# Top **URL:** https://discuss.elastic.co/top.md?page=616&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 617 --- ## [Syslog, SSH Login Attempt and Nginx dashboard for Filebeat](https://discuss.elastic.co/t/syslog-ssh-login-attempt-and-nginx-dashboard-for-filebeat/150652)
**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\ **Replies:** 7\ **Last updated:** [October 3, 2018, 8:01am UTC](https://discuss.elastic.co/t/syslog-ssh-login-attempt-and-nginx-dashboard-for-filebeat/150652 "2018-10-03T08:01:21Z")
Hello Team, I am using Logstash pipeline so i can use dashboards available with Filebeat to visualize data in Kibana. I have followed the below link: https://www.elastic.co/guide/en/logstash/5.6/filebeat-modules.html … --- ## [Markdown in Watcher Slack Action attachements](https://discuss.elastic.co/t/markdown-in-watcher-slack-action-attachements/67353)
**Author:** [@JbRichardet](https://discuss.elastic.co/u/JbRichardet)\ **Replies:** 4\ **Last updated:** [November 28, 2016, 2:01pm UTC](https://discuss.elastic.co/t/markdown-in-watcher-slack-action-attachements/67353 "2016-11-28T14:01:00Z")
Hello, I'm configuring my X-Pack to send me Slack messages when I log an error in ES. The trick is I'd like to have the stacktrace formatted as a code block so I tried this "notify\_slack": { "slack": { … --- ## [Advice on dynamically configuring logstash 6.2 output plugin](https://discuss.elastic.co/t/advice-on-dynamically-configuring-logstash-6-2-output-plugin/119486)
**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Replies:** 8\ **Last updated:** [February 19, 2018, 3:48pm UTC](https://discuss.elastic.co/t/advice-on-dynamically-configuring-logstash-6-2-output-plugin/119486 "2018-02-19T15:48:47Z")
Hi Team, What is the recommended way to dynamically tell logstash to which elasticsearch hosts logstash should connect to? I have several hosts where I run logstash. However for some hosts I need the data to get to clu… --- ## [How to set-up elastic maven reposiroty](https://discuss.elastic.co/t/how-to-set-up-elastic-maven-reposiroty/68986)
**Author:** [@lukasSirhal1](https://discuss.elastic.co/u/lukasSirhal1)\ **Replies:** 4\ **Last updated:** [December 19, 2016, 2:13pm UTC](https://discuss.elastic.co/t/how-to-set-up-elastic-maven-reposiroty/68986 "2016-12-19T14:13:12Z")
Hi, i fallowed this x-pack api-java, but i still this error when run mvn dependency:tree or mvn install... \[ERROR\] Failed to execute goal on project es-service: Could not resolve dependencies for project cz.datalite.es… --- ## [Logstash 2.3.0 and 2.2.3 Released](https://discuss.elastic.co/t/logstash-2-3-0-and-2-2-3-released/45831)
**Author:** [@suyograo](https://discuss.elastic.co/u/suyograo)\ **Replies:** 0\ **Last updated:** [March 30, 2016, 4:39pm UTC](https://discuss.elastic.co/t/logstash-2-3-0-and-2-2-3-released/45831 "2016-03-30T16:39:29Z")
Hello Logstashers! Logstash 2.3.0 has been released today, packed with extremely useful new features, an awesome performance boost and a few bug fixes. You can read the detailed release notes here, or jump directly to … --- ## [Unable to create search index](https://discuss.elastic.co/t/unable-to-create-search-index/115575)
**Author:** [@antboll](https://discuss.elastic.co/u/antboll)\ **Replies:** 3\ **Last updated:** [January 15, 2018, 5:27pm UTC](https://discuss.elastic.co/t/unable-to-create-search-index/115575 "2018-01-15T17:27:56Z")
Hi Guys, we installed elasticsearch on Cent OS in Version 5.6.5 with mapper plugins. After A reboot we had some Troubles to get the Service startet, this is fixed. Unfortunately we can not create a Index. We always g… --- ## [Create a repository failed](https://discuss.elastic.co/t/create-a-repository-failed/86150)
**Author:** [@swu](https://discuss.elastic.co/u/swu)\ **Replies:** 3\ **Last updated:** [May 18, 2017, 4:45pm UTC](https://discuss.elastic.co/t/create-a-repository-failed/86150 "2017-05-18T16:45:25Z")
i am trying to create repository: PUT \_snapshot/backup { "type" : "azure" } but get the following error: { "error": { "root\_cause": \[ { "type": "settings\_exception", "reason": "Failed… --- ## [Ruby filter: Ruby exception occurred:undefined local variable or method \`map'](https://discuss.elastic.co/t/ruby-filter-ruby-exception-occurred-undefined-local-variable-or-method-map/129596)
**Author:** [@vinayakfutak](https://discuss.elastic.co/u/vinayakfutak)\ **Replies:** 4\ **Last updated:** [April 26, 2018, 7:19am UTC](https://discuss.elastic.co/t/ruby-filter-ruby-exception-occurred-undefined-local-variable-or-method-map/129596 "2018-04-26T07:19:34Z")
I wanna run ruby script for calculating the diference between documents.here is my script input { elasticsearch { hosts =\> "http://192.168.55.213:9200" index =\> "test\_index" query =\> '{"sort": \[{"logTimestamp": {"or… --- ## [ElasticSearch configuration for high performance](https://discuss.elastic.co/t/elasticsearch-configuration-for-high-performance/156492)
**Author:** [@HARSHAL\_CHAUDHARI](https://discuss.elastic.co/u/HARSHAL_CHAUDHARI)\ **Replies:** 6\ **Last updated:** [November 14, 2018, 11:36am UTC](https://discuss.elastic.co/t/elasticsearch-configuration-for-high-performance/156492 "2018-11-14T11:36:24Z")
Hi, We have developed .NetCore WebApi Application using NEST library for performing CRUD (Create, read, update, delete) Operation in ElasticSearch. We have setup ElasticSearch with Ingest plug-in on kubernetes cluster … --- ## [Creating simple pipeline to parse the docker logs](https://discuss.elastic.co/t/creating-simple-pipeline-to-parse-the-docker-logs/134952)
**Author:** [@Vikrant\_Aggarwal](https://discuss.elastic.co/u/Vikrant_Aggarwal)\ **Replies:** 7\ **Last updated:** [June 8, 2018, 3:58am UTC](https://discuss.elastic.co/t/creating-simple-pipeline-to-parse-the-docker-logs/134952 "2018-06-08T03:58:58Z")
As part of my lab exercise to learn the docker log parsing. I am creating simple pipeline in which beat will send the data to logstash and further logstash will index this data in ES by creating new index. root@elk-mach… --- ## [MetricBeat - Perfmon Counters](https://discuss.elastic.co/t/metricbeat-perfmon-counters/116150)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 7\ **Last updated:** [January 26, 2018, 3:23pm UTC](https://discuss.elastic.co/t/metricbeat-perfmon-counters/116150 "2018-01-26T15:23:01Z")
Been playing with the ELK stack pretty heavily the last week or so running on a Windows platform. I'd like to collect per CPU metrics and have them display on a time series. This is what I have in the windows.yml modul… --- ## [Completion suggestor with synonyms analyzer - getting TokenStream expanded to 450 finite strings. Only \<= 256 finite strings are supported](https://discuss.elastic.co/t/completion-suggestor-with-synonyms-analyzer-getting-tokenstream-expanded-to-450-finite-strings-only-256-finite-strings-are-supported/98153)
**Author:** [@seme1](https://discuss.elastic.co/u/seme1)\ **Replies:** 7\ **Last updated:** [August 24, 2017, 8:56pm UTC](https://discuss.elastic.co/t/completion-suggestor-with-synonyms-analyzer-getting-tokenstream-expanded-to-450-finite-strings-only-256-finite-strings-are-supported/98153 "2017-08-24T20:56:41Z")
ES version used: 2.3 I’m using the completion suggester with a custom \[synonymize\] analyzer that expands the words in each indexed document with its synonyms. When trying to index some documents with an input filed con… --- ## [Reporting the most common log errors](https://discuss.elastic.co/t/reporting-the-most-common-log-errors/24740)
**Author:** [@twall](https://discuss.elastic.co/u/twall)\ **Replies:** 1\ **Last updated:** [July 1, 2015, 3:58pm UTC](https://discuss.elastic.co/t/reporting-the-most-common-log-errors/24740 "2015-07-01T15:58:03Z")
I'm trying to understand what's involved in obtaining the "Quick Counts" in kibana for a given "selected field". For example, my "message" field nominally represents logged errors, and the "Quick Counts" is more or less… --- ## [Difference between source/destination and server/client](https://discuss.elastic.co/t/difference-between-source-destination-and-server-client/195075)
**Author:** [@vbr](https://discuss.elastic.co/u/vbr)\ **Replies:** 1\ **Last updated:** [August 16, 2019, 1:48pm UTC](https://discuss.elastic.co/t/difference-between-source-destination-and-server-client/195075 "2019-08-16T13:48:35Z")
Hi. I'm currently evaluating the SIEM app for integration in our security workflows, and converting most of our datasets to ECS for that purpose. I'm puzzled by the existence of both client/server and source/destination… --- ## [How to use dictionary with multidimensional array in Logstash?](https://discuss.elastic.co/t/how-to-use-dictionary-with-multidimensional-array-in-logstash/52585)
**Author:** [@solidz](https://discuss.elastic.co/u/solidz)\ **Replies:** 3\ **Last updated:** [April 4, 2017, 3:19pm UTC](https://discuss.elastic.co/t/how-to-use-dictionary-with-multidimensional-array-in-logstash/52585 "2017-04-04T15:19:28Z")
Hi, I realize a project to collect NetFlow metric on Cisco router with Logstash. With the NetFlow protocol, I collect host address, and only the OID of interfaces (like "1") and not names interfaces (like "Gi8" for e… --- ## [Build Instructions and Communication](https://discuss.elastic.co/t/build-instructions-and-communication/119761)
**Author:** [@mr1holmes](https://discuss.elastic.co/u/mr1holmes)\ **Replies:** 5\ **Last updated:** [March 17, 2018, 9:46pm UTC](https://discuss.elastic.co/t/build-instructions-and-communication/119761 "2018-03-17T21:46:17Z")
I'm interested to work on Speed up Highlighting idea for GSoC 2018. Where can I find the build instructions? And is the #elasticsearch channel on freenode is correct medium to discuss this project or is there a mailing… --- ## [Watcher Heartbeat monitor.status query help](https://discuss.elastic.co/t/watcher-heartbeat-monitor-status-query-help/139616)
**Author:** [@Rob2](https://discuss.elastic.co/u/Rob2)\ **Replies:** 4\ **Last updated:** [July 17, 2018, 10:45pm UTC](https://discuss.elastic.co/t/watcher-heartbeat-monitor-status-query-help/139616 "2018-07-17T22:45:21Z")
Hi, I've got a Watch set up with Heartbeat input that sends an alert when any system is not responding to pings (i.e. has monitor.status == down) in the last X minutes. Here is my watch at the moment: { "trigger": {… --- ## [Use filter\_path in High Level Rest API](https://discuss.elastic.co/t/use-filter-path-in-high-level-rest-api/102657)
**Author:** [@hatim.stovewala](https://discuss.elastic.co/u/hatim.stovewala)\ **Replies:** 4\ **Last updated:** [October 5, 2017, 10:12am UTC](https://discuss.elastic.co/t/use-filter-path-in-high-level-rest-api/102657 "2017-10-05T10:12:13Z")
Saw this post regarding filter\_path. I'm aware that Java API does not support Response filtering because it is done on Rest layer and Java API use transport layer. So my question is does High level Rest API support this … --- ## [Kibana 7.3 - Export CSV from Discovery not exporting data](https://discuss.elastic.co/t/kibana-7-3-export-csv-from-discovery-not-exporting-data/228370)
**Author:** [@s-manjunath](https://discuss.elastic.co/u/s-manjunath)\ **Replies:** 2\ **Last updated:** [April 17, 2020, 10:44am UTC](https://discuss.elastic.co/t/kibana-7-3-export-csv-from-discovery-not-exporting-data/228370 "2020-04-17T10:44:20Z")
I am using Kibana 7.3.1 (2) , Whenever I search from the discovery, the search is displayed. However, after saving the search and exporting the results from Share-\> CSV Reports -\> Generate CSV, the results are not saved … --- ## [The first Elastic Stack 5.0 release candidate is here!](https://discuss.elastic.co/t/the-first-elastic-stack-5-0-release-candidate-is-here/62653)
**Author:** [@michelle](https://discuss.elastic.co/u/michelle)\ **Replies:** 2\ **Last updated:** [October 26, 2016, 3:34pm UTC](https://discuss.elastic.co/t/the-first-elastic-stack-5-0-release-candidate-is-here/62653 "2016-10-26T15:34:52Z")
The first Elastic Stack 5.0 release candidate is here! The 5.0.0 release candidates of Elasticsearch, Logstash, Beats, Kibana, and X-Pack are now available to download and test! Learn about the releases here. As you… --- ## [Trie agrégation avec termes accentués](https://discuss.elastic.co/t/trie-agregation-avec-termes-accentues/72309)
**Author:** [@ArnoldM](https://discuss.elastic.co/u/ArnoldM)\ **Replies:** 6\ **Last updated:** [February 27, 2017, 10:00am UTC](https://discuss.elastic.co/t/trie-agregation-avec-termes-accentues/72309 "2017-02-27T10:00:35Z")
Bonjour, je rencontre un problème de trie dans les résultats d'agrégations renvoyées par élasticsearch. Les infos... \*\* mapping \*\* commune\_etab: { type: 'string', analyzer: 'analyzer\_keyword' } \*\* avec \*\* a… --- ## [Whats the best way to migrate single node elasticsearch data to a multinode elasticsearch environment?](https://discuss.elastic.co/t/whats-the-best-way-to-migrate-single-node-elasticsearch-data-to-a-multinode-elasticsearch-environment/228199)
**Author:** [@deep9300](https://discuss.elastic.co/u/deep9300)\ **Replies:** 7\ **Last updated:** [April 19, 2020, 4:25am UTC](https://discuss.elastic.co/t/whats-the-best-way-to-migrate-single-node-elasticsearch-data-to-a-multinode-elasticsearch-environment/228199 "2020-04-19T04:25:08Z")
I want to move my single node elasticsearch cluster data to a 3 node elasticsearch cluster. Only a few gb worth of data at first to test it out then proceed to move close to a 100gb. What is best way to this? Are any art… --- ## [Include/ Exclude pattern](https://discuss.elastic.co/t/include-exclude-pattern/1902)
**Author:** [@Saket\_Kumar](https://discuss.elastic.co/u/Saket_Kumar)\ **Replies:** 1\ **Last updated:** [June 17, 2015, 5:19am UTC](https://discuss.elastic.co/t/include-exclude-pattern/1902 "2015-06-17T05:19:19Z")
I have one field whose values are in following format "application/x-javascript", "text/html", "text/css". When plotting at kibana graph its splitting as follows "application", "x" and "javascript". I would like to vie… --- ## [New index immediately becomes red](https://discuss.elastic.co/t/new-index-immediately-becomes-red/14474)
**Author:** [@Andreas\_Echavez](https://discuss.elastic.co/u/Andreas_Echavez)\ **Replies:** 7\ **Last updated:** [November 21, 2013, 5:32pm UTC](https://discuss.elastic.co/t/new-index-immediately-becomes-red/14474 "2013-11-21T17:32:13Z")
Hi, I'm seeing some problems with a two-node cluster where all my shards have gone Yellow, and new shards are refusing to allocate. Both running 90.5 & Java 1.7.0\_25 I've tried almost everything I can think of to get… --- ## [Use multiple wildcards DSL Query](https://discuss.elastic.co/t/use-multiple-wildcards-dsl-query/128840)
**Author:** [@lutundula\_jeanchris](https://discuss.elastic.co/u/lutundula_jeanchris)\ **Replies:** 2\ **Last updated:** [April 23, 2018, 12:52pm UTC](https://discuss.elastic.co/t/use-multiple-wildcards-dsl-query/128840 "2018-04-23T12:52:39Z")
Hello everyone , I just started using "DSL query" on my ELK platform and i want to make a DSL request that can use wildcard to perform matching search . my request will find all the mail\_domain (term) that end with "mail… --- ## [Ingesting O365 logs but having issues with specific mappings](https://discuss.elastic.co/t/ingesting-o365-logs-but-having-issues-with-specific-mappings/256081)
**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\ **Replies:** 5\ **Last updated:** [November 27, 2020, 8:33pm UTC](https://discuss.elastic.co/t/ingesting-o365-logs-but-having-issues-with-specific-mappings/256081 "2020-11-27T20:33:52Z")
Hi, We are using Filebeat with the O365 module. These events get shipped to Redis which then Logstash fetches from. The logs are getting ingested but some of the events are having mapping issues with the field "o365.aud… --- ## [Trying to restore snapshot](https://discuss.elastic.co/t/trying-to-restore-snapshot/293448)
**Author:** [@fribse](https://discuss.elastic.co/u/fribse)\ **Replies:** 8\ **Last updated:** [January 6, 2022, 1:09am UTC](https://discuss.elastic.co/t/trying-to-restore-snapshot/293448 "2022-01-06T01:09:07Z")
So I've been running my Elasticsearch in docker-compose. Now I have by accident lost all my data :cry:, it's not so much the data itself as that is only historic, but rather all the kibana work made. I'm now trying to … --- ## [Elastic Cloud SAML XSRF Header](https://discuss.elastic.co/t/elastic-cloud-saml-xsrf-header/160582)
**Author:** [@ajrvester](https://discuss.elastic.co/u/ajrvester)\ **Replies:** 8\ **Last updated:** [January 3, 2019, 8:12pm UTC](https://discuss.elastic.co/t/elastic-cloud-saml-xsrf-header/160582 "2019-01-03T20:12:44Z")
We've updating our deployments to Elastic Cloud 6.5.2 so we can take advantage of the new SAML integration. Two of our deployments are now using the SAML integration to connect to our AD FS IdP without issue. However, o… --- ## [Curl command to put value in Kibana 6.3](https://discuss.elastic.co/t/curl-command-to-put-value-in-kibana-6-3/159840)
**Author:** [@bishwajitsamanta1689](https://discuss.elastic.co/u/bishwajitsamanta1689)\ **Replies:** 3\ **Last updated:** [December 11, 2018, 8:34pm UTC](https://discuss.elastic.co/t/curl-command-to-put-value-in-kibana-6-3/159840 "2018-12-11T20:34:28Z")
Hi, I need a curl command to put some value in Kibana Advanced Configuration. Current way of doing is , Kibana Console --\> Advanced Settings --\> dateFormat:tz --\> Put the Value as GMT. I need to do that through curl co… --- ## [Limit the query size in elasticsearch](https://discuss.elastic.co/t/limit-the-query-size-in-elasticsearch/39225)
**Author:** [@justnj](https://discuss.elastic.co/u/justnj)\ **Replies:** 3\ **Last updated:** [January 16, 2016, 7:54am UTC](https://discuss.elastic.co/t/limit-the-query-size-in-elasticsearch/39225 "2016-01-16T07:54:16Z")
How can I limit the query to be executed (I mean the size) If the size is ,more size for example 10M than automatically the query has to be withdrawn/throw message --- ## [Enconding Issue](https://discuss.elastic.co/t/enconding-issue/2899)
**Author:** [@Walendo](https://discuss.elastic.co/u/Walendo)\ **Replies:** 3\ **Last updated:** [April 8, 2010, 7:41pm UTC](https://discuss.elastic.co/t/enconding-issue/2899 "2010-04-08T19:41:36Z")
Hi, I'm trying to PUT an index that is something like the String below (portuguese) which is in the ISO-8859-1 charset and the Elastic Server sends this error: JsonParseException\[Invalid UTF-8 middle byte 0x6f\\n … --- ## [How can I copy documents to same index and type?](https://discuss.elastic.co/t/how-can-i-copy-documents-to-same-index-and-type/66728)
**Author:** [@liny](https://discuss.elastic.co/u/liny)\ **Replies:** 4\ **Last updated:** [December 4, 2016, 6:29am UTC](https://discuss.elastic.co/t/how-can-i-copy-documents-to-same-index-and-type/66728 "2016-12-04T06:29:33Z")
Hi, I am indexing files to elasticsearch 5 for content searching. A "content" field contains the content of file, which maybe has large data in mega-byte. The JSON example is shown as below: { "fileId": "unique\_… --- ## [Filter Plugin: Elasticsearch](https://discuss.elastic.co/t/filter-plugin-elasticsearch/44144)
**Author:** [@Christian16](https://discuss.elastic.co/u/Christian16)\ **Replies:** 6\ **Last updated:** [May 21, 2017, 3:39pm UTC](https://discuss.elastic.co/t/filter-plugin-elasticsearch/44144 "2017-05-21T15:39:51Z")
Hello, My main goal is to get a tag (TRANSFER ID) from a previous log event, and i would like to include this tag in my current log event. So I decided to use the "Elasticsearch Filter" plugin but I'm having trouble wi… --- ## [64Bit alignment issue on ARM7 (Raspberry Pi)](https://discuss.elastic.co/t/64bit-alignment-issue-on-arm7-raspberry-pi/68785)
**Author:** [@kofi](https://discuss.elastic.co/u/kofi)\ **Replies:** 6\ **Last updated:** [January 2, 2017, 9:36pm UTC](https://discuss.elastic.co/t/64bit-alignment-issue-on-arm7-raspberry-pi/68785 "2017-01-02T21:36:54Z")
Hi, I tried to compile the latest code of filebeat on my Raspbarry Pi 3 (Arch ARM Linux, armv7h). The compilation was successful, however during runtime it crashed as follows panic: runtime error: invalid memory add… --- ## [Kv filter with spaces in values](https://discuss.elastic.co/t/kv-filter-with-spaces-in-values/227962)
**Author:** [@parosio](https://discuss.elastic.co/u/parosio)\ **Replies:** 3\ **Last updated:** [April 15, 2020, 3:20pm UTC](https://discuss.elastic.co/t/kv-filter-with-spaces-in-values/227962 "2020-04-15T15:20:29Z")
Hello, I've got a log that seems a perfect candidate for the kv filter: msg=Start MID 1242272 ICID 1632662 categorySignificance=/Informational catdt=Web Filtering categoryObject=/Host/Application/Service deviceSeverity… --- ## [Using Kibana internal console API](https://discuss.elastic.co/t/using-kibana-internal-console-api/105037)
**Author:** [@Ashok\_Kumar](https://discuss.elastic.co/u/Ashok_Kumar)\ **Replies:** 3\ **Last updated:** [November 2, 2017, 8:08pm UTC](https://discuss.elastic.co/t/using-kibana-internal-console-api/105037 "2017-11-02T20:08:47Z")
I have kibana-(v5.0.1) . I have used the kibana internal console API (http://server.com/api/console/proxy?uri=\_search) with serach query as param to search for kibana log and processing them. Recently when i tried to us… --- ## [Elastic Endgame Sensor](https://discuss.elastic.co/t/elastic-endgame-sensor/286933)
**Author:** [@marisa.david](https://discuss.elastic.co/u/marisa.david)\ **Replies:** 5\ **Last updated:** [October 19, 2021, 1:28am UTC](https://discuss.elastic.co/t/elastic-endgame-sensor/286933 "2021-10-19T01:28:19Z")
I have been attempting to deploy a sensor but every time I try to in the command prompt it says it cannot be found. I am not sure if I am putting the information in wrong. --- ## [Searching on multiple fields from Index created by Fscrawler](https://discuss.elastic.co/t/searching-on-multiple-fields-from-index-created-by-fscrawler/153275)
**Author:** [@Jasmeet](https://discuss.elastic.co/u/Jasmeet)\ **Replies:** 5\ **Last updated:** [October 31, 2018, 5:42pm UTC](https://discuss.elastic.co/t/searching-on-multiple-fields-from-index-created-by-fscrawler/153275 "2018-10-31T17:42:23Z")
Hi, I am new to Elasticsearch and have tried out creating index with Fscrawler. After creating custom Analyzers, when i try to search on the fields"content.phonetic" and "content.shingle", i do not get a search hit. Can… --- ## [Logstash not forwarding logs to ES via Kafka](https://discuss.elastic.co/t/logstash-not-forwarding-logs-to-es-via-kafka/82602)
**Author:** [@luciferdude](https://discuss.elastic.co/u/luciferdude)\ **Replies:** 5\ **Last updated:** [April 18, 2017, 1:09pm UTC](https://discuss.elastic.co/t/logstash-not-forwarding-logs-to-es-via-kafka/82602 "2017-04-18T13:09:31Z")
I'm using ELK 5.0.1 and Kafka 0.10.1.0 . I'm not sure why my logs aren't forwarding I installed Kafkacat and was successfully able to Produce and Consume logs from all the 3 servers where Kafka cluster is installed. … --- ## [Filebeat-god process does not create filebeat registry file as mentioned in the filebeat.yml config](https://discuss.elastic.co/t/filebeat-god-process-does-not-create-filebeat-registry-file-as-mentioned-in-the-filebeat-yml-config/51730)
**Author:** [@kasi](https://discuss.elastic.co/u/kasi)\ **Replies:** 5\ **Last updated:** [June 7, 2016, 9:00am UTC](https://discuss.elastic.co/t/filebeat-god-process-does-not-create-filebeat-registry-file-as-mentioned-in-the-filebeat-yml-config/51730 "2016-06-07T09:00:41Z")
I have specified the registry file as registry\_file: .filebeat-registry and I have multiple file beat instances and i want to have individual file beat registry for each of my file beat instances, this is the command I … --- ## [Display base64 encoded images](https://discuss.elastic.co/t/display-base64-encoded-images/59438)
**Author:** [@Jeff\_Bolle](https://discuss.elastic.co/u/Jeff_Bolle)\ **Replies:** 2\ **Last updated:** [August 31, 2016, 7:11pm UTC](https://discuss.elastic.co/t/display-base64-encoded-images/59438 "2016-08-31T19:11:44Z")
I have small images stored as base 64 text in my ElasticSearch data (I know it isn't a general best practice, but for right now it makes the most sense given other development priorities). I see that in Kibana I can disp… --- ## [Encryption at rest](https://discuss.elastic.co/t/encryption-at-rest/340580)
**Author:** [@Buddha](https://discuss.elastic.co/u/Buddha)\ **Replies:** 1\ **Last updated:** [August 10, 2023, 6:02pm UTC](https://discuss.elastic.co/t/encryption-at-rest/340580 "2023-08-10T18:02:55Z")
Using the docker-compose.yml file found in the official Elastic documents: Install Elasticsearch with Docker | Elasticsearch Guide \[8.9\] | Elastic, is my data encryption at rest? Or do I need to add something to the env… --- ## [Setting Up Snapshot - Repository (What to set for Path.Repo)](https://discuss.elastic.co/t/setting-up-snapshot-repository-what-to-set-for-path-repo/257717)
**Author:** [@Sampson\_Light](https://discuss.elastic.co/u/Sampson_Light)\ **Replies:** 4\ **Last updated:** [December 5, 2020, 9:37am UTC](https://discuss.elastic.co/t/setting-up-snapshot-repository-what-to-set-for-path-repo/257717 "2020-12-05T09:37:35Z")
Hi All, So I am currently setting up my path.repo repository to enable Snapshot onto my linux server. I understand that I am suppose to create something new like a path.repo inside my elasticsearch.yml. Something like… --- ## [Frequently young gc: is memory leak in elastic 2.3.0?](https://discuss.elastic.co/t/frequently-young-gc-is-memory-leak-in-elastic-2-3-0/58320)
**Author:** [@walker](https://discuss.elastic.co/u/walker)\ **Replies:** 6\ **Last updated:** [August 20, 2016, 9:04am UTC](https://discuss.elastic.co/t/frequently-young-gc-is-memory-leak-in-elastic-2-3-0/58320 "2016-08-20T09:04:21Z")
the jvm parameters is : the text is: /usr/java/jdk1.7.0\_79/bin/java -Xms32g -Xmx32g -Xmn12g -Djava.awt.headless=true -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatin… --- ## [Marvel high index rate](https://discuss.elastic.co/t/marvel-high-index-rate/38935)
**Author:** [@voipoclay](https://discuss.elastic.co/u/voipoclay)\ **Replies:** 6\ **Last updated:** [January 13, 2016, 9:23am UTC](https://discuss.elastic.co/t/marvel-high-index-rate/38935 "2016-01-13T09:23:26Z")
I notice in marvel the highest insert activity belongs to the marvel index and shows around 680/s to 960/s. I was curious why this is so high? --- ## [ES K8s (AKS) auditlogs via filebeat](https://discuss.elastic.co/t/es-k8s-aks-auditlogs-via-filebeat/226036)
**Author:** [@VishalBhalla](https://discuss.elastic.co/u/VishalBhalla)\ **Replies:** 5\ **Last updated:** [April 3, 2020, 8:54am UTC](https://discuss.elastic.co/t/es-k8s-aks-auditlogs-via-filebeat/226036 "2020-04-03T08:54:46Z")
Hi all. I just wanted to confirm my thinking with what I'm trying to achieve. We currently have an version 7.6.2 ES stack running on kubernetes in Azure AKS. The ES audit logs are currently being sent to stdout (so ava… --- ## [Hypen "-" in grok fields](https://discuss.elastic.co/t/hypen-in-grok-fields/149981)
**Author:** [@ssi](https://discuss.elastic.co/u/ssi)\ **Replies:** 5\ **Last updated:** [September 27, 2018, 8:25am UTC](https://discuss.elastic.co/t/hypen-in-grok-fields/149981 "2018-09-27T08:25:55Z")
Hi im trying to apply the solution described here to the follwoing part of the Exchange message tracking logs source\_context MDB:04111c61-c212-4078-bf65-369a8cd3080c, Mailbox:257ff165-97e3-498b-8e11-b5b735da312b, Ev… --- ## [Digit search not working for me](https://discuss.elastic.co/t/digit-search-not-working-for-me/119157)
**Author:** [@aravind\_apalya](https://discuss.elastic.co/u/aravind_apalya)\ **Replies:** 5\ **Last updated:** [February 9, 2018, 7:42am UTC](https://discuss.elastic.co/t/digit-search-not-working-for-me/119157 "2018-02-09T07:42:08Z")
Hi Team, I am using elastic search version 0.90.5. When I am typing single word search started working but when i type digit its not searching. Overall for the titles which have numeric values search not showing resul… --- ## [Failed to load plugin class \[org.elasticsearch.xpack.XPackPlugin\]](https://discuss.elastic.co/t/failed-to-load-plugin-class-org-elasticsearch-xpack-xpackplugin/71030)
**Author:** [@shaonbean](https://discuss.elastic.co/u/shaonbean)\ **Replies:** 7\ **Last updated:** [January 18, 2017, 2:38am UTC](https://discuss.elastic.co/t/failed-to-load-plugin-class-org-elasticsearch-xpack-xpackplugin/71030 "2017-01-18T02:38:40Z")
I use yum install elasticsearch 5.1.1 (three nodes), before install x-pack, the elasticsearch clluster correct, but then install x-pack restrat elasticsearch all nodes failed... \[2017-01-10T15:32:40,128\]\[INFO \]\[o.e.x.… --- ## [ElasticSearch install stuck](https://discuss.elastic.co/t/elasticsearch-install-stuck/268507)
**Author:** [@MertYavuz](https://discuss.elastic.co/u/MertYavuz)\ **Replies:** 4\ **Last updated:** [March 26, 2021, 3:26pm UTC](https://discuss.elastic.co/t/elasticsearch-install-stuck/268507 "2021-03-26T15:26:34Z")
Hello, I am trying to install elasticsearch 7.12 in windows 2016. It's been stuck for like an hour at somepoint: \[2021-03-26T15:55:23,770\]\[INFO \]\[o.e.p.PluginsService \] \[WIN-PP7D4702OPT\] loaded module \[x-pack-sec… [Previous page](https://discuss.elastic.co/top.md?page=615&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=617&per_page=50&period=all)