# Top **URL:** https://discuss.elastic.co/top.md?page=681&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 682 --- ## [Events By User](https://discuss.elastic.co/t/events-by-user/117230)
**Author:** [@lore6673](https://discuss.elastic.co/u/lore6673)\ **Replies:** 7\ **Last updated:** [January 31, 2018, 8:04pm UTC](https://discuss.elastic.co/t/events-by-user/117230 "2018-01-31T20:04:04Z")
Hi, I have a doc in ES with the number of events of Google Analytics and I want to create a visualization with the Average number of Events By Users. In the doc I have the field "email" and I would like to create a sort … --- ## [Elastic Search integration with Magneto 2.3.3 Version](https://discuss.elastic.co/t/elastic-search-integration-with-magneto-2-3-3-version/234680)
**Author:** [@parthipan\_p](https://discuss.elastic.co/u/parthipan_p)\ **Replies:** 8\ **Last updated:** [June 2, 2020, 1:20pm UTC](https://discuss.elastic.co/t/elastic-search-integration-with-magneto-2-3-3-version/234680 "2020-06-02T13:20:43Z")
I am getting empty results while searching for the frontend. Got the below error in log file. main.CRITICAL: {"error":{"root\_cause":\[{"type":"query\_shard\_exception","reason":"No mapping found for \[position~asc\] in order… --- ## [Logstash if condition issue](https://discuss.elastic.co/t/logstash-if-condition-issue/105843)
**Author:** [@ruranga](https://discuss.elastic.co/u/ruranga)\ **Replies:** 8\ **Last updated:** [November 3, 2017, 9:00am UTC](https://discuss.elastic.co/t/logstash-if-condition-issue/105843 "2017-11-03T09:00:07Z")
I have configured logstash filter as follows. But following filed "NFC\_APP\_TYPE" (newly added filed by using a if condition) doesn't appear in Kibana dash board filter{ ......... if \[AppCode\] == "505050" { mutate {ad… --- ## [Difficulty Creating a time series line chart](https://discuss.elastic.co/t/difficulty-creating-a-time-series-line-chart/40402)
**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\ **Replies:** 8\ **Last updated:** [February 18, 2016, 8:07am UTC](https://discuss.elastic.co/t/difficulty-creating-a-time-series-line-chart/40402 "2016-02-18T08:07:54Z")
In Kibana 4.2.1, I have data loaded like so: \*\* Member Type |Count |@timestamp\*\* Member Type A | 234 | 2016-01-28 Member Type B | 345 | 2016-01-28 Member Type C | 187 | 2016-01-28 I don't underst… --- ## [Index creation always returns "shards\_acknowledged": false AFTER Elasticsearch5.0 upgrade](https://discuss.elastic.co/t/index-creation-always-returns-shards-acknowledged-false-after-elasticsearch5-0-upgrade/66041)
**Author:** [@purnashree.b](https://discuss.elastic.co/u/purnashree.b)\ **Replies:** 1\ **Last updated:** [November 15, 2016, 2:54am UTC](https://discuss.elastic.co/t/index-creation-always-returns-shards-acknowledged-false-after-elasticsearch5-0-upgrade/66041 "2016-11-15T02:54:50Z")
Hi, I upgraded from elasticsearch 2.4 to v 5.0. After which, index creation always turns the cluster state to red and the response says below {"acknowledged": true,"shards\_acknowledged": false} I send the below setti… --- ## [Check that a message is in JSON to avoid \_jsonparsefailure](https://discuss.elastic.co/t/check-that-a-message-is-in-json-to-avoid--jsonparsefailure/54959)
**Author:** [@norandom](https://discuss.elastic.co/u/norandom)\ **Replies:** 1\ **Last updated:** [July 8, 2016, 5:44am UTC](https://discuss.elastic.co/t/check-that-a-message-is-in-json-to-avoid--jsonparsefailure/54959 "2016-07-08T05:44:30Z")
Hi, I have a logfile, which sadly is mixed. There are JSON lines, and there are free text lines. The good news is, that there is always a line break and JSON parsing works. Currently I do: if "\_jsonparsefailure… --- ## [Problems with bulk indexing via JavaScript client](https://discuss.elastic.co/t/problems-with-bulk-indexing-via-javascript-client/192535)
**Author:** [@waynesmallman](https://discuss.elastic.co/u/waynesmallman)\ **Replies:** 5\ **Last updated:** [July 30, 2019, 2:38pm UTC](https://discuss.elastic.co/t/problems-with-bulk-indexing-via-javascript-client/192535 "2019-07-30T14:38:46Z")
Hi, I'm using a variant of the code for bulk indexing from the documentation for Elastic 6.x, and I'm having a few problems. Here's a typical document: { index: { \_index: 'messages', \_type: '\_doc', \_id: 21653 } }, { … --- ## [Drilling into Suricata data](https://discuss.elastic.co/t/drilling-into-suricata-data/189629)
**Author:** [@sstover](https://discuss.elastic.co/u/sstover)\ **Replies:** 4\ **Last updated:** [July 11, 2019, 6:46pm UTC](https://discuss.elastic.co/t/drilling-into-suricata-data/189629 "2019-07-11T18:46:31Z")
We're a Suricata shop and I was hoping to use the SIEM to crossreference things like (external) IP reputation with Suricata events using the SIEM. Starting out slowly, before jumping into anything like external reputati… --- ## [NFS - Gateway FS index storage](https://discuss.elastic.co/t/nfs-gateway-fs-index-storage/9592)
**Author:** [@bryanb](https://discuss.elastic.co/u/bryanb)\ **Replies:** 4\ **Last updated:** [November 9, 2012, 10:52am UTC](https://discuss.elastic.co/t/nfs-gateway-fs-index-storage/9592 "2012-11-09T10:52:42Z")
I need help configuring an elastic search cluster. I would like to have the index shared between to nodes via an NFS mount. I have set the gateway.fs.location property to the NFS destination and I see a directory … --- ## [Detection rule kquery will not trigger but the query match](https://discuss.elastic.co/t/detection-rule-kquery-will-not-trigger-but-the-query-match/273085)
**Author:** [@leon3](https://discuss.elastic.co/u/leon3)\ **Replies:** 3\ **Last updated:** [May 31, 2021, 12:03pm UTC](https://discuss.elastic.co/t/detection-rule-kquery-will-not-trigger-but-the-query-match/273085 "2021-05-31T12:03:54Z")
Hi I have a weird issue when use kquery in detection rules. I use a simple query to match a field and triggering action for that but the rule will not be triggered while its query is matching in the specified interval. … --- ## [Replace failing disks on a single node](https://discuss.elastic.co/t/replace-failing-disks-on-a-single-node/19986)
**Author:** [@catwallader](https://discuss.elastic.co/u/catwallader)\ **Replies:** 3\ **Last updated:** [September 27, 2014, 10:09pm UTC](https://discuss.elastic.co/t/replace-failing-disks-on-a-single-node/19986 "2014-09-27T22:09:06Z")
I have a situation where I need to replace disks that are failing on a single node in my 4 node Elasticsearch cluster. As a result I'd like to backup the Elasticsearch data on that node only, replace the disks and t… --- ## [Cluster advice when scaling](https://discuss.elastic.co/t/cluster-advice-when-scaling/168752)
**Author:** [@Jasper\_Nygaard](https://discuss.elastic.co/u/Jasper_Nygaard)\ **Replies:** 6\ **Last updated:** [February 18, 2019, 8:33am UTC](https://discuss.elastic.co/t/cluster-advice-when-scaling/168752 "2019-02-18T08:33:19Z")
Got a log cluster with 3 nodes (all data, ingest, master nodes) with 64GB ram, 1TB SSD and E5-26xxvx's. The load is between 30 and 70% depending on the version of the CPU. All running Windows Server. Some specs of the c… --- ## [Disable automatic rotation Filebeat](https://discuss.elastic.co/t/disable-automatic-rotation-filebeat/63972)
**Author:** [@Clement\_Ros](https://discuss.elastic.co/u/Clement_Ros)\ **Replies:** 6\ **Last updated:** [November 2, 2016, 9:48am UTC](https://discuss.elastic.co/t/disable-automatic-rotation-filebeat/63972 "2016-11-02T09:48:30Z")
Hi, I use logrotate to rotate le log, and i wanted to know how can i disable the automatic rotation of Filebeat ? I already try to change the rotateeverybytes parameters : # Configure log file size limit. If limit i… --- ## [Elasticsearch does not start automatically](https://discuss.elastic.co/t/elasticsearch-does-not-start-automatically/63418)
**Author:** [@sipazzo](https://discuss.elastic.co/u/sipazzo)\ **Replies:** 6\ **Last updated:** [October 24, 2016, 11:46pm UTC](https://discuss.elastic.co/t/elasticsearch-does-not-start-automatically/63418 "2016-10-24T23:46:18Z")
I have 25 Elasticsearch servers in 6 different clusters all running version 2.3.1-1 as a service on OEL7 . I am getting random issues where Elasticsearch won't start upon reboot because the /run/elasticsearch directory i… --- ## [Cannot connect to Sense in spite of http.cors.enabled = true](https://discuss.elastic.co/t/cannot-connect-to-sense-in-spite-of-http-cors-enabled-true/45295)
**Author:** [@jeffkirk1](https://discuss.elastic.co/u/jeffkirk1)\ **Replies:** 6\ **Last updated:** [March 24, 2016, 7:11pm UTC](https://discuss.elastic.co/t/cannot-connect-to-sense-in-spite-of-http-cors-enabled-true/45295 "2016-03-24T19:11:52Z")
Hey folks, I have a six node Elasticsearch cluster with Kibana and Sense installed. Latest versions of everything, cluster initialized today. The cluster is in Amazon EC2 and I'm accessing Kibana and Elasticsearch v… --- ## [Logstash - Level deserialization failed - SOLVED](https://discuss.elastic.co/t/logstash-level-deserialization-failed-solved/40871)
**Author:** [@mturonne](https://discuss.elastic.co/u/mturonne)\ **Replies:** 6\ **Last updated:** [February 9, 2016, 4:20pm UTC](https://discuss.elastic.co/t/logstash-level-deserialization-failed-solved/40871 "2016-02-09T16:20:35Z")
Hello, I am facing a new issue with my Logstash configuration. It follows the previous subject I opened : Log4j SocketAppender. Logstash : tcp input --\> OK, log4j input --\> KO - SOLVED - #20 by wiibaa I am receiving t… --- ## [Logstash - Json Parse Failure and Encoding Problem](https://discuss.elastic.co/t/logstash-json-parse-failure-and-encoding-problem/293447)
**Author:** [@nevincansel](https://discuss.elastic.co/u/nevincansel)\ **Replies:** 7\ **Last updated:** [January 21, 2022, 1:26pm UTC](https://discuss.elastic.co/t/logstash-json-parse-failure-and-encoding-problem/293447 "2022-01-21T13:26:32Z")
Hello, I have a pipeline with tcp input in logstash and pipeline is working without a problem but logs are broken. These are error logs in logstash. 13:34:43.868 \[nioEventLoopGroup-2-2\] WARN logstash.codecs.jsonlines … --- ## [Sincedb\_path under windows](https://discuss.elastic.co/t/sincedb-path-under-windows/53491)
**Author:** [@pittoch](https://discuss.elastic.co/u/pittoch)\ **Replies:** 1\ **Last updated:** [June 23, 2016, 12:27pm UTC](https://discuss.elastic.co/t/sincedb-path-under-windows/53491 "2016-06-23T12:27:09Z")
Hi Where is this directory sincedb\_path on logstash windows installation ? Thanks --- ## [Index Rollover not working](https://discuss.elastic.co/t/index-rollover-not-working/234078)
**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\ **Replies:** 3\ **Last updated:** [May 29, 2020, 3:27pm UTC](https://discuss.elastic.co/t/index-rollover-not-working/234078 "2020-05-29T15:27:36Z")
i am unable to rollover the index. Can you please check attached screenshot. Please help me? I am not seeing any errors related to alias till now also. After modifying policy attached to template and added alias also… --- ## [Help needed i m having the issue failed to perform any bulk index operations: 500 Internal Server Error](https://discuss.elastic.co/t/help-needed-i-m-having-the-issue-failed-to-perform-any-bulk-index-operations-500-internal-server-error/273308)
**Author:** [@khanio99](https://discuss.elastic.co/u/khanio99)\ **Replies:** 5\ **Last updated:** [May 21, 2021, 3:33pm UTC](https://discuss.elastic.co/t/help-needed-i-m-having-the-issue-failed-to-perform-any-bulk-index-operations-500-internal-server-error/273308 "2021-05-21T15:33:58Z")
May 18 10:50:36 debian filebeat\[5663\]: 2021-05-18T10:50:36.145-0400 INFO \[license\] licenser/es\_callback.go:51 Elasticsearch license: Basic May 18 10:50:36 debian filebeat\[5663\]: 2021-05-18T10:… --- ## [Translate filter error with dictionary file](https://discuss.elastic.co/t/translate-filter-error-with-dictionary-file/47507)
**Author:** [@GambitK](https://discuss.elastic.co/u/GambitK)\ **Replies:** 5\ **Last updated:** [May 8, 2016, 12:04am UTC](https://discuss.elastic.co/t/translate-filter-error-with-dictionary-file/47507 "2016-05-08T00:04:19Z")
Logstash is giving me an error with the translate filter, it says that the dictionary file format is not correct: Pipeline aborted due to error {:exception=\>#, :backtrace=\>\["/opt/logstash/vendor/bundle/jruby/1.9/gems/l… --- ## [Elasticsearch 6.0.0 Base64 not found](https://discuss.elastic.co/t/elasticsearch-6-0-0-base64-not-found/117942)
**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\ **Replies:** 4\ **Last updated:** [February 1, 2018, 7:54am UTC](https://discuss.elastic.co/t/elasticsearch-6-0-0-base64-not-found/117942 "2018-02-01T07:54:49Z")
Hi, I am using elasticsearch 6.0.0. I want to encode username and password using Base64. But there is no Base64 class present in jar. Please reply. client.threadPool().getThreadContext().putHeader("Authorization", "Bas… --- ## [Kibana: meaning of iframe url parameters](https://discuss.elastic.co/t/kibana-meaning-of-iframe-url-parameters/53674)
**Author:** [@sen](https://discuss.elastic.co/u/sen)\ **Replies:** 2\ **Last updated:** [June 23, 2016, 9:37am UTC](https://discuss.elastic.co/t/kibana-meaning-of-iframe-url-parameters/53674 "2016-06-23T09:37:54Z")
Hello everyone, I want to build my own web server with tomcat where I can import kibana graphs and dashboard. I found that I can use the iframe urls to do so. Furthermore, in the url there are parameters that I can cha… --- ## [Prune filter plugin - How whitelist a nested field?](https://discuss.elastic.co/t/prune-filter-plugin-how-whitelist-a-nested-field/255720)
**Author:** [@21908](https://discuss.elastic.co/u/21908)\ **Replies:** 3\ **Last updated:** [November 17, 2020, 3:16pm UTC](https://discuss.elastic.co/t/prune-filter-plugin-how-whitelist-a-nested-field/255720 "2020-11-17T15:16:14Z")
Documentation at has this example and it mentions that it would allow only "msg" through. filter { prune { whitelist\_names =\> \["^msg$"\] } } If I have a single record that has "source" … --- ## [Searching multiple index types or indexes (limit results by type)](https://discuss.elastic.co/t/searching-multiple-index-types-or-indexes-limit-results-by-type/583)
**Author:** [@mgoncharov](https://discuss.elastic.co/u/mgoncharov)\ **Replies:** 3\ **Last updated:** [May 15, 2015, 7:42am UTC](https://discuss.elastic.co/t/searching-multiple-index-types-or-indexes-limit-results-by-type/583 "2015-05-15T07:42:34Z")
I know that there is a way to search multiple indexes/types. I am wondering is there a way to pass max hits for each index/index type. We are working on the grouped autocomplete , so would like to be able to make one… --- ## [Larger than the limit](https://discuss.elastic.co/t/larger-than-the-limit/151799)
**Author:** [@HARSHAL\_CHAUDHARI](https://discuss.elastic.co/u/HARSHAL_CHAUDHARI)\ **Replies:** 2\ **Last updated:** [October 23, 2018, 10:11am UTC](https://discuss.elastic.co/t/larger-than-the-limit/151799 "2018-10-23T10:11:59Z")
I am trying to aad 142 MB pdf file in Elasticsearch attachment using ingest. Error details as below FailureReason: BadResponse while attempting PUT on http://127.0.0.1:6379/index-stress-test-10oct2018-r1/document/b6091… --- ## [ES5.2 RestClient: Content type?](https://discuss.elastic.co/t/es5-2-restclient-content-type/74741)
**Author:** [@trisport88](https://discuss.elastic.co/u/trisport88)\ **Replies:** 2\ **Last updated:** [February 14, 2017, 6:19pm UTC](https://discuss.elastic.co/t/es5-2-restclient-content-type/74741 "2017-02-14T18:19:13Z")
Hi, So I have been debugging the following server side exception while indexing: Caused by: com.fasterxml.jackson.core.JsonParseException: Invalid UTF-8 middle byte 0x3f at \[Source: org.elasticsearch.common.bytes.Byt… --- ## [Storing and resolving URLs](https://discuss.elastic.co/t/storing-and-resolving-urls/37135)
**Author:** [@jjdepaul](https://discuss.elastic.co/u/jjdepaul)\ **Replies:** 6\ **Last updated:** [December 16, 2015, 10:41pm UTC](https://discuss.elastic.co/t/storing-and-resolving-urls/37135 "2015-12-16T22:41:23Z")
Kibana 4.3 and ES 2.1, LS 2.0 and SH2.0 Is there a way to render small images in Kibana whose URLs are store/retrieved from ES?! Example - a small image url of a thumbnail is stored in one of the doucments. How coul… --- ## [Curl: (7) Failed to connect to localhost port 5601: Connection refused](https://discuss.elastic.co/t/curl-7-failed-to-connect-to-localhost-port-5601-connection-refused/223605)
**Author:** [@merve](https://discuss.elastic.co/u/merve)\ **Replies:** 1\ **Last updated:** [March 14, 2020, 3:07pm UTC](https://discuss.elastic.co/t/curl-7-failed-to-connect-to-localhost-port-5601-connection-refused/223605 "2020-03-14T15:07:38Z")
Hello everyone. I have a problem with kibana. curl localhost:5601 does not work i couldn't connect with browser. when i try this commands sudo -i service kibana start sudo -i service kibana stop sudo service kibana … --- ## [Add a custom metric to Kibana (4.1)](https://discuss.elastic.co/t/add-a-custom-metric-to-kibana-4-1/44539)
**Author:** [@dapicard](https://discuss.elastic.co/u/dapicard)\ **Replies:** 1\ **Last updated:** [March 18, 2016, 2:09pm UTC](https://discuss.elastic.co/t/add-a-custom-metric-to-kibana-4-1/44539 "2016-03-18T14:09:30Z")
Hi, Using scripted metrics aggregation in ElasticSearch, I created a metric that returns the "duration" between the oldest and the newest document in a bucket, given a date field (useful to know, for example, a session… --- ## [Dec 21st, 2024: \[EN\] Ingesting syslog and auth logs from Journald into Elastic Stack with Elastic-Agent or Beats](https://discuss.elastic.co/t/dec-21st-2024-en-ingesting-syslog-and-auth-logs-from-journald-into-elastic-stack-with-elastic-agent-or-beats/371047)
**Author:** [@TiagoQueiroz](https://discuss.elastic.co/u/TiagoQueiroz)\ **Replies:** 0\ **Last updated:** [December 21, 2024, 8:00am UTC](https://discuss.elastic.co/t/dec-21st-2024-en-ingesting-syslog-and-auth-logs-from-journald-into-elastic-stack-with-elastic-agent-or-beats/371047 "2024-12-21T08:00:00Z")
We have been working hard at Elastic to add more Linux distributions to our supported OS matrix, and support for Debian 12 has just been added for Elastic-Agent and Beats! This post is a demo of the features we're devel… --- ## [Field name \[hello.world\] cannot contain '.' error, when registering query with Percolate on ES 2.2.2](https://discuss.elastic.co/t/field-name-hello-world-cannot-contain-error-when-registering-query-with-percolate-on-es-2-2-2/50327)
**Author:** [@sahilc2200](https://discuss.elastic.co/u/sahilc2200)\ **Replies:** 3\ **Last updated:** [July 28, 2016, 8:33pm UTC](https://discuss.elastic.co/t/field-name-hello-world-cannot-contain-error-when-registering-query-with-percolate-on-es-2-2-2/50327 "2016-07-28T20:33:51Z")
Hi, I am trying to save a query in the Elasticsearch percolator, but it throws this error "Field name \[hello.world\] cannot contain '.'". The mapping is: { "hello": { "properties":{ "world":{ "type":"string" } } } } … --- ## [Logstash file input/output with multiline codec](https://discuss.elastic.co/t/logstash-file-input-output-with-multiline-codec/267552)
**Author:** [@liuke](https://discuss.elastic.co/u/liuke)\ **Replies:** 8\ **Last updated:** [March 19, 2021, 3:03pm UTC](https://discuss.elastic.co/t/logstash-file-input-output-with-multiline-codec/267552 "2021-03-19T15:03:50Z")
Hello, i'm new in logstash and i'm encountering some troubles on building a config that works properly with my needings. What i want to do is: -Input files from multiples folders (application logs, so with java excepti… --- ## [ElasticSearch aggregation get hit with min date](https://discuss.elastic.co/t/elasticsearch-aggregation-get-hit-with-min-date/58916)
**Author:** [@xinevic](https://discuss.elastic.co/u/xinevic)\ **Replies:** 8\ **Last updated:** [August 25, 2016, 11:02am UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-get-hit-with-min-date/58916 "2016-08-25T11:02:53Z")
How can I get hit with min date after aggregation? I have aggregation by some field, then subAggregation(AggregationBuilders.min("createdDate") with this date and then topHits subAggregation. But it returns me 3 hits, no… --- ## [Why Cluster Status is Red, please help](https://discuss.elastic.co/t/why-cluster-status-is-red-please-help/39659)
**Author:** [@thyfere](https://discuss.elastic.co/u/thyfere)\ **Replies:** 8\ **Last updated:** [January 21, 2016, 6:25am UTC](https://discuss.elastic.co/t/why-cluster-status-is-red-please-help/39659 "2016-01-21T06:25:43Z")
Hi, I ran this command curl -XGET localhost:9200/\_cluster//health?pretty=true and got the following result: "cluster\_name" : "elasticsearch", "status" : "red", "timed\_out" : false, "number\_of\_nodes" : 1, "number\_of\_d… --- ## [Split Index Help Required](https://discuss.elastic.co/t/split-index-help-required/163978)
**Author:** [@nuwancs](https://discuss.elastic.co/u/nuwancs)\ **Replies:** 5\ **Last updated:** [January 14, 2019, 9:13am UTC](https://discuss.elastic.co/t/split-index-help-required/163978 "2019-01-14T09:13:35Z")
I am trying to reindex my index with following commands. And I get an error. source - transactions-reindexed-2018.12.03-01 PUT t2 { "settings": { "index.number\_of\_shards" : 5, "index.number\_of\_routi… --- ## [Kibana 5.0.1 and 4.6.3 released with a fix for an open redirect vulnerability](https://discuss.elastic.co/t/kibana-5-0-1-and-4-6-3-released-with-a-fix-for-an-open-redirect-vulnerability/66142)
**Author:** [@Court](https://discuss.elastic.co/u/Court)\ **Replies:** 0\ **Last updated:** [November 15, 2016, 6:13pm UTC](https://discuss.elastic.co/t/kibana-5-0-1-and-4-6-3-released-with-a-fix-for-an-open-redirect-vulnerability/66142 "2016-11-15T18:13:19Z")
Kibana versions 5.0.1 and 4.6.3 fix an open redirect vulnerability in the short URL feature that would allow an attacker to create a redirect from the Kibana domain to a different website. We’ve assigned this vulnerabili… --- ## [Logstash - too many loopback tcp connections in time\_wait state](https://discuss.elastic.co/t/logstash-too-many-loopback-tcp-connections-in-time-wait-state/57309)
**Author:** [@venkaty](https://discuss.elastic.co/u/venkaty)\ **Replies:** 3\ **Last updated:** [August 8, 2016, 3:47pm UTC](https://discuss.elastic.co/t/logstash-too-many-loopback-tcp-connections-in-time-wait-state/57309 "2016-08-08T15:47:34Z")
Hi, Too many loopback connections in time\_wait state when logstash started from windows console. TCP 127.0.0.1:61227 HYD-ARCH-08:61228 TIME\_WAIT 0 TCP 127.0.0.1:61234 HYD-ARCH-08:61… --- ## [Dealing with invalid json](https://discuss.elastic.co/t/dealing-with-invalid-json/288179)
**Author:** [@caseydm](https://discuss.elastic.co/u/caseydm)\ **Replies:** 6\ **Last updated:** [November 5, 2021, 6:01pm UTC](https://discuss.elastic.co/t/dealing-with-invalid-json/288179 "2021-11-05T18:01:32Z")
I'm trying to import some json data that is in a column in redshift. Some of the records have a field that includes invalid json escape sequences, such as this: "work\_title": "The Discrete and Semi-continuous Fr\\'echet … --- ## [Logstasch pipe line error](https://discuss.elastic.co/t/logstasch-pipe-line-error/150656)
**Author:** [@Mohamed.Yousry](https://discuss.elastic.co/u/Mohamed.Yousry)\ **Replies:** 6\ **Last updated:** [October 4, 2018, 12:35pm UTC](https://discuss.elastic.co/t/logstasch-pipe-line-error/150656 "2018-10-04T12:35:28Z")
Hi There I am facing a problem each time I start logstash , below are the errors, Can you support Sending Logstash logs to C:/ELK\_STACK/logstash-6.4.0/logs which is now configured via log4j2.properties \[2018-10-02T09:… --- ## [Error saving Slack Action - Watcher: \[illegal\_argument\_exception\] no account found for name: \[null\]](https://discuss.elastic.co/t/error-saving-slack-action-watcher-illegal-argument-exception-no-account-found-for-name-null/117634)
**Author:** [@Meitsrik](https://discuss.elastic.co/u/Meitsrik)\ **Replies:** 6\ **Last updated:** [February 14, 2018, 7:28am UTC](https://discuss.elastic.co/t/error-saving-slack-action-watcher-illegal-argument-exception-no-account-found-for-name-null/117634 "2018-02-14T07:28:50Z")
Hello! I'm setting up a watcher (as described here https://www.elastic.co/guide/en/x-pack/current/actions-slack.html) to check for some error-level logs and send a message to a Slack channel when X errors in Y minutes o… --- ## [Sugarcrm not connecting to ES server](https://discuss.elastic.co/t/sugarcrm-not-connecting-to-es-server/12720)
**Author:** [@Chris\_Brooks](https://discuss.elastic.co/u/Chris_Brooks)\ **Replies:** 6\ **Last updated:** [July 9, 2013, 8:21pm UTC](https://discuss.elastic.co/t/sugarcrm-not-connecting-to-es-server/12720 "2013-07-09T20:21:00Z")
I have an es server configured and running. When I browse to the server using port 9200 I get the expected response. es.canarylabs.com:9200 (local only) { "ok" : true, "status" : 200, "name" : "Nebulos"… --- ## [Splunk vs. Elastic: Lookup Tables](https://discuss.elastic.co/t/splunk-vs-elastic-lookup-tables/306669)
**Author:** [@alaine](https://discuss.elastic.co/u/alaine)\ **Replies:** 4\ **Last updated:** [June 9, 2022, 12:07pm UTC](https://discuss.elastic.co/t/splunk-vs-elastic-lookup-tables/306669 "2022-06-09T12:07:32Z")
Good Morning, I have been working with a customer for a while and they have chosen to migrate from Splunk to Elastic. One sticking point has been lookup tables. They had very specific lookup tables that provided them wi… --- ## [org.elasticsearch.index.mapper.MapperParsingException: failed to parse \[error\]](https://discuss.elastic.co/t/org-elasticsearch-index-mapper-mapperparsingexception-failed-to-parse-error/113487)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 4\ **Last updated:** [January 9, 2018, 4:47pm UTC](https://discuss.elastic.co/t/org-elasticsearch-index-mapper-mapperparsingexception-failed-to-parse-error/113487 "2018-01-09T16:47:06Z")
I followed MySQL module | Filebeat Reference \[6.1\] | Elastic to configure filebeat's module: \[root@7svdbm01 ~\]# cat /etc/filebeat/modules.d/mysql.yml - module: mysql # Error logs error: enabled: true # Set… --- ## [How to set default index-pattern for different users](https://discuss.elastic.co/t/how-to-set-default-index-pattern-for-different-users/287207)
**Author:** [@mcosta](https://discuss.elastic.co/u/mcosta)\ **Replies:** 8\ **Last updated:** [October 20, 2021, 5:57pm UTC](https://discuss.elastic.co/t/how-to-set-default-index-pattern-for-different-users/287207 "2021-10-20T17:57:03Z")
Hi all, I have user-A with access to index-A and user-B with access to index-B. Both use Kibana to visualize data and there are two index-patterns defined (one for each index). As far as I know, I can only set one inde… --- ## [Type Mismatch between Ingest Pipeline and Kibana](https://discuss.elastic.co/t/type-mismatch-between-ingest-pipeline-and-kibana/120119)
**Author:** [@SIVA\_S2018](https://discuss.elastic.co/u/SIVA_S2018)\ **Replies:** 8\ **Last updated:** [February 21, 2018, 12:24pm UTC](https://discuss.elastic.co/t/type-mismatch-between-ingest-pipeline-and-kibana/120119 "2018-02-21T12:24:16Z")
Hello Team, We are facing an issue with Elastic Stack and Kabana type mismatch. Kabana is not picking up type as NUMBER rather shows them as string. Here is what we've tried, Initially used ingest pipeline node grok p… --- ## [Unable to create Kibana index ".kibana"](https://discuss.elastic.co/t/unable-to-create-kibana-index-kibana/116040)
**Author:** [@shibasisp](https://discuss.elastic.co/u/shibasisp)\ **Replies:** 3\ **Last updated:** [January 19, 2018, 7:56pm UTC](https://discuss.elastic.co/t/unable-to-create-kibana-index-kibana/116040 "2018-01-19T19:56:46Z")
Hello, I just Installed the ELK stack and was following the documentation. I loaded elasticsearch with some sample data provided in the docs. However, whenever I try to access Kibana, I get a RED status saying: Unable… --- ## [Serbian analyzer setup](https://discuss.elastic.co/t/serbian-analyzer-setup/104893)
**Author:** [@srda1989](https://discuss.elastic.co/u/srda1989)\ **Replies:** 3\ **Last updated:** [October 24, 2017, 6:44pm UTC](https://discuss.elastic.co/t/serbian-analyzer-setup/104893 "2017-10-24T18:44:38Z")
Hi guys, I am trying to implement elasticsearch on my website which has a lot of posts in Serbian language. The main problem occurs when people try to search words with our specific latin letters (šćž ... ). So I figured… --- ## [Exiting: error loading config file: open filebeat.yml: permission denied](https://discuss.elastic.co/t/exiting-error-loading-config-file-open-filebeat-yml-permission-denied/239490)
**Author:** [@mschindl](https://discuss.elastic.co/u/mschindl)\ **Replies:** 1\ **Last updated:** [July 2, 2020, 1:17pm UTC](https://discuss.elastic.co/t/exiting-error-loading-config-file-open-filebeat-yml-permission-denied/239490 "2020-07-02T13:17:42Z")
I try to specifiy the config file for filebeat, but all the time I get a permission denied error in the container. User root is set and strict.perms=false too. I'm using following versions: \[root@mschindl-lnx1 config-d… --- ## [Kibana Date Range Aggregation format](https://discuss.elastic.co/t/kibana-date-range-aggregation-format/100390)
**Author:** [@shashwat](https://discuss.elastic.co/u/shashwat)\ **Replies:** 1\ **Last updated:** [September 13, 2017, 5:02pm UTC](https://discuss.elastic.co/t/kibana-date-range-aggregation-format/100390 "2017-09-13T17:02:11Z")
Hi, In my parsed log file, I have fields like start\_date = "August 3rd 2017, 16:12:00.000" and end\_date = "August 3rd 2017, 16:18:00.000". I want to use Date range aggregation to draw Kibana graph between two date rang… [Previous page](https://discuss.elastic.co/top.md?page=680&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=682&per_page=50&period=all)