# Top **URL:** https://discuss.elastic.co/top.md?page=521&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 522 --- ## [Simple howto stunnel for elastcisearch cluster](https://discuss.elastic.co/t/simple-howto-stunnel-for-elastcisearch-cluster/19413)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 3\ **Last updated:** [July 26, 2016, 7:10pm UTC](https://discuss.elastic.co/t/simple-howto-stunnel-for-elastcisearch-cluster/19413 "2016-07-26T19:10:42Z")
Ok so I think I figured it out and seems to be working ok. Please feel free to publish this or improve upon it etc... Note: client certs have not been tested yet. Software versions used (though I don't think it ma… --- ## [Kibana warning on control visualization: "Terms list might be incomplete ..."](https://discuss.elastic.co/t/kibana-warning-on-control-visualization-terms-list-might-be-incomplete/228338)
**Author:** [@tomj](https://discuss.elastic.co/u/tomj)\ **Replies:** 5\ **Last updated:** [May 9, 2020, 11:47am UTC](https://discuss.elastic.co/t/kibana-warning-on-control-visualization-terms-list-might-be-incomplete/228338 "2020-05-09T11:47:23Z")
Using Elastic Cloud with 7.6.2 and Kibana 7.6.2. When opening any control visualization or a dashboard which uses the control visualization, I get the warning below. The example cited here has exactly two terms, not do… --- ## [Filebeat Windows Service won't start](https://discuss.elastic.co/t/filebeat-windows-service-wont-start/180085)
**Author:** [@Matt\_Richards](https://discuss.elastic.co/u/Matt_Richards)\ **Replies:** 5\ **Last updated:** [May 9, 2019, 3:32pm UTC](https://discuss.elastic.co/t/filebeat-windows-service-wont-start/180085 "2019-05-09T15:32:03Z")
Hi there, I've recently installed Filebeat 6.7.2 on a new windows server. I'm able to install the service using the included PowerShell scripts but I can't start it. I've tried running it under Local System USer and m… --- ## [Dealing with dots in fields for the 2.0 upgrade](https://discuss.elastic.co/t/dealing-with-dots-in-fields-for-the-2-0-upgrade/34562)
**Author:** [@bstascavage](https://discuss.elastic.co/u/bstascavage)\ **Replies:** 5\ **Last updated:** [December 11, 2015, 8:02pm UTC](https://discuss.elastic.co/t/dealing-with-dots-in-fields-for-the-2-0-upgrade/34562 "2015-12-11T20:02:31Z")
When running the migration plugin, pretty much every index came back as failed, due to us having a template that automatically added an extra FIELD\_NAME.raw field that was no analyzed (See: https://github.com/elastic/lo… --- ## [Get the correct timestamp from the log file](https://discuss.elastic.co/t/get-the-correct-timestamp-from-the-log-file/32633)
**Author:** [@Surbhi\_Agarwal](https://discuss.elastic.co/u/Surbhi_Agarwal)\ **Replies:** 5\ **Last updated:** [November 6, 2015, 5:29am UTC](https://discuss.elastic.co/t/get-the-correct-timestamp-from-the-log-file/32633 "2015-11-06T05:29:21Z")
The log file has its own timestamp and i am trying to replace the logstash timestamp with my timestamp. I got the \_dateparsefailure and \_grokparsefailure . This is my config file : input { file { path =\> "C:\\U… --- ## [Mixing up field types error: IP field is not getting added](https://discuss.elastic.co/t/mixing-up-field-types-error-ip-field-is-not-getting-added/55332)
**Author:** [@vishnubraj](https://discuss.elastic.co/u/vishnubraj)\ **Replies:** 7\ **Last updated:** [July 18, 2016, 9:01am UTC](https://discuss.elastic.co/t/mixing-up-field-types-error-ip-field-is-not-getting-added/55332 "2016-07-18T09:01:16Z")
i did a manual mapping in Elasticsearch. but i am getting the below error. Can you please help. Failed action. {:status=\>400, :action=\>\["index", {:id=\>nil, :index=\>"netflow\_", :type=\>"logs", :routing=\>nil}, #@metadata… --- ## [Multi Search with Count greater than 10000](https://discuss.elastic.co/t/multi-search-with-count-greater-than-10000/218257)
**Author:** [@xavierstein](https://discuss.elastic.co/u/xavierstein)\ **Replies:** 2\ **Last updated:** [February 7, 2020, 7:31pm UTC](https://discuss.elastic.co/t/multi-search-with-count-greater-than-10000/218257 "2020-02-07T19:31:47Z")
Hello, I have two elasticsearch queries that I would like to combine into one using the \_msearch endpoint. The first one is a normal query to filter by \_ids and the second is a \_count query. Now I know I am able to com… --- ## [Intereted in contributing to Elasticsearch and Kibana for GSOC 2019](https://discuss.elastic.co/t/intereted-in-contributing-to-elasticsearch-and-kibana-for-gsoc-2019/166281)
**Author:** [@apoorv1997](https://discuss.elastic.co/u/apoorv1997)\ **Replies:** 1\ **Last updated:** [January 30, 2019, 12:32pm UTC](https://discuss.elastic.co/t/intereted-in-contributing-to-elasticsearch-and-kibana-for-gsoc-2019/166281 "2019-01-30T12:32:06Z")
Hello guys, I'm a final year undergrad student studying Indian Institute of Information Technology Sri City, Chittoor. I am really looking forward in contributing to Elasticsearch and Kibana. Right now i'm familiarising … --- ## [Cannot run kibana on centos7](https://discuss.elastic.co/t/cannot-run-kibana-on-centos7/137457)
**Author:** [@memery\_xmb](https://discuss.elastic.co/u/memery_xmb)\ **Replies:** 3\ **Last updated:** [June 27, 2018, 11:39am UTC](https://discuss.elastic.co/t/cannot-run-kibana-on-centos7/137457 "2018-06-27T11:39:32Z")
My ElasticSearch setting: # Set the bind address to a specific IP (IPv4 or IPv6): # network.host: 192.168.25.133 # # Set a custom port for HTTP: # http.port: 9200; And it runs both on localh… --- ## [Alert when an event is not followed by another](https://discuss.elastic.co/t/alert-when-an-event-is-not-followed-by-another/314527)
**Author:** [@bricevalenza](https://discuss.elastic.co/u/bricevalenza)\ **Replies:** 6\ **Last updated:** [September 26, 2022, 8:00am UTC](https://discuss.elastic.co/t/alert-when-an-event-is-not-followed-by-another/314527 "2022-09-26T08:00:05Z")
Hello, I am looking for a solution to create an alert when the following happens: An event with the field winlog.event\_id: "4202" occurs. 5 minutes later, no event with the field winlog.event\_id: "4204" was detected. … --- ## [JSON Query DSL Support in Kibana Visualize Filters](https://discuss.elastic.co/t/json-query-dsl-support-in-kibana-visualize-filters/145259)
**Author:** [@cdaringe](https://discuss.elastic.co/u/cdaringe)\ **Replies:** 2\ **Last updated:** [August 23, 2018, 4:09am UTC](https://discuss.elastic.co/t/json-query-dsl-support-in-kibana-visualize-filters/145259 "2018-08-23T04:09:08Z")
Hi all: I have found it periodically difficult to specify visualization filters in the stringy form (especially with respect to negation cases, e.g. not vs NOT). In the Discover view, I can see my filter expression in … --- ## [Query latest records in each group](https://discuss.elastic.co/t/query-latest-records-in-each-group/83259)
**Author:** [@PremShankar\_Kumar](https://discuss.elastic.co/u/PremShankar_Kumar)\ **Replies:** 2\ **Last updated:** [April 24, 2017, 5:15pm UTC](https://discuss.elastic.co/t/query-latest-records-in-each-group/83259 "2017-04-24T17:15:24Z")
I want to query only latest record for each field(c here) for records matching both criteria( A & B). But query below returns multiple results for each c instead of 1. Mapping: timestamp -\> date e.g. "timestamp":"2017-… --- ## [VMware logging](https://discuss.elastic.co/t/vmware-logging/40036)
**Author:** [@Diggy](https://discuss.elastic.co/u/Diggy)\ **Replies:** 2\ **Last updated:** [January 26, 2016, 9:03pm UTC](https://discuss.elastic.co/t/vmware-logging/40036 "2016-01-26T21:03:51Z")
Hey, all. I want to get logs from my VMware hosts and VMs into logstash. I am getting logs from the hosts though, in truth, most of what I see is rather meaningless. I'm not able to figure out how to get individual V… --- ## [Kibana with Elasticsearch](https://discuss.elastic.co/t/kibana-with-elasticsearch/31991)
**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\ **Replies:** 3\ **Last updated:** [October 12, 2015, 9:19am UTC](https://discuss.elastic.co/t/kibana-with-elasticsearch/31991 "2015-10-12T09:19:46Z")
On firing up Kibana which I configured to use my Found instance, I get the error: "Warning No default index pattern. You must select or create one to continue." How do I do that??/ --- ## [Facets vs aggregations from lucene context](https://discuss.elastic.co/t/facets-vs-aggregations-from-lucene-context/638)
**Author:** [@Jason\_Wee](https://discuss.elastic.co/u/Jason_Wee)\ **Replies:** 2\ **Last updated:** [May 16, 2015, 7:02pm UTC](https://discuss.elastic.co/t/facets-vs-aggregations-from-lucene-context/638 "2015-05-16T19:02:07Z")
Hi elasticsearch, is there a difference between facets vs aggregation from lucene context? I like to read more about this technically if there is any documentation given. Thank you. Jason --- ## [\[ERROR\]\[elasticsearch-service\] Unable to retrieve version information from Elasticsearch nodes](https://discuss.elastic.co/t/error-elasticsearch-service-unable-to-retrieve-version-information-from-elasticsearch-nodes/325827)
**Author:** [@Mausam\_Singh](https://discuss.elastic.co/u/Mausam_Singh)\ **Replies:** 5\ **Last updated:** [February 27, 2023, 11:49am UTC](https://discuss.elastic.co/t/error-elasticsearch-service-unable-to-retrieve-version-information-from-elasticsearch-nodes/325827 "2023-02-27T11:49:21Z")
Hi Team, I have locally installed elasticsearch and kibana on Mac OS. it was working fine from last 1.5 months . However I am getting below error (while starting kibana) from last week: Below is elasticsearch detail : … --- ## [Help with Filebeat for Windows](https://discuss.elastic.co/t/help-with-filebeat-for-windows/62109)
**Author:** [@jnpetty](https://discuss.elastic.co/u/jnpetty)\ **Replies:** 5\ **Last updated:** [October 4, 2016, 4:47pm UTC](https://discuss.elastic.co/t/help-with-filebeat-for-windows/62109 "2016-10-04T16:47:40Z")
I am trying to test out filebeat on a Windows server. Currently I am echoing into a test file that filebeat is monitoring and then output to another file to see what the output looks like. I am writing to the test file w… --- ## [Split data into multiple indices automatically on insert](https://discuss.elastic.co/t/split-data-into-multiple-indices-automatically-on-insert/39650)
**Author:** [@edeak](https://discuss.elastic.co/u/edeak)\ **Replies:** 5\ **Last updated:** [January 21, 2016, 6:19pm UTC](https://discuss.elastic.co/t/split-data-into-multiple-indices-automatically-on-insert/39650 "2016-01-21T18:19:56Z")
Hi guys, what I like to do is that when I insert my data which has a timestamp field, my data is automatically should be splitted across weekly indices and if it's necessary, a new index with pre-defined mapping should… --- ## [Multiple script/condition for a watcher](https://discuss.elastic.co/t/multiple-script-condition-for-a-watcher/100051)
**Author:** [@Benjamin\_Peere](https://discuss.elastic.co/u/Benjamin_Peere)\ **Replies:** 3\ **Last updated:** [September 11, 2017, 1:27pm UTC](https://discuss.elastic.co/t/multiple-script-condition-for-a-watcher/100051 "2017-09-11T13:27:02Z")
hello everyone, i am wondering if it is possible to have multiple conditions or script for a watcher, to do Something like this : \[image\] or like this : \[image\] obviously this doesn't work, but i would like to know … --- ## [Unable to access nested fields in pipeline processors](https://discuss.elastic.co/t/unable-to-access-nested-fields-in-pipeline-processors/76054)
**Author:** [@peak](https://discuss.elastic.co/u/peak)\ **Replies:** 3\ **Last updated:** [February 24, 2017, 7:56am UTC](https://discuss.elastic.co/t/unable-to-access-nested-fields-in-pipeline-processors/76054 "2017-02-24T07:56:53Z")
See Stackoverflow: http://stackoverflow.com/questions/42393543/elasticsearch-5-2-pipeline-can-not-access-nested-fields I need to access nested fields in pipeline processors. It should be a frequent use case, however, I… --- ## [Kibana, elasticsearch and filebeat. Do i need logstash?](https://discuss.elastic.co/t/kibana-elasticsearch-and-filebeat-do-i-need-logstash/113070)
**Author:** [@mvanhemert](https://discuss.elastic.co/u/mvanhemert)\ **Replies:** 3\ **Last updated:** [December 23, 2017, 6:50pm UTC](https://discuss.elastic.co/t/kibana-elasticsearch-and-filebeat-do-i-need-logstash/113070 "2017-12-23T18:50:25Z")
Hello, I'm a compleet n00b concerning the ELK stack. I'm a network engineer and doing some research about logging and analytics. I wanna do 3 things. Grab log out of /var/log on the local machine. Grab log via filebea… --- ## ["The shutdown process appears to be stalled due to busy or blocked plugins"](https://discuss.elastic.co/t/the-shutdown-process-appears-to-be-stalled-due-to-busy-or-blocked-plugins/135000)
**Author:** [@dr01](https://discuss.elastic.co/u/dr01)\ **Replies:** 2\ **Last updated:** [June 8, 2018, 8:48am UTC](https://discuss.elastic.co/t/the-shutdown-process-appears-to-be-stalled-due-to-busy-or-blocked-plugins/135000 "2018-06-08T08:48:11Z")
I've set up a testing VM with a full ELK stack. Often I see this error in the Logstash logs: \[2018-06-07T15:34:34,248\]\[ERROR\]\[logstash.shutdownwatcher \] The shutdown process appears to be stalled due to busy or blocked… --- ## [Issues with plugins and Kibana 6.3](https://discuss.elastic.co/t/issues-with-plugins-and-kibana-6-3/136204)
**Author:** [@snuids](https://discuss.elastic.co/u/snuids)\ **Replies:** 2\ **Last updated:** [June 18, 2018, 1:31pm UTC](https://discuss.elastic.co/t/issues-with-plugins-and-kibana-6-3/136204 "2018-06-18T13:31:36Z")
I use a very simple plugin to display traffic lights in Kibana. It is working perfectly with Kibana 6.0 and 6.1. But breaks Kibana 6.3. The source code is available here: To be more precise here: import {CATEGORY} f… --- ## [Email notification for Alerting/reporting](https://discuss.elastic.co/t/email-notification-for-alerting-reporting/150758)
**Author:** [@lcui\_dxc](https://discuss.elastic.co/u/lcui_dxc)\ **Replies:** 6\ **Last updated:** [October 9, 2018, 8:36pm UTC](https://discuss.elastic.co/t/email-notification-for-alerting-reporting/150758 "2018-10-09T20:36:57Z")
Hello there, I need to set up the email notification for watchers/alerts and reporting with x-pack on AWS cloud. I read the docs below: https://www.elastic.co/guide/en/elastic-stack-overview/6.3/actions-email.html#ama… --- ## [Difference between \_version and \[\_seq\_no, \_primary\_term\]](https://discuss.elastic.co/t/difference-between-version-and-seq-no-primary-term/182859)
**Author:** [@shayantabrizi](https://discuss.elastic.co/u/shayantabrizi)\ **Replies:** 1\ **Last updated:** [May 27, 2019, 8:21am UTC](https://discuss.elastic.co/t/difference-between-version-and-seq-no-primary-term/182859 "2019-05-27T08:21:24Z")
It seems to me that both versioning (\_version; See here) and \[\_seq\_no, \_primary\_term\] (See here) are used for optimistic concurrency control (e.g., to determine the version of a document we want to update). What's the di… --- ## [Logstash: If message contains regex add field](https://discuss.elastic.co/t/logstash-if-message-contains-regex-add-field/86799)
**Author:** [@jasdf](https://discuss.elastic.co/u/jasdf)\ **Replies:** 0\ **Last updated:** [May 23, 2017, 11:36am UTC](https://discuss.elastic.co/t/logstash-if-message-contains-regex-add-field/86799 "2017-05-23T11:36:57Z")
Hello, within my Logstash config I'm searching for a regex pattern. If a logfile is found which matches the regex a new field should be added with the found pattern. The if statement is working but I don't know how to … --- ## [Snapshot and restore using shared file system](https://discuss.elastic.co/t/snapshot-and-restore-using-shared-file-system/336365)
**Author:** [@Sann](https://discuss.elastic.co/u/Sann)\ **Replies:** 8\ **Last updated:** [June 21, 2023, 12:19pm UTC](https://discuss.elastic.co/t/snapshot-and-restore-using-shared-file-system/336365 "2023-06-21T12:19:19Z")
When using a cluster with more than one node is not enough to create local folders for shared fs repo. you need smb/nfs mounted drive because each node will check the "repo" and if there is no communication between nodes… --- ## [Data storage - too much space taken](https://discuss.elastic.co/t/data-storage-too-much-space-taken/65513)
**Author:** [@linuxdev](https://discuss.elastic.co/u/linuxdev)\ **Replies:** 3\ **Last updated:** [November 9, 2016, 7:21pm UTC](https://discuss.elastic.co/t/data-storage-too-much-space-taken/65513 "2016-11-09T19:21:02Z")
So im testing elasticsearch and it turns out that I accumulate ~1gb of data ever 24 hours. This is way more than Ive anticipated. I initially planned to dump data on harddrive, but with 1Tb drive it will get filled u… --- ## [Import\_dashboards - fail to load Elasticsearch loader](https://discuss.elastic.co/t/import-dashboards-fail-to-load-elasticsearch-loader/101405)
**Author:** [@marleybobby](https://discuss.elastic.co/u/marleybobby)\ **Replies:** 2\ **Last updated:** [September 22, 2017, 12:25pm UTC](https://discuss.elastic.co/t/import-dashboards-fail-to-load-elasticsearch-loader/101405 "2017-09-22T12:25:42Z")
Hi, I just installed elasticsearch and kibana, as described on this page https://www.elastic.co/guide/en/elastic-stack/current/installing-elastic-stack.html and it seems works fine. Now i installed packetbeat and tried … --- ## [Authentication for kibana, unknown setting xpack.security.enabled](https://discuss.elastic.co/t/authentication-for-kibana-unknown-setting-xpack-security-enabled/254434)
**Author:** [@oobi89](https://discuss.elastic.co/u/oobi89)\ **Replies:** 5\ **Last updated:** [November 6, 2020, 9:47am UTC](https://discuss.elastic.co/t/authentication-for-kibana-unknown-setting-xpack-security-enabled/254434 "2020-11-06T09:47:25Z")
I've had Elasticsearch and kibana as part of my docker-compose stack for some project for a while but now I need to add authentication for kibana and came across a strange problem. According to docs I need to set xpack.s… --- ## [Cannot access Kibana with an active X-Pack license](https://discuss.elastic.co/t/cannot-access-kibana-with-an-active-x-pack-license/111338)
**Author:** [@ggdagg](https://discuss.elastic.co/u/ggdagg)\ **Replies:** 5\ **Last updated:** [December 13, 2017, 11:21am UTC](https://discuss.elastic.co/t/cannot-access-kibana-with-an-active-x-pack-license/111338 "2017-12-13T11:21:57Z")
Hi all, I have the issue where when I try to connect to Kibana, I have the following error: "Login is currently disabled because the license could not be determined. Please check that Elasticsearch has the X-Pack plugi… --- ## [How to bulk insert documents?](https://discuss.elastic.co/t/how-to-bulk-insert-documents/63063)
**Author:** [@frederes](https://discuss.elastic.co/u/frederes)\ **Replies:** 5\ **Last updated:** [October 14, 2016, 3:59pm UTC](https://discuss.elastic.co/t/how-to-bulk-insert-documents/63063 "2016-10-14T15:59:14Z")
Hello, I need to index a lot of documents (types) into my index, what is the best mehod ? bulk ? How do i pass all the document fields to the bulk statement ? (because in the doc i only see '\_id') thank you --- ## [2.x plugins using Groovy with NIO are blocked by SecurityManager](https://discuss.elastic.co/t/2-x-plugins-using-groovy-with-nio-are-blocked-by-securitymanager/29202)
**Author:** [@jprante](https://discuss.elastic.co/u/jprante)\ **Replies:** 0\ **Last updated:** [September 13, 2015, 7:53pm UTC](https://discuss.elastic.co/t/2-x-plugins-using-groovy-with-nio-are-blocked-by-securitymanager/29202 "2015-09-13T19:53:26Z")
I ported my groovy-based web app plugin to 2.0.0-beta1 https://github.com/jprante/elasticsearch-webapp but the new security manager got in the way because I am using NIO: Exception in thread "main" java.security.… --- ## [SQL queries and node js](https://discuss.elastic.co/t/sql-queries-and-node-js/141832)
**Author:** [@blueren](https://discuss.elastic.co/u/blueren)\ **Replies:** 4\ **Last updated:** [July 31, 2018, 5:40am UTC](https://discuss.elastic.co/t/sql-queries-and-node-js/141832 "2018-07-31T05:40:50Z")
Hello. I just read the blog about support for SQL queries against ES database. I was wondering how I can get it to work with nodejs. Currently, the elasticsearch npm module caters to regular ES queries. Is it possible t… --- ## [ES Not Allocating Shards According to Hot/Warm Architecture via Curator](https://discuss.elastic.co/t/es-not-allocating-shards-according-to-hot-warm-architecture-via-curator/91026)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 4\ **Last updated:** [June 28, 2017, 5:14pm UTC](https://discuss.elastic.co/t/es-not-allocating-shards-according-to-hot-warm-architecture-via-curator/91026 "2017-06-28T17:14:38Z")
ES: v 5.4.0 Curator v 5.1.1 I have a hot/warm architecture with roughly 10 warm (disk) nodes and 3 hot (SSD) nodes. Effectively, I can tag indices to be moved over to the warm nodes from the hot, and can verify they ge… --- ## [Issue with Nested Aggregation & Sum Query](https://discuss.elastic.co/t/issue-with-nested-aggregation-sum-query/36140)
**Author:** [@code\_blue](https://discuss.elastic.co/u/code_blue)\ **Replies:** 6\ **Last updated:** [December 2, 2015, 11:00am UTC](https://discuss.elastic.co/t/issue-with-nested-aggregation-sum-query/36140 "2015-12-02T11:00:41Z")
We have the following aggregation query: { "aggs": { "STATE": { "terms": { "field": "STATE.raw" }, "aggs": { "CITY": { "terms": { "field": "CITY.raw" }, "aggs": { "STREET"… --- ## [Shrink of shard fails with error "source primary is allocated on another node"](https://discuss.elastic.co/t/shrink-of-shard-fails-with-error-source-primary-is-allocated-on-another-node/320360)
**Author:** [@Thomas\_Hasfjord](https://discuss.elastic.co/u/Thomas_Hasfjord)\ **Replies:** 7\ **Last updated:** [May 6, 2025, 6:25pm UTC](https://discuss.elastic.co/t/shrink-of-shard-fails-with-error-source-primary-is-allocated-on-another-node/320360 "2025-05-06T18:25:20Z")
We are running an ElasticCloud Cluster with 3 nodes and recently made a change to the lifecycle policy of one of our Data Streams: from: { "policy": { "phases": { "hot": { "actions": { "ro… --- ## [How to calculate delta value](https://discuss.elastic.co/t/how-to-calculate-delta-value/107156)
**Author:** [@hsiuming](https://discuss.elastic.co/u/hsiuming)\ **Replies:** 2\ **Last updated:** [November 14, 2017, 12:42am UTC](https://discuss.elastic.co/t/how-to-calculate-delta-value/107156 "2017-11-14T00:42:11Z")
Hello we now create a Visualize data table in kibana. The content of the table is: August 29th 2017, 13:56:49.121 0.063733000 August 29th 2017, 13:56:49.207 0.149665000 August 29th 2017, 13:56:49.291 0.233901000 … --- ## [Filebeat Binary Cannot Be Executed](https://discuss.elastic.co/t/filebeat-binary-cannot-be-executed/185749)
**Author:** [@Dominic\_Evert](https://discuss.elastic.co/u/Dominic_Evert)\ **Replies:** 5\ **Last updated:** [June 14, 2019, 8:30am UTC](https://discuss.elastic.co/t/filebeat-binary-cannot-be-executed/185749 "2019-06-14T08:30:14Z")
Running filebeat 6.2.0 on a ubuntu 16.04 VM, however, on starting the service, filebeat crashed, saying that the file /usr/share/filebeat/bin/filebeat cannot be found. Within /usr/share/filebeat/bin/ both filebeat and f… --- ## [Dynamically change image on canvas](https://discuss.elastic.co/t/dynamically-change-image-on-canvas/188701)
**Author:** [@LacioDrom](https://discuss.elastic.co/u/LacioDrom)\ **Replies:** 3\ **Last updated:** [July 5, 2019, 3:20pm UTC](https://discuss.elastic.co/t/dynamically-change-image-on-canvas/188701 "2019-07-05T15:20:21Z")
Hi all, I'm new to elasticsearch, so I apologize if my question is trivial :roll\_eyes: I would like to dinamically change the image displayed in a canvas basing on the last field "value" I've received in my dataset (va… --- ## [TCP/UDP configuration question](https://discuss.elastic.co/t/tcp-udp-configuration-question/34445)
**Author:** [@uvmvball](https://discuss.elastic.co/u/uvmvball)\ **Replies:** 3\ **Last updated:** [November 13, 2015, 1:43pm UTC](https://discuss.elastic.co/t/tcp-udp-configuration-question/34445 "2015-11-13T13:43:58Z")
I'm new to the packetbeat world and have installed beta3 (will get to the rc1 shortly), but am trying to enable the TCP/UDP protocol and can't seem to figure out where to enable that to see info to send to elastic. I've… --- ## [Kibana 7.1.0 -- Secure Communication Between Kibana and Browser -- Bad Decrypt Error](https://discuss.elastic.co/t/kibana-7-1-0-secure-communication-between-kibana-and-browser-bad-decrypt-error/183406)
**Author:** [@ShaqFanClub](https://discuss.elastic.co/u/ShaqFanClub)\ **Replies:** 1\ **Last updated:** [May 29, 2019, 7:13pm UTC](https://discuss.elastic.co/t/kibana-7-1-0-secure-communication-between-kibana-and-browser-bad-decrypt-error/183406 "2019-05-29T19:13:46Z")
Hello, I am attempting to set up TLS on my cluster. So far, I have secure communication between Logstash / Elasticsearch, the Elasticsearch nodes, and Elasticsearch / Kibana working without errors. The last step is to … --- ## [Do not recieve sysmon log from the Windows Integration in elastic agent](https://discuss.elastic.co/t/do-not-recieve-sysmon-log-from-the-windows-integration-in-elastic-agent/288362)
**Author:** [@RobinIT](https://discuss.elastic.co/u/RobinIT)\ **Replies:** 7\ **Last updated:** [November 8, 2021, 7:57am UTC](https://discuss.elastic.co/t/do-not-recieve-sysmon-log-from-the-windows-integration-in-elastic-agent/288362 "2021-11-08T07:57:34Z")
Hello, I want to enable in elastic agent the Windows integration (version 1.2.2) I want to use this integration to ship in Sysmon and powershell log. The agent is connected to a Fleet. Adding the integration to the age… --- ## [How can I change an existing field type using Python?](https://discuss.elastic.co/t/how-can-i-change-an-existing-field-type-using-python/156968)
**Author:** [@seanthegeek](https://discuss.elastic.co/u/seanthegeek)\ **Replies:** 3\ **Last updated:** [November 16, 2018, 4:03am UTC](https://discuss.elastic.co/t/how-can-i-change-an-existing-field-type-using-python/156968 "2018-11-16T04:03:59Z")
Hi Everyone, I have an open source project that uses Elasticsearch and Kibana to visualize DMARC data for almost a year now. Just recently, a user found a bug where I mapped a field to a long when it should be text (… --- ## [Giving Select Index Pattern Access in Kibana to Users using Shield](https://discuss.elastic.co/t/giving-select-index-pattern-access-in-kibana-to-users-using-shield/47813)
**Author:** [@Katy\_Gero](https://discuss.elastic.co/u/Katy_Gero)\ **Replies:** 7\ **Last updated:** [April 22, 2016, 2:02pm UTC](https://discuss.elastic.co/t/giving-select-index-pattern-access-in-kibana-to-users-using-shield/47813 "2016-04-22T14:02:31Z")
I am trying to set up giving some users access only to certain index patterns (and eventually queries) using roles in Shield. I have successfully set up a 'read\_only' role that is able to use Kibana, see code below: re… --- ## [File output gzip configuration](https://discuss.elastic.co/t/file-output-gzip-configuration/912)
**Author:** [@kebbkh](https://discuss.elastic.co/u/kebbkh)\ **Replies:** 2\ **Last updated:** [May 20, 2015, 8:28am UTC](https://discuss.elastic.co/t/file-output-gzip-configuration/912 "2015-05-20T08:28:24Z")
Hello, I am trying to use the gzip option with the file output, however, I wanted to know how would I go about looking into the contents of the generated gzip file? file { path =\> "/throttled/output.txt" … --- ## [ML memory hits hard\_limit - closed](https://discuss.elastic.co/t/ml-memory-hits-hard-limit-closed/108459)
**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\ **Replies:** 6\ **Last updated:** [November 29, 2017, 4:49pm UTC](https://discuss.elastic.co/t/ml-memory-hits-hard-limit-closed/108459 "2017-11-29T16:49:02Z")
I am running an ML job that keeps hitting the hard\_limit on memory status, closing this I'm assuming this has something to do with the variables I've chosen. I tried to set the model memory limit up from the default(40… --- ## [Logstash hangs with OutOfMemoryError](https://discuss.elastic.co/t/logstash-hangs-with-outofmemoryerror/33005)
**Author:** [@allenmchan](https://discuss.elastic.co/u/allenmchan)\ **Replies:** 6\ **Last updated:** [October 27, 2015, 5:41pm UTC](https://discuss.elastic.co/t/logstash-hangs-with-outofmemoryerror/33005 "2015-10-27T17:41:09Z")
Today i noticed that 5/8 logstash indexers were "hung" and i see the below error in /var/log/logstash/logstash.err Running logstash 1.5.3 with Transport Node for elasticsearch output Running logstash with LS\_HEAP\_SIZE… --- ## [\[HELP\]\[ERROR\]\[FILEBEAT\] “cannot retrieve the elasticsearch license from the /\_license endpoint”](https://discuss.elastic.co/t/help-error-filebeat-cannot-retrieve-the-elasticsearch-license-from-the-license-endpoint/239123)
**Author:** [@Vikas\_Rathore](https://discuss.elastic.co/u/Vikas_Rathore)\ **Replies:** 3\ **Last updated:** [June 29, 2020, 3:30pm UTC](https://discuss.elastic.co/t/help-error-filebeat-cannot-retrieve-the-elasticsearch-license-from-the-license-endpoint/239123 "2020-06-29T15:30:05Z")
I had below filebeat-kubernetes.yaml for my ELK where I was using filebeat v 6.6.2 and AWS Elasticsearch version 6.4. Everything was working fine. --- apiVersion: v1 kind: ConfigMap metadata: name: filebeat-config n… --- ## [Filebeat unable to connect to logstash](https://discuss.elastic.co/t/filebeat-unable-to-connect-to-logstash/65085)
**Author:** [@Elias\_Lim](https://discuss.elastic.co/u/Elias_Lim)\ **Replies:** 3\ **Last updated:** [November 5, 2016, 6:55am UTC](https://discuss.elastic.co/t/filebeat-unable-to-connect-to-logstash/65085 "2016-11-05T06:55:26Z")
Hello, I'm using ELK ver.5.0 on a server and Filebeat ver.5.0 on my client server. I've followed the setup and config tutorials and managed to get everything running. However, it seems like I'm unable to connect fileb… [Previous page](https://discuss.elastic.co/top.md?page=520&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=522&per_page=50&period=all)