# Top

**URL:** https://discuss.elastic.co/top.md?page=593&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 594

---

## [Instrumentation for ConnectionPool](https://discuss.elastic.co/t/instrumentation-for-connectionpool/239942)

<div class="topic-metadata">

**Author:** [@CoderLan](https://discuss.elastic.co/u/CoderLan)\
**Replies:** 7\
**Last updated:** [July 8, 2020, 4:03pm UTC](https://discuss.elastic.co/t/instrumentation-for-connectionpool/239942 "2020-07-08T16:03:46Z")

</div>

Connection Pool , including JDBC and redis, i think it's necessary to record that how long it takes to get a connection from connection pool. What's more, metrics about connection pool, for example active connection num,…

---

## [How to calculate time difference between two events in postprocessing?](https://discuss.elastic.co/t/how-to-calculate-time-difference-between-two-events-in-postprocessing/152023)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 1\
**Last updated:** [October 11, 2018, 10:44am UTC](https://discuss.elastic.co/t/how-to-calculate-time-difference-between-two-events-in-postprocessing/152023 "2018-10-11T10:44:13Z")

</div>

Hi there, I have logs which contain a log line for starting and finishing a process. it looks like this: . I need the time difference between the "tux state retrieved" and "tux state retrieved". Since the data is alre…

---

## [Elasticsearch cosine similarity query question](https://discuss.elastic.co/t/elasticsearch-cosine-similarity-query-question/322729)

<div class="topic-metadata">

**Author:** [@ward](https://discuss.elastic.co/u/ward)\
**Replies:** 3\
**Last updated:** [January 9, 2023, 1:22pm UTC](https://discuss.elastic.co/t/elasticsearch-cosine-similarity-query-question/322729 "2023-01-09T13:22:23Z")

</div>

Hi there, I'm currently working on a face recognition project using Elasticsearch. I can't seem to get a working query for matching two datasets with each other. My most recent attempt is shown below the mapping. I was h…

---

## [ERROR: Failed to determine the health of the cluster. Unexpected http status \[403\]](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-unexpected-http-status-403/299836)

<div class="topic-metadata">

**Author:** [@ArunKumarC](https://discuss.elastic.co/u/ArunKumarC)\
**Replies:** 3\
**Last updated:** [March 17, 2022, 5:14am UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-unexpected-http-status-403/299836 "2022-03-17T05:14:10Z")

</div>

ERROR: Failed to determine the health of the cluster. Unexpected http status \[403\] not able to get the enrollment token getting above error. please help me on this issue

---

## [How to constrain Filebeat to only ship logs if they contain a specific field?](https://discuss.elastic.co/t/how-to-constrain-filebeat-to-only-ship-logs-if-they-contain-a-specific-field/174883)

<div class="topic-metadata">

**Author:** [@zimmertr](https://discuss.elastic.co/u/zimmertr)\
**Replies:** 3\
**Last updated:** [April 2, 2019, 11:41pm UTC](https://discuss.elastic.co/t/how-to-constrain-filebeat-to-only-ship-logs-if-they-contain-a-specific-field/174883 "2019-04-02T23:41:37Z")

</div>

I’m trying to collect logs from Kubernetes nodes using Filebeat and ONLY ship them to ELK IF the logs originate from a specific Kubernetes Namespace. So far I’ve discovered that you can define Processors which I think a…

---

## [Duplicate ID](https://discuss.elastic.co/t/duplicate-id/143502)

<div class="topic-metadata">

**Author:** [@Sulaiman](https://discuss.elastic.co/u/Sulaiman)\
**Replies:** 3\
**Last updated:** [August 8, 2018, 6:08pm UTC](https://discuss.elastic.co/t/duplicate-id/143502 "2018-08-08T18:08:00Z")

</div>

How to delete / avoid duplicate ID's cause I have few similar logs which are comming from wazuh, so I would like to remove duplicate ids .

---

## [Visualizing the count of words in each document(pdf, word) in kibana](https://discuss.elastic.co/t/visualizing-the-count-of-words-in-each-document-pdf-word-in-kibana/116523)

<div class="topic-metadata">

**Author:** [@manasguduri](https://discuss.elastic.co/u/manasguduri)\
**Replies:** 3\
**Last updated:** [January 30, 2018, 4:23pm UTC](https://discuss.elastic.co/t/visualizing-the-count-of-words-in-each-document-pdf-word-in-kibana/116523 "2018-01-30T16:23:56Z")

</div>

Hello All, I have to visualize the count of each word in a document and a count of word appearance in each document individually ! Is that possible in kibana ? Please, respond fast, I have been strucked for days in he…

---

## [Changing label on x-axis](https://discuss.elastic.co/t/changing-label-on-x-axis/88505)

<div class="topic-metadata">

**Author:** [@Varun\_Patel](https://discuss.elastic.co/u/Varun_Patel)\
**Replies:** 3\
**Last updated:** [June 7, 2017, 9:42am UTC](https://discuss.elastic.co/t/changing-label-on-x-axis/88505 "2017-06-07T09:42:57Z")

</div>

I am using bar chart to generate data. Using Date-Histogram and splitting it monthly. Here x-axis shows starting date of the month, but i want to have month name (viz Jan, Feb etc). So is it included in latest releas…

---

## [Mmap setting gives " java.io.IOException: Map failed" exception in elastic search logs](https://discuss.elastic.co/t/mmap-setting-gives-java-io-ioexception-map-failed-exception-in-elastic-search-logs/14297)

<div class="topic-metadata">

**Author:** [@hrishikesh\_prabhune](https://discuss.elastic.co/u/hrishikesh_prabhune)\
**Replies:** 3\
**Last updated:** [November 14, 2013, 9:06am UTC](https://discuss.elastic.co/t/mmap-setting-gives-java-io-ioexception-map-failed-exception-in-elastic-search-logs/14297 "2013-11-14T09:06:06Z")

</div>

I have two elastic search nodes set up with 30gb of heap size each on a large box having 128gb of RAM and 3.1Tb of store size. Apart from all the standard configuration settings in elastic search.yml file I added an …

---

## [LS\_HEAP\_SIZE broken with logstash 5.0.0?](https://discuss.elastic.co/t/ls-heap-size-broken-with-logstash-5-0-0/65980)

<div class="topic-metadata">

**Author:** [@cg-max](https://discuss.elastic.co/u/cg-max)\
**Replies:** 4\
**Last updated:** [November 15, 2016, 1:33pm UTC](https://discuss.elastic.co/t/ls-heap-size-broken-with-logstash-5-0-0/65980 "2016-11-15T13:33:20Z")

</div>

Hi, With logstash 5.0.0 on centos 7.2 using the elastic rpm, our logstash runs like this: usr/bin/java -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -…

---

## [Trying to replace 'host' field (created by tcp input) with a hash](https://discuss.elastic.co/t/trying-to-replace-host-field-created-by-tcp-input-with-a-hash/160026)

<div class="topic-metadata">

**Author:** [@nick-george](https://discuss.elastic.co/u/nick-george)\
**Replies:** 0\
**Last updated:** [December 9, 2018, 5:43am UTC](https://discuss.elastic.co/t/trying-to-replace-host-field-created-by-tcp-input-with-a-hash/160026 "2018-12-09T05:43:33Z")

</div>

Hi, Logstash version: 6.2.4 (RPM) What I'm trying to do is remove the "host" field which is created by the "tcp" input plugin. The reason I'm doing this is to use it to contain the host hash as specified in the ECS (ht…

---

## [\[ANNOUNCEMENT\] Httpbeat 1.1.0 released](https://discuss.elastic.co/t/announcement-httpbeat-1-1-0-released/46582)

<div class="topic-metadata">

**Author:** [@christiangalsterer](https://discuss.elastic.co/u/christiangalsterer)\
**Replies:** 0\
**Last updated:** [April 6, 2016, 6:13pm UTC](https://discuss.elastic.co/t/announcement-httpbeat-1-1-0-released/46582 "2016-04-06T18:13:11Z")

</div>

I'm happy to announce the availability of Httpbeat 1.1.0. Httpbeat is a Beat which polls HTTP endpoints in a regular interval and sends the HTTP request and response as an event to a configured shipper, e.g. Elasticsea…

---

## [Display labels such as count in the bar chart](https://discuss.elastic.co/t/display-labels-such-as-count-in-the-bar-chart/236108)

<div class="topic-metadata">

**Author:** [@Sridhar\_Srinivasan](https://discuss.elastic.co/u/Sridhar_Srinivasan)\
**Replies:** 2\
**Last updated:** [June 8, 2020, 2:33pm UTC](https://discuss.elastic.co/t/display-labels-such-as-count-in-the-bar-chart/236108 "2020-06-08T14:33:27Z")

</div>

Hi, Based on the picture attached, I'm trying a couple of options to display the numbers on top of each bar. Is it possible to archive this with kibana? Regards, Sridhar

---

## [Can't parse event as syslog rfc3164](https://discuss.elastic.co/t/cant-parse-event-as-syslog-rfc3164/212182)

<div class="topic-metadata">

**Author:** [@vipin.suthar](https://discuss.elastic.co/u/vipin.suthar)\
**Replies:** 1\
**Last updated:** [January 3, 2020, 11:11am UTC](https://discuss.elastic.co/t/cant-parse-event-as-syslog-rfc3164/212182 "2020-01-03T11:11:06Z")

</div>

Hello, We are facing a known issue with syslog input of filebeat, And running our Elasticsearch cluster on CentOS Linux release 7.7.1908 (Core) VM environment. We are working with Cisco ASA and FTD firewall logs, But o…

---

## [Keyに角括弧( ‘\[’ )が使用されているJSONデータを取り込みたい](https://discuss.elastic.co/t/key-json/255149)

<div class="topic-metadata">

**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\
**Replies:** 3\
**Last updated:** [November 30, 2020, 6:11am UTC](https://discuss.elastic.co/t/key-json/255149 "2020-11-30T06:11:34Z")

</div>

お世話になります。 初歩的な質問ですみません。 keyに角括弧( ‘\[’ )が使用されているJSONデータをlogstashを使ってESに取り込みたいのですが、エスケープなどをしてもlogstashでJSONパースエラーとなり取り込みすることができません。 s3inputプラグインを使用しており、codecにjsonを指定しております。 このデータを取り込みできるようにするにはどうしたらよいのでしょうか。 取り込んだJSONデ…

---

## [Filbeat on Kubernetes/Autodiscover stops sending logs](https://discuss.elastic.co/t/filbeat-on-kubernetes-autodiscover-stops-sending-logs/157571)

<div class="topic-metadata">

**Author:** [@fbcbarbosa](https://discuss.elastic.co/u/fbcbarbosa)\
**Replies:** 3\
**Last updated:** [November 21, 2018, 2:24pm UTC](https://discuss.elastic.co/t/filbeat-on-kubernetes-autodiscover-stops-sending-logs/157571 "2018-11-21T14:24:22Z")

</div>

Hi everyone, So we're having this problem for over a week now. We're running Filebeat on a Kubernetes cluster with Istio (not sure if relevant). The cluster has about ~50 nodes and ~700 pods. Everything worked fine for…

---

## [High CPU Usage on Data Node](https://discuss.elastic.co/t/high-cpu-usage-on-data-node/57879)

<div class="topic-metadata">

**Author:** [@astro](https://discuss.elastic.co/u/astro)\
**Replies:** 3\
**Last updated:** [August 12, 2016, 9:32pm UTC](https://discuss.elastic.co/t/high-cpu-usage-on-data-node/57879 "2016-08-12T21:32:13Z")

</div>

Hi team , I have a linux server on which I am running elasticsearch datanode , Config of server is 48G of RAM , 1 TB HDD , 8 Core . I am constantly having load of around 5-10 10:45:27 up 51 days, 17:54, 1 u…

---

## [Updating default ttl value in elasticsearch?](https://discuss.elastic.co/t/updating-default-ttl-value-in-elasticsearch/55971)

<div class="topic-metadata">

**Author:** [@Rajind\_Ruparathna](https://discuss.elastic.co/u/Rajind_Ruparathna)\
**Replies:** 8\
**Last updated:** [July 21, 2016, 5:28am UTC](https://discuss.elastic.co/t/updating-default-ttl-value-in-elasticsearch/55971 "2016-07-21T05:28:18Z")

</div>

I know that when creating the mapping we can give something like, "\_ttl" : { "enabled" : true, "default" : 900000 } to enable \_ttl with a default value. I would like to know whether…

---

## [Display Time Range in Vega Text](https://discuss.elastic.co/t/display-time-range-in-vega-text/217689)

<div class="topic-metadata">

**Author:** [@butchkelley](https://discuss.elastic.co/u/butchkelley)\
**Replies:** 6\
**Last updated:** [February 4, 2020, 7:36pm UTC](https://discuss.elastic.co/t/display-time-range-in-vega-text/217689 "2020-02-04T19:36:19Z")

</div>

Hello, I’m trying to add text to my vega visualization that displays the selected Time Range. I started with what’s shown below, which gives the current time but I quickly reached a dead-end. Is there a built in signa…

---

## [Parse json from inside message](https://discuss.elastic.co/t/parse-json-from-inside-message/267269)

<div class="topic-metadata">

**Author:** [@Alex\_Gilko](https://discuss.elastic.co/u/Alex_Gilko)\
**Replies:** 5\
**Last updated:** [March 24, 2021, 2:16pm UTC](https://discuss.elastic.co/t/parse-json-from-inside-message/267269 "2021-03-24T14:16:17Z")

</div>

i trying to parse json from inside message . filebeat.autodiscover: providers: - type: docker hints.enabled: true used this in file beat used labels in docker-compose labels: co.elastic.logs/json.keys\_u…

---

## [Relaert is not working in frequency rule type](https://discuss.elastic.co/t/relaert-is-not-working-in-frequency-rule-type/161202)

<div class="topic-metadata">

**Author:** [@sudhakar\_katakara](https://discuss.elastic.co/u/sudhakar_katakara)\
**Replies:** 5\
**Last updated:** [December 18, 2018, 6:25pm UTC](https://discuss.elastic.co/t/relaert-is-not-working-in-frequency-rule-type/161202 "2018-12-18T18:25:52Z")

</div>

I am using below parameters in frequency rule type but realert is not working on specified time duration. I have mentioned relaert with hours : 1 and queary\_key : "Hostname" ie since realert is 1 hour I assume it should …

---

## [Several config files for beats in logstash](https://discuss.elastic.co/t/several-config-files-for-beats-in-logstash/47749)

<div class="topic-metadata">

**Author:** [@Adir](https://discuss.elastic.co/u/Adir)\
**Replies:** 4\
**Last updated:** [April 19, 2016, 1:13pm UTC](https://discuss.elastic.co/t/several-config-files-for-beats-in-logstash/47749 "2016-04-19T13:13:03Z")

</div>

Hi, We just started to work with logstash recently and i have a few questions about beats config files. We currently have 2 configuration files on our logstash - one for filebeat and another one for winlogbeat . Each c…

---

## [Issue with Watcher](https://discuss.elastic.co/t/issue-with-watcher/1122)

<div class="topic-metadata">

**Author:** [@chandana\_Reddy](https://discuss.elastic.co/u/chandana_Reddy)\
**Replies:** 7\
**Last updated:** [September 28, 2015, 6:21am UTC](https://discuss.elastic.co/t/issue-with-watcher/1122 "2015-09-28T06:21:06Z")

</div>

Hello Team, i have followed the startup guide to install watcher plugin using the following command. bin/plugin -i elasticsearch/watcher/ (used the beta key as given in mail) Plugin got installed successfully,but a…

---

## [Logstash Grok Pattern for Timestamp with Timezone](https://discuss.elastic.co/t/logstash-grok-pattern-for-timestamp-with-timezone/266268)

<div class="topic-metadata">

**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\
**Replies:** 3\
**Last updated:** [March 8, 2021, 4:59pm UTC](https://discuss.elastic.co/t/logstash-grok-pattern-for-timestamp-with-timezone/266268 "2021-03-08T16:59:35Z")

</div>

Hi, I am trying to match following logs for icinga2 using grok filter: \[2021-03-04 17:03:27 +0100\] warning/GraphiteWriter: Ignoring invalid perfdata for checkable 'host!service' and command 'by\_ssh' with value: /foo/ba…

---

## [Cannot connect to the Elasticsearch cluster](https://discuss.elastic.co/t/cannot-connect-to-the-elasticsearch-cluster/185470)

<div class="topic-metadata">

**Author:** [@honzo](https://discuss.elastic.co/u/honzo)\
**Replies:** 2\
**Last updated:** [June 12, 2019, 7:40pm UTC](https://discuss.elastic.co/t/cannot-connect-to-the-elasticsearch-cluster/185470 "2019-06-12T19:40:19Z")

</div>

Our production Kibana cluster v6.5.4 at https://cloud.elastic.co is down this morning :cry: Error on the front page is: Cannot connect to the Elasticsearch cluster See the Kibana logs for details and try reloading the…

---

## [Is it possible to automate the creation of dashboard in Kibana](https://discuss.elastic.co/t/is-it-possible-to-automate-the-creation-of-dashboard-in-kibana/188620)

<div class="topic-metadata">

**Author:** [@bpallagani](https://discuss.elastic.co/u/bpallagani)\
**Replies:** 5\
**Last updated:** [July 3, 2019, 8:37am UTC](https://discuss.elastic.co/t/is-it-possible-to-automate-the-creation-of-dashboard-in-kibana/188620 "2019-07-03T08:37:26Z")

</div>

Hi, I want to know if it is possible to automate the creation of dashboard in Kibana. Say for example, I have created one dashboard for one set of log files parsed by logstash. And all these will have only one testcase…

---

## [Can create enrollment-token but no verification code verification code not found](https://discuss.elastic.co/t/can-create-enrollment-token-but-no-verification-code-verification-code-not-found/342952)

<div class="topic-metadata">

**Author:** [@uli67](https://discuss.elastic.co/u/uli67)\
**Replies:** 4\
**Last updated:** [September 18, 2023, 4:23pm UTC](https://discuss.elastic.co/t/can-create-enrollment-token-but-no-verification-code-verification-code-not-found/342952 "2023-09-18T16:23:25Z")

</div>

Hi guys, I am running easticsearch 8.9 as docker container and installed Kibana via dnf package manager. I am able to generate the enrollment code but not the verification code. verification code not found. my elasti…

---

## [Adding fields containg a log-level?](https://discuss.elastic.co/t/adding-fields-containg-a-log-level/57840)

<div class="topic-metadata">

**Author:** [@budm](https://discuss.elastic.co/u/budm)\
**Replies:** 6\
**Last updated:** [August 12, 2016, 8:42am UTC](https://discuss.elastic.co/t/adding-fields-containg-a-log-level/57840 "2016-08-12T08:42:03Z")

</div>

In our project we use logback with the following log-back pattern: \<pattern\>%date{ISO8601} \[%thread\] %-5level %logger{25} - %message%n\</pattern\> I.e. all log messages have a format like this: 2013-03-10 10:14:16,458 \[d…

---

## [Region Map - Vector map dropdown list empty - Version 5.5.2](https://discuss.elastic.co/t/region-map-vector-map-dropdown-list-empty-version-5-5-2/97806)

<div class="topic-metadata">

**Author:** [@Mierenneuker](https://discuss.elastic.co/u/Mierenneuker)\
**Replies:** 8\
**Last updated:** [September 18, 2017, 7:32pm UTC](https://discuss.elastic.co/t/region-map-vector-map-dropdown-list-empty-version-5-5-2/97806 "2017-09-18T19:32:54Z")

</div>

I am trying to create a Region Map to visualise ISO 3166 2 character country codes. When i look in the ‘options’ tab the Vector Map dropdown list is empty. If I run the visualisation it appears to treat the data as US …

---

## [Unknow Plugin Error When Install Plugin](https://discuss.elastic.co/t/unknow-plugin-error-when-install-plugin/225359)

<div class="topic-metadata">

**Author:** [@111306](https://discuss.elastic.co/u/111306)\
**Replies:** 1\
**Last updated:** [March 27, 2020, 8:51am UTC](https://discuss.elastic.co/t/unknow-plugin-error-when-install-plugin/225359 "2020-03-27T08:51:16Z")

</div>

Elasticsearch version ( bin/elasticsearch --version ):7.6.1 Plugins installed : none JVM version ( java -version ):1.8.0\_242 OS version ( uname -a if on a Unix-like system): Debian 9 I tried installing ik using e…

---

## [IllegalArgumentException\[no account found for name: \[null\]\]](https://discuss.elastic.co/t/illegalargumentexception-no-account-found-for-name-null/98659)

<div class="topic-metadata">

**Author:** [@gautamv](https://discuss.elastic.co/u/gautamv)\
**Replies:** 7\
**Last updated:** [August 31, 2017, 6:25am UTC](https://discuss.elastic.co/t/illegalargumentexception-no-account-found-for-name-null/98659 "2017-08-31T06:25:11Z")

</div>

Hi, I configured watcher to get alerts for a particular error message. Here is my watcher code: { "trigger": { "schedule": { "interval": "1m" } }, "input": { "search": { "request": { …

---

## [getting org.elasticsearch.action.ActionRequestValidationException?](https://discuss.elastic.co/t/getting-org-elasticsearch-action-actionrequestvalidationexception/6018)

<div class="topic-metadata">

**Author:** [@Sam\_4](https://discuss.elastic.co/u/Sam_4)\
**Replies:** 1\
**Last updated:** [November 30, 2011, 6:19am UTC](https://discuss.elastic.co/t/getting-org-elasticsearch-action-actionrequestvalidationexception/6018 "2011-11-30T06:19:48Z")

</div>

---

## [Cisco ASA Logging to Elastic Stack](https://discuss.elastic.co/t/cisco-asa-logging-to-elastic-stack/226386)

<div class="topic-metadata">

**Author:** [@msalax](https://discuss.elastic.co/u/msalax)\
**Replies:** 3\
**Last updated:** [April 3, 2020, 7:43pm UTC](https://discuss.elastic.co/t/cisco-asa-logging-to-elastic-stack/226386 "2020-04-03T19:43:56Z")

</div>

Hi All, I'm new to elastic stack and have built x2 dedicated logstash servers and a cluster of 3 elasticsearch servers and kibana install on all of them. I'm not sure if that last part is correct but any advise would be…

---

## [Set up watcher for alerting high CPU usage by some process](https://discuss.elastic.co/t/set-up-watcher-for-alerting-high-cpu-usage-by-some-process/139353)

<div class="topic-metadata">

**Author:** [@Oleksandr\_Novozhylov](https://discuss.elastic.co/u/Oleksandr_Novozhylov)\
**Replies:** 3\
**Last updated:** [July 17, 2018, 7:05am UTC](https://discuss.elastic.co/t/set-up-watcher-for-alerting-high-cpu-usage-by-some-process/139353 "2018-07-17T07:05:26Z")

</div>

Hello! I'm trying to create a Watcher Alert that will be triggered when some process on a node uses over 0.95% of CPU for the last one hour. Here is an example of my config: { "trigger": { "schedule": { "i…

---

## [Client ip address](https://discuss.elastic.co/t/client-ip-address/71431)

<div class="topic-metadata">

**Author:** [@mhalatuituia](https://discuss.elastic.co/u/mhalatuituia)\
**Replies:** 3\
**Last updated:** [January 16, 2017, 5:22pm UTC](https://discuss.elastic.co/t/client-ip-address/71431 "2017-01-16T17:22:22Z")

</div>

Hi I saw log coming from my dns and it include client ip address requesting domain names. I want to add that client to my list of field where i can seach for what domain it request etc etc ... how can i add that client i…

---

## [Use SSL with logstash syslog input plugin](https://discuss.elastic.co/t/use-ssl-with-logstash-syslog-input-plugin/227831)

<div class="topic-metadata">

**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\
**Replies:** 2\
**Last updated:** [April 14, 2020, 5:05pm UTC](https://discuss.elastic.co/t/use-ssl-with-logstash-syslog-input-plugin/227831 "2020-04-14T17:05:46Z")

</div>

Hi, I have an installation of ELK 7.6, and i have several devices that send information to logstash via syslog. I want to secure the communication, but in the logstash syslog input plugin i dont see any parameter for ss…

---

## [\[FS-Repository\] Path is not accessible on master node](https://discuss.elastic.co/t/fs-repository-path-is-not-accessible-on-master-node/278219)

<div class="topic-metadata">

**Author:** [@Jonatha](https://discuss.elastic.co/u/Jonatha)\
**Replies:** 1\
**Last updated:** [July 9, 2021, 1:16am UTC](https://discuss.elastic.co/t/fs-repository-path-is-not-accessible-on-master-node/278219 "2021-07-09T01:16:26Z")

</div>

I tried to config a repository to save snapshot, but show this error: PUT \_snapshot/bkp-test { "type": "fs", "settings": { "location": "/media/test" } } { "error" : { "root\_cause" : \[ { "type" : "…

---

## [Partial update vs re-index](https://discuss.elastic.co/t/partial-update-vs-re-index/217854)

<div class="topic-metadata">

**Author:** [@kent120103](https://discuss.elastic.co/u/kent120103)\
**Replies:** 1\
**Last updated:** [February 5, 2020, 9:54am UTC](https://discuss.elastic.co/t/partial-update-vs-re-index/217854 "2020-02-05T09:54:56Z")

</div>

Hi, Elastic team. My index contains 5 - 10 millions documents. Every document has the same structure. Each document contains 10 fields, such as first\_name, last\_name, nick\_name, weight, height, preferred\_language, prefe…

---

## [Is Elasticsearch 7.4.0 vulnerable to Log4j?](https://discuss.elastic.co/t/is-elasticsearch-7-4-0-vulnerable-to-log4j/292263)

<div class="topic-metadata">

**Author:** [@Ranith\_D](https://discuss.elastic.co/u/Ranith_D)\
**Replies:** 1\
**Last updated:** [December 17, 2021, 8:20am UTC](https://discuss.elastic.co/t/is-elasticsearch-7-4-0-vulnerable-to-log4j/292263 "2021-12-17T08:20:23Z")

</div>

Im using Elasticsearch 7.4.0 and want to know if its vulnerable for Log4j

---

## [Pid file not found on Ubuntu 16.04](https://discuss.elastic.co/t/pid-file-not-found-on-ubuntu-16-04/64921)

<div class="topic-metadata">

**Author:** [@ElasticMartin](https://discuss.elastic.co/u/ElasticMartin)\
**Replies:** 4\
**Last updated:** [November 4, 2016, 12:03pm UTC](https://discuss.elastic.co/t/pid-file-not-found-on-ubuntu-16-04/64921 "2016-11-04T12:03:27Z")

</div>

Hi, I saw the other topic about the same issue but it's close. I got the same problem on Ubuntu. Same issue occur for Packetbeat and Filebeat. The init script looks ok but I the pid file is not created. The topbeat-…

---

## [Grafana, Elasticsearch, Logstash and graphing SNMP traffic stats](https://discuss.elastic.co/t/grafana-elasticsearch-logstash-and-graphing-snmp-traffic-stats/52140)

<div class="topic-metadata">

**Author:** [@jasonh](https://discuss.elastic.co/u/jasonh)\
**Replies:** 4\
**Last updated:** [June 8, 2016, 1:29am UTC](https://discuss.elastic.co/t/grafana-elasticsearch-logstash-and-graphing-snmp-traffic-stats/52140 "2016-06-08T01:29:04Z")

</div>

Hello all Newbie to this environ I'm trialling an ELK setup for log and performance stats I have Logstash with Collectd - poilling and pulling in stats - that works Then Elastic Search and on top of that Kibana and Graf…

---

## [Snapshot Creation Error](https://discuss.elastic.co/t/snapshot-creation-error/32431)

<div class="topic-metadata">

**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\
**Replies:** 4\
**Last updated:** [October 19, 2015, 12:43pm UTC](https://discuss.elastic.co/t/snapshot-creation-error/32431 "2015-10-19T12:43:06Z")

</div>

Hi, ES\_DEV cluster have setup 2 JVMs on each of the 3 servers. 1 master and 1 data on each. Server 1 will have 3rd JVM will act as a client node. Server 1  master, data & client Server 2  master & data Server 3  mas…

---

## [Kv filter truncating value string at whitespace within quoted string](https://discuss.elastic.co/t/kv-filter-truncating-value-string-at-whitespace-within-quoted-string/28041)

<div class="topic-metadata">

**Author:** [@robynkoz](https://discuss.elastic.co/u/robynkoz)\
**Replies:** 4\
**Last updated:** [August 25, 2015, 8:07pm UTC](https://discuss.elastic.co/t/kv-filter-truncating-value-string-at-whitespace-within-quoted-string/28041 "2015-08-25T20:07:21Z")

</div>

This is a followup to this question: https://discuss.elastic.co/t/kvpairs-where-one-of-the-values-is-a-json-structure/27980 I am using the following filter to interpret my logs: filter { grok { match =\> {"messa…

---

## [Elastic SIEM for MSSP](https://discuss.elastic.co/t/elastic-siem-for-mssp/235866)

<div class="topic-metadata">

**Author:** [@Gilles\_Villeneuve](https://discuss.elastic.co/u/Gilles_Villeneuve)\
**Replies:** 6\
**Last updated:** [June 11, 2020, 1:20am UTC](https://discuss.elastic.co/t/elastic-siem-for-mssp/235866 "2020-06-11T01:20:46Z")

</div>

Hi All, I have been trying to architect how I could use the Elastic SIEM in a MSSP environment where multiple clients would have a collector ( logstash, Filebeat ), and these would forward the logs to my main ELK stack. …

---

## [Simple Address Matching Application](https://discuss.elastic.co/t/simple-address-matching-application/202169)

<div class="topic-metadata">

**Author:** [@han1](https://discuss.elastic.co/u/han1)\
**Replies:** 6\
**Last updated:** [October 4, 2019, 5:35pm UTC](https://discuss.elastic.co/t/simple-address-matching-application/202169 "2019-10-04T17:35:08Z")

</div>

Does anyone know anyone that can help us create an address matching indexing solution i.e. matching partial addresses to full official addresses. We have searched the globe but very few do this in .NET using the NEST A…

---

## [Combine 2 indexes into one](https://discuss.elastic.co/t/combine-2-indexes-into-one/2632)

<div class="topic-metadata">

**Author:** [@nzHillNet](https://discuss.elastic.co/u/nzHillNet)\
**Replies:** 3\
**Last updated:** [June 20, 2015, 9:01pm UTC](https://discuss.elastic.co/t/combine-2-indexes-into-one/2632 "2015-06-20T21:01:24Z")

</div>

Hi, ES newbie here. Running an ELK stack on all current versions. Have also got Graylog2 installed. I asked this on the Graylog list but go no response, but in short during learning the ropes I have ended up with two…

---

## [How to monitor the Oracle Database](https://discuss.elastic.co/t/how-to-monitor-the-oracle-database/81970)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 2\
**Last updated:** [April 12, 2017, 10:00am UTC](https://discuss.elastic.co/t/how-to-monitor-the-oracle-database/81970 "2017-04-12T10:00:14Z")

</div>

Have seen the demo relates to Metricbeat which shows the statitics related to opensource NOSQL database - Cassandra, Mongodb..etc and also MySQL and PostgreSQL. http://demo.elastic.co/beats/app/kibana#/dashboard/Pack…

---

## [Kibana Dashboard ElastiFlow 4.0.1 issue](https://discuss.elastic.co/t/kibana-dashboard-elastiflow-4-0-1-issue/311797)

<div class="topic-metadata">

**Author:** [@boot4root](https://discuss.elastic.co/u/boot4root)\
**Replies:** 7\
**Last updated:** [September 20, 2022, 6:45am UTC](https://discuss.elastic.co/t/kibana-dashboard-elastiflow-4-0-1-issue/311797 "2022-09-20T06:45:56Z")

</div>

Good afternoon, I ran into a problem, for some reason, after using ElastiFlow 4.0.1 on Dash Board for a while, the circles on dashboard began to distort, unfortunately ElastiFlow switched to the commercial version and cl…

---

## [\[6.2.4\] Release notes link](https://discuss.elastic.co/t/6-2-4-release-notes-link/128448)

<div class="topic-metadata">

**Author:** [@loren](https://discuss.elastic.co/u/loren)\
**Replies:** 1\
**Last updated:** [April 18, 2018, 6:34am UTC](https://discuss.elastic.co/t/6-2-4-release-notes-link/128448 "2018-04-18T06:34:44Z")

</div>

Not sure if this is the best place to mention it, but on the download page, the link for the release notes results in a 404. Release notes are there for Kibana 6.2.4, but not for Elasticsearch 6.2.4.

---

## [Trying to remove stopwords from ES-index JAVA API](https://discuss.elastic.co/t/trying-to-remove-stopwords-from-es-index-java-api/26093)

<div class="topic-metadata">

**Author:** [@fluehmann](https://discuss.elastic.co/u/fluehmann)\
**Replies:** 7\
**Last updated:** [July 24, 2015, 10:12am UTC](https://discuss.elastic.co/t/trying-to-remove-stopwords-from-es-index-java-api/26093 "2015-07-24T10:12:21Z")

</div>

Hey guys I'm all new to ES. I'm indexing website content with a crawler into ES. So now I'm trying to apply an analyzer to my index (website content) to remove all stopwords from the website content throught the Java…

[Previous page](https://discuss.elastic.co/top.md?page=592&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=594&per_page=50&period=all)
