# Top **URL:** https://discuss.elastic.co/top.md?page=508&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 509 --- ## [Custom Tokenizer won't uninstall](https://discuss.elastic.co/t/custom-tokenizer-wont-uninstall/44069)
**Author:** [@ralphlevan](https://discuss.elastic.co/u/ralphlevan)\ **Replies:** 7\ **Last updated:** [March 11, 2016, 9:07pm UTC](https://discuss.elastic.co/t/custom-tokenizer-wont-uninstall/44069 "2016-03-11T21:07:07Z")
I'm trying to write a tokenizer. I installed it and ran into problems. I've uninstalled (removed) it and restarted all my nodes and can find no remains of it on my nodes. But, when I try to create a new index I get an… --- ## [Missing geoip.location](https://discuss.elastic.co/t/missing-geoip-location/241004)
**Author:** [@brapnda23](https://discuss.elastic.co/u/brapnda23)\ **Replies:** 8\ **Last updated:** [July 15, 2020, 11:11pm UTC](https://discuss.elastic.co/t/missing-geoip-location/241004 "2020-07-15T23:11:54Z")
New to ELK...My test ELK instance is 7.8.x. I am using the below filter code for IIS Logs and it is working fine. I can see other geo fields but I don't see geoip.location as mentioned in https://www.elastic.co/blog/geo… --- ## [How to extract json out of an event?](https://discuss.elastic.co/t/how-to-extract-json-out-of-an-event/134684)
**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\ **Replies:** 8\ **Last updated:** [June 14, 2018, 4:28pm UTC](https://discuss.elastic.co/t/how-to-extract-json-out-of-an-event/134684 "2018-06-14T16:28:27Z")
Hi, Here is my sample event, \<6\>Jun 5 12:12:45 172.25.29.92 doppler\[10\]: time="2018-06-05T16:12:46Z" level=info msg="{ "Level": "Info", "Timestamp": "2018-06-05 14:12:45.1195", "Message": "sample message" } " app\_id=44… --- ## [How to properly upgrade plugins when upgrading Elasticsearch?](https://discuss.elastic.co/t/how-to-properly-upgrade-plugins-when-upgrading-elasticsearch/105772)
**Author:** [@Jeremy\_Lecour](https://discuss.elastic.co/u/Jeremy_Lecour)\ **Replies:** 2\ **Last updated:** [November 3, 2017, 10:33am UTC](https://discuss.elastic.co/t/how-to-properly-upgrade-plugins-when-upgrading-elasticsearch/105772 "2017-11-03T10:33:25Z")
Hi, I've recently upgraded a single Elasticsearch node from 5.6.2 to 5.6.3 and it refused to start because the "analysis-phonetic" plugin also needed to be upgraded. I maintain my system up-to-date with Debian reposito… --- ## [Ignore term frequency (not releveant for the type of document I'm using)](https://discuss.elastic.co/t/ignore-term-frequency-not-releveant-for-the-type-of-document-im-using/12946)
**Author:** [@cgendreau](https://discuss.elastic.co/u/cgendreau)\ **Replies:** 4\ **Last updated:** [July 26, 2013, 6:54pm UTC](https://discuss.elastic.co/t/ignore-term-frequency-not-releveant-for-the-type-of-document-im-using/12946 "2013-07-26T18:54:49Z")
Hi, How do I get ES to ignore the term frequency since it is not releveant for the type of document I'm using? I'm using two ES types to handle two kind of data that need different analyzers. I'm trying to que… --- ## [Apply Fuzziness on multiple terms in a not\_analyzed field](https://discuss.elastic.co/t/apply-fuzziness-on-multiple-terms-in-a-not-analyzed-field/79798)
**Author:** [@raj.shah1593](https://discuss.elastic.co/u/raj.shah1593)\ **Replies:** 6\ **Last updated:** [March 27, 2017, 12:09pm UTC](https://discuss.elastic.co/t/apply-fuzziness-on-multiple-terms-in-a-not-analyzed-field/79798 "2017-03-27T12:09:39Z")
Hello, I have a not\_analyzed field on which I want to perform terms query by searching for multiple terms (values) on a single field with fuzziness. For e.g. search ("donald","trump","president") on a not\_analyzed fi… --- ## [By passing the login page in the embedded Iframe](https://discuss.elastic.co/t/by-passing-the-login-page-in-the-embedded-iframe/141453)
**Author:** [@RajiReddy](https://discuss.elastic.co/u/RajiReddy)\ **Replies:** 3\ **Last updated:** [July 26, 2018, 11:53pm UTC](https://discuss.elastic.co/t/by-passing-the-login-page-in-the-embedded-iframe/141453 "2018-07-26T23:53:41Z")
I am trying to embed an iframe in my web application. I don't want to show login screen to my user So I tried to make an ajax call using below code. $(document).ready(function(){ $.ajax({ type: "PUT… --- ## [Restart of elasticsearch nodes](https://discuss.elastic.co/t/restart-of-elasticsearch-nodes/78341)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 3\ **Last updated:** [March 14, 2017, 11:47am UTC](https://discuss.elastic.co/t/restart-of-elasticsearch-nodes/78341 "2017-03-14T11:47:38Z")
HI, I want to upgrade memory of ES nodes in the cluster. I am having 3 nodes cluster, Node-1 is master+data, and Node-2 and Node-3 are only data node. I was referring the instruction given at https://www.elastic.co/guid… --- ## [Basic HA/Failover Setup](https://discuss.elastic.co/t/basic-ha-failover-setup/198567)
**Author:** [@revglen](https://discuss.elastic.co/u/revglen)\ **Replies:** 5\ **Last updated:** [September 8, 2019, 8:58pm UTC](https://discuss.elastic.co/t/basic-ha-failover-setup/198567 "2019-09-08T20:58:46Z")
Hi All, I am looking for the basic configuration for HA/Failover. I have 2 clusters. The first cluster consists of separate coordinating and master/data nodes running in 2 processes in one system while in the 2nd cluste… --- ## [Mac Address type](https://discuss.elastic.co/t/mac-address-type/29551)
**Author:** [@Rohit\_Raj](https://discuss.elastic.co/u/Rohit_Raj)\ **Replies:** 3\ **Last updated:** [September 18, 2015, 11:19am UTC](https://discuss.elastic.co/t/mac-address-type/29551 "2015-09-18T11:19:45Z")
Is there a type for mapping Mac Address in elasticsearch? Like for IP address we have ip type so how should Mac Address be mapped? --- ## [Post ingest, how can I generate lat long fields into geo point](https://discuss.elastic.co/t/post-ingest-how-can-i-generate-lat-long-fields-into-geo-point/243796)
**Author:** [@brasspuma](https://discuss.elastic.co/u/brasspuma)\ **Replies:** 3\ **Last updated:** [August 5, 2020, 9:16pm UTC](https://discuss.elastic.co/t/post-ingest-how-can-i-generate-lat-long-fields-into-geo-point/243796 "2020-08-05T21:16:12Z")
I've ingested CSV data via Apache NiFi and posted to Elasticsearch. I've come to realize that there are "lat" and "lon" values in my index. My index is already in the 10's of millions of records. \`{"name":"Sam", "lat": … --- ## [Docker Logstash initialisation error](https://discuss.elastic.co/t/docker-logstash-initialisation-error/75972)
**Author:** [@pravinnair](https://discuss.elastic.co/u/pravinnair)\ **Replies:** 5\ **Last updated:** [February 23, 2017, 12:50am UTC](https://discuss.elastic.co/t/docker-logstash-initialisation-error/75972 "2017-02-23T00:50:47Z")
Hi I recive this error in logstash when i try to start it. This stops the poller.Any help or input can help. \[pool-2-thread-1\] DEBUG logstash.instrument.periodicpoller.cgroup - Error, cannot retrieve cgroups informa… --- ## [Logstash Elasticsearch Connection Refused](https://discuss.elastic.co/t/logstash-elasticsearch-connection-refused/99680)
**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\ **Replies:** 8\ **Last updated:** [September 8, 2017, 4:57am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-connection-refused/99680 "2017-09-08T04:57:34Z")
I have 2 machine with both have logstash. When I try to connect to Elasticsearch, it results to Connection Refused in next couple of minutes. I also tried to open 2 ports in and port forward it to my es, but still the … --- ## [Logstash Configuration Error -\*\*Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, =\> at line 14](https://discuss.elastic.co/t/logstash-configuration-error-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror-message-expected-one-of-at-line-14/135717)
**Author:** [@priya1](https://discuss.elastic.co/u/priya1)\ **Replies:** 2\ **Last updated:** [June 13, 2018, 1:39pm UTC](https://discuss.elastic.co/t/logstash-configuration-error-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror-message-expected-one-of-at-line-14/135717 "2018-06-13T13:39:51Z")
Hi Team, Please find the details below, Code : input{ file { path =\> "C:\\Users\\priya\_shukla\\Desktop\\SAPLogsERR\\test2.log" start\_position =\> "beginning" sincedb\_path =\> "C:\\Users\\priya\_shukla\\Downloads\\logstash-6.2.… --- ## [Filtering Nested Child Objects](https://discuss.elastic.co/t/filtering-nested-child-objects/258791)
**Author:** [@mgncl](https://discuss.elastic.co/u/mgncl)\ **Replies:** 5\ **Last updated:** [December 17, 2020, 7:16pm UTC](https://discuss.elastic.co/t/filtering-nested-child-objects/258791 "2020-12-17T19:16:21Z")
I am trying to fine tune the query on a nested collection. The nested collection should match all the criteria and the size of the collection. I created a sample data set to the mimic my use case. Index { "map… --- ## [The effective way to update elasticsearch.yml](https://discuss.elastic.co/t/the-effective-way-to-update-elasticsearch-yml/22251)
**Author:** [@Xiaolin\_Xie](https://discuss.elastic.co/u/Xiaolin_Xie)\ **Replies:** 5\ **Last updated:** [February 19, 2015, 5:10am UTC](https://discuss.elastic.co/t/the-effective-way-to-update-elasticsearch-yml/22251 "2015-02-19T05:10:30Z")
Hi ES guys I am a n00b to elasticsearch. We have a cluster of ES nodes(24 hosts). I need to enable the "http.compression" to for this cluster. Do I have to manually edit the elasticsearch.yml file in each host and… --- ## [Unable to output JSON http messages with new lines](https://discuss.elastic.co/t/unable-to-output-json-http-messages-with-new-lines/55291)
**Author:** [@raffaele](https://discuss.elastic.co/u/raffaele)\ **Replies:** 3\ **Last updated:** [August 30, 2016, 6:05am UTC](https://discuss.elastic.co/t/unable-to-output-json-http-messages-with-new-lines/55291 "2016-08-30T06:05:07Z")
Hi there I am struggling getting Logstash to insert new lines in JSON http output messages. Configuring Logstash to send out http messages (output-http plugin) works however, putting a new line into the mapping text wi… --- ## [Поиск русских слов не работает](https://discuss.elastic.co/t/topic/109816)
**Author:** [@Petr\_Sklyarov](https://discuss.elastic.co/u/Petr_Sklyarov)\ **Replies:** 7\ **Last updated:** [December 15, 2017, 4:22pm UTC](https://discuss.elastic.co/t/topic/109816 "2017-12-15T16:22:09Z")
Добрый день! Установил эластиксерч версия 5.6 Плагин морфологический GitHub - imotov/elasticsearch-analysis-morphology: Morphological Analysis Plugin for ElasticSearch (No longer maintained) Использую elasticsearch p… --- ## [Error reinstalling ElasticSearch with msi](https://discuss.elastic.co/t/error-reinstalling-elasticsearch-with-msi/191531)
**Author:** [@GustavoAngelo](https://discuss.elastic.co/u/GustavoAngelo)\ **Replies:** 5\ **Last updated:** [July 23, 2019, 12:42am UTC](https://discuss.elastic.co/t/error-reinstalling-elasticsearch-with-msi/191531 "2019-07-23T00:42:50Z")
Hi, I uninstalled ES 7.2.0 for installing in other partition of my drive. When i try to reinstall, it pop-ups this error: An ES\_HOME environment variable exist but no previous installation was detected. The MSI does … --- ## [Auditbeat system module fails to start](https://discuss.elastic.co/t/auditbeat-system-module-fails-to-start/173582)
**Author:** [@Owdaan](https://discuss.elastic.co/u/Owdaan)\ **Replies:** 5\ **Last updated:** [April 2, 2019, 3:22pm UTC](https://discuss.elastic.co/t/auditbeat-system-module-fails-to-start/173582 "2019-04-02T15:22:24Z")
I'm trying to get system module of Auditbeat to work with no success. When I start Auditbeat it throws an error: 2019-03-23T09:05:16.523+0100 ERROR instance/beat.go:911 Exiting: 1 error: no metricsets configured for mod… --- ## [Template not being applied to elasticsearch output](https://discuss.elastic.co/t/template-not-being-applied-to-elasticsearch-output/47308)
**Author:** [@nocode](https://discuss.elastic.co/u/nocode)\ **Replies:** 5\ **Last updated:** [April 14, 2016, 5:16pm UTC](https://discuss.elastic.co/t/template-not-being-applied-to-elasticsearch-output/47308 "2016-04-14T17:16:36Z")
In Nginx, I've converted my log\_format to json and sending the logs via Filebeat to logstash. I'm trying to set some of my fields to not\_analyzed but nothing I'm doing is working. Almost all the fields from nginx logs … --- ## [Copy Indices to new Server](https://discuss.elastic.co/t/copy-indices-to-new-server/19573)
**Author:** [@Andrew\_Lakes](https://discuss.elastic.co/u/Andrew_Lakes)\ **Replies:** 6\ **Last updated:** [September 3, 2014, 11:06am UTC](https://discuss.elastic.co/t/copy-indices-to-new-server/19573 "2014-09-03T11:06:36Z")
Hey guys, we have set up a new physical ES-server in order to get more ressources for our ELK-Stack. On our old server we got about 1.8 TB/ 127 Indices which have to be available on the new server. So we cop… --- ## [Elasticsearch-7.9.2-amd64.deb exit status 78](https://discuss.elastic.co/t/elasticsearch-7-9-2-amd64-deb-exit-status-78/277717)
**Author:** [@Sayantan\_Chakraborty](https://discuss.elastic.co/u/Sayantan_Chakraborty)\ **Replies:** 8\ **Last updated:** [July 4, 2021, 1:29pm UTC](https://discuss.elastic.co/t/elasticsearch-7-9-2-amd64-deb-exit-status-78/277717 "2021-07-04T13:29:29Z")
hi, i am facing a few issues for the Magento2.4.x installation. The process' exit code is 'exited' and its exit status is 78. Jul 04 02:12:40 somehost systemd\[1\]: elasticsearch.service: Failed with result\> -- Subject: U… --- ## [Forward logs from logging-and-metrics cluster to external log system](https://discuss.elastic.co/t/forward-logs-from-logging-and-metrics-cluster-to-external-log-system/151531)
**Author:** [@gautu7](https://discuss.elastic.co/u/gautu7)\ **Replies:** 8\ **Last updated:** [October 11, 2018, 2:23pm UTC](https://discuss.elastic.co/t/forward-logs-from-logging-and-metrics-cluster-to-external-log-system/151531 "2018-10-11T14:23:30Z")
In our ECE environment, the logs are being indexed into a logging-and-metrics cluster. How does this work behind the scenes? Is there a Filebeat which is collecting the logs from the Elasticsearch cluster and forwarding … --- ## [Kvpairs where one of the values is a JSON structure](https://discuss.elastic.co/t/kvpairs-where-one-of-the-values-is-a-json-structure/27980)
**Author:** [@robynkoz](https://discuss.elastic.co/u/robynkoz)\ **Replies:** 8\ **Last updated:** [August 25, 2015, 6:23am UTC](https://discuss.elastic.co/t/kvpairs-where-one-of-the-values-is-a-json-structure/27980 "2015-08-25T06:23:45Z")
I have a log that I am parsing using grok and kv: filter { grok { match =\> {"message" =\> "msg=%{WORD:action} %{GREEDYDATA:kvpairs}" } } kv { source =\> "kvpairs" remove\_field =\> \["kvpairs"\] } } One … --- ## [1.7.1 RPM warns "post remove script called with unknown argument"](https://discuss.elastic.co/t/1-7-1-rpm-warns-post-remove-script-called-with-unknown-argument/26693)
**Author:** [@loren](https://discuss.elastic.co/u/loren)\ **Replies:** 4\ **Last updated:** [August 3, 2015, 6:39pm UTC](https://discuss.elastic.co/t/1-7-1-rpm-warns-post-remove-script-called-with-unknown-argument/26693 "2015-08-03T18:39:13Z")
I'm running into this warning installing 1.7.1 via RPM. The RPM appears to have installed $ ESVERSION=1.7.1 $ package=elasticsearch-$ESVERSION.noarch.rpm && wget https://download.elasticsearch.org/elasticsearch/elast… --- ## [Why is this scripted metric aggregation query not working?](https://discuss.elastic.co/t/why-is-this-scripted-metric-aggregation-query-not-working/130048)
**Author:** [@elasticuser1](https://discuss.elastic.co/u/elasticuser1)\ **Replies:** 5\ **Last updated:** [May 2, 2018, 10:53pm UTC](https://discuss.elastic.co/t/why-is-this-scripted-metric-aggregation-query-not-working/130048 "2018-05-02T22:53:53Z")
PUT /ledger/\_doc/1 { "type":"sale" } PUT /ledgeramt/\_doc/1 { "amount":1000 } POST /ledger,ledgeramt/\_search?size=0 { "query" : { "match\_all" : {} }, "aggs": { "profit": { "scripted\_metric": { "init\_scrip… --- ## [Filebeat not sending logs to Elasticsearch](https://discuss.elastic.co/t/filebeat-not-sending-logs-to-elasticsearch/52925)
**Author:** [@keya](https://discuss.elastic.co/u/keya)\ **Replies:** 4\ **Last updated:** [June 17, 2016, 3:19pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-logs-to-elasticsearch/52925 "2016-06-17T15:19:17Z")
Hi, I am new to Filebeat and cannot get the logs to reach Elasticsearch. I have Filebeat and Elasticsearch on the same Ubuntu instance. Below is a snapshot from the filebeat logs: 2016-06-15T14:38:00-07:00 DBG Disab… --- ## [\[Solved\] Possible bug? filebeat multiline regexp](https://discuss.elastic.co/t/solved-possible-bug-filebeat-multiline-regexp/40953)
**Author:** [@mikula](https://discuss.elastic.co/u/mikula)\ **Replies:** 7\ **Last updated:** [February 12, 2016, 5:04pm UTC](https://discuss.elastic.co/t/solved-possible-bug-filebeat-multiline-regexp/40953 "2016-02-12T17:04:18Z")
Hi again, I have possible bug in filebeat multiline regexp pattern matching. "^\\\[?\[0-9\]\[0-9\]:?\[0-9\]\[0-9\]|^\[\[:graph:\]\]+" (note quotes) Fails with unknown escape character But: ^\\\[?\[0-9\]\[0-9\]:?\[0-9\]\[0-9\]|^\[\[:graph:\]\]+ work… --- ## [Grok for string not followed by a second string combination](https://discuss.elastic.co/t/grok-for-string-not-followed-by-a-second-string-combination/102425)
**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\ **Replies:** 8\ **Last updated:** [October 4, 2017, 7:47am UTC](https://discuss.elastic.co/t/grok-for-string-not-followed-by-a-second-string-combination/102425 "2017-10-04T07:47:25Z")
Hi All, Apologies if this has been asked before but I couldn't find a similar question in the forum. I have the following log file line entry: Tue Apr 05 16:31:39 2016 1 10.102.180.12 37088 d:\\directory\\Excel filenam… --- ## [How to use grok to filter some fields in message in logstash, skip the unnecessary, only filter the specified](https://discuss.elastic.co/t/how-to-use-grok-to-filter-some-fields-in-message-in-logstash-skip-the-unnecessary-only-filter-the-specified/142754)
**Author:** [@sun\_changlong](https://discuss.elastic.co/u/sun_changlong)\ **Replies:** 5\ **Last updated:** [August 3, 2018, 3:54am UTC](https://discuss.elastic.co/t/how-to-use-grok-to-filter-some-fields-in-message-in-logstash-skip-the-unnecessary-only-filter-the-specified/142754 "2018-08-03T03:54:37Z")
For example, the data format is as follows: dev="1235667" pri="6" dev\_type="ddos\_clean" recorder="ads" vsid="0" sub\_type=attacklog dst\_addr=1.1.1.1 zonename=1504152157558 grpname=test Just get the contents of the sub… --- ## [Remove unused fields from logstash-\* index](https://discuss.elastic.co/t/remove-unused-fields-from-logstash-index/113386)
**Author:** [@nnet](https://discuss.elastic.co/u/nnet)\ **Replies:** 6\ **Last updated:** [December 29, 2017, 12:20am UTC](https://discuss.elastic.co/t/remove-unused-fields-from-logstash-index/113386 "2017-12-29T00:20:58Z")
Hi folks, i accidently added winlogbeat event fields to logstash-\* index and want to remove them. I don't have any logstash-\* data using the fields as I deleted those events. How can I remove the unused fields? --- ## [Having trouble getting data to elasticsearch](https://discuss.elastic.co/t/having-trouble-getting-data-to-elasticsearch/34555)
**Author:** [@kmroz](https://discuss.elastic.co/u/kmroz)\ **Replies:** 3\ **Last updated:** [November 15, 2015, 7:31pm UTC](https://discuss.elastic.co/t/having-trouble-getting-data-to-elasticsearch/34555 "2015-11-15T19:31:03Z")
So I am currently using the newest version of the ELK stack and I seem to be getting a few errors in elasticsearch logs and logstash. I have kibana up and running. Logstash error: :message=\>"Connection failed to init… --- ## [How to improve Filebeat -\> Elastic performance & reduce Elastic store size ? got ~9433 logs per second](https://discuss.elastic.co/t/how-to-improve-filebeat-elastic-performance-reduce-elastic-store-size-got-9433-logs-per-second/95092)
**Author:** [@vramakrishnan](https://discuss.elastic.co/u/vramakrishnan)\ **Replies:** 4\ **Last updated:** [August 1, 2017, 8:22am UTC](https://discuss.elastic.co/t/how-to-improve-filebeat-elastic-performance-reduce-elastic-store-size-got-9433-logs-per-second/95092 "2017-08-01T08:22:27Z")
I have the following setup on MAC running on i7 (8core machine). Filebeat (reading local /tmp/perf/… logs) --\> Elastic single instance docker I was only able to get ~9400 logs/sec indexed to Elastic and also the store.… --- ## [Xpack File User is not authorized](https://discuss.elastic.co/t/xpack-file-user-is-not-authorized/75891)
**Author:** [@sgarap](https://discuss.elastic.co/u/sgarap)\ **Replies:** 4\ **Last updated:** [March 8, 2017, 12:40pm UTC](https://discuss.elastic.co/t/xpack-file-user-is-not-authorized/75891 "2017-03-08T12:40:24Z")
Hi, I am staring elasticsearch cluster with kubernetes and docker. While running the docker, I created an admin user using /usr/share/elasticsearch/bin/x-pack/users useradd myadmin -p secret -r admin. The following out… --- ## [Get index by alias java api](https://discuss.elastic.co/t/get-index-by-alias-java-api/70438)
**Author:** [@hrdxwandg](https://discuss.elastic.co/u/hrdxwandg)\ **Replies:** 4\ **Last updated:** [January 4, 2017, 2:27am UTC](https://discuss.elastic.co/t/get-index-by-alias-java-api/70438 "2017-01-04T02:27:17Z")
how to get actual index name by index alias name with java api. the version of es is 2.4.0 for your help! thank you ahead! --- ## [Fatal exception while booting Elasticsearchorg.elasticsearch.ElasticsearchSecurityException: failed to load SSL configuration \[xpack.security.transport.ssl\] - cannot read configured \[PKCS12\] keystore](https://discuss.elastic.co/t/fatal-exception-while-booting-elasticsearchorg-elasticsearch-elasticsearchsecurityexception-failed-to-load-ssl-configuration-xpack-security-transport-ssl-cannot-read-configured-pkcs12-keystore/349427)
**Author:** [@9631](https://discuss.elastic.co/u/9631)\ **Replies:** 7\ **Last updated:** [December 15, 2023, 10:58am UTC](https://discuss.elastic.co/t/fatal-exception-while-booting-elasticsearchorg-elasticsearch-elasticsearchsecurityexception-failed-to-load-ssl-configuration-xpack-security-transport-ssl-cannot-read-configured-pkcs12-keystore/349427 "2023-12-15T10:58:50Z")
\[2023-12-15T12:36:37,084\]\[ERROR\]\[o.e.b.Elasticsearch \] \[LAPTOP-ECGDD83N\] fatal exception while booting Elasticsearchorg.elasticsearch.ElasticsearchSecurityException: failed to load SSL configuration \[xpack.security.… --- ## [Metricbeat - Add processor config through "central management"](https://discuss.elastic.co/t/metricbeat-add-processor-config-through-central-management/188850)
**Author:** [@nitzan.karni](https://discuss.elastic.co/u/nitzan.karni)\ **Replies:** 1\ **Last updated:** [May 28, 2020, 11:55pm UTC](https://discuss.elastic.co/t/metricbeat-add-processor-config-through-central-management/188850 "2020-05-28T23:55:18Z")
Hi, I want to add to my beats configuration processor section for example: processors: - dns: type: reverse fields: source.ip: source.hostname destination.ip: destination.hostname the main problem… --- ## [Error in installing logstash-plugin](https://discuss.elastic.co/t/error-in-installing-logstash-plugin/88442)
**Author:** [@sahar\_q](https://discuss.elastic.co/u/sahar_q)\ **Replies:** 7\ **Last updated:** [June 6, 2017, 4:26pm UTC](https://discuss.elastic.co/t/error-in-installing-logstash-plugin/88442 "2017-06-06T16:26:47Z")
Command: bin/logstash-plugin install logstash-codec-gzip\_lines ERROR: Installation Aborted, message: Bundler could not find compatible versions for gem "logstash-core-plugin-api": In snapshot (Gemfile.lock): … --- ## [Kibana Visualize - How to aggregate data with two string field values?](https://discuss.elastic.co/t/kibana-visualize-how-to-aggregate-data-with-two-string-field-values/116947)
**Author:** [@elastic4](https://discuss.elastic.co/u/elastic4)\ **Replies:** 1\ **Last updated:** [January 25, 2018, 2:06pm UTC](https://discuss.elastic.co/t/kibana-visualize-how-to-aggregate-data-with-two-string-field-values/116947 "2018-01-25T14:06:48Z")
I have data as follows in ElasticSearch. timestamp is a timestamp field and item\_status, item\_id are string fields. timestamp item\_id item\_status January 24th 2018, 12:06:34.287 1 … --- ## [How to get a value of key value pair in an object in elasticsearch painless script](https://discuss.elastic.co/t/how-to-get-a-value-of-key-value-pair-in-an-object-in-elasticsearch-painless-script/140972)
**Author:** [@pungent](https://discuss.elastic.co/u/pungent)\ **Replies:** 2\ **Last updated:** [July 23, 2018, 6:12pm UTC](https://discuss.elastic.co/t/how-to-get-a-value-of-key-value-pair-in-an-object-in-elasticsearch-painless-script/140972 "2018-07-23T18:12:10Z")
A partial mapping of one of my indices (in ES6.2) is as follows "sdata": { "type": "object", "dynamic": true, "properties": { "xyz": { "dynamic": true, "properties": {} }, "students": { … --- ## [How to do Scatter plot?](https://discuss.elastic.co/t/how-to-do-scatter-plot/93014)
**Author:** [@moabbas](https://discuss.elastic.co/u/moabbas)\ **Replies:** 3\ **Last updated:** [July 17, 2017, 2:42pm UTC](https://discuss.elastic.co/t/how-to-do-scatter-plot/93014 "2017-07-17T14:42:10Z")
Hi All, How can i plot my data using scatter plot and change it's background. Thanks --- ## [Error parsing JSON doc](https://discuss.elastic.co/t/error-parsing-json-doc/29598)
**Author:** [@FrankC](https://discuss.elastic.co/u/FrankC)\ **Replies:** 3\ **Last updated:** [September 19, 2015, 9:43am UTC](https://discuss.elastic.co/t/error-parsing-json-doc/29598 "2015-09-19T09:43:00Z")
Testing for the first time loading a json document with logstash. I am have logstash 1.5.1 and elastic 1.6.0. I get the error below. Any help is much appreciated. Thanks in advance for taking a look. json document: {… --- ## [Filebeat & Logstash with intermediate CA (cert chain) Issues](https://discuss.elastic.co/t/filebeat-logstash-with-intermediate-ca-cert-chain-issues/105675)
**Author:** [@Mark\_Clarke](https://discuss.elastic.co/u/Mark_Clarke)\ **Replies:** 4\ **Last updated:** [November 1, 2017, 9:50pm UTC](https://discuss.elastic.co/t/filebeat-logstash-with-intermediate-ca-cert-chain-issues/105675 "2017-11-01T21:50:57Z")
Hi all, I have an intermediate CA sign the certs for the filebeat client. I have entered the chain file in logstash configuration for the filebeat input stanza in the certificates-authorities entry. input { beats { … --- ## [Throttling search requests](https://discuss.elastic.co/t/throttling-search-requests/69227)
**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Replies:** 4\ **Last updated:** [December 16, 2016, 7:00pm UTC](https://discuss.elastic.co/t/throttling-search-requests/69227 "2016-12-16T19:00:22Z")
What is the best practice to throttle search requests? Does Elasticsearch provide any configurations to throttle search requests? Is there a way to prioritize different types of queries (e.g. prioritize search over in… --- ## ['timed out waiting for all nodes to process published state' and cluster unavailability](https://discuss.elastic.co/t/timed-out-waiting-for-all-nodes-to-process-published-state-and-cluster-unavailability/138590)
**Author:** [@mim](https://discuss.elastic.co/u/mim)\ **Replies:** 2\ **Last updated:** [July 10, 2018, 8:36am UTC](https://discuss.elastic.co/t/timed-out-waiting-for-all-nodes-to-process-published-state-and-cluster-unavailability/138590 "2018-07-10T08:36:03Z")
Hi all, I am setting up Elasticsearch 3-nodes cluster with docker. This is my docker compose file: version: '2.0' services: elasticsearch: image: docker.elastic.co/elasticsearch/elasticsearch-oss:6.3.0 enviro… --- ## [ElasticSearch failing to start - The directory is not a subdirectory of the root directory](https://discuss.elastic.co/t/elasticsearch-failing-to-start-the-directory-is-not-a-subdirectory-of-the-root-directory/24523)
**Author:** [@whgibbo](https://discuss.elastic.co/u/whgibbo)\ **Replies:** 4\ **Last updated:** [November 7, 2016, 9:53am UTC](https://discuss.elastic.co/t/elasticsearch-failing-to-start-the-directory-is-not-a-subdirectory-of-the-root-directory/24523 "2016-11-07T09:53:50Z")
Hi, I'm new to Elasticsearch.. I download it on a windows 8.1 system and I'm getting the following error: \[2015-06-26 13:21:17,407\]\[INFO \]\[node \] \[Honcho\] version\[1.6.0\], pid\[22412\], build\[cdd3ac4… --- ## [How to filter by "Count of records" within Kibana Lens](https://discuss.elastic.co/t/how-to-filter-by-count-of-records-within-kibana-lens/336197)
**Author:** [@fim](https://discuss.elastic.co/u/fim)\ **Replies:** 3\ **Last updated:** [June 27, 2023, 11:10am UTC](https://discuss.elastic.co/t/how-to-filter-by-count-of-records-within-kibana-lens/336197 "2023-06-27T11:10:35Z")
My goal is to filter by counts for a field "tracking\_no" where the value inside of the field is exactly similar. In Kibana Lens I created a simple table with a count aggregation. The table show exactly what I expect, bu… --- ## [\[SOLVED\] X-Pack 6.2 install Fatal Error: ace.require is not a function](https://discuss.elastic.co/t/solved-x-pack-6-2-install-fatal-error-ace-require-is-not-a-function/127890)
**Author:** [@AlphaJosh](https://discuss.elastic.co/u/AlphaJosh)\ **Replies:** 8\ **Last updated:** [April 29, 2018, 12:35pm UTC](https://discuss.elastic.co/t/solved-x-pack-6-2-install-fatal-error-ace-require-is-not-a-function/127890 "2018-04-29T12:35:10Z")
Uncaught TypeError: ace.require is not a function (http://localhost:5601/bundles/kibana.bundle.js?v=16602:1) I am struggling to get X-Pack 6.2.3 running a single node on Windows 10 and Windows 2012. I have installed th… --- ## [How to link Kibana URL for log in Alert?](https://discuss.elastic.co/t/how-to-link-kibana-url-for-log-in-alert/220432)
**Author:** [@gunjan\_prmr](https://discuss.elastic.co/u/gunjan_prmr)\ **Replies:** 3\ **Last updated:** [February 24, 2020, 5:19pm UTC](https://discuss.elastic.co/t/how-to-link-kibana-url-for-log-in-alert/220432 "2020-02-24T17:19:42Z")
I have an alert where I am sending certain data from log in alert which is working as expected. What I want to do is, I also want to include URL in alert but not sure about one particular id. i.e. http://MY-URL.com/\_plu… [Previous page](https://discuss.elastic.co/top.md?page=507&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=509&per_page=50&period=all)