# Top **URL:** https://discuss.elastic.co/top.md?page=650&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 651 --- ## [Webhdfs Output plugin does not login with Keytab](https://discuss.elastic.co/t/webhdfs-output-plugin-does-not-login-with-keytab/132164)
**Author:** [@Felipe\_Manzur](https://discuss.elastic.co/u/Felipe_Manzur)\ **Replies:** 6\ **Last updated:** [May 24, 2018, 12:05pm UTC](https://discuss.elastic.co/t/webhdfs-output-plugin-does-not-login-with-keytab/132164 "2018-05-24T12:05:32Z")
Hi, I configured a pipeline using the webhdfs output plugin, but i'm having trouble to login into kerberos using a keytab. If i login by command line using the keytab "kinit -kt \ " , i get the kerberos tic… --- ## [Kibana as a windows service : "Error 5: Access is Denied" on start](https://discuss.elastic.co/t/kibana-as-a-windows-service-error-5-access-is-denied-on-start/131309)
**Author:** [@stennett](https://discuss.elastic.co/u/stennett)\ **Replies:** 5\ **Last updated:** [May 14, 2018, 1:20pm UTC](https://discuss.elastic.co/t/kibana-as-a-windows-service-error-5-access-is-denied-on-start/131309 "2018-05-14T13:20:10Z")
Hi I'm trying to get Kibana running as a windows service on an instance of Windows Server 2016. I've followed the instructions to install Kibana detailed here: https://www.elastic.co/guide/en/kibana/current/windows.htm… --- ## [How to create grok filter based on targeted word in message?](https://discuss.elastic.co/t/how-to-create-grok-filter-based-on-targeted-word-in-message/194686)
**Author:** [@Bob94](https://discuss.elastic.co/u/Bob94)\ **Replies:** 6\ **Last updated:** [August 11, 2019, 1:00pm UTC](https://discuss.elastic.co/t/how-to-create-grok-filter-based-on-targeted-word-in-message/194686 "2019-08-11T13:00:37Z")
Hi guys please verify whether this is the proper way to use grok ? If "i am happy: true" in \[message\] { grok { match =\> "message" , "%{GREEDYDATA:myfield"} } My intension is to create a new field based on spesific st… --- ## [Metricbeat 5.1.2 does not start automatically](https://discuss.elastic.co/t/metricbeat-5-1-2-does-not-start-automatically/86165)
**Author:** [@open\_door8](https://discuss.elastic.co/u/open_door8)\ **Replies:** 6\ **Last updated:** [May 18, 2017, 5:58pm UTC](https://discuss.elastic.co/t/metricbeat-5-1-2-does-not-start-automatically/86165 "2017-05-18T17:58:19Z")
Hi, Elastic team I have Metricbeat 5.1.2 installed on Client machine (Windows 7 32-bit). It does not start automatically (other Beats - Filebeat, Winlogbeat, Packetbeat, and Heartbeat - started automatically without p… --- ## [Kibana TSVB Maths and 1st bucket](https://discuss.elastic.co/t/kibana-tsvb-maths-and-1st-bucket/216972)
**Author:** [@pchanas](https://discuss.elastic.co/u/pchanas)\ **Replies:** 4\ **Last updated:** [January 31, 2020, 8:40pm UTC](https://discuss.elastic.co/t/kibana-tsvb-maths-and-1st-bucket/216972 "2020-01-31T20:40:08Z")
Hi Moving to Kibana 7.4 (same with 7.5), I have an issue with a TSVB viz. I have 2 time series (simple sum) : num and denom. I have to compute the ration in a Math agg: I get the following: By replacing the fo… --- ## [Keyword, doc\_value and analysis](https://discuss.elastic.co/t/keyword-doc-value-and-analysis/196634)
**Author:** [@newbie1](https://discuss.elastic.co/u/newbie1)\ **Replies:** 2\ **Last updated:** [August 25, 2019, 3:04pm UTC](https://discuss.elastic.co/t/keyword-doc-value-and-analysis/196634 "2019-08-25T15:04:39Z")
Hi, I am confused about keyowrd, doc\_value and analysis. I found two topics (/keyword-datatype-and-analysis/66359 and help-understanding-keyword-vs-not-analyzed/10374 ) on this subjet but i am not able to understant if… --- ## [Example showing how to best use fuzzy multiterm/phrase matching?](https://discuss.elastic.co/t/example-showing-how-to-best-use-fuzzy-multiterm-phrase-matching/278598)
**Author:** [@nahh](https://discuss.elastic.co/u/nahh)\ **Replies:** 3\ **Last updated:** [July 14, 2021, 3:20pm UTC](https://discuss.elastic.co/t/example-showing-how-to-best-use-fuzzy-multiterm-phrase-matching/278598 "2021-07-14T15:20:30Z")
I'm looking for a complete example showing how you can effectively perform fuzzy phrase matching, to get useful results as a user types text. So far, the closest I've got is splitting the search query string into words … --- ## [Logstash filter event.get() is hard to debug](https://discuss.elastic.co/t/logstash-filter-event-get-is-hard-to-debug/98662)
**Author:** [@John\_ax](https://discuss.elastic.co/u/John_ax)\ **Replies:** 3\ **Last updated:** [August 30, 2017, 2:16am UTC](https://discuss.elastic.co/t/logstash-filter-event-get-is-hard-to-debug/98662 "2017-08-30T02:16:49Z")
Hi, I am using logstash 5.1.1, got lots of ERROR logs, so I try this: echo '{"msg":"xxxx", "@timestamp":"2017-08-28T08:16:54.943Z", "service":"x.y.z", "host":"ubuntu","timestamp":1503908214}' | ./logstash -e 'input {… --- ## [HTTP Input - Recording Full JSON Message](https://discuss.elastic.co/t/http-input-recording-full-json-message/88483)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 3\ **Last updated:** [June 12, 2017, 8:12pm UTC](https://discuss.elastic.co/t/http-input-recording-full-json-message/88483 "2017-06-12T20:12:10Z")
I've got an HTTP input on Logstash v5.4.0. I'm trying to record the full JSON message that is posted along with all the fields. I've tried something similar to the following input with no luck. Any ideas on what I'm d… --- ## [Snapshot restore process is not finished](https://discuss.elastic.co/t/snapshot-restore-process-is-not-finished/21152)
**Author:** [@costya](https://discuss.elastic.co/u/costya)\ **Replies:** 3\ **Last updated:** [July 13, 2015, 10:31am UTC](https://discuss.elastic.co/t/snapshot-restore-process-is-not-finished/21152 "2015-07-13T10:31:02Z")
Hi , We have recently upgraded our Elasticsearch cluster to version 1.4.1 , i did a snapshot to one of the indexes (Index 2014\_11,size:1.44 Ti with 1 Replica)and it was successful. When i am trying to restore t… --- ## [Unable to login to Kibana by using LDAP user who is having a superuser role](https://discuss.elastic.co/t/unable-to-login-to-kibana-by-using-ldap-user-who-is-having-a-superuser-role/242218)
**Author:** [@elkusergrr](https://discuss.elastic.co/u/elkusergrr)\ **Replies:** 7\ **Last updated:** [July 24, 2020, 1:36pm UTC](https://discuss.elastic.co/t/unable-to-login-to-kibana-by-using-ldap-user-who-is-having-a-superuser-role/242218 "2020-07-24T13:36:24Z")
Hi, I am unable to login to Kibana by using an LDAP user who is having a superuser role. Getting below the exception. {"statusCode":401,"error":"Unauthorized","message":"\[security\_exception\] unable to authenticate user… --- ## [How do I display count in kibana 6 pie legend?](https://discuss.elastic.co/t/how-do-i-display-count-in-kibana-6-pie-legend/121283)
**Author:** [@egulik](https://discuss.elastic.co/u/egulik)\ **Replies:** 1\ **Last updated:** [February 23, 2018, 9:37pm UTC](https://discuss.elastic.co/t/how-do-i-display-count-in-kibana-6-pie-legend/121283 "2018-02-23T21:37:15Z")
I'm creating visualization (pie chart) for response codes from apache\_error and apache\_access logs. This works great but how can I add count next to 'codes' in the legend. Please see attached picture. \[kibana-screen1\] … --- ## [Manually move replica shard to another node](https://discuss.elastic.co/t/manually-move-replica-shard-to-another-node/249554)
**Author:** [@Feedy](https://discuss.elastic.co/u/Feedy)\ **Replies:** 6\ **Last updated:** [September 23, 2020, 5:08pm UTC](https://discuss.elastic.co/t/manually-move-replica-shard-to-another-node/249554 "2020-09-23T17:08:51Z")
I have an unassigned replica shard that I need to assign to a node but the only node available that has "room" already has the same primary shard assigned to it. My setup: 4 node cluster with 1 replica. I only have an i… --- ## [Run elasticsearch on startup - Ubuntu SysV install not working](https://discuss.elastic.co/t/run-elasticsearch-on-startup-ubuntu-sysv-install-not-working/45278)
**Author:** [@Nick\_Bauer](https://discuss.elastic.co/u/Nick_Bauer)\ **Replies:** 2\ **Last updated:** [March 26, 2016, 5:18pm UTC](https://discuss.elastic.co/t/run-elasticsearch-on-startup-ubuntu-sysv-install-not-working/45278 "2016-03-26T17:18:17Z")
I am installing elasticsearch 2.2.1 on Ubuntu 14.04. Following this guide https://www.elastic.co/guide/en/elasticsearch/reference/current/setup-repositories.html Ubuntu 14.04 has SysV (/etc/init.d) when running $ sud… --- ## [Complex xml/json data insert](https://discuss.elastic.co/t/complex-xml-json-data-insert/179796)
**Author:** [@Niels\_van\_Rijn](https://discuss.elastic.co/u/Niels_van_Rijn)\ **Replies:** 8\ **Last updated:** [May 8, 2019, 7:59am UTC](https://discuss.elastic.co/t/complex-xml-json-data-insert/179796 "2019-05-08T07:59:49Z")
Hi there! I'm new to the ELK stack and I need some advice for inserting my complex xml's into the ELK stack here you can see an example of only one of 10.163 xml's I have used the xml filter in logstash but this creat… --- ## [Provided Grok patterns do not match data in the input](https://discuss.elastic.co/t/provided-grok-patterns-do-not-match-data-in-the-input/213601)
**Author:** [@Yasso](https://discuss.elastic.co/u/Yasso)\ **Replies:** 4\ **Last updated:** [January 5, 2020, 4:27am UTC](https://discuss.elastic.co/t/provided-grok-patterns-do-not-match-data-in-the-input/213601 "2020-01-05T04:27:38Z")
hello guys i want to parse that log : 55.3.244.1 GET /index.html 10024 0.043 \[2012-01-31 07:19:54 \] when i'm using this patters : %{IP:client} %{WORD:method} %{URIPATHPARAM:request} %{NUMBER:bytes} %{NUMBER:duration} … --- ## [How to display percentage graph?](https://discuss.elastic.co/t/how-to-display-percentage-graph/133845)
**Author:** [@doume06](https://discuss.elastic.co/u/doume06)\ **Replies:** 4\ **Last updated:** [June 25, 2018, 9:27am UTC](https://discuss.elastic.co/t/how-to-display-percentage-graph/133845 "2018-06-25T09:27:11Z")
Hi, I have a field in my index giving the status of an order: 'Rejected' or 'ordered' or other statuses. I want to display in a graph (bars, month per month) the percentage of Rejected ONLY. I mean not the one with 100 … --- ## [New fields not in elasticsearch template](https://discuss.elastic.co/t/new-fields-not-in-elasticsearch-template/79692)
**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\ **Replies:** 4\ **Last updated:** [March 27, 2017, 2:06am UTC](https://discuss.elastic.co/t/new-fields-not-in-elasticsearch-template/79692 "2017-03-27T02:06:56Z")
What happens when my logstash has a new field e,g. field33 which I did not have a matching entry in the elasticsearch template? Will records with the field33 be automatically discarded --- ## [Which node do I have to communicate in ElasticSearch Cluster?](https://discuss.elastic.co/t/which-node-do-i-have-to-communicate-in-elasticsearch-cluster/122199)
**Author:** [@Kamome](https://discuss.elastic.co/u/Kamome)\ **Replies:** 3\ **Last updated:** [March 5, 2018, 7:21am UTC](https://discuss.elastic.co/t/which-node-do-i-have-to-communicate-in-elasticsearch-cluster/122199 "2018-03-05T07:21:51Z")
I'm planning to build ES Cluster with dedicated Master, Coordinate, Ingest and Data nodes. (I didn't separated roles in my first ES Cluster, and it became quite slow over time.) Member of cluster will be like this: 2… --- ## [JSON filter gives warning that it requires a target](https://discuss.elastic.co/t/json-filter-gives-warning-that-it-requires-a-target/114378)
**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\ **Replies:** 3\ **Last updated:** [January 6, 2018, 9:13pm UTC](https://discuss.elastic.co/t/json-filter-gives-warning-that-it-requires-a-target/114378 "2018-01-06T21:13:18Z")
\[2018-01-06T03:41:04,492\]\[WARN \]\[logstash.filters.json \] Parsed JSON object/hash requires a target configuration option {:source=\>"extras", :raw=\>""} I don't have a target set because I read in the documentation th… --- ## [ElasticSearch Backup using Rsync](https://discuss.elastic.co/t/elasticsearch-backup-using-rsync/69916)
**Author:** [@sjothi](https://discuss.elastic.co/u/sjothi)\ **Replies:** 3\ **Last updated:** [December 27, 2016, 7:26pm UTC](https://discuss.elastic.co/t/elasticsearch-backup-using-rsync/69916 "2016-12-27T19:26:51Z")
Hi Folks, I have a couple of questions regarding Elasticsearch backup. Do I need to the backup of Elasticsearch node? Note - I am using Elasticsearch with Bitbucket. How to take the Elasticsearch backup using Rsync… --- ## [Difference between (event.module: system - event.action: user\_login) AND (event.module: auditd - event.action: logged-in)](https://discuss.elastic.co/t/difference-between-event-module-system-event-action-user-login-and-event-module-auditd-event-action-logged-in/279712)
**Author:** [@panagiss](https://discuss.elastic.co/u/panagiss)\ **Replies:** 2\ **Last updated:** [July 27, 2021, 4:03pm UTC](https://discuss.elastic.co/t/difference-between-event-module-system-event-action-user-login-and-event-module-auditd-event-action-logged-in/279712 "2021-07-27T16:03:48Z")
I have set on a host both packetbeat and auditbeat. I wanted to set a rule about login events but it confuses me a bit the separation between event.module: system and event.module: auditd. At the SIEM overview there is … --- ## [Warm storage of large (9TB) log data archives](https://discuss.elastic.co/t/warm-storage-of-large-9tb-log-data-archives/42259)
**Author:** [@AGR](https://discuss.elastic.co/u/AGR)\ **Replies:** 2\ **Last updated:** [February 19, 2016, 3:48pm UTC](https://discuss.elastic.co/t/warm-storage-of-large-9tb-log-data-archives/42259 "2016-02-19T15:48:31Z")
Hello, We are working on a PoC to index large volumes of web log files - approx 200GB/day raw (400GB/day after indexing). Based on initial tests we think we can dedicate appropriate hardware to the 'hot' nodes which in… --- ## [Filebeat reports intermittent errors, sometimes successful, sometimes not!](https://discuss.elastic.co/t/filebeat-reports-intermittent-errors-sometimes-successful-sometimes-not/170083)
**Author:** [@TD1900](https://discuss.elastic.co/u/TD1900)\ **Replies:** 2\ **Last updated:** [February 28, 2019, 7:06am UTC](https://discuss.elastic.co/t/filebeat-reports-intermittent-errors-sometimes-successful-sometimes-not/170083 "2019-02-28T07:06:07Z")
Here is the output of docker logs! The original version 6.4.1 had this error, but now I change to 6.6.1 and still have this problem. Please help me analyze it, thank you! 2019-02-27T08:01:31.471+0700 ERROR pipeline/ou… --- ## [Alias and Write index](https://discuss.elastic.co/t/alias-and-write-index/167873)
**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\ **Replies:** 2\ **Last updated:** [February 17, 2019, 9:27am UTC](https://discuss.elastic.co/t/alias-and-write-index/167873 "2019-02-17T09:27:58Z")
Hello, I have problem with setting an write index within alias. Could you please tell me what am I doing wrong? I am using Elasticsearch version 6.3.2. I tried steps below on version 6.5.4 and it worked well. CREATING… --- ## [Metricbeat Error while enrolling: fail to execute the HTTP POST request: Post https://kibana](https://discuss.elastic.co/t/metricbeat-error-while-enrolling-fail-to-execute-the-http-post-request-post-https-kibana/162979)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 2\ **Last updated:** [January 23, 2019, 2:27pm UTC](https://discuss.elastic.co/t/metricbeat-error-while-enrolling-fail-to-execute-the-http-post-request-post-https-kibana/162979 "2019-01-23T14:27:03Z")
Elasticsearch 6.5.1 XPack enabled, TLS/SSL encryption enabled Setup: Metricbeat--\>Logstash--\>Elasticsearch\<--Kibana I've been trying to enroll a metricbeat on a Windows Server 2016 box through the Central Managaement … --- ## [Building filebeat from source](https://discuss.elastic.co/t/building-filebeat-from-source/135559)
**Author:** [@George\_Kraft](https://discuss.elastic.co/u/George_Kraft)\ **Replies:** 2\ **Last updated:** [June 12, 2018, 8:27pm UTC](https://discuss.elastic.co/t/building-filebeat-from-source/135559 "2018-06-12T20:27:32Z")
I would like to build filebeat from source. Here are my requirements. Download https://github.com/elastic/beats/archive/v6.2.4.tar.gz once. No Internet access during build. phase 1, build Intel image for Linux phase 2… --- ## [Elasticsearch name cannot be empty string error](https://discuss.elastic.co/t/elasticsearch-name-cannot-be-empty-string-error/75187)
**Author:** [@Zeeshan\_Alam](https://discuss.elastic.co/u/Zeeshan_Alam)\ **Replies:** 2\ **Last updated:** [February 16, 2017, 6:57am UTC](https://discuss.elastic.co/t/elasticsearch-name-cannot-be-empty-string-error/75187 "2017-02-16T06:57:55Z")
I am sending events from Logstash 5.2.0 to Elasticsearch 5.2.0, but some of the events are rejected by elasticsearch and I am getting the following error: \[2017-02-15T05: 36: 23, 145\]\[WARN\]\[logstash.outputs.elasticsea… --- ## [Is there limit for alias indexes?](https://discuss.elastic.co/t/is-there-limit-for-alias-indexes/53537)
**Author:** [@metload](https://discuss.elastic.co/u/metload)\ **Replies:** 2\ **Last updated:** [June 21, 2016, 5:13pm UTC](https://discuss.elastic.co/t/is-there-limit-for-alias-indexes/53537 "2016-06-21T17:13:13Z")
Hi everybody, I am creating a daily index and set these to a specific alias and I have the doubt, is this a good practice or is there a performance problem? --- ## [SOAP request with logstash](https://discuss.elastic.co/t/soap-request-with-logstash/188969)
**Author:** [@He\_Pamela](https://discuss.elastic.co/u/He_Pamela)\ **Replies:** 5\ **Last updated:** [July 9, 2019, 9:06pm UTC](https://discuss.elastic.co/t/soap-request-with-logstash/188969 "2019-07-09T21:06:29Z")
Hi, I'd need to recibe a Soap response from a web service. I coudn't find an oficial documentation and I don't now how to do that with the http poller input from logstash. Somebody nows how to do this? Thanks. --- ## [Data sending to ES without using Filebeat](https://discuss.elastic.co/t/data-sending-to-es-without-using-filebeat/147361)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 5\ **Last updated:** [September 5, 2018, 12:36pm UTC](https://discuss.elastic.co/t/data-sending-to-es-without-using-filebeat/147361 "2018-09-05T12:36:16Z")
HI, I want to send data from logstash to ES without filebeat. I use docker command to start the logstash service and log is JSON. pLease find the below code and tell me where im commiting mistake, input{ file{ path =\>… --- ## [X-Pack authentication](https://discuss.elastic.co/t/x-pack-authentication/78519)
**Author:** [@living\_jordi](https://discuss.elastic.co/u/living_jordi)\ **Replies:** 5\ **Last updated:** [March 14, 2017, 3:39pm UTC](https://discuss.elastic.co/t/x-pack-authentication/78519 "2017-03-14T15:39:40Z")
I've installed x-pack into my elasticsearch: curl --user u:p 'localhost:9200/\_xpack': { "build" : { "hash" : "e016ba5", "date" : "2017-01-24T20:17:08.168Z" }, "license" : { "uid" : "a5a93479-cdd1-44c0-… --- ## [Elastic index analyzed but not searchable](https://discuss.elastic.co/t/elastic-index-analyzed-but-not-searchable/27205)
**Author:** [@FrankC](https://discuss.elastic.co/u/FrankC)\ **Replies:** 5\ **Last updated:** [August 12, 2015, 4:52pm UTC](https://discuss.elastic.co/t/elastic-index-analyzed-but-not-searchable/27205 "2015-08-12T16:52:35Z")
I loaded sample data below using a template. The "str\_type\_analyzed" field is set to "analyzed". However, in Kibana 4 I do not get any hits when I search for "red". It does not matter if I type use double quotes or not. … --- ## [Turn off “Elasticsearch built-in security features are not enabled” notifications from Python?](https://discuss.elastic.co/t/turn-off-elasticsearch-built-in-security-features-are-not-enabled-notifications-from-python/325034)
**Author:** [@mmoraschini](https://discuss.elastic.co/u/mmoraschini)\ **Replies:** 1\ **Last updated:** [February 9, 2023, 9:43am UTC](https://discuss.elastic.co/t/turn-off-elasticsearch-built-in-security-features-are-not-enabled-notifications-from-python/325034 "2023-02-09T09:43:51Z")
With respect to this question Which is about silencing the error ElasticsearchWarning: Elasticsearch built-in security features are not enabled. Without authentication, your cluster could be accessible to anyone. See… --- ## [Integration of Talend with Elasticsearch](https://discuss.elastic.co/t/integration-of-talend-with-elasticsearch/70775)
**Author:** [@Prateek\_Kshtriya](https://discuss.elastic.co/u/Prateek_Kshtriya)\ **Replies:** 1\ **Last updated:** [January 7, 2017, 6:04pm UTC](https://discuss.elastic.co/t/integration-of-talend-with-elasticsearch/70775 "2017-01-07T18:04:49Z")
Hi All, Please suggest how to integrate Talentd open studio big data with elasticsearch. It is required to utilize the data generated from Talentd on performing some activity to create a meaningful dashboard using ELK. … --- ## [How does the ES to handle strings with different encodings?](https://discuss.elastic.co/t/how-does-the-es-to-handle-strings-with-different-encodings/16100)
**Author:** [@Ivan\_Ji](https://discuss.elastic.co/u/Ivan_Ji)\ **Replies:** 1\ **Last updated:** [March 3, 2014, 12:34pm UTC](https://discuss.elastic.co/t/how-does-the-es-to-handle-strings-with-different-encodings/16100 "2014-03-03T12:34:20Z")
Hi all, I am using python to communicate with ES. I know the ES use UTF8 encoding. But when I insert a unicode into ES, does it try to encode it into UTF8? Because I encounter an situation, I insert two document… --- ## [Kibana 7 Left bar items (Start with only basic menus)](https://discuss.elastic.co/t/kibana-7-left-bar-items-start-with-only-basic-menus/176307)
**Author:** [@fragatina](https://discuss.elastic.co/u/fragatina)\ **Replies:** 6\ **Last updated:** [April 26, 2019, 5:12pm UTC](https://discuss.elastic.co/t/kibana-7-left-bar-items-start-with-only-basic-menus/176307 "2019-04-26T17:12:20Z")
Congrats with the release of 7.0 elasticstack. I've just installed kibana 7.0. Is it posible to have a light weight version with only basic functions enabled on the left side bar? I'm only interested in discover, visua… --- ## [Logstash errors on filebeat received apache logs](https://discuss.elastic.co/t/logstash-errors-on-filebeat-received-apache-logs/135808)
**Author:** [@ocabj](https://discuss.elastic.co/u/ocabj)\ **Replies:** 6\ **Last updated:** [June 15, 2018, 1:46am UTC](https://discuss.elastic.co/t/logstash-errors-on-filebeat-received-apache-logs/135808 "2018-06-15T01:46:01Z")
After an upgrade from 6.2 to 6.3, I am now getting indexing errors for apache logs. \[2018-06-13T16:12:18,782\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["inde… --- ## [All visualization & Dashboard are gone after upgrade](https://discuss.elastic.co/t/all-visualization-dashboard-are-gone-after-upgrade/144326)
**Author:** [@w0lfxpunk](https://discuss.elastic.co/u/w0lfxpunk)\ **Replies:** 4\ **Last updated:** [August 20, 2018, 5:55pm UTC](https://discuss.elastic.co/t/all-visualization-dashboard-are-gone-after-upgrade/144326 "2018-08-20T17:55:16Z")
Hello All, I have upgraded Elastic Stack from 6.2 to 6.3 and since then all of my visualization and dashboard which I have created are gone. I can't see them at all, is there a way I can get them back? W0lfxPunk --- ## [Create weekday barchart from timestamp](https://discuss.elastic.co/t/create-weekday-barchart-from-timestamp/139053)
**Author:** [@OlivierV](https://discuss.elastic.co/u/OlivierV)\ **Replies:** 4\ **Last updated:** [July 10, 2018, 1:05pm UTC](https://discuss.elastic.co/t/create-weekday-barchart-from-timestamp/139053 "2018-07-10T13:05:27Z")
Hi, I am trying to create a bar chart where I have both the average documents count per day of the week (eg Monday to Sunday) over the entire period and the documents count over the current week. So far I have only man… --- ## [File beats in docker. How to access host logs?](https://discuss.elastic.co/t/file-beats-in-docker-how-to-access-host-logs/127313)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 4\ **Last updated:** [April 9, 2018, 5:34pm UTC](https://discuss.elastic.co/t/file-beats-in-docker-how-to-access-host-logs/127313 "2018-04-09T17:34:54Z")
Hi, I am thinking of running filebeat in a docker container. But I wanna ship logs from the host. What is the best practice? Use a volume to make the host logs accessible from inside of the docker container? Or how? T… --- ## [How to mention parent child relation in logstash](https://discuss.elastic.co/t/how-to-mention-parent-child-relation-in-logstash/57376)
**Author:** [@spraveenjd](https://discuss.elastic.co/u/spraveenjd)\ **Replies:** 2\ **Last updated:** [September 6, 2016, 2:17pm UTC](https://discuss.elastic.co/t/how-to-mention-parent-child-relation-in-logstash/57376 "2016-09-06T14:17:06Z")
We can create parent child relation in the mapping document. How to do it in the logstash. Please help on this --- ## [Using ElasticSearch as a replacement for grep + sed](https://discuss.elastic.co/t/using-elasticsearch-as-a-replacement-for-grep-sed/85679)
**Author:** [@magnusw](https://discuss.elastic.co/u/magnusw)\ **Replies:** 1\ **Last updated:** [May 14, 2017, 7:53pm UTC](https://discuss.elastic.co/t/using-elasticsearch-as-a-replacement-for-grep-sed/85679 "2017-05-14T19:53:10Z")
Hi everyone, TLDR: Can I use ElasticSearch backend + some sort of front end to "real-time" filter single log files? Somewhat like grep-functionality in the terminal. Background: In the company I work for, we often ge… --- ## [Put Elasticsearch behind Apache](https://discuss.elastic.co/t/put-elasticsearch-behind-apache/226233)
**Author:** [@Bergy27](https://discuss.elastic.co/u/Bergy27)\ **Replies:** 5\ **Last updated:** [April 3, 2020, 1:33pm UTC](https://discuss.elastic.co/t/put-elasticsearch-behind-apache/226233 "2020-04-03T13:33:04Z")
Hi guys, Maybe my question is dumb but I have an issue. I work on a remote server and I started Elasticsearch on default port (9200). The problem is that this port is closed from the outside. We can't access Elasticsear… --- ## [Painless script break out of inner for loop using labels](https://discuss.elastic.co/t/painless-script-break-out-of-inner-for-loop-using-labels/104421)
**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\ **Replies:** 2\ **Last updated:** [October 18, 2017, 7:06pm UTC](https://discuss.elastic.co/t/painless-script-break-out-of-inner-for-loop-using-labels/104421 "2017-10-18T19:06:30Z")
I would like to have a watch with script condition which returns true based on condition in my inner most for loop. I have logic created with labeled for loop, as it is part of the Java control flow mentioned in doc her… --- ## [How do I enable TLS1.2 only and disable weak ssl ciphers in Kibana 7.0?](https://discuss.elastic.co/t/how-do-i-enable-tls1-2-only-and-disable-weak-ssl-ciphers-in-kibana-7-0/265845)
**Author:** [@rahulj](https://discuss.elastic.co/u/rahulj)\ **Replies:** 1\ **Last updated:** [March 1, 2021, 8:08pm UTC](https://discuss.elastic.co/t/how-do-i-enable-tls1-2-only-and-disable-weak-ssl-ciphers-in-kibana-7-0/265845 "2021-03-01T20:08:37Z")
Our InfoSec scans report that Kibana 7.0 service is supporting weak protocols and weak cipher suites. I am trying to find how to disable TLS 1.1 and below protocols and remove specific ciphers from Kibana service. Any h… --- ## [\_cat/indices data](https://discuss.elastic.co/t/cat-indices-data/195070)
**Author:** [@rorixrebel](https://discuss.elastic.co/u/rorixrebel)\ **Replies:** 6\ **Last updated:** [August 14, 2019, 2:24pm UTC](https://discuss.elastic.co/t/cat-indices-data/195070 "2019-08-14T14:24:56Z")
so i'd like to start visualize some of the data from the \_cat apis like indices, volume and replicas, etc. tried to see if i could scrape the info from .monitoring-es but no dice, is the data from the api somewhere we c… --- ## [Best query to only return documents matching a nested unique id 'id' and not the ES \_id field?](https://discuss.elastic.co/t/best-query-to-only-return-documents-matching-a-nested-unique-id-id-and-not-the-es-id-field/254986)
**Author:** [@M\_Gibbs](https://discuss.elastic.co/u/M_Gibbs)\ **Replies:** 8\ **Last updated:** [November 16, 2020, 9:26am UTC](https://discuss.elastic.co/t/best-query-to-only-return-documents-matching-a-nested-unique-id-id-and-not-the-es-id-field/254986 "2020-11-16T09:26:30Z")
Hey all, I've been pulling my hair out a bit with this. We are running a basic query which matches a set of unique id's - this works perfectly when querying the ES \_id field. But when we try to match a nested id field… --- ## ['\[bool\] malformed query, expected \[END\_OBJECT\] but found \[FIELD\_NAME\]'](https://discuss.elastic.co/t/bool-malformed-query-expected-end-object-but-found-field-name/317862)
**Author:** [@Shobhit\_Jain1](https://discuss.elastic.co/u/Shobhit_Jain1)\ **Replies:** 1\ **Last updated:** [November 1, 2022, 11:26am UTC](https://discuss.elastic.co/t/bool-malformed-query-expected-end-object-but-found-field-name/317862 "2022-11-01T11:26:11Z")
I am running the following query in Elasticsearch and for some reason I am getting an error: elasticsearch.exceptions.RequestError: RequestError(400, 'x\_content\_parse\_exception', '\[bool\] malformed query, expected \[END\_O… --- ## [Different version between Elasticsearch and Logstash](https://discuss.elastic.co/t/different-version-between-elasticsearch-and-logstash/274567)
**Author:** [@111475](https://discuss.elastic.co/u/111475)\ **Replies:** 5\ **Last updated:** [June 2, 2021, 1:51pm UTC](https://discuss.elastic.co/t/different-version-between-elasticsearch-and-logstash/274567 "2021-06-02T13:51:10Z")
Is it okay to run Logstash with version(7.13.0) different from our Elasticsearch version(7.10.2)? [Previous page](https://discuss.elastic.co/top.md?page=649&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=651&per_page=50&period=all)