# Top **URL:** https://discuss.elastic.co/top.md?page=581&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 582 --- ## [Logstash stuck at stage pipelines running](https://discuss.elastic.co/t/logstash-stuck-at-stage-pipelines-running/309951)
**Author:** [@sridharnetha](https://discuss.elastic.co/u/sridharnetha)\ **Replies:** 4\ **Last updated:** [July 19, 2022, 4:46am UTC](https://discuss.elastic.co/t/logstash-stuck-at-stage-pipelines-running/309951 "2022-07-19T04:46:14Z")
I am trying to ingest a csv file to include data on the elasticsearch server on the existing index. The csv file contains whitespaces in header column names. Here is an example "MOBILE NO" should be renamed to "MOBILE\_N… --- ## [Websphere Application Server support](https://discuss.elastic.co/t/websphere-application-server-support/215048)
**Author:** [@ledgpat](https://discuss.elastic.co/u/ledgpat)\ **Replies:** 4\ **Last updated:** [January 16, 2020, 3:50pm UTC](https://discuss.elastic.co/t/websphere-application-server-support/215048 "2020-01-16T15:50:32Z")
Hello, I know that the Supported technologies page only lists Websphere Liberty as being officially supported, but I have also seen references to future Websphere classic/full support being on the radar. It's been a whi… --- ## [Esrally SSL error certificate verify failed](https://discuss.elastic.co/t/esrally-ssl-error-certificate-verify-failed/254893)
**Author:** [@r.laponder](https://discuss.elastic.co/u/r.laponder)\ **Replies:** 7\ **Last updated:** [November 12, 2020, 2:25pm UTC](https://discuss.elastic.co/t/esrally-ssl-error-certificate-verify-failed/254893 "2020-11-12T14:25:03Z")
Hi, I'm trying to benchmark an existing Elasticsearch cluster to try out Rally. When starting the benchmark I run into the following error: 2020-11-10 09:27:39,430 ActorAddr-(T|:57843)/PID:16851 esrally.client INFO… --- ## [Lots of "cluster state update task \[zen-disco-receive(from master " above the warn threshold of 30s"](https://discuss.elastic.co/t/lots-of-cluster-state-update-task-zen-disco-receive-from-master-above-the-warn-threshold-of-30s/175961)
**Author:** [@shjdwxy](https://discuss.elastic.co/u/shjdwxy)\ **Replies:** 3\ **Last updated:** [April 9, 2019, 10:36am UTC](https://discuss.elastic.co/t/lots-of-cluster-state-update-task-zen-disco-receive-from-master-above-the-warn-threshold-of-30s/175961 "2019-04-09T10:36:38Z")
hi, We use ES for log management and ES cluster is built by hot-cold architecture. One physical host holds one hot node and one cold node. Hot node and cold node share Cpu, memory, but use different storage( ssd for hot… --- ## [File input: ignore\_older quick question](https://discuss.elastic.co/t/file-input-ignore-older-quick-question/54388)
**Author:** [@Alex\_6](https://discuss.elastic.co/u/Alex_6)\ **Replies:** 3\ **Last updated:** [June 30, 2016, 11:16am UTC](https://discuss.elastic.co/t/file-input-ignore-older-quick-question/54388 "2016-06-30T11:16:55Z")
I just want to check the behaviour of the ignore\_older parameter. Logstash 2.3.3. Logstash has a file input and is set start\_position: beginning. ignore\_older set to default of 24h. Logstash has been down for 48h. … --- ## [How could I compare these two time values using painless script?](https://discuss.elastic.co/t/how-could-i-compare-these-two-time-values-using-painless-script/291034)
**Author:** [@Peilin](https://discuss.elastic.co/u/Peilin)\ **Replies:** 6\ **Last updated:** [December 10, 2021, 8:25am UTC](https://discuss.elastic.co/t/how-could-i-compare-these-two-time-values-using-painless-script/291034 "2021-12-10T08:25:59Z")
I am using ES to analysis medical data. how can i using painless script compare these two time values(beginDateTime, endDateTime).deep values. if it's not deep value, i found a solution like this { "query": { … --- ## [Kibana not showing the Latest logs](https://discuss.elastic.co/t/kibana-not-showing-the-latest-logs/151918)
**Author:** [@JawadKM](https://discuss.elastic.co/u/JawadKM)\ **Replies:** 5\ **Last updated:** [October 22, 2018, 6:46pm UTC](https://discuss.elastic.co/t/kibana-not-showing-the-latest-logs/151918 "2018-10-22T18:46:06Z")
Hi, I am using Elasticsearch/Kibana v 6.4.1 I configured my environment in such a way that I am using syslog-ng to push logs into elasticsearch and then display in kibana. The problem I am facing right now is that I wa… --- ## [Question regarding template\_overwrite in logstash output to elasticsearch](https://discuss.elastic.co/t/question-regarding-template-overwrite-in-logstash-output-to-elasticsearch/50908)
**Author:** [@macymin](https://discuss.elastic.co/u/macymin)\ **Replies:** 4\ **Last updated:** [May 30, 2016, 7:59am UTC](https://discuss.elastic.co/t/question-regarding-template-overwrite-in-logstash-output-to-elasticsearch/50908 "2016-05-30T07:59:10Z")
I want to do the on the fly template overwrite for 1 of my index data (basically is to decrease the shards count). so i need to add below session: my questions is do I need to add this to all the logstash indexer's conf … --- ## [Completion suggester in java API](https://discuss.elastic.co/t/completion-suggester-in-java-api/165568)
**Author:** [@Shyju\_M](https://discuss.elastic.co/u/Shyju_M)\ **Replies:** 3\ **Last updated:** [January 29, 2019, 9:12am UTC](https://discuss.elastic.co/t/completion-suggester-in-java-api/165568 "2019-01-29T09:12:06Z")
I am trying to integrate the autocompletion feature by following the article https://www.elastic.co/blog/you-complete-me. I couldn't see any article to implement the same with the JAVA API Please guide me to do the same… --- ## [Systemd\[1\]: elasticsearch.service: Main process exited, code=exited, status=1/FAILURE](https://discuss.elastic.co/t/systemd-1-elasticsearch-service-main-process-exited-code-exited-status-1-failure/317015)
**Author:** [@EExisT](https://discuss.elastic.co/u/EExisT)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 7:47am UTC](https://discuss.elastic.co/t/systemd-1-elasticsearch-service-main-process-exited-code-exited-status-1-failure/317015 "2022-10-20T07:47:14Z")
Hello, i have an 8.4.x Elastic's version. After editing the .yml file, setting IP address, cluster name and http port, the service doesn't start. jourcnalcte -xeu elasticsearch.service ott 19 16:05:54 ubuntu-linux-2… --- ## [I tried to check if the server running by typing "http://localhost:9200/\_status" but i got on the browser "ERR\_EMPTY\_RESPONSE"](https://discuss.elastic.co/t/i-tried-to-check-if-the-server-running-by-typing-http-localhost-9200-status-but-i-got-on-the-browser-err-empty-response/298191)
**Author:** [@moazmahmoud\_saad](https://discuss.elastic.co/u/moazmahmoud_saad)\ **Replies:** 2\ **Last updated:** [February 26, 2022, 12:40am UTC](https://discuss.elastic.co/t/i-tried-to-check-if-the-server-running-by-typing-http-localhost-9200-status-but-i-got-on-the-browser-err-empty-response/298191 "2022-02-26T00:40:07Z")
i tried to check if the server running by typing "http://localhost:9200/\_status" but i got on the browser "ERR\_EMPTY\_RESPONSE" and here what is printed on the cmd (windows) \[2022-02-24T18:48:46,917\]\[INFO \]\[o.e.g.Gatewa… --- ## [Can we have kibana authentication without x-pack?](https://discuss.elastic.co/t/can-we-have-kibana-authentication-without-x-pack/120844)
**Author:** [@Abdul\_Gaffar\_Shaikh](https://discuss.elastic.co/u/Abdul_Gaffar_Shaikh)\ **Replies:** 2\ **Last updated:** [February 28, 2018, 10:33am UTC](https://discuss.elastic.co/t/can-we-have-kibana-authentication-without-x-pack/120844 "2018-02-28T10:33:52Z")
Hi team, i would like to write custom realm authentication for my web app for user authentication. however my x-pack trial license has expired, and basic license does not support security plugin. I can't afford for pai… --- ## [关于多层nested 嵌套查询(多规格商品查询),数据查询要怎么做](https://discuss.elastic.co/t/nested/281930)
**Author:** [@XuShall](https://discuss.elastic.co/u/XuShall)\ **Replies:** 4\ **Last updated:** [September 10, 2021, 1:07am UTC](https://discuss.elastic.co/t/nested/281930 "2021-09-10T01:07:30Z")
关于多层nested 嵌套查询(多规格商品查询),数据查询要怎么做 结构 PUT goods { "mappings": { "properties": { "spu\_id": { "type": "integer" }, "title": { "type": "text", "analyzer": "ik\_smart" }, "sub\_title": { "typ… --- ## [Permissions in dashboards](https://discuss.elastic.co/t/permissions-in-dashboards/106897)
**Author:** [@Lidiya\_Chernova](https://discuss.elastic.co/u/Lidiya_Chernova)\ **Replies:** 3\ **Last updated:** [November 16, 2017, 8:42am UTC](https://discuss.elastic.co/t/permissions-in-dashboards/106897 "2017-11-16T08:42:31Z")
Kibana version: 5.6.1 Elasticsearch version: 5.6.1 Describe the feature: How can we manage permissions between dashboards creators? Can we set permissions for editing certain dashboard? --- ## [Multiple index in elasticsearch from filebeat](https://discuss.elastic.co/t/multiple-index-in-elasticsearch-from-filebeat/92154)
**Author:** [@Roque\_Moyano](https://discuss.elastic.co/u/Roque_Moyano)\ **Replies:** 3\ **Last updated:** [July 7, 2017, 2:26pm UTC](https://discuss.elastic.co/t/multiple-index-in-elasticsearch-from-filebeat/92154 "2017-07-07T14:26:05Z")
Hi , I want to create a two outputs filters in logstash , that depends on the "type" field sent from filebeat: filebeat: prospectors: - paths: - /var/log/app.log … --- ## [Issues with NEST 7. "The stream with Id and Tag is disposed."](https://discuss.elastic.co/t/issues-with-nest-7-the-stream-with-id-and-tag-is-disposed/203690)
**Author:** [@andrx](https://discuss.elastic.co/u/andrx)\ **Replies:** 8\ **Last updated:** [October 22, 2019, 12:28am UTC](https://discuss.elastic.co/t/issues-with-nest-7-the-stream-with-id-and-tag-is-disposed/203690 "2019-10-22T00:28:02Z")
After update to Nest7 (basically nuget, no other changes) occasionally getting this error for a process that usually runs for 15 minutes. Sometimes it happens during updating documents by id, sometimes bulk operations. … --- ## [Understanding doc\_count\_error\_upper\_bound](https://discuss.elastic.co/t/understanding-doc-count-error-upper-bound/117877)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 0\ **Last updated:** [January 31, 2018, 7:09pm UTC](https://discuss.elastic.co/t/understanding-doc-count-error-upper-bound/117877 "2018-01-31T19:09:24Z")
So I read the docs but still a bit confused, or it's just not clicking.... If I use size: 512 I get doc\_count\_error\_upper\_bound: 45 and sum\_other\_doc\_count: 29728 If I use size: 8192 (YES I know I should NOT use large … --- ## [Unknown indices status](https://discuss.elastic.co/t/unknown-indices-status/86294)
**Author:** [@mitabrev](https://discuss.elastic.co/u/mitabrev)\ **Replies:** 3\ **Last updated:** [May 19, 2017, 6:57am UTC](https://discuss.elastic.co/t/unknown-indices-status/86294 "2017-05-19T06:57:55Z")
Hi all, Hope i'm correct here :slight\_smile: Today I encountered a problem with our elastic server. I probably overloaded it with (too) many input files to ingest. Elasticsearch stopped responding, cpu was through t… --- ## [Logstash: TypeError: no implicit conversion of nil into string](https://discuss.elastic.co/t/logstash-typeerror-no-implicit-conversion-of-nil-into-string/224219)
**Author:** [@manojkrishna561994](https://discuss.elastic.co/u/manojkrishna561994)\ **Replies:** 2\ **Last updated:** [April 7, 2020, 12:48pm UTC](https://discuss.elastic.co/t/logstash-typeerror-no-implicit-conversion-of-nil-into-string/224219 "2020-04-07T12:48:08Z")
I'm new to ELK and trying to input 3rd party REST API to Logstash to feed data into it. I'm getting TypeError: no implicit conversion of nil into string. I'm using http\_input\_poller plugin to feed data. Here is configur… --- ## [How to delete amp service?](https://discuss.elastic.co/t/how-to-delete-amp-service/301908)
**Author:** [@xcyk1226](https://discuss.elastic.co/u/xcyk1226)\ **Replies:** 5\ **Last updated:** [April 11, 2022, 1:31am UTC](https://discuss.elastic.co/t/how-to-delete-amp-service/301908 "2022-04-11T01:31:39Z")
I want to delete some service ,but I can't find delete button,how can i delete those service?can you help me? --- ## [Logstash - Filebeat - Input not listening](https://discuss.elastic.co/t/logstash-filebeat-input-not-listening/169761)
**Author:** [@Kanthasamyraja](https://discuss.elastic.co/u/Kanthasamyraja)\ **Replies:** 5\ **Last updated:** [February 26, 2019, 5:39pm UTC](https://discuss.elastic.co/t/logstash-filebeat-input-not-listening/169761 "2019-02-26T17:39:50Z")
Hi, I am using 6.5.4 version of elastic stack. (Filebeat - Logstash - Elasticsearch - Kibana). filebeat was working fine. Enabled x-pack in ES and other related settings. ELK - Able to start the services. But Logstas… --- ## [Grok will not change field type to Int or IP](https://discuss.elastic.co/t/grok-will-not-change-field-type-to-int-or-ip/63756)
**Author:** [@sancroth](https://discuss.elastic.co/u/sancroth)\ **Replies:** 5\ **Last updated:** [October 25, 2016, 5:37am UTC](https://discuss.elastic.co/t/grok-will-not-change-field-type-to-int-or-ip/63756 "2016-10-25T05:37:16Z")
While trying to match my VPN connections with the match below : match =\> \[ "message", "%{WORD:openvpn\_user}/%{IP:openvpn\_scr\_ip}:%{INT:openvpn\_scr\_port} MULTI\_sva: pool returned IPv4=%{IP:openvpn\_ip}" \] I get my log… --- ## [Can't updating index settings via /\_settings prior to index existance](https://discuss.elastic.co/t/cant-updating-index-settings-via--settings-prior-to-index-existance/56750)
**Author:** [@hartfordfive](https://discuss.elastic.co/u/hartfordfive)\ **Replies:** 5\ **Last updated:** [July 29, 2016, 6:21pm UTC](https://discuss.elastic.co/t/cant-updating-index-settings-via--settings-prior-to-index-existance/56750 "2016-07-29T18:21:05Z")
From my understanding index.number\_of\_replicas can be set in the elsaticsearch.yml config yet it seems I can't update it via the /\_settings API endpoint unless the index already exists: # curl -XPUT http://127.0.01:92… --- ## [No handler for type \[flattened\] declared on field \[host\]"](https://discuss.elastic.co/t/no-handler-for-type-flattened-declared-on-field-host/258177)
**Author:** [@voipas](https://discuss.elastic.co/u/voipas)\ **Replies:** 3\ **Last updated:** [December 10, 2020, 6:05am UTC](https://discuss.elastic.co/t/no-handler-for-type-flattened-declared-on-field-host/258177 "2020-12-10T06:05:17Z")
Hello, I'm taking some trainings on Elasticsearch, and I I receive an error if I try use flattened: ../bin/curl -XPUT "http://elastic.192.168.0.1.nip.io/demo-flattened/\_mapping" -d ' { "prope… --- ## [New install of Kibana can't get data from Elasticsearch, or?](https://discuss.elastic.co/t/new-install-of-kibana-cant-get-data-from-elasticsearch-or/44602)
**Author:** [@johncst](https://discuss.elastic.co/u/johncst)\ **Replies:** 3\ **Last updated:** [March 17, 2016, 9:23pm UTC](https://discuss.elastic.co/t/new-install-of-kibana-cant-get-data-from-elasticsearch-or/44602 "2016-03-17T21:23:31Z")
This has to be something simple, but after burning more than a day over this, I thought I'd ask. This is a new install on Elasticsearch and Kibana. I'll get to Logstash later, unless its needed now. It appears Elasticsea… --- ## [\[FORBIDDEN/12/index read-only](https://discuss.elastic.co/t/forbidden-12-index-read-only/171578)
**Author:** [@paulo.leao](https://discuss.elastic.co/u/paulo.leao)\ **Replies:** 7\ **Last updated:** [March 12, 2019, 9:42pm UTC](https://discuss.elastic.co/t/forbidden-12-index-read-only/171578 "2019-03-12T21:42:25Z")
I am getting the following message from Logstash: \[INFO \]\[logstash.outputs.elasticsearch\] retrying failed action with response code: 403 ({"type"=\>"cluster\_block\_exception", "reason"=\>"blocked by: \[FORBIDDEN/12/index re… --- ## [How to implement fuzzy search for phrase/phrase\_prefix in elasticsearch6.8?](https://discuss.elastic.co/t/how-to-implement-fuzzy-search-for-phrase-phrase-prefix-in-elasticsearch6-8/185551)
**Author:** [@sunweiconfidence](https://discuss.elastic.co/u/sunweiconfidence)\ **Replies:** 6\ **Last updated:** [June 14, 2019, 1:42am UTC](https://discuss.elastic.co/t/how-to-implement-fuzzy-search-for-phrase-phrase-prefix-in-elasticsearch6-8/185551 "2019-06-14T01:42:57Z")
hi i want to know how to implement fuzzy search for match/match\_phrase/match\_phrase\_prefix in elasticsearch6.8? previously i implement it using below clause in es5.4 "match" : { "\_all" : { "query" : "test", "operat… --- ## [How to load 2 Million record of CSV file's data to Elasticsearch in CentosOs 7?](https://discuss.elastic.co/t/how-to-load-2-million-record-of-csv-files-data-to-elasticsearch-in-centosos-7/1919)
**Author:** [@anjithalk](https://discuss.elastic.co/u/anjithalk)\ **Replies:** 6\ **Last updated:** [June 11, 2015, 11:46am UTC](https://discuss.elastic.co/t/how-to-load-2-million-record-of-csv-files-data-to-elasticsearch-in-centosos-7/1919 "2015-06-11T11:46:11Z")
What is the best way to load 2 million records of CSV file data to elastic search? Can I use spark for this purpose ? --- ## [Date Histogram empty buckets and number of buckets](https://discuss.elastic.co/t/date-histogram-empty-buckets-and-number-of-buckets/28972)
**Author:** [@Ilya\_Anisimov](https://discuss.elastic.co/u/Ilya_Anisimov)\ **Replies:** 4\ **Last updated:** [September 14, 2015, 5:37pm UTC](https://discuss.elastic.co/t/date-histogram-empty-buckets-and-number-of-buckets/28972 "2015-09-14T17:37:39Z")
Hi Guys, I'm trying to use Elasticsearch 1.4.4 and Aggregation framework to generate data for graphs. I have a strange problem: when I specify interval "day" (query and extended\_bounds set to Aug 3rd 2015 to Sep 14th 2… --- ## [Bulk Insert GeoJSON from Postgresql](https://discuss.elastic.co/t/bulk-insert-geojson-from-postgresql/5018)
**Author:** [@Adam\_Estrada](https://discuss.elastic.co/u/Adam_Estrada)\ **Replies:** 4\ **Last updated:** [August 1, 2011, 9:05pm UTC](https://discuss.elastic.co/t/bulk-insert-geojson-from-postgresql/5018 "2011-08-01T21:05:56Z")
All, It's relatively simple to get spatial data from Postgres. The following example is geojson exported directly from Postgis. http://pastebin.com/25NsAteH What would I have to do to bulk load the data in to E… --- ## [Convert cluster to single node](https://discuss.elastic.co/t/convert-cluster-to-single-node/273368)
**Author:** [@macho](https://discuss.elastic.co/u/macho)\ **Replies:** 5\ **Last updated:** [May 19, 2021, 8:44am UTC](https://discuss.elastic.co/t/convert-cluster-to-single-node/273368 "2021-05-19T08:44:29Z")
Sorry for probably a stupid question, but I am relatively new to elasticsearch. My Problem is, I have a running cluster on three different machines. As this machines were never on the limit we want to use (at least) on… --- ## [Trigger an alert on a condition](https://discuss.elastic.co/t/trigger-an-alert-on-a-condition/217103)
**Author:** [@shappy123](https://discuss.elastic.co/u/shappy123)\ **Replies:** 5\ **Last updated:** [February 3, 2020, 3:07pm UTC](https://discuss.elastic.co/t/trigger-an-alert-on-a-condition/217103 "2020-02-03T15:07:52Z")
Hi I want to trigger an email alert based on this condition : that if in the log this --- "," RequestPath":"/documentService/v1/Document/uploadLink ----- doesnt appear in the logs for next 12 hours so should send an… --- ## [Anonymization of sensitive data by Logstash](https://discuss.elastic.co/t/anonymization-of-sensitive-data-by-logstash/245585)
**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\ **Replies:** 8\ **Last updated:** [August 25, 2020, 1:45pm UTC](https://discuss.elastic.co/t/anonymization-of-sensitive-data-by-logstash/245585 "2020-08-25T13:45:24Z")
Hello, can anyone help me how to anonymize sensitive data from multline log? How to anonymize value of parameter sensitive data: sensitive data:more than one line some part on second and on third line should be repla… --- ## [Installing through proxy](https://discuss.elastic.co/t/installing-through-proxy/57488)
**Author:** [@n.maire](https://discuss.elastic.co/u/n.maire)\ **Replies:** 2\ **Last updated:** [September 6, 2016, 8:08am UTC](https://discuss.elastic.co/t/installing-through-proxy/57488 "2016-09-06T08:08:45Z")
Hi, I've been trying to install X-Pack through our corporate proxy. The elasticsearch-plugin installation does work through setting the correct java options in ES\_JAVA\_OPTS but kibana-plugin doesn't work. Does anyone… --- ## [Readiness probe failed: Waiting for elasticsearch cluster to become ready](https://discuss.elastic.co/t/readiness-probe-failed-waiting-for-elasticsearch-cluster-to-become-ready/272273)
**Author:** [@vbharath2007](https://discuss.elastic.co/u/vbharath2007)\ **Replies:** 1\ **Last updated:** [May 7, 2021, 9:42am UTC](https://discuss.elastic.co/t/readiness-probe-failed-waiting-for-elasticsearch-cluster-to-become-ready/272273 "2021-05-07T09:42:59Z")
Hi, I'm running ELK stack using helm charts through the elastic community operator git repo. My ES is a single node cluster, today morning suddenly the pod failed and unable to bring up and receiving the below from the … --- ## [Aggregate watchers over multiple fields for term aggregation](https://discuss.elastic.co/t/aggregate-watchers-over-multiple-fields-for-term-aggregation/143449)
**Author:** [@sahil\_sawhney](https://discuss.elastic.co/u/sahil_sawhney)\ **Replies:** 3\ **Last updated:** [August 24, 2018, 10:20am UTC](https://discuss.elastic.co/t/aggregate-watchers-over-multiple-fields-for-term-aggregation/143449 "2018-08-24T10:20:52Z")
I have a scenario where i want to aggregate my result with the combination of 2 fields value. Following is the json of index on which my watcher targets { "\_index": ".monitoring-es-6-2018.08.08", "\_type": "doc", … --- ## [Alternate to multiple if..else-if in Logstash .conf file](https://discuss.elastic.co/t/alternate-to-multiple-if-else-if-in-logstash-conf-file/79835)
**Author:** [@anisen](https://discuss.elastic.co/u/anisen)\ **Replies:** 3\ **Last updated:** [March 24, 2017, 11:20am UTC](https://discuss.elastic.co/t/alternate-to-multiple-if-else-if-in-logstash-conf-file/79835 "2017-03-24T11:20:02Z")
Hi, In my log file, there is a URI field. Now, I have added another field named 'user\_operation' with a default value and want to assign different values to this 'user\_operation' field depending on the value of the … --- ## [Pattern Cisco-ASA syslog message : Grokparsefailure ASA410001 ASA313005](https://discuss.elastic.co/t/pattern-cisco-asa-syslog-message-grokparsefailure-asa410001-asa313005/55197)
**Author:** [@OncleThorgal](https://discuss.elastic.co/u/OncleThorgal)\ **Replies:** 3\ **Last updated:** [July 13, 2016, 7:14am UTC](https://discuss.elastic.co/t/pattern-cisco-asa-syslog-message-grokparsefailure-asa410001-asa313005/55197 "2016-07-13T07:14:09Z")
Hi everyone ! I used a cisco-asa pattern to filter my syslog message but i don't know why, i've tags:\_grokparsefailure. My patterns are : #== Cisco ASA == CISCO\_TAGGED\_SYSLOG \<%{POSINT:syslog\_pri}\>:%%{CISCOTAG:cis… --- ## [Elastic Stack 5.6.1 released](https://discuss.elastic.co/t/elastic-stack-5-6-1-released/100906)
**Author:** [@suyograo](https://discuss.elastic.co/u/suyograo)\ **Replies:** 0\ **Last updated:** [September 18, 2017, 5:30pm UTC](https://discuss.elastic.co/t/elastic-stack-5-6-1-released/100906 "2017-09-18T17:30:16Z")
Hi all, We’ve just released version 5.6.1 of the Elastic Stack. This is a bug fix release; please see the release notes/blogs for each product to get the details. You can find the individual blog posts here: https://ww… --- ## [Could not index event to Elasticsearch. Root mapping definition has unsupported parameters](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-root-mapping-definition-has-unsupported-parameters/228176)
**Author:** [@Chris\_Wilmott](https://discuss.elastic.co/u/Chris_Wilmott)\ **Replies:** 4\ **Last updated:** [April 15, 2020, 6:32pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-root-mapping-definition-has-unsupported-parameters/228176 "2020-04-15T18:32:51Z")
Hi, I have recently upgraded from 6.6 to 7.6.2 and it all went smoothly enough. However I checked my logs this morning and have found the following: \[2020-04-15T15:50:50,851\]\[WARN \]\[logstash.outputs.elasticsearch\] Coul… --- ## [Voting Only Node](https://discuss.elastic.co/t/voting-only-node/196883)
**Author:** [@Prafull](https://discuss.elastic.co/u/Prafull)\ **Replies:** 1\ **Last updated:** [August 27, 2019, 6:57am UTC](https://discuss.elastic.co/t/voting-only-node/196883 "2019-08-27T06:57:43Z")
Hi, I am trying to create voting only node along with 2 master eligible node via docker. I am able to create master node but not able to create a voting only node. getting below error. Also, find docker-compose.yml bel… --- ## [X-pack - SAML issue - ELK 6.4](https://discuss.elastic.co/t/x-pack-saml-issue-elk-6-4/153235)
**Author:** [@Galambos\_Robert](https://discuss.elastic.co/u/Galambos_Robert)\ **Replies:** 6\ **Last updated:** [October 24, 2018, 3:09pm UTC](https://discuss.elastic.co/t/x-pack-saml-issue-elk-6-4/153235 "2018-10-24T15:09:59Z")
Hello I'm testing the ELK 6.4 version on stage env ( Ubuntu 16.04.5 LTS ) , i have 1LS with redis , 2 ES as data nodes and 1 Kib with ES as master. SSL setup went ok but but further I need to integrate it with SAML on A… --- ## [Elasticsearch Ingest Pipeline Index Routing](https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-index-routing/316474)
**Author:** [@matled](https://discuss.elastic.co/u/matled)\ **Replies:** 7\ **Last updated:** [October 13, 2022, 4:25pm UTC](https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-index-routing/316474 "2022-10-13T16:25:24Z")
We currently have an Elastic-Stack with seven Nodes and about 50 different integrations running. One Feature we currently miss is the possibility to somehow route the data to a specific index. Let's say we habe an Integ… --- ## [How can we add the field value to the legends in kibana visualization](https://discuss.elastic.co/t/how-can-we-add-the-field-value-to-the-legends-in-kibana-visualization/204434)
**Author:** [@satyam2593](https://discuss.elastic.co/u/satyam2593)\ **Replies:** 7\ **Last updated:** [November 18, 2019, 2:59am UTC](https://discuss.elastic.co/t/how-can-we-add-the-field-value-to-the-legends-in-kibana-visualization/204434 "2019-11-18T02:59:16Z")
I want to visualize the data by splitting on the particular field and aggregation using as count on another field. But in my visualization i need to display the count value next to the legend name. Is there any feasibil… --- ## [Security in elasticsearch without Xpack](https://discuss.elastic.co/t/security-in-elasticsearch-without-xpack/98412)
**Author:** [@njkl](https://discuss.elastic.co/u/njkl)\ **Replies:** 2\ **Last updated:** [August 28, 2017, 5:06pm UTC](https://discuss.elastic.co/t/security-in-elasticsearch-without-xpack/98412 "2017-08-28T17:06:31Z")
Hi, This is only a clarification request. Is it possible to manage security without Xpack ? (create role, assign role, create users, assign user, assign role to specific functions, etc ?) Also, is the xpack the only pl… --- ## [Syncing data between two different clusters of different version](https://discuss.elastic.co/t/syncing-data-between-two-different-clusters-of-different-version/141467)
**Author:** [@ravi432](https://discuss.elastic.co/u/ravi432)\ **Replies:** 5\ **Last updated:** [July 25, 2018, 9:16pm UTC](https://discuss.elastic.co/t/syncing-data-between-two-different-clusters-of-different-version/141467 "2018-07-25T21:16:46Z")
Hi , Is there a way to sync data between two different clusters which are running under different versions..? If not is there a way to get any alerts from elastic search when there is an insert,update or delete..? a… --- ## [Is there a Grok Pattern for Windows Event Log?](https://discuss.elastic.co/t/is-there-a-grok-pattern-for-windows-event-log/42762)
**Author:** [@eso](https://discuss.elastic.co/u/eso)\ **Replies:** 1\ **Last updated:** [February 25, 2016, 9:14pm UTC](https://discuss.elastic.co/t/is-there-a-grok-pattern-for-windows-event-log/42762 "2016-02-25T21:14:02Z")
Hello, I am new to Elastic Stack. and don't know much about Grok and how to construct patterns. Today is my second days to read about Elastic Stack, particularly LogStash. I would like to play with it in order to le… --- ## [LambdaConversionException Invalid receiver type interface org.apache.http.Header -from RestHighLevelClient in Logstash Java plugin](https://discuss.elastic.co/t/lambdaconversionexception-invalid-receiver-type-interface-org-apache-http-header-from-resthighlevelclient-in-logstash-java-plugin/255393)
**Author:** [@hellopcz](https://discuss.elastic.co/u/hellopcz)\ **Replies:** 4\ **Last updated:** [November 16, 2020, 9:17am UTC](https://discuss.elastic.co/t/lambdaconversionexception-invalid-receiver-type-interface-org-apache-http-header-from-resthighlevelclient-in-logstash-java-plugin/255393 "2020-11-16T09:17:55Z")
My RestHighLevelClient can run well in Win10 IDEA enviroment for testing, but when I "gradlew gem" the gem package, and run it in CentOS8 logstash-plugin enviroment(Logstash 7.9.0), there will be: \[2020-11-10T00:09:04,… --- ## [How to Create different index pattern for different filebeat server?](https://discuss.elastic.co/t/how-to-create-different-index-pattern-for-different-filebeat-server/170287)
**Author:** [@Aashish\_Chugh](https://discuss.elastic.co/u/Aashish_Chugh)\ **Replies:** 4\ **Last updated:** [February 28, 2019, 12:29pm UTC](https://discuss.elastic.co/t/how-to-create-different-index-pattern-for-different-filebeat-server/170287 "2019-02-28T12:29:58Z")
Hi, I want to create a new index pattern for multiple filebeat server , like i have two server one is app and second is db server, for now both the logs is storing in same index. I try many ways to separate them but no… --- ## [Timelion date format](https://discuss.elastic.co/t/timelion-date-format/93530)
**Author:** [@carlosvega](https://discuss.elastic.co/u/carlosvega)\ **Replies:** 6\ **Last updated:** [July 27, 2017, 10:52am UTC](https://discuss.elastic.co/t/timelion-date-format/93530 "2017-07-27T10:52:44Z")
When using "auto", Timelion shows only the hour and not the date for long spans of times such as now-10d to now is there any way to fix this? Greetings [Previous page](https://discuss.elastic.co/top.md?page=580&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=582&per_page=50&period=all)