# Top **URL:** https://discuss.elastic.co/top.md?page=475&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 476 --- ## [How do I extend the SSL Certificate expiry period?s](https://discuss.elastic.co/t/how-do-i-extend-the-ssl-certificate-expiry-period-s/318922)
**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\ **Replies:** 4\ **Last updated:** [November 17, 2022, 7:05am UTC](https://discuss.elastic.co/t/how-do-i-extend-the-ssl-certificate-expiry-period-s/318922 "2022-11-17T07:05:43Z")
Hi everyone. I have an ES Cluster(ES version 7.4.2) that has been running for 3 years. when I run the following query. GET \_ssl/certificates I'm getting the output. "expiry" : "2022-11-20T07:27:29.000Z" My cluster … --- ## [Creating a Watcher Alert to a Webhook](https://discuss.elastic.co/t/creating-a-watcher-alert-to-a-webhook/121538)
**Author:** [@dmdm](https://discuss.elastic.co/u/dmdm)\ **Replies:** 2\ **Last updated:** [February 27, 2018, 12:52pm UTC](https://discuss.elastic.co/t/creating-a-watcher-alert-to-a-webhook/121538 "2018-02-27T12:52:13Z")
Need a little help, new to Elastisearch and Kibana. Could someone tell me what I'm doing wrong I tried changing the example send an email on cluster status to use a web hook, but just keep getting errors: { "trigger"… --- ## [Logstash input jdbc not working](https://discuss.elastic.co/t/logstash-input-jdbc-not-working/103707)
**Author:** [@Navinder](https://discuss.elastic.co/u/Navinder)\ **Replies:** 5\ **Last updated:** [October 13, 2017, 5:47am UTC](https://discuss.elastic.co/t/logstash-input-jdbc-not-working/103707 "2017-10-13T05:47:37Z")
Hi, I am using logstash jdbc input, but it is throwing this error below. The given configuration is invalid. Reason: Expected one of #, ", ', } at line 2, column 9 (byte 18) after input { jdbc { {:level=\>:fatal} Here… --- ## [Master and data node load balance](https://discuss.elastic.co/t/master-and-data-node-load-balance/78957)
**Author:** [@Greentea](https://discuss.elastic.co/u/Greentea)\ **Replies:** 1\ **Last updated:** [March 17, 2017, 4:50am UTC](https://discuss.elastic.co/t/master-and-data-node-load-balance/78957 "2017-03-17T04:50:36Z")
Hi! I am try to apply a two server in elasticsearch one as master and data node, another as data node. Here is the yml file for master (IP:10.96.195.250) cluster.name: project node.name: test0 node.master: true node.… --- ## [How to: function\_score + script\_score + nested doc field?](https://discuss.elastic.co/t/how-to-function-score-script-score-nested-doc-field/153070)
**Author:** [@jaddison](https://discuss.elastic.co/u/jaddison)\ **Replies:** 1\ **Last updated:** [October 26, 2018, 8:22pm UTC](https://discuss.elastic.co/t/how-to-function-score-script-score-nested-doc-field/153070 "2018-10-26T20:22:48Z")
Hey! It's nearing the end of 2018, and I'm wondering if there's a way to accomplish the following with ES 6.4. I've got a function\_score query with n script\_score functions targeting top-level document fields and 1 scri… --- ## [Unable to generate report / Max attempts reached](https://discuss.elastic.co/t/unable-to-generate-report-max-attempts-reached/213720)
**Author:** [@Mauricio\_Borges](https://discuss.elastic.co/u/Mauricio_Borges)\ **Replies:** 5\ **Last updated:** [January 6, 2020, 7:16pm UTC](https://discuss.elastic.co/t/unable-to-generate-report-max-attempts-reached/213720 "2020-01-06T19:16:37Z")
Hi Team! I am trying Generate a PDF for my Dashboards, however I am getting the follow errors over Kibana/reporting. Appreciate any help! Message: Unable to generate report / Max attempts reached (3) Job info: Creat… --- ## [How to send csv file to logstash using filebeat](https://discuss.elastic.co/t/how-to-send-csv-file-to-logstash-using-filebeat/132334)
**Author:** [@Adansar](https://discuss.elastic.co/u/Adansar)\ **Replies:** 4\ **Last updated:** [May 22, 2018, 7:57am UTC](https://discuss.elastic.co/t/how-to-send-csv-file-to-logstash-using-filebeat/132334 "2018-05-22T07:57:33Z")
Hello, I'm trying to send csv data to logstash using filebeat, but i don't get the data on kibana. filebeat.yml paths: - C:\\ELK\\filebeat-5.6.2\\logs\*.csv - C:\\ELK\\filebeat-5.6.2\\logs\\test.log input\_type: log docume… --- ## [Filebeat Exception - Cannot Get Text on a Start Object](https://discuss.elastic.co/t/filebeat-exception-cannot-get-text-on-a-start-object/134258)
**Author:** [@tarpanpathak](https://discuss.elastic.co/u/tarpanpathak)\ **Replies:** 3\ **Last updated:** [June 4, 2018, 6:57pm UTC](https://discuss.elastic.co/t/filebeat-exception-cannot-get-text-on-a-start-object/134258 "2018-06-04T18:57:56Z")
This is my first post so hello. I'm trying to debug a Filebeat exception error but not making much progress. We are running Filebeat through a Helm chart and without changes to the environment are seeing the following … --- ## ['Start-Service' is not recognized as an internal or external command, operable program or batch file](https://discuss.elastic.co/t/start-service-is-not-recognized-as-an-internal-or-external-command-operable-program-or-batch-file/163095)
**Author:** [@ahmer\_haque](https://discuss.elastic.co/u/ahmer_haque)\ **Replies:** 2\ **Last updated:** [January 7, 2019, 5:43am UTC](https://discuss.elastic.co/t/start-service-is-not-recognized-as-an-internal-or-external-command-operable-program-or-batch-file/163095 "2019-01-07T05:43:05Z")
\-/var/log/.log #-C:/Program Files/elasticsearch/logs/ can u please help me to sort this problem? Exiting: No paths were defined for input accessing config Exiting: No paths were defined for input accessing config --- ## [How to check in which way elasticsearch is running?](https://discuss.elastic.co/t/how-to-check-in-which-way-elasticsearch-is-running/265813)
**Author:** [@gokulnath112](https://discuss.elastic.co/u/gokulnath112)\ **Replies:** 5\ **Last updated:** [March 4, 2021, 8:09am UTC](https://discuss.elastic.co/t/how-to-check-in-which-way-elasticsearch-is-running/265813 "2021-03-04T08:09:53Z")
Hi All, Greetings...! Kindly help me with following two questions.. 1.How to check in which mode elastic is running? In my project when I do Service elasticsearch status, it shows its failed, but this node is joined t… --- ## [Fail to create S3 Repository](https://discuss.elastic.co/t/fail-to-create-s3-repository/117549)
**Author:** [@smithomega](https://discuss.elastic.co/u/smithomega)\ **Replies:** 3\ **Last updated:** [January 30, 2018, 5:25pm UTC](https://discuss.elastic.co/t/fail-to-create-s3-repository/117549 "2018-01-30T17:25:43Z")
hi, I am unable to create an S3 Repository. Ive tried against a Cloudian and AWS but I cant seem to get it to create and I get a very generic error. name component version RNtA5y5 repository-s3 6.1.2 I am tryi… --- ## [Bulk request is throwing rejected execution exception](https://discuss.elastic.co/t/bulk-request-is-throwing-rejected-execution-exception/207821)
**Author:** [@Balu\_P](https://discuss.elastic.co/u/Balu_P)\ **Replies:** 1\ **Last updated:** [November 14, 2019, 6:53am UTC](https://discuss.elastic.co/t/bulk-request-is-throwing-rejected-execution-exception/207821 "2019-11-14T06:53:31Z")
{"reason":"rejected execution of processing of \[6013644\]\[indices:data/write/bulk\[s\]\[p\]\]: request: BulkShardRequest \[\[index-test24\]\[3\]\] containing \[52\] requests, target allocation id: HwDviwdxRRexbw-sT7B8WQ, primary term:… --- ## [Alert when not receiving logs](https://discuss.elastic.co/t/alert-when-not-receiving-logs/230973)
**Author:** [@elasticwan](https://discuss.elastic.co/u/elasticwan)\ **Replies:** 3\ **Last updated:** [May 5, 2020, 1:20pm UTC](https://discuss.elastic.co/t/alert-when-not-receiving-logs/230973 "2020-05-05T13:20:46Z")
Greetings, Is there a way to be alerted when a set of hosts that were sending logs suddenly stop? The ideal scenario would be to be automatically alerted (by email, or a visual alert in Kibana) when this happens. It is… --- ## [Kibana 4.5 startup error](https://discuss.elastic.co/t/kibana-4-5-startup-error/45858)
**Author:** [@krishnamohanpkm](https://discuss.elastic.co/u/krishnamohanpkm)\ **Replies:** 2\ **Last updated:** [March 31, 2016, 4:24pm UTC](https://discuss.elastic.co/t/kibana-4-5-startup-error/45858 "2016-03-31T16:24:57Z")
I installed Kibana 4.5. When i start it it is not picking up the ip address i specified in kibana.yml file. It is trying to connect to 0.0.0.1. \[root@ip-10-136-88-228 kibana\]# bin/kibana log \[23:35:19.266\] \[info\]\[… --- ## [What happens when you go over 32GiB of JVM heap memory?](https://discuss.elastic.co/t/what-happens-when-you-go-over-32gib-of-jvm-heap-memory/354883)
**Author:** [@Santi\_Santichaivekin](https://discuss.elastic.co/u/Santi_Santichaivekin)\ **Replies:** 5\ **Last updated:** [March 8, 2024, 9:16am UTC](https://discuss.elastic.co/t/what-happens-when-you-go-over-32gib-of-jvm-heap-memory/354883 "2024-03-08T09:16:19Z")
Elasticsearch does not recommend setting memory limit over 32GiB due to a pointer optimization called "compressed oops" that only happens when the heap size is under 32GiB. (1). However, I have found little discussion o… --- ## [Mapping conflict (without any existing mappings)](https://discuss.elastic.co/t/mapping-conflict-without-any-existing-mappings/97127)
**Author:** [@Yuval](https://discuss.elastic.co/u/Yuval)\ **Replies:** 2\ **Last updated:** [August 16, 2017, 6:13am UTC](https://discuss.elastic.co/t/mapping-conflict-without-any-existing-mappings/97127 "2017-08-16T06:13:22Z")
Hi, I'm using the elasticsearch's python client, trying to index new data into a non-existing index (there are NO indices in the cluster at all) when indexing the first document, the following exception is thrown: Re… --- ## [Search latency & index latency for elasticsearch](https://discuss.elastic.co/t/search-latency-index-latency-for-elasticsearch/150901)
**Author:** [@ankur\_singla](https://discuss.elastic.co/u/ankur_singla)\ **Replies:** 1\ **Last updated:** [October 8, 2018, 9:07am UTC](https://discuss.elastic.co/t/search-latency-index-latency-for-elasticsearch/150901 "2018-10-08T09:07:29Z")
We are continuously getting latency in both search & indexing. We are having a cluster of 15 nodes with 3 master eligible & rest 12 are data nodes each having 30 GB RAM and we have a traffic of 300 concurrent users. Any … --- ## [Auto redirect in the URL?](https://discuss.elastic.co/t/auto-redirect-in-the-url/183793)
**Author:** [@meiyuan](https://discuss.elastic.co/u/meiyuan)\ **Replies:** 6\ **Last updated:** [June 3, 2019, 3:59pm UTC](https://discuss.elastic.co/t/auto-redirect-in-the-url/183793 "2019-06-03T15:59:51Z")
I noticed the kibana url was redirected to /app/kibana. Is that a default configuration because I couldn't find where to change it? Thank you. --- ## [Filebeat error Failed to publish events](https://discuss.elastic.co/t/filebeat-error-failed-to-publish-events/122710)
**Author:** [@849938e6ef0f16f9da83](https://discuss.elastic.co/u/849938e6ef0f16f9da83)\ **Replies:** 6\ **Last updated:** [March 28, 2018, 2:59pm UTC](https://discuss.elastic.co/t/filebeat-error-failed-to-publish-events/122710 "2018-03-28T14:59:10Z")
Filebeat outputs such error ERROR pipeline/output.go:92 Failed to publish events: temporary bulk send failure filebeat version 6.2.2 (amd64), libbeat 6.2.2 The error occurs on log files with long messages (tens lines)… --- ## [Kibana LDAP 401](https://discuss.elastic.co/t/kibana-ldap-401/252609)
**Author:** [@IanGabes](https://discuss.elastic.co/u/IanGabes)\ **Replies:** 2\ **Last updated:** [October 19, 2020, 11:51pm UTC](https://discuss.elastic.co/t/kibana-ldap-401/252609 "2020-10-19T23:51:44Z")
Hi all, I am receiving 401 Unauthorized errors when trying to log in via the kibana UI with LDAP credentials. I have spun up a Elasticsearch cluster on Azure's AKS using the official helm charts and images, and have co… --- ## [HTTP error 401 in : 401 Unauthorized","service.name":"metricbeat"](https://discuss.elastic.co/t/http-error-401-in-401-unauthorized-service-name-metricbeat/323923)
**Author:** [@bagafoot](https://discuss.elastic.co/u/bagafoot)\ **Replies:** 8\ **Last updated:** [February 2, 2023, 9:59am UTC](https://discuss.elastic.co/t/http-error-401-in-401-unauthorized-service-name-metricbeat/323923 "2023-02-02T09:59:55Z")
The metric beats service status showing that connection estabilished to elasticsearch but I get this errors metricbeats.yml path: ${path.config}/modules.d/\*.yml reload.enabled: false setup.template.settings: inde… --- ## [Editing Kibana URL](https://discuss.elastic.co/t/editing-kibana-url/114680)
**Author:** [@nivedita\_singh](https://discuss.elastic.co/u/nivedita_singh)\ **Replies:** 8\ **Last updated:** [January 15, 2018, 2:08pm UTC](https://discuss.elastic.co/t/editing-kibana-url/114680 "2018-01-15T14:08:08Z")
Hi , I am using ELK in my tool where whenever I will upload logs it will create new index with "apache\_elastic\_example+random" , so with the help of random function everytime I upload logs , new index is generated and … --- ## [Controlling memory and cpu footprint of filebeat](https://discuss.elastic.co/t/controlling-memory-and-cpu-footprint-of-filebeat/44963)
**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\ **Replies:** 4\ **Last updated:** [March 22, 2016, 5:59am UTC](https://discuss.elastic.co/t/controlling-memory-and-cpu-footprint-of-filebeat/44963 "2016-03-22T05:59:40Z")
Can we somehow control 1) No of threads used by filebeat. 2) CPU utilization, other than through scan\_frequency. 3) Memory utilization. --- ## [Action \[cluster:monitor/nodes/stats\[n\]\] timed out](https://discuss.elastic.co/t/action-cluster-monitor-nodes-stats-n-timed-out/312818)
**Author:** [@dukewrz](https://discuss.elastic.co/u/dukewrz)\ **Replies:** 8\ **Last updated:** [October 8, 2022, 6:56am UTC](https://discuss.elastic.co/t/action-cluster-monitor-nodes-stats-n-timed-out/312818 "2022-10-08T06:56:41Z")
I can't take the log file out. Logs says: Received response for a request that as timed out, sent \[xxx/xxx\] ago..... tells that a timeout occurred when the master tries to collecting node stats info from one particu… --- ## [Elastic Agent attempting to push data to the wrong URL](https://discuss.elastic.co/t/elastic-agent-attempting-to-push-data-to-the-wrong-url/264184)
**Author:** [@coreysabia](https://discuss.elastic.co/u/coreysabia)\ **Replies:** 8\ **Last updated:** [February 24, 2021, 9:06pm UTC](https://discuss.elastic.co/t/elastic-agent-attempting-to-push-data-to-the-wrong-url/264184 "2021-02-24T21:06:09Z")
I have spun up an Elastic Cloud on Kubernetes cluster with Let's Encrypt SSL certificates with a domain name I own. All of these SSL certs are running properly, as well as my cluster. I have tested this locally and publi… --- ## [ElasticSearch in docker : NoNodeAvailableException](https://discuss.elastic.co/t/elasticsearch-in-docker-nonodeavailableexception/91302)
**Author:** [@RickSnz](https://discuss.elastic.co/u/RickSnz)\ **Replies:** 0\ **Last updated:** [June 29, 2017, 2:41pm UTC](https://discuss.elastic.co/t/elasticsearch-in-docker-nonodeavailableexception/91302 "2017-06-29T14:41:23Z")
Hello, i'm trying to set up ElasticSearch using docker. I've followed this guide: https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html running it in development mode, so using: \`docker run -p 920… --- ## [Edit custom labels on Kibana Visualizations](https://discuss.elastic.co/t/edit-custom-labels-on-kibana-visualizations/283272)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 6\ **Last updated:** [September 6, 2021, 1:41pm UTC](https://discuss.elastic.co/t/edit-custom-labels-on-kibana-visualizations/283272 "2021-09-06T13:41:28Z")
Kibana version 7.9.3 I'm trying to create a visualization of type Metric, and I see the visualization as attached in the screenshot. How do I get the label to read only Confirm Shipment - PORTUGAL and not Confirm Shipm… --- ## [Setting up cluster with client, master & data node](https://discuss.elastic.co/t/setting-up-cluster-with-client-master-data-node/124723)
**Author:** [@subhraakanil](https://discuss.elastic.co/u/subhraakanil)\ **Replies:** 5\ **Last updated:** [March 20, 2018, 7:00pm UTC](https://discuss.elastic.co/t/setting-up-cluster-with-client-master-data-node/124723 "2018-03-20T19:00:28Z")
Hi Team, We are making POC on elasticsearch so that we can use it in future.Though, I am newbie in elasticsearch. We have three CentOs boxes and our requirement is to set up a cluster containing client, master & data n… --- ## [Parsing a log with colon separated fields](https://discuss.elastic.co/t/parsing-a-log-with-colon-separated-fields/67433)
**Author:** [@verno\_s](https://discuss.elastic.co/u/verno_s)\ **Replies:** 3\ **Last updated:** [November 29, 2016, 11:53pm UTC](https://discuss.elastic.co/t/parsing-a-log-with-colon-separated-fields/67433 "2016-11-29T23:53:04Z")
Hi, I've tried to read the Logstash docs on grok parsing but i can't find an answer to my issue. I want to parse a : separated logfile e.g. 29/11/2016 11:49:17 AM : Response: 125 Data connection already open; Tra… --- ## [Add username/password ACL to kibana access](https://discuss.elastic.co/t/add-username-password-acl-to-kibana-access/38596)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 8\ **Last updated:** [January 11, 2016, 6:43pm UTC](https://discuss.elastic.co/t/add-username-password-acl-to-kibana-access/38596 "2016-01-11T18:43:52Z")
Considering howto simplest add more that just IP ACL to protect access to a kibana instance without having to revert to graylog and having to swap current data in our custom indices for graylog server to understand, also… --- ## [My packetbeat events don't show up in Kibaba](https://discuss.elastic.co/t/my-packetbeat-events-dont-show-up-in-kibaba/38286)
**Author:** [@Augustin\_Chen](https://discuss.elastic.co/u/Augustin_Chen)\ **Replies:** 8\ **Last updated:** [January 6, 2016, 7:18am UTC](https://discuss.elastic.co/t/my-packetbeat-events-dont-show-up-in-kibaba/38286 "2016-01-06T07:18:27Z")
Hi, I once use the follwing ELK + packetbeat stack before, the packetbeat events showed up in Kibana as expected. packet:1.0.0-beta2 elasticsearch: 1.4.4 logstash: 1.4.2 redis: 3.0.1 Kibana:4.1.1 Now I upgrade the… --- ## [Short URL for public users](https://discuss.elastic.co/t/short-url-for-public-users/277266)
**Author:** [@martinsz](https://discuss.elastic.co/u/martinsz)\ **Replies:** 2\ **Last updated:** [July 19, 2021, 5:00pm UTC](https://discuss.elastic.co/t/short-url-for-public-users/277266 "2021-07-19T17:00:41Z")
Hello, we're having an issue trying to generate short permalinks for our public users. Our set-up is login via header in an nginx proxy for the public user and the public space, which are very restricted. But the links … --- ## [Beat support for Message Queue output](https://discuss.elastic.co/t/beat-support-for-message-queue-output/39567)
**Author:** [@Nir\_Dothan](https://discuss.elastic.co/u/Nir_Dothan)\ **Replies:** 4\ **Last updated:** [January 20, 2016, 8:31am UTC](https://discuss.elastic.co/t/beat-support-for-message-queue-output/39567 "2016-01-20T08:31:12Z")
Documentation shows that Redis output is deprecated, and I didn't see Kafka at all. Is there an architectural reason why I would not want to use a message queue between Beat and the Logstash indexer? Are there any plans… --- ## [Need to Change field name in old indexes](https://discuss.elastic.co/t/need-to-change-field-name-in-old-indexes/56287)
**Author:** [@gayathri](https://discuss.elastic.co/u/gayathri)\ **Replies:** 3\ **Last updated:** [July 26, 2016, 12:32pm UTC](https://discuss.elastic.co/t/need-to-change-field-name-in-old-indexes/56287 "2016-07-26T12:32:14Z")
Hi Team, I want to change the field name in old indexes. In my transaction Log one of the key name was "applaince" instead of "appiance". Last week I changed it as "appliance". Now what happended means , old index h… --- ## [Compare data that appears on 2 specific days](https://discuss.elastic.co/t/compare-data-that-appears-on-2-specific-days/111624)
**Author:** [@motts](https://discuss.elastic.co/u/motts)\ **Replies:** 3\ **Last updated:** [December 14, 2017, 2:19pm UTC](https://discuss.elastic.co/t/compare-data-that-appears-on-2-specific-days/111624 "2017-12-14T14:19:48Z")
Hi there, I am looking for the best way to go about comparing data between some IP's. What I want to happen is that I only see an IP address if that IP appears on both specific days. I can sort of do that in a bar grap… --- ## [When a master node goes down, how the client query works?](https://discuss.elastic.co/t/when-a-master-node-goes-down-how-the-client-query-works/21064)
**Author:** [@Aaron\_2](https://discuss.elastic.co/u/Aaron_2)\ **Replies:** 3\ **Last updated:** [December 5, 2014, 4:54am UTC](https://discuss.elastic.co/t/when-a-master-node-goes-down-how-the-client-query-works/21064 "2014-12-05T04:54:01Z")
This is a newbie question about how the cluster works. I try to find the answer from the group, but seems not exact the same question I have. By reading the guide from elasticsearch.com, I understand when a master n… --- ## [Special Characters not indexed and hence not searchable](https://discuss.elastic.co/t/special-characters-not-indexed-and-hence-not-searchable/8530)
**Author:** [@Praveen\_Kariyanahall](https://discuss.elastic.co/u/Praveen_Kariyanahall)\ **Replies:** 8\ **Last updated:** [March 20, 2015, 10:21am UTC](https://discuss.elastic.co/t/special-characters-not-indexed-and-hence-not-searchable/8530 "2015-03-20T10:21:45Z")
I saw many threads discuss it. I have crossed few hurdles, last one is still bothering me. I had email address, ":", "/" in my data (which need to be indexed and searched). Now I am able to search the email address … --- ## [Хранение логов](https://discuss.elastic.co/t/topic/205392)
**Author:** [@Sans\_Contrefacon](https://discuss.elastic.co/u/Sans_Contrefacon)\ **Replies:** 5\ **Last updated:** [November 13, 2019, 4:36pm UTC](https://discuss.elastic.co/t/topic/205392 "2019-11-13T16:36:58Z")
Привет. Я только начал пользоваться ELK стаком,и у меня стоит задача хранить логи 2 года, под это дело выделено много места под хранилище. Вопрос состоит в том, где можно указать, определить и посмотреть сколько хранятся… --- ## [Grok Pattern that captures lines\\events that starts with a specific text](https://discuss.elastic.co/t/grok-pattern-that-captures-lines-events-that-starts-with-a-specific-text/41138)
**Author:** [@techrawther](https://discuss.elastic.co/u/techrawther)\ **Replies:** 1\ **Last updated:** [February 7, 2016, 2:21pm UTC](https://discuss.elastic.co/t/grok-pattern-that-captures-lines-events-that-starts-with-a-specific-text/41138 "2016-02-07T14:21:38Z")
I have a pattern word that appears multiple times in my logs. I want to set a tag for those lines which starts with a nonspace + the pattern text + Any data. Following is a snippet from my log Changeset: ht… --- ## [Elasticsearch query not returning \_scroll\_id for scroll query](https://discuss.elastic.co/t/elasticsearch-query-not-returning--scroll-id-for-scroll-query/91798)
**Author:** [@PhilPeace](https://discuss.elastic.co/u/PhilPeace)\ **Replies:** 4\ **Last updated:** [July 7, 2017, 8:24am UTC](https://discuss.elastic.co/t/elasticsearch-query-not-returning--scroll-id-for-scroll-query/91798 "2017-07-07T08:24:43Z")
We have an Elasticsearch cluster which all seems to be working fine except that scrolling does not work. When I do a query with a ?scroll=1m querystring no \_scroll\_id is returned in the results. To check if it was anyt… --- ## [Adding/editing fields through watcher](https://discuss.elastic.co/t/adding-editing-fields-through-watcher/74909)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 6\ **Last updated:** [March 7, 2017, 10:37pm UTC](https://discuss.elastic.co/t/adding-editing-fields-through-watcher/74909 "2017-03-07T22:37:23Z")
I have this nut that I've been trying to crack for a while now. I'm wondering if it is possible to edit a field or add a tag of the ES documents that match a watcher query. Ideally, when a log comes into my pipeline th… --- ## [Connection marked as failed because the onConnect callback failed: resource 'filebeat-7.5.1' exists, but it is not an alias"](https://discuss.elastic.co/t/connection-marked-as-failed-because-the-onconnect-callback-failed-resource-filebeat-7-5-1-exists-but-it-is-not-an-alias/214253)
**Author:** [@Flaviu](https://discuss.elastic.co/u/Flaviu)\ **Replies:** 2\ **Last updated:** [January 16, 2020, 5:26pm UTC](https://discuss.elastic.co/t/connection-marked-as-failed-because-the-onconnect-callback-failed-resource-filebeat-7-5-1-exists-but-it-is-not-an-alias/214253 "2020-01-16T17:26:06Z")
Hello, I have just installed a new server with filebeat 7.5.1 and for some reason, after I restart the filebeat or the server I get this error: Connection marked as failed because the onConnect callback failed: resour… --- ## [Transport client: java.lang.NoSuchMethodError: io.netty.buffer.CompositeByteBuf.addComponents](https://discuss.elastic.co/t/transport-client-java-lang-nosuchmethoderror-io-netty-buffer-compositebytebuf-addcomponents/80670)
**Author:** [@larghir](https://discuss.elastic.co/u/larghir)\ **Replies:** 3\ **Last updated:** [March 31, 2017, 7:50am UTC](https://discuss.elastic.co/t/transport-client-java-lang-nosuchmethoderror-io-netty-buffer-compositebytebuf-addcomponents/80670 "2017-03-31T07:50:39Z")
Hi, I am running a Spark application using elasticsearch-spark-13\_2.11:5.2.2 and I wanted to include also org.elasticsearch.client.transport:5.2.2 but there seems to be a dependency issue. This only arises when I use sp… --- ## [JVM Memory in 5.2.2](https://discuss.elastic.co/t/jvm-memory-in-5-2-2/77663)
**Author:** [@mgvarley](https://discuss.elastic.co/u/mgvarley)\ **Replies:** 4\ **Last updated:** [March 9, 2017, 9:27am UTC](https://discuss.elastic.co/t/jvm-memory-in-5-2-2/77663 "2017-03-09T09:27:04Z")
I am in the process of migrating to 5.2.2, my existing installation is 2.4.2. I am running on AWS and am working with a clean i3.large instance running the default Ubuntu (16.04.2 LTS). I have installed Elasticsearch 5… --- ## [Using original query score in a rescore function score query](https://discuss.elastic.co/t/using-original-query-score-in-a-rescore-function-score-query/219087)
**Author:** [@markhuds](https://discuss.elastic.co/u/markhuds)\ **Replies:** 3\ **Last updated:** [February 14, 2020, 10:26pm UTC](https://discuss.elastic.co/t/using-original-query-score-in-a-rescore-function-score-query/219087 "2020-02-14T22:26:52Z")
I would like to accomplish the following with a query: 1.) Perform a complex query that calculates a score for each matched document 2.) Rescore top N documents using a cosineSimilarity function for the dense\_vector fi… --- ## [How to use processors in filebeat HAproxy's module?](https://discuss.elastic.co/t/how-to-use-processors-in-filebeat-haproxys-module/216256)
**Author:** [@aventrax](https://discuss.elastic.co/u/aventrax)\ **Replies:** 7\ **Last updated:** [January 26, 2020, 9:15am UTC](https://discuss.elastic.co/t/how-to-use-processors-in-filebeat-haproxys-module/216256 "2020-01-26T09:15:53Z")
Hello, I'm new with filebeat and I'm in trouble adding a processor to the haproxy module. To begin, just adding a tag would be enough, I tried with this config without much luck (Filebeat 7.1.1 on Debian stretch): /etc… --- ## [ElasticSearch service shows "active running" but it's not listening on port 9200, and no logs are being written](https://discuss.elastic.co/t/elasticsearch-service-shows-active-running-but-its-not-listening-on-port-9200-and-no-logs-are-being-written/149288)
**Author:** [@nola111](https://discuss.elastic.co/u/nola111)\ **Replies:** 1\ **Last updated:** [September 20, 2018, 9:54pm UTC](https://discuss.elastic.co/t/elasticsearch-service-shows-active-running-but-its-not-listening-on-port-9200-and-no-logs-are-being-written/149288 "2018-09-20T21:54:20Z")
Ubuntu 16.04 with Elasticsearch 6.2.1 on a VM in Azure - a couple days ago I could not get the ElasticSearch service to start at all. I resolved the issue with help from a kind soul by increasing the heap size in the j… --- ## [JSON Input scripts](https://discuss.elastic.co/t/json-input-scripts/44377)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 1\ **Last updated:** [March 15, 2016, 12:22am UTC](https://discuss.elastic.co/t/json-input-scripts/44377 "2016-03-15T00:22:23Z")
First: According to the docs the default settings for scripting on an elasticsearch node are: script.inline: sandbox script.indexed: sandbox script.file: true That means that I don't have to reconfigure my ES node in… --- ## [Create new cert and key from existing ca.crt : elasticsearch-certutil](https://discuss.elastic.co/t/create-new-cert-and-key-from-existing-ca-crt-elasticsearch-certutil/232529)
**Author:** [@dexterac](https://discuss.elastic.co/u/dexterac)\ **Replies:** 2\ **Last updated:** [May 27, 2020, 7:58pm UTC](https://discuss.elastic.co/t/create-new-cert-and-key-from-existing-ca-crt-elasticsearch-certutil/232529 "2020-05-27T19:58:18Z")
Initially when I created the ELK cluster I missed to include the Logstash and filebeat servers to generate the certificates: https://www.elastic.co/blog/configuring-ssl-tls-and-https-to-secure-elasticsearch-kibana-beats-… --- ## [Why is replica shard in UNASSIGNED state if it exists on disk?](https://discuss.elastic.co/t/why-is-replica-shard-in-unassigned-state-if-it-exists-on-disk/118001)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 3\ **Last updated:** [February 2, 2018, 5:08am UTC](https://discuss.elastic.co/t/why-is-replica-shard-in-unassigned-state-if-it-exists-on-disk/118001 "2018-02-02T05:08:08Z")
I would like to ask question regarding the shard allocation for rolling restart,. I am trying to figure out why shard allocation happens after following steps for rolling restart. I have done below test. Environment 1… [Previous page](https://discuss.elastic.co/top.md?page=474&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=476&per_page=50&period=all)