# Top **URL:** https://discuss.elastic.co/top.md?page=636&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 637 --- ## [Logstash is not create indexes](https://discuss.elastic.co/t/logstash-is-not-create-indexes/81568)
**Author:** [@igormarqs](https://discuss.elastic.co/u/igormarqs)\ **Replies:** 5\ **Last updated:** [April 7, 2017, 1:24pm UTC](https://discuss.elastic.co/t/logstash-is-not-create-indexes/81568 "2017-04-07T13:24:51Z")
hi, i have started with ELK but i have some error. when i start kibana and look for some index name or pattern, can't find any logstash-\* if i use option "Use event times to create index names \[DEPRECATED\]" with name "… --- ## [Curator Delete indicies based on disk size and index age](https://discuss.elastic.co/t/curator-delete-indicies-based-on-disk-size-and-index-age/189083)
**Author:** [@Jayabal\_K](https://discuss.elastic.co/u/Jayabal_K)\ **Replies:** 1\ **Last updated:** [July 5, 2019, 5:18pm UTC](https://discuss.elastic.co/t/curator-delete-indicies-based-on-disk-size-and-index-age/189083 "2019-07-05T17:18:36Z")
I saw some examples to delete indicies based on size and disk\_space, can I use both the filters in one action. I want to delete the indicies which is n days older or it occupies nGB If any one of the condition meets then… --- ## [Calc average doc count per hour](https://discuss.elastic.co/t/calc-average-doc-count-per-hour/32012)
**Author:** [@alexbourne](https://discuss.elastic.co/u/alexbourne)\ **Replies:** 4\ **Last updated:** [June 13, 2016, 9:20pm UTC](https://discuss.elastic.co/t/calc-average-doc-count-per-hour/32012 "2016-06-13T21:20:49Z")
Hi Guys, my index is a set of messages that have a timestamp. I want to calculate the average number of messages each hour for the past month. So the output would be something like: 1 50 2 75 3 68 ... 23 100 24 98 … --- ## [OSS Logstash 7.16.1 incompatible with Elasticsearch 7.10.2](https://discuss.elastic.co/t/oss-logstash-7-16-1-incompatible-with-elasticsearch-7-10-2/292283)
**Author:** [@AlanMark](https://discuss.elastic.co/u/AlanMark)\ **Replies:** 2\ **Last updated:** [December 20, 2021, 3:20pm UTC](https://discuss.elastic.co/t/oss-logstash-7-16-1-incompatible-with-elasticsearch-7-10-2/292283 "2021-12-20T15:20:09Z")
I am running an upgrade from some older versions of opendistro and OSS logstash to the latest versions, in order to mitigate some of the latest vulnerabilities. According to Elastic, Logstash OSS 7.16.x should be compat… --- ## [Creating index template](https://discuss.elastic.co/t/creating-index-template/27683)
**Author:** [@imad](https://discuss.elastic.co/u/imad)\ **Replies:** 6\ **Last updated:** [August 21, 2015, 10:37pm UTC](https://discuss.elastic.co/t/creating-index-template/27683 "2015-08-21T22:37:20Z")
I am trying to create an index template so that all indices created afterwards have same mapping. Here is how I am creating it: curl -XPUT localhost:9200/\_template/vw\_index\_template -d ' { "template… --- ## [Logstash 6.2 missing library netty\_tcnative\_linux\_x86\_64](https://discuss.elastic.co/t/logstash-6-2-missing-library-netty-tcnative-linux-x86-64/120428)
**Author:** [@emwferm](https://discuss.elastic.co/u/emwferm)\ **Replies:** 1\ **Last updated:** [March 6, 2018, 6:39pm UTC](https://discuss.elastic.co/t/logstash-6-2-missing-library-netty-tcnative-linux-x86-64/120428 "2018-03-06T18:39:11Z")
Hello: Trying out the new logstash 6.2 and we get the following error: \[2018-02-16T15:43:35,981\]\[DEBUG\]\[io.netty.util.internal.NativeLibraryLoader\] Unable to load the library 'netty\_tcnative\_linux\_x86\_64', trying other… --- ## [Using wildcard to update/remove fields inside logstash filter](https://discuss.elastic.co/t/using-wildcard-to-update-remove-fields-inside-logstash-filter/104460)
**Author:** [@bishplz](https://discuss.elastic.co/u/bishplz)\ **Replies:** 2\ **Last updated:** [October 20, 2017, 5:50pm UTC](https://discuss.elastic.co/t/using-wildcard-to-update-remove-fields-inside-logstash-filter/104460 "2017-10-20T17:50:18Z")
Hi I have a data structure like this. This is an stdout after parsing with XML filter. { "offset" =\> 6859148, "input\_type" =\> "log", "source" =\> "requests.log.6", "type" =\> "log", "datestamp" =\> "08-09-17 03:03:07… --- ## [Node Move Failing for ES](https://discuss.elastic.co/t/node-move-failing-for-es/209203)
**Author:** [@Rob\_wylde](https://discuss.elastic.co/u/Rob_wylde)\ **Replies:** 4\ **Last updated:** [November 26, 2019, 5:14pm UTC](https://discuss.elastic.co/t/node-move-failing-for-es/209203 "2019-11-26T17:14:40Z")
So i just setup another brand new instance of ECE and I'm following the same process i've used successfully in the past. That being install an 'admin' node with less resources than the other 3 nodes. Add the new allocato… --- ## [New Elasticsearch 8 Java API - Insert date time field](https://discuss.elastic.co/t/new-elasticsearch-8-java-api-insert-date-time-field/311351)
**Author:** [@zxuz111](https://discuss.elastic.co/u/zxuz111)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 9:10pm UTC](https://discuss.elastic.co/t/new-elasticsearch-8-java-api-insert-date-time-field/311351 "2022-08-04T21:10:46Z")
I am using the new Elasticsearch 8 Java client API to persist document that contains datetime field. Also, this is a spring boot application. The issue I got is, if I set a field as LocalDateTime, and try to save to Ela… --- ## [File Storage being swallowed up](https://discuss.elastic.co/t/file-storage-being-swallowed-up/271325)
**Author:** [@insurin](https://discuss.elastic.co/u/insurin)\ **Replies:** 7\ **Last updated:** [May 7, 2021, 6:08pm UTC](https://discuss.elastic.co/t/file-storage-being-swallowed-up/271325 "2021-05-07T18:08:17Z")
I have 1 agent running that has the 'Endpoint Security' and the 'System Integration'. This is running on a Windows file server and reporting into ELK which is running on Ubuntu. This one server is consuming 8gb data a da… --- ## [Illegal unquoted character ((CTRL-CHAR, code 10)): has to be escaped using backslash to be included in string value\\n at \[Source: org.elasticsearch.transport.netty4.ByteBufStreamInput@6eb3d4e; line: 3, column: 206\]1](https://discuss.elastic.co/t/illegal-unquoted-character-ctrl-char-code-10-has-to-be-escaped-using-backslash-to-be-included-in-string-value-n-at-source-org-elasticsearch-transport-netty4-bytebufstreaminput-6eb3d4e-line-3-column-206-1/209960)
**Author:** [@xyx](https://discuss.elastic.co/u/xyx)\ **Replies:** 1\ **Last updated:** [November 30, 2019, 2:42pm UTC](https://discuss.elastic.co/t/illegal-unquoted-character-ctrl-char-code-10-has-to-be-escaped-using-backslash-to-be-included-in-string-value-n-at-source-org-elasticsearch-transport-netty4-bytebufstreaminput-6eb3d4e-line-3-column-206-1/209960 "2019-11-30T14:42:49Z")
The analyzer does not work，So who can help me.Thanks!Here is my error and example: (1)error: { "error": { "root\_cause": \[ { "type": "x\_content\_parse\_exception", "reason": "\[3:12\] \[analyze\_request\] failed to parse … --- ## [Configure logging for plugin](https://discuss.elastic.co/t/configure-logging-for-plugin/68021)
**Author:** [@ma-sch](https://discuss.elastic.co/u/ma-sch)\ **Replies:** 2\ **Last updated:** [December 8, 2016, 11:20pm UTC](https://discuss.elastic.co/t/configure-logging-for-plugin/68021 "2016-12-08T23:20:32Z")
Hello, I'm developing a plugin for Elasticsearch. Therefore I want to log into a log file with log4j2. The configuration of log4j2 is defined in a log4j2.xml in my resources folder. For unit tests everything works fine… --- ## [What does event.cancel() do?](https://discuss.elastic.co/t/what-does-event-cancel-do/223482)
**Author:** [@jtboing](https://discuss.elastic.co/u/jtboing)\ **Replies:** 3\ **Last updated:** [March 16, 2020, 4:51pm UTC](https://discuss.elastic.co/t/what-does-event-cancel-do/223482 "2020-03-16T16:51:04Z")
I've recently been using logstash to pass data from the database to elaticsearch. One of the plugins that I'm using is the aggregate filter. In some of the examples, there is event.cancel() that is said to cancel events. … --- ## [Ip range with subnet](https://discuss.elastic.co/t/ip-range-with-subnet/13508)
**Author:** [@Gabriele\_Angeli](https://discuss.elastic.co/u/Gabriele_Angeli)\ **Replies:** 3\ **Last updated:** [September 10, 2013, 11:03am UTC](https://discuss.elastic.co/t/ip-range-with-subnet/13508 "2013-09-10T11:03:05Z")
Hi guys, i've a question for you. I know that in ES is possible make a search query with ip range, but is possible to put the subnet mask in this query? Regards Gabriele -- You received this me… --- ## [Handling loss of master quorum in ES7+](https://discuss.elastic.co/t/handling-loss-of-master-quorum-in-es7/191443)
**Author:** [@sarthakn](https://discuss.elastic.co/u/sarthakn)\ **Replies:** 6\ **Last updated:** [July 23, 2019, 9:53pm UTC](https://discuss.elastic.co/t/handling-loss-of-master-quorum-in-es7/191443 "2019-07-23T21:53:04Z")
I am planning to upgrade an ES 6.3 cluster to 7.2 soon. In ES 6.3 if we lose a quorum of master nodes we can bring up new nodes which will join the cluster and regain quorum, but after ES 7 new master nodes cannot join a… --- ## [Updating all documents using a dictionary as input](https://discuss.elastic.co/t/updating-all-documents-using-a-dictionary-as-input/295728)
**Author:** [@Jenobi](https://discuss.elastic.co/u/Jenobi)\ **Replies:** 5\ **Last updated:** [February 1, 2022, 5:14pm UTC](https://discuss.elastic.co/t/updating-all-documents-using-a-dictionary-as-input/295728 "2022-02-01T17:14:44Z")
Update All Documents Background Information I have a use case where I need to update all documents in my index. My source looks similar to the below: { 'hits': \[ {'\_index': 'main-index-v2', '\_type': '\_doc', … --- ## [Plugin installation failing](https://discuss.elastic.co/t/plugin-installation-failing/118270)
**Author:** [@frankshad](https://discuss.elastic.co/u/frankshad)\ **Replies:** 5\ **Last updated:** [February 2, 2018, 7:52pm UTC](https://discuss.elastic.co/t/plugin-installation-failing/118270 "2018-02-02T19:52:17Z")
Hi, I'm trying to install the ingest-attachment plugin on an IPv6 only machine (it's actually a Raspberry Pi, so ARM processor, but I don't think that's the issue). It hangs for ages and then says Exception in thread "… --- ## [Issue installing Translate Plugin](https://discuss.elastic.co/t/issue-installing-translate-plugin/101816)
**Author:** [@sreejiths](https://discuss.elastic.co/u/sreejiths)\ **Replies:** 5\ **Last updated:** [September 27, 2017, 6:28am UTC](https://discuss.elastic.co/t/issue-installing-translate-plugin/101816 "2017-09-27T06:28:18Z")
We are using logstash 5.2 ..We are trying to install translate plugin and getting below error ..Can anyone advice \[root@x01gnwatlgs1a support\]# /usr/share/logstash/bin/logstash-plugin install file:////home/support/logst… --- ## [Common terms query with cutoff\_frequency](https://discuss.elastic.co/t/common-terms-query-with-cutoff-frequency/15650)
**Author:** [@vinamar](https://discuss.elastic.co/u/vinamar)\ **Replies:** 5\ **Last updated:** [February 13, 2014, 9:05am UTC](https://discuss.elastic.co/t/common-terms-query-with-cutoff-frequency/15650 "2014-02-13T09:05:23Z")
Hi, I have the following query given below. Currently any query term like "email not archived" excludes the not from the search results and highlighted results. i was planning to use common terms query to include… --- ## [Filebeat 6.2 seems to be monitoring the server it's running on?](https://discuss.elastic.co/t/filebeat-6-2-seems-to-be-monitoring-the-server-its-running-on/118865)
**Author:** [@Warren\_Turner](https://discuss.elastic.co/u/Warren_Turner)\ **Replies:** 4\ **Last updated:** [February 7, 2018, 7:25pm UTC](https://discuss.elastic.co/t/filebeat-6-2-seems-to-be-monitoring-the-server-its-running-on/118865 "2018-02-07T19:25:16Z")
I upgraded one of my servers to filebeat 6.2 to test it out and everything seems to work fine but now I'm getting these lines in the log file constantly: 2018-02-07T09:55:12.077-0500 INFO \[monitoring\] log/log.g… --- ## [Cant see bro logs in kibana](https://discuss.elastic.co/t/cant-see-bro-logs-in-kibana/130142)
**Author:** [@bz\_Os](https://discuss.elastic.co/u/bz_Os)\ **Replies:** 8\ **Last updated:** [May 1, 2018, 11:47pm UTC](https://discuss.elastic.co/t/cant-see-bro-logs-in-kibana/130142 "2018-05-01T23:47:35Z")
i attempt to seend bro logs to logstach,i am using filebeat for this when i open tab discover i see only the logs 28-04-2018 and 29-04-2018 but i cant find the current log and the 30th i want to test only connection lo… --- ## [Curator time zone](https://discuss.elastic.co/t/curator-time-zone/106002)
**Author:** [@eebee](https://discuss.elastic.co/u/eebee)\ **Replies:** 8\ **Last updated:** [November 3, 2017, 6:04pm UTC](https://discuss.elastic.co/t/curator-time-zone/106002 "2017-11-03T18:04:03Z")
I'm trying to write a Curator script that should remove all indicies older than one hour. This is just a test to see if my cron job is working as it should. However, I'm a little confused of how the time/unit-settings w… --- ## [Date Histogram Problem](https://discuss.elastic.co/t/date-histogram-problem/71969)
**Author:** [@Jeremy\_Cugmas](https://discuss.elastic.co/u/Jeremy_Cugmas)\ **Replies:** 2\ **Last updated:** [January 19, 2017, 8:38am UTC](https://discuss.elastic.co/t/date-histogram-problem/71969 "2017-01-19T08:38:31Z")
Hello everyone, I'm a beginner on ELK, Logstash and Kibana so sorry in advance if i make mistakes in my explanation ! So, to explain, I configure Logstash to read my kannel logs and send some datas from them to my ELK,… --- ## [How to filter log level with json in filebeat](https://discuss.elastic.co/t/how-to-filter-log-level-with-json-in-filebeat/112211)
**Author:** [@847e01e784615435d38b](https://discuss.elastic.co/u/847e01e784615435d38b)\ **Replies:** 1\ **Last updated:** [December 18, 2017, 2:39pm UTC](https://discuss.elastic.co/t/how-to-filter-log-level-with-json-in-filebeat/112211 "2017-12-18T14:39:33Z")
Continuing the discussion from Parse JSON data with filebeat: --- ## [Filebeat drop\_event](https://discuss.elastic.co/t/filebeat-drop-event/88559)
**Author:** [@shaktigupta200](https://discuss.elastic.co/u/shaktigupta200)\ **Replies:** 1\ **Last updated:** [June 7, 2017, 12:55pm UTC](https://discuss.elastic.co/t/filebeat-drop-event/88559 "2017-06-07T12:55:48Z")
Hi Folks, I have an issue when using processors in filebeat for dropping event when certain condition matches. I am trying to drop event from log which contains "log\_time" in message field. But the drop filter is not w… --- ## [\ **Author:** [@Billz1026](https://discuss.elastic.co/u/Billz1026)\ **Replies:** 3\ **Last updated:** [October 11, 2018, 11:42am UTC](https://discuss.elastic.co/t/regexperror-end-pattern-with-unmatched-parenthesis/152036 "2018-10-11T11:42:58Z") HI, First of all I have to say I am a newbie in the ELK domain. I have written a simple config file but is giving an error each time i try to run logstash. Following is the config file. \`input{ file { path =\> "/var/… --- ## [Merge two elasticsearch clusters](https://discuss.elastic.co/t/merge-two-elasticsearch-clusters/260678)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 5\ **Last updated:** [January 13, 2021, 11:31am UTC](https://discuss.elastic.co/t/merge-two-elasticsearch-clusters/260678 "2021-01-13T11:31:11Z")
Hi All, Currently we have two clusters, in one we have 4 nodes(1 coordinating, 3 data nodes out of which two are master) and second cluster(1 coordinating, 5 data nodes out of which three are master). Can someone sugges… --- ## [Parsing Windows Event Logs with nested xml](https://discuss.elastic.co/t/parsing-windows-event-logs-with-nested-xml/172500)
**Author:** [@jmohar](https://discuss.elastic.co/u/jmohar)\ **Replies:** 4\ **Last updated:** [March 18, 2019, 1:18pm UTC](https://discuss.elastic.co/t/parsing-windows-event-logs-with-nested-xml/172500 "2019-03-18T13:18:09Z")
Dear community. After spending more than a week with logstash and winlogbeat to parse Windows\_Event\_Logs..but have no clue how to parse the nested xml in the security windows eventlogs (vistaeventlogs). Using Logstash … --- ## [Can not Start Elasticsearch on CentOS 7](https://discuss.elastic.co/t/can-not-start-elasticsearch-on-centos-7/139749)
**Author:** [@leandro\_matos\_pereir](https://discuss.elastic.co/u/leandro_matos_pereir)\ **Replies:** 1\ **Last updated:** [July 12, 2018, 6:13pm UTC](https://discuss.elastic.co/t/can-not-start-elasticsearch-on-centos-7/139749 "2018-07-12T18:13:33Z")
I'm a beginner with elastic search, the same was put into production was with Kibana, search was working but due to some update its stop working and giving this error message while checking status. ===================… --- ## [Logstash - not able to insert date in this format 'YYYY-MM-DD hh:mm:ss'](https://discuss.elastic.co/t/logstash-not-able-to-insert-date-in-this-format-yyyy-mm-dd-hhss/247405)
**Author:** [@SwatiD](https://discuss.elastic.co/u/SwatiD)\ **Replies:** 8\ **Last updated:** [September 7, 2020, 6:37am UTC](https://discuss.elastic.co/t/logstash-not-able-to-insert-date-in-this-format-yyyy-mm-dd-hhss/247405 "2020-09-07T06:37:10Z")
My date format is YYYY-MM-DD hh:mm:ss but logstash is changing this to something like 2020-09-03T05:03:00.000Z . I have use this filter in logstash config file filter { date { match =\> \[ "endDate", "YYYY-MM-DD hh:mm:… --- ## [APM Java Agent error java.lang.StackOverflowError TemplateInputException](https://discuss.elastic.co/t/apm-java-agent-error-java-lang-stackoverflowerror-templateinputexception/147329)
**Author:** [@wujiaxin159](https://discuss.elastic.co/u/wujiaxin159)\ **Replies:** 3\ **Last updated:** [September 6, 2018, 1:05pm UTC](https://discuss.elastic.co/t/apm-java-agent-error-java-lang-stackoverflowerror-templateinputexception/147329 "2018-09-06T13:05:00Z")
Java: 1.8 APM Server : 6.3 APM Agent : 0.6.2 org.springframework.web.util.NestedServletException: Handler dispatch failed; nested exception is java.lang.StackOverflowError at org.springframework.web.servlet.Dispa… --- ## [Login api call fails](https://discuss.elastic.co/t/login-api-call-fails/82171)
**Author:** [@M.S.S](https://discuss.elastic.co/u/M.S.S)\ **Replies:** 3\ **Last updated:** [April 13, 2017, 6:03am UTC](https://discuss.elastic.co/t/login-api-call-fails/82171 "2017-04-13T06:03:52Z")
I will use Kibana inside iframe in my web app. For this purpose i need to call login api "/api/security/v1/login". In postman i could call the api, success response came. But when i call the api via javascript&ajax, brow… --- ## [Entreprise Resource Unit](https://discuss.elastic.co/t/entreprise-resource-unit/345104)
**Author:** [@Manal\_A](https://discuss.elastic.co/u/Manal_A)\ **Replies:** 1\ **Last updated:** [October 16, 2023, 12:58pm UTC](https://discuss.elastic.co/t/entreprise-resource-unit/345104 "2023-10-16T12:58:25Z")
I have a qst about how to calculate Elastic's Enterprise Resource Unit (ERU) licenses. Is it based on system resources or JVM resources? Thank you --- ## [Sort before filter?](https://discuss.elastic.co/t/sort-before-filter/16462)
**Author:** [@David\_Pfeffer](https://discuss.elastic.co/u/David_Pfeffer)\ **Replies:** 2\ **Last updated:** [March 20, 2014, 1:45am UTC](https://discuss.elastic.co/t/sort-before-filter/16462 "2014-03-20T01:45:08Z")
I have an index that contains 30 GB worth of news stories. I want to return the stories that contain a particular name in their text, sorted chronologically. I only want the first 100 stories. ElasticSearch se… --- ## [Cannot parse empty date](https://discuss.elastic.co/t/cannot-parse-empty-date/328687)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 4\ **Last updated:** [March 29, 2023, 7:25am UTC](https://discuss.elastic.co/t/cannot-parse-empty-date/328687 "2023-03-29T07:25:25Z")
Hi there, i'm facing an issue about empty date field. so my data is ingested from csv file. and some row has a empty date field. i already made a condition like this but i keep getting error like this response=\>{"in… --- ## [Trouble with ESXI filters in logstash](https://discuss.elastic.co/t/trouble-with-esxi-filters-in-logstash/36953)
**Author:** [@AthenaInterns](https://discuss.elastic.co/u/AthenaInterns)\ **Replies:** 4\ **Last updated:** [December 11, 2015, 2:43pm UTC](https://discuss.elastic.co/t/trouble-with-esxi-filters-in-logstash/36953 "2015-12-11T14:43:11Z")
hello, I'm having an issue with esxi filters in logstash, getting the grok error even after following the current documentation https://www.elastic.co/guide/en/logstash/current/config-examples.html, here is my config and… --- ## [How do I add Elasticsearch to my website for searching documents by their titles,author name and issue date?](https://discuss.elastic.co/t/how-do-i-add-elasticsearch-to-my-website-for-searching-documents-by-their-titles-author-name-and-issue-date/77274)
**Author:** [@amolt](https://discuss.elastic.co/u/amolt)\ **Replies:** 6\ **Last updated:** [March 3, 2017, 7:42pm UTC](https://discuss.elastic.co/t/how-do-i-add-elasticsearch-to-my-website-for-searching-documents-by-their-titles-author-name-and-issue-date/77274 "2017-03-03T19:42:21Z")
Hello everyone, I am working on a project called University Repository. In this project users upload the document in .pdf .ppt format and the document gets stored in Mongodb. I am able to display all files present in DB … --- ## [Display percentage based on parent aggregation doc\_count](https://discuss.elastic.co/t/display-percentage-based-on-parent-aggregation-doc-count/170370)
**Author:** [@punppis](https://discuss.elastic.co/u/punppis)\ **Replies:** 5\ **Last updated:** [March 14, 2019, 9:53pm UTC](https://discuss.elastic.co/t/display-percentage-based-on-parent-aggregation-doc-count/170370 "2019-03-14T21:53:48Z")
I have a query for daily login retention, which gets sub-buckets (by term filter) of each day (date histogram). Instead of absolute values, I would like to know percentage of each sub-bucket to the parent bucket count. I… --- ## [How to activate security at kubernetes (es, kibana 6.3.2)](https://discuss.elastic.co/t/how-to-activate-security-at-kubernetes-es-kibana-6-3-2/143608)
**Author:** [@kimchigood](https://discuss.elastic.co/u/kimchigood)\ **Replies:** 5\ **Last updated:** [August 10, 2018, 12:44am UTC](https://discuss.elastic.co/t/how-to-activate-security-at-kubernetes-es-kibana-6-3-2/143608 "2018-08-10T00:44:50Z")
i installed elasticsearch and kibana 6.3.2 from docker images. (kubernetes environment) and then i change to trail license. now i can see the x-pack funtion. but i can't activate security funtion (log-in /log-out) i a… --- ## [Setting up a PKI realm using PEM certificates](https://discuss.elastic.co/t/setting-up-a-pki-realm-using-pem-certificates/83049)
**Author:** [@loicber](https://discuss.elastic.co/u/loicber)\ **Replies:** 5\ **Last updated:** [May 11, 2017, 8:29am UTC](https://discuss.elastic.co/t/setting-up-a-pki-realm-using-pem-certificates/83049 "2017-05-11T08:29:54Z")
Hello, I am trying to set up a PKI realm for authentication and I am having trouble with this. I am using elastic search 5.3.0 and I set up a simple cluster of one node hosted on localhost. My purpose is to authenticat… --- ## [Curator Questions: Scheduling and Round-Robin](https://discuss.elastic.co/t/curator-questions-scheduling-and-round-robin/49705)
**Author:** [@jnpetty](https://discuss.elastic.co/u/jnpetty)\ **Replies:** 5\ **Last updated:** [May 12, 2016, 2:46pm UTC](https://discuss.elastic.co/t/curator-questions-scheduling-and-round-robin/49705 "2016-05-12T14:46:47Z")
So I have two questions that I have not been able to find an answer for yet. First and most annoying, is I am unable to schedule Curator to on a daily basis. I have a cron job setup as follows: 20 0 \* \* \* /bin/curator … --- ## [Dec 4th, 2017: \[FR\]\[Elasticsearch\] Advanced REST Java Client](https://discuss.elastic.co/t/dec-4th-2017-fr-elasticsearch-advanced-rest-java-client/108340)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 1\ **Last updated:** [December 8, 2017, 7:50pm UTC](https://discuss.elastic.co/t/dec-4th-2017-fr-elasticsearch-advanced-rest-java-client/108340 "2017-12-08T19:50:21Z")
Aujourd'hui, nous allons vous montrer en quelques lignes comment utiliser le client Java REST d'Elasticsearch. La première chose à faire est d'importer le client dans votre projet : \ \org.elasti… --- ## [Getting 'Badly formatted index, after interpolation still contains placeholder' error when trying to ingest AWS WAF logs](https://discuss.elastic.co/t/getting-badly-formatted-index-after-interpolation-still-contains-placeholder-error-when-trying-to-ingest-aws-waf-logs/340862)
**Author:** [@feo13](https://discuss.elastic.co/u/feo13)\ **Replies:** 3\ **Last updated:** [August 16, 2023, 4:38am UTC](https://discuss.elastic.co/t/getting-badly-formatted-index-after-interpolation-still-contains-placeholder-error-when-trying-to-ingest-aws-waf-logs/340862 "2023-08-16T04:38:19Z")
Hi there, I'm trying to ingest AWS WAF logs with logstash-8.9.0 and send them to my local ELK stack but am getting a 'Badly formatted index, after interpolation still contains placeholder' error. Here's my logstash co… --- ## [Failed to parse date field](https://discuss.elastic.co/t/failed-to-parse-date-field/41481)
**Author:** [@Croos](https://discuss.elastic.co/u/Croos)\ **Replies:** 3\ **Last updated:** [March 14, 2016, 7:01am UTC](https://discuss.elastic.co/t/failed-to-parse-date-field/41481 "2016-03-14T07:01:16Z")
When I select a date range, There is a problem occur in filtering. I want a solution for this error. --- ## [Is it possible to run an APM Agent to monitor a raw windows service?](https://discuss.elastic.co/t/is-it-possible-to-run-an-apm-agent-to-monitor-a-raw-windows-service/302721)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 2\ **Last updated:** [April 19, 2022, 6:14pm UTC](https://discuss.elastic.co/t/is-it-possible-to-run-an-apm-agent-to-monitor-a-raw-windows-service/302721 "2022-04-19T18:14:54Z")
Kibana version: 7.16.3 Elasticsearch version: 7.16.3 APM Server version: 7.16.3 I want to know if is possible to monitor a Windows service with an APM Agent, I know that on APM Agents list is shown what is supported (… --- ## [Boosting specific documents in search results](https://discuss.elastic.co/t/boosting-specific-documents-in-search-results/59953)
**Author:** [@111106](https://discuss.elastic.co/u/111106)\ **Replies:** 2\ **Last updated:** [September 8, 2016, 8:02am UTC](https://discuss.elastic.co/t/boosting-specific-documents-in-search-results/59953 "2016-09-08T08:02:09Z")
I have this relatively complex search query that's already being built for the purposes of my application by my backend API. Now, I want to implement additional functionality on top of it, which would allow to supply a… --- ## [Memory leak in Logstash 6.0.0](https://discuss.elastic.co/t/memory-leak-in-logstash-6-0-0/120095)
**Author:** [@vineet](https://discuss.elastic.co/u/vineet)\ **Replies:** 8\ **Last updated:** [February 18, 2018, 6:02pm UTC](https://discuss.elastic.co/t/memory-leak-in-logstash-6-0-0/120095 "2018-02-18T18:02:54Z")
Hello, I am looking for help with Logstash 6.0.0. Winlogbeat is sending logs to Logstash 6.0.0 which is running on a 8 GB machine with 4 GB min/max heap size. Over a period of a few hours, Logstash uses up all the memor… --- ## [Filebeat restart repeatedly with throwing out of memory in runtime](https://discuss.elastic.co/t/filebeat-restart-repeatedly-with-throwing-out-of-memory-in-runtime/103314)
**Author:** [@Kyle-Wilson1](https://discuss.elastic.co/u/Kyle-Wilson1)\ **Replies:** 8\ **Last updated:** [October 13, 2017, 7:40am UTC](https://discuss.elastic.co/t/filebeat-restart-repeatedly-with-throwing-out-of-memory-in-runtime/103314 "2017-10-13T07:40:01Z")
log shows the following: client mode check start 2017-10-10 07:40:58.303980858 +0000 UTC client mode check start 2017-10-10 07:41:01.305266634 +0000 UTC client mode check start 2017-10-10 07:41:04.506058547 +0000 UTC f… --- ## [Unique count two fields combined](https://discuss.elastic.co/t/unique-count-two-fields-combined/268987)
**Author:** [@kasun](https://discuss.elastic.co/u/kasun)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 6:59am UTC](https://discuss.elastic.co/t/unique-count-two-fields-combined/268987 "2021-04-01T06:59:49Z")
Hi all, For a pie chart, I am using unique count aggregation as the metric. However, I need to get the unique count when two fields combined. Is this possible using the advanced option in kibana visualizations? As an e… --- ## [Logstash date filter won't parse my date field](https://discuss.elastic.co/t/logstash-date-filter-wont-parse-my-date-field/91146)
**Author:** [@Tomer\_Lev](https://discuss.elastic.co/u/Tomer_Lev)\ **Replies:** 7\ **Last updated:** [June 29, 2017, 9:06am UTC](https://discuss.elastic.co/t/logstash-date-filter-wont-parse-my-date-field/91146 "2017-06-29T09:06:13Z")
Hi :smile: TL;DR logstash won't parse date field; date field parsed as string... I'm trying to parse my date field using logstash date filter but with no success... looks like it is not override the @timestamp field… [Previous page](https://discuss.elastic.co/top.md?page=635&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=637&per_page=50&period=all)