# Top **URL:** https://discuss.elastic.co/top.md?page=592&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 593 --- ## [Failed to deserialize response of type org.elasticsearch.xpack.action.XPackUsageResponse](https://discuss.elastic.co/t/failed-to-deserialize-response-of-type-org-elasticsearch-xpack-action-xpackusageresponse/59054)
**Author:** [@ave19](https://discuss.elastic.co/u/ave19)\ **Replies:** 6\ **Last updated:** [August 30, 2016, 1:29am UTC](https://discuss.elastic.co/t/failed-to-deserialize-response-of-type-org-elasticsearch-xpack-action-xpackusageresponse/59054 "2016-08-30T01:29:58Z")
I installed a new license yesterday. Things were working great. This morning, I restarted my master node. Things seem OK from a curl perspective. I can do stuff. Authentication is working. Kibana however, is not h… --- ## [Logstash-2.2.2, windows, IIS log file format](https://discuss.elastic.co/t/logstash-2-2-2-windows-iis-log-file-format/45501)
**Author:** [@jack8653](https://discuss.elastic.co/u/jack8653)\ **Replies:** 6\ **Last updated:** [March 31, 2016, 6:48am UTC](https://discuss.elastic.co/t/logstash-2-2-2-windows-iis-log-file-format/45501 "2016-03-31T06:48:17Z")
Hello, when I'm parsing iis log file in UTF-8 format I'm getting \[0\] "\_grokparsefailure" error and When I'm parsing log file using ANSI format there is nothing working Logstash just display message on console " Logstas… --- ## [Boost using caret sign](https://discuss.elastic.co/t/boost-using-caret-sign/203255)
**Author:** [@Benjamin\_Gathmann](https://discuss.elastic.co/u/Benjamin_Gathmann)\ **Replies:** 2\ **Last updated:** [October 25, 2019, 12:55pm UTC](https://discuss.elastic.co/t/boost-using-caret-sign/203255 "2019-10-25T12:55:45Z")
I read on this website https://dzone.com/articles/23-useful-elasticsearch-example-queries that I can use the caret sign ("^") to boost a field in a multi\_match query, like so: GET /bookdb\_index/\_search { "query": { … --- ## [\[ANNOUNCEMENT\] Httpbeat 3.1.0 released](https://discuss.elastic.co/t/announcement-httpbeat-3-1-0-released/69876)
**Author:** [@christiangalsterer](https://discuss.elastic.co/u/christiangalsterer)\ **Replies:** 0\ **Last updated:** [December 23, 2016, 6:35am UTC](https://discuss.elastic.co/t/announcement-httpbeat-3-1-0-released/69876 "2016-12-23T06:35:40Z")
I'm happy to announce the availability of Httpbeat 3.1.0. Httpbeat is a Beat which polls HTTP endpoints in a regular interval and sends the HTTP request and response as an event to a configured shipper, e.g. elasticsea… --- ## [Doubts to enable xpack in elasticsearch 8.x](https://discuss.elastic.co/t/doubts-to-enable-xpack-in-elasticsearch-8-x/300352)
**Author:** [@gustavoluza](https://discuss.elastic.co/u/gustavoluza)\ **Replies:** 8\ **Last updated:** [March 26, 2022, 7:23pm UTC](https://discuss.elastic.co/t/doubts-to-enable-xpack-in-elasticsearch-8-x/300352 "2022-03-26T19:23:22Z")
I'm trying to install Elasticsearch 8 with the xpack module enabled, but I'm facing the errors below when I start the service, could you help me? Mar 22 10:35:11 elk systemd-entrypoint\[748\]: at com.fasterxml.jackson.dat… --- ## [Password reset of elastic user](https://discuss.elastic.co/t/password-reset-of-elastic-user/245096)
**Author:** [@bhargav\_bharat](https://discuss.elastic.co/u/bhargav_bharat)\ **Replies:** 3\ **Last updated:** [August 19, 2020, 2:17pm UTC](https://discuss.elastic.co/t/password-reset-of-elastic-user/245096 "2020-08-19T14:17:42Z")
I lost my "elastic" user password and now I am unable to change. Error I am getting when I run below mention command. root@siem:/usr/share/elasticsearch/bin# ./elasticsearch-setup-passwords interactive Failed to auth… --- ## [Elasticsearch Architecture Problem](https://discuss.elastic.co/t/elasticsearch-architecture-problem/162915)
**Author:** [@josephmanalo](https://discuss.elastic.co/u/josephmanalo)\ **Replies:** 8\ **Last updated:** [January 4, 2019, 9:35am UTC](https://discuss.elastic.co/t/elasticsearch-architecture-problem/162915 "2019-01-04T09:35:35Z")
Hi guys. The picture below is the existing data pipeline of a certain client. Their MAIN PROBLEM are: Not all the data are being ingested in Node 2 and Node 3 Slow retrieval of data Do you have any idea what might be… --- ## [Syslog\_severity\_code it's always "5" , syslog\_facility it's always "1", syslog\_facility it's always "user-level" and syslog\_severity it's always "notice"](https://discuss.elastic.co/t/syslog-severity-code-its-always-5-syslog-facility-its-always-1-syslog-facility-its-always-user-level-and-syslog-severity-its-always-notice/88892)
**Author:** [@Julian\_Tete](https://discuss.elastic.co/u/Julian_Tete)\ **Replies:** 8\ **Last updated:** [June 13, 2017, 4:46pm UTC](https://discuss.elastic.co/t/syslog-severity-code-its-always-5-syslog-facility-its-always-1-syslog-facility-its-always-user-level-and-syslog-severity-its-always-notice/88892 "2017-06-13T16:46:45Z")
Hello ELK's Friends I am trying to set up an ELK system to replace an Rsyslog + Adiscon LogAnalyzer implementation. The operating system used was CentOS 7.3 The versions of the installed packages were the following: f… --- ## [Error while deleting index using curator 4](https://discuss.elastic.co/t/error-while-deleting-index-using-curator-4/57821)
**Author:** [@ankur.k.gupta](https://discuss.elastic.co/u/ankur.k.gupta)\ **Replies:** 4\ **Last updated:** [August 11, 2016, 9:20pm UTC](https://discuss.elastic.co/t/error-while-deleting-index-using-curator-4/57821 "2016-08-11T21:20:51Z")
Hi All, I am using curator 4.0.5 to delete indices older than 45 days. I was trying their default example. However I am getting some weird exception: anks@maverick:~$ curator --config curator-config.yml delete\_action… --- ## [Logstash plugins rubygems ssl errors](https://discuss.elastic.co/t/logstash-plugins-rubygems-ssl-errors/104635)
**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\ **Replies:** 2\ **Last updated:** [October 20, 2017, 3:03am UTC](https://discuss.elastic.co/t/logstash-plugins-rubygems-ssl-errors/104635 "2017-10-20T03:03:14Z")
Anyone else had this problem? /usr/share/logstash/bin/logstash-plugin install logstash-filter-geoip Validating logstash-filter-geoip Unable to download data from https://rubygems.org - certificate verify failed (https… --- ## [Redirect loop](https://discuss.elastic.co/t/redirect-loop/77876)
**Author:** [@ericrichter](https://discuss.elastic.co/u/ericrichter)\ **Replies:** 2\ **Last updated:** [March 12, 2017, 7:19pm UTC](https://discuss.elastic.co/t/redirect-loop/77876 "2017-03-12T19:19:43Z")
I configured kibana with a server.basePath: "/kibana" in the config file. That worked fine before installing the x-pack plugin. After installing xpack, I got stuck in a redirect loop. See the logs for the details. Wh… --- ## [401 (Unauthorized) loop for kibana](https://discuss.elastic.co/t/401-unauthorized-loop-for-kibana/284881)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 3\ **Last updated:** [September 22, 2021, 2:51pm UTC](https://discuss.elastic.co/t/401-unauthorized-loop-for-kibana/284881 "2021-09-22T14:51:48Z")
I'll start with i dont know if this is an issue with kibana, browser or my UI but someone might have a suggestion. So i check if kibana is up by hitting https://kibana-instance:5601/api/status which returns either 200 i… --- ## [How to upgrade data from elasticsearch 2.4 to 5.6](https://discuss.elastic.co/t/how-to-upgrade-data-from-elasticsearch-2-4-to-5-6/116619)
**Author:** [@Sharon\_wsf](https://discuss.elastic.co/u/Sharon_wsf)\ **Replies:** 3\ **Last updated:** [January 23, 2018, 10:04am UTC](https://discuss.elastic.co/t/how-to-upgrade-data-from-elasticsearch-2-4-to-5-6/116619 "2018-01-23T10:04:49Z")
hi team, how to upgrade elasticsearch from 2.4 to 5.6? i have read https://www.elastic.co/guide/en/elasticsearch/reference/5.6/rolling-upgrades.html but what step actually i need to do? this is not very clear. i alre… --- ## [Elasticsearch Down](https://discuss.elastic.co/t/elasticsearch-down/330175)
**Author:** [@Lelc79](https://discuss.elastic.co/u/Lelc79)\ **Replies:** 4\ **Last updated:** [April 18, 2023, 12:48pm UTC](https://discuss.elastic.co/t/elasticsearch-down/330175 "2023-04-18T12:48:19Z")
hi community My elasticsearch Server is Down, ¿what could be happening? Elasticsearch 8.7 1) systemctl status elasticsearch elasticsearch.service - Elasticsearch Loaded: loaded (/lib/systemd/system/elasticsearch.ser… --- ## [Force hide settings button from bar and disable save option in Kibana 4](https://discuss.elastic.co/t/force-hide-settings-button-from-bar-and-disable-save-option-in-kibana-4/27678)
**Author:** [@Fernando\_Gamboa](https://discuss.elastic.co/u/Fernando_Gamboa)\ **Replies:** 4\ **Last updated:** [August 20, 2015, 8:00pm UTC](https://discuss.elastic.co/t/force-hide-settings-button-from-bar-and-disable-save-option-in-kibana-4/27678 "2015-08-20T20:00:59Z")
Hello, While using the Packetbeat demo I noticed that the settings option is not shown and the save button is partially disabled. How can I do this? All the best, Fernando --- ## [Help with 'dissect\_parsing\_error' on 'log file path'](https://discuss.elastic.co/t/help-with-dissect-parsing-error-on-log-file-path/243451)
**Author:** [@Yirmio](https://discuss.elastic.co/u/Yirmio)\ **Replies:** 1\ **Last updated:** [August 2, 2020, 2:21pm UTC](https://discuss.elastic.co/t/help-with-dissect-parsing-error-on-log-file-path/243451 "2020-08-02T14:21:17Z")
Hi I'm collecting logs from a central location, where each machine keep the log in separate folder, each folder name represents the machine name. In Filebeat, I want to put the folder name as field 'HOSTNAME', below i… --- ## [Data integrity](https://discuss.elastic.co/t/data-integrity/79897)
**Author:** [@PasqualeC](https://discuss.elastic.co/u/PasqualeC)\ **Replies:** 2\ **Last updated:** [March 28, 2017, 7:49am UTC](https://discuss.elastic.co/t/data-integrity/79897 "2017-03-28T07:49:01Z")
Hello, Is there a function or plug-in with which i can assure that data has not been tampered with after indexing? Just to be clear...something like Splunk Enterprise "Dataintegritycontrol". Thanks in advance! P. --- ## [Elastic search suffix query](https://discuss.elastic.co/t/elastic-search-suffix-query/10655)
**Author:** [@mohit\_Kumar](https://discuss.elastic.co/u/mohit_Kumar)\ **Replies:** 2\ **Last updated:** [February 8, 2013, 2:59pm UTC](https://discuss.elastic.co/t/elastic-search-suffix-query/10655 "2013-02-08T14:59:34Z")
hello sir, I am facing a problem in elastic search while running a query. How one can search a word through its middle or last letters. For example CORPORATION is a words and I am able to search CORPORATION with its… --- ## [How to get date time filter values in a markdown?](https://discuss.elastic.co/t/how-to-get-date-time-filter-values-in-a-markdown/247792)
**Author:** [@vinay26](https://discuss.elastic.co/u/vinay26)\ **Replies:** 5\ **Last updated:** [September 16, 2020, 6:34pm UTC](https://discuss.elastic.co/t/how-to-get-date-time-filter-values-in-a-markdown/247792 "2020-09-16T18:34:10Z")
I need to provide a hyperlink in kibana dashboard which navigates to an external site. At present, Created a TSVB and added a markdown to define the URL. Need to pass the selected date time range as query string to the… --- ## [Authentication of \[kibana\_system\] was terminated by realm \[reserved\] - failed to authenticate user \[kibana\_system\]](https://discuss.elastic.co/t/authentication-of-kibana-system-was-terminated-by-realm-reserved-failed-to-authenticate-user-kibana-system/285399)
**Author:** [@dominique.bejean](https://discuss.elastic.co/u/dominique.bejean)\ **Replies:** 1\ **Last updated:** [September 29, 2021, 9:03am UTC](https://discuss.elastic.co/t/authentication-of-kibana-system-was-terminated-by-realm-reserved-failed-to-authenticate-user-kibana-system/285399 "2021-09-29T09:03:16Z")
Hi, I am testing elsatistack 7.14.1 security in a docker-compose stack by following this documentation From the Kibana server, the following resquest works perfectly # curl --user kibana\_system:xxxxxxxxxxxxxxxxxxxxx … --- ## [ERROR: Something went wrong when installing file:///Softwares\\Kibana\\x-pack.zip, message: bad URI(is not URI?):](https://discuss.elastic.co/t/error-something-went-wrong-when-installing-file-softwares-kibana-x-pack-zip-message-bad-uri-is-not-uri/87480)
**Author:** [@jnsreddy9999](https://discuss.elastic.co/u/jnsreddy9999)\ **Replies:** 6\ **Last updated:** [June 1, 2017, 11:02am UTC](https://discuss.elastic.co/t/error-something-went-wrong-when-installing-file-softwares-kibana-x-pack-zip-message-bad-uri-is-not-uri/87480 "2017-06-01T11:02:15Z")
Hi, Below are my versions i'm using. Logstash-5.2.2 Elasticsearch-5.2.2 Kibana-5.2.2 While trying to install the X-pack into my system, it was successful for KIbana & elastic search. When trying to install for Logsta… --- ## [Help needed in grok](https://discuss.elastic.co/t/help-needed-in-grok/213827)
**Author:** [@adeel109](https://discuss.elastic.co/u/adeel109)\ **Replies:** 4\ **Last updated:** [January 9, 2020, 5:35pm UTC](https://discuss.elastic.co/t/help-needed-in-grok/213827 "2020-01-09T17:35:12Z")
I've been searching this and am directed to the same page most of the time. I am trying to write grok patterns for my custom logs. For example, below is a log line: 2020/01/02 08:40:16 UUID: 5E82093B:7550\_B0092619:01BB… --- ## ["field cannot be used for filtering" kibana 5.2 error](https://discuss.elastic.co/t/field-cannot-be-used-for-filtering-kibana-5-2-error/77904)
**Author:** [@guest](https://discuss.elastic.co/u/guest)\ **Replies:** 4\ **Last updated:** [March 15, 2017, 9:01pm UTC](https://discuss.elastic.co/t/field-cannot-be-used-for-filtering-kibana-5-2-error/77904 "2017-03-15T21:01:47Z")
I am currently using Elastic Search and Kibana 5.2 stack. I created a simple kibana pie chart visualisation with count metric and a "string" field in an index. I am getting the following error when I try to apply a fi… --- ## [Last record for each unique value](https://discuss.elastic.co/t/last-record-for-each-unique-value/271077)
**Author:** [@JeremyLoyd](https://discuss.elastic.co/u/JeremyLoyd)\ **Replies:** 2\ **Last updated:** [May 6, 2021, 11:11am UTC](https://discuss.elastic.co/t/last-record-for-each-unique-value/271077 "2021-05-06T11:11:15Z")
Hello, Our company changed to Elastic few months ago. before then we used to log a lot of things to one simple SQL table. in SQL i was able to find for each unique identifier last value that was recorded with simple Que… --- ## [Regex for number with whitesapce](https://discuss.elastic.co/t/regex-for-number-with-whitesapce/155128)
**Author:** [@Nusrath](https://discuss.elastic.co/u/Nusrath)\ **Replies:** 2\ **Last updated:** [December 3, 2018, 8:19am UTC](https://discuss.elastic.co/t/regex-for-number-with-whitesapce/155128 "2018-12-03T08:19:01Z")
Hi There, I have text content and want to search phone number or any number with white space in it. i tried with simple regex \[0-9\]{4} which matching something like below . eg:- {text : " this is my phone number 1… --- ## [This Discourse does not appear in Google?](https://discuss.elastic.co/t/this-discourse-does-not-appear-in-google/36677)
**Author:** [@AndreKR](https://discuss.elastic.co/u/AndreKR)\ **Replies:** 5\ **Last updated:** [December 11, 2015, 10:54pm UTC](https://discuss.elastic.co/t/this-discourse-does-not-appear-in-google/36677 "2015-12-11T22:54:31Z")
This Discourse seems to be a very valuable resource, but it doesn't seem to be indexed in Google at all. (I only got to know about it because it was linked somewhere on Github I think.) I can't even find it by searching … --- ## [Elasticsearch filter query with time range using java api](https://discuss.elastic.co/t/elasticsearch-filter-query-with-time-range-using-java-api/17904)
**Author:** [@bagui](https://discuss.elastic.co/u/bagui)\ **Replies:** 2\ **Last updated:** [June 16, 2014, 12:27pm UTC](https://discuss.elastic.co/t/elasticsearch-filter-query-with-time-range-using-java-api/17904 "2014-06-16T12:27:02Z")
Hi, I have a document like below { "\_index": "cpu\_usage\_metrics", "\_type": "cpu\_usage\_metrics", "\_id": "CKAAs1n8TKiR6FncC5NLGA", "\_score": 1, "\_sourc… --- ## [EsHadoopRemoteException: illegal\_argument\_exception: only write ops with an op\_type of create are allowed in data streams?](https://discuss.elastic.co/t/eshadoopremoteexception-illegal-argument-exception-only-write-ops-with-an-op-type-of-create-are-allowed-in-data-streams/340267)
**Author:** [@Zephery\_Wen](https://discuss.elastic.co/u/Zephery_Wen)\ **Replies:** 4\ **Last updated:** [August 9, 2023, 1:07pm UTC](https://discuss.elastic.co/t/eshadoopremoteexception-illegal-argument-exception-only-write-ops-with-an-op-type-of-create-are-allowed-in-data-streams/340267 "2023-08-09T13:07:05Z")
I want to use Spark to save data to a data stream. JavaEsSparkSQL.saveToEs(result, dataStream, map); It seems like 'saveToEs' only allows index. EsHadoopRemoteException: illegal\_argument\_exception: only write ops with… --- ## [Could not locate that index-pattern (id: 1), click here to re-create it](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-id-1-click-here-to-re-create-it/119620)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 3\ **Last updated:** [February 16, 2018, 2:21pm UTC](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-id-1-click-here-to-re-create-it/119620 "2018-02-16T14:21:36Z")
Hi i am trying to create an index-pattern from query , i am able to create it with bellow query POST /.kibana/doc/1 { "type" : "index-pattern", "index-pattern": { "title" : "test", "timeFieldName" : "@timesta… --- ## [Kibana Service Fails when SSL Cert Enabled](https://discuss.elastic.co/t/kibana-service-fails-when-ssl-cert-enabled/59417)
**Author:** [@Mike\_Sanders](https://discuss.elastic.co/u/Mike_Sanders)\ **Replies:** 7\ **Last updated:** [November 15, 2016, 11:04pm UTC](https://discuss.elastic.co/t/kibana-service-fails-when-ssl-cert-enabled/59417 "2016-11-15T23:04:32Z")
I did a search but haven't found anything. I have a certificate that is working on 3 other servers but when I try to point Kibana to it I get the following error on service start: ● kibana.service - no description give… --- ## [Winlogbeat does not resolve SIDs of forwarded Event-Logs](https://discuss.elastic.co/t/winlogbeat-does-not-resolve-sids-of-forwarded-event-logs/83752)
**Author:** [@wuppi](https://discuss.elastic.co/u/wuppi)\ **Replies:** 6\ **Last updated:** [May 3, 2017, 7:37pm UTC](https://discuss.elastic.co/t/winlogbeat-does-not-resolve-sids-of-forwarded-event-logs/83752 "2017-05-03T19:37:18Z")
We use winlogbeat on one Windows-Host which collects evet-logs from several Domain-Controllers and several domains. Winlogbeat only resolves the common SIDs and the SIDs of local users of the collector-system. The log on… --- ## [Aggregation on a materialized path](https://discuss.elastic.co/t/aggregation-on-a-materialized-path/36519)
**Author:** [@deviantony](https://discuss.elastic.co/u/deviantony)\ **Replies:** 2\ **Last updated:** [December 8, 2015, 7:05am UTC](https://discuss.elastic.co/t/aggregation-on-a-materialized-path/36519 "2015-12-08T07:05:26Z")
Hello there ! I'm trying to model a collection of product in Elasticsearch, each product having a label and one or more categories. Example: { "label": "Galaxy S4", "categoryPath": \["Smartphone/Android/5.1"\] }… --- ## [Winlogbeat wont start as a Service](https://discuss.elastic.co/t/winlogbeat-wont-start-as-a-service/168265)
**Author:** [@dfoley84](https://discuss.elastic.co/u/dfoley84)\ **Replies:** 3\ **Last updated:** [February 13, 2019, 10:22pm UTC](https://discuss.elastic.co/t/winlogbeat-wont-start-as-a-service/168265 "2019-02-13T22:22:54Z")
Hi, I am after install Elastic search and Kibana for the main task of holding WEF logs from our Servers: while trying to start winlog "service-start winlogbeat" I am getting the following Error: However I am able to… --- ## [Case insensitive sorting problem](https://discuss.elastic.co/t/case-insensitive-sorting-problem/96792)
**Author:** [@djmcgreal](https://discuss.elastic.co/u/djmcgreal)\ **Replies:** 3\ **Last updated:** [August 18, 2017, 10:27pm UTC](https://discuss.elastic.co/t/case-insensitive-sorting-problem/96792 "2017-08-18T22:27:11Z")
Hi, I’d like to use the ducet sorting available from the icu plugin but am finding it difficult. Is there a definitive example somewhere? There’s problematic differences between the examples in the definitive guide (2.x… --- ## [Getting process cluster event timeout exceptions while bulk indexing with error message failure to put mappings on indices](https://discuss.elastic.co/t/getting-process-cluster-event-timeout-exceptions-while-bulk-indexing-with-error-message-failure-to-put-mappings-on-indices/1292)
**Author:** [@am87](https://discuss.elastic.co/u/am87)\ **Replies:** 3\ **Last updated:** [June 20, 2017, 7:34am UTC](https://discuss.elastic.co/t/getting-process-cluster-event-timeout-exceptions-while-bulk-indexing-with-error-message-failure-to-put-mappings-on-indices/1292 "2017-06-20T07:34:16Z")
Hey everyone, I'm indexing about 8 million documents using a bulk processor which has concurrent requests set to 2 and max size set to 5 mb. The cluster has 2 nodes with 2 gig memory each. I'm getting the following e… --- ## [Getting error while enabling SSL in Kibana](https://discuss.elastic.co/t/getting-error-while-enabling-ssl-in-kibana/39768)
**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\ **Replies:** 3\ **Last updated:** [February 10, 2016, 5:57pm UTC](https://discuss.elastic.co/t/getting-error-while-enabling-ssl-in-kibana/39768 "2016-02-10T17:57:25Z")
Hi Team, I am getting error while configuring SSL in kibana. Steps that i have tried. 1. we are using Keytool to generate .key and .crt and public key we are getting from MS PKI. 2. after including .key and .cert int… --- ## [Filebeat system module auth log timezone conversion problem](https://discuss.elastic.co/t/filebeat-system-module-auth-log-timezone-conversion-problem/140192)
**Author:** [@Ray\_Frush](https://discuss.elastic.co/u/Ray_Frush)\ **Replies:** 6\ **Last updated:** [July 19, 2018, 3:01pm UTC](https://discuss.elastic.co/t/filebeat-system-module-auth-log-timezone-conversion-problem/140192 "2018-07-19T15:01:05Z")
Greetings, we're VERY new to the Elastic stack. What we've got working so far running on Oracle Linux 7 (RHEL7 clone) using the 6.3 (latest) versions installed via YUM. filebeat-6.3.1-1.x86\_64 All our systems are co… --- ## [Elasticsearch won't start after upgrade from 2.4.5 to 5.6](https://discuss.elastic.co/t/elasticsearch-wont-start-after-upgrade-from-2-4-5-to-5-6/113507)
**Author:** [@OlympiaLady](https://discuss.elastic.co/u/OlympiaLady)\ **Replies:** 6\ **Last updated:** [January 8, 2018, 4:23pm UTC](https://discuss.elastic.co/t/elasticsearch-wont-start-after-upgrade-from-2-4-5-to-5-6/113507 "2018-01-08T16:23:25Z")
I am trying to upgrade Elasticsearch from 2.4.5 to 5.6 on the latest Debian. I did the upgrade, and after the upgrade, Elasticsearch would not start. I have no plugins installed, so that is not an issue. I kept my ela… --- ## [Question regarding rollover indices aliasing](https://discuss.elastic.co/t/question-regarding-rollover-indices-aliasing/81543)
**Author:** [@ESCoder](https://discuss.elastic.co/u/ESCoder)\ **Replies:** 6\ **Last updated:** [April 13, 2017, 2:33pm UTC](https://discuss.elastic.co/t/question-regarding-rollover-indices-aliasing/81543 "2017-04-13T14:33:51Z")
Hi, I went through the following blog post and used the same calls to create indices, add data and rollover indices after executing rollover indices it created another new index as max\_docs condition was hit. A… --- ## [6.0.0-rc1: json.overwrite\_keys not working with @timestamp](https://discuss.elastic.co/t/6-0-0-rc1-json-overwrite-keys-not-working-with-timestamp/105189)
**Author:** [@friesoft](https://discuss.elastic.co/u/friesoft)\ **Replies:** 7\ **Last updated:** [October 25, 2017, 8:01pm UTC](https://discuss.elastic.co/t/6-0-0-rc1-json-overwrite-keys-not-working-with-timestamp/105189 "2017-10-25T20:01:00Z")
Hi, we are trying to forward all json messages in a log file to logstash using Filebeat, but the timestamps are already off on the Filebeat side. With 5.0.1 it is working, with 6.0.0-rc1 we get duplicate @timestamp fiel… --- ## [504 Gateway Time-out](https://discuss.elastic.co/t/504-gateway-time-out/10446)
**Author:** [@Curt\_Hu](https://discuss.elastic.co/u/Curt_Hu)\ **Replies:** 1\ **Last updated:** [January 22, 2013, 1:46pm UTC](https://discuss.elastic.co/t/504-gateway-time-out/10446 "2013-01-22T13:46:04Z")
I've run a query with terms facets. The main query will return only 13 hits: but I've added a terms facets. "facets" : { "allterms" : { "terms" : { "field" : "strItemK… --- ## [Best approach to visualize nested objects in Kibana](https://discuss.elastic.co/t/best-approach-to-visualize-nested-objects-in-kibana/131977)
**Author:** [@topel](https://discuss.elastic.co/u/topel)\ **Replies:** 2\ **Last updated:** [May 16, 2018, 7:13am UTC](https://discuss.elastic.co/t/best-approach-to-visualize-nested-objects-in-kibana/131977 "2018-05-16T07:13:10Z")
I know, because I searched for it here on discuss, that using nested data/objects in Kibana seems to be a recurring topic but unfortunately I still have not found the answer I was looking for. I am querying a Jenkins-AP… --- ## [FileAlreadyExistsException .es\_temp\_file](https://discuss.elastic.co/t/filealreadyexistsexception-es-temp-file/104719)
**Author:** [@vsevolodk](https://discuss.elastic.co/u/vsevolodk)\ **Replies:** 2\ **Last updated:** [October 21, 2017, 5:27pm UTC](https://discuss.elastic.co/t/filealreadyexistsexception-es-temp-file/104719 "2017-10-21T17:27:39Z")
Hi. I have elasticsearch 5.1.2 and I faced with Caused by: java.nio.file.FileAlreadyExistsException: /usr/share/elasticsearch/data/nodes/0/indices/K1KZ1kgpRTCczI5rm03Q1g/1/.es\_temp\_file at sun.nio.fs.UnixException.tran… --- ## [Search for word without spaces if query contains spaces](https://discuss.elastic.co/t/search-for-word-without-spaces-if-query-contains-spaces/45342)
**Author:** [@Lukas\_Zaiser](https://discuss.elastic.co/u/Lukas_Zaiser)\ **Replies:** 2\ **Last updated:** [April 2, 2017, 7:19pm UTC](https://discuss.elastic.co/t/search-for-word-without-spaces-if-query-contains-spaces/45342 "2017-04-02T19:19:34Z")
Hello maybe someone can help me, I'm using Multimatch Query with Fuzzy search to build a search and it's working pretty good. My query: {"from":0,"size":30,"query": {"bool":{"should":\[ {"multi\_match":{ "query":"Far… --- ## [Filtering visualization field](https://discuss.elastic.co/t/filtering-visualization-field/61175)
**Author:** [@tiberiu88](https://discuss.elastic.co/u/tiberiu88)\ **Replies:** 2\ **Last updated:** [September 22, 2016, 8:38pm UTC](https://discuss.elastic.co/t/filtering-visualization-field/61175 "2016-09-22T20:38:43Z")
Hello, I am quite new to Kibana, hoping someone can help me get past an issue I'm having. I have memory profiling from multiple VMs getting put into elasticsearch using a custom beat. When in the Discover, I see all … --- ## [Filebeat not reading log files](https://discuss.elastic.co/t/filebeat-not-reading-log-files/225284)
**Author:** [@Mastana\_Guru](https://discuss.elastic.co/u/Mastana_Guru)\ **Replies:** 3\ **Last updated:** [March 27, 2020, 2:58pm UTC](https://discuss.elastic.co/t/filebeat-not-reading-log-files/225284 "2020-03-27T14:58:14Z")
Hi, Filebeat is not processing any files from the input folders Setup : Filebeat -\> Logstash -\> Elasticsearch -\> Kibana (All are version 7.6.1) Filebeat docker running on mac, only one instance running. ELK running … --- ## [Filebeat not able to establish connection with my elk host machine](https://discuss.elastic.co/t/filebeat-not-able-to-establish-connection-with-my-elk-host-machine/39956)
**Author:** [@Akash\_Katakam](https://discuss.elastic.co/u/Akash_Katakam)\ **Replies:** 6\ **Last updated:** [January 23, 2016, 8:58pm UTC](https://discuss.elastic.co/t/filebeat-not-able-to-establish-connection-with-my-elk-host-machine/39956 "2016-01-23T20:58:25Z")
I installed filebeat on my dev server and wanted to fetch log files from there to another machine but when i try to run logstash.bat -f config.json on my elk machine it shows error in my console ←\[31mAttempted to send a… --- ## [Get top 1 row of each group](https://discuss.elastic.co/t/get-top-1-row-of-each-group/19936)
**Author:** [@Tugberk\_Ugurlu](https://discuss.elastic.co/u/Tugberk_Ugurlu)\ **Replies:** 2\ **Last updated:** [September 24, 2014, 4:58pm UTC](https://discuss.elastic.co/t/get-top-1-row-of-each-group/19936 "2014-09-24T16:58:01Z")
In my sport index, I have the following documents indexed as football\_team type: https://gist.github.com/tugberkugurlu/4fd750a5ada3ee5de17a#file-index-js Here, each football team has a name and some strength valu… --- ## [Issue when indexing to elasticsearch from apache nutch](https://discuss.elastic.co/t/issue-when-indexing-to-elasticsearch-from-apache-nutch/56961)
**Author:** [@Sachin\_Shaju](https://discuss.elastic.co/u/Sachin_Shaju)\ **Replies:** 5\ **Last updated:** [September 28, 2016, 4:16am UTC](https://discuss.elastic.co/t/issue-when-indexing-to-elasticsearch-from-apache-nutch/56961 "2016-09-28T04:16:13Z")
I was trying to index from apache nutch to single node ES cluster and got this error. org.elasticsearch.transport.RemoteTransportException: Failed to deserialize exception response from stream Caused by: org.elasticsea… --- ## [Configuring Kibana - Existing Elasticsearch Remote Server](https://discuss.elastic.co/t/configuring-kibana-existing-elasticsearch-remote-server/257778)
**Author:** [@Sampson\_Light](https://discuss.elastic.co/u/Sampson_Light)\ **Replies:** 7\ **Last updated:** [December 10, 2020, 4:23am UTC](https://discuss.elastic.co/t/configuring-kibana-existing-elasticsearch-remote-server/257778 "2020-12-10T04:23:58Z")
Hi All, So in my company, we always used elasticsearch head plugin, connecting to an existing elasticsearch server to do our operations. Recently, we are explroing the usage of Kibana and I am trying to configure Kiban… [Previous page](https://discuss.elastic.co/top.md?page=591&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=593&per_page=50&period=all)