# Top **URL:** https://discuss.elastic.co/top.md?page=459&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 460 --- ## [How can make a cluster with Logstash? Is it possible?!?](https://discuss.elastic.co/t/how-can-make-a-cluster-with-logstash-is-it-possible/250444)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 2\ **Last updated:** [September 30, 2020, 5:15am UTC](https://discuss.elastic.co/t/how-can-make-a-cluster-with-logstash-is-it-possible/250444 "2020-09-30T05:15:22Z")
Hi I have 3 nodes for logstash. each logstash has it own pipeline (for example, one logstash has http module and some metricfiles. another one has two jdbc driver and some filebeats and....) So, I can\`t use file and h… --- ## [SSL Certificates Directory](https://discuss.elastic.co/t/ssl-certificates-directory/99047)
**Author:** [@lask001](https://discuss.elastic.co/u/lask001)\ **Replies:** 1\ **Last updated:** [September 7, 2017, 4:55am UTC](https://discuss.elastic.co/t/ssl-certificates-directory/99047 "2017-09-07T04:55:55Z")
Is there a reason why xpack requires all the certificates to be located within the /etc/elasticsearch directory, or am I doing something wrong? I have a few certs stored in /etc/pki/tls/private/… for other applications a… --- ## [Elasticsearch-certutil: generate both pem certificates and PKCS#12 keystores](https://discuss.elastic.co/t/elasticsearch-certutil-generate-both-pem-certificates-and-pkcs-12-keystores/255486)
**Author:** [@flavienbwk](https://discuss.elastic.co/u/flavienbwk)\ **Replies:** 4\ **Last updated:** [November 17, 2020, 1:00pm UTC](https://discuss.elastic.co/t/elasticsearch-certutil-generate-both-pem-certificates-and-pkcs-12-keystores/255486 "2020-11-17T13:00:38Z")
Hi, I am currently using elasticsearch-certutil to generate my PEM certificates (.crt and .key) for Elasticsearch and Kibana through a certutil .yml file. However I want to setup SSL for my Enterprise Search instance b… --- ## [Parsing JSON format with filebeat](https://discuss.elastic.co/t/parsing-json-format-with-filebeat/370732)
**Author:** [@mromeo](https://discuss.elastic.co/u/mromeo)\ **Replies:** 5\ **Last updated:** [November 20, 2024, 12:27am UTC](https://discuss.elastic.co/t/parsing-json-format-with-filebeat/370732 "2024-11-20T00:27:19Z")
Hi I am having a little trouble understanding how the parsing of JSON format works, when using filebeat as a collector. I have gone through a few forum posts and docs and can't seem to get things looking right. Current… --- ## [Will filebeat lock files?](https://discuss.elastic.co/t/will-filebeat-lock-files/52190)
**Author:** [@zpp](https://discuss.elastic.co/u/zpp)\ **Replies:** 6\ **Last updated:** [June 10, 2016, 7:59am UTC](https://discuss.elastic.co/t/will-filebeat-lock-files/52190 "2016-06-10T07:59:51Z")
Hi, I met a situation where it seemed that filebeat locked the application logs. The application generates log file like appx.log, after some time or certain size is hit, it will rename the existing appx.log to appx\_ba… --- ## [Elasticsearch time to as in via python (timezone)](https://discuss.elastic.co/t/elasticsearch-time-to-as-in-via-python-timezone/254340)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 5\ **Last updated:** [November 5, 2020, 8:38pm UTC](https://discuss.elastic.co/t/elasticsearch-time-to-as-in-via-python-timezone/254340 "2020-11-05T20:38:34Z")
I have a wrote small python script where I am reading certain information from Elasticsearch and pushing that back in to ELK. what I want it to keep what ever date-time I get from ELK. I want to push same as is back in … --- ## [How to fix @timestamp](https://discuss.elastic.co/t/how-to-fix-timestamp/90026)
**Author:** [@Thanadol\_Thadasade](https://discuss.elastic.co/u/Thanadol_Thadasade)\ **Replies:** 5\ **Last updated:** [June 21, 2017, 1:09pm UTC](https://discuss.elastic.co/t/how-to-fix-timestamp/90026 "2017-06-21T13:09:07Z")
Hi ! i'm newbie this. how to fix it ? i tries many advices this blog, but didn't success. i used winlogbeat and do it by https://www.elastic.co/guide/en/beats/winlogbeat/current/index.html step1-6 please. sorry, if… --- ## [./kibana:... cannot execute: Permission denied](https://discuss.elastic.co/t/kibana-cannot-execute-permission-denied/135459)
**Author:** [@SimpleCC](https://discuss.elastic.co/u/SimpleCC)\ **Replies:** 7\ **Last updated:** [June 12, 2018, 9:01am UTC](https://discuss.elastic.co/t/kibana-cannot-execute-permission-denied/135459 "2018-06-12T09:01:18Z")
My OS :Linux with CentOS7.4 And I deployed elasticsearch on cloud server. I install kibana with .tar.gz wget https://artifacts.elastic.co/downloads/kibana/kibana-6.2.4-linux-x86\_64.tar.gz tar -xzf kibana-6.2.4-linux… --- ## [Regex is not working](https://discuss.elastic.co/t/regex-is-not-working/23202)
**Author:** [@Ayman](https://discuss.elastic.co/u/Ayman)\ **Replies:** 3\ **Last updated:** [April 18, 2015, 4:08pm UTC](https://discuss.elastic.co/t/regex-is-not-working/23202 "2015-04-18T16:08:35Z")
Hello, I'm trying to get exact match of field but unfortunately regexp doesn't work with me. I have kibana 4 and elasticsearch 1.4.4 . i'm using logstash template in my index and i have all string fields ana… --- ## [Timeout executing grok "Value too large to output (347 bytes)!"](https://discuss.elastic.co/t/timeout-executing-grok-value-too-large-to-output-347-bytes/97123)
**Author:** [@nfplatzke](https://discuss.elastic.co/u/nfplatzke)\ **Replies:** 2\ **Last updated:** [August 17, 2017, 3:15pm UTC](https://discuss.elastic.co/t/timeout-executing-grok-value-too-large-to-output-347-bytes/97123 "2017-08-17T15:15:09Z")
OK I have been googling this and I can’t figure it out at all. Every other person who is having this issue is dealing with large documents. The log messages I am indexing are pretty small and I’m still getting this error… --- ## [Regex not working for strings containing special characters](https://discuss.elastic.co/t/regex-not-working-for-strings-containing-special-characters/15956)
**Author:** [@Jamil\_Bou\_Kheir\_2](https://discuss.elastic.co/u/Jamil_Bou_Kheir_2)\ **Replies:** 2\ **Last updated:** [February 24, 2014, 7:06pm UTC](https://discuss.elastic.co/t/regex-not-working-for-strings-containing-special-characters/15956 "2014-02-24T19:06:27Z")
I've spent a number of hours trying to get a simple Regexp query to work. I'm using Elasticsearch 1.0 with the defaults. Here's the data I've posted to ES: $ curl -XPOST 'elasticsearch:9200/regex\_test/useragent' … --- ## [Reroute unassigned shards](https://discuss.elastic.co/t/reroute-unassigned-shards/120686)
**Author:** [@ocebeci](https://discuss.elastic.co/u/ocebeci)\ **Replies:** 4\ **Last updated:** [February 28, 2018, 8:22am UTC](https://discuss.elastic.co/t/reroute-unassigned-shards/120686 "2018-02-28T08:22:08Z")
How can I reroute all unassigned shards to single-node with ES version 5.6? --- ## [Facing issues while installing kibana version 7.8.0 on windows 10](https://discuss.elastic.co/t/facing-issues-while-installing-kibana-version-7-8-0-on-windows-10/240492)
**Author:** [@nilbak](https://discuss.elastic.co/u/nilbak)\ **Replies:** 6\ **Last updated:** [July 26, 2020, 10:23pm UTC](https://discuss.elastic.co/t/facing-issues-while-installing-kibana-version-7-8-0-on-windows-10/240492 "2020-07-26T22:23:08Z")
Hi All, I am new to ELK stack. I was trying to download and install ELK with latest version . I was able to install Elasticsearch successfully but was not able to install Kibana because of below errors. log \[04:42… --- ## [Understanding the aggregation filter:](https://discuss.elastic.co/t/understanding-the-aggregation-filter/100928)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 0\ **Last updated:** [September 18, 2017, 8:08pm UTC](https://discuss.elastic.co/t/understanding-the-aggregation-filter/100928 "2017-09-18T20:08:45Z")
well I am able to aggregate that my last log has all the terms, but I can't know who will be my last log, therefore I did "push\_map\_as\_event\_on\_timeout =\> true" (I kept all config that is not repetitive since maybe some … --- ## ["Fielddata is disabled on text fields by default" error on keyword field](https://discuss.elastic.co/t/fielddata-is-disabled-on-text-fields-by-default-error-on-keyword-field/163175)
**Author:** [@trondhindenes](https://discuss.elastic.co/u/trondhindenes)\ **Replies:** 3\ **Last updated:** [January 7, 2019, 10:04am UTC](https://discuss.elastic.co/t/fielddata-is-disabled-on-text-fields-by-default-error-on-keyword-field/163175 "2019-01-07T10:04:21Z")
I'm getting this error in my log: Caused by: java.lang.IllegalArgumentException: Fielddata is disabled on text fields by default. Set fielddata=true on \[component\] in order to load fielddata in memory by uninverting the… --- ## [How to remove double quotes from Field](https://discuss.elastic.co/t/how-to-remove-double-quotes-from-field/115046)
**Author:** [@Saket\_Kumar](https://discuss.elastic.co/u/Saket_Kumar)\ **Replies:** 1\ **Last updated:** [January 11, 2018, 10:31am UTC](https://discuss.elastic.co/t/how-to-remove-double-quotes-from-field/115046 "2018-01-11T10:31:06Z")
I am parsing a CSV which has a column field name and values within double quotes. I have to rename the field such as: mutate {rename =\> { '"ttfb\_ms"' =\> "Time\_to\_First\_Byte\_(ms)" }} And also have to remove double quot… --- ## [Creating Snapshot Repository on Windows cluster](https://discuss.elastic.co/t/creating-snapshot-repository-on-windows-cluster/23316)
**Author:** [@Sam\_Judson](https://discuss.elastic.co/u/Sam_Judson)\ **Replies:** 6\ **Last updated:** [May 13, 2016, 3:29pm UTC](https://discuss.elastic.co/t/creating-snapshot-repository-on-windows-cluster/23316 "2016-05-13T15:29:01Z")
Hi I'm having some trouble creating a snapshot repository on a cluster running on Windows. PUT \_snapshot/main\_backup { "type": "fs", "settings": { "location": "\\\\\\\\gbr-t-ess-003\\\\Snapshots\\\\backup2\\\\"… --- ## [Encrypting HTTP client communications](https://discuss.elastic.co/t/encrypting-http-client-communications/268230)
**Author:** [@ehsan\_kabiri\_33](https://discuss.elastic.co/u/ehsan_kabiri_33)\ **Replies:** 1\ **Last updated:** [March 26, 2021, 2:37am UTC](https://discuss.elastic.co/t/encrypting-http-client-communications/268230 "2021-03-26T02:37:44Z")
According to elasticsearch reference \[7.12\] , as I understood, we can encrypt HTTP client communications with any of the following .p12 certificates: First option : use the same certificate which I have used for encryp… --- ## [Elastic agent unhealthy because of elastic defend integration](https://discuss.elastic.co/t/elastic-agent-unhealthy-because-of-elastic-defend-integration/340874)
**Author:** [@laale1](https://discuss.elastic.co/u/laale1)\ **Replies:** 5\ **Last updated:** [August 26, 2023, 9:12am UTC](https://discuss.elastic.co/t/elastic-agent-unhealthy-because-of-elastic-defend-integration/340874 "2023-08-26T09:12:38Z")
Hello community I'm having an issue in my elastic agent, I installed the agent in windows and Linux machines is working well and I can get the event logs and syslog, however when I try to add elastic defend integration t… --- ## [How to reindex a document](https://discuss.elastic.co/t/how-to-reindex-a-document/43812)
**Author:** [@genesis](https://discuss.elastic.co/u/genesis)\ **Replies:** 8\ **Last updated:** [March 10, 2016, 2:51pm UTC](https://discuss.elastic.co/t/how-to-reindex-a-document/43812 "2016-03-10T14:51:48Z")
I am trying to reindex url-2016.03.01 (index) into a new index (adg-2016.03.01) and I am getting the following error. The reason is the old index was created before we made some changes to the template. Please help c… --- ## [Java 8 supports till which elasticsearch version?](https://discuss.elastic.co/t/java-8-supports-till-which-elasticsearch-version/209614)
**Author:** [@Renuka](https://discuss.elastic.co/u/Renuka)\ **Replies:** 2\ **Last updated:** [November 27, 2019, 12:28pm UTC](https://discuss.elastic.co/t/java-8-supports-till-which-elasticsearch-version/209614 "2019-11-27T12:28:16Z")
Java 8 supports till which elasticsearch version? We are currently using Java 8 and no plans to upgrade our application to java 11 in near future. We are planning to upgrade our elasticsearch from 5.6.0 to 7.4 (first t… --- ## [Enable .keyword fields for specific fields only](https://discuss.elastic.co/t/enable-keyword-fields-for-specific-fields-only/286866)
**Author:** [@Rakesh\_B](https://discuss.elastic.co/u/Rakesh_B)\ **Replies:** 3\ **Last updated:** [October 15, 2021, 8:26pm UTC](https://discuss.elastic.co/t/enable-keyword-fields-for-specific-fields-only/286866 "2021-10-15T20:26:16Z")
Hi, Elasticsearch Version: 7.15.0 Logstash Version: 7.15.0 We have a ton of fields for our index and we get new fields frequently so, we cannot disable dynamic mapping. Dynamic mapping creates .keyword fields for a ma… --- ## [Questions about real time indexing & search](https://discuss.elastic.co/t/questions-about-real-time-indexing-search/4879)
**Author:** [@Andy\_2](https://discuss.elastic.co/u/Andy_2)\ **Replies:** 3\ **Last updated:** [July 18, 2011, 9:56am UTC](https://discuss.elastic.co/t/questions-about-real-time-indexing-search/4879 "2011-07-18T09:56:52Z")
Hi, I'm new to elasticsearch, been using Solr but looking for something that support real time indexing 1) When I index a document in ES, do I need to commit that document for it to be visible in search? Or does … --- ## [How to query a computed value from a document](https://discuss.elastic.co/t/how-to-query-a-computed-value-from-a-document/97116)
**Author:** [@ajay\_bh111](https://discuss.elastic.co/u/ajay_bh111)\ **Replies:** 1\ **Last updated:** [August 18, 2017, 9:38am UTC](https://discuss.elastic.co/t/how-to-query-a-computed-value-from-a-document/97116 "2017-08-18T09:38:00Z")
Hi, If I want to query a computed value from “a specific document” how this should be written for Kibana or Lucene or in painless script ? For example, If I want to get delete\_time\_per\_ document = (indexing\_delete\_ti… --- ## [Dockerised elasticsearch cluster in different hosts](https://discuss.elastic.co/t/dockerised-elasticsearch-cluster-in-different-hosts/169163)
**Author:** [@root23](https://discuss.elastic.co/u/root23)\ **Replies:** 6\ **Last updated:** [February 21, 2019, 7:02am UTC](https://discuss.elastic.co/t/dockerised-elasticsearch-cluster-in-different-hosts/169163 "2019-02-21T07:02:16Z")
Hi, I am trying to build a centralized monitoring and logging system using ELK stack. I am trying to create a dockerised elaticsearch cluster hosted on 2 hosts. There are 2 elasticsearch nodes in host1 and 1 node in hos… --- ## [Dashboard and Discover tabs show blank page](https://discuss.elastic.co/t/dashboard-and-discover-tabs-show-blank-page/59042)
**Author:** [@douweb](https://discuss.elastic.co/u/douweb)\ **Replies:** 6\ **Last updated:** [September 15, 2016, 8:02pm UTC](https://discuss.elastic.co/t/dashboard-and-discover-tabs-show-blank-page/59042 "2016-09-15T20:02:15Z")
I have a problem which is similar to https://discuss.elastic.co/t/discover-tab-wont-load-anymore/38549 and https://github.com/elastic/kibana/issues/5648 - apparently I'm not the only one experiencing issues. I start wi… --- ## [Function score weight rounding score If value is high](https://discuss.elastic.co/t/function-score-weight-rounding-score-if-value-is-high/329043)
**Author:** [@eerkisi](https://discuss.elastic.co/u/eerkisi)\ **Replies:** 0\ **Last updated:** [March 31, 2023, 11:10am UTC](https://discuss.elastic.co/t/function-score-weight-rounding-score-if-value-is-high/329043 "2023-03-31T11:10:22Z")
Hello, We have function scores and functions which manipulate scores by some filters etc. We set one of the function score weight as high numbers because of the our business. Also we need fraction of the value to be abl… --- ## [Kibana unable to load index in Elasticsearch](https://discuss.elastic.co/t/kibana-unable-to-load-index-in-elasticsearch/226179)
**Author:** [@anirudhak](https://discuss.elastic.co/u/anirudhak)\ **Replies:** 8\ **Last updated:** [April 6, 2020, 6:21am UTC](https://discuss.elastic.co/t/kibana-unable-to-load-index-in-elasticsearch/226179 "2020-04-06T06:21:58Z")
I have just installed Kibana, Elastic and Filebeat on my Red Hat 7.7 servers using RPM. Details, Filebeat 7.6.1 Elastic 7.6.1 Kibana 7.6.1 Filebeat is installed on two nodes and Kibana and Elastic are installed on the… --- ## [Getting repository verification exception while creating HDFS snapshot repository](https://discuss.elastic.co/t/getting-repository-verification-exception-while-creating-hdfs-snapshot-repository/46670)
**Author:** [@dzen](https://discuss.elastic.co/u/dzen)\ **Replies:** 6\ **Last updated:** [April 20, 2016, 8:39am UTC](https://discuss.elastic.co/t/getting-repository-verification-exception-while-creating-hdfs-snapshot-repository/46670 "2016-04-20T08:39:08Z")
I have a single-node Hadoop machine running in OpenStack along with my 9-node (3 Masters, 3 Data, 3 Client) elasticsearch 2.2.0 cluster. My intention is to store periodic snapshots in the hdfs store of that single-node h… --- ## [Elasticsearch-head plugin not available through http://localhost:9200/\_plugin/head/](https://discuss.elastic.co/t/elasticsearch-head-plugin-not-available-through-http-localhost-9200--plugin-head/10352)
**Author:** [@Peter\_Schroder](https://discuss.elastic.co/u/Peter_Schroder)\ **Replies:** 6\ **Last updated:** [January 24, 2013, 11:57am UTC](https://discuss.elastic.co/t/elasticsearch-head-plugin-not-available-through-http-localhost-9200--plugin-head/10352 "2013-01-24T11:57:48Z")
i just upgraded to latest elasticsearch 0.20.2 and reinstalled the head plugin, but i can't open it through the browser: http://localhost:9200/\_plugin/head/ the installation is fine, its installed into /usr/loc… --- ## [Query with multiple keywords](https://discuss.elastic.co/t/query-with-multiple-keywords/289929)
**Author:** [@Leitner](https://discuss.elastic.co/u/Leitner)\ **Replies:** 2\ **Last updated:** [November 23, 2021, 10:23am UTC](https://discuss.elastic.co/t/query-with-multiple-keywords/289929 "2021-11-23T10:23:32Z")
Hi everyone, I'm new on Elasticsearch. So sorry for my question :slight\_smile: I want build a query in the console. With a single keyword it works great: But with multiple keywords the Value of the hits is always 0… --- ## [Log file size of elasticsearch](https://discuss.elastic.co/t/log-file-size-of-elasticsearch/51757)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 5\ **Last updated:** [June 3, 2016, 11:21am UTC](https://discuss.elastic.co/t/log-file-size-of-elasticsearch/51757 "2016-06-03T11:21:01Z")
I have been running 4 servers including ELK itself with topbeat and packetbeat installed to send data to elasticsearch. When I undergoes to look for the logs file in elasticsearch, it is just an average 10kb for a single… --- ## [Pid file not found](https://discuss.elastic.co/t/pid-file-not-found/57659)
**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\ **Replies:** 7\ **Last updated:** [August 16, 2016, 4:10am UTC](https://discuss.elastic.co/t/pid-file-not-found/57659 "2016-08-16T04:10:40Z")
I installed topbeat in my centos box, and i am running topbeat by /etc/init.d/topbeat start. But i couldn't find /var/run/topbeat.pid file. I need that file to monit topbeat. I went through init script and it seems its w… --- ## [Add Unique Id to logs in logstash](https://discuss.elastic.co/t/add-unique-id-to-logs-in-logstash/56001)
**Author:** [@prabhakar349](https://discuss.elastic.co/u/prabhakar349)\ **Replies:** 4\ **Last updated:** [July 21, 2016, 7:13pm UTC](https://discuss.elastic.co/t/add-unique-id-to-logs-in-logstash/56001 "2016-07-21T19:13:56Z")
we are trying to add a new feild to the json document which we get from kafka, where this field needs to have an unique id we tried with following options with in filter mutate grok json nothing worked for us below i… --- ## [Logstash close file handles?](https://discuss.elastic.co/t/logstash-close-file-handles/1706)
**Author:** [@Siddharth\_Trikha](https://discuss.elastic.co/u/Siddharth_Trikha)\ **Replies:** 0\ **Last updated:** [June 2, 2015, 10:53am UTC](https://discuss.elastic.co/t/logstash-close-file-handles/1706 "2015-06-02T10:53:43Z")
BACKGROUND: We have rsyslog creating log files directories like: /var/log/rsyslog/SERVER-NAME/LOG-DATE/LOG-FILE-NAME So multiple servers are spilling out their logs of different dates to a central location. Now to r… --- ## [Logstash user permissions](https://discuss.elastic.co/t/logstash-user-permissions/304049)
**Author:** [@ksobon](https://discuss.elastic.co/u/ksobon)\ **Replies:** 5\ **Last updated:** [May 5, 2022, 5:25pm UTC](https://discuss.elastic.co/t/logstash-user-permissions/304049 "2022-05-05T17:25:06Z")
I have configured a "logstash" user with the following set of permissions: "{ "indices": \[{ "names": \["\*beat\*"\], "privileges": \["create", "create\_index", "view\_index\_metadata"\] } \] }" That however results in … --- ## [Could not locate that index-pattern-field (id: geoip.location)](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-field-id-geoip-location/125501)
**Author:** [@hispeed](https://discuss.elastic.co/u/hispeed)\ **Replies:** 5\ **Last updated:** [March 28, 2018, 4:21pm UTC](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-field-id-geoip-location/125501 "2018-03-28T16:21:05Z")
Hi, Since I updated to Version: 6.1.1 (Logstash, Elasticsearch, Kibana) I recieve the following error. I searched today and read a few things about that. I have the following lines in: 11-pfsense.conf geoip { add\_ta… --- ## [Exclude internal ip's](https://discuss.elastic.co/t/exclude-internal-ips/42066)
**Author:** [@Bradly](https://discuss.elastic.co/u/Bradly)\ **Replies:** 1\ **Last updated:** [February 17, 2016, 8:15pm UTC](https://discuss.elastic.co/t/exclude-internal-ips/42066 "2016-02-17T20:15:21Z")
I am still new and working to figure out how to use elasticsearch correctly to do what I want. I have been able to write some query's to get some information about all of the traffic on our network but now I would like … --- ## [Health check on my ES cluster shows 99.7%](https://discuss.elastic.co/t/health-check-on-my-es-cluster-shows-99-7/170082)
**Author:** [@drivera](https://discuss.elastic.co/u/drivera)\ **Replies:** 7\ **Last updated:** [March 1, 2019, 10:43pm UTC](https://discuss.elastic.co/t/health-check-on-my-es-cluster-shows-99-7/170082 "2019-03-01T22:43:52Z")
After unsuccessfully trying to backup my cluster, I bounced all my nodes and now I see the error below. Any ideas? Events are still coming but I'm concerned. 1551228466 16:47:46 istunixes yellow 9 5 2087 1047 0 0 7 0 - … --- ## [Scripting password setup after install](https://discuss.elastic.co/t/scripting-password-setup-after-install/201535)
**Author:** [@fmstrat](https://discuss.elastic.co/u/fmstrat)\ **Replies:** 3\ **Last updated:** [October 3, 2019, 10:56am UTC](https://discuss.elastic.co/t/scripting-password-setup-after-install/201535 "2019-10-03T10:56:33Z")
Hi all, I'm trying to figure out how to script setup of passwords. I'm using the below: printf "password" | elasticsearch-keystore add "boostrap.password" curl -uelastic:"password" -XPUT -H 'Content-Type: application/j… --- ## [index作成時にRejecting mapping update to \[\] as the final mapping would have more than 1 type:](https://discuss.elastic.co/t/index-rejecting-mapping-update-to-as-the-final-mapping-would-have-more-than-1-type/200830)
**Author:** [@Masanori\_Mishima](https://discuss.elastic.co/u/Masanori_Mishima)\ **Replies:** 5\ **Last updated:** [September 25, 2019, 5:56am UTC](https://discuss.elastic.co/t/index-rejecting-mapping-update-to-as-the-final-mapping-would-have-more-than-1-type/200830 "2019-09-25T05:56:21Z")
type":"illegal\_argument\_exception","reason":"Rejecting mapping update to \[index\_name\] as the final mapping would have more than 1 type: \[\_doc, data\]"}\] のエラーでインデックスの作成までは行くのですが、データの登録ができません。 type: \[\_doc, data\]のようにtypeを定… --- ## [Zen-disco-node-failed ( Node disconnects often from cluster )](https://discuss.elastic.co/t/zen-disco-node-failed-node-disconnects-often-from-cluster/73500)
**Author:** [@Nithya\_Shree](https://discuss.elastic.co/u/Nithya_Shree)\ **Replies:** 0\ **Last updated:** [February 1, 2017, 10:35am UTC](https://discuss.elastic.co/t/zen-disco-node-failed-node-disconnects-often-from-cluster/73500 "2017-02-01T10:35:36Z")
Hi, often we are encountering node disconnect issue in our Elasticsearch cluster. What could be the possible change that I can make in the config/environment ? \[2017-02-01T06:25:21,149\]\[INFO \]\[o.e.c.r.a.AllocationServi… --- ## [Error No index created - reason"=\>"Validation Failed: 1: this action would add \[2\] shards](https://discuss.elastic.co/t/error-no-index-created-reason-validation-failed-1-this-action-would-add-2-shards/313144)
**Author:** [@ehmontesinos](https://discuss.elastic.co/u/ehmontesinos)\ **Replies:** 7\ **Last updated:** [August 30, 2022, 8:39am UTC](https://discuss.elastic.co/t/error-no-index-created-reason-validation-failed-1-this-action-would-add-2-shards/313144 "2022-08-30T08:39:49Z")
Good morning, I have an ELK environment installed in version 8.1. Within this environment, I have configured several pipelines that collect daily csv files to process them and convert them into indexes in Elasticsearch … --- ## [Getting winlogbeat to speak to SecurityOnion](https://discuss.elastic.co/t/getting-winlogbeat-to-speak-to-securityonion/168456)
**Author:** [@johnyoungts](https://discuss.elastic.co/u/johnyoungts)\ **Replies:** 2\ **Last updated:** [February 26, 2019, 5:30pm UTC](https://discuss.elastic.co/t/getting-winlogbeat-to-speak-to-securityonion/168456 "2019-02-26T17:30:41Z")
I've been given the task to get our companies log monitoring up and going, so I'm really effing new to this. I have Security Onion installed - our local firewall is speaking to it fine - which is good. I have then want… --- ## [Two data nodes: One node left, get stale shards and cluster status goes red](https://discuss.elastic.co/t/two-data-nodes-one-node-left-get-stale-shards-and-cluster-status-goes-red/212442)
**Author:** [@itchy91](https://discuss.elastic.co/u/itchy91)\ **Replies:** 2\ **Last updated:** [December 20, 2019, 5:45am UTC](https://discuss.elastic.co/t/two-data-nodes-one-node-left-get-stale-shards-and-cluster-status-goes-red/212442 "2019-12-20T05:45:59Z")
Two data nodes: One node left, get stale shards and cluster status goes red Hello. Searched for this scenario, only get the hint that this could happen in situations, but i dont know how to solve it. We're using ES 6.… --- ## [Send logs using logback socket appender to logstach tcp server](https://discuss.elastic.co/t/send-logs-using-logback-socket-appender-to-logstach-tcp-server/89273)
**Author:** [@msq747](https://discuss.elastic.co/u/msq747)\ **Replies:** 2\ **Last updated:** [June 14, 2017, 10:46pm UTC](https://discuss.elastic.co/t/send-logs-using-logback-socket-appender-to-logstach-tcp-server/89273 "2017-06-14T22:46:34Z")
Hi all, I am trying to send java application logs using a socket appender to a tcp logstash server. The configuration of the server is as follows: input { tcp { port =\> 21000 mode =\> "server" } } output {… --- ## [Java Path on logstash but not ES or Kibana (SOLVED)](https://discuss.elastic.co/t/java-path-on-logstash-but-not-es-or-kibana-solved/25169)
**Author:** [@michaellizhou](https://discuss.elastic.co/u/michaellizhou)\ **Replies:** 2\ **Last updated:** [February 20, 2017, 3:11am UTC](https://discuss.elastic.co/t/java-path-on-logstash-but-not-es-or-kibana-solved/25169 "2017-02-20T03:11:36Z")
Randomly my logstash is not running although my ES and Kibana are. When I run ./bin/logstash just to check I get Could not find any executable java binary. Please install java in your PATH or set JAVA\_HOME. Though I c… --- ## [Filebeat / logstash truncating json log lines](https://discuss.elastic.co/t/filebeat-logstash-truncating-json-log-lines/80463)
**Author:** [@robinallen](https://discuss.elastic.co/u/robinallen)\ **Replies:** 7\ **Last updated:** [April 19, 2017, 1:41pm UTC](https://discuss.elastic.co/t/filebeat-logstash-truncating-json-log-lines/80463 "2017-04-19T13:41:53Z")
I'm using Logstash 5.2.2, Filebeat 5.2.2, Logstash-logback-encoder 4.7 I'm using net.logstash.logback.encoder.LogstashEncoder to write our application logs in JSON format. The logs themselves look fine. Then I'm using… --- ## [Logstash.config.sourceloader\] No configuration found in the configured sources](https://discuss.elastic.co/t/logstash-config-sourceloader-no-configuration-found-in-the-configured-sources/140440)
**Author:** [@Sunil\_Khullar](https://discuss.elastic.co/u/Sunil_Khullar)\ **Replies:** 1\ **Last updated:** [July 19, 2018, 6:33am UTC](https://discuss.elastic.co/t/logstash-config-sourceloader-no-configuration-found-in-the-configured-sources/140440 "2018-07-19T06:33:44Z")
I am unable to get multiple pipelines to work on Windows Individually I am able to run the config files, but not from inside the pipelines.yml LOG - \[2018-07-18T10:31:14,430\]\[DEBUG\]\[logstash.config.source.multilocal\] … --- ## [SIEM Event correlation with Elasticsearch and Logstash](https://discuss.elastic.co/t/siem-event-correlation-with-elasticsearch-and-logstash/168156)
**Author:** [@rao-uno](https://discuss.elastic.co/u/rao-uno)\ **Replies:** 3\ **Last updated:** [February 14, 2019, 10:40am UTC](https://discuss.elastic.co/t/siem-event-correlation-with-elasticsearch-and-logstash/168156 "2019-02-14T10:40:53Z")
Hello, I am using Wazuh with ELK as my SIEM tool. I am able to generate alerts on Kibana from my logs on the basis of ossec ruleset. I need to know find correlation between these events and need to know if this would be… [Previous page](https://discuss.elastic.co/top.md?page=458&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=460&per_page=50&period=all)