev console and includes @timestamp as a column in the output: POST \_xpack/sql?format=txt { "query":"SELECT \* FROM sampleindex LIMIT 10" … --- ## [{PayloadSenderV2} Failed sending events. Following events were not transferred successfully to the server](https://discuss.elastic.co/t/payloadsenderv2-failed-sending-events-following-events-were-not-transferred-successfully-to-the-server/269363)
**Author:** [@Rolfen](https://discuss.elastic.co/u/Rolfen)\ **Replies:** 5\ **Last updated:** [May 26, 2021, 1:11am UTC](https://discuss.elastic.co/t/payloadsenderv2-failed-sending-events-following-events-were-not-transferred-successfully-to-the-server/269363 "2021-05-26T01:11:31Z")
Kibana version: None Elasticsearch version: None APM Server version: 7.10.1 (amd64), libbeat 7.10.1 \[b7c209e80c4674603447458e62963ed5246b5297 built 2020-12-04 22:07:34 +0000 UTC\] APM Agent language and version: .Net C… --- ## [No field found for \[path\] in mapping with types \[doc\]](https://discuss.elastic.co/t/no-field-found-for-path-in-mapping-with-types-doc/164568)
**Author:** [@imadykyted](https://discuss.elastic.co/u/imadykyted)\ **Replies:** 0\ **Last updated:** [January 17, 2019, 4:31am UTC](https://discuss.elastic.co/t/no-field-found-for-path-in-mapping-with-types-doc/164568 "2019-01-17T04:31:13Z")
My ES document model is as follows "hits": \[ { "\_source": { "variant\_group": { "variant\_info": \[ { "name": … --- ## [Monitor the indexing rate of specific index?](https://discuss.elastic.co/t/monitor-the-indexing-rate-of-specific-index/99781)
**Author:** [@quanta84](https://discuss.elastic.co/u/quanta84)\ **Replies:** 4\ **Last updated:** [September 12, 2017, 2:38am UTC](https://discuss.elastic.co/t/monitor-the-indexing-rate-of-specific-index/99781 "2017-09-12T02:38:00Z")
We are using fluentd to send logs to ElasticSearch: \ @type elasticsearch host elasticsearch port 9200 logstash\_format true index\_name logstash type\_name logstash \ For some reasons… --- ## [Extract substring from field](https://discuss.elastic.co/t/extract-substring-from-field/180910)
**Author:** [@Jan\_Kaspar](https://discuss.elastic.co/u/Jan_Kaspar)\ **Replies:** 3\ **Last updated:** [May 14, 2019, 8:40am UTC](https://discuss.elastic.co/t/extract-substring-from-field/180910 "2019-05-14T08:40:13Z")
Hello, I have typical scenatio. I have field that contains distinguished name. I need to extract common name and copy it to new field. I have working regex but i really dont know how to use it in match. Existing field … --- ## [Elasticsearch 5.0 JAVA API 5.0 on JDK 7](https://discuss.elastic.co/t/elasticsearch-5-0-java-api-5-0-on-jdk-7/68222)
**Author:** [@augustojaba](https://discuss.elastic.co/u/augustojaba)\ **Replies:** 3\ **Last updated:** [December 7, 2016, 5:57am UTC](https://discuss.elastic.co/t/elasticsearch-5-0-java-api-5-0-on-jdk-7/68222 "2016-12-07T05:57:41Z")
My system is compiled on JDK 1.7 and I need to use the Elasticsearch 5.0. I want to use the Elasticsearch JAVA API 5.0 on this system and I cannot change the JDK version that my system is compiled though. How can I proce… --- ## [Getting a 403 error when performing a get operation](https://discuss.elastic.co/t/getting-a-403-error-when-performing-a-get-operation/61325)
**Author:** [@thinkabout](https://discuss.elastic.co/u/thinkabout)\ **Replies:** 1\ **Last updated:** [September 23, 2016, 5:53am UTC](https://discuss.elastic.co/t/getting-a-403-error-when-performing-a-get-operation/61325 "2016-09-23T05:53:20Z")
Hi, we're evaluating ElasticSearch and Kibana. I have recently downloaded elasticsearch-5.0.0-alpha5 and kibana-5.0.0-alpha5-windows-86. When performing a get operation authenticating with the default username\\pwd, I … --- ## [How to use filebeat and logstash for different log](https://discuss.elastic.co/t/how-to-use-filebeat-and-logstash-for-different-log/154538)
**Author:** [@aabababba](https://discuss.elastic.co/u/aabababba)\ **Replies:** 8\ **Last updated:** [November 5, 2018, 5:34am UTC](https://discuss.elastic.co/t/how-to-use-filebeat-and-logstash-for-different-log/154538 "2018-11-05T05:34:47Z")
1 /var/log/message Oct 30 09:04:35 ci04 dbus-daemon: dbus\[616\]: \[system\] Successfully activated service 'org.freedesktop.problems' 2 /var/log/tomcat/catalina.out \[INFO \] \[2018-10-29 16:44:30,945\] \[DubboServerHandler… --- ## [Index UNASSIGNED CLUSTER\_RECOVERED](https://discuss.elastic.co/t/index-unassigned-cluster-recovered/284307)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 2\ **Last updated:** [September 16, 2021, 6:19am UTC](https://discuss.elastic.co/t/index-unassigned-cluster-recovered/284307 "2021-09-16T06:19:38Z")
I have a single node cluster with 1 replica on all my indices. Somehow however I have 2 indices unallocated bin-dev and ilm-history-1-000004. GET /\_cat/shards?h=index,shard,prirep,state,unassigned.reason ilm-history-1-0… --- ## [IndexShardRecoveryException failed to recovery from gateway](https://discuss.elastic.co/t/indexshardrecoveryexception-failed-to-recovery-from-gateway/61370)
**Author:** [@Shammi\_Kumar](https://discuss.elastic.co/u/Shammi_Kumar)\ **Replies:** 2\ **Last updated:** [September 25, 2016, 5:13pm UTC](https://discuss.elastic.co/t/indexshardrecoveryexception-failed-to-recovery-from-gateway/61370 "2016-09-25T17:13:11Z")
1) I have 3 node elastic search cluster. Each node configuration is 12 Core / 24 GB RAM. 2) I have 365 (days) indices. 12 shards per index (day). So total 4380+ shards 3) I added threadpool.search.queue\_size: 2500 and th… --- ## [SAP Applications Monitoring](https://discuss.elastic.co/t/sap-applications-monitoring/221235)
**Author:** [@raviraj80](https://discuss.elastic.co/u/raviraj80)\ **Replies:** 0\ **Last updated:** [February 27, 2020, 12:16pm UTC](https://discuss.elastic.co/t/sap-applications-monitoring/221235 "2020-02-27T12:16:52Z")
Whether it is possible to do SAP Applications monitoring using ELK stack ? If yes then how..Can we integrate SAP Solution Manager with ELK ..how to ingest SAP logs into ELK [Previous page](https://discuss.elastic.co/top.md?page=453&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=455&per_page=50&period=all)