# Top **URL:** https://discuss.elastic.co/top.md?page=476&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 477 --- ## [Warning message seen at the logs "InvalidFrameProtocolException: Invalid version of beats protocol: 71"](https://discuss.elastic.co/t/warning-message-seen-at-the-logs-invalidframeprotocolexception-invalid-version-of-beats-protocol-71/205789)
**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\ **Replies:** 1\ **Last updated:** [November 14, 2019, 1:49am UTC](https://discuss.elastic.co/t/warning-message-seen-at-the-logs-invalidframeprotocolexception-invalid-version-of-beats-protocol-71/205789 "2019-11-14T01:49:00Z")
Hi All, Good morning at the logstash logs I can see some warning message, since it is warning nothing wrong , but I am posting the message here for giving the feedback 8.3.13:21374\] Handling exception: org.logstash.b… --- ## [Using logstash-input-jms](https://discuss.elastic.co/t/using-logstash-input-jms/32103)
**Author:** [@cta100](https://discuss.elastic.co/u/cta100)\ **Replies:** 2\ **Last updated:** [October 28, 2015, 1:59pm UTC](https://discuss.elastic.co/t/using-logstash-input-jms/32103 "2015-10-28T13:59:18Z")
This is my first elk stack project and I need to process JMS input. Has anyone used the logstash-jms-input plugin and if so could I get some guidence on how to configure the config file? I have it built and installe… --- ## [elasticsearch.exceptions.RequestError: RequestError(400, 'search\_phase\_execution\_exception', '\[match\] analyzer \[name\_phonetic\] not found')](https://discuss.elastic.co/t/elasticsearch-exceptions-requesterror-requesterror-400-search-phase-execution-exception-match-analyzer-name-phonetic-not-found/289572)
**Author:** [@pk5859](https://discuss.elastic.co/u/pk5859)\ **Replies:** 3\ **Last updated:** [November 18, 2021, 2:03pm UTC](https://discuss.elastic.co/t/elasticsearch-exceptions-requesterror-requesterror-400-search-phase-execution-exception-match-analyzer-name-phonetic-not-found/289572 "2021-11-18T14:03:40Z")
Mapping example- spouseNameQuery = { "match": { "Spouse\_Name": { # "query": input\_dict\['Spouse\_Name'\], "query": val, "analyzer": "name\_phonetic", … --- ## [Filebeat fields are not working](https://discuss.elastic.co/t/filebeat-fields-are-not-working/122155)
**Author:** [@red888](https://discuss.elastic.co/u/red888)\ **Replies:** 3\ **Last updated:** [March 1, 2018, 9:54pm UTC](https://discuss.elastic.co/t/filebeat-fields-are-not-working/122155 "2018-03-01T21:54:21Z")
Here is my filebeat config: filebeat.prospectors: - type: log paths: - C:/inetpub/app01/logs/IIS/\*/\*.log fields: app\_group: iis app\_id: app01 - type: log paths: - C:/inetpub/app02/logs/IIS/\*/\*.log… --- ## [Yaml: found character that cannot start any token when value starts with "@"](https://discuss.elastic.co/t/yaml-found-character-that-cannot-start-any-token-when-value-starts-with/269778)
**Author:** [@joecullin.skout](https://discuss.elastic.co/u/joecullin.skout)\ **Replies:** 1\ **Last updated:** [April 13, 2021, 11:56pm UTC](https://discuss.elastic.co/t/yaml-found-character-that-cannot-start-any-token-when-value-starts-with/269778 "2021-04-13T23:56:12Z")
Using o365 filebeat module. Getting this error: cfgfile/list.go:99 Error creating runner from config: Error getting config for fileset o365/audit: Error reading input config: yaml: line 12: found character that ca… --- ## [Logstash command line](https://discuss.elastic.co/t/logstash-command-line/124373)
**Author:** [@franco.federico](https://discuss.elastic.co/u/franco.federico)\ **Replies:** 8\ **Last updated:** [March 20, 2018, 2:53pm UTC](https://discuss.elastic.co/t/logstash-command-line/124373 "2018-03-20T14:53:47Z")
I need to lunch the command logstash -f test.conf with python script from another terminal. So I'd like to lunch the command logstash -f test.conf and then I'd like to have the possibility to lunch other command. Instea… --- ## [How to set cluster in ES 6.0 using rest client](https://discuss.elastic.co/t/how-to-set-cluster-in-es-6-0-using-rest-client/113440)
**Author:** [@sunder\_thangaraj](https://discuss.elastic.co/u/sunder_thangaraj)\ **Replies:** 7\ **Last updated:** [January 8, 2018, 7:08am UTC](https://discuss.elastic.co/t/how-to-set-cluster-in-es-6-0-using-rest-client/113440 "2018-01-08T07:08:55Z")
Hi , I have been using Transport client to set and using cluster for the past. I want to set cluster and minimum nodes in ES by using latest Rest client like how i used to create cluster with Transport client . Is the… --- ## [Why do grandchildren need to specify the grandparents with the routing option?](https://discuss.elastic.co/t/why-do-grandchildren-need-to-specify-the-grandparents-with-the-routing-option/27191)
**Author:** [@yehosef](https://discuss.elastic.co/u/yehosef)\ **Replies:** 7\ **Last updated:** [August 12, 2015, 4:49pm UTC](https://discuss.elastic.co/t/why-do-grandchildren-need-to-specify-the-grandparents-with-the-routing-option/27191 "2015-08-12T16:49:28Z")
I was reading through https://www.elastic.co/guide/en/elasticsearch/guide/current/grandparents.html and I don't understand why i should need to use it. Using the example given of country \> branch \> employee, if I alread… --- ## [Elasticsearch index issues](https://discuss.elastic.co/t/elasticsearch-index-issues/73871)
**Author:** [@aFowlerAtWork](https://discuss.elastic.co/u/aFowlerAtWork)\ **Replies:** 5\ **Last updated:** [February 7, 2017, 6:30am UTC](https://discuss.elastic.co/t/elasticsearch-index-issues/73871 "2017-02-07T06:30:33Z")
i have an Ubuntu 16.04 VM running ELK stack. installed an older versions of elastic, kibana, lostash and wrote an index to pull data from a MySQL database. it worked. updated kibana and elastic to 5.1.2 and logstash … --- ## [Elasticsearch performance issue, not able to index 1000 documents per second](https://discuss.elastic.co/t/elasticsearch-performance-issue-not-able-to-index-1000-documents-per-second/70625)
**Author:** [@rolling01](https://discuss.elastic.co/u/rolling01)\ **Replies:** 4\ **Last updated:** [January 5, 2017, 8:27pm UTC](https://discuss.elastic.co/t/elasticsearch-performance-issue-not-able-to-index-1000-documents-per-second/70625 "2017-01-05T20:27:07Z")
Hello, Im kinda new to the elastic suite, I’ve been doing some research on my own trying to solve the issue but didn’t have any luck, so im kindly asking anyone here to help me out in this matter. Scenario: Simple:… --- ## [Seeing number\_format\_exception on a non-numeric data field](https://discuss.elastic.co/t/seeing-number-format-exception-on-a-non-numeric-data-field/93647)
**Author:** [@enyuhsu](https://discuss.elastic.co/u/enyuhsu)\ **Replies:** 3\ **Last updated:** [July 21, 2017, 5:55am UTC](https://discuss.elastic.co/t/seeing-number-format-exception-on-a-non-numeric-data-field/93647 "2017-07-21T05:55:58Z")
Our production logstash has been working for months until 7/13, starting almost exactly at 6pm UTC (the timestamp is significant). The error message we saw was: Failed action. {:status=\>400, :action=\>\["index", {:\_id=\>n… --- ## [Read Latency for elastic search](https://discuss.elastic.co/t/read-latency-for-elastic-search/98728)
**Author:** [@Neeraj\_Gupta](https://discuss.elastic.co/u/Neeraj_Gupta)\ **Replies:** 4\ **Last updated:** [September 1, 2017, 5:46am UTC](https://discuss.elastic.co/t/read-latency-for-elastic-search/98728 "2017-09-01T05:46:37Z")
We have a use case where we are inserting data in Elastic search cluster at 19-20K QPS. We are not getting any errors while inserting data using bulk processor. However there are times where we observe read latency of a… --- ## [How to parse Syslog messages](https://discuss.elastic.co/t/how-to-parse-syslog-messages/65428)
**Author:** [@blueheart](https://discuss.elastic.co/u/blueheart)\ **Replies:** 2\ **Last updated:** [November 9, 2016, 9:24am UTC](https://discuss.elastic.co/t/how-to-parse-syslog-messages/65428 "2016-11-09T09:24:39Z")
Need support in parsing Syslog messages I want to parse the below syslog message. \<13\> 172.0.0.2 Nov 9 09:53:53 172.0.0.2 1 2016-11-09T09:57:14.018719Z \[interface\] \[172.0.0.2\] timestamp=2016-11-09 09:57:14 machine=… --- ## [Beats prospector- No paths defined](https://discuss.elastic.co/t/beats-prospector-no-paths-defined/69471)
**Author:** [@iyerabhi07](https://discuss.elastic.co/u/iyerabhi07)\ **Replies:** 2\ **Last updated:** [December 19, 2016, 5:09pm UTC](https://discuss.elastic.co/t/beats-prospector-no-paths-defined/69471 "2016-12-19T17:09:38Z")
Hi, I installed filbeat on ubuntu 16.04 to send logs to my logstash server. I am looking to send auth.log to it. prospector text: filebeat.prospectors: - input\_type: log # Paths that should be crawled and fetc… --- ## [Understanding recovery: primary vs replica performance difference](https://discuss.elastic.co/t/understanding-recovery-primary-vs-replica-performance-difference/146702)
**Author:** [@cdekker](https://discuss.elastic.co/u/cdekker)\ **Replies:** 3\ **Last updated:** [August 31, 2018, 8:27am UTC](https://discuss.elastic.co/t/understanding-recovery-primary-vs-replica-performance-difference/146702 "2018-08-31T08:27:07Z")
I have a fairly simple cluster running 6.2.4 with 3 master nodes, 3 data nodes, 70 indices \* 20 shards \* 3 replicas. The cluster is near empty at the moment with about 3GB of data total. In short, every shard is replicat… --- ## [Hot/Warm/Cold index assignment](https://discuss.elastic.co/t/hot-warm-cold-index-assignment/203235)
**Author:** [@Callahan](https://discuss.elastic.co/u/Callahan)\ **Replies:** 6\ **Last updated:** [October 25, 2019, 11:12am UTC](https://discuss.elastic.co/t/hot-warm-cold-index-assignment/203235 "2019-10-25T11:12:16Z")
Hi, I've set up a 3 node cluster for a testing stack. Each node is set up on Docker with the required: node.attr.data=hot / node.attr.data=warm / node.attr.data=cold respectivly. I have created a policy in Kibana as fo… --- ## [Parse logfiles (haproxy/nginx/apache) and send to APM](https://discuss.elastic.co/t/parse-logfiles-haproxy-nginx-apache-and-send-to-apm/232418)
**Author:** [@wosc](https://discuss.elastic.co/u/wosc)\ **Replies:** 2\ **Last updated:** [May 14, 2020, 6:07am UTC](https://discuss.elastic.co/t/parse-logfiles-haproxy-nginx-apache-and-send-to-apm/232418 "2020-05-14T06:07:04Z")
Hello, is there a common way or guideline how to convert webserver access log information (like from a haproxy/nginx/apache service) into APM transactions/spans? Would it be enough to include typical ECS common schema … --- ## [Logstash in Docker + syslog + preserving source IP's](https://discuss.elastic.co/t/logstash-in-docker-syslog-preserving-source-ips/111492)
**Author:** [@jjensen](https://discuss.elastic.co/u/jjensen)\ **Replies:** 2\ **Last updated:** [December 13, 2017, 11:32pm UTC](https://discuss.elastic.co/t/logstash-in-docker-syslog-preserving-source-ips/111492 "2017-12-13T23:32:38Z")
Hi, I'm running into a wall when it comes to receiving syslog data from various sources in my network. I think this might be an issue with Docker, but I wanted to get a feel for what others are doing in production befor… --- ## [Display raw JSON value from log entry in Discover table](https://discuss.elastic.co/t/display-raw-json-value-from-log-entry-in-discover-table/86232)
**Author:** [@Marcin\_Kawa](https://discuss.elastic.co/u/Marcin_Kawa)\ **Replies:** 4\ **Last updated:** [May 19, 2017, 11:10am UTC](https://discuss.elastic.co/t/display-raw-json-value-from-log-entry-in-discover-table/86232 "2017-05-19T11:10:11Z")
I'm looking for a way to combine few fields from log entry into one string representation to display it on the Discover view. Problem is the only common element for the fields is that those values are enclosed inside JSO… --- ## [Spaces in field names?](https://discuss.elastic.co/t/spaces-in-field-names/270536)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 5\ **Last updated:** [April 23, 2021, 3:02pm UTC](https://discuss.elastic.co/t/spaces-in-field-names/270536 "2021-04-23T15:02:00Z")
What is the status of support for spaces in field names; specifically, from Kibana 7.11.2 onwards? I've read conflicting information about this. For example, here's a reply from an Elastic Team Member to the forum topi… --- ## [\[script\_exception\] runtime error in Discover](https://discuss.elastic.co/t/script-exception-runtime-error-in-discover/252218)
**Author:** [@mats.ahlbom](https://discuss.elastic.co/u/mats.ahlbom)\ **Replies:** 5\ **Last updated:** [October 16, 2020, 11:22am UTC](https://discuss.elastic.co/t/script-exception-runtime-error-in-discover/252218 "2020-10-16T11:22:59Z")
Hi, I can add scripted field selfReview; if ( doc\['type.keyword'\].value == "comment-added" && doc\['comment.keyword'\].value.contains("Code-Review+2") && doc\['change.owner.name.keyword'\].value == doc\['author.na… --- ## [Elasticsearch.keystore](https://discuss.elastic.co/t/elasticsearch-keystore/154051)
**Author:** [@Jockj](https://discuss.elastic.co/u/Jockj)\ **Replies:** 7\ **Last updated:** [October 31, 2018, 8:50pm UTC](https://discuss.elastic.co/t/elasticsearch-keystore/154051 "2018-10-31T20:50:31Z")
does anyone have one list of supported keys/values in elasticsearch.keystore? I'm trying to leverage elasticsearch.keystore, but I cannot find a document to know which keys/values of the settings is supported. --- ## [Change mapping to convert live string data to integer for field?](https://discuss.elastic.co/t/change-mapping-to-convert-live-string-data-to-integer-for-field/73504)
**Author:** [@informatico](https://discuss.elastic.co/u/informatico)\ **Replies:** 1\ **Last updated:** [February 1, 2017, 1:59pm UTC](https://discuss.elastic.co/t/change-mapping-to-convert-live-string-data-to-integer-for-field/73504 "2017-02-01T13:59:57Z")
Hi, I am very new to Elasticsearch and I am working on a project where I have a source producing events data. I am then visualising this data within Kibana. The issue is one of the fields, of the events data being o… --- ## [Serialization issue on arrays](https://discuss.elastic.co/t/serialization-issue-on-arrays/39750)
**Author:** [@Aurelien\_3](https://discuss.elastic.co/u/Aurelien_3)\ **Replies:** 8\ **Last updated:** [May 23, 2016, 3:39pm UTC](https://discuss.elastic.co/t/serialization-issue-on-arrays/39750 "2016-05-23T15:39:39Z")
Hi all, I'm trying to dump my ES to hadoop to let me work on the data and not bother anymore my cluster. I did a simple job in MR to drop data to HDFS, but it fails with arrays. My ES data has arrays and array might … --- ## [Store and search binary data](https://discuss.elastic.co/t/store-and-search-binary-data/24528)
**Author:** [@eugenfunk](https://discuss.elastic.co/u/eugenfunk)\ **Replies:** 3\ **Last updated:** [July 1, 2015, 10:59am UTC](https://discuss.elastic.co/t/store-and-search-binary-data/24528 "2015-07-01T10:59:57Z")
Dear members, is it possible to extend elastic search to store and to retrieve binary data? I would like to store sparse voxel octrees and search for them by a 3D coordinate (e.g. x,y,z). For this, I would like to have… --- ## [Search for specific symbols](https://discuss.elastic.co/t/search-for-specific-symbols/97381)
**Author:** [@hsatgol](https://discuss.elastic.co/u/hsatgol)\ **Replies:** 4\ **Last updated:** [August 18, 2017, 5:12am UTC](https://discuss.elastic.co/t/search-for-specific-symbols/97381 "2017-08-18T05:12:24Z")
I'm using ELK on AWS. I want to analyze AWS ELB (load balancer) logs, and later on, I would love to see here Nginx logs as well. I've setup everything and it works! So, thanks for your software guys! Meanwhile, I have … --- ## [API key: unable to find apikey with id](https://discuss.elastic.co/t/api-key-unable-to-find-apikey-with-id/322104)
**Author:** [@chaserb](https://discuss.elastic.co/u/chaserb)\ **Replies:** 2\ **Last updated:** [December 28, 2022, 5:20pm UTC](https://discuss.elastic.co/t/api-key-unable-to-find-apikey-with-id/322104 "2022-12-28T17:20:26Z")
I appear to be having the same issue that @inbox.ex was having here, in that I'm receiving 401 when interacting with the Elastcisearch endpoint. According to this doc, I've created an API key for my deployment, and now I… --- ## [Logstash can not receive data from kafka](https://discuss.elastic.co/t/logstash-can-not-receive-data-from-kafka/140357)
**Author:** [@lsy](https://discuss.elastic.co/u/lsy)\ **Replies:** 7\ **Last updated:** [July 20, 2018, 6:18pm UTC](https://discuss.elastic.co/t/logstash-can-not-receive-data-from-kafka/140357 "2018-07-20T18:18:18Z")
The structure I used is filebeat/metricbeat to kafka to logstash to es to kibana. At the first time logstash actually received data from kafka. However, after I trid to develop the kafka cluster, logstash no longer rece… --- ## [Parse Amazon S3 access log with multiple files](https://discuss.elastic.co/t/parse-amazon-s3-access-log-with-multiple-files/55700)
**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\ **Replies:** 7\ **Last updated:** [July 18, 2016, 5:29pm UTC](https://discuss.elastic.co/t/parse-amazon-s3-access-log-with-multiple-files/55700 "2016-07-18T17:29:35Z")
Hello All, I am trying to parse Amazon S3 access log that has multiple chunks of the file. When i say multiple chunks i mean there are thousand of separate files with each files containing data in it. The data in these… --- ## [Is it possible to monitor SSL Certificate expiration using heartbeat without the CA certificate?](https://discuss.elastic.co/t/is-it-possible-to-monitor-ssl-certificate-expiration-using-heartbeat-without-the-ca-certificate/167110)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 3\ **Last updated:** [February 28, 2019, 3:34pm UTC](https://discuss.elastic.co/t/is-it-possible-to-monitor-ssl-certificate-expiration-using-heartbeat-without-the-ca-certificate/167110 "2019-02-28T15:34:24Z")
Hello, I have to monitor the expiration of some SSL Certificates and was making some tests with heartbeat. I know that if you have a http monitor using ssl and the ca certificate you will be able to have the expiration… --- ## [Performance and storage of the dense\_vector type](https://discuss.elastic.co/t/performance-and-storage-of-the-dense-vector-type/265850)
**Author:** [@Jacek\_Wolkowicz](https://discuss.elastic.co/u/Jacek_Wolkowicz)\ **Replies:** 2\ **Last updated:** [March 25, 2021, 8:20pm UTC](https://discuss.elastic.co/t/performance-and-storage-of-the-dense-vector-type/265850 "2021-03-25T20:20:53Z")
While testing the dense\_vector type for 'indexing' of deep n-n embeddings, I came up with a very confusing outcome. I have been testing the impact and performance of the following part of the mapping: { ... 'embeddi… --- ## [Kibana displaying a BLANK page](https://discuss.elastic.co/t/kibana-displaying-a-blank-page/49586)
**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\ **Replies:** 5\ **Last updated:** [May 14, 2016, 8:49pm UTC](https://discuss.elastic.co/t/kibana-displaying-a-blank-page/49586 "2016-05-14T20:49:14Z")
I was able to run Kibana properly. But I went a step ahead and tried making it a HTTPS. I followed the steps mentioned in below link. https://www.ulyaoth.net/resources/tutorial-install-logstash-and-kibana-on-a-windows-s… --- ## [ElasticSearch Java Client 8.1.2 - Entity content is too large for the configured buffer limit](https://discuss.elastic.co/t/elasticsearch-java-client-8-1-2-entity-content-is-too-large-for-the-configured-buffer-limit/303690)
**Author:** [@pipedreamer007](https://discuss.elastic.co/u/pipedreamer007)\ **Replies:** 2\ **Last updated:** [May 2, 2022, 12:34am UTC](https://discuss.elastic.co/t/elasticsearch-java-client-8-1-2-entity-content-is-too-large-for-the-configured-buffer-limit/303690 "2022-05-02T00:34:20Z")
Hi everyone - I'm trying to index a large amount of data into my Elasticsearch 8.1 Docker container. I've already changed the setting http.max\_content\_length in the Elasticsearch.yml file so I no longer encounter the 41… --- ## [CHecking for existance of a field in Ruby filter?](https://discuss.elastic.co/t/checking-for-existance-of-a-field-in-ruby-filter/80527)
**Author:** [@Grigory\_Shamov](https://discuss.elastic.co/u/Grigory_Shamov)\ **Replies:** 1\ **Last updated:** [March 30, 2017, 9:35am UTC](https://discuss.elastic.co/t/checking-for-existance-of-a-field-in-ruby-filter/80527 "2017-03-30T09:35:40Z")
Hi, with the new Ruby event.Set/Get syntax, is there a way to check for the variable being defined? Trying to event.get for a field that does not exist (say, coming from an optional field in grok) makes a Ruby exceptio… --- ## [Manage multiple beats on a single Logstash instance](https://discuss.elastic.co/t/manage-multiple-beats-on-a-single-logstash-instance/62545)
**Author:** [@espogian](https://discuss.elastic.co/u/espogian)\ **Replies:** 4\ **Last updated:** [October 8, 2016, 6:20am UTC](https://discuss.elastic.co/t/manage-multiple-beats-on-a-single-logstash-instance/62545 "2016-10-08T06:20:49Z")
Hello, I have multiple porspectors on a filebeat.yml configuration file. Each of these prospector has a unique type: filebeat: prospectors: - paths: - file\*.csv input\_type: log document\_… --- ## [Need help understanding hot threads](https://discuss.elastic.co/t/need-help-understanding-hot-threads/223181)
**Author:** [@jyip\_worky](https://discuss.elastic.co/u/jyip_worky)\ **Replies:** 7\ **Last updated:** [March 23, 2020, 2:00pm UTC](https://discuss.elastic.co/t/need-help-understanding-hot-threads/223181 "2020-03-23T14:00:57Z")
I have a 5 node cluster on kubernetes, 2 data nodes, 3 masters. This is sitting underneath graylog. For some reason, usually only 1 data node is extremely busy. And lately the load really high on it. I've grabbed the hot… --- ## [503 license not available--security](https://discuss.elastic.co/t/503-license-not-available-security/264966)
**Author:** [@John\_McDonnell](https://discuss.elastic.co/u/John_McDonnell)\ **Replies:** 3\ **Last updated:** [February 28, 2021, 5:33pm UTC](https://discuss.elastic.co/t/503-license-not-available-security/264966 "2021-02-28T17:33:42Z")
Okay, I'm confused. Numerous elastic blogs now suggest that security features are available with the basic license, so I thought this would be a great opportunity to check out the features in my home lab. But, when I f… --- ## [Location dosen't convert to geo\_point](https://discuss.elastic.co/t/location-dosent-convert-to-geo-point/131199)
**Author:** [@akml\_kk](https://discuss.elastic.co/u/akml_kk)\ **Replies:** 3\ **Last updated:** [May 9, 2018, 8:55pm UTC](https://discuss.elastic.co/t/location-dosent-convert-to-geo-point/131199 "2018-05-09T20:55:08Z")
as descriped here i ran this template : put \_template/nyc { "order":0, "index\_patterns":"nyc", "mapping":{ "\_default":{ "properties":{ "location ":{ "type":"geo\_point" } } } } } t… --- ## [Why plugin-security.policy file has no effect?](https://discuss.elastic.co/t/why-plugin-security-policy-file-has-no-effect/44072)
**Author:** [@thefourtheye](https://discuss.elastic.co/u/thefourtheye)\ **Replies:** 3\ **Last updated:** [March 14, 2016, 7:09am UTC](https://discuss.elastic.co/t/why-plugin-security-policy-file-has-no-effect/44072 "2016-03-14T07:09:44Z")
I am trying out a custom plugin with ES-2.2.0 and JDK-1.8. After the zip creation, the plugin-security.policy file is at the root level, and it looks like this grant { permission java.lang.RuntimePermission "getCla… --- ## [Does not match the certificate subject provided by the peer](https://discuss.elastic.co/t/does-not-match-the-certificate-subject-provided-by-the-peer/265484)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 3\ **Last updated:** [February 25, 2021, 10:57pm UTC](https://discuss.elastic.co/t/does-not-match-the-certificate-subject-provided-by-the-peer/265484 "2021-02-25T22:57:35Z")
Host name 'localhost' does not match the certificate subject provided by the peer (CN=elasticsearch) How can I deal with it? Can I just verify certificate? I don't want hardcode any IP etc. In /etc/logstash/logstash.ym… --- ## [How to create multiple indexs with multiple input in logstash](https://discuss.elastic.co/t/how-to-create-multiple-indexs-with-multiple-input-in-logstash/264416)
**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\ **Replies:** 7\ **Last updated:** [February 19, 2021, 9:06am UTC](https://discuss.elastic.co/t/how-to-create-multiple-indexs-with-multiple-input-in-logstash/264416 "2021-02-19T09:06:02Z")
I would like to have some help to configure multiple indexes from multiple entries with logstash. Is my configuration below correct? input { tcp { port =\> "5140" codec =\> json type =\> "syslog" } tcp { port =\> "5… --- ## [Logging configuration issues in Kibana 7.16](https://discuss.elastic.co/t/logging-configuration-issues-in-kibana-7-16/295517)
**Author:** [@quality](https://discuss.elastic.co/u/quality)\ **Replies:** 2\ **Last updated:** [February 10, 2022, 6:58pm UTC](https://discuss.elastic.co/t/logging-configuration-issues-in-kibana-7-16/295517 "2022-02-10T18:58:59Z")
Kibana 7.16 END GOAL: All Kibana logging options can be configured from kibana.yml All Kibana logs should be visible with journalctl. (they stream to journald) BACKGROUND: The below issues were discovered after … --- ## [How to go to offline mode](https://discuss.elastic.co/t/how-to-go-to-offline-mode/187163)
**Author:** [@zatom](https://discuss.elastic.co/u/zatom)\ **Replies:** 5\ **Last updated:** [June 25, 2019, 9:03pm UTC](https://discuss.elastic.co/t/how-to-go-to-offline-mode/187163 "2019-06-25T21:03:22Z")
I want to reindex my index in offline mode in elasticsearch(6x..) inorder to avoid any errors or timeout issues. How do I do that? I am new to online and offline terms. --- ## [Config Files contains non-ascii charaters](https://discuss.elastic.co/t/config-files-contains-non-ascii-charaters/63847)
**Author:** [@saunderstd](https://discuss.elastic.co/u/saunderstd)\ **Replies:** 4\ **Last updated:** [October 25, 2016, 11:50am UTC](https://discuss.elastic.co/t/config-files-contains-non-ascii-charaters/63847 "2016-10-25T11:50:14Z")
Morning I have two issues. One that the logs are not being populated in kibana and the second is that I am throwing errors shown below. Any help is appreciated. An unexpected error occurred! {:error=\>#, :class=\>"Runti… --- ## [Elastic Agent show \`Error dialing x509: certificate signed by unknown authority\` but it is healthy in fleet](https://discuss.elastic.co/t/elastic-agent-show-error-dialing-x509-certificate-signed-by-unknown-authority-but-it-is-healthy-in-fleet/329514)
**Author:** [@Kelvin\_Chan](https://discuss.elastic.co/u/Kelvin_Chan)\ **Replies:** 3\ **Last updated:** [April 7, 2023, 5:09am UTC](https://discuss.elastic.co/t/elastic-agent-show-error-dialing-x509-certificate-signed-by-unknown-authority-but-it-is-healthy-in-fleet/329514 "2023-04-07T05:09:06Z")
I am building elastic stack for testing, which uses self-signed certificate. And i use docker compose to deploy them. Here is part of compose efleet: image: docker.elastic.co/beats/elastic-agent:${STACK\_VERSION} … --- ## [Host name "\" does not match certificate subject provided by peer](https://discuss.elastic.co/t/host-name-ip-addr-does-not-match-certificate-subject-provided-by-peer/63438)
**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\ **Replies:** 3\ **Last updated:** [October 20, 2016, 12:32am UTC](https://discuss.elastic.co/t/host-name-ip-addr-does-not-match-certificate-subject-provided-by-peer/63438 "2016-10-20T00:32:44Z")
ES v2.4.1 and corresponding v2.4.1 Searchguard-SSL and Searchguard plugins i used the Searchguard SSL script to generate my cert/key/jks files, with modifications to the DN. I copied the \*.jks file to /etc/elasticsearc… --- ## [Indexes Scale](https://discuss.elastic.co/t/indexes-scale/27786)
**Author:** [@Deepikaa\_Subramaniam](https://discuss.elastic.co/u/Deepikaa_Subramaniam)\ **Replies:** 7\ **Last updated:** [August 21, 2015, 10:29pm UTC](https://discuss.elastic.co/t/indexes-scale/27786 "2015-08-21T22:29:41Z")
Hi, Is it good to have indexes in say thousands =\> which leads to thousands of shards even if I have a single shard per index or have smaller number of indices and have filtered aliases for them. If filtered aliases… --- ## [How can I disable or uninstall x-pack in Elasticsearch 7.14](https://discuss.elastic.co/t/how-can-i-disable-or-uninstall-x-pack-in-elasticsearch-7-14/282472)
**Author:** [@peterhajdu](https://discuss.elastic.co/u/peterhajdu)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 10:34am UTC](https://discuss.elastic.co/t/how-can-i-disable-or-uninstall-x-pack-in-elasticsearch-7-14/282472 "2021-08-25T10:34:06Z")
Hi, we are about to switch from elasticsearch-oss 7.7 to elasticsearch 7.14. Elasticsearch 7.14 contains x-pack by default but we do not intend to use any functionality that the oss version did not contain. Is it poss… --- ## [Discover: failed to parse date field](https://discuss.elastic.co/t/discover-failed-to-parse-date-field/100932)
**Author:** [@Suny](https://discuss.elastic.co/u/Suny)\ **Replies:** 1\ **Last updated:** [September 18, 2017, 11:11pm UTC](https://discuss.elastic.co/t/discover-failed-to-parse-date-field/100932 "2017-09-18T23:11:41Z")
I define in the mapping: "time" : { "type" : "date", "format" : "yyyy'M'MM" }, The field is a date, I can create time histograms. Things look fine in the visualizations, and I can … --- ## ["APM Server transport error (ECONNREFUSED): connect ECONNREFUSED ::1:8200" when trying to configure APM agent in application code](https://discuss.elastic.co/t/apm-server-transport-error-econnrefused-connect-econnrefused-8200-when-trying-to-configure-apm-agent-in-application-code/326236)
**Author:** [@Matt\_Johnston](https://discuss.elastic.co/u/Matt_Johnston)\ **Replies:** 8\ **Last updated:** [February 23, 2023, 3:43pm UTC](https://discuss.elastic.co/t/apm-server-transport-error-econnrefused-connect-econnrefused-8200-when-trying-to-configure-apm-agent-in-application-code/326236 "2023-02-23T15:43:48Z")
I am trying to configure an APM agent in my nodejs application code. I have installed the APM agent using the following command: npm install elastic-apm-node --save I then updated my application code using the followin… [Previous page](https://discuss.elastic.co/top.md?page=475&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=477&per_page=50&period=all)