# Top **URL:** https://discuss.elastic.co/top.md?page=525&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 526 --- ## [Match partial IP](https://discuss.elastic.co/t/match-partial-ip/49331)
**Author:** [@TroyAndAbed](https://discuss.elastic.co/u/TroyAndAbed)\ **Replies:** 1\ **Last updated:** [May 5, 2016, 7:07pm UTC](https://discuss.elastic.co/t/match-partial-ip/49331 "2016-05-05T19:07:59Z")
Hi, In my index, I have an IP field. The type of the field is "ip". I want to search all IPs who starts with "192.168" All my tentative have failed with the following message: failed to parse ip \[192.168\], not a va… --- ## [What's the best way to determine what version of marvel is running?](https://discuss.elastic.co/t/whats-the-best-way-to-determine-what-version-of-marvel-is-running/47818)
**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\ **Replies:** 6\ **Last updated:** [April 19, 2016, 11:00pm UTC](https://discuss.elastic.co/t/whats-the-best-way-to-determine-what-version-of-marvel-is-running/47818 "2016-04-19T23:00:56Z")
What's the best way to determine what version of marvel is running? Thanks! Casie --- ## [You cannot set an index-time boost: norms are omitted](https://discuss.elastic.co/t/you-cannot-set-an-index-time-boost-norms-are-omitted/8430)
**Author:** [@Vinicius\_Carvalho](https://discuss.elastic.co/u/Vinicius_Carvalho)\ **Replies:** 7\ **Last updated:** [July 19, 2012, 8:30am UTC](https://discuss.elastic.co/t/you-cannot-set-an-index-time-boost-norms-are-omitted/8430 "2012-07-19T08:30:42Z")
Hi there! when combining the index boost in a float field I get exceptions at the console. The field mapping is as follows: "elevation" : {"type" : "float", "store":"yes" , "include\_in\_all" : "false", "boost": … --- ## [Could not find java; set JAVA\_HOME or ensure java is in PATH](https://discuss.elastic.co/t/could-not-find-java-set-java-home-or-ensure-java-is-in-path/158646)
**Author:** [@hiteshsharma](https://discuss.elastic.co/u/hiteshsharma)\ **Replies:** 2\ **Last updated:** [December 4, 2018, 4:16pm UTC](https://discuss.elastic.co/t/could-not-find-java-set-java-home-or-ensure-java-is-in-path/158646 "2018-12-04T16:16:31Z")
The Elastic search stopped working on my system all of a sudden. I was throwing out an error "could not find java; set JAVA\_HOME or ensure java is in PATH" I have JAVA\_HOME set to "C:\\Program Files\\Java\\jdk11.0.1" yet … --- ## [Instantiating TransportClient in elasticsearch 2.3.1 (Java)](https://discuss.elastic.co/t/instantiating-transportclient-in-elasticsearch-2-3-1-java/48042)
**Author:** [@Abhishek\_Vaid](https://discuss.elastic.co/u/Abhishek_Vaid)\ **Replies:** 2\ **Last updated:** [April 21, 2016, 1:11pm UTC](https://discuss.elastic.co/t/instantiating-transportclient-in-elasticsearch-2-3-1-java/48042 "2016-04-21T13:11:48Z")
I tried creating a simple TransportClient in Java with elasticsearch 2.3.1 driver. I followed instructions given on following link: And also: The problem I'm facing is following: Settings settings = Settings.set… --- ## [Kibana 6.1.1 password setup failed, now prompted for user /password](https://discuss.elastic.co/t/kibana-6-1-1-password-setup-failed-now-prompted-for-user-password/113518)
**Author:** [@GSCully](https://discuss.elastic.co/u/GSCully)\ **Replies:** 8\ **Last updated:** [January 2, 2018, 5:16pm UTC](https://discuss.elastic.co/t/kibana-6-1-1-password-setup-failed-now-prompted-for-user-password/113518 "2018-01-02T17:16:00Z")
Fresh install of Elastic 6.1.1 setup Kibana (Windows 2016), had it working until I tried to configure passwords, the app failed to update the kibana user but the others appeared to work. I did enter the password I tried… --- ## [Time series data, use template to auto-create monthly](https://discuss.elastic.co/t/time-series-data-use-template-to-auto-create-monthly/48825)
**Author:** [@ronchalant](https://discuss.elastic.co/u/ronchalant)\ **Replies:** 5\ **Last updated:** [March 1, 2017, 8:45am UTC](https://discuss.elastic.co/t/time-series-data-use-template-to-auto-create-monthly/48825 "2017-03-01T08:45:22Z")
I have time series data but instead of automatic creation of an index based on the @timestamp value, I want to be able to create it from a value within the document itself, and I'd also like to have the index created mon… --- ## [Painless iterate over nested data in an array to calculate custom score](https://discuss.elastic.co/t/painless-iterate-over-nested-data-in-an-array-to-calculate-custom-score/104711)
**Author:** [@el-n00b](https://discuss.elastic.co/u/el-n00b)\ **Replies:** 1\ **Last updated:** [March 8, 2018, 4:33pm UTC](https://discuss.elastic.co/t/painless-iterate-over-nested-data-in-an-array-to-calculate-custom-score/104711 "2018-03-08T16:33:32Z")
I'd like to iterate over a set of child elements on a search in order to calculate a value using Painless and then return that information with the rest of the search result. I decided to hijack the score calculation. B… --- ## [Unable to remove %{host} field when using kafka output plugin with codec plain](https://discuss.elastic.co/t/unable-to-remove-host-field-when-using-kafka-output-plugin-with-codec-plain/114684)
**Author:** [@berlin](https://discuss.elastic.co/u/berlin)\ **Replies:** 8\ **Last updated:** [January 10, 2018, 10:30pm UTC](https://discuss.elastic.co/t/unable-to-remove-host-field-when-using-kafka-output-plugin-with-codec-plain/114684 "2018-01-10T22:30:02Z")
Hi, Please review the below configuration: input { sqs { access\_key\_id =\> "" secret\_access\_key =\> "" polling\_frequency =\> "1" queue =\> "xxx" region =\> "eu-west-1" threads =\> "1" codec =\> p… --- ## [Logstash Config works fine but data not populated in elasticsearch](https://discuss.elastic.co/t/logstash-config-works-fine-but-data-not-populated-in-elasticsearch/60148)
**Author:** [@karthikvalluri85](https://discuss.elastic.co/u/karthikvalluri85)\ **Replies:** 8\ **Last updated:** [September 9, 2016, 11:52am UTC](https://discuss.elastic.co/t/logstash-config-works-fine-but-data-not-populated-in-elasticsearch/60148 "2016-09-09T11:52:23Z")
I'm configuring a csv file via logstash and need the ouptut loaded in elasticsearch. Please see below config file details also the commands executed so far.. The terminal gets stuck after "Logsatsh startup completed".. r… --- ## [WARN No appenders could be found for logger (org.apache.kafka.clients.producer.ProducerConfig)](https://discuss.elastic.co/t/warn-no-appenders-could-be-found-for-logger-org-apache-kafka-clients-producer-producerconfig/82515)
**Author:** [@rahiminasab](https://discuss.elastic.co/u/rahiminasab)\ **Replies:** 2\ **Last updated:** [April 20, 2017, 7:26am UTC](https://discuss.elastic.co/t/warn-no-appenders-could-be-found-for-logger-org-apache-kafka-clients-producer-producerconfig/82515 "2017-04-20T07:26:18Z")
Hi, I am using Logstash 5.3.0. When I use Kafka output plugin in my config file as follows: output { kafka { codec =\> plain { format =\> "%{message}" … --- ## [CORS not getting enabled in ElasticSearch dockerfile](https://discuss.elastic.co/t/cors-not-getting-enabled-in-elasticsearch-dockerfile/91622)
**Author:** [@Yugansh\_Aggarwal](https://discuss.elastic.co/u/Yugansh_Aggarwal)\ **Replies:** 1\ **Last updated:** [July 7, 2017, 6:49am UTC](https://discuss.elastic.co/t/cors-not-getting-enabled-in-elasticsearch-dockerfile/91622 "2017-07-07T06:49:09Z")
Hi By pulling latest image from https://hub.docker.com/\_/elasticsearch/ I tried enabling CORS. This is my dockerfile - FROM docker.elastic.co/elasticsearch/elasticsearch:5.4.1 ADD elasticsearch.yml /usr/share/ela… --- ## [Shipping gitlab job logs](https://discuss.elastic.co/t/shipping-gitlab-job-logs/213005)
**Author:** [@meir](https://discuss.elastic.co/u/meir)\ **Replies:** 4\ **Last updated:** [December 31, 2019, 7:54am UTC](https://discuss.elastic.co/t/shipping-gitlab-job-logs/213005 "2019-12-31T07:54:23Z")
HI, I have started using filebeat for log shipping for my gitlab logs, and I have a directory structure that is changed every few minutes, each directory contains a log file which contains data that I want to ship to my… --- ## [LDAP needs a license for use](https://discuss.elastic.co/t/ldap-needs-a-license-for-use/213536)
**Author:** [@JuYeong\_Park](https://discuss.elastic.co/u/JuYeong_Park)\ **Replies:** 2\ **Last updated:** [January 2, 2020, 11:54am UTC](https://discuss.elastic.co/t/ldap-needs-a-license-for-use/213536 "2020-01-02T11:54:41Z")
When i try to use ldap in elastic cloud on k8s according to guide(Support for custom realms for Elasticsearch authentication. · Issue #40 · elastic/cloud-on-k8s · GitHub), they returned to me below message. version 6.8 … --- ## [How to get checkpoint logs in logstash](https://discuss.elastic.co/t/how-to-get-checkpoint-logs-in-logstash/128403)
**Author:** [@addanuj](https://discuss.elastic.co/u/addanuj)\ **Replies:** 2\ **Last updated:** [May 3, 2018, 1:54pm UTC](https://discuss.elastic.co/t/how-to-get-checkpoint-logs-in-logstash/128403 "2018-05-03T13:54:58Z")
in our environment we have 2 checkpoint firewalls, I need to to know how I can push or pull checkpoint firewall logs to logstash so that i can create some index and create Kibana visualization? i am new to ELK, please h… --- ## [Why POST for partial update?](https://discuss.elastic.co/t/why-post-for-partial-update/96849)
**Author:** [@Nais777](https://discuss.elastic.co/u/Nais777)\ **Replies:** 2\ **Last updated:** [August 18, 2017, 8:10pm UTC](https://discuss.elastic.co/t/why-post-for-partial-update/96849 "2017-08-18T20:10:04Z")
In REST, POST is typically used to create a resource while PUT and PATCH are used to replace the entire resource or partially update the resource. Why then, is POST used for a partial update of a resource? Even the Wikip… --- ## [Get data from Kibana using Elasticsearch API](https://discuss.elastic.co/t/get-data-from-kibana-using-elasticsearch-api/264672)
**Author:** [@Carlos\_Patricio](https://discuss.elastic.co/u/Carlos_Patricio)\ **Replies:** 5\ **Last updated:** [February 23, 2021, 4:11pm UTC](https://discuss.elastic.co/t/get-data-from-kibana-using-elasticsearch-api/264672 "2021-02-23T16:11:38Z")
Hi, I'm trying to retrieve data from one Kibana view using the API request. The request from the view: The response with the expected result: And then I tried to paste the request to Kibana \> Dev Tools \> Console,… --- ## [Excluding fields from \_source to avoid storing files](https://discuss.elastic.co/t/excluding-fields-from-source-to-avoid-storing-files/107241)
**Author:** [@fnareva](https://discuss.elastic.co/u/fnareva)\ **Replies:** 5\ **Last updated:** [November 13, 2017, 4:07pm UTC](https://discuss.elastic.co/t/excluding-fields-from-source-to-avoid-storing-files/107241 "2017-11-13T16:07:42Z")
Is there anything horribly wrong with that? I'm trying to get files indexed (via ingest attachment plugin)and searchable, but not stored in ES. Likeso: "\_source": { "excludes":\[ "data","attach… --- ## [Filebeats can overwhelm target (kafka,logstash,esearch) on recovery](https://discuss.elastic.co/t/filebeats-can-overwhelm-target-kafka-logstash-esearch-on-recovery/59892)
**Author:** [@Tim\_Burt](https://discuss.elastic.co/u/Tim_Burt)\ **Replies:** 5\ **Last updated:** [September 7, 2016, 8:08pm UTC](https://discuss.elastic.co/t/filebeats-can-overwhelm-target-kafka-logstash-esearch-on-recovery/59892 "2016-09-07T20:08:13Z")
Our config is: filebeats -\> Kafka Approx 1000 aws instances running mostly rails logging approx 10 million lines per day into a 3 node Kafka - 3 node Zookeeper cluster behind an ELB. A few days ago, we lost Kafka in … --- ## [Change data path elasticsearch](https://discuss.elastic.co/t/change-data-path-elasticsearch/135648)
**Author:** [@sreejiths](https://discuss.elastic.co/u/sreejiths)\ **Replies:** 4\ **Last updated:** [June 18, 2018, 7:04am UTC](https://discuss.elastic.co/t/change-data-path-elasticsearch/135648 "2018-06-18T07:04:50Z")
I am using Elasticsearch Version 5.6.8 . I am changing the elasticsearch path data in elasticsearch.yml to a new folder in a new mountpoint . When i restart the elasticsearch service its giving below error \[2018-06-13… --- ## [How to insert simple text and logo for a dashboard?](https://discuss.elastic.co/t/how-to-insert-simple-text-and-logo-for-a-dashboard/36716)
**Author:** [@el.qa](https://discuss.elastic.co/u/el.qa)\ **Replies:** 4\ **Last updated:** [December 10, 2015, 1:39pm UTC](https://discuss.elastic.co/t/how-to-insert-simple-text-and-logo-for-a-dashboard/36716 "2015-12-10T13:39:10Z")
I don't want to insert the logo and the name of the dashboard with markdown. I want to enter them as a simple text and photo, not inside the markdown layout. is there any way to do it with json or maybe remove the layout… --- ## [500 Internal server Error - Baisc auth on kibana using nginx](https://discuss.elastic.co/t/500-internal-server-error-baisc-auth-on-kibana-using-nginx/165529)
**Author:** [@shikhar\_singh](https://discuss.elastic.co/u/shikhar_singh)\ **Replies:** 3\ **Last updated:** [March 1, 2019, 6:23am UTC](https://discuss.elastic.co/t/500-internal-server-error-baisc-auth-on-kibana-using-nginx/165529 "2019-03-01T06:23:59Z")
my nginx conf user nginx; worker\_processes 1; error\_log /var/log/nginx/error.log warn; pid /var/run/nginx.pid; events { worker\_connections 1024; } http { include /etc/nginx/mime.types; d… --- ## [Elasticsearch 5.2.0 installation on Ubuntu](https://discuss.elastic.co/t/elasticsearch-5-2-0-installation-on-ubuntu/149229)
**Author:** [@abbasali](https://discuss.elastic.co/u/abbasali)\ **Replies:** 3\ **Last updated:** [September 20, 2018, 6:31am UTC](https://discuss.elastic.co/t/elasticsearch-5-2-0-installation-on-ubuntu/149229 "2018-09-20T06:31:42Z")
Hello Everyone, My OS: Ubuntu 18.0.4 LTS Installing Elastic version: 5.2.0 Issue: Right after restart the elasticsearch it stopped. Log file error is following "\[2018-09-20T14:58:29,588\]\[INFO \]\[o.e.n.Node … --- ## [Logstash priority order when using multiple config files](https://discuss.elastic.co/t/logstash-priority-order-when-using-multiple-config-files/80507)
**Author:** [@Jayanna\_Hallur](https://discuss.elastic.co/u/Jayanna_Hallur)\ **Replies:** 3\ **Last updated:** [April 3, 2017, 7:55pm UTC](https://discuss.elastic.co/t/logstash-priority-order-when-using-multiple-config-files/80507 "2017-04-03T19:55:48Z")
Hi All I'm planning to use multiple config files in our deployment. One config file with input for beat and output to elastic search only I would like to maintain separate config file for each applications teams for… --- ## [Alphanumeric sort order: a-z then 0-9](https://discuss.elastic.co/t/alphanumeric-sort-order-a-z-then-0-9/85107)
**Author:** [@mmpro](https://discuss.elastic.co/u/mmpro)\ **Replies:** 0\ **Last updated:** [May 9, 2017, 2:02pm UTC](https://discuss.elastic.co/t/alphanumeric-sort-order-a-z-then-0-9/85107 "2017-05-09T14:02:23Z")
We have a field "name" (mapping with type "keyword") and have the following two items: + car + 01bike Now, when I use sort: \[{ name: {order: asc}}\] in my query, I get + 01bike + car What I want is to have a-z fi… --- ## [How exactly to use a custom json serializer with NEST on .net](https://discuss.elastic.co/t/how-exactly-to-use-a-custom-json-serializer-with-nest-on-net/121729)
**Author:** [@togakangaroo](https://discuss.elastic.co/u/togakangaroo)\ **Replies:** 3\ **Last updated:** [February 28, 2018, 4:15pm UTC](https://discuss.elastic.co/t/how-exactly-to-use-a-custom-json-serializer-with-nest-on-net/121729 "2018-02-28T16:15:19Z")
Hi all, I was directed here by the Elasticsearch NEST client for .Net (really well written by the way). I'm hitting a bit of a wall and the docs are too sparse on how exactly to do this. Basically, my objects have priv… --- ## [Latest stable filebeat version for freebsd missing](https://discuss.elastic.co/t/latest-stable-filebeat-version-for-freebsd-missing/62603)
**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\ **Replies:** 8\ **Last updated:** [October 14, 2016, 5:28pm UTC](https://discuss.elastic.co/t/latest-stable-filebeat-version-for-freebsd-missing/62603 "2016-10-14T17:28:06Z")
I am downloading filebeat freebsd binary from https://beats-nightlies.s3.amazonaws.com/index.html?prefix=jenkins/filebeat/ but from here i am getting alpha releases, but i want to use filebeat's latest stable version. Ca… --- ## [Is it possible to save a full file in Elasticsearch?](https://discuss.elastic.co/t/is-it-possible-to-save-a-full-file-in-elasticsearch/64135)
**Author:** [@Juan\_Diaz\_Gonzalez](https://discuss.elastic.co/u/Juan_Diaz_Gonzalez)\ **Replies:** 6\ **Last updated:** [October 31, 2016, 8:51am UTC](https://discuss.elastic.co/t/is-it-possible-to-save-a-full-file-in-elasticsearch/64135 "2016-10-31T08:51:24Z")
Is it possible to save a full file in Elasticsearch?? --- ## [Error with Elasticsearch after prod config](https://discuss.elastic.co/t/error-with-elasticsearch-after-prod-config/230766)
**Author:** [@Luis\_Pereira1](https://discuss.elastic.co/u/Luis_Pereira1)\ **Replies:** 5\ **Last updated:** [May 15, 2020, 12:13am UTC](https://discuss.elastic.co/t/error-with-elasticsearch-after-prod-config/230766 "2020-05-15T00:13:46Z")
Hello, I'm having some problems on my docker cluster, today I've decided to change the config regarding the elastsicsearch services and after the configuration when I try to deploy the stack it gives the error bellow. e… --- ## [Arithmetic with string](https://discuss.elastic.co/t/arithmetic-with-string/52131)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 5\ **Last updated:** [June 10, 2016, 7:44pm UTC](https://discuss.elastic.co/t/arithmetic-with-string/52131 "2016-06-10T19:44:09Z")
Hello, I have a string "5.34" and I am trying to multiply it by number, say 1000. Can I do it with gsub or ruby plugin. I have read that ruby plugin is resource intensive, so i would prefer to do it with gsub if possib… --- ## [\[Idea\] Possibility to mute a topic from the category listing](https://discuss.elastic.co/t/idea-possibility-to-mute-a-topic-from-the-category-listing/731)
**Author:** [@wiibaa](https://discuss.elastic.co/u/wiibaa)\ **Replies:** 5\ **Last updated:** [March 1, 2016, 11:40pm UTC](https://discuss.elastic.co/t/idea-possibility-to-mute-a-topic-from-the-category-listing/731 "2016-03-01T23:40:15Z")
Here is my scenario, I'm watching the Logstash category to not miss anything and would like to quickly discard (mute?) irrelevant topics from their title. Currently I need to open the topic and mute it. I would be fast… --- ## [Kibana UI customization using a plugin](https://discuss.elastic.co/t/kibana-ui-customization-using-a-plugin/171037)
**Author:** [@Ashish\_Chourasia](https://discuss.elastic.co/u/Ashish_Chourasia)\ **Replies:** 1\ **Last updated:** [March 6, 2019, 4:25pm UTC](https://discuss.elastic.co/t/kibana-ui-customization-using-a-plugin/171037 "2019-03-06T16:25:48Z")
Hi, We are working with Elastic search and Kibana (version 6.5.1). We wanted to replace the Kibana logo with our company's logo, & were able to do that by overriding the css by introducing a custom css file this path: … --- ## [Elastic enrich data based on two matching fields](https://discuss.elastic.co/t/elastic-enrich-data-based-on-two-matching-fields/325561)
**Author:** [@maggo](https://discuss.elastic.co/u/maggo)\ **Replies:** 8\ **Last updated:** [February 27, 2023, 2:35pm UTC](https://discuss.elastic.co/t/elastic-enrich-data-based-on-two-matching-fields/325561 "2023-02-27T14:35:42Z")
Hello guys, i'm pretty new to ELK and want to implement a vulnerability enrichment for incoming osquery data. I have one index with vulnerability data with fields like: "affected\_product": "chrome" "affected\_version":… --- ## [Kibana says "Error: Request Timeout after 30000ms" when we started to retain longer history in ES](https://discuss.elastic.co/t/kibana-says-error-request-timeout-after-30000ms-when-we-started-to-retain-longer-history-in-es/168050)
**Author:** [@gavenkoa](https://discuss.elastic.co/u/gavenkoa)\ **Replies:** 3\ **Last updated:** [February 25, 2019, 9:45pm UTC](https://discuss.elastic.co/t/kibana-says-error-request-timeout-after-30000ms-when-we-started-to-retain-longer-history-in-es/168050 "2019-02-25T21:45:29Z")
I provide details below, straight to the point: I suspect that increased index count made impossible to perform some Kibana built-in queries. ls elasticsearch-5.6.14.deb kibana-5.6.14-amd64.deb I suspect that it is im… --- ## [Error=\>"translation missing:](https://discuss.elastic.co/t/error-translation-missing/144010)
**Author:** [@Gosforth](https://discuss.elastic.co/u/Gosforth)\ **Replies:** 3\ **Last updated:** [August 12, 2018, 8:57pm UTC](https://discuss.elastic.co/t/error-translation-missing/144010 "2018-08-12T20:57:51Z")
logstash config: input { file { path =\> "C:/Pentaho/Workspace/ElasticSearch/logstash/in/sprzedaz.csv" start\_position =\> "beginning" sincedb\_path =\> "nul" } } filter{ csv{ separator =\> ";" columns =\> \["SF\_type"… --- ## [Elasticsearch status failed (code=exited, status=78)](https://discuss.elastic.co/t/elasticsearch-status-failed-code-exited-status-78/182934)
**Author:** [@Aytekin\_Done](https://discuss.elastic.co/u/Aytekin_Done)\ **Replies:** 0\ **Last updated:** [May 27, 2019, 2:42pm UTC](https://discuss.elastic.co/t/elasticsearch-status-failed-code-exited-status-78/182934 "2019-05-27T14:42:51Z")
hi all, After i changed elasticsearch.yml , i get this error. Preformatted text● elasticsearch.service - Elasticsearch Loaded: loaded (/lib/systemd/system/elasticsearch.service; enabled; vendor preset: enabled) Activ… --- ## [Change Color palette in Lens](https://discuss.elastic.co/t/change-color-palette-in-lens/282339)
**Author:** [@AlexM566](https://discuss.elastic.co/u/AlexM566)\ **Replies:** 2\ **Last updated:** [September 13, 2021, 7:04am UTC](https://discuss.elastic.co/t/change-color-palette-in-lens/282339 "2021-09-13T07:04:19Z")
Hello, I have a Mixed XY visualization made in Lens mode and what I want to do is to change the colours palette to my wish. Here it is : So what I want is for nr.1 to assign green colour and for nr 3. orange and so… --- ## [Recovering from NoNodeAvailableException](https://discuss.elastic.co/t/recovering-from-nonodeavailableexception/25093)
**Author:** [@Pradeep\_Gowda](https://discuss.elastic.co/u/Pradeep_Gowda)\ **Replies:** 4\ **Last updated:** [July 8, 2015, 12:37am UTC](https://discuss.elastic.co/t/recovering-from-nonodeavailableexception/25093 "2015-07-08T00:37:26Z")
Hi All, I am running ES 1.4.4 and ES client on the same machine and the health of cluster looks like below { cluster\_name: "vmanage-elastic-cluster", status: "yellow", timed\_out: false, number\_of\_nodes: 1, number\_of\_da… --- ## [Cross DC Cluster and Data Replication](https://discuss.elastic.co/t/cross-dc-cluster-and-data-replication/113532)
**Author:** [@senthil.nathanm](https://discuss.elastic.co/u/senthil.nathanm)\ **Replies:** 7\ **Last updated:** [January 8, 2018, 6:37am UTC](https://discuss.elastic.co/t/cross-dc-cluster-and-data-replication/113532 "2018-01-08T06:37:51Z")
Hi All We are in the process of establishing Elastic Search on enterprise scale which will span servers spread across two primary data centers located in US and Europe. We are using 5.5.x version and our goal is to have… --- ## [Unable to load Winlogbeat Dashboards](https://discuss.elastic.co/t/unable-to-load-winlogbeat-dashboards/113617)
**Author:** [@Chris\_Bosman](https://discuss.elastic.co/u/Chris_Bosman)\ **Replies:** 7\ **Last updated:** [January 3, 2018, 5:12pm UTC](https://discuss.elastic.co/t/unable-to-load-winlogbeat-dashboards/113617 "2018-01-03T17:12:23Z")
I am setting up the ELK stack in a test environment. My ELK server is running CentOS 7. I am running version 6.1.1 of all ELK stack components. I am using nginx as a reverse proxy to server the page to my test environmen… --- ## [Custom Application Eventlog not picked up by winlogbeat](https://discuss.elastic.co/t/custom-application-eventlog-not-picked-up-by-winlogbeat/118117)
**Author:** [@Paul\_Cadd](https://discuss.elastic.co/u/Paul_Cadd)\ **Replies:** 8\ **Last updated:** [February 5, 2018, 3:51pm UTC](https://discuss.elastic.co/t/custom-application-eventlog-not-picked-up-by-winlogbeat/118117 "2018-02-05T15:51:43Z")
Hi, Wonder if some one could assist with problem I have Background: We have logstash 5.4.1 installed on a three node cluster and 80 clients, servers and workstations. All workstations are configured for winlogbeat to … --- ## [Use mutate rename filter](https://discuss.elastic.co/t/use-mutate-rename-filter/148626)
**Author:** [@PitoneMaledetto](https://discuss.elastic.co/u/PitoneMaledetto)\ **Replies:** 3\ **Last updated:** [September 18, 2018, 9:59am UTC](https://discuss.elastic.co/t/use-mutate-rename-filter/148626 "2018-09-18T09:59:55Z")
Hi all, I am having some trouble in renaming one of the output field. Please consider (edited for easy reading): \[2018-09-14T13:04:43,936\]\[DEBUG\]\[logstash.pipeline \] filter received {"event"=\>{"@timestamp"=\>201… --- ## [Kubernetes - Logstash or Fluentd?](https://discuss.elastic.co/t/kubernetes-logstash-or-fluentd/223532)
**Author:** [@Mauricio\_Borges](https://discuss.elastic.co/u/Mauricio_Borges)\ **Replies:** 6\ **Last updated:** [March 24, 2020, 1:18pm UTC](https://discuss.elastic.co/t/kubernetes-logstash-or-fluentd/223532 "2020-03-24T13:18:38Z")
Hi Team! I have started working with ELK since last year and has been using a lot Beats, Elasticsearch, Kibana and a bit about Logstash. I have started POC case using ELK on-premise supporting OCP 4.x and customer aske… --- ## [Scroll Timeout Minimum Value](https://discuss.elastic.co/t/scroll-timeout-minimum-value/52473)
**Author:** [@arcsine](https://discuss.elastic.co/u/arcsine)\ **Replies:** 4\ **Last updated:** [June 16, 2016, 2:12pm UTC](https://discuss.elastic.co/t/scroll-timeout-minimum-value/52473 "2016-06-16T14:12:55Z")
I'm attempting to write a unit test that emulates when a scroll query times out. I've set the value using seconds and milliseconds, and it is either being ignored, or there is some minimum threshold in the range of 10s … --- ## [Jvm GC overhead](https://discuss.elastic.co/t/jvm-gc-overhead/99139)
**Author:** [@Frederic\_Renan](https://discuss.elastic.co/u/Frederic_Renan)\ **Replies:** 2\ **Last updated:** [September 4, 2017, 8:58am UTC](https://discuss.elastic.co/t/jvm-gc-overhead/99139 "2017-09-04T08:58:33Z")
Hi, I’ve just start a new cluster with following specs : Under VMWARE, dispatched on 2 datacenters : 2 data / master / ingest nodes : 16Go RAM / 8Go Heap / 4 vCPUs 2 master nodes : 8Go RAM / 2Go Heap / 2 vCPUs With … --- ## [WHAT SIEM CAN DO?](https://discuss.elastic.co/t/what-siem-can-do/244483)
**Author:** [@syafeera](https://discuss.elastic.co/u/syafeera)\ **Replies:** 3\ **Last updated:** [August 13, 2020, 6:56am UTC](https://discuss.elastic.co/t/what-siem-can-do/244483 "2020-08-13T06:56:27Z")
Hi, is there anyone here can explain to me a simple way what is SIEM? How can SIEM detect threat? what is IP destination and IP source means in SIEM? I really not clear about it.. Thanks --- ## [Bulk indexing of signals failed in Kibana 7.10.2](https://discuss.elastic.co/t/bulk-indexing-of-signals-failed-in-kibana-7-10-2/262373)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 7\ **Last updated:** [January 29, 2021, 9:29pm UTC](https://discuss.elastic.co/t/bulk-indexing-of-signals-failed-in-kibana-7-10-2/262373 "2021-01-29T21:29:30Z")
Hello, Just noticed our custom SIEM rules seem to throw errors, such as: Bulk Indexing of signals failed: reason: "No mapping found for \[@timestamp\] in order to sort on" type: "query\_shard\_exception" name: "Elastic Aud… --- ## [How to using scripted field value in watcher?](https://discuss.elastic.co/t/how-to-using-scripted-field-value-in-watcher/184001)
**Author:** [@yagami23](https://discuss.elastic.co/u/yagami23)\ **Replies:** 3\ **Last updated:** [June 7, 2019, 2:50pm UTC](https://discuss.elastic.co/t/how-to-using-scripted-field-value-in-watcher/184001 "2019-06-07T14:50:59Z")
Hi , i have created a scripted field called "duration" which will return in number. and i confirm this scripted field value is showing in Kibana when query. If i want to show this scripted field value by using watcher,… --- ## [Overload of Filebeat?](https://discuss.elastic.co/t/overload-of-filebeat/79468)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 4\ **Last updated:** [March 22, 2017, 2:19pm UTC](https://discuss.elastic.co/t/overload-of-filebeat/79468 "2017-03-22T14:19:35Z")
Hello, I try to uplaod 53 000 000 lines split into about 600 files with Filebeat 5.1 (Stack in 5.1) I was surprised by the slowness of the upload of lines and i was look the log of filebeat and surprise there is 2 er… --- ## [5.1.1 custom format isn't supported](https://discuss.elastic.co/t/5-1-1-custom-format-isnt-supported/70125)
**Author:** [@alexis-storever](https://discuss.elastic.co/u/alexis-storever)\ **Replies:** 3\ **Last updated:** [December 29, 2016, 8:00am UTC](https://discuss.elastic.co/t/5-1-1-custom-format-isnt-supported/70125 "2016-12-29T08:00:36Z")
Hi, I subscribe to a 14days trial to move from my test env (5.1.1) to your could base solution. I load the elasticsearch thru Logstash with my IIS server logs. When I look into the discover, I get this message: \> … [Previous page](https://discuss.elastic.co/top.md?page=524&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=526&per_page=50&period=all)