# Top

**URL:** https://discuss.elastic.co/top.md?page=507&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 508

---

## [Cannot read configured pem certificate](https://discuss.elastic.co/t/cannot-read-configured-pem-certificate/299545)

<div class="topic-metadata">

**Author:** [@tehfcae](https://discuss.elastic.co/u/tehfcae)\
**Replies:** 3\
**Last updated:** [March 15, 2022, 12:23am UTC](https://discuss.elastic.co/t/cannot-read-configured-pem-certificate/299545 "2022-03-15T00:23:04Z")

</div>

I generated a PEM certificate for my Elasticsearch however, I am getting an error that it cannot read configured PEM certificate due to a permissions issue, however, I verified the permissions and it should have read/wri…

---

## [How to send evtx files to logstash via FIlebeat?](https://discuss.elastic.co/t/how-to-send-evtx-files-to-logstash-via-filebeat/211008)

<div class="topic-metadata">

**Author:** [@Coder\_HK](https://discuss.elastic.co/u/Coder_HK)\
**Replies:** 2\
**Last updated:** [December 9, 2019, 8:27pm UTC](https://discuss.elastic.co/t/how-to-send-evtx-files-to-logstash-via-filebeat/211008 "2019-12-09T20:27:45Z")

</div>

I have 300mb evtx file and I want to send this file to logstash (which is on another machine) using Filebeat. How can I do this ? NOTE: I am using winlogbeat to send windows logs to logstash and it's working fine. but …

---

## [Getting Error when i start metric beat service](https://discuss.elastic.co/t/getting-error-when-i-start-metric-beat-service/186393)

<div class="topic-metadata">

**Author:** [@stalinbritto](https://discuss.elastic.co/u/stalinbritto)\
**Replies:** 6\
**Last updated:** [June 24, 2019, 9:44am UTC](https://discuss.elastic.co/t/getting-error-when-i-start-metric-beat-service/186393 "2019-06-24T09:44:14Z")

</div>

// metricbeat.service - Metricbeat is a lightweight shipper for metrics. Loaded: loaded (/lib/systemd/system/metricbeat.service; enabled; vendor preset: enabled) Active: active (running) since Wed 2019-06-19 06…

---

## [Filebeat send the entire logfile as a single message](https://discuss.elastic.co/t/filebeat-send-the-entire-logfile-as-a-single-message/118265)

<div class="topic-metadata">

**Author:** [@saikrishnagaddipati](https://discuss.elastic.co/u/saikrishnagaddipati)\
**Replies:** 1\
**Last updated:** [February 9, 2018, 1:03pm UTC](https://discuss.elastic.co/t/filebeat-send-the-entire-logfile-as-a-single-message/118265 "2018-02-09T13:03:33Z")

</div>

I am using filebeat-5.6 My config filebeat -\> logstash -\> elasticsearch -\> kibana I have hundreds of log files with 1KB - 2KB data( usually each file has atmost 15 lines of messages in them) in a folder. Is it possible…

---

## [3 Node Sankey Diagram](https://discuss.elastic.co/t/3-node-sankey-diagram/202896)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 4\
**Last updated:** [October 9, 2019, 10:34pm UTC](https://discuss.elastic.co/t/3-node-sankey-diagram/202896 "2019-10-09T22:34:38Z")

</div>

Anybody have a Vega framework or example that would create a 3 (or more) node Sankey diagram? I have the example code from the blog for two nodes but I can't figure out how to fully adapt it to 3 nodes. I've managed to…

---

## [Fleet Server Problems](https://discuss.elastic.co/t/fleet-server-problems/299204)

<div class="topic-metadata">

**Author:** [@janis.cimins](https://discuss.elastic.co/u/janis.cimins)\
**Replies:** 2\
**Last updated:** [March 15, 2022, 12:21pm UTC](https://discuss.elastic.co/t/fleet-server-problems/299204 "2022-03-15T12:21:56Z")

</div>

Hello, I just installed newest Elastic SIEM on my system. All seems fine at this moment. I have filebeat set up on the server etc. But when I try endpoint security then I run into a problem and I get an error that I ca…

---

## [Nested query and ignore\_unmapped option problem](https://discuss.elastic.co/t/nested-query-and-ignore-unmapped-option-problem/70693)

<div class="topic-metadata">

**Author:** [@psu](https://discuss.elastic.co/u/psu)\
**Replies:** 2\
**Last updated:** [January 5, 2017, 10:22pm UTC](https://discuss.elastic.co/t/nested-query-and-ignore-unmapped-option-problem/70693 "2017-01-05T22:22:53Z")

</div>

Hi there I'm trying to make a search query to 2 slightly different indexes simultaneously. One of them contains field of nested type, another does not. So I add 'ignore\_unmapped' option to nested query to avoid excepti…

---

## [Unicast discovery fails to connect to master](https://discuss.elastic.co/t/unicast-discovery-fails-to-connect-to-master/15795)

<div class="topic-metadata">

**Author:** [@Robin\_Verlangen](https://discuss.elastic.co/u/Robin_Verlangen)\
**Replies:** 6\
**Last updated:** [February 14, 2014, 8:10am UTC](https://discuss.elastic.co/t/unicast-discovery-fails-to-connect-to-master/15795 "2014-02-14T08:10:20Z")

</div>

Hi there, We're having issues with a cluster that fails to connect to it's master repeatedly. Please see the logs below: INFO: \[b002.my-cluster.com\] \*failed to send join request to master\* \[\[ b005.my-cluster.com\]…

---

## [NEST syntax for Multi Search queries](https://discuss.elastic.co/t/nest-syntax-for-multi-search-queries/205312)

<div class="topic-metadata">

**Author:** [@han1](https://discuss.elastic.co/u/han1)\
**Replies:** 4\
**Last updated:** [October 28, 2019, 10:29am UTC](https://discuss.elastic.co/t/nest-syntax-for-multi-search-queries/205312 "2019-10-28T10:29:57Z")

</div>

Can anyone assist us with the syntax of how a Multi Search Query is created in NEST 7. (This is getting a pain having to ask for NEST syntax everytime!) Many thanks

---

## [Kibana version 4.1.2 health check](https://discuss.elastic.co/t/kibana-version-4-1-2-health-check/36793)

<div class="topic-metadata">

**Author:** [@thinkdffrnt](https://discuss.elastic.co/u/thinkdffrnt)\
**Replies:** 3\
**Last updated:** [December 10, 2015, 4:24am UTC](https://discuss.elastic.co/t/kibana-version-4-1-2-health-check/36793 "2015-12-10T04:24:05Z")

</div>

I'm new to Kibana and Elastic search, can anyone please tell me how can I health check Kibana version 4.1.2

---

## [ES Memory Breaker Configuration](https://discuss.elastic.co/t/es-memory-breaker-configuration/24834)

<div class="topic-metadata">

**Author:** [@shaman478](https://discuss.elastic.co/u/shaman478)\
**Replies:** 2\
**Last updated:** [July 3, 2015, 7:10am UTC](https://discuss.elastic.co/t/es-memory-breaker-configuration/24834 "2015-07-03T07:10:08Z")

</div>

Hello all, We are running Graylog server v1.01 and Graylog-web-interface v1.01on ES v1.4.4 on SLES 11 SP3 platform, today we logon graylog-web-interface and found HTTP 400 error, the ES logs as below: \[2015-07-03 …

---

## [The new version of the official documentation is too bad to use！](https://discuss.elastic.co/t/the-new-version-of-the-official-documentation-is-too-bad-to-use/313312)

<div class="topic-metadata">

**Author:** [@laoyang360](https://discuss.elastic.co/u/laoyang360)\
**Replies:** 6\
**Last updated:** [August 31, 2022, 5:31pm UTC](https://discuss.elastic.co/t/the-new-version-of-the-official-documentation-is-too-bad-to-use/313312 "2022-08-31T17:31:04Z")

</div>

After the revision of the official Elasticstack documentation, the new drop-down menu bar has become extremely difficult to use. I would like to ask if it is possible to go back to the previous version which is easy to …

---

## [Logstash ECS Compatiblity Issues](https://discuss.elastic.co/t/logstash-ecs-compatiblity-issues/304260)

<div class="topic-metadata">

**Author:** [@teamomni](https://discuss.elastic.co/u/teamomni)\
**Replies:** 5\
**Last updated:** [May 9, 2022, 2:54pm UTC](https://discuss.elastic.co/t/logstash-ecs-compatiblity-issues/304260 "2022-05-09T14:54:16Z")

</div>

We have moved our Logstash indices to data stream recently but are having issues with the geopoints. As a result, the geofencing for everything including the Elastic agents are broken. At first there was the error: Pi…

---

## [Curator delete\_indices fail](https://discuss.elastic.co/t/curator-delete-indices-fail/135365)

<div class="topic-metadata">

**Author:** [@pollux](https://discuss.elastic.co/u/pollux)\
**Replies:** 5\
**Last updated:** [June 12, 2018, 7:53am UTC](https://discuss.elastic.co/t/curator-delete-indices-fail/135365 "2018-06-12T07:53:53Z")

</div>

Hi, I'm aware of this topic: Curator delete\_indices. \<type 'exceptions.KeyError'\>: 'indices' Curator delete\_indices Curator doesn't delete indices I'm using ES 6.2.4 ans curator 5.5.4 My config.yml is: client: ho…

---

## [How to read evtx file from remote server using Winlogbeat](https://discuss.elastic.co/t/how-to-read-evtx-file-from-remote-server-using-winlogbeat/56305)

<div class="topic-metadata">

**Author:** [@yesoreyeram](https://discuss.elastic.co/u/yesoreyeram)\
**Replies:** 1\
**Last updated:** [July 25, 2016, 3:18pm UTC](https://discuss.elastic.co/t/how-to-read-evtx-file-from-remote-server-using-winlogbeat/56305 "2016-07-25T15:18:15Z")

</div>

How to read evtx file from remote server using winlogbeat? I have access to evtx path in the server. But i dont have access to execute winlogbeat agents in the remote server.

---

## [How can we make field optional in elasticsearch?](https://discuss.elastic.co/t/how-can-we-make-field-optional-in-elasticsearch/238419)

<div class="topic-metadata">

**Author:** [@Abdul\_Gaffar\_Shaikh](https://discuss.elastic.co/u/Abdul_Gaffar_Shaikh)\
**Replies:** 3\
**Last updated:** [June 24, 2020, 1:41pm UTC](https://discuss.elastic.co/t/how-can-we-make-field-optional-in-elasticsearch/238419 "2020-06-24T13:41:16Z")

</div>

i am trying to ingested csv file into elasticsearch via logstash and i have a dedicated schema for it. my data gets ingested for date fields where format is not specified and with format specified , it throws that into …

---

## [Using Ingest node Enrich your data with "multiple" match fields](https://discuss.elastic.co/t/using-ingest-node-enrich-your-data-with-multiple-match-fields/211300)

<div class="topic-metadata">

**Author:** [@cho](https://discuss.elastic.co/u/cho)\
**Replies:** 0\
**Last updated:** [December 10, 2019, 12:42pm UTC](https://discuss.elastic.co/t/using-ingest-node-enrich-your-data-with-multiple-match-fields/211300 "2019-12-10T12:42:24Z")

</div>

Hey there. I've been experimenting with the newly added data enrichment funtions in ES 7.5 and came up with the following problem. Let's pretend we have those indices: article\_to\_group { "article\_key": 123456, "a…

---

## [Can't log in kibana as the built-in elastic user](https://discuss.elastic.co/t/cant-log-in-kibana-as-the-built-in-elastic-user/129795)

<div class="topic-metadata">

**Author:** [@panjf2000](https://discuss.elastic.co/u/panjf2000)\
**Replies:** 7\
**Last updated:** [April 27, 2018, 11:42am UTC](https://discuss.elastic.co/t/cant-log-in-kibana-as-the-built-in-elastic-user/129795 "2018-04-27T11:42:25Z")

</div>

Hi all, after installing x-pack on elasticsearch and kibana，i tried to log in kibana as the built-in elastic user and it can enter kibana successfully，however，it turned out i log in as the "kibana" user，how would that ha…

---

## [5.2 Kibana Plugin installation - Optimizations failure](https://discuss.elastic.co/t/5-2-kibana-plugin-installation-optimizations-failure/73845)

<div class="topic-metadata">

**Author:** [@andrew.welburn](https://discuss.elastic.co/u/andrew.welburn)\
**Replies:** 7\
**Last updated:** [February 3, 2017, 8:44pm UTC](https://discuss.elastic.co/t/5-2-kibana-plugin-installation-optimizations-failure/73845 "2017-02-03T20:44:53Z")

</div>

Performing a rolling upgrade from 5.1.2 to 5.2 on Ubuntu 15.10 Installation of ElasticSearch and Kibana seem successful. I've then attempted to install the x-pack plugin for kibana: root@devu1:/usr/share/kibana# bin…

---

## [How to connect Elasticsearch correctly in a Kafka connector?](https://discuss.elastic.co/t/how-to-connect-elasticsearch-correctly-in-a-kafka-connector/290949)

<div class="topic-metadata">

**Author:** [@Hongbo-Miao](https://discuss.elastic.co/u/Hongbo-Miao)\
**Replies:** 2\
**Last updated:** [December 11, 2021, 5:29am UTC](https://discuss.elastic.co/t/how-to-connect-elasticsearch-correctly-in-a-kafka-connector/290949 "2021-12-11T05:29:12Z")

</div>

Step 1 - Deploy Elasticsearch in Kubernetes (succeed) I deployed Elasticsearch in Kubernetes by following the tutorial apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name: hm-elasticsearch…

---

## [Filter to include if value is null or doesn't exist](https://discuss.elastic.co/t/filter-to-include-if-value-is-null-or-doesnt-exist/279203)

<div class="topic-metadata">

**Author:** [@mbrimmer83](https://discuss.elastic.co/u/mbrimmer83)\
**Replies:** 2\
**Last updated:** [July 21, 2021, 3:21pm UTC](https://discuss.elastic.co/t/filter-to-include-if-value-is-null-or-doesnt-exist/279203 "2021-07-21T15:21:53Z")

</div>

I want to filter the document if the field is null or empty. I haven't found a way to do this in AppSearch and don't see it mentioned in the docs. Is there a way to accomplish this? Does AppSearch use the Elastic null\_va…

---

## [HTTP\_Poller Connection Refused from within a Docker contrainer](https://discuss.elastic.co/t/http-poller-connection-refused-from-within-a-docker-contrainer/76767)

<div class="topic-metadata">

**Author:** [@lisadeng](https://discuss.elastic.co/u/lisadeng)\
**Replies:** 4\
**Last updated:** [March 21, 2017, 8:40am UTC](https://discuss.elastic.co/t/http-poller-connection-refused-from-within-a-docker-contrainer/76767 "2017-03-21T08:40:04Z")

</div>

I'm really new to the ELK stack and honestly extremely shaky when it comes to understanding concepts like ports, port forwarding and how they relate to Docker and the ELK stack. I'm currently trying to use HTTP Poller,…

---

## [R & ElasticSearch](https://discuss.elastic.co/t/r-elasticsearch/48737)

<div class="topic-metadata">

**Author:** [@Jeetu\_Choudhary](https://discuss.elastic.co/u/Jeetu_Choudhary)\
**Replies:** 5\
**Last updated:** [March 30, 2017, 8:11am UTC](https://discuss.elastic.co/t/r-elasticsearch/48737 "2017-03-30T08:11:18Z")

</div>

How to connect R with ElasticSearch.

---

## [Exiting: error connecting to Kibana: fail to get the Kibana version:0](https://discuss.elastic.co/t/exiting-error-connecting-to-kibana-fail-to-get-the-kibana-version-0/273734)

<div class="topic-metadata">

**Author:** [@momo1104](https://discuss.elastic.co/u/momo1104)\
**Replies:** 3\
**Last updated:** [May 24, 2021, 2:44pm UTC](https://discuss.elastic.co/t/exiting-error-connecting-to-kibana-fail-to-get-the-kibana-version-0/273734 "2021-05-24T14:44:42Z")

</div>

Hello, i'm a newbie trying to send my second dataset, sitting inside my downloads folder (extracted) to kibana. Filebeat, elasticsearch, kibana are all running locahost:5601 is running filebeat.yml config as follow: (…

---

## [Adding new DATA Node on existing Cluster](https://discuss.elastic.co/t/adding-new-data-node-on-existing-cluster/213592)

<div class="topic-metadata">

**Author:** [@seddikalaouiismaili](https://discuss.elastic.co/u/seddikalaouiismaili)\
**Replies:** 4\
**Last updated:** [January 10, 2020, 10:29am UTC](https://discuss.elastic.co/t/adding-new-data-node-on-existing-cluster/213592 "2020-01-10T10:29:33Z")

</div>

Hello Team, I would like to new data node on my existing elk cluster .. Did you know what is the best practices for this pls ? actualy i have two node on my cluster Regards sai

---

## [Telnet 192.168.112.199 9200 connection refused](https://discuss.elastic.co/t/telnet-192-168-112-199-9200-connection-refused/95900)

<div class="topic-metadata">

**Author:** [@Joe\_Yang](https://discuss.elastic.co/u/Joe_Yang)\
**Replies:** 4\
**Last updated:** [August 7, 2017, 5:26am UTC](https://discuss.elastic.co/t/telnet-192-168-112-199-9200-connection-refused/95900 "2017-08-07T05:26:12Z")

</div>

we’d like to collect IIS log on windows windows, logstash and elasticesearch both installed on Linux(192.168.112.199), the following command failed on windows: telnet 192.168.112.199 9200 -\> connection refused ./fileb…

---

## [Is it good to implement ELK Stack without Elastic Search?](https://discuss.elastic.co/t/is-it-good-to-implement-elk-stack-without-elastic-search/121124)

<div class="topic-metadata">

**Author:** [@Tomly](https://discuss.elastic.co/u/Tomly)\
**Replies:** 2\
**Last updated:** [February 23, 2018, 1:17pm UTC](https://discuss.elastic.co/t/is-it-good-to-implement-elk-stack-without-elastic-search/121124 "2018-02-23T13:17:02Z")

</div>

Hello. I need to setup a service showing logs from 10+ domains. I would like to filter the log data by a domain and the data range. It would be nice to setup user accounts (user A can access logs from a domain A', user B…

---

## [Packetbeat, af\_packet and Linux 2.6](https://discuss.elastic.co/t/packetbeat-af-packet-and-linux-2-6/94640)

<div class="topic-metadata">

**Author:** [@KBuev](https://discuss.elastic.co/u/KBuev)\
**Replies:** 7\
**Last updated:** [July 31, 2017, 6:46am UTC](https://discuss.elastic.co/t/packetbeat-af-packet-and-linux-2-6/94640 "2017-07-31T06:46:20Z")

</div>

Hi, everyone. I'm having some trouble trying to setup Packetbeat on a Linux VM with RHEL 6.7 (Linux 2.6.32). If I use the following settings: packetbeat.interfaces.device: any packetbeat.interfaces.type: af\_packet …

---

## [What are the allowed characters in field names?](https://discuss.elastic.co/t/what-are-the-allowed-characters-in-field-names/5621)

<div class="topic-metadata">

**Author:** [@datadev](https://discuss.elastic.co/u/datadev)\
**Replies:** 2\
**Last updated:** [October 18, 2011, 5:45pm UTC](https://discuss.elastic.co/t/what-are-the-allowed-characters-in-field-names/5621 "2011-10-18T17:45:59Z")

</div>

What are the allowed characters in field names? Specifically, are hyphens allowed in field names? I currently have a term facet that has a 'script' attribute being "term + 'aaa' + \_source.foo-bar" and I am getting the…

---

## [Security\_exeption Xpack](https://discuss.elastic.co/t/security-exeption-xpack/93140)

<div class="topic-metadata">

**Author:** [@Hampel](https://discuss.elastic.co/u/Hampel)\
**Replies:** 3\
**Last updated:** [July 18, 2017, 10:28am UTC](https://discuss.elastic.co/t/security-exeption-xpack/93140 "2017-07-18T10:28:51Z")

</div>

Hey guys, i have successfully installed an elk stack with the sec pack "x-pack". Further i created 1 user with the roles kibana\_user and events\_admin. The kibana\_user ist default and the events\_admin has: Cluster Priv:…

---

## [Periodic spikes in disk read IO leading to degraded performance](https://discuss.elastic.co/t/periodic-spikes-in-disk-read-io-leading-to-degraded-performance/100753)

<div class="topic-metadata">

**Author:** [@Dan\_Markhasin](https://discuss.elastic.co/u/Dan_Markhasin)\
**Replies:** 5\
**Last updated:** [October 17, 2017, 5:01pm UTC](https://discuss.elastic.co/t/periodic-spikes-in-disk-read-io-leading-to-degraded-performance/100753 "2017-10-17T17:01:31Z")

</div>

We are seeing a strange issue on one of our clusters where every several hours the read IOPS on some of the data nodes spike, causing a lot of iowait and degraded indexing performance. This can persist for several hours,…

---

## [Max latency between nodes](https://discuss.elastic.co/t/max-latency-between-nodes/17115)

<div class="topic-metadata">

**Author:** [@skik2skis](https://discuss.elastic.co/u/skik2skis)\
**Replies:** 5\
**Last updated:** [May 30, 2014, 3:44pm UTC](https://discuss.elastic.co/t/max-latency-between-nodes/17115 "2014-05-30T15:44:54Z")

</div>

I currently have an elasticsearch cluster with 7 nodes. Some of the connectivity between nodes is across fiber with 2 - 3ms latency between nodes. About once a day we see a node drop from the cluster, a new master …

---

## [SSL errors remaining after upgrade to 7.5.0](https://discuss.elastic.co/t/ssl-errors-remaining-after-upgrade-to-7-5-0/212520)

<div class="topic-metadata">

**Author:** [@happycampo](https://discuss.elastic.co/u/happycampo)\
**Replies:** 1\
**Last updated:** [December 20, 2019, 5:31am UTC](https://discuss.elastic.co/t/ssl-errors-remaining-after-upgrade-to-7-5-0/212520 "2019-12-20T05:31:28Z")

</div>

I'm getting the following error upon startup and I'm not sure how to get rid of them. Any quick thoughts? elasticsearch\_1 | {"type": "server", "timestamp": "2019-12-19T15:44:31,574Z", "level": "WARN", "component": "o.…

---

## [Most efficient way to get all ids of a type](https://discuss.elastic.co/t/most-efficient-way-to-get-all-ids-of-a-type/47111)

<div class="topic-metadata">

**Author:** [@living\_jordi](https://discuss.elastic.co/u/living_jordi)\
**Replies:** 2\
**Last updated:** [April 12, 2016, 11:35am UTC](https://discuss.elastic.co/t/most-efficient-way-to-get-all-ids-of-a-type/47111 "2016-04-12T11:35:29Z")

</div>

What's the best way in order to get all ids of a type using Java API? Thanks.

---

## [Simple Word Cloud from Elasticsearch](https://discuss.elastic.co/t/simple-word-cloud-from-elasticsearch/40889)

<div class="topic-metadata">

**Author:** [@LeeSyd](https://discuss.elastic.co/u/LeeSyd)\
**Replies:** 2\
**Last updated:** [February 15, 2016, 10:09am UTC](https://discuss.elastic.co/t/simple-word-cloud-from-elasticsearch/40889 "2016-02-15T10:09:03Z")

</div>

Hi all, I have data coming in to Elasticsearch from our Helpdesk system and would like to create a couple of word clouds, one just on occurrences of terms to show most frequent incidents/applications and one on signifi…

---

## [Communicating with ECK using your own certs results in a certificate error](https://discuss.elastic.co/t/communicating-with-eck-using-your-own-certs-results-in-a-certificate-error/224710)

<div class="topic-metadata">

**Author:** [@doctor](https://discuss.elastic.co/u/doctor)\
**Replies:** 6\
**Last updated:** [April 20, 2020, 10:38am UTC](https://discuss.elastic.co/t/communicating-with-eck-using-your-own-certs-results-in-a-certificate-error/224710 "2020-04-20T10:38:10Z")

</div>

Hey, I'm following the tutorial teaching how to set your own certificates. I installed the cert manager who created the quickstart-es-cert secret for me. $ k describe secret quickstart-es-cert Name: quickstart…

---

## [Installation on Windows server](https://discuss.elastic.co/t/installation-on-windows-server/97010)

<div class="topic-metadata">

**Author:** [@Karthikeyan\_Krishnam](https://discuss.elastic.co/u/Karthikeyan_Krishnam)\
**Replies:** 3\
**Last updated:** [August 24, 2017, 7:07am UTC](https://discuss.elastic.co/t/installation-on-windows-server/97010 "2017-08-24T07:07:28Z")

</div>

Security policy on the Windows server 2012 is not allowing the Metricbeat to be installed as a service. We could alter execution policy to “Bypass” for Process and Localmachine but could not alter for other process. aft…

---

## [CRIT Exiting: No prospectors defined. What files do you want me to watch?](https://discuss.elastic.co/t/crit-exiting-no-prospectors-defined-what-files-do-you-want-me-to-watch/95728)

<div class="topic-metadata">

**Author:** [@hasan\_sharekhan](https://discuss.elastic.co/u/hasan_sharekhan)\
**Replies:** 3\
**Last updated:** [August 4, 2017, 6:27am UTC](https://discuss.elastic.co/t/crit-exiting-no-prospectors-defined-what-files-do-you-want-me-to-watch/95728 "2017-08-04T06:27:39Z")

</div>

I am having problem with regular expression not working in filebeat 5.5 filebeat.prospectors: - input\_type: log paths: - D:\\uat\\beats\\filebeat550\\input\_logs\\tt\_tradingserver\\\* #use regular expression exclude…

---

## [Monitoring ElasticSearch Performance](https://discuss.elastic.co/t/monitoring-elasticsearch-performance/33895)

<div class="topic-metadata">

**Author:** [@cterron](https://discuss.elastic.co/u/cterron)\
**Replies:** 1\
**Last updated:** [November 6, 2015, 3:23pm UTC](https://discuss.elastic.co/t/monitoring-elasticsearch-performance/33895 "2015-11-06T15:23:47Z")

</div>

I have trying to monitor how different configuration variables and hardware change the performance of a Elasticsearch cluster. I have read documentation about the indeces stats. If I understand the documentation correctl…

---

## [Simple PHP curl script to help you learn ES](https://discuss.elastic.co/t/simple-php-curl-script-to-help-you-learn-es/6880)

<div class="topic-metadata">

**Author:** [@stratawing](https://discuss.elastic.co/u/stratawing)\
**Replies:** 2\
**Last updated:** [March 5, 2012, 3:08pm UTC](https://discuss.elastic.co/t/simple-php-curl-script-to-help-you-learn-es/6880 "2012-03-05T15:08:43Z")

</div>

If your lang is PHP, and you're just getting started with ES and want to test some of its features using the CURLs that are shown on the website (typically in json), here's a \*VERY\* simple PHP curl script to help you …

---

## [What is the best way of visualizing SonarQube analysis from Elasticsearch using Kibana?](https://discuss.elastic.co/t/what-is-the-best-way-of-visualizing-sonarqube-analysis-from-elasticsearch-using-kibana/192606)

<div class="topic-metadata">

**Author:** [@berko](https://discuss.elastic.co/u/berko)\
**Replies:** 4\
**Last updated:** [August 21, 2019, 2:29pm UTC](https://discuss.elastic.co/t/what-is-the-best-way-of-visualizing-sonarqube-analysis-from-elasticsearch-using-kibana/192606 "2019-08-21T14:29:52Z")

</div>

Hi, I'm trying to visualize SonarQube analysis results. However, I couldn't figure out which configurations to follow. SonarQube version is 7.9 I found this https://discuss.elastic.co/t/elk-sonarqube/127732 discussion …

---

## [Last\_run\_metadata\_path not updating](https://discuss.elastic.co/t/last-run-metadata-path-not-updating/139596)

<div class="topic-metadata">

**Author:** [@Sunil\_Khullar](https://discuss.elastic.co/u/Sunil_Khullar)\
**Replies:** 4\
**Last updated:** [July 12, 2018, 8:57am UTC](https://discuss.elastic.co/t/last-run-metadata-path-not-updating/139596 "2018-07-12T08:57:18Z")

</div>

First day with logstash (so excuse stupid posts) (using version 6.2.3 on Windows server) Importing from Mysql - facing 2 issues last\_run\_metadata\_path not updating , remains 0 after every query (though the file time…

---

## [How Kibana Tile Maps works for Tile Map?](https://discuss.elastic.co/t/how-kibana-tile-maps-works-for-tile-map/52707)

<div class="topic-metadata">

**Author:** [@sandeep.kumar](https://discuss.elastic.co/u/sandeep.kumar)\
**Replies:** 7\
**Last updated:** [June 28, 2016, 8:53am UTC](https://discuss.elastic.co/t/how-kibana-tile-maps-works-for-tile-map/52707 "2016-06-28T08:53:11Z")

</div>

Hi, We want to know about how kibana tile Map works for a lots of geopoints. It drwaing points on the basis of zoom level . Looks like doing clustering of the points. May i know the concept behind this? Thanks Sandee…

---

## [Cascaded querying in ElasticSearch](https://discuss.elastic.co/t/cascaded-querying-in-elasticsearch/83931)

<div class="topic-metadata">

**Author:** [@Rory](https://discuss.elastic.co/u/Rory)\
**Replies:** 4\
**Last updated:** [May 5, 2017, 8:51pm UTC](https://discuss.elastic.co/t/cascaded-querying-in-elasticsearch/83931 "2017-05-05T20:51:38Z")

</div>

I am not a hundred percent sure what the title for this question should be. But here goes, I have some data which looks like this: There are 3 columns; ID, Name, FavoriteSoccerPlayer I can write a query to return al…

---

## [Failed to get node info error messages](https://discuss.elastic.co/t/failed-to-get-node-info-error-messages/26300)

<div class="topic-metadata">

**Author:** [@drippel](https://discuss.elastic.co/u/drippel)\
**Replies:** 2\
**Last updated:** [July 28, 2015, 6:49am UTC](https://discuss.elastic.co/t/failed-to-get-node-info-error-messages/26300 "2015-07-28T06:49:15Z")

</div>

We use ES 1.6.0. The system is composed of 35 indices, each with 5 shards and 1 replica. We get many error messages on the TransportClient log file like this: \[INFO \] \[2015-07-22 11:48:11.611\] o.e.c.transport …

---

## [Shard allocation on restarted node takes too long](https://discuss.elastic.co/t/shard-allocation-on-restarted-node-takes-too-long/63045)

<div class="topic-metadata">

**Author:** [@anishm](https://discuss.elastic.co/u/anishm)\
**Replies:** 4\
**Last updated:** [October 17, 2016, 7:10am UTC](https://discuss.elastic.co/t/shard-allocation-on-restarted-node-takes-too-long/63045 "2016-10-17T07:10:15Z")

</div>

We followed the tutorial for rolling restarts in Elasticsearch documentation: 1. stop shard allocation 2. bring the node down 3. perform maintenance 4. start the node again 5. wait for node to join the cluster 6. enable…

---

## [🎉 Elastic Stack 6.4.0 released](https://discuss.elastic.co/t/elastic-stack-6-4-0-released/145792)

<div class="topic-metadata">

**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\
**Replies:** 0\
**Last updated:** [August 23, 2018, 7:35pm UTC](https://discuss.elastic.co/t/elastic-stack-6-4-0-released/145792 "2018-08-23T19:35:55Z")

</div>

Elastic Stack 6.4.0 released Hi all, We’ve just released version 6.4.0 of the Elastic Stack. Try the new Korean “Nori” Analyzer in Elasticsearch, test the Azure module for Logstash, and use sample data in Kibana to try…

---

## [Multi-tenancy in Kibana](https://discuss.elastic.co/t/multi-tenancy-in-kibana/137904)

<div class="topic-metadata">

**Author:** [@fazil\_b](https://discuss.elastic.co/u/fazil_b)\
**Replies:** 2\
**Last updated:** [July 3, 2018, 10:23am UTC](https://discuss.elastic.co/t/multi-tenancy-in-kibana/137904 "2018-07-03T10:23:54Z")

</div>

Hi, According to the above forum, ELK Stack should be multi-tenant from Version 6. But, I don't think it is yet. Could you explain me when this feature will be released and what's the current status of it ? We are in …

---

## [Too large data for \_id](https://discuss.elastic.co/t/too-large-data-for-id/179500)

<div class="topic-metadata">

**Author:** [@Trucke](https://discuss.elastic.co/u/Trucke)\
**Replies:** 3\
**Last updated:** [May 15, 2019, 5:55pm UTC](https://discuss.elastic.co/t/too-large-data-for-id/179500 "2019-05-15T17:55:17Z")

</div>

Hey Guys, I'm developing my own centralized log management and using Elasticsearch with daily indices which matches my claims perfectly, so far. Now i have a problem on my search queries due to the amount of data and th…

---

## [How can I create index pattern from console?](https://discuss.elastic.co/t/how-can-i-create-index-pattern-from-console/162399)

<div class="topic-metadata">

**Author:** [@Russ91](https://discuss.elastic.co/u/Russ91)\
**Replies:** 1\
**Last updated:** [January 7, 2019, 2:57pm UTC](https://discuss.elastic.co/t/how-can-i-create-index-pattern-from-console/162399 "2019-01-07T14:57:21Z")

</div>

Hi. I try create new index pattern in Kibana 5.6 from console. curl -XPOST -u AdminUser "http://URL:PORT/.kibana/doc/index-pattern:NEW-index-pattern-" -H 'Content-Type: application/json' -d' { "type" : "index-pattern"…

[Previous page](https://discuss.elastic.co/top.md?page=506&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=508&per_page=50&period=all)
