# Top **URL:** https://discuss.elastic.co/top.md?page=656&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 657 --- ## [\[New Visualization Plugin\] Kbn\_Aframe](https://discuss.elastic.co/t/new-visualization-plugin-kbn-aframe/239274)
**Author:** [@Camichan](https://discuss.elastic.co/u/Camichan)\ **Replies:** 1\ **Last updated:** [July 1, 2020, 10:32pm UTC](https://discuss.elastic.co/t/new-visualization-plugin-kbn-aframe/239274 "2020-07-01T22:32:13Z")
Hi there, I'm working on creating a visualizations plugin for Kibana and I'm looking for people to test it or that may interest you. This project is called KBN\_AFRAME and allows to create VR Graphs visualizations withi… --- ## [Possible? Wildcard template for a collection of fields to solve some dynamic mapping woes](https://discuss.elastic.co/t/possible-wildcard-template-for-a-collection-of-fields-to-solve-some-dynamic-mapping-woes/22010)
**Author:** [@Paul\_Kavanagh](https://discuss.elastic.co/u/Paul_Kavanagh)\ **Replies:** 7\ **Last updated:** [February 9, 2015, 10:24am UTC](https://discuss.elastic.co/t/possible-wildcard-template-for-a-collection-of-fields-to-solve-some-dynamic-mapping-woes/22010 "2015-02-09T10:24:55Z")
Hi all, We're having a MapperParsingException problem with some field values when we get when we use the JSON Filter for Logstash to explode out a JSON document to Elasticsearch fields. In 99.9% of cases, certain… --- ## [\[Solved\] Cannot visualise field with analyzed strings in kibana 4.3](https://discuss.elastic.co/t/solved-cannot-visualise-field-with-analyzed-strings-in-kibana-4-3/36553)
**Author:** [@mirnuj\_atom](https://discuss.elastic.co/u/mirnuj_atom)\ **Replies:** 2\ **Last updated:** [December 8, 2015, 11:29am UTC](https://discuss.elastic.co/t/solved-cannot-visualise-field-with-analyzed-strings-in-kibana-4-3/36553 "2015-12-08T11:29:03Z")
Hi Guys I am having a problem with vizualization of any "analyzed" field in Kibana 4.3.0 on one of my servers. Whenever I try to build any vizualization (say piechart, or anything else) based on any non-raw field I get… --- ## [I want to know the pros and cons](https://discuss.elastic.co/t/i-want-to-know-the-pros-and-cons/175026)
**Author:** [@EddyKim](https://discuss.elastic.co/u/EddyKim)\ **Replies:** 4\ **Last updated:** [April 3, 2019, 6:31am UTC](https://discuss.elastic.co/t/i-want-to-know-the-pros-and-cons/175026 "2019-04-03T06:31:30Z")
Hi, my name is Eddy Kim. I'm not good at English. Please look at this. We're going to build our own ElasticSearch infrastructure, and we're going to buy a server soon. Our systems are not big data, but indexing perfor… --- ## [Til Map - failed to show locations in map, error: the database provided is invalid or corrupted](https://discuss.elastic.co/t/til-map-failed-to-show-locations-in-map-error-the-database-provided-is-invalid-or-corrupted/99122)
**Author:** [@ashleyl](https://discuss.elastic.co/u/ashleyl)\ **Replies:** 8\ **Last updated:** [September 11, 2017, 9:23am UTC](https://discuss.elastic.co/t/til-map-failed-to-show-locations-in-map-error-the-database-provided-is-invalid-or-corrupted/99122 "2017-09-11T09:23:06Z")
Hi Elastic Support Manager, Please help to check how to fix below issues. I use filebeat send log to logstash-elasticsearch-kibana(host). Kibana - Version: 5.4.2 logstash 5.5.1 filebeat version 5.5.1 Issues: (1)Ti… --- ## [Logstash Permission denied - NUL error](https://discuss.elastic.co/t/logstash-permission-denied-nul-error/303686)
**Author:** [@Ersan](https://discuss.elastic.co/u/Ersan)\ **Replies:** 3\ **Last updated:** [May 3, 2022, 8:32pm UTC](https://discuss.elastic.co/t/logstash-permission-denied-nul-error/303686 "2022-05-03T20:32:57Z")
Hello I am new to EleasticSearch. I try to run logstash on Windows for the first time with different instrutions/Java versions/Logtash versions but always get the same error. I checked out the forms too but could not f… --- ## [Java ssl "Too Short" error](https://discuss.elastic.co/t/java-ssl-too-short-error/289244)
**Author:** [@bchill](https://discuss.elastic.co/u/bchill)\ **Replies:** 3\ **Last updated:** [November 19, 2021, 1:54am UTC](https://discuss.elastic.co/t/java-ssl-too-short-error/289244 "2021-11-19T01:54:30Z")
I have an odd problem with a cert signed by our local CA. I get a java error about something being 'too short', but I have no clue what that is. The problem definitely seems to be related to the locally-signed cert, bec… --- ## [Enrolling elastic-agent, the production-ready way?](https://discuss.elastic.co/t/enrolling-elastic-agent-the-production-ready-way/337697)
**Author:** [@UPPERCASE](https://discuss.elastic.co/u/UPPERCASE)\ **Replies:** 5\ **Last updated:** [July 5, 2023, 7:07pm UTC](https://discuss.elastic.co/t/enrolling-elastic-agent-the-production-ready-way/337697 "2023-07-05T19:07:39Z")
I want to use Fleet, but I have some doubts about the documented deployment method. I think it would've been better if it was possible to just install the elastic-agent as an RPM/DEB and then configure a yaml file, then … --- ## [What's the real difference between filter and codec and which I have to use?](https://discuss.elastic.co/t/whats-the-real-difference-between-filter-and-codec-and-which-i-have-to-use/77590)
**Author:** [@Ranieri\_Mazili\_de\_Ol](https://discuss.elastic.co/u/Ranieri_Mazili_de_Ol)\ **Replies:** 5\ **Last updated:** [March 7, 2017, 2:46pm UTC](https://discuss.elastic.co/t/whats-the-real-difference-between-filter-and-codec-and-which-i-have-to-use/77590 "2017-03-07T14:46:56Z")
Hello, I didn't understand very well the difference between filter and codec and I'm in doubt about which one I have to use to solve my problem. My logstash is listening a JMS queue where XML messages are received. T… --- ## [Latent Semantic Indexing in Elastic search](https://discuss.elastic.co/t/latent-semantic-indexing-in-elastic-search/92245)
**Author:** [@gurdeep](https://discuss.elastic.co/u/gurdeep)\ **Replies:** 2\ **Last updated:** [July 7, 2017, 12:45pm UTC](https://discuss.elastic.co/t/latent-semantic-indexing-in-elastic-search/92245 "2017-07-07T12:45:12Z")
Hi, I am trying to use "Latent Semantic Indexing " as the custom Similarity Algorithm in Elastic Search. What is the way I can do it? Does elastic Search provide any plugin architecture for this particular Algorithm? --- ## [How to import my Vendor's MIBs?](https://discuss.elastic.co/t/how-to-import-my-vendors-mibs/45186)
**Author:** [@stefansaye](https://discuss.elastic.co/u/stefansaye)\ **Replies:** 2\ **Last updated:** [April 14, 2016, 6:01am UTC](https://discuss.elastic.co/t/how-to-import-my-vendors-mibs/45186 "2016-04-14T06:01:05Z")
hi all, how to import my Vendor's MIBs ? If anyone knows how to do with it , please help. Thanks. --- ## [Comparing timestamps in painless](https://discuss.elastic.co/t/comparing-timestamps-in-painless/115858)
**Author:** [@Steve\_Stevens](https://discuss.elastic.co/u/Steve_Stevens)\ **Replies:** 4\ **Last updated:** [January 18, 2018, 12:11pm UTC](https://discuss.elastic.co/t/comparing-timestamps-in-painless/115858 "2018-01-18T12:11:52Z")
How do I check if a payload timestamp (\_source\['@timestamp'\]) to scheduled time plus 5 minutes? def schedTimestamp=Instant.ofEpochMilli(ctx.trigger.scheduled\_time.getMillis()).plus(Duration.ofMinutes(+5); def payloadTim… --- ## [Snapshot failure missing file](https://discuss.elastic.co/t/snapshot-failure-missing-file/240097)
**Author:** [@michaelv](https://discuss.elastic.co/u/michaelv)\ **Replies:** 2\ **Last updated:** [July 7, 2020, 7:57am UTC](https://discuss.elastic.co/t/snapshot-failure-missing-file/240097 "2020-07-07T07:57:32Z")
Hi All, This is running ELK 7.7.8 on Ubuntu 18.04.4 LTS I had created a NFS mount on my 3 old node cluster and new 3 node cluster I did manage to make a snapshot from old and restore to new cluster. However, I decide… --- ## [Duplicate results in search of index via alias after restoring snapshot of index to a new name](https://discuss.elastic.co/t/duplicate-results-in-search-of-index-via-alias-after-restoring-snapshot-of-index-to-a-new-name/99880)
**Author:** [@bugger](https://discuss.elastic.co/u/bugger)\ **Replies:** 2\ **Last updated:** [September 15, 2017, 4:58pm UTC](https://discuss.elastic.co/t/duplicate-results-in-search-of-index-via-alias-after-restoring-snapshot-of-index-to-a-new-name/99880 "2017-09-15T16:58:20Z")
Hey all, first post here. This is really a tip, not a question, that I hope saves someone else a little time. I read through the rules and didn't see anything about posting tips, so I hope I am not doing anything wron… --- ## [Kibana hashboards empty](https://discuss.elastic.co/t/kibana-hashboards-empty/146774)
**Author:** [@lcui\_dxc](https://discuss.elastic.co/u/lcui_dxc)\ **Replies:** 5\ **Last updated:** [September 4, 2018, 10:19pm UTC](https://discuss.elastic.co/t/kibana-hashboards-empty/146774 "2018-09-04T22:19:49Z")
Hello, I set up ELK and beats... Elasticsearch on one node, and Logstash and Kibana on another node. Also, we have filebeat, metricbeat, auditbeat, packetbeat, and winlogbeat from remote servers sending logs/metrics to… --- ## [Elasticdump doesn't work on https self signed certificate links](https://discuss.elastic.co/t/elasticdump-doesnt-work-on-https-self-signed-certificate-links/266049)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [March 3, 2021, 6:06am UTC](https://discuss.elastic.co/t/elasticdump-doesnt-work-on-https-self-signed-certificate-links/266049 "2021-03-03T06:06:34Z")
Hi all, I'm trying to import an index data using elasticdump tool from an elasticsearch server which has self signed certificates. NODE\_TLS\_REJECT\_UNAUTHORIZED=0 elasticdump \\ --input=https://elastic:\*\*\*\*\*\*\*\*\*\*\*\*@mysec… --- ## [Can't create a field with a variable from a grok match regex](https://discuss.elastic.co/t/cant-create-a-field-with-a-variable-from-a-grok-match-regex/142613)
**Author:** [@TheSmartMonkey](https://discuss.elastic.co/u/TheSmartMonkey)\ **Replies:** 6\ **Last updated:** [August 2, 2018, 3:18pm UTC](https://discuss.elastic.co/t/cant-create-a-field-with-a-variable-from-a-grok-match-regex/142613 "2018-08-02T15:18:00Z")
Hi all, I am currently using logstash, elasticsearch and kibana 6.3.0 My log are generated at a unique id path : /tmp/USER\_DATA/FactoryContainer/images/(my unique id)/oar/oar\_image\_job(my unique id).stdout What i want… --- ## [Roadmap for "Stateless" Elasticsearch](https://discuss.elastic.co/t/roadmap-for-stateless-elasticsearch/316107)
**Author:** [@benjismith](https://discuss.elastic.co/u/benjismith)\ **Replies:** 8\ **Last updated:** [October 10, 2022, 9:28am UTC](https://discuss.elastic.co/t/roadmap-for-stateless-elasticsearch/316107 "2022-10-10T09:28:46Z")
I read yesterday's blog post about the future of a "stateless" Elasticsearch architecture, where one of the big benefits is the ability to scale indexing workloads separately from search workloads... I have a 30+ node… --- ## [KPI Metrics for Elastic](https://discuss.elastic.co/t/kpi-metrics-for-elastic/44475)
**Author:** [@Dylan\_Johnson1](https://discuss.elastic.co/u/Dylan_Johnson1)\ **Replies:** 1\ **Last updated:** [March 16, 2016, 12:44am UTC](https://discuss.elastic.co/t/kpi-metrics-for-elastic/44475 "2016-03-16T00:44:37Z")
If you had to define some high level metrics based KPI's for elastic what would they be ? I guess there are index latency, search latency but what others if any do you think are important for a search service? Than… --- ## [Error after upgrading to Kibana 4.2 - Full page does not render](https://discuss.elastic.co/t/error-after-upgrading-to-kibana-4-2-full-page-does-not-render/37258)
**Author:** [@fetzilla](https://discuss.elastic.co/u/fetzilla)\ **Replies:** 4\ **Last updated:** [December 16, 2015, 8:06pm UTC](https://discuss.elastic.co/t/error-after-upgrading-to-kibana-4-2-full-page-does-not-render/37258 "2015-12-16T20:06:32Z")
Here's the error log from Kibana FATAL CLI ERROR YAMLException: can not read a block mapping entry; a multiline key may not be an implicit key at line 73, column 1: ^ at generateError (/opt/kibana/node\_modules/js-yam… --- ## [Elasticsearch APM agent not pushing to server](https://discuss.elastic.co/t/elasticsearch-apm-agent-not-pushing-to-server/138547)
**Author:** [@hHelen](https://discuss.elastic.co/u/hHelen)\ **Replies:** 2\ **Last updated:** [July 4, 2018, 1:11pm UTC](https://discuss.elastic.co/t/elasticsearch-apm-agent-not-pushing-to-server/138547 "2018-07-04T13:11:42Z")
I have a server running on a remote computer and have installed the APM agent on another computer with Flask installed. But for some reason I keep getting this error on the client: Connection to APM Server timed out (ur… --- ## [File beats compared to Log4j SocketAppender](https://discuss.elastic.co/t/file-beats-compared-to-log4j-socketappender/36601)
**Author:** [@ari](https://discuss.elastic.co/u/ari)\ **Replies:** 2\ **Last updated:** [December 8, 2015, 12:51pm UTC](https://discuss.elastic.co/t/file-beats-compared-to-log4j-socketappender/36601 "2015-12-08T12:51:18Z")
I see that this article is now marked as no longer recommended: https://www.elastic.co/blog/logging-elasticsearch-events-with-logstash-and-elasticsearch What is it about the article which is now bad? Why would I prefer… --- ## [Circuit\_breaking\_exception](https://discuss.elastic.co/t/circuit-breaking-exception/113693)
**Author:** [@karthik\_s1](https://discuss.elastic.co/u/karthik_s1)\ **Replies:** 5\ **Last updated:** [January 5, 2018, 9:41pm UTC](https://discuss.elastic.co/t/circuit-breaking-exception/113693 "2018-01-05T21:41:46Z")
We are having the following cluster setup 1 master node 2 client nodes 2 data nodes Master node: 8 Gb RAM Heap: -Xms2g -Xmx2g Each Client nodes: 16 Gb RAM Heap: -Xms8g -Xmx8g Each Data node 16 Gb RAM Heap: -X… --- ## [Multiple prospectors not working under filebeat](https://discuss.elastic.co/t/multiple-prospectors-not-working-under-filebeat/87119)
**Author:** [@punit\_j](https://discuss.elastic.co/u/punit_j)\ **Replies:** 5\ **Last updated:** [June 9, 2017, 3:43pm UTC](https://discuss.elastic.co/t/multiple-prospectors-not-working-under-filebeat/87119 "2017-06-09T15:43:44Z")
Hi, I am using filebeat 5.4.0 with below configuration, however multiline is somehow not woking. filebeat.prospectors: - input\_type: log paths: - '/var/logs/JINK/\*.log' tags: \[jinklogs\] multiline.patter… --- ## [Failed to get setting group for \[threadpool.\] setting prefix and setting \[threadpool.bulk\] because of a missing '.'](https://discuss.elastic.co/t/failed-to-get-setting-group-for-threadpool-setting-prefix-and-setting-threadpool-bulk-because-of-a-missing/23487)
**Author:** [@marc\_falzon](https://discuss.elastic.co/u/marc_falzon)\ **Replies:** 5\ **Last updated:** [May 6, 2015, 7:52pm UTC](https://discuss.elastic.co/t/failed-to-get-setting-group-for-threadpool-setting-prefix-and-setting-threadpool-bulk-because-of-a-missing/23487 "2015-05-06T19:52:40Z")
Hello there I noticed the following warning message in my nodes logs when starting: \[2015-04-30 12:40:13,265\]\[INFO \]\[node \] \[\*\*\*server\*\*\*\] started \[2015-04-30 12:40:32,154\]\[WARN \]\[node.settin… --- ## [Reindexing Logstash indices to use new index template](https://discuss.elastic.co/t/reindexing-logstash-indices-to-use-new-index-template/238917)
**Author:** [@vanessa](https://discuss.elastic.co/u/vanessa)\ **Replies:** 3\ **Last updated:** [July 13, 2020, 11:26pm UTC](https://discuss.elastic.co/t/reindexing-logstash-indices-to-use-new-index-template/238917 "2020-07-13T23:26:09Z")
Hi. We have some existing logstash logs in our elasticsearch cluster. Their pattern is logstash-imu-logs-\*. We have a template for that pattern, but unfortunately it was missing the mapping for one of our fields. As the … --- ## [Nested JSON parsing issues](https://discuss.elastic.co/t/nested-json-parsing-issues/216271)
**Author:** [@ipolyzois](https://discuss.elastic.co/u/ipolyzois)\ **Replies:** 8\ **Last updated:** [January 31, 2020, 9:19am UTC](https://discuss.elastic.co/t/nested-json-parsing-issues/216271 "2020-01-31T09:19:56Z")
Hi, I'm using filebeat and elasticsearch 7.5.2 and i am trying to stream specific lines from a local log file to ES. The lines i am interested in have the following format {"level":30,"time":1579750597224,"pid":32172,… --- ## [How to loop through array in Logstash?](https://discuss.elastic.co/t/how-to-loop-through-array-in-logstash/213852)
**Author:** [@Ahmet\_Kartal](https://discuss.elastic.co/u/Ahmet_Kartal)\ **Replies:** 3\ **Last updated:** [January 7, 2020, 2:52pm UTC](https://discuss.elastic.co/t/how-to-loop-through-array-in-logstash/213852 "2020-01-07T14:52:40Z")
Hello, I have this data: "url" =\> \[ \[0\] \[ \[0\] "", \[1\] "data", \[2\] "data1" \[3\] "9462" \], What I want is that I need to get last element of list as assignment\_1 ( I need to… --- ## [Xpack Kibana username Password not accepting . Login Failure](https://discuss.elastic.co/t/xpack-kibana-username-password-not-accepting-login-failure/108988)
**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\ **Replies:** 3\ **Last updated:** [November 24, 2017, 9:53am UTC](https://discuss.elastic.co/t/xpack-kibana-username-password-not-accepting-login-failure/108988 "2017-11-24T09:53:37Z")
I have working ELK 5.3.0 and Xpack5.3.0 successfully installed in Elasticsearch plugin and Kibana plugin. If Elastic search login disabled in kibana.yml , kibana asking for username and password in localhost:5601. But … --- ## [Is there a way to do exact and full-text searching without creating two different fields?](https://discuss.elastic.co/t/is-there-a-way-to-do-exact-and-full-text-searching-without-creating-two-different-fields/21252)
**Author:** [@am1](https://discuss.elastic.co/u/am1)\ **Replies:** 3\ **Last updated:** [December 15, 2014, 2:05am UTC](https://discuss.elastic.co/t/is-there-a-way-to-do-exact-and-full-text-searching-without-creating-two-different-fields/21252 "2014-12-15T02:05:28Z")
Is there a way to do exact and full text searches without having to create two different fields? The documentation (http://www.elasticsearch.org/guide/en/elasticsearch/guide/current/\_finding\_exact\_values.html) s… --- ## [No connection could be made because the target machine actively refused it](https://discuss.elastic.co/t/no-connection-could-be-made-because-the-target-machine-actively-refused-it/283179)
**Author:** [@sarac1](https://discuss.elastic.co/u/sarac1)\ **Replies:** 2\ **Last updated:** [September 2, 2021, 2:54pm UTC](https://discuss.elastic.co/t/no-connection-could-be-made-because-the-target-machine-actively-refused-it/283179 "2021-09-02T14:54:50Z")
Hi, I see this issue comes up often. However the answers in the posts I've looked at have no fixed my issue, I've gotten closer, but not all the way. I have a single ELK system from the latest bitnami 7.14 image. I am… --- ## [Logstash on kubernetes: not seeing any output](https://discuss.elastic.co/t/logstash-on-kubernetes-not-seeing-any-output/72962)
**Author:** [@ronakg](https://discuss.elastic.co/u/ronakg)\ **Replies:** 4\ **Last updated:** [January 29, 2017, 10:25pm UTC](https://discuss.elastic.co/t/logstash-on-kubernetes-not-seeing-any-output/72962 "2017-01-29T22:25:36Z")
Hi, I'm trying to bring up Logstash on our kubernetes cluster. I'm using the 5.1.2-alpine Docker image and bringing up the Logstash pod. I'm seeing that the input/output configuration is being parsed properly, but I do… --- ## [Http input plugin - multiple log entries group into one in Kibana](https://discuss.elastic.co/t/http-input-plugin-multiple-log-entries-group-into-one-in-kibana/56101)
**Author:** [@hawaiipersson](https://discuss.elastic.co/u/hawaiipersson)\ **Replies:** 4\ **Last updated:** [July 25, 2016, 7:55am UTC](https://discuss.elastic.co/t/http-input-plugin-multiple-log-entries-group-into-one-in-kibana/56101 "2016-07-25T07:55:48Z")
Hi I am fairly new to Logstash so excuse me in advanced. Using the http input plugin to send logs from a application to logstash. They are sent on a schedule, 5-20 logs at a time. Each log entry is sent with its own … --- ## [Filebeat to parse json array](https://discuss.elastic.co/t/filebeat-to-parse-json-array/267301)
**Author:** [@vantoryc](https://discuss.elastic.co/u/vantoryc)\ **Replies:** 2\ **Last updated:** [March 15, 2021, 9:00pm UTC](https://discuss.elastic.co/t/filebeat-to-parse-json-array/267301 "2021-03-15T21:00:08Z")
Hi, We are currently using filebeats to send logs to our Graylog. So far it has worked out fine for as as the logs were single line. Now we want to add logs from another folder but the logs are are multiline json array… --- ## [Replace all method is not working](https://discuss.elastic.co/t/replace-all-method-is-not-working/188001)
**Author:** [@saranjeet](https://discuss.elastic.co/u/saranjeet)\ **Replies:** 1\ **Last updated:** [July 1, 2019, 9:53am UTC](https://discuss.elastic.co/t/replace-all-method-is-not-working/188001 "2019-07-01T09:53:18Z")
"sort": \[ { "\_script": { "script": { "source": "def varRating = 0; if(doc\['symbol'\].value == 'fac') varRating=1;else if(doc\['name'\].value == 'fac') varRating=2;else if(doc\['name'\].value.indexOf('fac') == 0) varRatin… --- ## [How can we roll up all the aggregation data indices have?](https://discuss.elastic.co/t/how-can-we-roll-up-all-the-aggregation-data-indices-have/317436)
**Author:** [@Nitin08bisht](https://discuss.elastic.co/u/Nitin08bisht)\ **Replies:** 5\ **Last updated:** [October 31, 2022, 2:13am UTC](https://discuss.elastic.co/t/how-can-we-roll-up-all-the-aggregation-data-indices-have/317436 "2022-10-31T02:13:30Z")
How can we roll up all the aggregation data indices have? And If we do rollup of all the aggregation which indices have than will there be any difference between the size of actual and rollup indices or not? --- ## [AuditBeat failed to create audit client: protocol not supported](https://discuss.elastic.co/t/auditbeat-failed-to-create-audit-client-protocol-not-supported/138601)
**Author:** [@Nicholas\_Amon](https://discuss.elastic.co/u/Nicholas_Amon)\ **Replies:** 5\ **Last updated:** [June 29, 2020, 9:21pm UTC](https://discuss.elastic.co/t/auditbeat-failed-to-create-audit-client-protocol-not-supported/138601 "2020-06-29T21:21:13Z")
Auditbeat is failing to start successfully with the error message: 2018-07-04T18:01:32.410Z ERROR instance/beat.go:691 Exiting: 1 error: 1 error: failed to create audit client: failed to create audit client: protocol no… --- ## [Issue using Logstash JDBC Input Plugin with Multiple Dynamic Tables](https://discuss.elastic.co/t/issue-using-logstash-jdbc-input-plugin-with-multiple-dynamic-tables/134832)
**Author:** [@Joaquim\_Freitas](https://discuss.elastic.co/u/Joaquim_Freitas)\ **Replies:** 5\ **Last updated:** [June 7, 2018, 4:18pm UTC](https://discuss.elastic.co/t/issue-using-logstash-jdbc-input-plugin-with-multiple-dynamic-tables/134832 "2018-06-07T16:18:30Z")
Hi All ! I'm implementing a Logstash solution to fetch events from MSSQL database with the relevant data present: In a fixed set of well known database tables with fixed columns; BUT also have the most important … --- ## [How to shrink a cluster](https://discuss.elastic.co/t/how-to-shrink-a-cluster/33163)
**Author:** [@Marjana](https://discuss.elastic.co/u/Marjana)\ **Replies:** 5\ **Last updated:** [October 29, 2015, 2:52am UTC](https://discuss.elastic.co/t/how-to-shrink-a-cluster/33163 "2015-10-29T02:52:21Z")
Hello, We are trying to replace our VM nodes with bare metal. We keep data for max 2 weeks. Is there a way to add new bare metal nodes to the cluster and use only those for adding new indices? As 2 weeks pass by, we can … --- ## [Separating large immutable field vs mutable fields](https://discuss.elastic.co/t/separating-large-immutable-field-vs-mutable-fields/27074)
**Author:** [@bvnagaraju](https://discuss.elastic.co/u/bvnagaraju)\ **Replies:** 5\ **Last updated:** [August 10, 2015, 3:47am UTC](https://discuss.elastic.co/t/separating-large-immutable-field-vs-mutable-fields/27074 "2015-08-10T03:47:13Z")
Hi, I have a scenario where my document has one large field (content /text) field which is updated very rarely(0.1%) and all others are very small fields which are updates very often(99.9%) What is found in performa… --- ## [Logstash -\> ssl-tcp -\> syslog-ng: Invalid frame header; header=''](https://discuss.elastic.co/t/logstash-ssl-tcp-syslog-ng-invalid-frame-header-header/118088)
**Author:** [@aogail](https://discuss.elastic.co/u/aogail)\ **Replies:** 2\ **Last updated:** [February 5, 2018, 11:47pm UTC](https://discuss.elastic.co/t/logstash-ssl-tcp-syslog-ng-invalid-frame-header-header/118088 "2018-02-05T23:47:44Z")
Hello, I am attempting to send log messages from logstash to an upstream syslog-ng server using the ssl-tcp protocol. The syslog-ng server is configured to receive messages using: syslog( port(6514) transport("tls"… --- ## [Customize lens colors in kibana](https://discuss.elastic.co/t/customize-lens-colors-in-kibana/288901)
**Author:** [@mohamed.softparadigm](https://discuss.elastic.co/u/mohamed.softparadigm)\ **Replies:** 3\ **Last updated:** [November 10, 2021, 9:50pm UTC](https://discuss.elastic.co/t/customize-lens-colors-in-kibana/288901 "2021-11-10T21:50:20Z")
By using filters in kibana, i cannot change lens colors, does kibana support this option? --- ## [Getting Error:{"statusCode":404,"error":"Not Found","message":"Not Found"} While trying to view system health status through metricbeat plugin with deployed kibana source code](https://discuss.elastic.co/t/getting-error-statuscode-404-error-not-found-message-not-found-while-trying-to-view-system-health-status-through-metricbeat-plugin-with-deployed-kibana-source-code/250933)
**Author:** [@vkg0312](https://discuss.elastic.co/u/vkg0312)\ **Replies:** 3\ **Last updated:** [October 11, 2020, 9:01pm UTC](https://discuss.elastic.co/t/getting-error-statuscode-404-error-not-found-message-not-found-while-trying-to-view-system-health-status-through-metricbeat-plugin-with-deployed-kibana-source-code/250933 "2020-10-11T21:01:40Z")
while trying to work with kibana source code I wanted to visualize system health status data on kibana using metricbeat while metric beat is performing status check by calling rest api"http://localhost:5603/api/status" … --- ## [Using Doc Values](https://discuss.elastic.co/t/using-doc-values/29066)
**Author:** [@HelpComputer](https://discuss.elastic.co/u/HelpComputer)\ **Replies:** 3\ **Last updated:** [September 11, 2015, 4:51pm UTC](https://discuss.elastic.co/t/using-doc-values/29066 "2015-09-11T16:51:42Z")
Hello, I am trying to setup Doc values on my active cluster but I am having difficulty understanding how to do this. I've looked over the following articles but still unsure how to accomplish this: https://www.elastic… --- ## [Duplicate audit logs for successful logins in auditbeat](https://discuss.elastic.co/t/duplicate-audit-logs-for-successful-logins-in-auditbeat/178067)
**Author:** [@Ritesh\_Kuchukulla](https://discuss.elastic.co/u/Ritesh_Kuchukulla)\ **Replies:** 6\ **Last updated:** [May 9, 2019, 5:17pm UTC](https://discuss.elastic.co/t/duplicate-audit-logs-for-successful-logins-in-auditbeat/178067 "2019-05-09T17:17:36Z")
When an auditbeat logs a successful login on ubuntu, it logs a success and a failed event. Example - I tried logging into my ubuntu instance and it was successful, so here I get a success log and a failure log. The fail… --- ## [Is anyone aware if any opensource or commercials UEBA solution](https://discuss.elastic.co/t/is-anyone-aware-if-any-opensource-or-commercials-ueba-solution/135077)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 0\ **Last updated:** [June 8, 2018, 4:03am UTC](https://discuss.elastic.co/t/is-anyone-aware-if-any-opensource-or-commercials-ueba-solution/135077 "2018-06-08T04:03:24Z")
Hi Team, Is anyone aware if any open source or commercials UEBA \[User and Entity Behaviour Analytic\] solution can be integrated with Elasticsearch. --- ## [Score based on Levenshtein distance in the results](https://discuss.elastic.co/t/score-based-on-levenshtein-distance-in-the-results/88024)
**Author:** [@yaelco](https://discuss.elastic.co/u/yaelco)\ **Replies:** 0\ **Last updated:** [June 2, 2017, 7:44am UTC](https://discuss.elastic.co/t/score-based-on-levenshtein-distance-in-the-results/88024 "2017-06-02T07:44:42Z")
Is there a more efficient way to get the Levenshtein-distance similarity as the score (based on 1 field value) rather than using match query and computing it in the application code after getting the results from Elasti… --- ## [Filter on scripted field not working in Kibana UI](https://discuss.elastic.co/t/filter-on-scripted-field-not-working-in-kibana-ui/203823)
**Author:** [@maarten](https://discuss.elastic.co/u/maarten)\ **Replies:** 4\ **Last updated:** [October 22, 2019, 9:55am UTC](https://discuss.elastic.co/t/filter-on-scripted-field-not-working-in-kibana-ui/203823 "2019-10-22T09:55:52Z")
Using version 6.4.2. I have created a dashboard which contains multiple normal fields and scripted fields. On scripted fields, filtering works correctly; Standard filter queries are automatically created: { "query": {… --- ## [How to add a grok expression or regex in the file name of a log for parsing](https://discuss.elastic.co/t/how-to-add-a-grok-expression-or-regex-in-the-file-name-of-a-log-for-parsing/31578)
**Author:** [@Rajeev\_Singh](https://discuss.elastic.co/u/Rajeev_Singh)\ **Replies:** 4\ **Last updated:** [October 4, 2015, 8:14pm UTC](https://discuss.elastic.co/t/how-to-add-a-grok-expression-or-regex-in-the-file-name-of-a-log-for-parsing/31578 "2015-10-04T20:14:11Z")
Hi I am trying to parse a logfile which is name as testlogfile.YEAR-MM-DD.log I used the input plugin of file with the format as testlogfile.%{+YYYY-MM-dd}.log This is not working and the only way to get this file … --- ## [Getting time range windowed counts](https://discuss.elastic.co/t/getting-time-range-windowed-counts/14502)
**Author:** [@Josh\_Harrison](https://discuss.elastic.co/u/Josh_Harrison)\ **Replies:** 4\ **Last updated:** [November 22, 2013, 12:11am UTC](https://discuss.elastic.co/t/getting-time-range-windowed-counts/14502 "2013-11-22T00:11:42Z")
I'm looking to be able to easily expose an interface where I can hit an alias and get back the counts of results every hour for the past 24 hours. Is this something I can do with a filtered alias? Or is this best don… [Previous page](https://discuss.elastic.co/top.md?page=655&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=657&per_page=50&period=all)