# Top **URL:** https://discuss.elastic.co/top.md?page=488&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 489 --- ## [\[Kibana\] - Add filter using specific regex](https://discuss.elastic.co/t/kibana-add-filter-using-specific-regex/172307)
**Author:** [@Lionel\_Carvalho](https://discuss.elastic.co/u/Lionel_Carvalho)\ **Replies:** 3\ **Last updated:** [March 15, 2019, 2:52pm UTC](https://discuss.elastic.co/t/kibana-add-filter-using-specific-regex/172307 "2019-03-15T14:52:12Z")
Hi, Sorry i'm a begginer in kibana so i might ask something stupid. I'd would filter a message with a RegEx, but i try to use it Kibana return me a string error: { "query": { "regexp":{ "messag… --- ## [Logstash pipelines: "if \[fileset\]\[module\]" sometimes not working properly](https://discuss.elastic.co/t/logstash-pipelines-if-fileset-module-sometimes-not-working-properly/160999)
**Author:** [@MartijnS](https://discuss.elastic.co/u/MartijnS)\ **Replies:** 0\ **Last updated:** [December 15, 2018, 12:35pm UTC](https://discuss.elastic.co/t/logstash-pipelines-if-fileset-module-sometimes-not-working-properly/160999 "2018-12-15T12:35:42Z")
Hello, Since a week or so I'm trying Elastic to determine wether or not it's something we can use at work (webhosting company). I've got it all setup (filebeat and metricbeat, Logstash, Elastic and Kibana). Within Logst… --- ## [Trouble with configuring Filebeat as DaemonSet on k8s environment](https://discuss.elastic.co/t/trouble-with-configuring-filebeat-as-daemonset-on-k8s-environment/217031)
**Author:** [@cloudants\_wvestjens](https://discuss.elastic.co/u/cloudants_wvestjens)\ **Replies:** 7\ **Last updated:** [January 31, 2020, 3:34pm UTC](https://discuss.elastic.co/t/trouble-with-configuring-filebeat-as-daemonset-on-k8s-environment/217031 "2020-01-31T15:34:18Z")
Hello. I am trying to configure Filebeat as DaemonSet on our Kubernetes platform. It's sending through systemlogs as expected, including the event info. I am trying to get it to do the same for nginx, apache2 and even… --- ## [Send API Events to Servicenow using webhook](https://discuss.elastic.co/t/send-api-events-to-servicenow-using-webhook/142108)
**Author:** [@charan.gandra](https://discuss.elastic.co/u/charan.gandra)\ **Replies:** 1\ **Last updated:** [August 16, 2018, 4:00pm UTC](https://discuss.elastic.co/t/send-api-events-to-servicenow-using-webhook/142108 "2018-08-16T16:00:15Z")
Hi I am trying to send an API Event using the webhook actions in elasticsearch watcher. However I am getting errors due to unknown fields in EventList. I ca send a API event from elasticsearch server using the CURL, so… --- ## [Undo delete feature](https://discuss.elastic.co/t/undo-delete-feature/18748)
**Author:** [@Kartavya](https://discuss.elastic.co/u/Kartavya)\ **Replies:** 2\ **Last updated:** [July 19, 2014, 11:53am UTC](https://discuss.elastic.co/t/undo-delete-feature/18748 "2014-07-19T11:53:55Z")
Hi All, I like to if ElasticSearch has any undo delete operation. So any document deleted using delete api can be recovered until it is deleted from disk using optimize api flag only\_expunge\_deletes. If it is n… --- ## [Ruby exception error on logstash](https://discuss.elastic.co/t/ruby-exception-error-on-logstash/221944)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 6\ **Last updated:** [March 4, 2020, 2:29pm UTC](https://discuss.elastic.co/t/ruby-exception-error-on-logstash/221944 "2020-03-04T14:29:24Z")
Hi, im formating a date string with the following code. ruby { code =\> ' time = event.get("fecha") event.remove("fecha") … --- ## [Logstash Drop header line while csv upload](https://discuss.elastic.co/t/logstash-drop-header-line-while-csv-upload/118352)
**Author:** [@scch](https://discuss.elastic.co/u/scch)\ **Replies:** 4\ **Last updated:** [February 5, 2018, 8:48am UTC](https://discuss.elastic.co/t/logstash-drop-header-line-while-csv-upload/118352 "2018-02-05T08:48:23Z")
Hi, How to drop first header line of csv file ? i am trying below code.. and want to drop complete document. Please advise.. filter { if \[message\] =~ /^Occurred On/ { drop {} } } --- ## [Curator - Is it possible to string multiple pattern filters into a single action](https://discuss.elastic.co/t/curator-is-it-possible-to-string-multiple-pattern-filters-into-a-single-action/65341)
**Author:** [@bwgriffith](https://discuss.elastic.co/u/bwgriffith)\ **Replies:** 2\ **Last updated:** [November 8, 2016, 1:41pm UTC](https://discuss.elastic.co/t/curator-is-it-possible-to-string-multiple-pattern-filters-into-a-single-action/65341 "2016-11-08T13:41:38Z")
I was wondering if it was possible to string multiple pattern type matches into a single curator action. Mainly trying to minimize the number of individual actions. An example of what I'm trying to do, but it does not… --- ## [Permission to view all indices and create dashboards](https://discuss.elastic.co/t/permission-to-view-all-indices-and-create-dashboards/274227)
**Author:** [@lchan](https://discuss.elastic.co/u/lchan)\ **Replies:** 6\ **Last updated:** [June 3, 2021, 5:29pm UTC](https://discuss.elastic.co/t/permission-to-view-all-indices-and-create-dashboards/274227 "2021-06-03T17:29:01Z")
I am looking to give permission SAML user to read all indices and I have done the following: assign the following permissions with role indices\_viewer Confirm role mapping is setup However users are still getting 403,… --- ## [Visualizing scripted metric aggregations in Kibana](https://discuss.elastic.co/t/visualizing-scripted-metric-aggregations-in-kibana/217258)
**Author:** [@sean1010](https://discuss.elastic.co/u/sean1010)\ **Replies:** 4\ **Last updated:** [February 4, 2020, 8:44am UTC](https://discuss.elastic.co/t/visualizing-scripted-metric-aggregations-in-kibana/217258 "2020-02-04T08:44:40Z")
Hello, I have some scripted metric aggregations in Elasticsearch that return some custom metrics from me. I'd like to add the ability to add this as a standard metric aggregation in my Kibana, but I don't see an easy wa… --- ## [APM error: forbidden request: endpoint is disabled](https://discuss.elastic.co/t/apm-error-forbidden-request-endpoint-is-disabled/205399)
**Author:** [@Sirius](https://discuss.elastic.co/u/Sirius)\ **Replies:** 2\ **Last updated:** [October 28, 2019, 5:56pm UTC](https://discuss.elastic.co/t/apm-error-forbidden-request-endpoint-is-disabled/205399 "2019-10-28T17:56:12Z")
Hello, Can anyone help please on this APM error, below I am sharing the technical information and steps ... Kibana version:7.3.2 Elasticsearch version:7.3.2 APM Server version: 7.4 APM Agent language and version: el… --- ## [Filebeats not able to publish events to Logstash](https://discuss.elastic.co/t/filebeats-not-able-to-publish-events-to-logstash/83381)
**Author:** [@virendra\_oswal](https://discuss.elastic.co/u/virendra_oswal)\ **Replies:** 5\ **Last updated:** [April 25, 2017, 7:08am UTC](https://discuss.elastic.co/t/filebeats-not-able-to-publish-events-to-logstash/83381 "2017-04-25T07:08:38Z")
I have logstash on one linux server and have filebeats running on another server where my application is hosted. I am getting following error when i run filebeats, logstash is successfully started. Error: \> 2017/04/24… --- ## [JDBC Connection from Linux to SQL Server db](https://discuss.elastic.co/t/jdbc-connection-from-linux-to-sql-server-db/57527)
**Author:** [@lolhypocrisy](https://discuss.elastic.co/u/lolhypocrisy)\ **Replies:** 0\ **Last updated:** [August 8, 2016, 8:50pm UTC](https://discuss.elastic.co/t/jdbc-connection-from-linux-to-sql-server-db/57527 "2016-08-08T20:50:38Z")
I'm trying to connect to a SQL Server database using a JDBC connection from Logstash installed on a Linux server. I'm running into issues with the security portion of it. This is my current connection string: jdbc\_conn… --- ## [Logstash proftpd log](https://discuss.elastic.co/t/logstash-proftpd-log/42378)
**Author:** [@ismael\_boumedien](https://discuss.elastic.co/u/ismael_boumedien)\ **Replies:** 7\ **Last updated:** [June 15, 2017, 1:00pm UTC](https://discuss.elastic.co/t/logstash-proftpd-log/42378 "2017-06-15T13:00:56Z")
Hi guys, I'm working on logstash and I want to send proftpd and sftp logs to elasticsearch. But I'm facing some issues with doing that. No index is genreated in ES. Can any one help me :slightly\_smiling: File conf: #… --- ## [Logstash to elasticsearch](https://discuss.elastic.co/t/logstash-to-elasticsearch/244306)
**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\ **Replies:** 6\ **Last updated:** [August 10, 2020, 9:52am UTC](https://discuss.elastic.co/t/logstash-to-elasticsearch/244306 "2020-08-10T09:52:47Z")
I think logstash is having trouble sending data to elasticsearch. To secure beats communications, I've set elasticsearch to use https. I think because of that logstash is having some trouble sending data to elasticsearc… --- ## [Unable to sort on @timestamp](https://discuss.elastic.co/t/unable-to-sort-on-timestamp/129111)
**Author:** [@AaronKalair](https://discuss.elastic.co/u/AaronKalair)\ **Replies:** 8\ **Last updated:** [April 26, 2018, 10:02pm UTC](https://discuss.elastic.co/t/unable-to-sort-on-timestamp/129111 "2018-04-26T22:02:25Z")
Hello, I'm using Kibana v5.2.2 and Elasticsearch v5.2.2 I have Kibana setup to view my logs and I want to sort them by the @timestamp field but the little triangle that appears next to \_score to let you sort by score d… --- ## [Sniffer not fully working](https://discuss.elastic.co/t/sniffer-not-fully-working/1531)
**Author:** [@moreno](https://discuss.elastic.co/u/moreno)\ **Replies:** 8\ **Last updated:** [June 18, 2015, 9:13am UTC](https://discuss.elastic.co/t/sniffer-not-fully-working/1531 "2015-06-18T09:13:39Z")
I have installed the agent on ubuntu running HAPROXY with multiple ports backends. We have high traffic sites but it looks like nothing is really recording on elastcisearch. sudo packetbeat -e -d "publish" -N does sh… --- ## [LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=\>"Got response code '401'](https://discuss.elastic.co/t/logstash-badresponsecodeerror-message-got-response-code-401/299780)
**Author:** [@Diego\_T](https://discuss.elastic.co/u/Diego_T)\ **Replies:** 2\ **Last updated:** [March 22, 2022, 1:20pm UTC](https://discuss.elastic.co/t/logstash-badresponsecodeerror-message-got-response-code-401/299780 "2022-03-22T13:20:15Z")
when I run logstash on my local windows pointing to my remote elastic account I get the following error Using LS\_JAVA\_HOME defined java: C:\\Program Files\\Java\\jdk-17.0.2 WARNING: Using LS\_JAVA\_HOME while Logstash distri… --- ## [Unable to upload netflow data to Elasticsearch with filebeat netflow module](https://discuss.elastic.co/t/unable-to-upload-netflow-data-to-elasticsearch-with-filebeat-netflow-module/216290)
**Author:** [@GregoryBrown](https://discuss.elastic.co/u/GregoryBrown)\ **Replies:** 8\ **Last updated:** [January 27, 2020, 10:35am UTC](https://discuss.elastic.co/t/unable-to-upload-netflow-data-to-elasticsearch-with-filebeat-netflow-module/216290 "2020-01-27T10:35:42Z")
All, I am trying to upload data from filebeat directly to ES. I see I am able to connect to my ES instance and I am getting netflow data into filebeat but when I search my ES I don't see any new indices I created or da… --- ## [Using Prune Filter To Remove Null Value Fields](https://discuss.elastic.co/t/using-prune-filter-to-remove-null-value-fields/191659)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 3\ **Last updated:** [July 22, 2019, 3:14pm UTC](https://discuss.elastic.co/t/using-prune-filter-to-remove-null-value-fields/191659 "2019-07-22T15:14:18Z")
I am using the JSON filter to parse out events. However, many fields are frequently blank. I'd like to remove those fields without having to manually specify if blank then use mutate to remove field dozens of times. I… --- ## [Is using "filter" inside "aggs" more efficient than "query" at the top level of an aggregation body?](https://discuss.elastic.co/t/is-using-filter-inside-aggs-more-efficient-than-query-at-the-top-level-of-an-aggregation-body/271153)
**Author:** [@mattwelke](https://discuss.elastic.co/u/mattwelke)\ **Replies:** 5\ **Last updated:** [April 25, 2021, 1:02pm UTC](https://discuss.elastic.co/t/is-using-filter-inside-aggs-more-efficient-than-query-at-the-top-level-of-an-aggregation-body/271153 "2021-04-25T13:02:02Z")
I'm working in a legacy code base and I think I've uncovered an inefficient way of doing a filter aggregation based on what I read in the docs. These are my assumptions: Using filters to eliminate documents from searc… --- ## [Elasticsearch sql query does not work when index name contains "-"](https://discuss.elastic.co/t/elasticsearch-sql-query-does-not-work-when-index-name-contains/162946)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 5\ **Last updated:** [January 4, 2019, 5:50pm UTC](https://discuss.elastic.co/t/elasticsearch-sql-query-does-not-work-when-index-name-contains/162946 "2019-01-04T17:50:55Z")
I've been playing with elasticsearch sql query and I have tried to run DESCRIBE filebeat-6.5.0-2019.01.04 but I am getting the following error: { "error": { "root\_cause": \[ { "type": "parsing\_excepti… --- ## [Exception when getting mapping using Java API](https://discuss.elastic.co/t/exception-when-getting-mapping-using-java-api/89519)
**Author:** [@mcrandy](https://discuss.elastic.co/u/mcrandy)\ **Replies:** 4\ **Last updated:** [June 15, 2017, 12:48pm UTC](https://discuss.elastic.co/t/exception-when-getting-mapping-using-java-api/89519 "2017-06-15T12:48:16Z")
We're trying to get mapping for an index using Java API according to: final GetMappingsResponse response = esClient.admin().indices().prepareGetMappings(indexName) .setTypes(indexType).execute().act… --- ## [How do I transfer data across networks?](https://discuss.elastic.co/t/how-do-i-transfer-data-across-networks/191577)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 6\ **Last updated:** [July 31, 2019, 9:43am UTC](https://discuss.elastic.co/t/how-do-i-transfer-data-across-networks/191577 "2019-07-31T09:43:04Z")
I want to transfer the data to different networks How should I set the url of logstash/filebeat? filebeat conf output.redis: hosts: \["redis.xxx.net:7887"\] key: data db: 0 timeout: 30 Failed to connect to redis(t… --- ## [ElasticSearch \_bulk calls resulting in "socket hang up" despite small size](https://discuss.elastic.co/t/elasticsearch--bulk-calls-resulting-in-socket-hang-up-despite-small-size/10936)
**Author:** [@inZania](https://discuss.elastic.co/u/inZania)\ **Replies:** 3\ **Last updated:** [March 5, 2013, 4:10pm UTC](https://discuss.elastic.co/t/elasticsearch--bulk-calls-resulting-in-socket-hang-up-despite-small-size/10936 "2013-03-05T16:10:48Z")
I'm using elastical to connect to ElasticSearch via node.js. In the process of profiling my app with Nodetime to attempt to improve performance, I noticed something odd. My ElasticSearch "PUT" requests to \_bulk inde… --- ## [Change visualization:colorMapping](https://discuss.elastic.co/t/change-visualization-colormapping/39144)
**Author:** [@luis.carvalho](https://discuss.elastic.co/u/luis.carvalho)\ **Replies:** 2\ **Last updated:** [January 14, 2016, 11:59am UTC](https://discuss.elastic.co/t/change-visualization-colormapping/39144 "2016-01-14T11:59:40Z")
Hi, I want to change the charts color palette in the "visualization:colorMapping", but didn't find any examples. Someone can help me on this? Giving some example. Thanks, Luís Carvalho --- ## [Filebeat stops sending logs](https://discuss.elastic.co/t/filebeat-stops-sending-logs/93914)
**Author:** [@abhisek](https://discuss.elastic.co/u/abhisek)\ **Replies:** 7\ **Last updated:** [July 24, 2017, 5:13pm UTC](https://discuss.elastic.co/t/filebeat-stops-sending-logs/93914 "2017-07-24T17:13:11Z")
Hi , I have elastic search, logstash, kibana installed and configured on a single server and filebeat installed on another. After configuring filebeat when i start filebeat it gets started, and one can see logs comin… --- ## [\[Q\]: Is there a 'LIKE' function in ES|QL?](https://discuss.elastic.co/t/q-is-there-a-like-function-in-es-ql/371942)
**Author:** [@cjessing](https://discuss.elastic.co/u/cjessing)\ **Replies:** 6\ **Last updated:** [December 13, 2024, 8:47am UTC](https://discuss.elastic.co/t/q-is-there-a-like-function-in-es-ql/371942 "2024-12-13T08:47:08Z")
So I have som data in filebeat where the following query will return some data: FROM filebeat-\* | WHERE event.dataset == "cert-info.log" | KEEP tags | LIMIT 2000 this results in something like this: Certificate \[Priva… --- ## [Error while starting logstash](https://discuss.elastic.co/t/error-while-starting-logstash/257895)
**Author:** [@Lipi\_Lapsiwala](https://discuss.elastic.co/u/Lipi_Lapsiwala)\ **Replies:** 6\ **Last updated:** [December 8, 2020, 1:32am UTC](https://discuss.elastic.co/t/error-while-starting-logstash/257895 "2020-12-08T01:32:56Z")
I am trying to integrate Elastic stack (Logstash, ElasticSearch and Kibana) with IBM websphere liberty profile. I have successfully created and configured server.xml file in wlp and able to start and access the server. I… --- ## [Elasticsearch returning empty result](https://discuss.elastic.co/t/elasticsearch-returning-empty-result/180962)
**Author:** [@gaurav](https://discuss.elastic.co/u/gaurav)\ **Replies:** 5\ **Last updated:** [May 15, 2019, 3:02pm UTC](https://discuss.elastic.co/t/elasticsearch-returning-empty-result/180962 "2019-05-15T15:02:38Z")
I am using a 2.3 version elastic search. Sometimes, elastic search returns an empty result even when data is present. It usually gives the right data on retry. But why does it return empty in the first try. Any known… --- ## [ELK as replacement for google analytics possible?](https://discuss.elastic.co/t/elk-as-replacement-for-google-analytics-possible/84852)
**Author:** [@alberto\_c](https://discuss.elastic.co/u/alberto_c)\ **Replies:** 1\ **Last updated:** [May 8, 2017, 4:26am UTC](https://discuss.elastic.co/t/elk-as-replacement-for-google-analytics-possible/84852 "2017-05-08T04:26:48Z")
Our startup has built a SaaS web application used by multiple customers. The initial solution of using google analytics to track our application usage is not suitable anymore, and I would like to switch to some other sol… --- ## [Error: \[o.e.b.Elasticsearch \] fatal exception while booting Elasticsearchorg.elasticsearch.bootstrap.StartupException: org.elasticsearch.ElasticsearchSecurityException:](https://discuss.elastic.co/t/error-o-e-b-elasticsearch-fatal-exception-while-booting-elasticsearchorg-elasticsearch-bootstrap-startupexception-org-elasticsearch-elasticsearchsecurityexception/308685)
**Author:** [@kkumar.e](https://discuss.elastic.co/u/kkumar.e)\ **Replies:** 2\ **Last updated:** [July 15, 2022, 8:44pm UTC](https://discuss.elastic.co/t/error-o-e-b-elasticsearch-fatal-exception-while-booting-elasticsearchorg-elasticsearch-bootstrap-startupexception-org-elasticsearch-elasticsearchsecurityexception/308685 "2022-07-15T20:44:15Z")
Hi All, I am running into an ssl certificate issue when trying to form a cluster with 2 Elasticsearch nodes created on 2 AWS EC2 servers spread across 2 subnets. I followed the steps in the below ref link to generate CA… --- ## [Jobs subforum?](https://discuss.elastic.co/t/jobs-subforum/23795)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 8\ **Last updated:** [January 2, 2017, 9:07am UTC](https://discuss.elastic.co/t/jobs-subforum/23795 "2017-01-02T09:07:21Z")
We allowed the occasional non-recruiter post on the old lists and it seems like people are still interested in the same thing. Should we dedicate an area to this? --- ## [ElasticSearch : No ElasticSearch node is available Exception](https://discuss.elastic.co/t/elasticsearch-no-elasticsearch-node-is-available-exception/13248)
**Author:** [@Bjorn\_Brathen](https://discuss.elastic.co/u/Bjorn_Brathen)\ **Replies:** 8\ **Last updated:** [March 14, 2014, 8:09pm UTC](https://discuss.elastic.co/t/elasticsearch-no-elasticsearch-node-is-available-exception/13248 "2014-03-14T20:09:56Z")
I'm trying to deploy \*Elasticsearch\* to \*Amazon web services EC2\*. I have got it up and working for normal http REST requests from my own computer using curl, but when I try to use the Java Client API (w/Play2-elas… --- ## [Node couldn't rejoin cluster because "version not supported"](https://discuss.elastic.co/t/node-couldnt-rejoin-cluster-because-version-not-supported/265473)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 1:21pm UTC](https://discuss.elastic.co/t/node-couldnt-rejoin-cluster-because-version-not-supported/265473 "2021-02-25T13:21:43Z")
I've got an Elasticsearch cluster of four nodes. Three can hold data and are master eligible. One cannot hold data, isn't master eligible and has Kibana on it. Two of the master eligible nodes became unhappy resulting in… --- ## [Xpack SSL configuartion of organization-specific certificate authority](https://discuss.elastic.co/t/xpack-ssl-configuartion-of-organization-specific-certificate-authority/106004)
**Author:** [@GabayAvi](https://discuss.elastic.co/u/GabayAvi)\ **Replies:** 6\ **Last updated:** [November 20, 2017, 1:18pm UTC](https://discuss.elastic.co/t/xpack-ssl-configuartion-of-organization-specific-certificate-authority/106004 "2017-11-20T13:18:44Z")
i created a a CSR flle with certgen --csr send the file to our organization certificate authority got ther cer file but i don't know how to configure it corrent to work in secure mode. which trusted certificated i nee… --- ## [How to run kibana in IIS](https://discuss.elastic.co/t/how-to-run-kibana-in-iis/116604)
**Author:** [@peterch](https://discuss.elastic.co/u/peterch)\ **Replies:** 2\ **Last updated:** [January 24, 2018, 3:09am UTC](https://discuss.elastic.co/t/how-to-run-kibana-in-iis/116604 "2018-01-24T03:09:48Z")
Dear all, I would like to run kibana in IIS, may I know how to do that? The physical path should point to which folder? Thanks Best Regards, Peter Chow --- ## [Kibana removing fields from index pattern](https://discuss.elastic.co/t/kibana-removing-fields-from-index-pattern/288330)
**Author:** [@hellotty](https://discuss.elastic.co/u/hellotty)\ **Replies:** 4\ **Last updated:** [November 18, 2021, 1:57pm UTC](https://discuss.elastic.co/t/kibana-removing-fields-from-index-pattern/288330 "2021-11-18T13:57:27Z")
Hello. During the test, I created a lot of fields that are now irrelevant and interfere with the search. Can I delete fields that I don't need? --- ## [Permission to setting up Metricbeat on Windows](https://discuss.elastic.co/t/permission-to-setting-up-metricbeat-on-windows/72011)
**Author:** [@ronanluiz](https://discuss.elastic.co/u/ronanluiz)\ **Replies:** 5\ **Last updated:** [January 19, 2017, 2:08pm UTC](https://discuss.elastic.co/t/permission-to-setting-up-metricbeat-on-windows/72011 "2017-01-19T14:08:03Z")
I'm setting up Metricbeat (Version: 5.1.1) on a Windows Server 2008 R2 environment, but to be able to collect data from all the processes running on the server it was necessary to configure the service to run a user with… --- ## [Option "client.transport.sniff" not working with v5.4.0 Transport Client](https://discuss.elastic.co/t/option-client-transport-sniff-not-working-with-v5-4-0-transport-client/85899)
**Author:** [@munk77](https://discuss.elastic.co/u/munk77)\ **Replies:** 3\ **Last updated:** [May 19, 2017, 7:29pm UTC](https://discuss.elastic.co/t/option-client-transport-sniff-not-working-with-v5-4-0-transport-client/85899 "2017-05-19T19:29:50Z")
Hi, We have just upgraded our Elasticsearch cluster from v5.3.2 to v5.4.0 but are now experiencing problems with our Java apps that connect to the cluster using the Transport Client. After some digging we found out tha… --- ## [Search\_after queries are not performing as expected](https://discuss.elastic.co/t/search-after-queries-are-not-performing-as-expected/289174)
**Author:** [@manuel.pancorbo](https://discuss.elastic.co/u/manuel.pancorbo)\ **Replies:** 6\ **Last updated:** [November 16, 2021, 3:08pm UTC](https://discuss.elastic.co/t/search-after-queries-are-not-performing-as-expected/289174 "2021-11-16T15:08:42Z")
Hi all! I'm working on building a searcher for a site. This site generates a lot of writes (new or modified documents) so we need to use some mechanism to ensure pagination consistency by using certain criteria (freshne… --- ## [Node validation exception \[1\] bootstrap checks failed](https://discuss.elastic.co/t/node-validation-exception-1-bootstrap-checks-failed/343239)
**Author:** [@dev008](https://discuss.elastic.co/u/dev008)\ **Replies:** 3\ **Last updated:** [September 18, 2023, 10:30am UTC](https://discuss.elastic.co/t/node-validation-exception-1-bootstrap-checks-failed/343239 "2023-09-18T10:30:01Z")
Hi Team, I am getting the below error while configuring Elastic clustering on master node. I have gone through documentation still the error persist . Can someone please guide me where am i going wrong. Here are the lo… --- ## [Max number of shards per node](https://discuss.elastic.co/t/max-number-of-shards-per-node/14431)
**Author:** [@mromagnoli](https://discuss.elastic.co/u/mromagnoli)\ **Replies:** 5\ **Last updated:** [November 15, 2013, 6:59pm UTC](https://discuss.elastic.co/t/max-number-of-shards-per-node/14431 "2013-11-15T18:59:43Z")
I am not realizing how to get the default number of shards per node or the maximun one, because I think I am having 'red' status since I have more than 100 shards in one index, and each index has in average 200K docs… --- ## [Unable to change the elastic-agent grpc.port during fleet server setup](https://discuss.elastic.co/t/unable-to-change-the-elastic-agent-grpc-port-during-fleet-server-setup/286314)
**Author:** [@rrivers](https://discuss.elastic.co/u/rrivers)\ **Replies:** 2\ **Last updated:** [October 11, 2021, 2:19pm UTC](https://discuss.elastic.co/t/unable-to-change-the-elastic-agent-grpc-port-during-fleet-server-setup/286314 "2021-10-11T14:19:46Z")
I'm trying to install fleet server 7.15 on an Ubuntu 20.04 machine but I'm running into a port conflict since 127.0.0.1:6789 is already in use by another application. I found a post that suggested running ./elastic-age… --- ## [Visualize the last value](https://discuss.elastic.co/t/visualize-the-last-value/290641)
**Author:** [@carlos\_gomez\_gomez](https://discuss.elastic.co/u/carlos_gomez_gomez)\ **Replies:** 1\ **Last updated:** [December 1, 2021, 9:57am UTC](https://discuss.elastic.co/t/visualize-the-last-value/290641 "2021-12-01T09:57:09Z")
Hi. I'm trying to make a visualitzacion of an scripted field. The value of the scripted field only can be 1 or 0 is like a boolean. I want to visualice a line graph. I have two questions about that. It its possible t… --- ## [Sending AWS Cloud Watch Logs to Elasticsearch](https://discuss.elastic.co/t/sending-aws-cloud-watch-logs-to-elasticsearch/346459)
**Author:** [@laale1](https://discuss.elastic.co/u/laale1)\ **Replies:** 5\ **Last updated:** [November 14, 2023, 11:01am UTC](https://discuss.elastic.co/t/sending-aws-cloud-watch-logs-to-elasticsearch/346459 "2023-11-14T11:01:37Z")
Hello community. I want to send AWS Cloud Watch logs to my local Elasticsearch cluster? I have seen AWS integrations but my question is how I'm going to connect those integrations on my AWS Cloud Watch? --- ## [Logstash MSSQL JDBC connection troubleshooting](https://discuss.elastic.co/t/logstash-mssql-jdbc-connection-troubleshooting/97622)
**Author:** [@gh0stid](https://discuss.elastic.co/u/gh0stid)\ **Replies:** 5\ **Last updated:** [September 4, 2017, 9:13am UTC](https://discuss.elastic.co/t/logstash-mssql-jdbc-connection-troubleshooting/97622 "2017-09-04T09:13:53Z")
Hello, sorry to bother you, once again I have a question about Logstash input... I just got back from a 9month medical leave, so im a bit lost i must admit... anyway, heres the config : stripped input and output to ke… --- ## [Range filter in should match query](https://discuss.elastic.co/t/range-filter-in-should-match-query/311435)
**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\ **Replies:** 3\ **Last updated:** [August 5, 2022, 1:41pm UTC](https://discuss.elastic.co/t/range-filter-in-should-match-query/311435 "2022-08-05T13:41:14Z")
Hi, let's say I have 3 documents, id=1, "text" = "my name is john", "date" = "2021" id=2, "text" = "my name is alice", "date" = "2017" id=3, "text" = "my name is steven", "date" = "2019" I want to find all documents th… --- ## [How to uninstall ELk stack completely on windows 7](https://discuss.elastic.co/t/how-to-uninstall-elk-stack-completely-on-windows-7/75437)
**Author:** [@shubh09](https://discuss.elastic.co/u/shubh09)\ **Replies:** 2\ **Last updated:** [February 21, 2017, 5:58am UTC](https://discuss.elastic.co/t/how-to-uninstall-elk-stack-completely-on-windows-7/75437 "2017-02-21T05:58:25Z")
Hi Team, how to uninstall ELk stack completely on windows 7. I want to reinstall ELk but fresh installation. Thanks in advance! --- ## [Analisys is not available for object field](https://discuss.elastic.co/t/analisys-is-not-available-for-object-field/47021)
**Author:** [@peppetrick](https://discuss.elastic.co/u/peppetrick)\ **Replies:** 4\ **Last updated:** [April 12, 2016, 4:03pm UTC](https://discuss.elastic.co/t/analisys-is-not-available-for-object-field/47021 "2016-04-12T16:03:06Z")
Hi We have log in json format with nested json object. I seems that "nested" field are shown in the field list in settings dunt not in the left bar under discover section. Look the image below, the warning message says… [Previous page](https://discuss.elastic.co/top.md?page=487&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=489&per_page=50&period=all)