# Top **URL:** https://discuss.elastic.co/top.md?page=682&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 683 --- ## [Kibana 8.14.0/7.17.22 Security Update (ESA-2024-11)](https://discuss.elastic.co/t/kibana-8-14-0-7-17-22-security-update-esa-2024-11/361460)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [June 14, 2024, 4:47am UTC](https://discuss.elastic.co/t/kibana-8-14-0-7-17-22-security-update-esa-2024-11/361460 "2024-06-14T04:47:49Z")
Kibana uncontrolled resource consumption (ESA-2024-11) A high-privileged user, allowed to create custom osquery packs could affect the availability of Kibana by uploading a maliciously crafted osquery pack. Affected Ver… --- ## [Kibana input control does not display newly imported data](https://discuss.elastic.co/t/kibana-input-control-does-not-display-newly-imported-data/157606)
**Author:** [@David\_Tung](https://discuss.elastic.co/u/David_Tung)\ **Replies:** 7\ **Last updated:** [December 13, 2018, 6:11pm UTC](https://discuss.elastic.co/t/kibana-input-control-does-not-display-newly-imported-data/157606 "2018-12-13T18:11:44Z")
Hi all, I am using the latest Kibana and Elastic stack. My issue is to do with input control, I found it sometimes does not show the newly imported data in the drop down list. I can use the built in filter to filter by … --- ## [Best way to Send data from influxdb to elastic](https://discuss.elastic.co/t/best-way-to-send-data-from-influxdb-to-elastic/327010)
**Author:** [@Indeed2000](https://discuss.elastic.co/u/Indeed2000)\ **Replies:** 6\ **Last updated:** [March 6, 2023, 2:49pm UTC](https://discuss.elastic.co/t/best-way-to-send-data-from-influxdb-to-elastic/327010 "2023-03-06T14:49:36Z")
Hi I have influxdb in production that store metric from different source now question is: 1-How can i send these metric to elastic for realtime analysis? 2-which is better? read data with elastic from influx, or confi… --- ## [Filebeat to redis](https://discuss.elastic.co/t/filebeat-to-redis/42223)
**Author:** [@Python\_Coder](https://discuss.elastic.co/u/Python_Coder)\ **Replies:** 6\ **Last updated:** [February 23, 2016, 5:41pm UTC](https://discuss.elastic.co/t/filebeat-to-redis/42223 "2016-02-23T17:41:53Z")
I already know that filebeat (LS forwarder) wasn't designed to communicate with redis but only LS, however, i have an HIDS (host intrusion detection) OSSEC, which is currently sending logs to Logstash over UDP(ossec sup… --- ## [\[1.7.2\] unassigned shards after restart for indexes with no replication](https://discuss.elastic.co/t/1-7-2-unassigned-shards-after-restart-for-indexes-with-no-replication/37193)
**Author:** [@dash](https://discuss.elastic.co/u/dash)\ **Replies:** 6\ **Last updated:** [January 12, 2016, 5:20pm UTC](https://discuss.elastic.co/t/1-7-2-unassigned-shards-after-restart-for-indexes-with-no-replication/37193 "2016-01-12T17:20:45Z")
Hi, I have a 1.7.2 ES cluster with 6 nodes, all running on the same host. There are several indexes on the cluster. I notice that after restarts the indexes with no replication often get into red state because of una… --- ## [Filebeat json.message\_key tries to parse string as json](https://discuss.elastic.co/t/filebeat-json-message-key-tries-to-parse-string-as-json/265943)
**Author:** [@YG\_BE](https://discuss.elastic.co/u/YG_BE)\ **Replies:** 4\ **Last updated:** [March 3, 2021, 11:10am UTC](https://discuss.elastic.co/t/filebeat-json-message-key-tries-to-parse-string-as-json/265943 "2021-03-03T11:10:48Z")
Hello, When trying to send logs from my kubernetes cluster on AKS running Filebeat 7.5, I'm running into the following error messages: Error decoding JSON: invalid character 'N' looking for beginning of value E… --- ## [How to install marvel 1.3.1 on ubuntu?](https://discuss.elastic.co/t/how-to-install-marvel-1-3-1-on-ubuntu/45081)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 4\ **Last updated:** [April 1, 2016, 8:27am UTC](https://discuss.elastic.co/t/how-to-install-marvel-1-3-1-on-ubuntu/45081 "2016-04-01T08:27:36Z")
Hi Experts, I have an offline machine and i want to install marvel on it . Since I do not have internet so can someone guide me from where I can get marvel-1.3.1.tar as we are using ES1.7.1 Regards Vikas --- ## [Unable to authenticate user for REST request](https://discuss.elastic.co/t/unable-to-authenticate-user-for-rest-request/272116)
**Author:** [@Egid](https://discuss.elastic.co/u/Egid)\ **Replies:** 3\ **Last updated:** [May 5, 2021, 7:30am UTC](https://discuss.elastic.co/t/unable-to-authenticate-user-for-rest-request/272116 "2021-05-05T07:30:47Z")
Hi I am running the folowing comand: docker run -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" -e "ELASTICSEARCH\_USERNAME=egid" -e "ELASTICSEARCH\_PASSWORD=black" -e "xpack.security.enabled=true" docker.elast… --- ## [Multiple Date formats in one file](https://discuss.elastic.co/t/multiple-date-formats-in-one-file/86725)
**Author:** [@Jaxon\_Kochel](https://discuss.elastic.co/u/Jaxon_Kochel)\ **Replies:** 3\ **Last updated:** [May 23, 2017, 6:00pm UTC](https://discuss.elastic.co/t/multiple-date-formats-in-one-file/86725 "2017-05-23T18:00:42Z")
Hello, I'm having an issue with date parsing multiple dates in one file. is there anyway to do multiple message matches / GROKS depending on what the log line is? For instance: USING this GROK match =\> { "message… --- ## [Empty result when using TCP input to collect NLog JSON events](https://discuss.elastic.co/t/empty-result-when-using-tcp-input-to-collect-nlog-json-events/126107)
**Author:** [@tbugbee](https://discuss.elastic.co/u/tbugbee)\ **Replies:** 5\ **Last updated:** [March 30, 2018, 4:32pm UTC](https://discuss.elastic.co/t/empty-result-when-using-tcp-input-to-collect-nlog-json-events/126107 "2018-03-30T16:32:17Z")
Hello, I am attempting to collect logs using NLog targets and save them into a log file. The NLog target is sending events to Logstash using TCP and formats them in this way: \ **Author:** [@5f750bbb360aba6ced5f](https://discuss.elastic.co/u/5f750bbb360aba6ced5f)\ **Replies:** 2\ **Last updated:** [December 5, 2019, 4:35am UTC](https://discuss.elastic.co/t/topic/210285 "2019-12-05T04:35:48Z") 現在、200字、300字を超える長めのテキストデータを取り込んでいますが、Kibana上での可読性を上げるため、取り込みの際にテキストデータに改行を入れるようなLogstashの設定などがないかと悩んでおります。 CSV上では一レコードがすべて一行（＝改行が含まれていない状態）ですが、たとえば句読点の後などに改行をいれたいです。 【環境等】 ・Kibana、Elasticsearch、Logstashのバージョン：6.6.2 --- ## [Include and exclude fields](https://discuss.elastic.co/t/include-and-exclude-fields/42025)
**Author:** [@lucifer](https://discuss.elastic.co/u/lucifer)\ **Replies:** 2\ **Last updated:** [February 17, 2016, 1:39pm UTC](https://discuss.elastic.co/t/include-and-exclude-fields/42025 "2016-02-17T13:39:31Z")
One main thing is not clear in the documentation. When I specify the include and the exclude fields in \_source field of the elasticsearch, are the excluded fields not stored or not displayed in the result? Because if i… --- ## [Defined Template from logstash not being used by elastic search for mapping](https://discuss.elastic.co/t/defined-template-from-logstash-not-being-used-by-elastic-search-for-mapping/87037)
**Author:** [@ImTheDeveloper](https://discuss.elastic.co/u/ImTheDeveloper)\ **Replies:** 1\ **Last updated:** [May 25, 2017, 7:36am UTC](https://discuss.elastic.co/t/defined-template-from-logstash-not-being-used-by-elastic-search-for-mapping/87037 "2017-05-25T07:36:30Z")
Hi all, I have the following logstash output config to go into elasticsearch from a postgres database I have defined the location and my template as the following: When I run logstash I see the output as follows: … --- ## [Can't connect to remote cluster](https://discuss.elastic.co/t/cant-connect-to-remote-cluster/310468)
**Author:** [@Baygon](https://discuss.elastic.co/u/Baygon)\ **Replies:** 6\ **Last updated:** [July 27, 2022, 11:34am UTC](https://discuss.elastic.co/t/cant-connect-to-remote-cluster/310468 "2022-07-27T11:34:46Z")
Node 1: ES 7.14.0 (remote\_cluster\_client role is added to yml file) Node 2: ES 7.13.2 I've added my remote cluster via API: PUT /\_cluster/settings { "persistent" : { "cluster" : { "remote" : { "clu… --- ## [Remove password but keep username in http authorization header](https://discuss.elastic.co/t/remove-password-but-keep-username-in-http-authorization-header/37415)
**Author:** [@nradonicich](https://discuss.elastic.co/u/nradonicich)\ **Replies:** 4\ **Last updated:** [January 2, 2016, 10:26pm UTC](https://discuss.elastic.co/t/remove-password-but-keep-username-in-http-authorization-header/37415 "2016-01-02T22:26:30Z")
Is it possible to strip out the password from the authorization header but retain the username somehow? I use basic auth for some web apps and want to keep the username of who is accessing but strip out the password from… --- ## [How I can delete element from array?](https://discuss.elastic.co/t/how-i-can-delete-element-from-array/205868)
**Author:** [@gleb](https://discuss.elastic.co/u/gleb)\ **Replies:** 2\ **Last updated:** [October 30, 2019, 3:04pm UTC](https://discuss.elastic.co/t/how-i-can-delete-element-from-array/205868 "2019-10-30T15:04:47Z")
Hello! I receive messages like this: "app\_risk = 0 app\_risk =2" or "app\_risk = 0" After kv filter, I have field "app\_risk": \[ "0", "2"\] or \["0"\]. How I can delete the first element of array - "0", if app\_risk\[1\] exis… --- ## [Line chart from field values and sum](https://discuss.elastic.co/t/line-chart-from-field-values-and-sum/129175)
**Author:** [@Maddy\_M](https://discuss.elastic.co/u/Maddy_M)\ **Replies:** 2\ **Last updated:** [May 14, 2018, 3:29pm UTC](https://discuss.elastic.co/t/line-chart-from-field-values-and-sum/129175 "2018-05-14T15:29:11Z")
Hi, I am newbie to ELK and I have able to work on the queries, but need help with Kibana Visualization for line chart value extracted from fields. Here is the document and I would like to prepare a line chart with 4 li… --- ## [Bulk Import to Elasticsearch](https://discuss.elastic.co/t/bulk-import-to-elasticsearch/106644)
**Author:** [@Biraj\_Dhungel](https://discuss.elastic.co/u/Biraj_Dhungel)\ **Replies:** 5\ **Last updated:** [November 7, 2017, 9:35am UTC](https://discuss.elastic.co/t/bulk-import-to-elasticsearch/106644 "2017-11-07T09:35:14Z")
Hello, I have a JSON file of 1 GB Logdata. The format of the file is { "index" : { "\_index" : "test", "\_type" : "type1" } } { "field1" : "value1" } { "index" : { "\_index" : "test", "\_type" : "type1" } } { "field1" :… --- ## [How to change visualization background color](https://discuss.elastic.co/t/how-to-change-visualization-background-color/109517)
**Author:** [@AmyChou](https://discuss.elastic.co/u/AmyChou)\ **Replies:** 1\ **Last updated:** [November 29, 2017, 8:55pm UTC](https://discuss.elastic.co/t/how-to-change-visualization-background-color/109517 "2017-11-29T20:55:55Z")
Hi everyone, I am using the Kibana 5.3 and I want to change the background color of the chart, but I cannot find this option on UI. Is there any way to do this ? Thanks! --- ## [How read or analyze content of state.st file?](https://discuss.elastic.co/t/how-read-or-analyze-content-of-state-st-file/100249)
**Author:** [@vsevolodk](https://discuss.elastic.co/u/vsevolodk)\ **Replies:** 2\ **Last updated:** [September 16, 2017, 8:55am UTC](https://discuss.elastic.co/t/how-read-or-analyze-content-of-state-st-file/100249 "2017-09-16T08:55:45Z")
Hi, please help. I got excetion on elasticsearch 2.3.5 (lucen 5.5.0) Caused by: java.io.IOException: failed to read \[id:1, legacy:false, file:/esdata/elasticsearch/nodes/0/indices/ta4TwW\_jS1WJl7PhghEW-Q/\_state/state-1.… --- ## [Errors Updating logstash from 8.5.3 to 8.8.0](https://discuss.elastic.co/t/errors-updating-logstash-from-8-5-3-to-8-8-0/335531)
**Author:** [@cperzrt10](https://discuss.elastic.co/u/cperzrt10)\ **Replies:** 6\ **Last updated:** [June 19, 2023, 10:03am UTC](https://discuss.elastic.co/t/errors-updating-logstash-from-8-5-3-to-8-8-0/335531 "2023-06-19T10:03:52Z")
I have update all my Elasticsearch cluster, and kibana to the version 8.8.0 from 8.5.3, when update Logstash it doesnt start runing and show the next error \[2023-06-08T13:06:33,163\]\[WARN \]\[logstash.outputs.elasticsearch… --- ## [Exeption in mapping](https://discuss.elastic.co/t/exeption-in-mapping/117966)
**Author:** [@Nikita\_Krasnov](https://discuss.elastic.co/u/Nikita_Krasnov)\ **Replies:** 6\ **Last updated:** [February 1, 2018, 9:30am UTC](https://discuss.elastic.co/t/exeption-in-mapping/117966 "2018-02-01T09:30:13Z")
What can be the reason of such exception? "reason":{"type":"exception","reason":"Elasticsearch exception \[type=query\_shard\_exception, reason=No mapping found for \[timeStamp\] in order to sort on\]","index\_uuid":"EwqLKS3ZT… --- ## [Max\_bytes and multilines](https://discuss.elastic.co/t/max-bytes-and-multilines/105884)
**Author:** [@vkakhnych](https://discuss.elastic.co/u/vkakhnych)\ **Replies:** 6\ **Last updated:** [November 2, 2017, 12:28pm UTC](https://discuss.elastic.co/t/max-bytes-and-multilines/105884 "2017-11-02T12:28:33Z")
max\_bytes works fine on input messages but after applying multiline filter all new line bytes in original message replacing by two printable bytes: \\n and we get a little larger size of message that we send further. Is i… --- ## [Filebeat index pattern](https://discuss.elastic.co/t/filebeat-index-pattern/86837)
**Author:** [@Bouali\_Inass](https://discuss.elastic.co/u/Bouali_Inass)\ **Replies:** 6\ **Last updated:** [May 25, 2017, 1:11pm UTC](https://discuss.elastic.co/t/filebeat-index-pattern/86837 "2017-05-25T13:11:11Z")
Hey i just installed a kibana and elasticsearch and logstash on a server and filebeat on a nother server that has apache logs and i wanna monitor those logs on kibana. I'm not sur what i've done is right ?? the problem… --- ## [Want to try my logstash Pipeline Testing UI?](https://discuss.elastic.co/t/want-to-try-my-logstash-pipeline-testing-ui/258640)
**Author:** [@epacke](https://discuss.elastic.co/u/epacke)\ **Replies:** 2\ **Last updated:** [December 15, 2020, 5:23pm UTC](https://discuss.elastic.co/t/want-to-try-my-logstash-pipeline-testing-ui/258640 "2020-12-15T17:23:17Z")
Hi there! Rewritten the pipeline testing tool using React and typescript to improve the UX and usability and would appreciate some feedback. It's a tool using NodeJs, Logstash and docker-compose for my colleagues that … --- ## [Grouping by similarity](https://discuss.elastic.co/t/grouping-by-similarity/177774)
**Author:** [@Ozymandy](https://discuss.elastic.co/u/Ozymandy)\ **Replies:** 5\ **Last updated:** [April 22, 2019, 12:51pm UTC](https://discuss.elastic.co/t/grouping-by-similarity/177774 "2019-04-22T12:51:35Z")
Hi. I've faced with a challenge in elasticsearch. I have an index which has many similar documents. It can be detected by more like this query. So I wanted somehow group these similar documents during querying. For examp… --- ## [Setup of beat exporter doesn't work](https://discuss.elastic.co/t/setup-of-beat-exporter-doesnt-work/238433)
**Author:** [@vaishno.avi](https://discuss.elastic.co/u/vaishno.avi)\ **Replies:** 0\ **Last updated:** [June 24, 2020, 10:14am UTC](https://discuss.elastic.co/t/setup-of-beat-exporter-doesnt-work/238433 "2020-06-24T10:14:02Z")
Hello, I wanted to export filebeat metrics via beat exporter. filebeat has a conf that exposes the metrics https://www.elastic.co/guide/en/beats/filebeat/master/http-endpoint.html beat exporter's documentation als… --- ## [Circuit Breaker Tripping During Shard Relocation](https://discuss.elastic.co/t/circuit-breaker-tripping-during-shard-relocation/125804)
**Author:** [@andrewthad](https://discuss.elastic.co/u/andrewthad)\ **Replies:** 0\ **Last updated:** [March 27, 2018, 7:31pm UTC](https://discuss.elastic.co/t/circuit-breaker-tripping-during-shard-relocation/125804 "2018-03-27T19:31:40Z")
I have a twenty-node cluster with the hot-cold pattern. I'm running ElasticSearch 6.2.3. Here is the breakdown: 12 Hot Nodes: 16GB memory each, 9GB for JVM heap 8 Cold Nodes: 12GB memory each, 9GB for JVM heap I'm usi… --- ## [Logstash处理数据延时问题？](https://discuss.elastic.co/t/logstash/86593)
**Author:** [@can.zhang](https://discuss.elastic.co/u/can.zhang)\ **Replies:** 1\ **Last updated:** [May 29, 2017, 3:05pm UTC](https://discuss.elastic.co/t/logstash/86593 "2017-05-29T15:05:32Z")
我们部署的ELK结构是filbeat+logstash+ES服务。 filebeat采集数据，通过logstash处理后，存入ES服务。 想咨询下，logstash有处理能力的限制吗？logstash能同时接受多少filebeat上传的数据？ --- ## [Lucene max documents limit](https://discuss.elastic.co/t/lucene-max-documents-limit/34761)
**Author:** [@Siddartha\_Guthikonda](https://discuss.elastic.co/u/Siddartha_Guthikonda)\ **Replies:** 1\ **Last updated:** [November 17, 2015, 9:02am UTC](https://discuss.elastic.co/t/lucene-max-documents-limit/34761 "2015-11-17T09:02:33Z")
I am getting, java.lang.IllegalArgumentException: number of documents in the index cannot exceed 2147483519, which is due to the sheer number nested documents in elastic search. Looks like lucene treats each nested doc… --- ## [Graph Plugin causing authentication loop in reverse proxy](https://discuss.elastic.co/t/graph-plugin-causing-authentication-loop-in-reverse-proxy/45940)
**Author:** [@Kevin\_Ross](https://discuss.elastic.co/u/Kevin_Ross)\ **Replies:** 3\ **Last updated:** [April 1, 2016, 2:50pm UTC](https://discuss.elastic.co/t/graph-plugin-causing-authentication-loop-in-reverse-proxy/45940 "2016-04-01T14:50:30Z")
Hi, I am using Kibana 4.5 and everything is updated as of a short time ago. I am trying to have a look at the graph plugin and while I can access it and set the field as soon as I click to search and create the graph m… --- ## [Unable to access kibana url](https://discuss.elastic.co/t/unable-to-access-kibana-url/102578)
**Author:** [@Parthgandhi](https://discuss.elastic.co/u/Parthgandhi)\ **Replies:** 2\ **Last updated:** [October 4, 2017, 5:32am UTC](https://discuss.elastic.co/t/unable-to-access-kibana-url/102578 "2017-10-04T05:32:11Z")
I have installed ELK stack on the server and all the services are working fine. I am able to get the success response when querying the elasticsearch and kibana ports usin curl: sudo curl -i http://localhost:5601 HTTP/… --- ## [Creating an enrollment token in Elastic fails due to PrivateKey error](https://discuss.elastic.co/t/creating-an-enrollment-token-in-elastic-fails-due-to-privatekey-error/312461)
**Author:** [@Mostafa\_Talebi](https://discuss.elastic.co/u/Mostafa_Talebi)\ **Replies:** 4\ **Last updated:** [August 22, 2022, 5:49am UTC](https://discuss.elastic.co/t/creating-an-enrollment-token-in-elastic-fails-due-to-privatekey-error/312461 "2022-08-22T05:49:17Z")
I have created a three nodes elastic cluster, with two being master nodes. I have created CS, CERT and http.p12 files manually, all placed in their respective machines and when I run elastic, everything boots successful… --- ## [Can't figure out how to translate from Json to Avro using logstash](https://discuss.elastic.co/t/cant-figure-out-how-to-translate-from-json-to-avro-using-logstash/125464)
**Author:** [@jbotello](https://discuss.elastic.co/u/jbotello)\ **Replies:** 4\ **Last updated:** [March 27, 2018, 5:28am UTC](https://discuss.elastic.co/t/cant-figure-out-how-to-translate-from-json-to-avro-using-logstash/125464 "2018-03-27T05:28:13Z")
Hi, I'm been trying to figure out how to transform a json encoded using kafka input and using avro as an output. So far, no luck :frowning: This is an example of my current configuration without using any filtering or… --- ## [Health Check URL](https://discuss.elastic.co/t/health-check-url/110673)
**Author:** [@Jerjef](https://discuss.elastic.co/u/Jerjef)\ **Replies:** 4\ **Last updated:** [December 7, 2017, 4:15pm UTC](https://discuss.elastic.co/t/health-check-url/110673 "2017-12-07T16:15:16Z")
I have Elasticsearch 6.0.0.1 installed and operating fine, but none of the URL functions are working for me. For example, I enter http://:9200/\_ cat/health?v into a web browser (with the applicable IP address of course… --- ## [Logstash - Startup Script / Service Daemon](https://discuss.elastic.co/t/logstash-startup-script-service-daemon/80690)
**Author:** [@urbans](https://discuss.elastic.co/u/urbans)\ **Replies:** 4\ **Last updated:** [March 30, 2017, 6:37pm UTC](https://discuss.elastic.co/t/logstash-startup-script-service-daemon/80690 "2017-03-30T18:37:26Z")
Been trying to figure out how to get the right config to work on the /etc/init/logstash.conf file. That is the one that can be modified using the system-install. But it never does any of my settings, therefore the por… --- ## [Elasticsearch development environment - system requirements](https://discuss.elastic.co/t/elasticsearch-development-environment-system-requirements/21944)
**Author:** [@Shwetha\_Raghavendra](https://discuss.elastic.co/u/Shwetha_Raghavendra)\ **Replies:** 4\ **Last updated:** [February 2, 2015, 7:11am UTC](https://discuss.elastic.co/t/elasticsearch-development-environment-system-requirements/21944 "2015-02-02T07:11:04Z")
Hi All, I am new to elasticsearch. Kindly let me know the system requirements for elasticsearch in development environment.What is the best way to import data into elasticsearch using csv . I hav… --- ## [Console XML works, but not file XML](https://discuss.elastic.co/t/console-xml-works-but-not-file-xml/206645)
**Author:** [@kcb](https://discuss.elastic.co/u/kcb)\ **Replies:** 8\ **Last updated:** [November 6, 2019, 6:24pm UTC](https://discuss.elastic.co/t/console-xml-works-but-not-file-xml/206645 "2019-11-06T18:24:18Z")
We have written a logstash script to process an XMLfile and export contents to stdout{}. We have verified the script works when the input is specified as stdin{} However, when we specify a file as the input, the XML doe… --- ## [Is it possible Mutual authentication between Logstash and Beats](https://discuss.elastic.co/t/is-it-possible-mutual-authentication-between-logstash-and-beats/211017)
**Author:** [@Fedele\_Mantuano](https://discuss.elastic.co/u/Fedele_Mantuano)\ **Replies:** 6\ **Last updated:** [December 10, 2019, 2:40pm UTC](https://discuss.elastic.co/t/is-it-possible-mutual-authentication-between-logstash-and-beats/211017 "2019-12-10T14:40:27Z")
Hi community, my question is very easy. Is it possible the Mutual authentication between Logstash and Beats. I can authenticate the server Logstash, but is there a way to authenticate the client? I'd like to have diffe… --- ## [Create a Table that shows only docs where the unique count of a specific field is difference of 2](https://discuss.elastic.co/t/create-a-table-that-shows-only-docs-where-the-unique-count-of-a-specific-field-is-difference-of-2/81480)
**Author:** [@rabbit](https://discuss.elastic.co/u/rabbit)\ **Replies:** 6\ **Last updated:** [April 10, 2017, 4:45pm UTC](https://discuss.elastic.co/t/create-a-table-that-shows-only-docs-where-the-unique-count-of-a-specific-field-is-difference-of-2/81480 "2017-04-10T16:45:07Z")
Hi, Guys I have a field that is a MD5 that resulted of two fields, named RequestPairID, I would like to show in a Table (or not) all RequestPairID that the unique count of RequestPairID is different of 2. Now I can sh… --- ## [Problem to check if an Index Exist using NEST .Net](https://discuss.elastic.co/t/problem-to-check-if-an-index-exist-using-nest-net/140392)
**Author:** [@r1go](https://discuss.elastic.co/u/r1go)\ **Replies:** 1\ **Last updated:** [July 18, 2018, 7:58am UTC](https://discuss.elastic.co/t/problem-to-check-if-an-index-exist-using-nest-net/140392 "2018-07-18T07:58:03Z")
Hi there!, Im just trying to check if an index exist previous my query with something like that: var request = new IndexExistsRequest("my\_beautiful\_index"); var result = client.IndexExists(request); But i always get … --- ## [Need help with configuring cisco module in filebeat](https://discuss.elastic.co/t/need-help-with-configuring-cisco-module-in-filebeat/189596)
**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\ **Replies:** 3\ **Last updated:** [July 19, 2019, 7:52am UTC](https://discuss.elastic.co/t/need-help-with-configuring-cisco-module-in-filebeat/189596 "2019-07-19T07:52:32Z")
I am planning to use cisco module in filebeat to ship syslog messages from cisco ASA Firewall to Elasticsearch through Logstash. So far, I installed Filebeat on a windows 7 machine and enabled cisco module. I enabled se… --- ## [Having troubles to install apm agent with Angular 6 app](https://discuss.elastic.co/t/having-troubles-to-install-apm-agent-with-angular-6-app/174376)
**Author:** [@sivanq](https://discuss.elastic.co/u/sivanq)\ **Replies:** 3\ **Last updated:** [April 8, 2019, 2:25pm UTC](https://discuss.elastic.co/t/having-troubles-to-install-apm-agent-with-angular-6-app/174376 "2019-04-08T14:25:06Z")
I'm facing issues to install apm agent on my Angular 6 app. I install the agent (npm install elastic-apm-node --save) and put in my main.ts the following code : // Add this to the VERY top of the first file loaded in y… --- ## [Kibana Console status is RED](https://discuss.elastic.co/t/kibana-console-status-is-red/81988)
**Author:** [@adasiss](https://discuss.elastic.co/u/adasiss)\ **Replies:** 3\ **Last updated:** [April 17, 2017, 8:40pm UTC](https://discuss.elastic.co/t/kibana-console-status-is-red/81988 "2017-04-17T20:40:23Z")
Hi, We have a new Elastic search setup implemented, and observed that Kibana console is showing as RED status, could anybody help me let me know whats wrong with that and how to get green. Here is the screenshot might … --- ## [How logs stored in Logstash/Elastisearch](https://discuss.elastic.co/t/how-logs-stored-in-logstash-elastisearch/18697)
**Author:** [@sbankewar](https://discuss.elastic.co/u/sbankewar)\ **Replies:** 3\ **Last updated:** [July 19, 2014, 4:49am UTC](https://discuss.elastic.co/t/how-logs-stored-in-logstash-elastisearch/18697 "2014-07-19T04:49:56Z")
Hello All, Can anyone help me on this. 1. How data stored in logstash/elasticsearch? 2. Where is the raw data file(path)? 3. Is it encrypted? 4. Can we take backup of those data and can remove and replace … --- ## [Caused by: org.elasticsearch.ElasticsearchSecurityException: missing authentication token for action \[internal:transport/handshake\]](https://discuss.elastic.co/t/caused-by-org-elasticsearch-elasticsearchsecurityexception-missing-authentication-token-for-action-internal-transport-handshake/148758)
**Author:** [@vschakka](https://discuss.elastic.co/u/vschakka)\ **Replies:** 1\ **Last updated:** [September 17, 2018, 9:59am UTC](https://discuss.elastic.co/t/caused-by-org-elasticsearch-elasticsearchsecurityexception-missing-authentication-token-for-action-internal-transport-handshake/148758 "2018-09-17T09:59:04Z")
Hi , Recently I upgraded elastic, logstash and kibana to 6.4.0 from 6.2.x. After restarting es nodes and tribe, getting below exception. Due to which sync is not happening resulting to stopping indexing. I disabled xpac… --- ## [Querying Multiple Nodes on Same Host](https://discuss.elastic.co/t/querying-multiple-nodes-on-same-host/33324)
**Author:** [@rahulnadella](https://discuss.elastic.co/u/rahulnadella)\ **Replies:** 7\ **Last updated:** [November 1, 2015, 2:46pm UTC](https://discuss.elastic.co/t/querying-multiple-nodes-on-same-host/33324 "2015-11-01T14:46:52Z")
I am new to ElasticSearch (1.7) and currently running a Logstash (1.5.4) and ElasticSearch on the same host. I am trying to scale my ElasticSearch to have multiple instances. I have been able to get multiple ElasticSearc… --- ## [Kibanaによるdiscoverの最大ヒット件数について](https://discuss.elastic.co/t/kibana-discover/152967)
**Author:** [@nsh](https://discuss.elastic.co/u/nsh)\ **Replies:** 4\ **Last updated:** [October 19, 2018, 3:21am UTC](https://discuss.elastic.co/t/kibana-discover/152967 "2018-10-19T03:21:24Z")
お世話になっております。検索等は行ったのですが、該当すると思われる質問が見つけられなかったため、お伺いしております。erasticsearchでデータを読み込ませ、kibanaで、discoverでデータを呼び出そうとしております。 最大１００万件程あるデータなのですが、discoverでは、最大件数が99999hits となり、それ以上表示されないように見受けられます。この最大件数をデータ上限まで引き上げる方法というのはあるのでしょ… --- ## [Filebeat Is not Sending Logs to Logstash even Harvesting Successfull](https://discuss.elastic.co/t/filebeat-is-not-sending-logs-to-logstash-even-harvesting-successfull/216579)
**Author:** [@mgnfcnt](https://discuss.elastic.co/u/mgnfcnt)\ **Replies:** 2\ **Last updated:** [January 27, 2020, 9:05am UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-logs-to-logstash-even-harvesting-successfull/216579 "2020-01-27T09:05:33Z")
I am trying to use ELK space to collect file logs. Everything is OK untill filebeat integration. I can send the logs over tcp to logstash and see in the kibana. But I couldn't achieved filebeat setup to send the logs. I… --- ## [Enrich fields in new index from other index present in kibana using logstash](https://discuss.elastic.co/t/enrich-fields-in-new-index-from-other-index-present-in-kibana-using-logstash/284397)
**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\ **Replies:** 6\ **Last updated:** [September 27, 2021, 1:16pm UTC](https://discuss.elastic.co/t/enrich-fields-in-new-index-from-other-index-present-in-kibana-using-logstash/284397 "2021-09-27T13:16:48Z")
Hi , I am using logstash to create a new index from csv file which is having the index name-"therapy" Another index is "participation" already present in kibana with other fields. Both participation and therapy index … [Previous page](https://discuss.elastic.co/top.md?page=681&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=683&per_page=50&period=all)