# Top **URL:** https://discuss.elastic.co/top.md?page=665&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 666 --- ## [Filter for Kafka and Zookeeper System Logs](https://discuss.elastic.co/t/filter-for-kafka-and-zookeeper-system-logs/124276)
**Author:** [@jake\_smith](https://discuss.elastic.co/u/jake_smith)\ **Replies:** 3\ **Last updated:** [March 23, 2018, 11:35am UTC](https://discuss.elastic.co/t/filter-for-kafka-and-zookeeper-system-logs/124276 "2018-03-23T11:35:40Z")
Hi all - I'm new to elastic and grok. I'm trying to get Kafka/Zookeeper system logs filtered and parsed by Logstash (shipped by filebeat), then stored in Elasticsearch, so that they may be viewable on Kibana all on CentO… --- ## [Heartbeat: http check.response](https://discuss.elastic.co/t/heartbeat-http-check-response/86219)
**Author:** [@N31LR](https://discuss.elastic.co/u/N31LR)\ **Replies:** 3\ **Last updated:** [May 18, 2017, 1:37pm UTC](https://discuss.elastic.co/t/heartbeat-http-check-response/86219 "2017-05-18T13:37:55Z")
Hi, I am having an issue using heartbeat, specifically check.response.body I have the following heartbeat.yml heartbeat.monitors: - type: http # List or urls to query urls: \["http://localhost:8090/base/status.json"… --- ## [Wildcard query over \_all field on Elasticsearch 5 failed](https://discuss.elastic.co/t/wildcard-query-over--all-field-on-elasticsearch-5-failed/67315)
**Author:** [@Benjamin\_Dupre](https://discuss.elastic.co/u/Benjamin_Dupre)\ **Replies:** 6\ **Last updated:** [November 30, 2016, 1:22pm UTC](https://discuss.elastic.co/t/wildcard-query-over--all-field-on-elasticsearch-5-failed/67315 "2016-11-30T13:22:36Z")
Hi the following query is not working anymore with ES 5.0 : GET g\_contents/\_search { "query": { "wildcard" : { "\_all" : { "wildcard" : "\*doc\*", "boos… --- ## [Index and Alias name exact name](https://discuss.elastic.co/t/index-and-alias-name-exact-name/320989)
**Author:** [@QuestBevan](https://discuss.elastic.co/u/QuestBevan)\ **Replies:** 5\ **Last updated:** [December 12, 2022, 9:29am UTC](https://discuss.elastic.co/t/index-and-alias-name-exact-name/320989 "2022-12-12T09:29:11Z")
Hi, An index and alias with the exact same name was accidently created and now our Elasticsearch node won't connect to our cluster. Luckily only 1 node was restarted before we read a support article saying DO NOT restar… --- ## [Filebeat logs not being published to Elastic](https://discuss.elastic.co/t/filebeat-logs-not-being-published-to-elastic/263605)
**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\ **Replies:** 5\ **Last updated:** [February 9, 2021, 1:11pm UTC](https://discuss.elastic.co/t/filebeat-logs-not-being-published-to-elastic/263605 "2021-02-09T13:11:19Z")
I am sending csv data from filebeat to elastic search following this guide: I have created an ingest pipeline, tested it with the \_simulate api, and everything looks fine. This is my filebeat configuration: fil… --- ## [Magento 2.4.1 with Elasticsearch 7.10](https://discuss.elastic.co/t/magento-2-4-1-with-elasticsearch-7-10/257585)
**Author:** [@ioannigz](https://discuss.elastic.co/u/ioannigz)\ **Replies:** 4\ **Last updated:** [December 30, 2020, 11:35am UTC](https://discuss.elastic.co/t/magento-2-4-1-with-elasticsearch-7-10/257585 "2020-12-30T11:35:17Z")
Hi....If anyone has experience with Magento and Elasticsearch please? We have this strange issue which came up latest days. We use magento 2.4.1 and elasticsearch 7.10 Our catalog contains about 600 categories with 20… --- ## [Change the timestamp format in Watcher](https://discuss.elastic.co/t/change-the-timestamp-format-in-watcher/210612)
**Author:** [@Karrie\_Koo](https://discuss.elastic.co/u/Karrie_Koo)\ **Replies:** 4\ **Last updated:** [December 11, 2019, 1:46am UTC](https://discuss.elastic.co/t/change-the-timestamp-format-in-watcher/210612 "2019-12-11T01:46:40Z")
"actions": { "log\_error": { "logging": { "category": "watcher.logging.bppm.None", "level": "info", "text": "Found {{ctx.payload.hits.total}} exception in the server logs (EAP)\\n{{#ctx.payload.hits.hits}}\[MINOR\] {{\_s… --- ## [S3 input plugin: since\_db doesn't work properly: high CPU usage of logstash when more files in folder](https://discuss.elastic.co/t/s3-input-plugin-since-db-doesnt-work-properly-high-cpu-usage-of-logstash-when-more-files-in-folder/200717)
**Author:** [@Pista](https://discuss.elastic.co/u/Pista)\ **Replies:** 0\ **Last updated:** [September 23, 2019, 3:19pm UTC](https://discuss.elastic.co/t/s3-input-plugin-since-db-doesnt-work-properly-high-cpu-usage-of-logstash-when-more-files-in-folder/200717 "2019-09-23T15:19:22Z")
Issue: CPU Usage too high when thousands of files in AWS S3 log folder (s3 input plugin in use) ELK/Logstash setup AWS S3 bucket is scanned by S3 input plugin and it sends data to Logstash Issue description: Seems t… --- ## [Why the score in Elasticsearch is different if the data is same in two records](https://discuss.elastic.co/t/why-the-score-in-elasticsearch-is-different-if-the-data-is-same-in-two-records/26613)
**Author:** [@vaniaravinda](https://discuss.elastic.co/u/vaniaravinda)\ **Replies:** 8\ **Last updated:** [August 3, 2015, 10:33am UTC](https://discuss.elastic.co/t/why-the-score-in-elasticsearch-is-different-if-the-data-is-same-in-two-records/26613 "2015-08-03T10:33:32Z")
Hi, Can someone let me know how the score is calculating. I'm having two records with the same data. Please find below. PUT titles/title/1 {"title": "SAME OLD SONG AND DANCE","composers": "perry"} PUT titles/title/15 {… --- ## [Error trying to update index setting "max\_ngram\_diff"](https://discuss.elastic.co/t/error-trying-to-update-index-setting-max-ngram-diff/206492)
**Author:** [@RomeoBravo](https://discuss.elastic.co/u/RomeoBravo)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 10:16pm UTC](https://discuss.elastic.co/t/error-trying-to-update-index-setting-max-ngram-diff/206492 "2019-11-04T22:16:11Z")
In an attempt to reset my index settings to use the default for max\_ngram\_diff, I used the PUT \/\_settings API to set this property to null, which successfully removed it from that index's explicit settings. Now… --- ## [Nested Query Against Different Index Mappings using ignore\_unmapped](https://discuss.elastic.co/t/nested-query-against-different-index-mappings-using-ignore-unmapped/101716)
**Author:** [@ymao](https://discuss.elastic.co/u/ymao)\ **Replies:** 1\ **Last updated:** [September 27, 2017, 11:46am UTC](https://discuss.elastic.co/t/nested-query-against-different-index-mappings-using-ignore-unmapped/101716 "2017-09-27T11:46:43Z")
Related to this discussion: Nested query and ignore\_unmapped option problem Hi, Using ES 5.6.1, I am trying to make a single query to multiple indices that have slightly different index mappings for a field. One index … --- ## [ERROR \[ExceptionHandler\] Cannot read properties of undefined (reading 'cloud')](https://discuss.elastic.co/t/error-exceptionhandler-cannot-read-properties-of-undefined-reading-cloud/337436)
**Author:** [@mohamad\_khubayb](https://discuss.elastic.co/u/mohamad_khubayb)\ **Replies:** 3\ **Last updated:** [July 3, 2023, 3:09pm UTC](https://discuss.elastic.co/t/error-exceptionhandler-cannot-read-properties-of-undefined-reading-cloud/337436 "2023-07-03T15:09:09Z")
I'm trying to use ElasticSearch in a NestJs project. The problem is after setting up everything I getting this error: --- ## [Elastic - log rotation](https://discuss.elastic.co/t/elastic-log-rotation/47185)
**Author:** [@ben1984](https://discuss.elastic.co/u/ben1984)\ **Replies:** 3\ **Last updated:** [April 14, 2016, 11:00pm UTC](https://discuss.elastic.co/t/elastic-log-rotation/47185 "2016-04-14T23:00:40Z")
Hi, I'm using elastic 2.1 . When I run the ElasticSearch, after a while the log files take all the free space in / and the node goes down... The logs are already in a rotating file mode. Meaning, every day there is … --- ## [Custom Metric - Calculating the error %](https://discuss.elastic.co/t/custom-metric-calculating-the-error/88511)
**Author:** [@josna](https://discuss.elastic.co/u/josna)\ **Replies:** 1\ **Last updated:** [June 9, 2017, 11:55am UTC](https://discuss.elastic.co/t/custom-metric-calculating-the-error/88511 "2017-06-09T11:55:13Z")
I need to calculate the error percentage based on the success and failure rate for a request. Lets say i have Login request where i have to calculate based on the code i receive (200 and 500/404). How can i achieve erro… --- ## [Close index API does not seem to provide option to ignore missing indexes](https://discuss.elastic.co/t/close-index-api-does-not-seem-to-provide-option-to-ignore-missing-indexes/31998)
**Author:** [@benfranklin79](https://discuss.elastic.co/u/benfranklin79)\ **Replies:** 7\ **Last updated:** [October 14, 2015, 8:32pm UTC](https://discuss.elastic.co/t/close-index-api-does-not-seem-to-provide-option-to-ignore-missing-indexes/31998 "2015-10-14T20:32:10Z")
I've recently tried to use the close functionality described in: https://www.elastic.co/guide/en/elasticsearch/reference/1.7/indices-open-close.html Yet it seems that the option ignore\_unavailable is not working for… --- ## [How to speed up elasticsearch startup?](https://discuss.elastic.co/t/how-to-speed-up-elasticsearch-startup/106180)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 4\ **Last updated:** [November 2, 2017, 12:37pm UTC](https://discuss.elastic.co/t/how-to-speed-up-elasticsearch-startup/106180 "2017-11-02T12:37:44Z")
Hi, We are still using ES 5.1.2 in production as single instance. Is there any way to speed up the startup time? I restarted because I updated the used jre. Startup takes about 40 minutes until all indices are at stat… --- ## [Logstash not updating documents JDBC Postgres](https://discuss.elastic.co/t/logstash-not-updating-documents-jdbc-postgres/87322)
**Author:** [@ImTheDeveloper](https://discuss.elastic.co/u/ImTheDeveloper)\ **Replies:** 4\ **Last updated:** [May 30, 2017, 5:33am UTC](https://discuss.elastic.co/t/logstash-not-updating-documents-jdbc-postgres/87322 "2017-05-30T05:33:05Z")
Hi All, Every hour my data is updated in Postgres. The data in my table is updated each hour with a full drop of the table and a new bulk insert of the data. Right now, I am running logstash JDBC on a schedule so that 5… --- ## [Display latency, throughput of APM instrumented apps in custom Kibana dashboard](https://discuss.elastic.co/t/display-latency-throughput-of-apm-instrumented-apps-in-custom-kibana-dashboard/314306)
**Author:** [@catalin.bulancea](https://discuss.elastic.co/u/catalin.bulancea)\ **Replies:** 5\ **Last updated:** [September 21, 2022, 9:45am UTC](https://discuss.elastic.co/t/display-latency-throughput-of-apm-instrumented-apps-in-custom-kibana-dashboard/314306 "2022-09-21T09:45:28Z")
Hello people, We have instrumented some Java and .NET applications with APM agents. So in Kibana-\>APM -\>Services we can see the apps and all the relevant metrics like Throughput, Latency, Failed transaction rate, etc. … --- ## [How to increase the totalresults count? currently it is capped to 10000](https://discuss.elastic.co/t/how-to-increase-the-totalresults-count-currently-it-is-capped-to-10000/289624)
**Author:** [@Mecadamia.nut](https://discuss.elastic.co/u/Mecadamia.nut)\ **Replies:** 5\ **Last updated:** [November 22, 2021, 7:07pm UTC](https://discuss.elastic.co/t/how-to-increase-the-totalresults-count-currently-it-is-capped-to-10000/289624 "2021-11-22T19:07:54Z")
We have around 35k records ingested in the appsearch engine. when we do the default search without any searchTerm it gives 10000 as the totalResults count instead of 35000 even though the user may not scroll through all … --- ## [Unable to connect to Remote Elastic Setup via Transport Client](https://discuss.elastic.co/t/unable-to-connect-to-remote-elastic-setup-via-transport-client/168948)
**Author:** [@Surabhi\_Kannan](https://discuss.elastic.co/u/Surabhi_Kannan)\ **Replies:** 5\ **Last updated:** [February 19, 2019, 2:10pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-remote-elastic-setup-via-transport-client/168948 "2019-02-19T14:10:56Z")
I am working on ElasticSearch version 6.6.0, Single Node Cluster running on a remote VM. I wanted to connect Java Transport Client to the remote ES using the tcp port 9300. I was successful in opening the tcp port to be … --- ## [Comparing metric over two time duration under same index](https://discuss.elastic.co/t/comparing-metric-over-two-time-duration-under-same-index/245964)
**Author:** [@SUMANTA\_ROY](https://discuss.elastic.co/u/SUMANTA_ROY)\ **Replies:** 6\ **Last updated:** [August 22, 2020, 8:45pm UTC](https://discuss.elastic.co/t/comparing-metric-over-two-time-duration-under-same-index/245964 "2020-08-22T20:45:51Z")
Hi, I am trying to find a way to visualize a bar chart displaying a metric value side by side (two different time periods), from the same index. Example : Comparing avg. attendance of class for 15 days of April month w… --- ## [Kibana login page issue](https://discuss.elastic.co/t/kibana-login-page-issue/100993)
**Author:** [@abhisek](https://discuss.elastic.co/u/abhisek)\ **Replies:** 6\ **Last updated:** [September 19, 2017, 12:46pm UTC](https://discuss.elastic.co/t/kibana-login-page-issue/100993 "2017-09-19T12:46:47Z")
Hi , I have installed X-pack on elasticsearch and kibana , and started the following service, but when i am trying to open kibana on my browser, the login page is not loading. Following is the screenshot on what i'm … --- ## [ELK Filebeat Offline and Online Processing](https://discuss.elastic.co/t/elk-filebeat-offline-and-online-processing/68375)
**Author:** [@Nastooh](https://discuss.elastic.co/u/Nastooh)\ **Replies:** 6\ **Last updated:** [December 9, 2016, 4:39pm UTC](https://discuss.elastic.co/t/elk-filebeat-offline-and-online-processing/68375 "2016-12-09T16:39:55Z")
Hi Have an all in one ELK setup, where Filebeat, Logstash and Elasticsearch reside on the same machine. Currently, I am able process live changes on designated log files, process them and display them through Kibana. To… --- ## [Where to drop jar containing custome plugin or encoder like custom Kafka message decoder](https://discuss.elastic.co/t/where-to-drop-jar-containing-custome-plugin-or-encoder-like-custom-kafka-message-decoder/39190)
**Author:** [@anandnsingh](https://discuss.elastic.co/u/anandnsingh)\ **Replies:** 6\ **Last updated:** [February 21, 2016, 8:27pm UTC](https://discuss.elastic.co/t/where-to-drop-jar-containing-custome-plugin-or-encoder-like-custom-kafka-message-decoder/39190 "2016-02-21T20:27:49Z")
How to use custom decoder. What is the right location of a jar file containing this custom decoder. I --- ## [ElasticSearch Restore "Unknown parameter type"](https://discuss.elastic.co/t/elasticsearch-restore-unknown-parameter-type/112125)
**Author:** [@0NE](https://discuss.elastic.co/u/0NE)\ **Replies:** 3\ **Last updated:** [December 17, 2017, 9:06pm UTC](https://discuss.elastic.co/t/elasticsearch-restore-unknown-parameter-type/112125 "2017-12-17T21:06:23Z")
I am trying to restore my elasticsearch on a new machine. I copied the backup across, set up a new repo with the same name (called myrep). I have check if this works by doing: \> \`GET http://127.0.0.1:9200/\_snapshot\` w… --- ## [Timelion display value Xaxis](https://discuss.elastic.co/t/timelion-display-value-xaxis/83816)
**Author:** [@mehdichilla](https://discuss.elastic.co/u/mehdichilla)\ **Replies:** 2\ **Last updated:** [April 28, 2017, 12:27pm UTC](https://discuss.elastic.co/t/timelion-display-value-xaxis/83816 "2017-04-28T12:27:33Z")
Hello, I have a visualization created with timelion, and I need to display a line indicating the value of the X axis (time index). I am looking for how to recover the value of the X axis. Thank you all for your hel… --- ## [Logstash 6.2.4 high CPU usage](https://discuss.elastic.co/t/logstash-6-2-4-high-cpu-usage/138347)
**Author:** [@vzh](https://discuss.elastic.co/u/vzh)\ **Replies:** 3\ **Last updated:** [July 4, 2018, 10:23am UTC](https://discuss.elastic.co/t/logstash-6-2-4-high-cpu-usage/138347 "2018-07-04T10:23:47Z")
Hello. Since we've updated logstash from 5.4.2 to 6.2.4 version we have problem with high using of CPU. As you can see on screenshots this high usage is not depend on message rate: All config files are the same. We… --- ## [How do i get elasticsearch logs into elasticsearch?](https://discuss.elastic.co/t/how-do-i-get-elasticsearch-logs-into-elasticsearch/128758)
**Author:** [@elasticated](https://discuss.elastic.co/u/elasticated)\ **Replies:** 3\ **Last updated:** [April 20, 2018, 2:53pm UTC](https://discuss.elastic.co/t/how-do-i-get-elasticsearch-logs-into-elasticsearch/128758 "2018-04-20T14:53:32Z")
Completely new to ELK, and very confused right now, and in the asking idiotic questions phase, so bear with me... I've installed ELK on linux and the first thing I wanted to try was getting some logs into elastic and th… --- ## [Filebeat memory leak?](https://discuss.elastic.co/t/filebeat-memory-leak/43215)
**Author:** [@zpp](https://discuss.elastic.co/u/zpp)\ **Replies:** 3\ **Last updated:** [March 3, 2016, 7:43am UTC](https://discuss.elastic.co/t/filebeat-memory-leak/43215 "2016-03-03T07:43:40Z")
Hi, I've set up a filebeat service running on windows 2012 to ingest some application log files to elasticsearch. Feeding path is like this: filebeat -\> logstash -\> ElasticSearch. After running about 2-3 days, from per… --- ## [ILM policy setup for automated deployment system](https://discuss.elastic.co/t/ilm-policy-setup-for-automated-deployment-system/193985)
**Author:** [@somi](https://discuss.elastic.co/u/somi)\ **Replies:** 4\ **Last updated:** [August 6, 2019, 12:12pm UTC](https://discuss.elastic.co/t/ilm-policy-setup-for-automated-deployment-system/193985 "2019-08-06T12:12:02Z")
Hello there, I am working on the development of a monitoring application for a large scale distributed system and lately I am facing an elastic setup problem, hope you guys can help me out. First of all, I have to poin… --- ## [Is it possible to turn off "Elasticsearch built-in security features are not enabled" notifications?](https://discuss.elastic.co/t/is-it-possible-to-turn-off-elasticsearch-built-in-security-features-are-not-enabled-notifications/286167)
**Author:** [@neergttocsdivad](https://discuss.elastic.co/u/neergttocsdivad)\ **Replies:** 2\ **Last updated:** [October 8, 2021, 4:20am UTC](https://discuss.elastic.co/t/is-it-possible-to-turn-off-elasticsearch-built-in-security-features-are-not-enabled-notifications/286167 "2021-10-08T04:20:26Z")
I'm using ES on a stand-alone computer, without a wired or wireless network or internet connections. --- ## [If condition in scripting](https://discuss.elastic.co/t/if-condition-in-scripting/179963)
**Author:** [@srivalya\_elluru](https://discuss.elastic.co/u/srivalya_elluru)\ **Replies:** 2\ **Last updated:** [May 8, 2019, 1:45pm UTC](https://discuss.elastic.co/t/if-condition-in-scripting/179963 "2019-05-08T13:45:00Z")
Hello I'm new to painless language, and I don't understand how to exactly to write an if condition. I want to show the value 1 or 0 in my visualization but the if statement I wrote doesn't seem to work. { "script" : { … --- ## [Can't change default password](https://discuss.elastic.co/t/cant-change-default-password/88265)
**Author:** [@Shlomi\_Toren](https://discuss.elastic.co/u/Shlomi_Toren)\ **Replies:** 5\ **Last updated:** [June 6, 2017, 5:18am UTC](https://discuss.elastic.co/t/cant-change-default-password/88265 "2017-06-06T05:18:30Z")
Hey, I installed Xpack for elasticsearch, and tried to to change the password as it says here: https://www.elastic.co/guide/en/x-pack/current/security-getting-started.html Running this: curl -XPUT -u elastic localhost:… --- ## [RDD saveToEs performance](https://discuss.elastic.co/t/rdd-savetoes-performance/42935)
**Author:** [@aaskey](https://discuss.elastic.co/u/aaskey)\ **Replies:** 5\ **Last updated:** [March 3, 2016, 9:53am UTC](https://discuss.elastic.co/t/rdd-savetoes-performance/42935 "2016-03-03T09:53:34Z")
Hi there, With Es 2.2, Spark 1.6, Scala 2.10, SaveToEs performance is around 20 documents/second on MacBook Pro. Each document is less that 1KB. Is this expected? I am using the latest 2.2 elasticsearch-spark connector… --- ## [Kibana KQL search common value on single column](https://discuss.elastic.co/t/kibana-kql-search-common-value-on-single-column/296077)
**Author:** [@Mercurochrome](https://discuss.elastic.co/u/Mercurochrome)\ **Replies:** 7\ **Last updated:** [February 4, 2022, 8:50am UTC](https://discuss.elastic.co/t/kibana-kql-search-common-value-on-single-column/296077 "2022-02-04T08:50:48Z")
Hello, I'm new on Kibana and I can't find answers to my problem, hopefully someone can help :slight\_smile: . Here is my problem : I have a table with some value like (Column A = Port number, Column B = IP Address, Colu… --- ## [Elapsed time calculation between different events](https://discuss.elastic.co/t/elapsed-time-calculation-between-different-events/185141)
**Author:** [@RDM](https://discuss.elastic.co/u/RDM)\ **Replies:** 1\ **Last updated:** [June 11, 2019, 10:19am UTC](https://discuss.elastic.co/t/elapsed-time-calculation-between-different-events/185141 "2019-06-11T10:19:27Z")
Hi, I know this has been discussed before, but I just wanted to make sure I had the correct up to date info and approach on this:- Fairly new to Elasticsearch, moving up the learning curve :slight\_smile: We have:- Fil… --- ## [Logstash: Reading a file inside filter/input/output](https://discuss.elastic.co/t/logstash-reading-a-file-inside-filter-input-output/37855)
**Author:** [@krushnat\_khawale](https://discuss.elastic.co/u/krushnat_khawale)\ **Replies:** 6\ **Last updated:** [December 24, 2015, 2:54pm UTC](https://discuss.elastic.co/t/logstash-reading-a-file-inside-filter-input-output/37855 "2015-12-24T14:54:31Z")
I am uploading data from a CSV file and here is Use case. for a column, user can enter description, and I want to group the records in several categories based on description for that I want to add one more column/field … --- ## [How to find Similar documents](https://discuss.elastic.co/t/how-to-find-similar-documents/45539)
**Author:** [@basharz](https://discuss.elastic.co/u/basharz)\ **Replies:** 3\ **Last updated:** [March 28, 2016, 2:13pm UTC](https://discuss.elastic.co/t/how-to-find-similar-documents/45539 "2016-03-28T14:13:14Z")
Guys, let us say i have ElasticSearch index and it contains about 10,000 documents, i did random manual check on the field "building name" for few documents and found there are a lot of documents matching each others b… --- ## [Filebeat unable to access logs under “/var/lib/docker/containers” path due to "Permission Denied" issue](https://discuss.elastic.co/t/filebeat-unable-to-access-logs-under-var-lib-docker-containers-path-due-to-permission-denied-issue/234696)
**Author:** [@bhavaniprasad\_reddy](https://discuss.elastic.co/u/bhavaniprasad_reddy)\ **Replies:** 0\ **Last updated:** [May 28, 2020, 9:04am UTC](https://discuss.elastic.co/t/filebeat-unable-to-access-logs-under-var-lib-docker-containers-path-due-to-permission-denied-issue/234696 "2020-05-28T09:04:45Z")
I am trying to deploy ELK stack with Filebeat in Openshift environment. Filebeat is trying to read the log files under "/var/lib/docker/containers" path of a pod but it failed with "Permission Denied" error. I am using… --- ## [How to sum the results of multiple buckets](https://discuss.elastic.co/t/how-to-sum-the-results-of-multiple-buckets/153438)
**Author:** [@KatrinaQ999](https://discuss.elastic.co/u/KatrinaQ999)\ **Replies:** 1\ **Last updated:** [October 27, 2018, 6:03pm UTC](https://discuss.elastic.co/t/how-to-sum-the-results-of-multiple-buckets/153438 "2018-10-27T18:03:50Z")
I have data like: Name Update\_Date Amount AAA 2001-08-28T16:21:46 60 BBB 2001-08-27T06:11:52 50 CCC … --- ## [Painless access to nested objects](https://discuss.elastic.co/t/painless-access-to-nested-objects/73882)
**Author:** [@Jean\_Pierre](https://discuss.elastic.co/u/Jean_Pierre)\ **Replies:** 1\ **Last updated:** [February 3, 2017, 4:57pm UTC](https://discuss.elastic.co/t/painless-access-to-nested-objects/73882 "2017-02-03T16:57:48Z")
Hi, I'm facing the following situation : My data has a structure similar to this { "site1" : { "events": \[ {"event1", "date1"}, {"event1","date1-2"},{"event2","date3"}}\] ... }, "site2" : … --- ## [Can't log in to Kibana](https://discuss.elastic.co/t/cant-log-in-to-kibana/121940)
**Author:** [@zachy](https://discuss.elastic.co/u/zachy)\ **Replies:** 2\ **Last updated:** [March 1, 2018, 7:34pm UTC](https://discuss.elastic.co/t/cant-log-in-to-kibana/121940 "2018-03-01T19:34:20Z")
I am running an Elasticsearch cluster with 3 nodes. 2 are data nodes and one is the co-ordinating node. There is currently no data being sent to Elasticsearch yet. I have secured my Elasticsearch cluster with HTTPS and … --- ## [How to display values in "line chart"](https://discuss.elastic.co/t/how-to-display-values-in-line-chart/49287)
**Author:** [@tuankun](https://discuss.elastic.co/u/tuankun)\ **Replies:** 4\ **Last updated:** [May 6, 2016, 12:55am UTC](https://discuss.elastic.co/t/how-to-display-values-in-line-chart/49287 "2016-05-06T00:55:04Z")
Hi all, I created a line chart to show CPU utilization,I know it could show the value when I click the point of the line,but how to display values automatically along with the line when click the right item(such as Max … --- ## [ECS Fields Not Mapping Correctly Automatically](https://discuss.elastic.co/t/ecs-fields-not-mapping-correctly-automatically/224190)
**Author:** [@scottdfedorov](https://discuss.elastic.co/u/scottdfedorov)\ **Replies:** 5\ **Last updated:** [March 19, 2020, 7:50pm UTC](https://discuss.elastic.co/t/ecs-fields-not-mapping-correctly-automatically/224190 "2020-03-19T19:50:33Z")
When I index documents into Elasticsearch, the fields which conform to ECS are not being mapped correctly and all are being made into "text" fields, with "keyword" sub-fields. What steps are needed to utilize ECS? I was… --- ## [Disable APM Remote configuration Errors](https://discuss.elastic.co/t/disable-apm-remote-configuration-errors/249744)
**Author:** [@Loran\_Fininure](https://discuss.elastic.co/u/Loran_Fininure)\ **Replies:** 1\ **Last updated:** [September 24, 2020, 11:58am UTC](https://discuss.elastic.co/t/disable-apm-remote-configuration-errors/249744 "2020-09-24T11:58:27Z")
Kibana version: 7.8.1 Elasticsearch version: 7.8.1 APM Server version: 7.8.1 Is there anything special in your setup? rum: enabled: false ilm: setup: enabled: false overwrite: false We use the template that is … --- ## [Impossible d'effectuer une requête en fonction d'une variable dans mon flux](https://discuss.elastic.co/t/impossible-deffectuer-une-requete-en-fonction-dune-variable-dans-mon-flux/121221)
**Author:** [@DiSiZ](https://discuss.elastic.co/u/DiSiZ)\ **Replies:** 7\ **Last updated:** [February 23, 2018, 4:19pm UTC](https://discuss.elastic.co/t/impossible-deffectuer-une-requete-en-fonction-dune-variable-dans-mon-flux/121221 "2018-02-23T16:19:13Z")
Bonjour, Je possède un problème que je n'arrive pas à résoudre sur ElasticSearch. Je vais essayer d'être le plus précis possible, j'ai accès à un flux JSON via une URL Elastic. J'effectue des requêtes à cette URL et j'… --- ## [How to Approach User Retention Analysis?](https://discuss.elastic.co/t/how-to-approach-user-retention-analysis/51634)
**Author:** [@Anthony\_H](https://discuss.elastic.co/u/Anthony_H)\ **Replies:** 2\ **Last updated:** [June 2, 2016, 6:24pm UTC](https://discuss.elastic.co/t/how-to-approach-user-retention-analysis/51634 "2016-06-02T18:24:42Z")
So I've been trying to figure out how to set up charts that show user retention analysis. I already have logs of users logging in with their ID and DateTime. I'm trying to figure out if there is a way to have Kibana d… --- ## [Stack Monitoring - Elasticsearch Nodes not displayed as monitored with Metricbeat](https://discuss.elastic.co/t/stack-monitoring-elasticsearch-nodes-not-displayed-as-monitored-with-metricbeat/307979)
**Author:** [@AndreiRD](https://discuss.elastic.co/u/AndreiRD)\ **Replies:** 4\ **Last updated:** [July 6, 2022, 1:23am UTC](https://discuss.elastic.co/t/stack-monitoring-elasticsearch-nodes-not-displayed-as-monitored-with-metricbeat/307979 "2022-07-06T01:23:46Z")
Hi, I'm trying to set up Stack Monitoring and I went through all the steps from here: Collecting Elasticsearch monitoring data with Metricbeat | Elasticsearch Guide \[8.2\] | Elastic Enabled the collection of monitoring… --- ## [Extract first 50 characters from message "body" into new field](https://discuss.elastic.co/t/extract-first-50-characters-from-message-body-into-new-field/252574)
**Author:** [@SecretSquizza](https://discuss.elastic.co/u/SecretSquizza)\ **Replies:** 4\ **Last updated:** [October 20, 2020, 7:44am UTC](https://discuss.elastic.co/t/extract-first-50-characters-from-message-body-into-new-field/252574 "2020-10-20T07:44:15Z")
Hello everyone, Firstly, apologies for any formatting mistakes in this post - its my first one... i'm relatively new to the Elastic stack and need to get a shortened version of the message body into another field so it… --- ## [Elasticsearch - Failed to install template. 라는 오류가 생성됩니다](https://discuss.elastic.co/t/elasticsearch-failed-to-install-template/239233)
**Author:** [@noobnoob](https://discuss.elastic.co/u/noobnoob)\ **Replies:** 4\ **Last updated:** [July 8, 2020, 3:29am UTC](https://discuss.elastic.co/t/elasticsearch-failed-to-install-template/239233 "2020-07-08T03:29:14Z")
Elastisearch : 7.8.0 Logstash : 7.8.0-1 KIBANA : 7.8.0 Ubuntu16.04 데스크톱에서 ELK를 설치하고 다른 PC에 있는 Suritaca의 탐지 로그를 시각화하려는데 sudo ./logstash -f /usr/share/logstash/bin/logstash.conf 라고 명령어를 입력하면 \[ERROR\] 2020-06-30 10:03:… [Previous page](https://discuss.elastic.co/top.md?page=664&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=666&per_page=50&period=all)