# Top **URL:** https://discuss.elastic.co/top.md?page=516&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 517 --- ## [Starting frontend GLOBAL: cannot bind socket \[127.0.0.1:14567\]](https://discuss.elastic.co/t/starting-frontend-global-cannot-bind-socket-127-0-0-1-14567/116715)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 5\ **Last updated:** [January 25, 2018, 1:18pm UTC](https://discuss.elastic.co/t/starting-frontend-global-cannot-bind-socket-127-0-0-1-14567/116715 "2018-01-25T13:18:34Z")
I'm trying to follow HAProxy module | Metricbeat Reference \[6.1\] | Elastic, specifically part: place this statement under the global or default section of the haproxy config: stats socket 127.0.0.1:14567 I've tried … --- ## [Curator to delete all indices except index xxx](https://discuss.elastic.co/t/curator-to-delete-all-indices-except-index-xxx/57151)
**Author:** [@dianadijan](https://discuss.elastic.co/u/dianadijan)\ **Replies:** 5\ **Last updated:** [August 3, 2016, 11:38pm UTC](https://discuss.elastic.co/t/curator-to-delete-all-indices-except-index-xxx/57151 "2016-08-03T23:38:42Z")
Hi, What is the syntax to delete all indices except a particular index Curator version: 3.4.1 Thanks --- ## [Scheduling a logsatsh config file](https://discuss.elastic.co/t/scheduling-a-logsatsh-config-file/67831)
**Author:** [@sabyasachi\_mallick](https://discuss.elastic.co/u/sabyasachi_mallick)\ **Replies:** 7\ **Last updated:** [December 2, 2016, 11:05am UTC](https://discuss.elastic.co/t/scheduling-a-logsatsh-config-file/67831 "2016-12-02T11:05:42Z")
i have 4 independent logstash config files which are taking input from a csv file .i am executing 4 files in background by using logstash -f /path/to/config file. But when my csv file is updated with new data,then all t… --- ## [Problems with homebrew installation](https://discuss.elastic.co/t/problems-with-homebrew-installation/341132)
**Author:** [@dpa](https://discuss.elastic.co/u/dpa)\ **Replies:** 2\ **Last updated:** [August 26, 2023, 11:33am UTC](https://discuss.elastic.co/t/problems-with-homebrew-installation/341132 "2023-08-26T11:33:41Z")
I tried to follow the basic instructions here: Install Elasticsearch on macOS with Homebrew | Elasticsearch Guide \[7.17\] | Elastic but they don't work brew tap elastic/tap - works fine but brew install elastic/tap/ela… --- ## [X-Pack Security 5.5.2 security update](https://discuss.elastic.co/t/x-pack-security-5-5-2-security-update/97463)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [August 17, 2017, 5:34pm UTC](https://discuss.elastic.co/t/x-pack-security-5-5-2-security-update/97463 "2017-08-17T17:34:44Z")
X-Pack Security TLS certificate verification error (ESA-2017-15) An error was found in the X-Pack Security TLS trust manager for versions 5.0.0 to 5.5.1. If reloading the trust material fails the trust manager will be r… --- ## [Execute script as action in watcher](https://discuss.elastic.co/t/execute-script-as-action-in-watcher/58888)
**Author:** [@obudiman](https://discuss.elastic.co/u/obudiman)\ **Replies:** 3\ **Last updated:** [August 25, 2016, 11:14pm UTC](https://discuss.elastic.co/t/execute-script-as-action-in-watcher/58888 "2016-08-25T23:14:57Z")
Is it possible to have the watcher to run a shell script as an action? --- ## [Problemas para iniciar Logstash](https://discuss.elastic.co/t/problemas-para-iniciar-logstash/171183)
**Author:** [@Verdugo\_Gonzalo](https://discuss.elastic.co/u/Verdugo_Gonzalo)\ **Replies:** 6\ **Last updated:** [March 22, 2019, 10:29am UTC](https://discuss.elastic.co/t/problemas-para-iniciar-logstash/171183 "2019-03-22T10:29:22Z")
Buenas gente, llevo un tiempo trabajando con ELK en su version Cloud. Tengo problemas para utilizar Logstash, use la siguiente guia: Manual pero no logro iniciar. Dejo la salida del comando: gverdugo@NATserver:/etc/lo… --- ## [Proper way to create new event from Logstash Ruby filter](https://discuss.elastic.co/t/proper-way-to-create-new-event-from-logstash-ruby-filter/232119)
**Author:** [@szgeri](https://discuss.elastic.co/u/szgeri)\ **Replies:** 3\ **Last updated:** [May 12, 2020, 8:10am UTC](https://discuss.elastic.co/t/proper-way-to-create-new-event-from-logstash-ruby-filter/232119 "2020-05-12T08:10:55Z")
Hi, I would like to somehow create new event with Logstash Ruby filter but actually with no success. I tried a lot of versions and syntaxes, searched for many online topics and documentations and the result is the same. … --- ## [Exclude property in File input plugin](https://discuss.elastic.co/t/exclude-property-in-file-input-plugin/74343)
**Author:** [@spravn789](https://discuss.elastic.co/u/spravn789)\ **Replies:** 3\ **Last updated:** [February 13, 2017, 7:25am UTC](https://discuss.elastic.co/t/exclude-property-in-file-input-plugin/74343 "2017-02-13T07:25:10Z")
I have a directory with multiple log file \[\*.log\], among which i need to exclude few logs that starts with CBATest.log,BPLTest.log and ARCTest.log. Below provided is the configuration used. But these files are not exclu… --- ## [\[kibana\] Socket hang up, unable to revive connection](https://discuss.elastic.co/t/kibana-socket-hang-up-unable-to-revive-connection/199950)
**Author:** [@soulou](https://discuss.elastic.co/u/soulou)\ **Replies:** 4\ **Last updated:** [September 19, 2019, 1:00pm UTC](https://discuss.elastic.co/t/kibana-socket-hang-up-unable-to-revive-connection/199950 "2019-09-19T13:00:35Z")
I'm opening this ticket as a followup of this one. I'm experiencing exactly the same behavior. At some point connections failed (socket hangup, unable to revive connection, no living connection) Restarting kibana ma… --- ## [Error creating a watch unexpected token \[START\_OBJECT\]"](https://discuss.elastic.co/t/error-creating-a-watch-unexpected-token-start-object/49977)
**Author:** [@Patel\_Viral](https://discuss.elastic.co/u/Patel_Viral)\ **Replies:** 3\ **Last updated:** [May 13, 2016, 11:07am UTC](https://discuss.elastic.co/t/error-creating-a-watch-unexpected-token-start-object/49977 "2016-05-13T11:07:34Z")
Hey, I'm kinda a newbie to Elastic search and I am trying to create watcher but having some issues. Below is the code, it would be great if someone could help me resolving the issue. { "trigger" : { "schedule" :… --- ## [Operands priorities in Elasticsearch query](https://discuss.elastic.co/t/operands-priorities-in-elasticsearch-query/59759)
**Author:** [@nivke2000](https://discuss.elastic.co/u/nivke2000)\ **Replies:** 6\ **Last updated:** [September 6, 2016, 8:58am UTC](https://discuss.elastic.co/t/operands-priorities-in-elasticsearch-query/59759 "2016-09-06T08:58:54Z")
Hi, I am researching the Elasticsearch engine. I would like to know which operand takes precedence on which operands. The only reference I was able to find is: NOT takes precedence over AND, which takes precedence over … --- ## [Performance Limitation with ELK stack](https://discuss.elastic.co/t/performance-limitation-with-elk-stack/21990)
**Author:** [@Hagai\_T](https://discuss.elastic.co/u/Hagai_T)\ **Replies:** 6\ **Last updated:** [February 9, 2015, 10:38am UTC](https://discuss.elastic.co/t/performance-limitation-with-elk-stack/21990 "2015-02-09T10:38:35Z")
Hi Guys, We use ElasticSearch as our tracking system of our products in a dynamic to track performance. Searching of this data is being used by small group of users (10-12) in the company to measure performance. … --- ## [How to limit the size of the index?](https://discuss.elastic.co/t/how-to-limit-the-size-of-the-index/12638)
**Author:** [@Balgrim](https://discuss.elastic.co/u/Balgrim)\ **Replies:** 2\ **Last updated:** [July 5, 2013, 6:05am UTC](https://discuss.elastic.co/t/how-to-limit-the-size-of-the-index/12638 "2013-07-05T06:05:32Z")
Hi all, I have install recently my logstash/elasticsearch solution. But I have a size problem too many log after 1 month the index size too important. I want to know if exist a solution to delete automaticaly the… --- ## [Trying to parse Hadoop log with logstash](https://discuss.elastic.co/t/trying-to-parse-hadoop-log-with-logstash/53894)
**Author:** [@siasic](https://discuss.elastic.co/u/siasic)\ **Replies:** 5\ **Last updated:** [June 30, 2016, 8:54am UTC](https://discuss.elastic.co/t/trying-to-parse-hadoop-log-with-logstash/53894 "2016-06-30T08:54:46Z")
hello, I have a Hadoop cluster (Hortonworks) and i try to send hdfs/yarn/.... logs to logstash for parsing them. The sent is made by filebeat. My logs look like that (i think it is log4j type) : 2016-06-12 03:00:20… --- ## [Difference between input type "syslog" and "tcp"?](https://discuss.elastic.co/t/difference-between-input-type-syslog-and-tcp/108574)
**Author:** [@jcarnat](https://discuss.elastic.co/u/jcarnat)\ **Replies:** 2\ **Last updated:** [November 22, 2017, 10:22pm UTC](https://discuss.elastic.co/t/difference-between-input-type-syslog-and-tcp/108574 "2017-11-22T22:22:29Z")
Hi, What is the difference between using the syslog and the tcp inputs when dealing with logs? After reading the 5.6/plugins-inputs-syslog and 5.6/plugins-inputs-tcp pages, I can't guess the pros / cons of each plugins… --- ## [Java version in Elasticsearch 7.8.0](https://discuss.elastic.co/t/java-version-in-elasticsearch-7-8-0/247329)
**Author:** [@pratiksha](https://discuss.elastic.co/u/pratiksha)\ **Replies:** 1\ **Last updated:** [September 3, 2020, 7:04am UTC](https://discuss.elastic.co/t/java-version-in-elasticsearch-7-8-0/247329 "2020-09-03T07:04:21Z")
Elasticsearch 7.8.0 comes with Java 14 and it is build using it. As per the elastic document, we can use our own version of Java and it is recommended to use a supported LTS version of Java. So, we are installing and u… --- ## [Route on map](https://discuss.elastic.co/t/route-on-map/108124)
**Author:** [@wkpv68](https://discuss.elastic.co/u/wkpv68)\ **Replies:** 3\ **Last updated:** [November 22, 2017, 12:05pm UTC](https://discuss.elastic.co/t/route-on-map/108124 "2017-11-22T12:05:42Z")
Hi, Is it possible to take all GPS points that I received and create route on the map. Does the map in Kibana support it and if no is there a plugin for this? I general, I got every x min the GPS coordinate and I want… --- ## [Beats, Kafka output, Azure Event Hubs](https://discuss.elastic.co/t/beats-kafka-output-azure-event-hubs/178020)
**Author:** [@Rob3](https://discuss.elastic.co/u/Rob3)\ **Replies:** 0\ **Last updated:** [April 23, 2019, 11:24am UTC](https://discuss.elastic.co/t/beats-kafka-output-azure-event-hubs/178020 "2019-04-23T11:24:59Z")
Auditbeat and Filebeat seems to be unable to create new topics ("Event Hubs") in an Azure Event Hub Namespace. Using versions 7.0.0. Azure Event Hub Namespace Standard SKU created, with the Kafka interface enabled. Us… --- ## [Suspected memory leak leading to heap OOM in Logstash 5.6.6](https://discuss.elastic.co/t/suspected-memory-leak-leading-to-heap-oom-in-logstash-5-6-6/117807)
**Author:** [@Christopher\_Hodges](https://discuss.elastic.co/u/Christopher_Hodges)\ **Replies:** 1\ **Last updated:** [February 14, 2018, 11:35pm UTC](https://discuss.elastic.co/t/suspected-memory-leak-leading-to-heap-oom-in-logstash-5-6-6/117807 "2018-02-14T23:35:27Z")
We upgraded to Logstash 5.6.6 across our estate and soon saw Logstash memory usage climb until failure with OOM heap errors on all boxes. The heavier the load the quicker the failure. Each server runs a specific config f… --- ## [Can you hook an existing Elasticsearch index to Elastic App search](https://discuss.elastic.co/t/can-you-hook-an-existing-elasticsearch-index-to-elastic-app-search/222508)
**Author:** [@SanshilaG](https://discuss.elastic.co/u/SanshilaG)\ **Replies:** 4\ **Last updated:** [June 16, 2022, 2:32pm UTC](https://discuss.elastic.co/t/can-you-hook-an-existing-elasticsearch-index-to-elastic-app-search/222508 "2022-06-16T14:32:17Z")
I want to integrate App Search in my project. App search runs fine out of the box. But I have an application that is running on Elasticsearch, I was wondering if I could use this existing index as a backend for App searc… --- ## [System.load.norm.1 field exceeds 100%](https://discuss.elastic.co/t/system-load-norm-1-field-exceeds-100/147928)
**Author:** [@TimoW](https://discuss.elastic.co/u/TimoW)\ **Replies:** 2\ **Last updated:** [September 11, 2018, 8:15am UTC](https://discuss.elastic.co/t/system-load-norm-1-field-exceeds-100/147928 "2018-09-11T08:15:55Z")
Hey Everybody! This is my first time posting to the forum, because I could not find any related threads. I am using the Metricbeat to monitor different metrics concerning cluster health. One of which is the CPU usage f… --- ## [Import a visualisation using API](https://discuss.elastic.co/t/import-a-visualisation-using-api/72488)
**Author:** [@Stephen\_Pengilley](https://discuss.elastic.co/u/Stephen_Pengilley)\ **Replies:** 2\ **Last updated:** [January 24, 2017, 9:07am UTC](https://discuss.elastic.co/t/import-a-visualisation-using-api/72488 "2017-01-24T09:07:11Z")
Hi all, I have exported a visualisation in Kibana, using the export button under settings. This has given me a JSON file. The name of the visualisation is Transaction-count. I have then deleted the visualisation from… --- ## [Unable to access into \ after installation of elastic search](https://discuss.elastic.co/t/unable-to-access-into-ipaddress-9200-after-installation-of-elastic-search/304019)
**Author:** [@fanfan01127](https://discuss.elastic.co/u/fanfan01127)\ **Replies:** 7\ **Last updated:** [May 9, 2022, 1:53pm UTC](https://discuss.elastic.co/t/unable-to-access-into-ipaddress-9200-after-installation-of-elastic-search/304019 "2022-05-09T13:53:30Z")
Installed version: Elasticsearch-8.2.0 OS: RedHat 8.2 on Azure Hello all I am a new starter to use Elasticsearch and linux. Just tried to install the Elasticsearch 8.2. After I configured the yml file, allow the fir… --- ## [Aggregation support in SIEM](https://discuss.elastic.co/t/aggregation-support-in-siem/237974)
**Author:** [@NerdSec](https://discuss.elastic.co/u/NerdSec)\ **Replies:** 2\ **Last updated:** [June 23, 2020, 12:59pm UTC](https://discuss.elastic.co/t/aggregation-support-in-siem/237974 "2020-06-23T12:59:40Z")
Hi Team, Are there any plans to add an aggregations support in the SIEM app? Maybe the ability to create a correlation rule by leveraging the Elasticsearch aggregations? For example, a very simple use case, where you w… --- ## [Fail to send data to elastic unexpected EOF](https://discuss.elastic.co/t/fail-to-send-data-to-elastic-unexpected-eof/246732)
**Author:** [@greyhats13](https://discuss.elastic.co/u/greyhats13)\ **Replies:** 3\ **Last updated:** [August 31, 2020, 9:31pm UTC](https://discuss.elastic.co/t/fail-to-send-data-to-elastic-unexpected-eof/246732 "2020-08-31T21:31:13Z")
Hi guys, we are shipping the logs to elastic public endpoint (internet) from go microservices using this modulule elastic https://github.com/elastic/go-elasticsearch, but we encounter this error: 1. "could not get index… --- ## [Metricbeat doesn't fill all available fields (eg. system.memory. ...)](https://discuss.elastic.co/t/metricbeat-doesnt-fill-all-available-fields-eg-system-memory/93959)
**Author:** [@elkinspace](https://discuss.elastic.co/u/elkinspace)\ **Replies:** 5\ **Last updated:** [July 26, 2017, 9:51am UTC](https://discuss.elastic.co/t/metricbeat-doesnt-fill-all-available-fields-eg-system-memory/93959 "2017-07-26T09:51:18Z")
Hi there, We have just started with the ELK stack to monitor our servers. The servers are running on Debian Jessie (8.8) and ELK Stack 5.5. On most of the machines metricbeat works as expected. But I have an issue wi… --- ## [Stack Monitoring shows "No monitoring data found"](https://discuss.elastic.co/t/stack-monitoring-shows-no-monitoring-data-found/254502)
**Author:** [@kavier](https://discuss.elastic.co/u/kavier)\ **Replies:** 6\ **Last updated:** [November 21, 2020, 4:21am UTC](https://discuss.elastic.co/t/stack-monitoring-shows-no-monitoring-data-found/254502 "2020-11-21T04:21:26Z")
Hi all, Our Single Node Elastic Stack's Stack Monitoring was working all along and stopped working suddenly. We've took a look at https://github.com/elastic/kibana/issues/33760 but not much information obtained too. W… --- ## [Not able to filter on geoip.location?](https://discuss.elastic.co/t/not-able-to-filter-on-geoip-location/96683)
**Author:** [@Puk](https://discuss.elastic.co/u/Puk)\ **Replies:** 6\ **Last updated:** [August 16, 2017, 2:23am UTC](https://discuss.elastic.co/t/not-able-to-filter-on-geoip-location/96683 "2017-08-16T02:23:36Z")
So I’m fairly new to ELK Stack over the last few weeks, but I have most my systems reporting in fine for Windows logs, and Linux Secure/System logs OK. Today I added in the Apache logs for my DMZ and again these are g… --- ## [elasticsearch-HQ-master](https://discuss.elastic.co/t/elasticsearch-hq-master/73378)
**Author:** [@zen.xen](https://discuss.elastic.co/u/zen.xen)\ **Replies:** 6\ **Last updated:** [January 31, 2017, 5:42pm UTC](https://discuss.elastic.co/t/elasticsearch-hq-master/73378 "2017-01-31T17:42:56Z")
Hello, I tried to install plugin elasticsearch-HQ-master in ES 5 on Windows 2012 but it doesn't work, I use this plugin in ES 2.x and it works. Do you know something similar to install in ES 5 to manage indices? --- ## [How to use multiple fields in exists query in Java API in Elasticsearch 2.4.4](https://discuss.elastic.co/t/how-to-use-multiple-fields-in-exists-query-in-java-api-in-elasticsearch-2-4-4/146858)
**Author:** [@Yashasvi\_Raj\_Pant](https://discuss.elastic.co/u/Yashasvi_Raj_Pant)\ **Replies:** 4\ **Last updated:** [August 31, 2018, 11:43am UTC](https://discuss.elastic.co/t/how-to-use-multiple-fields-in-exists-query-in-java-api-in-elasticsearch-2-4-4/146858 "2018-08-31T11:43:37Z")
From the REST API of the elasticsearch(version 2.4.4), we can use multiple fields in exists query as: { "query": { "exists": { "field": \[ "field1", "field2", "field3" \] } … --- ## [Using JSON Input in piechart for Visualization](https://discuss.elastic.co/t/using-json-input-in-piechart-for-visualization/112538)
**Author:** [@Hussain\_Khan](https://discuss.elastic.co/u/Hussain_Khan)\ **Replies:** 3\ **Last updated:** [December 21, 2017, 1:48pm UTC](https://discuss.elastic.co/t/using-json-input-in-piechart-for-visualization/112538 "2017-12-21T13:48:31Z")
Hello Team, I'm trying to generate a simple piechart as a Visualisation in Kibana with some custom Filters, which is nothing but a hostname where the request been hit. The current visualisation works for me but the wor… --- ## [Logstash ruby filter not working](https://discuss.elastic.co/t/logstash-ruby-filter-not-working/54807)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 3\ **Last updated:** [July 6, 2016, 9:09pm UTC](https://discuss.elastic.co/t/logstash-ruby-filter-not-working/54807 "2016-07-06T21:09:43Z")
Hi Team, I am trying to get the number from the underscore in the \_id, so I tried using ruby filter to get the number below is the following details, Sample post data, POST test\_item/item/149927\_1 { "ITEM\_ID": 1… --- ## [Dynamic external hyperlink on scripted field](https://discuss.elastic.co/t/dynamic-external-hyperlink-on-scripted-field/229076)
**Author:** [@zapho](https://discuss.elastic.co/u/zapho)\ **Replies:** 6\ **Last updated:** [April 22, 2020, 7:08pm UTC](https://discuss.elastic.co/t/dynamic-external-hyperlink-on-scripted-field/229076 "2020-04-22T19:08:56Z")
Hi, I'm using 7.5.1 ELK stack and trying to build a dashboard for our CI pipelines. I'm focusing on visualizing SonarQube quality gate data, especially highlighting error counter when code issues are detected. I'm usin… --- ## [Filebeat configuration module path issue](https://discuss.elastic.co/t/filebeat-configuration-module-path-issue/268871)
**Author:** [@tkkchan](https://discuss.elastic.co/u/tkkchan)\ **Replies:** 4\ **Last updated:** [April 7, 2021, 2:16pm UTC](https://discuss.elastic.co/t/filebeat-configuration-module-path-issue/268871 "2021-04-07T14:16:11Z")
Dear All, I am trying to follow this tutorial here to build a dashboard on some public data sets. However, whenever I tried to run ./filebeat, the following error appeared: 2021-03-31T14:19:44.685+0800 ERROR \[mod… --- ## [Calculating Number of Data nodes](https://discuss.elastic.co/t/calculating-number-of-data-nodes/197545)
**Author:** [@Nikhil04](https://discuss.elastic.co/u/Nikhil04)\ **Replies:** 4\ **Last updated:** [August 31, 2019, 5:55am UTC](https://discuss.elastic.co/t/calculating-number-of-data-nodes/197545 "2019-08-31T05:55:00Z")
Hi, I was going through one of the webinars by elastic.In the webinar,I came across a formula to calculate data nodes as below: Data Nodes: ROUNDUP(Total Storage(GB) / Memory per data node / Memory:data ratio) + 1 Data… --- ## [ERR SSL client failed to connect with: dial tcp x.x.x.x:5043: getsockopt: connection refused](https://discuss.elastic.co/t/err-ssl-client-failed-to-connect-with-dial-tcp-x-x-x-x-5043-getsockopt-connection-refused/42584)
**Author:** [@harsimran](https://discuss.elastic.co/u/harsimran)\ **Replies:** 3\ **Last updated:** [February 25, 2016, 10:40am UTC](https://discuss.elastic.co/t/err-ssl-client-failed-to-connect-with-dial-tcp-x-x-x-x-5043-getsockopt-connection-refused/42584 "2016-02-25T10:40:04Z")
I'm encounter a issue with the topbeat. I tried to ship the logs to logstash server on port 5043 and getting below on the client, while starting the topbeat. Both are rhel-6.5 virtual machines. logstash is running an… --- ## [Filebeat is using too much cpu](https://discuss.elastic.co/t/filebeat-is-using-too-much-cpu/187978)
**Author:** [@biello](https://discuss.elastic.co/u/biello)\ **Replies:** 5\ **Last updated:** [July 8, 2019, 10:20am UTC](https://discuss.elastic.co/t/filebeat-is-using-too-much-cpu/187978 "2019-07-08T10:20:54Z")
I didn't set the scan\_frequency option(which means leave as default 10s), why does it still use that much cpu? Here is the log from filebeat: 2019-06-28T14:30:52.034+0800 INFO \[monitoring\] log/log.go:144 Non-zero met… --- ## [Underscore in index name makes it invisible for Kibana](https://discuss.elastic.co/t/underscore-in-index-name-makes-it-invisible-for-kibana/186032)
**Author:** [@guerda](https://discuss.elastic.co/u/guerda)\ **Replies:** 7\ **Last updated:** [June 17, 2019, 11:49am UTC](https://discuss.elastic.co/t/underscore-in-index-name-makes-it-invisible-for-kibana/186032 "2019-06-17T11:49:55Z")
Hi! I'm using Kibana 6.3.1 on AWS and currently facing the following problem: I have an index named with an underscore ("\_")in the middle. This should be allowed and ElasticSearch let me index and search in it. Unfort… --- ## [Filebeat dropping events](https://discuss.elastic.co/t/filebeat-dropping-events/271653)
**Author:** [@smanoranjan005](https://discuss.elastic.co/u/smanoranjan005)\ **Replies:** 6\ **Last updated:** [May 17, 2021, 7:50am UTC](https://discuss.elastic.co/t/filebeat-dropping-events/271653 "2021-05-17T07:50:38Z")
Hi, I am using filebeat as daemonset in Kubernetes to transfer application logs to Logstash to Elasticsearch. But the issue here is there is some data drop during this transfer to ES. There is only one filter in filebe… --- ## [Creating/Restoring snapshot from one cluster to another](https://discuss.elastic.co/t/creating-restoring-snapshot-from-one-cluster-to-another/108570)
**Author:** [@ParitoshBh](https://discuss.elastic.co/u/ParitoshBh)\ **Replies:** 2\ **Last updated:** [November 22, 2017, 1:43pm UTC](https://discuss.elastic.co/t/creating-restoring-snapshot-from-one-cluster-to-another/108570 "2017-11-22T13:43:21Z")
I have 2 clusters, Cluster A with 2 nodes (Node A1 -\> Master+Data, Node A2 -\> Data) - Acts as development environment Cluster B with 1 node (Node B1 -\> Master+Data) - Acts as live environment With this setup, I am try… --- ## [How to validate painless scripts?](https://discuss.elastic.co/t/how-to-validate-painless-scripts/114004)
**Author:** [@sunil\_purushothaman](https://discuss.elastic.co/u/sunil_purushothaman)\ **Replies:** 1\ **Last updated:** [January 4, 2018, 5:21am UTC](https://discuss.elastic.co/t/how-to-validate-painless-scripts/114004 "2018-01-04T05:21:55Z")
We use many ScriptQuery and ScriptField in our project, and provide inline scripts for them in painless language. My question is, how can we validate these painless scripts? In other words, how to make sure that they wi… --- ## [Howto Parse JSON into Hash](https://discuss.elastic.co/t/howto-parse-json-into-hash/84474)
**Author:** [@f9atanzh](https://discuss.elastic.co/u/f9atanzh)\ **Replies:** 5\ **Last updated:** [May 5, 2017, 5:43pm UTC](https://discuss.elastic.co/t/howto-parse-json-into-hash/84474 "2017-05-05T17:43:56Z")
Hello, I'm working on reconfiguring log messages that come in as JSON strings so that I can POST them to an HTTP service with headers. Using beats input for Logstash. The main hurdle here is that I'd like to convert th… --- ## [Post processing query resut](https://discuss.elastic.co/t/post-processing-query-resut/40664)
**Author:** [@Pradeep\_Gowda](https://discuss.elastic.co/u/Pradeep_Gowda)\ **Replies:** 3\ **Last updated:** [February 1, 2016, 9:02pm UTC](https://discuss.elastic.co/t/post-processing-query-resut/40664 "2016-02-01T21:02:12Z")
Hi All, Is there any way to post process the result of a query result. For example, If I have a field called "distance" in the document which is stored in "meters", the result should give the distance in "Kilometer". … --- ## [Issue with jdbc for mariadb](https://discuss.elastic.co/t/issue-with-jdbc-for-mariadb/116255)
**Author:** [@Nikolay\_Petrov](https://discuss.elastic.co/u/Nikolay_Petrov)\ **Replies:** 6\ **Last updated:** [January 24, 2018, 8:00pm UTC](https://discuss.elastic.co/t/issue-with-jdbc-for-mariadb/116255 "2018-01-24T20:00:07Z")
Hi, I'm honestly trying to browse for similar issue related to this topic, but not able to find any related..so, please excuse if my search engine is wrong, but most likely i will need a help with troubleshooting, why m… --- ## [Scroll: Failed to execute query phase](https://discuss.elastic.co/t/scroll-failed-to-execute-query-phase/132634)
**Author:** [@fetch](https://discuss.elastic.co/u/fetch)\ **Replies:** 0\ **Last updated:** [May 21, 2018, 9:19am UTC](https://discuss.elastic.co/t/scroll-failed-to-execute-query-phase/132634 "2018-05-21T09:19:49Z")
Hello, I have a single node cluster. Recently I've updated to the latest version of ELK (6.2.3). I'm not sure if my problem is related to updating to a newer version or it's just a coincidence, but I've noticed that my… --- ## [Include\_lines in My Filebeat Module](https://discuss.elastic.co/t/include-lines-in-my-filebeat-module/149483)
**Author:** [@stevetso](https://discuss.elastic.co/u/stevetso)\ **Replies:** 2\ **Last updated:** [September 25, 2018, 6:31am UTC](https://discuss.elastic.co/t/include-lines-in-my-filebeat-module/149483 "2018-09-25T06:31:53Z")
I have created my module in filebeat and my log can be ingested. For filebeat.input, there is a feature called "include\_lines", which we could only include the lines which matched the regex. In filebeat module, I tried… --- ## [Reading .gz files with Filebeat](https://discuss.elastic.co/t/reading-gz-files-with-filebeat/53582)
**Author:** [@nanshan](https://discuss.elastic.co/u/nanshan)\ **Replies:** 2\ **Last updated:** [June 22, 2016, 6:09pm UTC](https://discuss.elastic.co/t/reading-gz-files-with-filebeat/53582 "2016-06-22T18:09:10Z")
My path to filebeat is /var/log/apache2 there are gz files like access.log.2016.06.12.gz will filebeat harvest them? --- ## [How to remove Metricbeat default fields](https://discuss.elastic.co/t/how-to-remove-metricbeat-default-fields/68026)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 5\ **Last updated:** [December 12, 2016, 9:14pm UTC](https://discuss.elastic.co/t/how-to-remove-metricbeat-default-fields/68026 "2016-12-12T21:14:43Z")
Hi, I am using metricbeat for system monitoring. However, that gives some default fields beat.hostname, beat.name etc, which I dont want. How to remove those? br, Sunil --- ## [How to get host IP address?](https://discuss.elastic.co/t/how-to-get-host-ip-address/97274)
**Author:** [@rahul01](https://discuss.elastic.co/u/rahul01)\ **Replies:** 3\ **Last updated:** [August 18, 2017, 12:35pm UTC](https://discuss.elastic.co/t/how-to-get-host-ip-address/97274 "2017-08-18T12:35:34Z")
Hi, I am getting the host name when I see logs in kibana. We have many servers who have common name so its hard to identify server from logs so I want IP address also to be sent in logs. How should I do that? Thanks [Previous page](https://discuss.elastic.co/top.md?page=515&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=517&per_page=50&period=all)