# Top **URL:** https://discuss.elastic.co/top.md?page=457&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 458 --- ## [How to write the watcher condition & trigger rule](https://discuss.elastic.co/t/how-to-write-the-watcher-condition-trigger-rule/42486)
**Author:** [@Lu1Lu](https://discuss.elastic.co/u/Lu1Lu)\ **Replies:** 4\ **Last updated:** [February 27, 2016, 12:54am UTC](https://discuss.elastic.co/t/how-to-write-the-watcher-condition-trigger-rule/42486 "2016-02-27T00:54:06Z")
hello！ this is the domain&netflow picture. now, i want to sent e-mail when "Sum of bytes" \>50,000.000(50MB) netflow . i copy the request to my configure . i read offical website long times ... "condition": { … --- ## [Logstash SIGTERM received](https://discuss.elastic.co/t/logstash-sigterm-received/35377)
**Author:** [@Marco](https://discuss.elastic.co/u/Marco)\ **Replies:** 3\ **Last updated:** [May 30, 2016, 7:23pm UTC](https://discuss.elastic.co/t/logstash-sigterm-received/35377 "2016-05-30T19:23:48Z")
when I restart the logstash the logstash.log shows as below: {:timestamp=\>"2015-11-24T09:30:18.155000+0800", :message=\>"SIGTERM received. Shutting down the pipeline.", :level=\>:warn} {:timestamp=\>"2015-11-24T09:33:07.125… --- ## [ElasticSearch 7.0 upgrade from 6.7.1 issue with Metricbeat templates](https://discuss.elastic.co/t/elasticsearch-7-0-upgrade-from-6-7-1-issue-with-metricbeat-templates/177418)
**Author:** [@RogerDavies](https://discuss.elastic.co/u/RogerDavies)\ **Replies:** 3\ **Last updated:** [May 22, 2019, 8:39pm UTC](https://discuss.elastic.co/t/elasticsearch-7-0-upgrade-from-6-7-1-issue-with-metricbeat-templates/177418 "2019-05-22T20:39:03Z")
Hi I'm looking at a test ElasticSearch instance @ 6.7.1 upgrade to 7.0. The upgrade assistant says that the metricbeat templates for the cluster need looking at. Basically it says:- "Index templates \[metricbeat-7.0.0, … --- ## [Elasticsearch crashing every 7 days or so](https://discuss.elastic.co/t/elasticsearch-crashing-every-7-days-or-so/171206)
**Author:** [@gmfreak](https://discuss.elastic.co/u/gmfreak)\ **Replies:** 8\ **Last updated:** [March 7, 2019, 6:53pm UTC](https://discuss.elastic.co/t/elasticsearch-crashing-every-7-days-or-so/171206 "2019-03-07T18:53:25Z")
I'm running SugarCRM which uses Elasticsearch and i'm dealing with Elasticsearch crashing every week on my server. I did some digging and found some info online that talked about setting the heap size and various other … --- ## [Beats and Elastic Agent 8.11.3 / 7.17.16 Security Update (ESA-2023-30)](https://discuss.elastic.co/t/beats-and-elastic-agent-8-11-3-7-17-16-security-update-esa-2023-30/349180)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [December 12, 2023, 5:00pm UTC](https://discuss.elastic.co/t/beats-and-elastic-agent-8-11-3-7-17-16-security-update-esa-2023-30/349180 "2023-12-12T17:00:31Z")
Beats and Elastic Agent Insertion of Sensitive Information into Log File An issue was discovered by Elastic whereby Beats and Elastic Agent would log a raw event in its own logs at the WARN or ERROR level if ingesting th… --- ## [Is there a way to convert @timestamp of ES to Unix epoch time in milliseconds?](https://discuss.elastic.co/t/is-there-a-way-to-convert-timestamp-of-es-to-unix-epoch-time-in-milliseconds/21097)
**Author:** [@Mungeol\_Heo](https://discuss.elastic.co/u/Mungeol_Heo)\ **Replies:** 6\ **Last updated:** [December 8, 2014, 5:04am UTC](https://discuss.elastic.co/t/is-there-a-way-to-convert-timestamp-of-es-to-unix-epoch-time-in-milliseconds/21097 "2014-12-08T05:04:26Z")
Hi, As I mentioned at the title of this question, I wonder is there a way to convert @timestamp of ES to Unix epoch time in milliseconds by using ES query? For instance, "2014-11-10T15:00:00.000Z" to "1415599200000… --- ## [How to make Filebeat send events to multiple logstash in roundrobin](https://discuss.elastic.co/t/how-to-make-filebeat-send-events-to-multiple-logstash-in-roundrobin/37780)
**Author:** [@Omar\_Al\_Zabir](https://discuss.elastic.co/u/Omar_Al_Zabir)\ **Replies:** 2\ **Last updated:** [December 24, 2015, 11:47am UTC](https://discuss.elastic.co/t/how-to-make-filebeat-send-events-to-multiple-logstash-in-roundrobin/37780 "2015-12-24T11:47:24Z")
I have a server which produces 1500 req/sec. Filebeat is processing the logs and sending to a logstash. However, it sends all the events to one logstash. How do I get it to send to multiple logstash servers in order to d… --- ## [How can I access an element in a list by index in Logstash?](https://discuss.elastic.co/t/how-can-i-access-an-element-in-a-list-by-index-in-logstash/199028)
**Author:** [@gitreseteasy](https://discuss.elastic.co/u/gitreseteasy)\ **Replies:** 3\ **Last updated:** [September 12, 2019, 3:15am UTC](https://discuss.elastic.co/t/how-can-i-access-an-element-in-a-list-by-index-in-logstash/199028 "2019-09-12T03:15:27Z")
I want to dynamically route my logs based on the strings in the tags of an event. I can't find any documentation for accessing an index of a list. Is this possible? If so, where can I find documentation on proper syntax? … --- ## [Creating Dashboard according to beat.name or hostname?](https://discuss.elastic.co/t/creating-dashboard-according-to-beat-name-or-hostname/129438)
**Author:** [@roly](https://discuss.elastic.co/u/roly)\ **Replies:** 4\ **Last updated:** [April 26, 2018, 7:48am UTC](https://discuss.elastic.co/t/creating-dashboard-according-to-beat-name-or-hostname/129438 "2018-04-26T07:48:22Z")
Hi, Is there a way we can create Kibana dashboard for an individual host to map respective fields such as CPU usage, Memory usage and etc. Right now, everything is in one index such as "metricbeat-version-date". Kindly … --- ## [Using Sort API via Elastic.Clients.Elasticsearch 8.1.0 .NET](https://discuss.elastic.co/t/using-sort-api-via-elastic-clients-elasticsearch-8-1-0-net/330908)
**Author:** [@felix-stnr](https://discuss.elastic.co/u/felix-stnr)\ **Replies:** 2\ **Last updated:** [April 27, 2023, 9:37am UTC](https://discuss.elastic.co/t/using-sort-api-via-elastic-clients-elasticsearch-8-1-0-net/330908 "2023-04-27T09:37:32Z")
I have an Elasticsearch cluster, which contains an index called persons. I want to query and sort the documents of the index using the latest Elasticsearch client for .NET (Elastic.Clients.Elasticsearch 8.1.0 .NET). The … --- ## [How i can make a status panel in Kibana?](https://discuss.elastic.co/t/how-i-can-make-a-status-panel-in-kibana/293765)
**Author:** [@Cap\_Ho](https://discuss.elastic.co/u/Cap_Ho)\ **Replies:** 7\ **Last updated:** [January 15, 2022, 3:56pm UTC](https://discuss.elastic.co/t/how-i-can-make-a-status-panel-in-kibana/293765 "2022-01-15T15:56:15Z")
Most of the dashboard development may use the "status panel" to represent the on/off for service/server/machine. In Grafana , it have two libs: Status Panel plugin for Grafana | Grafana Labs Stat | Grafana Labs which … --- ## [Kibana Discover tab is not loading](https://discuss.elastic.co/t/kibana-discover-tab-is-not-loading/58314)
**Author:** [@sruthi](https://discuss.elastic.co/u/sruthi)\ **Replies:** 7\ **Last updated:** [August 22, 2016, 7:15am UTC](https://discuss.elastic.co/t/kibana-discover-tab-is-not-loading/58314 "2016-08-22T07:15:50Z")
In our dev environment kibana discover is not loading. All the other tabs are working fine. Any solutions? we have tried different time ranges. --- ## [How to query array of keywords in elastic search filter with space?](https://discuss.elastic.co/t/how-to-query-array-of-keywords-in-elastic-search-filter-with-space/196894)
**Author:** [@kavaan](https://discuss.elastic.co/u/kavaan)\ **Replies:** 2\ **Last updated:** [August 27, 2019, 8:15am UTC](https://discuss.elastic.co/t/how-to-query-array-of-keywords-in-elastic-search-filter-with-space/196894 "2019-08-27T08:15:33Z")
I have a list of cities like this: \["New York","Bayern Munchen","Porto Alegre"\] I want to search some query in must or should section and use this cities keywords in filter section, but this cities have white space and… --- ## [What is the Necessary Tech Stack for Developing Kibana Plugins?](https://discuss.elastic.co/t/what-is-the-necessary-tech-stack-for-developing-kibana-plugins/171928)
**Author:** [@reillye](https://discuss.elastic.co/u/reillye)\ **Replies:** 2\ **Last updated:** [March 13, 2019, 11:02am UTC](https://discuss.elastic.co/t/what-is-the-necessary-tech-stack-for-developing-kibana-plugins/171928 "2019-03-13T11:02:05Z")
I've been tasked with developing a basic plugin for Kibana as of POC. I don't have much front-end development experience, so I've been reading through the documentation (which is great btw), but I'm still a little unclea… --- ## [Fortinet Module Dashboard](https://discuss.elastic.co/t/fortinet-module-dashboard/272747)
**Author:** [@demonsquatch](https://discuss.elastic.co/u/demonsquatch)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 9:18pm UTC](https://discuss.elastic.co/t/fortinet-module-dashboard/272747 "2021-05-12T21:18:14Z")
Hello All, As there is not currently a premade dashboard for Fortinet, does anyone have go to visualizations they use when creating dashboards to view Fortinet logs? Just getting started with this and looking for ideas… --- ## [Filebeat: tcp xx.xx.xx.xx:5044: i/o timeout](https://discuss.elastic.co/t/filebeat-tcp-xx-xx-xx-xx-i-o-timeout/142832)
**Author:** [@lcui\_dxc](https://discuss.elastic.co/u/lcui_dxc)\ **Replies:** 5\ **Last updated:** [August 12, 2018, 8:14pm UTC](https://discuss.elastic.co/t/filebeat-tcp-xx-xx-xx-xx-i-o-timeout/142832 "2018-08-12T20:14:38Z")
Hello, I'm new to ELK and beats, I set up filebeat and merticbeat on 2 linux servers to send logs/metrics to Logstash on another server in our AWS Clould. On one of the beat servers, beats work fine and send data to lo… --- ## [Mapper \[kubernetes.labels.app\] of different type, current\_type \[text\], merged\_type \[ObjectMapper\]](https://discuss.elastic.co/t/mapper-kubernetes-labels-app-of-different-type-current-type-text-merged-type-objectmapper/152702)
**Author:** [@sszabo](https://discuss.elastic.co/u/sszabo)\ **Replies:** 7\ **Last updated:** [October 23, 2018, 3:34pm UTC](https://discuss.elastic.co/t/mapper-kubernetes-labels-app-of-different-type-current-type-text-merged-type-objectmapper/152702 "2018-10-23T15:34:04Z")
We get this error in elastic: java.lang.IllegalArgumentException: mapper \[kubernetes.labels.app\] of different type, current\_type \[text\], merged\_type \[ObjectMapper\] The message seems to have kubernetes.labels.app set to… --- ## [Node does not join existing cluster (ES 7.2)](https://discuss.elastic.co/t/node-does-not-join-existing-cluster-es-7-2/190229)
**Author:** [@Jensxy](https://discuss.elastic.co/u/Jensxy)\ **Replies:** 2\ **Last updated:** [July 12, 2019, 2:21pm UTC](https://discuss.elastic.co/t/node-does-not-join-existing-cluster-es-7-2/190229 "2019-07-12T14:21:30Z")
I have an existing cluster and I want to add a node to the cluster. The cluster contains only one node at the moment. The two nodes are running on two different machines. For any reason, the second node does not join the… --- ## [Skipping security auto configuration](https://discuss.elastic.co/t/skipping-security-auto-configuration/315173)
**Author:** [@cdy5159](https://discuss.elastic.co/u/cdy5159)\ **Replies:** 1\ **Last updated:** [September 27, 2022, 12:12am UTC](https://discuss.elastic.co/t/skipping-security-auto-configuration/315173 "2022-09-27T00:12:41Z")
I'm attempting to build a 3 node cluster with Elastic 8.2.3. I can build the first node as a single node cluster successfully and connect with kibana. My problem is adding nodes. On the first node, I've run the comman… --- ## [OTEL plugin error in sending data to APM server](https://discuss.elastic.co/t/otel-plugin-error-in-sending-data-to-apm-server/313027)
**Author:** [@senyam08](https://discuss.elastic.co/u/senyam08)\ **Replies:** 5\ **Last updated:** [September 2, 2022, 1:14am UTC](https://discuss.elastic.co/t/otel-plugin-error-in-sending-data-to-apm-server/313027 "2022-09-02T01:14:39Z")
We have verified Open-telemetry protocol data to APM server endpoint with elastic 7.16 version. We have migrated to 8.2 version and running Elasticsearch observability in kubernetes. APM agents are able to send the data … --- ## [Use of regular expression in the Kibana Visualization](https://discuss.elastic.co/t/use-of-regular-expression-in-the-kibana-visualization/207546)
**Author:** [@AshishC](https://discuss.elastic.co/u/AshishC)\ **Replies:** 1\ **Last updated:** [November 12, 2019, 5:09pm UTC](https://discuss.elastic.co/t/use-of-regular-expression-in-the-kibana-visualization/207546 "2019-11-12T17:09:48Z")
Hi, I am trying to create a dashboard to display top 10 URL hits using access log. In order to do this, I have created a visualization of the type 'Data Table'. Data Table Setting: Metrics : Count Buckets : Split Row… --- ## [Raw fields missing](https://discuss.elastic.co/t/raw-fields-missing/25408)
**Author:** [@Noodles](https://discuss.elastic.co/u/Noodles)\ **Replies:** 2\ **Last updated:** [July 14, 2015, 5:28am UTC](https://discuss.elastic.co/t/raw-fields-missing/25408 "2015-07-14T05:28:00Z")
I'm trying to use a separate index for my apache logs: elasticsearch { host =\> localhost index =\> "http-%{+YYYY.MM.dd}" } It doesn't look like the .raw fields are being created in ES, but as far as I can see it is usi… --- ## [White labeling Kibana](https://discuss.elastic.co/t/white-labeling-kibana/22761)
**Author:** [@Jatinpreet\_Singh](https://discuss.elastic.co/u/Jatinpreet_Singh)\ **Replies:** 2\ **Last updated:** [March 19, 2015, 5:00pm UTC](https://discuss.elastic.co/t/white-labeling-kibana/22761 "2015-03-19T17:00:14Z")
Hi, I wish to use Elasticsearch and Kibana in a commercial product. I wish to understand the licensing concerns if I replace the Kibana logo by my own logo. Also, some text may be modified to suit my needs. I… --- ## [Only invoke geoip if field is IP](https://discuss.elastic.co/t/only-invoke-geoip-if-field-is-ip/25317)
**Author:** [@Khoa\_Nguyen1](https://discuss.elastic.co/u/Khoa_Nguyen1)\ **Replies:** 3\ **Last updated:** [July 10, 2015, 7:36pm UTC](https://discuss.elastic.co/t/only-invoke-geoip-if-field-is-ip/25317 "2015-07-10T19:36:53Z")
How do I conditionally invoke geoip if the field is a valid IP address? --- ## [How to visualize tally counters (Serial Diff maybe?)](https://discuss.elastic.co/t/how-to-visualize-tally-counters-serial-diff-maybe/136194)
**Author:** [@agirbal](https://discuss.elastic.co/u/agirbal)\ **Replies:** 7\ **Last updated:** [June 28, 2018, 11:03pm UTC](https://discuss.elastic.co/t/how-to-visualize-tally-counters-serial-diff-maybe/136194 "2018-06-28T23:03:13Z")
Using Kibana 5.4.1 I have a fairly common use case whereby servers send counter metrics at regular interval. Those counters are just a tally of some event, for example the number of connections opened, or some errors si… --- ## [Modeling products and category](https://discuss.elastic.co/t/modeling-products-and-category/13330)
**Author:** [@hitchhikar](https://discuss.elastic.co/u/hitchhikar)\ **Replies:** 7\ **Last updated:** [August 28, 2013, 6:00pm UTC](https://discuss.elastic.co/t/modeling-products-and-category/13330 "2013-08-28T18:00:28Z")
Hi All I am quite confused over a type mapping to fit my model. Main type is "product". A product can be associated with multiple categories. For simplicity say categories are not nested but a product cn have more … --- ## [Kibana shows blank sites in Discover, Management, ... after deleting/creation of default index pattern](https://discuss.elastic.co/t/kibana-shows-blank-sites-in-discover-management-after-deleting-creation-of-default-index-pattern/72405)
**Author:** [@Manuel16](https://discuss.elastic.co/u/Manuel16)\ **Replies:** 6\ **Last updated:** [January 26, 2017, 7:56pm UTC](https://discuss.elastic.co/t/kibana-shows-blank-sites-in-discover-management-after-deleting-creation-of-default-index-pattern/72405 "2017-01-26T19:56:51Z")
Hi all, currently we have a problem with Kibana: After deleting the default index pattern in Kibana, we are not able to create this default pattern again. Our default pattern is called "packets-", if we try to create it… --- ## [Kibana JSON input - String manipulation](https://discuss.elastic.co/t/kibana-json-input-string-manipulation/68435)
**Author:** [@Alex\_Buys](https://discuss.elastic.co/u/Alex_Buys)\ **Replies:** 2\ **Last updated:** [December 9, 2016, 7:36am UTC](https://discuss.elastic.co/t/kibana-json-input-string-manipulation/68435 "2016-12-09T07:36:24Z")
I am trying to build a visualization on Kibana to display data per day of the week. In other words, count of transactions for Monday, Tuesday, Wednesday, etc. over a duration. I tried variations on the following JSON i… --- ## [Elasticsearch - a scale problem? master timeout?](https://discuss.elastic.co/t/elasticsearch-a-scale-problem-master-timeout/232973)
**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\ **Replies:** 3\ **Last updated:** [May 17, 2020, 10:14am UTC](https://discuss.elastic.co/t/elasticsearch-a-scale-problem-master-timeout/232973 "2020-05-17T10:14:37Z")
I noticed a new problem. This problem started when I have 40 data nodes and more in the elasticsearch cluster. When on a cluster you are doing a larger scale, e.g. recovery shards (let's assume you are doing some rerou… --- ## [Keeping getting this error, please help parse\_exception","reason":"Failed to parse content to map"}](https://discuss.elastic.co/t/keeping-getting-this-error-please-help-parse-exception-reason-failed-to-parse-content-to-map/165501)
**Author:** [@ballr24](https://discuss.elastic.co/u/ballr24)\ **Replies:** 0\ **Last updated:** [January 23, 2019, 11:15pm UTC](https://discuss.elastic.co/t/keeping-getting-this-error-please-help-parse-exception-reason-failed-to-parse-content-to-map/165501 "2019-01-23T23:15:25Z")
Hi All, I'm a newbie to Elasticsearch, I'm trying to get my code to work with not\_analyzed Please see below curl -X PUT "localhost:9200/\_mapping/jdbc" -H 'Content-Type: application/x-ndjson' -d ' { "mappings": { "jdbc… --- ## [Troubleshooting Slow Aggregation Query](https://discuss.elastic.co/t/troubleshooting-slow-aggregation-query/38546)
**Author:** [@codyaray](https://discuss.elastic.co/u/codyaray)\ **Replies:** 6\ **Last updated:** [January 14, 2016, 3:02pm UTC](https://discuss.elastic.co/t/troubleshooting-slow-aggregation-query/38546 "2016-01-14T15:02:55Z")
I'm trying to understand why this aggregation query is slow. I've asked about it in IRC and it was suggested to open it up to a wider audience. Using Elasticsearch 1.6.0. (Have a lot of data to migrate during upgrades.) … --- ## [Restore from Backup and merge with newer data](https://discuss.elastic.co/t/restore-from-backup-and-merge-with-newer-data/28760)
**Author:** [@zzap](https://discuss.elastic.co/u/zzap)\ **Replies:** 4\ **Last updated:** [September 9, 2015, 8:44am UTC](https://discuss.elastic.co/t/restore-from-backup-and-merge-with-newer-data/28760 "2015-09-09T08:44:01Z")
Hi all, I've had this up on Stack Exchange for a few days and no response there so I'm hoping I can some help in here since it's a forum specific to Elastic Search! I'm experimenting with Elasticsearch in relation to… --- ## [Can't send logs from filebeats to logstash](https://discuss.elastic.co/t/cant-send-logs-from-filebeats-to-logstash/196492)
**Author:** [@rajdeep101](https://discuss.elastic.co/u/rajdeep101)\ **Replies:** 4\ **Last updated:** [August 24, 2019, 6:41am UTC](https://discuss.elastic.co/t/cant-send-logs-from-filebeats-to-logstash/196492 "2019-08-24T06:41:37Z")
Filebeats wont let me exclude output.elasticsearch from filebeat.yml and would give and error "Exiting: Index management requested but the Elasticsearch output is not configured/enabled". The setup runs without error wh… --- ## [No handler found for uri \[/.kibana/\_query\] and method \[DELETE\]](https://discuss.elastic.co/t/no-handler-found-for-uri-kibana--query-and-method-delete/90611)
**Author:** [@Arvin9190](https://discuss.elastic.co/u/Arvin9190)\ **Replies:** 4\ **Last updated:** [June 23, 2017, 11:10am UTC](https://discuss.elastic.co/t/no-handler-found-for-uri-kibana--query-and-method-delete/90611 "2017-06-23T11:10:38Z")
Hi All, We try deleting .kibana objects using delete\_by\_query API. It is working fine for few Elasticsearch. For few ES, we are getting, "No handler found for uri \[/.kibana/\_query\] and method \[DELETE\]" exception. Where… --- ## [Suggest for Heap size chnage and number of shards require](https://discuss.elastic.co/t/suggest-for-heap-size-chnage-and-number-of-shards-require/94318)
**Author:** [@Dilip\_Kumar](https://discuss.elastic.co/u/Dilip_Kumar)\ **Replies:** 5\ **Last updated:** [August 2, 2017, 8:52am UTC](https://discuss.elastic.co/t/suggest-for-heap-size-chnage-and-number-of-shards-require/94318 "2017-08-02T08:52:21Z")
Hi, I have one node with 1 TB hard disk and 30 GB RAM . We are getting 3 main index. one index having daily 10 million of records (1 document with 4 fields all are keyword type field) So how many shards should take fo… --- ## [Can't install x-pack for logstash 6.0](https://discuss.elastic.co/t/cant-install-x-pack-for-logstash-6-0/104733)
**Author:** [@Cornoualis](https://discuss.elastic.co/u/Cornoualis)\ **Replies:** 7\ **Last updated:** [November 13, 2017, 5:25pm UTC](https://discuss.elastic.co/t/cant-install-x-pack-for-logstash-6-0/104733 "2017-11-13T17:25:13Z")
Hi, I tried to install x-pack for logstash 6.0 using the command "logstash-plugin install x-pack" and I have the following errors: ⇒ ./logstash-plugin install x-pack … --- ## [Connect to Elasticsearch using Java High Level Client](https://discuss.elastic.co/t/connect-to-elasticsearch-using-java-high-level-client/177917)
**Author:** [@Kurezza](https://discuss.elastic.co/u/Kurezza)\ **Replies:** 2\ **Last updated:** [April 23, 2019, 5:31am UTC](https://discuss.elastic.co/t/connect-to-elasticsearch-using-java-high-level-client/177917 "2019-04-23T05:31:35Z")
Hi, I'm new to Elasticsearch. I'm trying to connect Java to Elasticsearch using Java High Level Client. However, I always got an IOException. I was sure that my Elasticsearch is up and running. Here is the code I used. M… --- ## [Required Host Firewall Rules?](https://discuss.elastic.co/t/required-host-firewall-rules/84791)
**Author:** [@John\_Zimmerman](https://discuss.elastic.co/u/John_Zimmerman)\ **Replies:** 4\ **Last updated:** [May 26, 2017, 2:49am UTC](https://discuss.elastic.co/t/required-host-firewall-rules/84791 "2017-05-26T02:49:39Z")
Running through the setup of ECE 1.0.0-beta2. Is there a list of required host firewall ports that need to be open? Running iptables on CentOS 7 and that seems to be one of the initial hurdles to running the install sc… --- ## [Proc.name limited to 15 chars?](https://discuss.elastic.co/t/proc-name-limited-to-15-chars/36034)
**Author:** [@abraxxa](https://discuss.elastic.co/u/abraxxa)\ **Replies:** 4\ **Last updated:** [December 2, 2015, 4:48pm UTC](https://discuss.elastic.co/t/proc-name-limited-to-15-chars/36034 "2015-12-02T16:48:00Z")
I have several daemons which names have a common prefix which is longer than 15 characters that seem to get cut off by topbeat and end up being counted as one. It seems there is no config option in topbeat, is this a lim… --- ## [Searching emails by domain](https://discuss.elastic.co/t/searching-emails-by-domain/69550)
**Author:** [@smugmane](https://discuss.elastic.co/u/smugmane)\ **Replies:** 3\ **Last updated:** [December 20, 2016, 10:39am UTC](https://discuss.elastic.co/t/searching-emails-by-domain/69550 "2016-12-20T10:39:26Z")
I've been trying to find out how to search through millions of emails with wildcards if possible. Examples of searches would go like 1. \*@domain 2. user@\* 3. \*keyword@domain I'm still new to ES and have been trying… --- ## [Highlight with Bool + filter Query](https://discuss.elastic.co/t/highlight-with-bool-filter-query/63949)
**Author:** [@shivangshah](https://discuss.elastic.co/u/shivangshah)\ **Replies:** 3\ **Last updated:** [October 26, 2016, 8:41pm UTC](https://discuss.elastic.co/t/highlight-with-bool-filter-query/63949 "2016-10-26T20:41:14Z")
Hi, I am having the exact same issue mentioned here: https://discuss.elastic.co/t/elasticsearch-exclude-bool-term-from-getting-highlighted/13258 Except now, the Filtered Query is deprecated to using Bool Query and … --- ## [Logstash -\> Elastic 403 permission issue](https://discuss.elastic.co/t/logstash-elastic-403-permission-issue/228131)
**Author:** [@Andrey\_Sidorenko](https://discuss.elastic.co/u/Andrey_Sidorenko)\ **Replies:** 0\ **Last updated:** [April 15, 2020, 1:29pm UTC](https://discuss.elastic.co/t/logstash-elastic-403-permission-issue/228131 "2020-04-15T13:29:27Z")
Hi, I am a new in ELK. At now i trying to configure and use my first elk server. I'm trying to configure security through basic realm and have a issue with logstash connection to elastic search. Following guide https:… --- ## [Wrong filebeat hostname in logs](https://discuss.elastic.co/t/wrong-filebeat-hostname-in-logs/195080)
**Author:** [@sjorda20](https://discuss.elastic.co/u/sjorda20)\ **Replies:** 4\ **Last updated:** [August 29, 2019, 6:44pm UTC](https://discuss.elastic.co/t/wrong-filebeat-hostname-in-logs/195080 "2019-08-29T18:44:12Z")
I have 100 systems that are sending rsyslog messages to a syslog server. I have installed the ELK stack and filebeats on that server. Filebeats is configured to monitor the logs that are being populated by syslog and s… --- ## [Filebeat is collecting Logs but not showing in kibana](https://discuss.elastic.co/t/filebeat-is-collecting-logs-but-not-showing-in-kibana/171291)
**Author:** [@Suresh\_Pal](https://discuss.elastic.co/u/Suresh_Pal)\ **Replies:** 4\ **Last updated:** [March 11, 2019, 6:16am UTC](https://discuss.elastic.co/t/filebeat-is-collecting-logs-but-not-showing-in-kibana/171291 "2019-03-11T06:16:17Z")
Hi Team, i'm using filebeat 6.4 It is collecting and parsing the logs but not showing at kibana. Note: Filebeat is running on my ELK system and I'm trying to parse some files from same sytem. --- ## [Expecting UTF-8 Char set](https://discuss.elastic.co/t/expecting-utf-8-char-set/24583)
**Author:** [@rspangle](https://discuss.elastic.co/u/rspangle)\ **Replies:** 2\ **Last updated:** [July 1, 2015, 10:44pm UTC](https://discuss.elastic.co/t/expecting-utf-8-char-set/24583 "2015-07-01T22:44:41Z")
I have some log entries that are coming in from snare that look ok in the snare.log file, but when looking at the logstash.log, I see a message that says a character set other than UTF-8 was expected, but no indication o… --- ## [Kibana "Unable to revive connection" to Elasticsearch on Docker](https://discuss.elastic.co/t/kibana-unable-to-revive-connection-to-elasticsearch-on-docker/227944)
**Author:** [@ffcandido](https://discuss.elastic.co/u/ffcandido)\ **Replies:** 3\ **Last updated:** [April 14, 2020, 4:35pm UTC](https://discuss.elastic.co/t/kibana-unable-to-revive-connection-to-elasticsearch-on-docker/227944 "2020-04-14T16:35:38Z")
Hi everyone, I'm using Docker Compose to run Elasticsearch Single Node on Docker with Kibana. I reviewed my files several times and no luck so far. I'm getting "Unable to revive connection: http://elasticsearch:9200/" … --- ## [Using Logstash 5.5 for reading .gz files](https://discuss.elastic.co/t/using-logstash-5-5-for-reading-gz-files/97947)
**Author:** [@shashwat](https://discuss.elastic.co/u/shashwat)\ **Replies:** 3\ **Last updated:** [August 26, 2017, 3:10pm UTC](https://discuss.elastic.co/t/using-logstash-5-5-for-reading-gz-files/97947 "2017-08-26T15:10:16Z")
Hi, I am trying to use logstash 5.5 for analyzing archived (.gz) files generating every minute. Each.gz file contains csv file in it. My .conf file looks like below: input { file { type =\> "gzip" path =\> \[ “C:\\data\*… --- ## [Kibana : Internal Server Error](https://discuss.elastic.co/t/kibana-internal-server-error/268938)
**Author:** [@sanju\_timsina](https://discuss.elastic.co/u/sanju_timsina)\ **Replies:** 5\ **Last updated:** [April 1, 2021, 2:29am UTC](https://discuss.elastic.co/t/kibana-internal-server-error/268938 "2021-04-01T02:29:29Z")
Hi, I am running Kibana 7.11 and I am getting this Internal Server Error when I try to get logs on the Kibana Portal. log \[11:09:04.725\] \[info\]\[listening\] Server running at http://0.0.0.0:5601 log \[11:09:05.303… --- ## [How update, update\_by\_query in ES really work?](https://discuss.elastic.co/t/how-update-update-by-query-in-es-really-work/313727)
**Author:** [@robocon20x](https://discuss.elastic.co/u/robocon20x)\ **Replies:** 7\ **Last updated:** [September 6, 2022, 7:35am UTC](https://discuss.elastic.co/t/how-update-update-by-query-in-es-really-work/313727 "2022-09-06T07:35:46Z")
Hi everyone, i'm trying to optimize update speed on my ES and want to know deeper about it's update and update\_by\_query. So I have some question: how update in elasticsearch really word. As I know when I update 1 doc, … --- ## [Metricbeat Ceph stats collection breaks for Ceph Mimic release](https://discuss.elastic.co/t/metricbeat-ceph-stats-collection-breaks-for-ceph-mimic-release/137496)
**Author:** [@jrosser](https://discuss.elastic.co/u/jrosser)\ **Replies:** 1\ **Last updated:** [June 26, 2018, 7:17pm UTC](https://discuss.elastic.co/t/metricbeat-ceph-stats-collection-breaks-for-ceph-mimic-release/137496 "2018-06-26T19:17:27Z")
Metricbeat's Ceph module queries the API provided by ceph-rest-api, a command-line tool provided with Ceph versions up to Luminous. This is documented here: http://docs.ceph.com/docs/luminous/man/8/ceph-rest-api/ This … [Previous page](https://discuss.elastic.co/top.md?page=456&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=458&per_page=50&period=all)