# Top

**URL:** https://discuss.elastic.co/top.md?page=651&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 652

---

## [Marvell 2.1.1 error from GET /api/marvel/v1/clusters](https://discuss.elastic.co/t/marvell-2-1-1-error-from-get-api-marvel-v1-clusters/37888)

<div class="topic-metadata">

**Author:** [@tinle](https://discuss.elastic.co/u/tinle)\
**Replies:** 5\
**Last updated:** [December 24, 2015, 9:16pm UTC](https://discuss.elastic.co/t/marvell-2-1-1-error-from-get-api-marvel-v1-clusters/37888 "2015-12-24T21:16:00Z")

</div>

Re-post to create new thread. I am seeing similar, e.g. my marvel page shows blank (attached screen cap). I installed from internet. ES v2.1.1 LS v2.1.1 Kibana4 v4.3.1 Marvel 2.1.1 I've cleared the browser cache (usi…

---

## [Any way to index but not save parts of the document?](https://discuss.elastic.co/t/any-way-to-index-but-not-save-parts-of-the-document/4691)

<div class="topic-metadata">

**Author:** [@mattx](https://discuss.elastic.co/u/mattx)\
**Replies:** 5\
**Last updated:** [June 29, 2011, 12:02pm UTC](https://discuss.elastic.co/t/any-way-to-index-but-not-save-parts-of-the-document/4691 "2011-06-29T12:02:31Z")

</div>

Hi, I'm sorry if this is documented somewhere but I cannot find it. Although I do think I remember reading it. I want to index some email messages for search but they are already in a database so I do not want…

---

## [Combining multiline entries based on a common unique ID](https://discuss.elastic.co/t/combining-multiline-entries-based-on-a-common-unique-id/98611)

<div class="topic-metadata">

**Author:** [@TJelastico](https://discuss.elastic.co/u/TJelastico)\
**Replies:** 4\
**Last updated:** [August 30, 2017, 8:14pm UTC](https://discuss.elastic.co/t/combining-multiline-entries-based-on-a-common-unique-id/98611 "2017-08-30T20:14:36Z")

</div>

Hi, I have a single log file which contains several multi-line log formats that defy a using a single set of multiline.pattern, multiline.match, and multiline.negate entries. Using multiple OR statements in multiline.pa…

---

## [Issue Authenticating with Active Directory](https://discuss.elastic.co/t/issue-authenticating-with-active-directory/58481)

<div class="topic-metadata">

**Author:** [@nate.fleming](https://discuss.elastic.co/u/nate.fleming)\
**Replies:** 4\
**Last updated:** [August 22, 2016, 6:52pm UTC](https://discuss.elastic.co/t/issue-authenticating-with-active-directory/58481 "2016-08-22T18:52:39Z")

</div>

I am working on configuring Shield for authentication and authorization and have run into some issues with the Active Directory integration. I have used ldapsearch as well as my own Java application which can authentica…

---

## [Kubernetes pods found, but all metrics 0%](https://discuss.elastic.co/t/kubernetes-pods-found-but-all-metrics-0/180061)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 6\
**Last updated:** [May 8, 2019, 4:03pm UTC](https://discuss.elastic.co/t/kubernetes-pods-found-but-all-metrics-0/180061 "2019-05-08T16:03:04Z")

</div>

Hello, Did some tests on the new Infrastructure ui in Kibana 6.7.1. Hosts metrics are working fine, but Kubernetes metrics seem to be missing some data. Although the pod names, nodes and namespaces are recognised, all m…

---

## [License Issue - Put Request returns null\_pointer\_exception](https://discuss.elastic.co/t/license-issue-put-request-returns-null-pointer-exception/96776)

<div class="topic-metadata">

**Author:** [@slarsendisney](https://discuss.elastic.co/u/slarsendisney)\
**Replies:** 6\
**Last updated:** [August 17, 2017, 10:14am UTC](https://discuss.elastic.co/t/license-issue-put-request-returns-null-pointer-exception/96776 "2017-08-17T10:14:47Z")

</div>

Whenever I try and place my License JSON I receive the following error: { "error": { "root\_cause": \[ { "type": "null\_pointer\_exception", "reason": null } \], "type": "null\_pointer\_exception", "reason": null }, …

---

## [Aggregation over nested documents](https://discuss.elastic.co/t/aggregation-over-nested-documents/27810)

<div class="topic-metadata">

**Author:** [@jaikit](https://discuss.elastic.co/u/jaikit)\
**Replies:** 6\
**Last updated:** [October 24, 2016, 6:14pm UTC](https://discuss.elastic.co/t/aggregation-over-nested-documents/27810 "2016-10-24T18:14:34Z")

</div>

Folks, First all great shout out to Elastic community and team for designing and building clean product. Great job! I am running a query to generate aggregations on nested documents. I have created the gist of all th…

---

## [Custom plugin Content Security Policy problem](https://discuss.elastic.co/t/custom-plugin-content-security-policy-problem/178047)

<div class="topic-metadata">

**Author:** [@iamazy](https://discuss.elastic.co/u/iamazy)\
**Replies:** 2\
**Last updated:** [April 25, 2019, 1:34am UTC](https://discuss.elastic.co/t/custom-plugin-content-security-policy-problem/178047 "2019-04-25T01:34:28Z")

</div>

hello i wrote a sql plugin for es7，and after installed it，query dataset by sql in kibana，i found kibana cause a Content Security Policy problem, the complete message as followed Refused to execute inline script becaus…

---

## [Painless : Use variable as regex](https://discuss.elastic.co/t/painless-use-variable-as-regex/99606)

<div class="topic-metadata">

**Author:** [@airpons1](https://discuss.elastic.co/u/airpons1)\
**Replies:** 2\
**Last updated:** [September 6, 2017, 4:30pm UTC](https://discuss.elastic.co/t/painless-use-variable-as-regex/99606 "2017-09-06T16:30:17Z")

</div>

Hi. I’m starting to use painless script in my ES queries and I’m currently struggled to convert a parameter or a variable to a Pattern. GET ressources/\_search { "query": { "bool": { "must": { "scri…

---

## [Multiple versions of ElasticSearch on same server](https://discuss.elastic.co/t/multiple-versions-of-elasticsearch-on-same-server/67182)

<div class="topic-metadata">

**Author:** [@txisme](https://discuss.elastic.co/u/txisme)\
**Replies:** 2\
**Last updated:** [November 25, 2016, 2:35pm UTC](https://discuss.elastic.co/t/multiple-versions-of-elasticsearch-on-same-server/67182 "2016-11-25T14:35:39Z")

</div>

Is it possible to have ES 2.4 and ES 5 in same server? I was using ES 2.4 and decided to upgrade to 5. However i have graphs in Grafana wich are not plotted if ES is in 5.0 version. So i was wondering if i can have bot…

---

## [Save Objects API often results in 503 Timeout](https://discuss.elastic.co/t/save-objects-api-often-results-in-503-timeout/265123)

<div class="topic-metadata">

**Author:** [@gdoctor](https://discuss.elastic.co/u/gdoctor)\
**Replies:** 8\
**Last updated:** [February 25, 2021, 7:33pm UTC](https://discuss.elastic.co/t/save-objects-api-often-results-in-503-timeout/265123 "2021-02-25T19:33:02Z")

</div>

Elasticsearch version: 7.10.0 Kibana version: 7.10.0 All POST API calls to the endpoint https://kibana-our-host.cisco.com/api/saved\_objects/query/Example%20Query result in the following 503 Error, no matter the conten…

---

## [Older logs than 30days](https://discuss.elastic.co/t/older-logs-than-30days/119246)

<div class="topic-metadata">

**Author:** [@MLdz](https://discuss.elastic.co/u/MLdz)\
**Replies:** 3\
**Last updated:** [February 12, 2018, 2:33pm UTC](https://discuss.elastic.co/t/older-logs-than-30days/119246 "2018-02-12T14:33:08Z")

</div>

Hello, I have a problem, I want to send logs to logstash with filebeat, i just want to send the 30 last days of logs. The prospectors of filebeat scan 4 logs files. I just want the line in the logs files for the last …

---

## [Multiple logstash nodes use file-output plugin to output messages to one file in a shared file system?](https://discuss.elastic.co/t/multiple-logstash-nodes-use-file-output-plugin-to-output-messages-to-one-file-in-a-shared-file-system/94275)

<div class="topic-metadata">

**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\
**Replies:** 8\
**Last updated:** [July 26, 2017, 7:41am UTC](https://discuss.elastic.co/t/multiple-logstash-nodes-use-file-output-plugin-to-output-messages-to-one-file-in-a-shared-file-system/94275 "2017-07-26T07:41:31Z")

</div>

ELK version: 5.4.1 There are 3 logstash nodes in my BELK arch, and I configure load-balancing in filebeat. if I use output-plugin to output the messages from 3 logstash nodes to a same file in a shared filesystem, wi…

---

## [Mathematical Operations](https://discuss.elastic.co/t/mathematical-operations/86116)

<div class="topic-metadata">

**Author:** [@BERUSO](https://discuss.elastic.co/u/BERUSO)\
**Replies:** 3\
**Last updated:** [May 17, 2017, 4:21pm UTC](https://discuss.elastic.co/t/mathematical-operations/86116 "2017-05-17T16:21:53Z")

</div>

Hi everybody. I´ve been working on Kibana for 5 months and it's a great tool for designing dashboard. Now, I don't if it's possible, but I want to work with diferent variables in mathematical operations, I've read that t…

---

## [Multiple disks on a single node](https://discuss.elastic.co/t/multiple-disks-on-a-single-node/47068)

<div class="topic-metadata">

**Author:** [@lucifer](https://discuss.elastic.co/u/lucifer)\
**Replies:** 3\
**Last updated:** [April 12, 2016, 6:01am UTC](https://discuss.elastic.co/t/multiple-disks-on-a-single-node/47068 "2016-04-12T06:01:27Z")

</div>

How exactly does the data distributes itself when I specify multiple paths in the path.data field?

---

## [AuthorizationException with python API to remote server](https://discuss.elastic.co/t/authorizationexception-with-python-api-to-remote-server/238514)

<div class="topic-metadata">

**Author:** [@yuv\_c](https://discuss.elastic.co/u/yuv_c)\
**Replies:** 5\
**Last updated:** [July 12, 2020, 10:16pm UTC](https://discuss.elastic.co/t/authorizationexception-with-python-api-to-remote-server/238514 "2020-07-12T22:16:07Z")

</div>

I am trying to use the elasticsearch python API but I get an AuthorizationException every time I run the query. Here is the code: host = "https:/foo.com/es" client = Elasticsearch(host, api\_key='...MY\_API\_KEY...) re…

---

## [How can I send the body of an http request in logstash](https://discuss.elastic.co/t/how-can-i-send-the-body-of-an-http-request-in-logstash/208096)

<div class="topic-metadata">

**Author:** [@vbryandc](https://discuss.elastic.co/u/vbryandc)\
**Replies:** 0\
**Last updated:** [November 15, 2019, 3:27pm UTC](https://discuss.elastic.co/t/how-can-i-send-the-body-of-an-http-request-in-logstash/208096 "2019-11-15T15:27:44Z")

</div>

I need to retrieve the response of a POST REST API, for which I have to send the body of this service in json format, for example: { "customerID": "123456", "context": "001" } I have seen that the documentation uses…

---

## [Importing Dashboards Fail](https://discuss.elastic.co/t/importing-dashboards-fail/178972)

<div class="topic-metadata">

**Author:** [@stefan2017](https://discuss.elastic.co/u/stefan2017)\
**Replies:** 0\
**Last updated:** [April 29, 2019, 5:49pm UTC](https://discuss.elastic.co/t/importing-dashboards-fail/178972 "2019-04-29T17:49:56Z")

</div>

Greetings All, I'm trying to import dashboards but not having any luck. Filebeat logs the following error message. ERROR instance/beat.go:802 Exiting: Failed to import dashboard: Failed to load directory C:\\DevOps…

---

## [Logstash 2.3.1 and 2.2.4 Released](https://discuss.elastic.co/t/logstash-2-3-1-and-2-2-4-released/46721)

<div class="topic-metadata">

**Author:** [@Andrew\_Cholakian1](https://discuss.elastic.co/u/Andrew_Cholakian1)\
**Replies:** 0\
**Last updated:** [April 7, 2016, 5:38pm UTC](https://discuss.elastic.co/t/logstash-2-3-1-and-2-2-4-released/46721 "2016-04-07T17:38:36Z")

</div>

Hello Logstashers! Logstash 2.3.1 has been released today. This release includes many important bug fixes. We highly recommend all customers upgrade as soon as possible. Blog: https://www.elastic.co/blog/logstash-2.…

---

## [FTP logs - Filebeat](https://discuss.elastic.co/t/ftp-logs-filebeat/273430)

<div class="topic-metadata">

**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\
**Replies:** 7\
**Last updated:** [May 20, 2021, 4:52pm UTC](https://discuss.elastic.co/t/ftp-logs-filebeat/273430 "2021-05-20T16:52:10Z")

</div>

Hello there, Is there a way to set Filebeat to retrieve al the files from a folder located in a FTP server? if yes, can you please give me more information on how to configure filebeat for that? if no, what is the alte…

---

## [Logstash Pipeline in Elastic Cloud](https://discuss.elastic.co/t/logstash-pipeline-in-elastic-cloud/287017)

<div class="topic-metadata">

**Author:** [@vladik22](https://discuss.elastic.co/u/vladik22)\
**Replies:** 3\
**Last updated:** [October 19, 2021, 6:06am UTC](https://discuss.elastic.co/t/logstash-pipeline-in-elastic-cloud/287017 "2021-10-19T06:06:11Z")

</div>

Hello I'm new on Elastic Cloud. I understood how to send data to Elasticsearch on cloud via logstash. In Kibana I saw option "Logstash Pipelines". How can I use it? I want to send files via filebeat to logstash on…

---

## [Convert seconds into minutes after sum aggregation](https://discuss.elastic.co/t/convert-seconds-into-minutes-after-sum-aggregation/261927)

<div class="topic-metadata">

**Author:** [@albie.morken](https://discuss.elastic.co/u/albie.morken)\
**Replies:** 3\
**Last updated:** [January 25, 2021, 2:42pm UTC](https://discuss.elastic.co/t/convert-seconds-into-minutes-after-sum-aggregation/261927 "2021-01-25T14:42:08Z")

</div>

I have an es index which contains the documents to indicate the time spent in seconds by an user in an activity like the one below { "UserName" : "User1", "Activity" : "Interacting", "TimeSpent" : 5…

---

## [Simple plotting example](https://discuss.elastic.co/t/simple-plotting-example/80760)

<div class="topic-metadata">

**Author:** [@cabishek188](https://discuss.elastic.co/u/cabishek188)\
**Replies:** 3\
**Last updated:** [March 31, 2017, 6:08am UTC](https://discuss.elastic.co/t/simple-plotting-example/80760 "2017-03-31T06:08:03Z")

</div>

I am trying to plot a simple X and Y line chart with kibana. However, it doesn't do what I need it to do and I don't know how to do it. Please help. e.g. csv file I am sending to ES. { "message" =\> "1488466…

---

## [What software powers these forums?](https://discuss.elastic.co/t/what-software-powers-these-forums/41712)

<div class="topic-metadata">

**Author:** [@adamd](https://discuss.elastic.co/u/adamd)\
**Replies:** 2\
**Last updated:** [February 14, 2016, 8:14am UTC](https://discuss.elastic.co/t/what-software-powers-these-forums/41712 "2016-02-14T08:14:23Z")

</div>

I like the Elastic discussion forums - they have a clean design and work well. Just out of curiosity, are they a custom implementation, or are they powered by some reusable forum software (open source or otherwise)?

---

## [java.lang.NoSuchMethodError: org.elasticsearch.search.SearchHits.getTotalHits()](https://discuss.elastic.co/t/java-lang-nosuchmethoderror-org-elasticsearch-search-searchhits-gettotalhits/215484)

<div class="topic-metadata">

**Author:** [@SachaMaiornikoff](https://discuss.elastic.co/u/SachaMaiornikoff)\
**Replies:** 4\
**Last updated:** [January 30, 2020, 5:39pm UTC](https://discuss.elastic.co/t/java-lang-nosuchmethoderror-org-elasticsearch-search-searchhits-gettotalhits/215484 "2020-01-30T17:39:18Z")

</div>

Hello guys, I know there is a topic with the same issue but the answer doesn't solve my issue. I got a really basic spring boot 2.2.0 app which is supposed to connect to a ES 7.2.0. but when i try to search anything i…

---

## [Filebeats not harvesting new file](https://discuss.elastic.co/t/filebeats-not-harvesting-new-file/163400)

<div class="topic-metadata">

**Author:** [@NickRoper](https://discuss.elastic.co/u/NickRoper)\
**Replies:** 4\
**Last updated:** [January 11, 2019, 5:58am UTC](https://discuss.elastic.co/t/filebeats-not-harvesting-new-file/163400 "2019-01-11T05:58:58Z")

</div>

Hi, I'm new to the ELK stack so apologies if this is a stupid question. I've downloaded and installed the following: elasticsearch-6.5.4 kibana-6.5.4 logstash-6.5.4 filebeats-6.54 I have everything installed and have…

---

## [Logstash Crash with Persistent Queue and Kafka Input](https://discuss.elastic.co/t/logstash-crash-with-persistent-queue-and-kafka-input/90479)

<div class="topic-metadata">

**Author:** [@Myles](https://discuss.elastic.co/u/Myles)\
**Replies:** 5\
**Last updated:** [July 7, 2017, 12:35pm UTC](https://discuss.elastic.co/t/logstash-crash-with-persistent-queue-and-kafka-input/90479 "2017-07-07T12:35:43Z")

</div>

I use to write all my beats output directly to my logstash nodes with persistent queue enabled with no issues. I have recently updated my elastic stack architecture to include a kafka cluster that all data goes to for lo…

---

## [Curator installation problems](https://discuss.elastic.co/t/curator-installation-problems/24710)

<div class="topic-metadata">

**Author:** [@Yzord](https://discuss.elastic.co/u/Yzord)\
**Replies:** 5\
**Last updated:** [July 1, 2015, 2:44pm UTC](https://discuss.elastic.co/t/curator-installation-problems/24710 "2015-07-01T14:44:23Z")

</div>

I have successfully running an ELK server on my RHEL6 machine for months now, but it is filling up my HDD very quick now with the indices, so i wanted to start using Curator which seems to do the trick by deleting old in…

---

## [Apply multiline codec and filter](https://discuss.elastic.co/t/apply-multiline-codec-and-filter/112156)

<div class="topic-metadata">

**Author:** [@anudeepmk](https://discuss.elastic.co/u/anudeepmk)\
**Replies:** 8\
**Last updated:** [December 19, 2017, 8:37am UTC](https://discuss.elastic.co/t/apply-multiline-codec-and-filter/112156 "2017-12-19T08:37:29Z")

</div>

I have the log files generated from one of our hybris as below, INFO | jvm 1 | main | 2017/12/18 04:13:28.985 | at org.zkoss.zk.ui.impl.EventProcessingThreadImpl.run(EventProcessingThreadImpl.java:446) \[zk-3.6.4-hybris…

---

## [Geo Features & Doc\_Values for Analyzed String Fields](https://discuss.elastic.co/t/geo-features-doc-values-for-analyzed-string-fields/28364)

<div class="topic-metadata">

**Author:** [@Centarion](https://discuss.elastic.co/u/Centarion)\
**Replies:** 8\
**Last updated:** [September 2, 2015, 7:14pm UTC](https://discuss.elastic.co/t/geo-features-doc-values-for-analyzed-string-fields/28364 "2015-09-02T19:14:28Z")

</div>

First, is there any place to look at the history of geo-spatial feature development in Elasticsearch? Something like a condensed changelog. I would like to know the past road map for geo features (and if possible what th…

---

## [INFO Non-zero metrics in the last 30s](https://discuss.elastic.co/t/info-non-zero-metrics-in-the-last-30s/111484)

<div class="topic-metadata">

**Author:** [@sujithattinad](https://discuss.elastic.co/u/sujithattinad)\
**Replies:** 1\
**Last updated:** [December 13, 2017, 9:43am UTC](https://discuss.elastic.co/t/info-non-zero-metrics-in-the-last-30s/111484 "2017-12-13T09:43:18Z")

</div>

Hi, I'm new to ELK and need to do log forwarding for my Kafka logs. After did all the configuration i just run the below command ./filebeat -e -c /etc/filebeat/filebeat.yml -d "\*" i got response like below 2017/…

---

## [Kibana server is not ready yet 7.6.1 in browser](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-7-6-1-in-browser/223672)

<div class="topic-metadata">

**Author:** [@eakam](https://discuss.elastic.co/u/eakam)\
**Replies:** 6\
**Last updated:** [March 18, 2020, 3:34am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-7-6-1-in-browser/223672 "2020-03-18T03:34:35Z")

</div>

hlo Juanjo sir, elasticsearch, kibana , wazuh api, wazuh manager , file beat all running well but in browser kibana server is not ready yet to solves this problem i m already install the full ubuntu now i m using 18.0…

---

## [Disk space full, addition of a new disk and data folder path in elasticsearch.yml does not start ES](https://discuss.elastic.co/t/disk-space-full-addition-of-a-new-disk-and-data-folder-path-in-elasticsearch-yml-does-not-start-es/105117)

<div class="topic-metadata">

**Author:** [@shivalkarrahul](https://discuss.elastic.co/u/shivalkarrahul)\
**Replies:** 6\
**Last updated:** [October 24, 2017, 8:35pm UTC](https://discuss.elastic.co/t/disk-space-full-addition-of-a-new-disk-and-data-folder-path-in-elasticsearch-yml-does-not-start-es/105117 "2017-10-24T20:35:43Z")

</div>

Elasticsearch version (bin/elasticsearch --version): 2.1.11 JVM version (java -version): 1.8.0\_91 OS version (uname -a if on a Unix-like system): SLES 11 SP4 Description of the problem including expected versus actual…

---

## [Why cannot restore index from snapshot if an open index with same name exists in the cluster?](https://discuss.elastic.co/t/why-cannot-restore-index-from-snapshot-if-an-open-index-with-same-name-exists-in-the-cluster/258374)

<div class="topic-metadata">

**Author:** [@Simolx](https://discuss.elastic.co/u/Simolx)\
**Replies:** 3\
**Last updated:** [December 11, 2020, 8:55am UTC](https://discuss.elastic.co/t/why-cannot-restore-index-from-snapshot-if-an-open-index-with-same-name-exists-in-the-cluster/258374 "2020-12-11T08:55:47Z")

</div>

Why cannot restore index from snapshot if an open index with same name exists in the cluster? In Elasticsearch Source Code server/src/main/java/org/elasticsearch/snapshots/RestoreService.java method validateExisting…

---

## [If-else at Multiple Pipeline](https://discuss.elastic.co/t/if-else-at-multiple-pipeline/172235)

<div class="topic-metadata">

**Author:** [@xodn0812](https://discuss.elastic.co/u/xodn0812)\
**Replies:** 3\
**Last updated:** [March 15, 2019, 3:46pm UTC](https://discuss.elastic.co/t/if-else-at-multiple-pipeline/172235 "2019-03-15T15:46:58Z")

</div>

I want to use multiple pipelines. When i have aa.conf and bb.conf, each uses a different filter {}. So if-elase seems to have to be branched from the pipeline, is there a way?

---

## [Field data is too large](https://discuss.elastic.co/t/field-data-is-too-large/54118)

<div class="topic-metadata">

**Author:** [@Radoslaw\_Wojtkiewicz](https://discuss.elastic.co/u/Radoslaw_Wojtkiewicz)\
**Replies:** 3\
**Last updated:** [June 28, 2016, 8:25am UTC](https://discuss.elastic.co/t/field-data-is-too-large/54118 "2016-06-28T08:25:35Z")

</div>

I have a problem with sorting namely, sorting work but only for price field. When I try to sort by start\_date, end\_date, uid, cat title get the message about exceeding the limit: Data too large, the date for \[ "name of…

---

## [Autodiscovering logstash nodes in Kubernetes](https://discuss.elastic.co/t/autodiscovering-logstash-nodes-in-kubernetes/270002)

<div class="topic-metadata">

**Author:** [@NerdSec](https://discuss.elastic.co/u/NerdSec)\
**Replies:** 7\
**Last updated:** [April 26, 2021, 4:20am UTC](https://discuss.elastic.co/t/autodiscovering-logstash-nodes-in-kubernetes/270002 "2021-04-26T04:20:14Z")

</div>

So, I have a Logstash Statefulset running in Kubernetes. I have a headless service defined to establish network connection to the logstash pods. I deployed beats as a deployment using the official docker image, and I wa…

---

## [Forming query with extra quotation marks](https://discuss.elastic.co/t/forming-query-with-extra-quotation-marks/264991)

<div class="topic-metadata">

**Author:** [@Shahsha\_21](https://discuss.elastic.co/u/Shahsha_21)\
**Replies:** 2\
**Last updated:** [February 24, 2021, 5:13pm UTC](https://discuss.elastic.co/t/forming-query-with-extra-quotation-marks/264991 "2021-02-24T17:13:13Z")

</div>

I am trying to mimic Kibana's search query via Elasticsearch's query string. For e.g. in Kibana I can search like this with the quotation marks: "ABC" AND "CDE" When I try to create this query string it throws a syntax…

---

## [Node throwing exception: NotSslRecordException](https://discuss.elastic.co/t/node-throwing-exception-notsslrecordexception/118274)

<div class="topic-metadata">

**Author:** [@stephenpatten](https://discuss.elastic.co/u/stephenpatten)\
**Replies:** 2\
**Last updated:** [February 11, 2018, 5:13pm UTC](https://discuss.elastic.co/t/node-throwing-exception-notsslrecordexception/118274 "2018-02-11T17:13:04Z")

</div>

After installing x-pack and running up the cluster, one node is continually throwing this error whether or not the other nodes in the cluster are up or down. \[2018-02-02T10:19:28,357\]\[WARN \]\[o.e.x.s.t.n.SecurityNetty4Ht…

---

## [Running filebeat as a non root user](https://discuss.elastic.co/t/running-filebeat-as-a-non-root-user/53753)

<div class="topic-metadata">

**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\
**Replies:** 2\
**Last updated:** [June 29, 2016, 8:01pm UTC](https://discuss.elastic.co/t/running-filebeat-as-a-non-root-user/53753 "2016-06-29T20:01:09Z")

</div>

I am planning to install filebeat on some client machines to monitor user login's on those boxes. But due to some strict security policy i need to run filebeat as a non root user. I read that its not yet possible to run…

---

## [Offline install of curator plugin failing](https://discuss.elastic.co/t/offline-install-of-curator-plugin-failing/37818)

<div class="topic-metadata">

**Author:** [@sampath\_methuku](https://discuss.elastic.co/u/sampath_methuku)\
**Replies:** 4\
**Last updated:** [December 24, 2015, 10:22am UTC](https://discuss.elastic.co/t/offline-install-of-curator-plugin-failing/37818 "2015-12-24T10:22:29Z")

</div>

I am trying to install curator plugin , following step in doc: https://www.elastic.co/guide/en/elasticsearch/client/curator/current/installation.html downloaded required packages and copied to elastic search host w…

---

## [Simple Kibana "term query" not searching the all the fields](https://discuss.elastic.co/t/simple-kibana-term-query-not-searching-the-all-the-fields/252113)

<div class="topic-metadata">

**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\
**Replies:** 5\
**Last updated:** [October 15, 2020, 2:59am UTC](https://discuss.elastic.co/t/simple-kibana-term-query-not-searching-the-all-the-fields/252113 "2020-10-15T02:59:38Z")

</div>

Hello, I'm puzzled by the following explanation here: Kibana Query Language | Kibana Guide \[8.11\] | Elastic Terms without fields are matched against the default field in your index settings. If a default field is not s…

---

## [Spark Connector performance issues - with start up time](https://discuss.elastic.co/t/spark-connector-performance-issues-with-start-up-time/102634)

<div class="topic-metadata">

**Author:** [@tranan](https://discuss.elastic.co/u/tranan)\
**Replies:** 5\
**Last updated:** [October 5, 2017, 5:17pm UTC](https://discuss.elastic.co/t/spark-connector-performance-issues-with-start-up-time/102634 "2017-10-05T17:17:20Z")

</div>

I am currently experiencing performance issues where I notice that the Elasticsearch Spark connector is stuck 10's of minutes warming / starting up without any tasks / jobs allocated. See screen shot. Any idea on what …

---

## [Different scores on replicas with the same documents](https://discuss.elastic.co/t/different-scores-on-replicas-with-the-same-documents/13341)

<div class="topic-metadata">

**Author:** [@Patrick\_Peschlow](https://discuss.elastic.co/u/Patrick_Peschlow)\
**Replies:** 5\
**Last updated:** [August 28, 2013, 5:19pm UTC](https://discuss.elastic.co/t/different-scores-on-replicas-with-the-same-documents/13341 "2013-08-28T17:19:38Z")

</div>

Hi all, we are running ElasticSearch with one primary shard and three replicas. Search queries are randomly distributed to these replicas (i.e., the default - we don't have any "preference" set). All replicas have…

---

## [Kibana Kubernetes with HTTPS](https://discuss.elastic.co/t/kibana-kubernetes-with-https/174967)

<div class="topic-metadata">

**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\
**Replies:** 3\
**Last updated:** [April 4, 2019, 2:04pm UTC](https://discuss.elastic.co/t/kibana-kubernetes-with-https/174967 "2019-04-04T14:04:02Z")

</div>

Hi, everyone: I would like to know how to configure HTTPS in Kibana on Kubernetes. I have created my own certificate with OpenSSL: openssl req -x509 -newkey rsa:2048 -nodes -keyout /home/{{my\_user}}/main-certs/main.ke…

---

## [Using gsub to replace an unknown amount of multiple white space to single whitespace](https://discuss.elastic.co/t/using-gsub-to-replace-an-unknown-amount-of-multiple-white-space-to-single-whitespace/201363)

<div class="topic-metadata">

**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\
**Replies:** 2\
**Last updated:** [September 27, 2019, 4:08pm UTC](https://discuss.elastic.co/t/using-gsub-to-replace-an-unknown-amount-of-multiple-white-space-to-single-whitespace/201363 "2019-09-27T16:08:54Z")

</div>

Hi guys, Does anyone know how to replace multiple whitespace using gsub? Below doesn't work - but something like this? gsub =\> \[ "syslog\_event", "\\s+", " ", \] Thanks

---

## [Elastic agent upgrade error](https://discuss.elastic.co/t/elastic-agent-upgrade-error/308250)

<div class="topic-metadata">

**Author:** [@Guncixx](https://discuss.elastic.co/u/Guncixx)\
**Replies:** 6\
**Last updated:** [June 30, 2022, 8:20am UTC](https://discuss.elastic.co/t/elastic-agent-upgrade-error/308250 "2022-06-30T08:20:06Z")

</div>

There are similar topics in forum but already closed so opening a new one. After upgrading stack from 8.1.1 to 8.2.3 we are unable to upgrade agents using fleet. When I trigger upgrade function it changes state to upgrad…

---

## [Installed Elasticsearch 7.1.1 via MSI now What?](https://discuss.elastic.co/t/installed-elasticsearch-7-1-1-via-msi-now-what/184888)

<div class="topic-metadata">

**Author:** [@chobo2](https://discuss.elastic.co/u/chobo2)\
**Replies:** 6\
**Last updated:** [June 10, 2019, 3:02pm UTC](https://discuss.elastic.co/t/installed-elasticsearch-7-1-1-via-msi-now-what/184888 "2019-06-10T15:02:31Z")

</div>

Hi I am new to elasticsearch, I sort of just want to get up and running asap and see if this product will be right for me. I installed the msi and then tried to run : http://localhost:9200/ but I get "The site cannot …

---

## [Help understanding a gap in my trace](https://discuss.elastic.co/t/help-understanding-a-gap-in-my-trace/255889)

<div class="topic-metadata">

**Author:** [@bcollins](https://discuss.elastic.co/u/bcollins)\
**Replies:** 7\
**Last updated:** [November 23, 2020, 11:50pm UTC](https://discuss.elastic.co/t/help-understanding-a-gap-in-my-trace/255889 "2020-11-23T23:50:18Z")

</div>

I have attached a picture of a trace between two microservices. I am wonder why there is such a big gap between when the request is fired and the other service processes it. The second service is processing a result extr…

---

## [Kibana not showing all documents in index](https://discuss.elastic.co/t/kibana-not-showing-all-documents-in-index/245979)

<div class="topic-metadata">

**Author:** [@Diederik\_Mathijs](https://discuss.elastic.co/u/Diederik_Mathijs)\
**Replies:** 7\
**Last updated:** [August 22, 2020, 10:30am UTC](https://discuss.elastic.co/t/kibana-not-showing-all-documents-in-index/245979 "2020-08-22T10:30:13Z")

</div>

Hi, I'm having an issue with Kibana (I'm running es 7.9.0 and kb 7.9.0). In Kibana under my index management I see that the 'mag\_mapping' index contains 50 million documents. However, when I look in the Kibana discover …

[Previous page](https://discuss.elastic.co/top.md?page=650&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=652&per_page=50&period=all)
