# Top

**URL:** https://discuss.elastic.co/top.md?page=461&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 462

---

## [Install of apt package is failing](https://discuss.elastic.co/t/install-of-apt-package-is-failing/150385)

<div class="topic-metadata">

**Author:** [@meatwad](https://discuss.elastic.co/u/meatwad)\
**Replies:** 2\
**Last updated:** [September 28, 2018, 9:46pm UTC](https://discuss.elastic.co/t/install-of-apt-package-is-failing/150385 "2018-09-28T21:46:51Z")

</div>

Hi. I'm just getting started with elastic and am having an issue installing the package from the apt repo. Here's the output: Fri 28 Sep 19:24:00 root@elastic \[~\] sudo apt-get update && sudo apt-get install elastics…

---

## [Logstash io.netty.util.internal.OutOfDirectMemoryError: failed to allocate 16777216 byte(s) of direct memory (used: 12766298444, max: 12771524608)](https://discuss.elastic.co/t/logstash-io-netty-util-internal-outofdirectmemoryerror-failed-to-allocate-16777216-byte-s-of-direct-memory-used-12766298444-max-12771524608/260067)

<div class="topic-metadata">

**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\
**Replies:** 6\
**Last updated:** [January 11, 2021, 3:09pm UTC](https://discuss.elastic.co/t/logstash-io-netty-util-internal-outofdirectmemoryerror-failed-to-allocate-16777216-byte-s-of-direct-memory-used-12766298444-max-12771524608/260067 "2021-01-11T15:09:26Z")

</div>

Hi All, We are using Logstash 6.3.1 and recently we have been facing issues with getting the log flowing from Filebeat agents. Attaching the configuration and log samples. We have increased the heap memory from 4GB to …

---

## [Unable to connect to ELK server through a Client server with Filebeat configured](https://discuss.elastic.co/t/unable-to-connect-to-elk-server-through-a-client-server-with-filebeat-configured/55955)

<div class="topic-metadata">

**Author:** [@Kalpak\_Kawadkar](https://discuss.elastic.co/u/Kalpak_Kawadkar)\
**Replies:** 3\
**Last updated:** [July 21, 2016, 11:09pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-elk-server-through-a-client-server-with-filebeat-configured/55955 "2016-07-21T23:09:39Z")

</div>

I followed the site \[ https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elk-stack-on-ubuntu-16-04 \] but I am unable to test filebeat installtion --\> output shows 0 tota…

---

## [elasticsearch.exceptions.RequestError \[illegal\_argument\_exception\]](https://discuss.elastic.co/t/elasticsearch-exceptions-requesterror-illegal-argument-exception/186927)

<div class="topic-metadata">

**Author:** [@HenryJackson](https://discuss.elastic.co/u/HenryJackson)\
**Replies:** 4\
**Last updated:** [June 24, 2019, 1:42pm UTC](https://discuss.elastic.co/t/elasticsearch-exceptions-requesterror-illegal-argument-exception/186927 "2019-06-24T13:42:39Z")

</div>

I am getting this exception after a while when i try to append JSON document under same ID in the Elasticsearch index How my data is getting appended. Index\_name id : 1234 JSON{} JSON{} . . JSON{} My code snippe…

---

## [Query Isuue in elasticsearch 5.0](https://discuss.elastic.co/t/query-isuue-in-elasticsearch-5-0/66854)

<div class="topic-metadata">

**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\
**Replies:** 1\
**Last updated:** [November 22, 2016, 12:59pm UTC](https://discuss.elastic.co/t/query-isuue-in-elasticsearch-5-0/66854 "2016-11-22T12:59:06Z")

</div>

I have written a query and I'm not able to get the result { "\_index": "temp", "\_type": "try", "\_id": "1", "\_score": 1, "\_source": { "rank\_value": null, "euro\_…

---

## [Elasticsearch error not enough master nodes discovered during pinging (Although I am able to ping its IP)](https://discuss.elastic.co/t/elasticsearch-error-not-enough-master-nodes-discovered-during-pinging-although-i-am-able-to-ping-its-ip/148065)

<div class="topic-metadata">

**Author:** [@shashankdesai23](https://discuss.elastic.co/u/shashankdesai23)\
**Replies:** 4\
**Last updated:** [September 11, 2018, 1:06pm UTC](https://discuss.elastic.co/t/elasticsearch-error-not-enough-master-nodes-discovered-during-pinging-although-i-am-able-to-ping-its-ip/148065 "2018-09-11T13:06:55Z")

</div>

I am trying to set up Elastic Search cluster with two nodes but I keep getting this error. \[o.e.d.z.ZenDiscovery \] \[master-node\] not enough master nodes discovered ?during pinging (found \[\[Candidate{node={master-nod…

---

## [Filebeat and Windows Eventlog](https://discuss.elastic.co/t/filebeat-and-windows-eventlog/35643)

<div class="topic-metadata">

**Author:** [@straluna](https://discuss.elastic.co/u/straluna)\
**Replies:** 6\
**Last updated:** [December 9, 2015, 2:16am UTC](https://discuss.elastic.co/t/filebeat-and-windows-eventlog/35643 "2015-12-09T02:16:38Z")

</div>

Yes, i have to admit: we also have windows machine!\[:smile:\] Is the new filebeat 1.0.0 release ready for the Windows Eventlog? If not, what would be the best way to capture the Eventlog? Logstash-forwarder? I can not fi…

---

## [Kibana Index is out of date](https://discuss.elastic.co/t/kibana-index-is-out-of-date/119694)

<div class="topic-metadata">

**Author:** [@Jim\_Campbell](https://discuss.elastic.co/u/Jim_Campbell)\
**Replies:** 2\
**Last updated:** [February 13, 2018, 8:54pm UTC](https://discuss.elastic.co/t/kibana-index-is-out-of-date/119694 "2018-02-13T20:54:24Z")

</div>

I have done a clean install of Suricata and the ELK stack version 6.2.1 on a Ubuntu 2016-04 machine. Everything went well until I pointed my browser at localhost:5601. After logging in the browser took me to the Kibana S…

---

## [Failed to parse field \[msg.RequestPort\] of type \[long\]](https://discuss.elastic.co/t/failed-to-parse-field-msg-requestport-of-type-long/312080)

<div class="topic-metadata">

**Author:** [@ayarosh](https://discuss.elastic.co/u/ayarosh)\
**Replies:** 4\
**Last updated:** [August 15, 2022, 12:14pm UTC](https://discuss.elastic.co/t/failed-to-parse-field-msg-requestport-of-type-long/312080 "2022-08-15T12:14:41Z")

</div>

Filebeat cannot parse and drop the logs when receives the different type of input. "RequestPort":"-" (it usually contains the long type number) Error: {\\"type\\":\\"mapper\_parsing\_exception\\",\\"reason\\":\\"failed to pars…

---

## [Error when using template generated by ECS Tooling (1.7 and master) for datastream](https://discuss.elastic.co/t/error-when-using-template-generated-by-ecs-tooling-1-7-and-master-for-datastream/263016)

<div class="topic-metadata">

**Author:** [@mxu](https://discuss.elastic.co/u/mxu)\
**Replies:** 7\
**Last updated:** [February 11, 2021, 7:38pm UTC](https://discuss.elastic.co/t/error-when-using-template-generated-by-ecs-tooling-1-7-and-master-for-datastream/263016 "2021-02-11T19:38:21Z")

</div>

ECS Tooling (1.7.0 and master) generates template as following with my template-settings input: { "index\_patterns":\[ "my-data-stream\*" \], "data\_stream":{ }, "mappings":{ "properties":{ …

---

## [How to merge two search values two a single one](https://discuss.elastic.co/t/how-to-merge-two-search-values-two-a-single-one/234590)

<div class="topic-metadata">

**Author:** [@Matish\_Bhuyan](https://discuss.elastic.co/u/Matish_Bhuyan)\
**Replies:** 7\
**Last updated:** [May 28, 2020, 8:36pm UTC](https://discuss.elastic.co/t/how-to-merge-two-search-values-two-a-single-one/234590 "2020-05-28T20:36:12Z")

</div>

Hi All, I have one improvement task. For example i have one keyword in kibana called fruits so i need to search the different fruits names say apple and orange and got two count values say A and B for each respective …

---

## [Weird scoring when using multi word synonyms](https://discuss.elastic.co/t/weird-scoring-when-using-multi-word-synonyms/153636)

<div class="topic-metadata">

**Author:** [@byronvoorbach](https://discuss.elastic.co/u/byronvoorbach)\
**Replies:** 6\
**Last updated:** [November 15, 2018, 8:59am UTC](https://discuss.elastic.co/t/weird-scoring-when-using-multi-word-synonyms/153636 "2018-11-15T08:59:33Z")

</div>

Hi all! I just ran into an issue with the scoring of multiword synonyms. When a synonym resolves to a multiword synonym, the underlying scoring model seems to change. Resulting in unfair scoring for documents that cont…

---

## [Question about JDBC input plugin's last\_run\_metadata\_path setting](https://discuss.elastic.co/t/question-about-jdbc-input-plugins-last-run-metadata-path-setting/112036)

<div class="topic-metadata">

**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\
**Replies:** 5\
**Last updated:** [December 31, 2017, 1:11pm UTC](https://discuss.elastic.co/t/question-about-jdbc-input-plugins-last-run-metadata-path-setting/112036 "2017-12-31T13:11:06Z")

</div>

I am using the last\_run\_metadata\_path do define where the file it uses for persistence is kept. The documentation says that the default value for this is "/home/ph/.logstash\_jdbc\_last\_run", but there is no such file or d…

---

## [File input JSON with multiline codec plugin](https://discuss.elastic.co/t/file-input-json-with-multiline-codec-plugin/204669)

<div class="topic-metadata">

**Author:** [@Krypton8](https://discuss.elastic.co/u/Krypton8)\
**Replies:** 6\
**Last updated:** [November 5, 2019, 9:38am UTC](https://discuss.elastic.co/t/file-input-json-with-multiline-codec-plugin/204669 "2019-11-05T09:38:07Z")

</div>

Hello, I'm simply trying to parse my JSON fileds into events. The JSON file look like this: \[ { "field1": "value1", "field2": "value2", "field3": "value3", "field4": "value4", "field5": "value5", "field6"…

---

## [Nanoseconds with Logstash and Elasticsearch](https://discuss.elastic.co/t/nanoseconds-with-logstash-and-elasticsearch/282492)

<div class="topic-metadata">

**Author:** [@Nico\_Pampaloni](https://discuss.elastic.co/u/Nico_Pampaloni)\
**Replies:** 7\
**Last updated:** [August 25, 2021, 4:21pm UTC](https://discuss.elastic.co/t/nanoseconds-with-logstash-and-elasticsearch/282492 "2021-08-25T16:21:43Z")

</div>

Good Morning! I am a little stuck figuring out how to handle custom time formats with nanosecond precision. The data that I am currently trying to ingest has two different time formats: 1629480840.652062565 and 2021:08:2…

---

## [Set trace information to new transaction](https://discuss.elastic.co/t/set-trace-information-to-new-transaction/180185)

<div class="topic-metadata">

**Author:** [@xitaocrazy](https://discuss.elastic.co/u/xitaocrazy)\
**Replies:** 7\
**Last updated:** [May 14, 2019, 5:10pm UTC](https://discuss.elastic.co/t/set-trace-information-to-new-transaction/180185 "2019-05-14T17:10:41Z")

</div>

I am using several APM agents to instrument some applications, in several languages (C#, Python, Java and JS). Everything works fine in operations that runs synchronous, but I have async situations. In async scenarios, …

---

## [Can't enroll an agent to create Fleet Server (no error shown in log)](https://discuss.elastic.co/t/cant-enroll-an-agent-to-create-fleet-server-no-error-shown-in-log/295375)

<div class="topic-metadata">

**Author:** [@David\_Canos](https://discuss.elastic.co/u/David_Canos)\
**Replies:** 4\
**Last updated:** [January 27, 2022, 8:03am UTC](https://discuss.elastic.co/t/cant-enroll-an-agent-to-create-fleet-server-no-error-shown-in-log/295375 "2022-01-27T08:03:50Z")

</div>

Im following all the steps in the process to create a fleet server in my own cluster. Logstash, elastic and kibana are working fine in https mode. But im not able to install a fleet. Im trying to enroll the agent in t…

---

## [Running Filebeat in docker with persistent registry file?](https://discuss.elastic.co/t/running-filebeat-in-docker-with-persistent-registry-file/191595)

<div class="topic-metadata">

**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\
**Replies:** 4\
**Last updated:** [July 22, 2019, 9:24am UTC](https://discuss.elastic.co/t/running-filebeat-in-docker-with-persistent-registry-file/191595 "2019-07-22T09:24:08Z")

</div>

Hi, My question is this, If a container running filebeat is lost and we launch a new container, the registry file of the old container will be lost too and the new container wouldn't know from where the harvester should…

---

## [Filebeat: Unexpected file opening error: file info is not identical with opened file. Aborting harvesting and retrying file later again](https://discuss.elastic.co/t/filebeat-unexpected-file-opening-error-file-info-is-not-identical-with-opened-file-aborting-harvesting-and-retrying-file-later-again/258315)

<div class="topic-metadata">

**Author:** [@elk\_follower](https://discuss.elastic.co/u/elk_follower)\
**Replies:** 8\
**Last updated:** [December 16, 2020, 8:43pm UTC](https://discuss.elastic.co/t/filebeat-unexpected-file-opening-error-file-info-is-not-identical-with-opened-file-aborting-harvesting-and-retrying-file-later-again/258315 "2020-12-16T20:43:51Z")

</div>

Hello, We have ELK 7.8.1 stack running in K8 cluster. Filebeat on one of the node is not able to keep up with the logs generated by one MS. This was working fine until couple of days. Missing logs are from a container …

---

## [ES 5.4 =\> 6.0 Upgrade. Watcher Issues](https://discuss.elastic.co/t/es-5-4-6-0-upgrade-watcher-issues/108481)

<div class="topic-metadata">

**Author:** [@aballman](https://discuss.elastic.co/u/aballman)\
**Replies:** 3\
**Last updated:** [November 27, 2017, 9:21pm UTC](https://discuss.elastic.co/t/es-5-4-6-0-upgrade-watcher-issues/108481 "2017-11-27T21:21:39Z")

</div>

I have upgrade ES from 5.4 to 6.0, including Kibana and all the plugins we have installed. They are discovery-ec2, repository-s3, and x-pack. I followed the upgrade instructions as listed here: https://www.elastic.co/gui…

---

## [Indexing rate performance in cluster](https://discuss.elastic.co/t/indexing-rate-performance-in-cluster/60311)

<div class="topic-metadata">

**Author:** [@Chang\_Oh\_Heo](https://discuss.elastic.co/u/Chang_Oh_Heo)\
**Replies:** 5\
**Last updated:** [September 19, 2016, 8:14am UTC](https://discuss.elastic.co/t/indexing-rate-performance-in-cluster/60311 "2016-09-19T08:14:18Z")

</div>

Hi, I am load testing currently. I got 10,000 documents/sec from one shard in single node. I tried in cluster (1 master node, 5 data node) But indexing rate is decrease around 8,000 doc/sec. I don\`t understand this s…

---

## [ELK v5 | Elasticsearch install problem](https://discuss.elastic.co/t/elk-v5-elasticsearch-install-problem/65141)

<div class="topic-metadata">

**Author:** [@syswombat](https://discuss.elastic.co/u/syswombat)\
**Replies:** 6\
**Last updated:** [November 8, 2016, 9:28am UTC](https://discuss.elastic.co/t/elk-v5-elasticsearch-install-problem/65141 "2016-11-08T09:28:43Z")

</div>

Hello i followed this tutorial Installation | Elasticsearch Guide \[8.11\] | Elastic doing a ./elasticsearch as root is getting a error so i have done (add) a new user with passwort, logget out and in as new user and s…

---

## [How to retrieve all records from index](https://discuss.elastic.co/t/how-to-retrieve-all-records-from-index/156668)

<div class="topic-metadata">

**Author:** [@Mahmoodm](https://discuss.elastic.co/u/Mahmoodm)\
**Replies:** 4\
**Last updated:** [November 15, 2018, 12:09pm UTC](https://discuss.elastic.co/t/how-to-retrieve-all-records-from-index/156668 "2018-11-15T12:09:10Z")

</div>

Hi I am trying to retrieve all records from elastic search index import elasticsearch from elasticsearch import Elasticsearch ret\_size = 0 cluster = "dvfarmil" es = Elasticsearch(\[{'host': 'YYYYYYY', 'port': 80}\]) …

---

## [Could Not Initialize Class PreBuiltTransportClient](https://discuss.elastic.co/t/could-not-initialize-class-prebuilttransportclient/70097)

<div class="topic-metadata">

**Author:** [@selpathor](https://discuss.elastic.co/u/selpathor)\
**Replies:** 4\
**Last updated:** [December 28, 2016, 12:30pm UTC](https://discuss.elastic.co/t/could-not-initialize-class-prebuilttransportclient/70097 "2016-12-28T12:30:34Z")

</div>

So I am working on a Java Spring project that IS NOT USING MAVEN and I am having some trouble getting my TransportClient started. I am using elasticsearch 5.1.1. My Code: import org.elasticsearch.client.transport.Trans…

---

## [Makefile:294: recipe for target 'update' failed](https://discuss.elastic.co/t/makefile-294-recipe-for-target-update-failed/124728)

<div class="topic-metadata">

**Author:** [@thro](https://discuss.elastic.co/u/thro)\
**Replies:** 7\
**Last updated:** [March 20, 2018, 3:50pm UTC](https://discuss.elastic.co/t/makefile-294-recipe-for-target-update-failed/124728 "2018-03-20T15:50:38Z")

</div>

Hi, new to beats here. I am trying to build the beats project straight out of github and I need some help. user@ubuntu17:~/code/beats$ make The problem seems to be related to \_meta/beat.yml not being in the place expe…

---

## [Sum Aggregation returning very small, unrelated values](https://discuss.elastic.co/t/sum-aggregation-returning-very-small-unrelated-values/26890)

<div class="topic-metadata">

**Author:** [@Jaimin\_Mehta](https://discuss.elastic.co/u/Jaimin_Mehta)\
**Replies:** 4\
**Last updated:** [August 6, 2015, 2:03pm UTC](https://discuss.elastic.co/t/sum-aggregation-returning-very-small-unrelated-values/26890 "2015-08-06T14:03:06Z")

</div>

Hey, I have been trying out the sum aggregation since quite a while. I have figured out a query that works perfectly fine for me otherwise, but sometimes, due to reasons unknown, returns ridiculously small values. I …

---

## [Authorization errors trying to connect Kibana 4.1.2 to ES 1.5.2](https://discuss.elastic.co/t/authorization-errors-trying-to-connect-kibana-4-1-2-to-es-1-5-2/34702)

<div class="topic-metadata">

**Author:** [@Shane\_Witbeck](https://discuss.elastic.co/u/Shane_Witbeck)\
**Replies:** 5\
**Last updated:** [January 12, 2016, 6:06am UTC](https://discuss.elastic.co/t/authorization-errors-trying-to-connect-kibana-4-1-2-to-es-1-5-2/34702 "2016-01-12T06:06:21Z")

</div>

I'm struggling to get Kibana (kibana-4.1.2-darwin-x64) to connect to ES 1.5.2 on the same machine. I'm using default configuration for both. I need to stick with ES 1.5.2 but I'm flexible with the version of Kibana. When…

---

## [org.apache.http.ConnectionClosedException: Connection is closed](https://discuss.elastic.co/t/org-apache-http-connectionclosedexception-connection-is-closed/348402)

<div class="topic-metadata">

**Author:** [@tcpeiris](https://discuss.elastic.co/u/tcpeiris)\
**Replies:** 4\
**Last updated:** [December 13, 2023, 9:06am UTC](https://discuss.elastic.co/t/org-apache-http-connectionclosedexception-connection-is-closed/348402 "2023-12-13T09:06:07Z")

</div>

org.apache.http.ConnectionClosedException: Connection is closed at org.elasticsearch.client.RestClient.extractAndWrapCause(RestClient.java:920) at org.elasticsearch.client.RestClient.performRequest(RestClient.java:300) …

---

## [Logstash 7.5 with SSL giving SSLV3\_ALERT\_BAD\_CERTIFICATE](https://discuss.elastic.co/t/logstash-7-5-with-ssl-giving-sslv3-alert-bad-certificate/212512)

<div class="topic-metadata">

**Author:** [@alesanchez](https://discuss.elastic.co/u/alesanchez)\
**Replies:** 3\
**Last updated:** [December 24, 2019, 8:32am UTC](https://discuss.elastic.co/t/logstash-7-5-with-ssl-giving-sslv3-alert-bad-certificate/212512 "2019-12-24T08:32:50Z")

</div>

Hi everyone, I know that there are a couple of topics regarding this problem. I reviewed them but there are for older logstash versions or the solution doesn't work for me. I have the following logstash configuration: …

---

## [What's your Watcher use case?](https://discuss.elastic.co/t/whats-your-watcher-use-case/25706)

<div class="topic-metadata">

**Author:** [@PatrickKik](https://discuss.elastic.co/u/PatrickKik)\
**Replies:** 6\
**Last updated:** [July 22, 2015, 1:14pm UTC](https://discuss.elastic.co/t/whats-your-watcher-use-case/25706 "2015-07-22T13:14:32Z")

</div>

I'm currently exploring Watcher and I very much like the idea of having triggers and actions. But I fail to see any really good use cases. One often used example is sending an email when there are errors in de indexed …

---

## [Sort by dynamic fields and use search\_after](https://discuss.elastic.co/t/sort-by-dynamic-fields-and-use-search-after/86275)

<div class="topic-metadata">

**Author:** [@hello](https://discuss.elastic.co/u/hello)\
**Replies:** 3\
**Last updated:** [May 31, 2017, 7:52pm UTC](https://discuss.elastic.co/t/sort-by-dynamic-fields-and-use-search-after/86275 "2017-05-31T19:52:16Z")

</div>

Version: 5.2.2 I'm currently sorting by dynamic fields and a timestamp and want to utilize the search\_after property. Unfortunately, for certain fields that are missing the dynamic field, they return "Infinity" or "-I…

---

## [Kibana unexpected session error in Firefox only](https://discuss.elastic.co/t/kibana-unexpected-session-error-in-firefox-only/377999)

<div class="topic-metadata">

**Author:** [@natharran](https://discuss.elastic.co/u/natharran)\
**Replies:** 2\
**Last updated:** [May 9, 2025, 6:21pm UTC](https://discuss.elastic.co/t/kibana-unexpected-session-error-in-firefox-only/377999 "2025-05-09T18:21:52Z")

</div>

I have Elasticsearch and Kibana (8.17.4) under ECK (3.0.0) in Kubernetes. I'm not overwriting any ECK-managed settings for either ES or Kibana. In Firefox 138.0.1 I'm experiencing a weird issue: Kibana logs out on refres…

---

## [Generating events from JSON array inside root-level object](https://discuss.elastic.co/t/generating-events-from-json-array-inside-root-level-object/187386)

<div class="topic-metadata">

**Author:** [@whatgeorgemade](https://discuss.elastic.co/u/whatgeorgemade)\
**Replies:** 5\
**Last updated:** [June 25, 2019, 10:10pm UTC](https://discuss.elastic.co/t/generating-events-from-json-array-inside-root-level-object/187386 "2019-06-25T22:10:40Z")

</div>

I'm trying to import data from a JSON file. The root level item in the file is an object containing two keys. One of those keys, datapoints, contains an array of objects that I would like to use as events. I cannot fin…

---

## [Perfect way to sync mongodb to elasticsearch in realtime](https://discuss.elastic.co/t/perfect-way-to-sync-mongodb-to-elasticsearch-in-realtime/176317)

<div class="topic-metadata">

**Author:** [@Sathish\_Velmurugan](https://discuss.elastic.co/u/Sathish_Velmurugan)\
**Replies:** 0\
**Last updated:** [April 11, 2019, 5:11am UTC](https://discuss.elastic.co/t/perfect-way-to-sync-mongodb-to-elasticsearch-in-realtime/176317 "2019-04-11T05:11:51Z")

</div>

Hello, We have using mongodb as a primary database for our application. For full text search mongo db is not good compared to elasticsearch. So we are using eleasticsearch for full text search with the help of mongo-con…

---

## [Rules not triggering alerts](https://discuss.elastic.co/t/rules-not-triggering-alerts/282899)

<div class="topic-metadata">

**Author:** [@john12](https://discuss.elastic.co/u/john12)\
**Replies:** 5\
**Last updated:** [September 21, 2021, 7:40am UTC](https://discuss.elastic.co/t/rules-not-triggering-alerts/282899 "2021-09-21T07:40:47Z")

</div>

Hello, I am creating so simple custom rules, which supposed to trigger alerts my ELK version is 7.14 i have tested the query in the discover section and it retrieve a result, so the rule should trigger and alert is t…

---

## [Fleet server agent unable to start- Connection refused](https://discuss.elastic.co/t/fleet-server-agent-unable-to-start-connection-refused/285818)

<div class="topic-metadata">

**Author:** [@Psyhil](https://discuss.elastic.co/u/Psyhil)\
**Replies:** 3\
**Last updated:** [October 7, 2021, 3:27pm UTC](https://discuss.elastic.co/t/fleet-server-agent-unable-to-start-connection-refused/285818 "2021-10-07T15:27:09Z")

</div>

Hi there, I have ELK running and am trying to test out Fleet and endpoint agent. To perform the test, I used the quick start deployment mode using self-signed certificate. However when trying to install the agent on a…

---

## [Change log level for logstash-jdbc-input plugin](https://discuss.elastic.co/t/change-log-level-for-logstash-jdbc-input-plugin/160359)

<div class="topic-metadata">

**Author:** [@Maxim\_Kholod](https://discuss.elastic.co/u/Maxim_Kholod)\
**Replies:** 4\
**Last updated:** [December 11, 2018, 3:33pm UTC](https://discuss.elastic.co/t/change-log-level-for-logstash-jdbc-input-plugin/160359 "2018-12-11T15:33:30Z")

</div>

Hi, how to access Log4j2 configuration for logstash-jdbc-input? I want to do the same as logger.elasticsearchoutput.level = debug but for logstash-jdbc-input plugin. What is the logger name for this plugin?

---

## [Is it possible to integrate JavaScript and Kibana?](https://discuss.elastic.co/t/is-it-possible-to-integrate-javascript-and-kibana/213940)

<div class="topic-metadata">

**Author:** [@anelson-edge](https://discuss.elastic.co/u/anelson-edge)\
**Replies:** 5\
**Last updated:** [January 7, 2020, 12:04am UTC](https://discuss.elastic.co/t/is-it-possible-to-integrate-javascript-and-kibana/213940 "2020-01-07T00:04:20Z")

</div>

I am in a quandary here. I would like to have JavaScript abilities (like buttons) AND Kibana for global filters and the selected timerange. I could write my GUI using JS to talk directly to ES, but then I lose Kibana…

---

## [Add filter to timelion query](https://discuss.elastic.co/t/add-filter-to-timelion-query/120676)

<div class="topic-metadata">

**Author:** [@suryabh](https://discuss.elastic.co/u/suryabh)\
**Replies:** 2\
**Last updated:** [February 20, 2018, 3:59pm UTC](https://discuss.elastic.co/t/add-filter-to-timelion-query/120676 "2018-02-20T15:59:20Z")

</div>

I starting playing around with timelion recently. It is a neat tool. I have a issue that I am running into right now. In my data I have a field "site\_name". The value of this field can be 936001,936111,936222 etc. I want…

---

## [Embed image from local desktop in markdown widget in kibana 4](https://discuss.elastic.co/t/embed-image-from-local-desktop-in-markdown-widget-in-kibana-4/33979)

<div class="topic-metadata">

**Author:** [@anjani42001](https://discuss.elastic.co/u/anjani42001)\
**Replies:** 2\
**Last updated:** [December 26, 2015, 4:08pm UTC](https://discuss.elastic.co/t/embed-image-from-local-desktop-in-markdown-widget-in-kibana-4/33979 "2015-12-26T16:08:38Z")

</div>

I would like to embed a picture from my local desktop in the markdown widget of kibana. I see the steps mentioned in the link "https://guides.github.com/features/mastering-markdown/". This does not work when I provide th…

---

## [Logstash complaining about no ES nodes being available](https://discuss.elastic.co/t/logstash-complaining-about-no-es-nodes-being-available/25939)

<div class="topic-metadata">

**Author:** [@falzm](https://discuss.elastic.co/u/falzm)\
**Replies:** 6\
**Last updated:** [August 6, 2015, 7:41am UTC](https://discuss.elastic.co/t/logstash-complaining-about-no-es-nodes-being-available/25939 "2015-08-06T07:41:35Z")

</div>

Hi there I have a weird problem with Logstash outputing to Elasticsearch: it keeps complaining in the logs about none of the configured Elasticsearch nodes being available (about once per second!), although it manages …

---

## [Setup included dashboards with custom pattern](https://discuss.elastic.co/t/setup-included-dashboards-with-custom-pattern/248088)

<div class="topic-metadata">

**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\
**Replies:** 0\
**Last updated:** [September 10, 2020, 1:02am UTC](https://discuss.elastic.co/t/setup-included-dashboards-with-custom-pattern/248088 "2020-09-10T01:02:39Z")

</div>

Hi All We have setup filebeat to create a different index based on the module used. We plan on using multiple modules, like netflow, checkpoint and many more. I have configured the ILM within the filebeat.yml using this…

---

## [Filestream input ID without ID might lead to data duplication](https://discuss.elastic.co/t/filestream-input-id-without-id-might-lead-to-data-duplication/302471)

<div class="topic-metadata">

**Author:** [@jean.bissonnette](https://discuss.elastic.co/u/jean.bissonnette)\
**Replies:** 3\
**Last updated:** [April 25, 2022, 10:53am UTC](https://discuss.elastic.co/t/filestream-input-id-without-id-might-lead-to-data-duplication/302471 "2022-04-25T10:53:49Z")

</div>

Filebeat 8.1.2 is installed on a windows server with web applications generating log files and using IIS. I have this error when I start filebeat via windows service. {"log.level":"error","@timestamp":"2022-04-14T15:21…

---

## [Elasticsearch single node "cluster" fails with "incoming term X does not match current term Y"](https://discuss.elastic.co/t/elasticsearch-single-node-cluster-fails-with-incoming-term-x-does-not-match-current-term-y/256857)

<div class="topic-metadata">

**Author:** [@tobal](https://discuss.elastic.co/u/tobal)\
**Replies:** 6\
**Last updated:** [November 30, 2020, 1:22pm UTC](https://discuss.elastic.co/t/elasticsearch-single-node-cluster-fails-with-incoming-term-x-does-not-match-current-term-y/256857 "2020-11-30T13:22:58Z")

</div>

Hi there, We have a recurring error in our test environment, where elasticsearch fails to boot up. We have logs from two occurrence, but sadly we can't reproduce the error consistently to help determine what the problem…

---

## [How to display the maximum number of shards allowed per node?](https://discuss.elastic.co/t/how-to-display-the-maximum-number-of-shards-allowed-per-node/351308)

<div class="topic-metadata">

**Author:** [@mpniel](https://discuss.elastic.co/u/mpniel)\
**Replies:** 4\
**Last updated:** [January 19, 2024, 7:54am UTC](https://discuss.elastic.co/t/how-to-display-the-maximum-number-of-shards-allowed-per-node/351308 "2024-01-19T07:54:34Z")

</div>

how to display the maximum number of shards allowed per node?

---

## [Elasticsearch with TLS does not start](https://discuss.elastic.co/t/elasticsearch-with-tls-does-not-start/217401)

<div class="topic-metadata">

**Author:** [@ptselios](https://discuss.elastic.co/u/ptselios)\
**Replies:** 3\
**Last updated:** [January 31, 2020, 4:35pm UTC](https://discuss.elastic.co/t/elasticsearch-with-tls-does-not-start/217401 "2020-01-31T16:35:21Z")

</div>

Hello, I have an ELK AIO installation that works just fine without TLS. When I configure TLS for HTTP doesn't start and we have no indication why. The certificate is signed from our internal CA which is configured on …

---

## [No Logs in Log Folder](https://discuss.elastic.co/t/no-logs-in-log-folder/99442)

<div class="topic-metadata">

**Author:** [@uber1923](https://discuss.elastic.co/u/uber1923)\
**Replies:** 3\
**Last updated:** [September 10, 2017, 1:22am UTC](https://discuss.elastic.co/t/no-logs-in-log-folder/99442 "2017-09-10T01:22:57Z")

</div>

Hi All, I am using the docker image for elasticsearch 5.5.2 and so far I have been able to set it up fine. Now I want to take a copy of the logs and do something with them. I mount a folder to the docker run command so …

---

## [\_all and include\_in\_all mapping in ElasticSearch 6.0](https://discuss.elastic.co/t/-all-and-include-in-all-mapping-in-elasticsearch-6-0/80431)

<div class="topic-metadata">

**Author:** [@ptrussart](https://discuss.elastic.co/u/ptrussart)\
**Replies:** 2\
**Last updated:** [April 3, 2017, 10:25am UTC](https://discuss.elastic.co/t/-all-and-include-in-all-mapping-in-elasticsearch-6-0/80431 "2017-04-03T10:25:47Z")

</div>

Hello, I have seen here https://github.com/elastic/elasticsearch/issues/22923 that the include\_in\_all parameter will no longer be available in ES 6.0 as the \_all field will also stop to be created. I use it a lot in my…

---

## [Wildcard search not working for text field](https://discuss.elastic.co/t/wildcard-search-not-working-for-text-field/135520)

<div class="topic-metadata">

**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\
**Replies:** 7\
**Last updated:** [June 13, 2018, 4:19am UTC](https://discuss.elastic.co/t/wildcard-search-not-working-for-text-field/135520 "2018-06-13T04:19:47Z")

</div>

Hi, I have a text field over which I am doing wildcard search. However it is not working as expected. Example: Field: log\_message Value: watchdog watchdog6: watchdog did not stop! If I use watchd\* or watchdog, it…

---

## [Elastic 2 node cluster: "Received fatal alert: certificate\_unknown", but .p12 file with same certs and keys work](https://discuss.elastic.co/t/elastic-2-node-cluster-received-fatal-alert-certificate-unknown-but-p12-file-with-same-certs-and-keys-work/182592)

<div class="topic-metadata">

**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\
**Replies:** 6\
**Last updated:** [May 31, 2019, 9:59am UTC](https://discuss.elastic.co/t/elastic-2-node-cluster-received-fatal-alert-certificate-unknown-but-p12-file-with-same-certs-and-keys-work/182592 "2019-05-31T09:59:58Z")

</div>

Hi Elastic 6.8.0 Centos 7.6 (64-bit) I have 2 node elastic cluster in my sandbox. I created .p12 file myself with company certificates. openssl pkcs12 -export -in company\_domain.cer -inkey company\_domain.key -name …

[Previous page](https://discuss.elastic.co/top.md?page=460&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=462&per_page=50&period=all)
