# Top

**URL:** https://discuss.elastic.co/top.md?page=522&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 523

---

## [How to capture a heap dump from a running JVM](https://discuss.elastic.co/t/how-to-capture-a-heap-dump-from-a-running-jvm/84)

<div class="topic-metadata">

**Author:** [@Leslie\_Hawthorn](https://discuss.elastic.co/u/Leslie_Hawthorn)\
**Replies:** 0\
**Last updated:** [May 1, 2015, 10:02am UTC](https://discuss.elastic.co/t/how-to-capture-a-heap-dump-from-a-running-jvm/84 "2015-05-01T10:02:49Z")

</div>

This article applies to any product that runs a JVM -- Elasticsearch and Logstash 1.5 (or an earlier variant when using JRuby, which Logstash 1.5 uses). NOTE - the JVM will pause during the collection of this heap dump…

---

## [Multiple inputs on the same port](https://discuss.elastic.co/t/multiple-inputs-on-the-same-port/165391)

<div class="topic-metadata">

**Author:** [@hoff](https://discuss.elastic.co/u/hoff)\
**Replies:** 4\
**Last updated:** [January 24, 2019, 11:45am UTC](https://discuss.elastic.co/t/multiple-inputs-on-the-same-port/165391 "2019-01-24T11:45:03Z")

</div>

I have five servers who generate 5 other jsons with two recognize field type (example value server1) and source (example value server\_name). My question is whether I can send data of five server on one input port and re…

---

## [Change the data type mapping of a field](https://discuss.elastic.co/t/change-the-data-type-mapping-of-a-field/121512)

<div class="topic-metadata">

**Author:** [@ghouston10](https://discuss.elastic.co/u/ghouston10)\
**Replies:** 4\
**Last updated:** [February 27, 2018, 12:44pm UTC](https://discuss.elastic.co/t/change-the-data-type-mapping-of-a-field/121512 "2018-02-27T12:44:22Z")

</div>

Hi, I have a loaded index in Kibana. I need to perform a regex search on one of the fields. The field is currently type 'text' and the regex search doesn't seem to work correctly on 'text' fields. I have tested my regex…

---

## [String to Date while loading data from csv file to elasticsearch using logstash](https://discuss.elastic.co/t/string-to-date-while-loading-data-from-csv-file-to-elasticsearch-using-logstash/99479)

<div class="topic-metadata">

**Author:** [@devil\_srj7](https://discuss.elastic.co/u/devil_srj7)\
**Replies:** 4\
**Last updated:** [September 6, 2017, 6:53am UTC](https://discuss.elastic.co/t/string-to-date-while-loading-data-from-csv-file-to-elasticsearch-using-logstash/99479 "2017-09-06T06:53:41Z")

</div>

I’m using the apple stock as sample data. Here I have Date field which is being changed to string type when loading the data. the format of date in csv file is “dd-MM-YYY” I want to load this Date as a ‘date type’ to …

---

## [Indexing csv data in a nested field using logstash](https://discuss.elastic.co/t/indexing-csv-data-in-a-nested-field-using-logstash/49912)

<div class="topic-metadata">

**Author:** [@tamil](https://discuss.elastic.co/u/tamil)\
**Replies:** 4\
**Last updated:** [May 13, 2016, 8:44am UTC](https://discuss.elastic.co/t/indexing-csv-data-in-a-nested-field-using-logstash/49912 "2016-05-13T08:44:32Z")

</div>

With below settings im unable to index the data . Logstash pipeline starts and stands still without showing any error or producing output. Please correct me where it is going wrong Input csv: cust\_name,state1,city1,…

---

## [How to convert type for field like a.b in mutate plugin?](https://discuss.elastic.co/t/how-to-convert-type-for-field-like-a-b-in-mutate-plugin/32236)

<div class="topic-metadata">

**Author:** [@Enniu\_51](https://discuss.elastic.co/u/Enniu_51)\
**Replies:** 5\
**Last updated:** [October 15, 2015, 6:27am UTC](https://discuss.elastic.co/t/how-to-convert-type-for-field-like-a-b-in-mutate-plugin/32236 "2015-10-15T06:27:12Z")

</div>

As I said here, And now I change my config to: if "geo\_parse\_succeed" in \[tags\] { mutate { add\_field =\> {"geoip.location.lon" =\> "%{longitude}"} add\_field =\> {"geoip.location.lat" =\> "%{latitude}"} …

---

## [Resthighlevelclient configuration on application.yml](https://discuss.elastic.co/t/resthighlevelclient-configuration-on-application-yml/191497)

<div class="topic-metadata">

**Author:** [@Buta\_Kota](https://discuss.elastic.co/u/Buta_Kota)\
**Replies:** 8\
**Last updated:** [July 21, 2019, 7:27pm UTC](https://discuss.elastic.co/t/resthighlevelclient-configuration-on-application-yml/191497 "2019-07-21T19:27:37Z")

</div>

Hi there, I am trying to connect to elasticsearch with Resthighlevelclient and it is was working ok when i hard code the host, port and schema inside the code. But when I am using application.yml for defining the port, …

---

## [Like query \*string\*](https://discuss.elastic.co/t/like-query-string/149971)

<div class="topic-metadata">

**Author:** [@ashishtiwari1993](https://discuss.elastic.co/u/ashishtiwari1993)\
**Replies:** 8\
**Last updated:** [September 26, 2018, 10:15am UTC](https://discuss.elastic.co/t/like-query-string/149971 "2018-09-26T10:15:21Z")

</div>

Hi guys, Specification: Elasticsearch version : 6.2.2 I have data which having "emailaddress" field. Suppose my one of the value is "user@example.com". I might have search input like "@exam", "user@" , "user", ".com" …

---

## [Kibana Error loading data](https://discuss.elastic.co/t/kibana-error-loading-data/249179)

<div class="topic-metadata">

**Author:** [@Eric\_Scaramuzzo](https://discuss.elastic.co/u/Eric_Scaramuzzo)\
**Replies:** 2\
**Last updated:** [October 21, 2020, 9:27pm UTC](https://discuss.elastic.co/t/kibana-error-loading-data/249179 "2020-10-21T21:27:16Z")

</div>

Getting "Error loading data": error on kibana: Replaced my elasticsearch domain with \<domain\> Error at Fetch.\_callee3$ (https://\<domain\>.us-west-1.es.amazonaws.com/\_plugin/kibana/bundles/commons.bundle.js:1:142…

---

## [Very slow searches on a very large shard](https://discuss.elastic.co/t/very-slow-searches-on-a-very-large-shard/116945)

<div class="topic-metadata">

**Author:** [@mabn0](https://discuss.elastic.co/u/mabn0)\
**Replies:** 3\
**Last updated:** [January 26, 2018, 1:08pm UTC](https://discuss.elastic.co/t/very-slow-searches-on-a-very-large-shard/116945 "2018-01-26T13:08:37Z")

</div>

I have a 3 node cluster with an index which contains 72 shards. There are 330M documents amounting to 100GB according to \_cat/indices. This index has ~1000 fields, but each document has no more than 30. Routing by custo…

---

## [How to get mapping meta data with java API](https://discuss.elastic.co/t/how-to-get-mapping-meta-data-with-java-api/21505)

<div class="topic-metadata">

**Author:** [@Sven\_Jorns](https://discuss.elastic.co/u/Sven_Jorns)\
**Replies:** 2\
**Last updated:** [February 15, 2017, 1:42pm UTC](https://discuss.elastic.co/t/how-to-get-mapping-meta-data-with-java-api/21505 "2017-02-15T13:42:32Z")

</div>

Hi, How to get the meta data of mappings (http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/mapping-meta.html) using (transport) client Java API? Thx Sven -- You received this message be…

---

## [Out of space issue](https://discuss.elastic.co/t/out-of-space-issue/48278)

<div class="topic-metadata">

**Author:** [@scaarup](https://discuss.elastic.co/u/scaarup)\
**Replies:** 2\
**Last updated:** [April 26, 2016, 6:20am UTC](https://discuss.elastic.co/t/out-of-space-issue/48278 "2016-04-26T06:20:44Z")

</div>

Hi all. I have the following in my elasticsearch conf: path.data: /var/lib/elasticsearch/DATA2,/var/lib/elasticsearch/DATA3,/var/lib/elasticsearch/DATA1 Now I have run out of discspace on /var/lib/elasticsearch/DATA2…

---

## [RAID or JBOD](https://discuss.elastic.co/t/raid-or-jbod/13011)

<div class="topic-metadata">

**Author:** [@baytech](https://discuss.elastic.co/u/baytech)\
**Replies:** 4\
**Last updated:** [July 31, 2013, 7:58pm UTC](https://discuss.elastic.co/t/raid-or-jbod/13011 "2013-07-31T19:58:49Z")

</div>

Currently don't have extreme through put requirements. Planning for a few data nodes for indices. Since elasticsearch already allows for replicas - what is the recommended RAID with SAS disks or SATA3 JBOD disks. B…

---

## [How to disable security authentication in ECK?](https://discuss.elastic.co/t/how-to-disable-security-authentication-in-eck/334057)

<div class="topic-metadata">

**Author:** [@Teresajw](https://discuss.elastic.co/u/Teresajw)\
**Replies:** 6\
**Last updated:** [May 23, 2023, 7:34am UTC](https://discuss.elastic.co/t/how-to-disable-security-authentication-in-eck/334057 "2023-05-23T07:34:11Z")

</div>

How to disable security authentication in ECK? :cold\_face: When I was looking for how to disable security authentication in eck, I found this configuration in the official documentation 1. The following Elasticsearch s…

---

## [Is it possible to remove Inactive Agents from Fleet?](https://discuss.elastic.co/t/is-it-possible-to-remove-inactive-agents-from-fleet/334043)

<div class="topic-metadata">

**Author:** [@kreed](https://discuss.elastic.co/u/kreed)\
**Replies:** 5\
**Last updated:** [May 26, 2023, 3:51pm UTC](https://discuss.elastic.co/t/is-it-possible-to-remove-inactive-agents-from-fleet/334043 "2023-05-26T15:51:34Z")

</div>

After uninstalling an Agent, as expected the agent shows a status of Offline in Fleet. Then once the agent is unenrolled, it goes to a status of Inactive. A previous question I had asked on this forum was if it is possib…

---

## [Converting long into a proper date field once in ES](https://discuss.elastic.co/t/converting-long-into-a-proper-date-field-once-in-es/141237)

<div class="topic-metadata">

**Author:** [@amandrell](https://discuss.elastic.co/u/amandrell)\
**Replies:** 2\
**Last updated:** [July 23, 2018, 6:35pm UTC](https://discuss.elastic.co/t/converting-long-into-a-proper-date-field-once-in-es/141237 "2018-07-23T18:35:15Z")

</div>

I have various fields in my data that are in epoch\_millis (long). Is it possible to create a mapping that converts this long into a proper date field when it gets ingested in Elasticsearch?

---

## [LEAK: ByteBuf.release() was not called before it's garbage-collected](https://discuss.elastic.co/t/leak-bytebuf-release-was-not-called-before-its-garbage-collected/207063)

<div class="topic-metadata">

**Author:** [@Mac\_Oscar](https://discuss.elastic.co/u/Mac_Oscar)\
**Replies:** 4\
**Last updated:** [November 25, 2019, 7:37am UTC](https://discuss.elastic.co/t/leak-bytebuf-release-was-not-called-before-its-garbage-collected/207063 "2019-11-25T07:37:20Z")

</div>

Hi, I have a problem I have never encountered, so I need some help. My es cluster has two masters and four data nodes. Master 1 is the standby node and it is also the problem node. Everything is working normally！！！ …

---

## [Unable to start Kibana - Port 5601 already in use](https://discuss.elastic.co/t/unable-to-start-kibana-port-5601-already-in-use/226171)

<div class="topic-metadata">

**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\
**Replies:** 5\
**Last updated:** [April 2, 2020, 11:17am UTC](https://discuss.elastic.co/t/unable-to-start-kibana-port-5601-already-in-use/226171 "2020-04-02T11:17:30Z")

</div>

Hello Community - after i enabled HTTPs on my Kibana Server - i cannot get it to start. When i review the logs - i see the following error message: {"type":"log","@timestamp":"2019-10-08T13:04:50Z","tags":\["fatal","ro…

---

## [Has anyone been able to use @elastic/apm-rum-angular with aot?](https://discuss.elastic.co/t/has-anyone-been-able-to-use-elastic-apm-rum-angular-with-aot/198456)

<div class="topic-metadata">

**Author:** [@Azuka](https://discuss.elastic.co/u/Azuka)\
**Replies:** 3\
**Last updated:** [September 10, 2019, 4:59pm UTC](https://discuss.elastic.co/t/has-anyone-been-able-to-use-elastic-apm-rum-angular-with-aot/198456 "2019-09-10T16:59:43Z")

</div>

First, thanks for the initial Angular integration. This might be premature, given it's not full ready and was just released 3 days ago, but I had some issues integrating it. Kibana version: 7.3.1 Elasticsearch version:…

---

## [How to configure Filebeat -\> ELK Docker Container correctly?](https://discuss.elastic.co/t/how-to-configure-filebeat-elk-docker-container-correctly/63769)

<div class="topic-metadata">

**Author:** [@zoram](https://discuss.elastic.co/u/zoram)\
**Replies:** 4\
**Last updated:** [November 1, 2016, 3:32pm UTC](https://discuss.elastic.co/t/how-to-configure-filebeat-elk-docker-container-correctly/63769 "2016-11-01T15:32:39Z")

</div>

Dear All, I have already installed on my local computer ELK Docker Container and Filebeat. I could read my local glassfish log directly from Kibana dashboard. But I want that the log file should be forwarding to ELK…

---

## [Disable machine learning process creation](https://discuss.elastic.co/t/disable-machine-learning-process-creation/214913)

<div class="topic-metadata">

**Author:** [@musician](https://discuss.elastic.co/u/musician)\
**Replies:** 6\
**Last updated:** [January 14, 2020, 3:35pm UTC](https://discuss.elastic.co/t/disable-machine-learning-process-creation/214913 "2020-01-14T15:35:29Z")

</div>

I am using Elasticsearch 7.1.1 and noticed that when I start it, a process controller.exe (part of Elasticsearch machine learning) is spawned automatically. How do I disable creation of this process since I do not use ma…

---

## [Exact match not working](https://discuss.elastic.co/t/exact-match-not-working/35787)

<div class="topic-metadata">

**Author:** [@setuk](https://discuss.elastic.co/u/setuk)\
**Replies:** 6\
**Last updated:** [November 28, 2015, 9:33am UTC](https://discuss.elastic.co/t/exact-match-not-working/35787 "2015-11-28T09:33:19Z")

</div>

I am having issues getting an exact match to work. I am trying instructs here . My test case is to have a single index with a single type with a single field which is not analyzed. I add a record into it and attempt to…

---

## [After upgrade to 7.9.0 Kibana shows : "405 Method Not Allowed"](https://discuss.elastic.co/t/after-upgrade-to-7-9-0-kibana-shows-405-method-not-allowed/246279)

<div class="topic-metadata">

**Author:** [@oicfar](https://discuss.elastic.co/u/oicfar)\
**Replies:** 8\
**Last updated:** [September 4, 2020, 2:04pm UTC](https://discuss.elastic.co/t/after-upgrade-to-7-9-0-kibana-shows-405-method-not-allowed/246279 "2020-09-04T14:04:34Z")

</div>

With 7.8.0 and 7.8.1 there was no problems. But now ... { "statusCode": 405, "error": "Method Not Allowed", "message": "invalid escape sequence \`%{\[' at index 0 of: %{\[@metadata\]\[beat\]}-%{\[@metadata\]\[version\]}-202…

---

## [Access dashboard from other computer](https://discuss.elastic.co/t/access-dashboard-from-other-computer/185118)

<div class="topic-metadata">

**Author:** [@broly21](https://discuss.elastic.co/u/broly21)\
**Replies:** 8\
**Last updated:** [June 11, 2019, 1:05pm UTC](https://discuss.elastic.co/t/access-dashboard-from-other-computer/185118 "2019-06-11T13:05:42Z")

</div>

hello everyone, I would like to know with which server kibana works, I installed it locally but impossible to know if it uses apache or tomcat or others, and I would like to configure the server so that kibana is access…

---

## [Larger index size after Elasticsearch reindex](https://discuss.elastic.co/t/larger-index-size-after-elasticsearch-reindex/172323)

<div class="topic-metadata">

**Author:** [@alexquadrotech](https://discuss.elastic.co/u/alexquadrotech)\
**Replies:** 8\
**Last updated:** [March 15, 2019, 4:07pm UTC](https://discuss.elastic.co/t/larger-index-size-after-elasticsearch-reindex/172323 "2019-03-15T16:07:46Z")

</div>

After performing a reindex on a 75GB index, the new one went to 79GB. Both indexes have the same doc count (54,123,676) and both have the exact same mapping. The original index has 6×2 shards and the new one has 3×2 sha…

---

## [Cannot parse jboss server log](https://discuss.elastic.co/t/cannot-parse-jboss-server-log/49572)

<div class="topic-metadata">

**Author:** [@dlopez](https://discuss.elastic.co/u/dlopez)\
**Replies:** 3\
**Last updated:** [May 12, 2016, 8:02am UTC](https://discuss.elastic.co/t/cannot-parse-jboss-server-log/49572 "2016-05-12T08:02:33Z")

</div>

Hi, I'm newbie on logstash, I've successfully installed and configured ElasticSearch, LogStash and Kibana as well as my first input using the Remote Log4J connector. But now I'm trying to parse the server.log file wi…

---

## [Filebeats logs -\> aws elb of logstash](https://discuss.elastic.co/t/filebeats-logs-aws-elb-of-logstash/111367)

<div class="topic-metadata">

**Author:** [@blackOcean](https://discuss.elastic.co/u/blackOcean)\
**Replies:** 4\
**Last updated:** [December 14, 2017, 10:41am UTC](https://discuss.elastic.co/t/filebeats-logs-aws-elb-of-logstash/111367 "2017-12-14T10:41:38Z")

</div>

Hi, Using AWS elb for logstash server (3 nodes of EC2 instances), but I am getting client is unable to connect. filebeat.log 2017-12-12T14:55:06Z ERR Failed to publish events caused by: client is not connected 2017-12…

---

## [Fresh Logstash installation crashes periodically, has high CPU load, returns "active:failed" and "status=143" after stopping](https://discuss.elastic.co/t/fresh-logstash-installation-crashes-periodically-has-high-cpu-load-returns-active-failed-and-status-143-after-stopping/76101)

<div class="topic-metadata">

**Author:** [@akipaki](https://discuss.elastic.co/u/akipaki)\
**Replies:** 3\
**Last updated:** [February 25, 2017, 3:18pm UTC](https://discuss.elastic.co/t/fresh-logstash-installation-crashes-periodically-has-high-cpu-load-returns-active-failed-and-status-143-after-stopping/76101 "2017-02-25T15:18:13Z")

</div>

System Logstash version: 5.2.1, installed with .deb package. Although this problem has occured on Logstash 5.1.2 as well. OS: Debian 8.7 Java Version: $ java -version openjdk version "1.8.0\_111" OpenJDK Runtime Envi…

---

## [Help to calculate start time from disconnection time and session time](https://discuss.elastic.co/t/help-to-calculate-start-time-from-disconnection-time-and-session-time/36607)

<div class="topic-metadata">

**Author:** [@cdgraff](https://discuss.elastic.co/u/cdgraff)\
**Replies:** 7\
**Last updated:** [December 10, 2015, 1:23pm UTC](https://discuss.elastic.co/t/help-to-calculate-start-time-from-disconnection-time-and-session-time/36607 "2015-12-10T13:23:13Z")

</div>

Hi all, I'm trying to get the StartTime of a session from my icecast streaming logs, into the logs I has the Disconnection date and the session duration time. In simple math need to be something like this: new timesta…

---

## [ES 2.0 problem using PHP cURL commands](https://discuss.elastic.co/t/es-2-0-problem-using-php-curl-commands/36566)

<div class="topic-metadata">

**Author:** [@AndyB](https://discuss.elastic.co/u/AndyB)\
**Replies:** 7\
**Last updated:** [December 7, 2015, 8:09pm UTC](https://discuss.elastic.co/t/es-2-0-problem-using-php-curl-commands/36566 "2015-12-07T20:09:07Z")

</div>

Hello, I have been able to use the following test script without any problems using ElasticSearch v1.x. But now that I have updated to ElasticSearch 2.1 it no longer works. I know the index is correct as I have another a…

---

## [Painless integer division](https://discuss.elastic.co/t/painless-integer-division/150386)

<div class="topic-metadata">

**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\
**Replies:** 2\
**Last updated:** [October 2, 2018, 6:42am UTC](https://discuss.elastic.co/t/painless-integer-division/150386 "2018-10-02T06:42:59Z")

</div>

I am dividing two doc\_counts from an aggregate to produce a percentage and compare it to a percentage. Does integer division in painless produce a float or another integer? I'm using the ctx.vars to get it into a log mes…

---

## [Windows Event Logs - missing fields](https://discuss.elastic.co/t/windows-event-logs-missing-fields/29706)

<div class="topic-metadata">

**Author:** [@selspiero](https://discuss.elastic.co/u/selspiero)\
**Replies:** 8\
**Last updated:** [September 22, 2015, 9:40am UTC](https://discuss.elastic.co/t/windows-event-logs-missing-fields/29706 "2015-09-22T09:40:42Z")

</div>

Hi there, I am currently in the process of setting up ELK for windows event logs for a production environment. I am just testing every thing, and i think i have the a nice simple configuration to start with: nxlog is…

---

## [Error publishing events (retrying): EOF](https://discuss.elastic.co/t/error-publishing-events-retrying-eof/65378)

<div class="topic-metadata">

**Author:** [@zoram](https://discuss.elastic.co/u/zoram)\
**Replies:** 4\
**Last updated:** [November 15, 2016, 11:44am UTC](https://discuss.elastic.co/t/error-publishing-events-retrying-eof/65378 "2016-11-15T11:44:26Z")

</div>

Dear All, File beat is not sending events to logstash after starting my this command. sudo ./filebeat -e -c filebeat-logstash.yml -d "publish" It thrown an error messages.. single.go:77: INFO Error publishing even…

---

## [Trouble with Timestamp format '"dd-MM-yyyy HH:mm:ss"](https://discuss.elastic.co/t/trouble-with-timestamp-format-dd-mm-yyyy-hh-mm-ss/23226)

<div class="topic-metadata">

**Author:** [@omar\_ben\_salem](https://discuss.elastic.co/u/omar_ben_salem)\
**Replies:** 4\
**Last updated:** [April 15, 2015, 9:12am UTC](https://discuss.elastic.co/t/trouble-with-timestamp-format-dd-mm-yyyy-hh-mm-ss/23226 "2015-04-15T09:12:28Z")

</div>

Hi, I have trouble with the timestamp format required for elasticsearch. I have data in my hadoop that I want to load into ES. My date field was first as this : "EEE, dd MMM yyyy HH:mm:ss Z" I've transformed th…

---

## [NEST/C#: Binary operation on \*QueryDescriptor\<T\>](https://discuss.elastic.co/t/nest-c-binary-operation-on-querydescriptor-t/160206)

<div class="topic-metadata">

**Author:** [@redX](https://discuss.elastic.co/u/redX)\
**Replies:** 1\
**Last updated:** [December 11, 2018, 9:23am UTC](https://discuss.elastic.co/t/nest-c-binary-operation-on-querydescriptor-t/160206 "2018-12-11T09:23:18Z")

</div>

I am creating dynamic ES query with NEST like this: var q1 = new MatchQuery() { Field = "similarto.keyword", Query = "55445" }; var q2 = new MatchQuery() { Field = "metatag.keyword", Query = "hot" }; var q3 = q1 || q2; …

---

## [Error initializing processors: each processor must have exactly one action, but found 2 actions](https://discuss.elastic.co/t/error-initializing-processors-each-processor-must-have-exactly-one-action-but-found-2-actions/270901)

<div class="topic-metadata">

**Author:** [@manojkrishna561994](https://discuss.elastic.co/u/manojkrishna561994)\
**Replies:** 1\
**Last updated:** [April 22, 2021, 12:54am UTC](https://discuss.elastic.co/t/error-initializing-processors-each-processor-must-have-exactly-one-action-but-found-2-actions/270901 "2021-04-22T00:54:27Z")

</div>

I'm installing ELK on my Ubuntu machine. When i'm installing Filebeats it is throwing me this error. When i run this command sudo filebeat modules list im getting this error. root@lucy0094:~# sudo filebeat modules list…

---

## [How to define time range in custom query rule in elasticsiem?](https://discuss.elastic.co/t/how-to-define-time-range-in-custom-query-rule-in-elasticsiem/267521)

<div class="topic-metadata">

**Author:** [@siginigin](https://discuss.elastic.co/u/siginigin)\
**Replies:** 5\
**Last updated:** [March 23, 2021, 8:41pm UTC](https://discuss.elastic.co/t/how-to-define-time-range-in-custom-query-rule-in-elasticsiem/267521 "2021-03-23T20:41:37Z")

</div>

Hi, I'm trying to create rule which should fire on admin activity when time of event is from 22:00 till 5:00. I tried this query: user.group.name :\*admin\* and ((@timestamp \>= "00:00:00" and @timestamp \<= "05:00:00" ) …

---

## [Elasticsearch reporting unhealty status](https://discuss.elastic.co/t/elasticsearch-reporting-unhealty-status/176382)

<div class="topic-metadata">

**Author:** [@Luis\_Pereira1](https://discuss.elastic.co/u/Luis_Pereira1)\
**Replies:** 2\
**Last updated:** [April 15, 2019, 5:56pm UTC](https://discuss.elastic.co/t/elasticsearch-reporting-unhealty-status/176382 "2019-04-15T17:56:14Z")

</div>

hi, Im having an issue after upgrading my elastic stack from version 6.7 to 7.0 the elasticsearch is reporting unhealthy status but the container is up. Things i tried to get it working again, create a new network, d…

---

## [Sentry support](https://discuss.elastic.co/t/sentry-support/11992)

<div class="topic-metadata">

**Author:** [@Eamonn\_Faherty](https://discuss.elastic.co/u/Eamonn_Faherty)\
**Replies:** 2\
**Last updated:** [May 16, 2013, 3:30pm UTC](https://discuss.elastic.co/t/sentry-support/11992 "2013-05-16T15:30:53Z")

</div>

My logging.yml contains the following: appender: console: type: console layout: type: consolePattern conversionPattern: "\[%d{ISO8601}\]\[%-5p\]\[%-25c\] %m%n" file: type: dailyRollingFile…

---

## [After restarting Elasticsearch, monitoring execution fails](https://discuss.elastic.co/t/after-restarting-elasticsearch-monitoring-execution-fails/88207)

<div class="topic-metadata">

**Author:** [@Bob04](https://discuss.elastic.co/u/Bob04)\
**Replies:** 1\
**Last updated:** [June 9, 2017, 11:30am UTC](https://discuss.elastic.co/t/after-restarting-elasticsearch-monitoring-execution-fails/88207 "2017-06-09T11:30:24Z")

</div>

After restarting Elasticsearch, monitoring execution fails. Does anybody know how to fix that? ES logs: \[2017-06-05T01:24:16,122\]\[WARN \]\[o.e.x.m.MonitoringService\] \[5a1BbMi\] monitoring execution failed org.elastics…

---

## [Kibana cannot list saved\_objects. Fielddata is disabled on text fields by default](https://discuss.elastic.co/t/kibana-cannot-list-saved-objects-fielddata-is-disabled-on-text-fields-by-default/214052)

<div class="topic-metadata">

**Author:** [@KapitanPlaneta](https://discuss.elastic.co/u/KapitanPlaneta)\
**Replies:** 3\
**Last updated:** [January 8, 2020, 3:26pm UTC](https://discuss.elastic.co/t/kibana-cannot-list-saved-objects-fielddata-is-disabled-on-text-fields-by-default/214052 "2020-01-08T15:26:04Z")

</div>

Create an index pattern. Then go to saved objects - 'Unable find saved objects Error: Bad Request' popup shows up. This request: /api/kibana/management/saved\_objects/\_find?perPage=20&page=1&fields=id&type=config&type=ma…

---

## [How to pass mutate filter field value to Ruby filter](https://discuss.elastic.co/t/how-to-pass-mutate-filter-field-value-to-ruby-filter/180413)

<div class="topic-metadata">

**Author:** [@saroja](https://discuss.elastic.co/u/saroja)\
**Replies:** 3\
**Last updated:** [May 9, 2019, 7:30pm UTC](https://discuss.elastic.co/t/how-to-pass-mutate-filter-field-value-to-ruby-filter/180413 "2019-05-09T19:30:13Z")

</div>

input { http\_poller { urls =\> { request1 =\> { method =\> get url =\> "http://localhost:8888/getAuthToken?uid=${uid}&password=${password}" headers =\>…

---

## [Kibanaclient - Error when executing Kibana client request](https://discuss.elastic.co/t/kibanaclient-error-when-executing-kibana-client-request/112990)

<div class="topic-metadata">

**Author:** [@antony.y](https://discuss.elastic.co/u/antony.y)\
**Replies:** 3\
**Last updated:** [December 22, 2017, 12:09pm UTC](https://discuss.elastic.co/t/kibanaclient-error-when-executing-kibana-client-request/112990 "2017-12-22T12:09:02Z")

</div>

I am now using netflow module in my logstash . And i using " bin/logstash --modules netflow --setup -M netflow.var.input.udp.port=2055 -M var.elasticsearch.hosts="192.168.88.120:9200" -M var.kibana.host="192.168.88.120:…

---

## [Confused about Segments: Searchable vs Committed vs Uncommitted](https://discuss.elastic.co/t/confused-about-segments-searchable-vs-committed-vs-uncommitted/10746)

<div class="topic-metadata">

**Author:** [@polyfractal](https://discuss.elastic.co/u/polyfractal)\
**Replies:** 5\
**Last updated:** [February 21, 2013, 6:55pm UTC](https://discuss.elastic.co/t/confused-about-segments-searchable-vs-committed-vs-uncommitted/10746 "2013-02-21T18:55:00Z")

</div>

I'll preface this question by saying it is purely academic. I thought these terms meant one thing, but upon watching a live index I'm no longer sure. Are the following definitions correct? - Searchable: Se…

---

## [Not able to send data from Filebeat to Logstash](https://discuss.elastic.co/t/not-able-to-send-data-from-filebeat-to-logstash/42856)

<div class="topic-metadata">

**Author:** [@vivc](https://discuss.elastic.co/u/vivc)\
**Replies:** 4\
**Last updated:** [March 7, 2016, 2:51am UTC](https://discuss.elastic.co/t/not-able-to-send-data-from-filebeat-to-logstash/42856 "2016-03-07T02:51:27Z")

</div>

Filebeat o/p: ##logstash as output logstash: # The logstash hosts hosts:\["172.16.60.32:5044"\] Logstash Conf: input { beats { port =\> 5044 } } Getting the following Error in Log: Connectin…

---

## [Help with cluster.routing.allocation.enable Property](https://discuss.elastic.co/t/help-with-cluster-routing-allocation-enable-property/17962)

<div class="topic-metadata">

**Author:** [@sagarit2](https://discuss.elastic.co/u/sagarit2)\
**Replies:** 4\
**Last updated:** [June 7, 2014, 2:42am UTC](https://discuss.elastic.co/t/help-with-cluster-routing-allocation-enable-property/17962 "2014-06-07T02:42:36Z")

</div>

Hi folks, Our requirement is as follows: We have our ES cluster running on aws instances where nodes can come and go. We would like to disable Shard reallocation on cluster in Normal state so that Node going do…

---

## [Help with Failed to authenticate user error for elastic](https://discuss.elastic.co/t/help-with-failed-to-authenticate-user-error-for-elastic/207778)

<div class="topic-metadata">

**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\
**Replies:** 1\
**Last updated:** [November 14, 2019, 5:31pm UTC](https://discuss.elastic.co/t/help-with-failed-to-authenticate-user-error-for-elastic/207778 "2019-11-14T17:31:02Z")

</div>

So I've been googling this issue and trying multiple solutions but so far nothing has worked. I'm posting this here in the hopes that I've missed something else. I have a single ES cluster running on server with Kibana…

---

## [Problem with Multiline pattern in Filebeat](https://discuss.elastic.co/t/problem-with-multiline-pattern-in-filebeat/91762)

<div class="topic-metadata">

**Author:** [@purvang](https://discuss.elastic.co/u/purvang)\
**Replies:** 7\
**Last updated:** [July 6, 2017, 6:44am UTC](https://discuss.elastic.co/t/problem-with-multiline-pattern-in-filebeat/91762 "2017-07-06T06:44:26Z")

</div>

Hi Team, I am trying to use multiline pattern in filebeat to append multiline code in specific log Below is my log pattern : 04 Jul 2017 14:47:35,982 \[INFO\] http-bio-48080-exec-6 \[AUTH\]: \[8548c77c-0296-4056-ad…

---

## [Parent/Child vs Nested. The real Performance difference](https://discuss.elastic.co/t/parent-child-vs-nested-the-real-performance-difference/315698)

<div class="topic-metadata">

**Author:** [@amirm](https://discuss.elastic.co/u/amirm)\
**Replies:** 0\
**Last updated:** [October 3, 2022, 3:11pm UTC](https://discuss.elastic.co/t/parent-child-vs-nested-the-real-performance-difference/315698 "2022-10-03T15:11:01Z")

</div>

Greeting. We all know that Elasticsearch is basically a NoSQL database. it means there is no relation between data and documents that need to be denormalized and flattened to index properly. In spite of all these thing…

---

## [Synthetics - Separate Alerts for Monitors](https://discuss.elastic.co/t/synthetics-separate-alerts-for-monitors/348096)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 5\
**Last updated:** [November 28, 2023, 7:37pm UTC](https://discuss.elastic.co/t/synthetics-separate-alerts-for-monitors/348096 "2023-11-28T19:37:18Z")

</div>

Hello, This might be obvious, but I can't seem to find the answer. We are considering using Synthetics instead of Uptime in Observability. I have set up the Elastic Agent Integration for Synthetics, and we have it up a…

[Previous page](https://discuss.elastic.co/top.md?page=521&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=523&per_page=50&period=all)
