# Top

**URL:** https://discuss.elastic.co/top.md?page=683&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 684

---

## [Having troubles to install apm agent with Angular 6 app](https://discuss.elastic.co/t/having-troubles-to-install-apm-agent-with-angular-6-app/174376)

<div class="topic-metadata">

**Author:** [@sivanq](https://discuss.elastic.co/u/sivanq)\
**Replies:** 3\
**Last updated:** [April 8, 2019, 2:25pm UTC](https://discuss.elastic.co/t/having-troubles-to-install-apm-agent-with-angular-6-app/174376 "2019-04-08T14:25:06Z")

</div>

I'm facing issues to install apm agent on my Angular 6 app. I install the agent (npm install elastic-apm-node --save) and put in my main.ts the following code : // Add this to the VERY top of the first file loaded in y…

---

## [Logstash multiline fails to detect TIMESTAMP and puts the whole file into a single doc](https://discuss.elastic.co/t/logstash-multiline-fails-to-detect-timestamp-and-puts-the-whole-file-into-a-single-doc/91546)

<div class="topic-metadata">

**Author:** [@bizmate](https://discuss.elastic.co/u/bizmate)\
**Replies:** 3\
**Last updated:** [July 4, 2017, 12:00pm UTC](https://discuss.elastic.co/t/logstash-multiline-fails-to-detect-timestamp-and-puts-the-whole-file-into-a-single-doc/91546 "2017-07-04T12:00:28Z")

</div>

I am using a docker container to spin and push logs up (not a huge quantity) from my PHP app where sometimes lines are broken down into multiple lines by the framework. Example 2017/05/21 06:02:05 \[trace\] \[system.…

---

## [How logs stored in Logstash/Elastisearch](https://discuss.elastic.co/t/how-logs-stored-in-logstash-elastisearch/18697)

<div class="topic-metadata">

**Author:** [@sbankewar](https://discuss.elastic.co/u/sbankewar)\
**Replies:** 3\
**Last updated:** [July 19, 2014, 4:49am UTC](https://discuss.elastic.co/t/how-logs-stored-in-logstash-elastisearch/18697 "2014-07-19T04:49:56Z")

</div>

Hello All, Can anyone help me on this. 1. How data stored in logstash/elasticsearch? 2. Where is the raw data file(path)? 3. Is it encrypted? 4. Can we take backup of those data and can remove and replace …

---

## [Caused by: org.elasticsearch.ElasticsearchSecurityException: missing authentication token for action \[internal:transport/handshake\]](https://discuss.elastic.co/t/caused-by-org-elasticsearch-elasticsearchsecurityexception-missing-authentication-token-for-action-internal-transport-handshake/148758)

<div class="topic-metadata">

**Author:** [@vschakka](https://discuss.elastic.co/u/vschakka)\
**Replies:** 1\
**Last updated:** [September 17, 2018, 9:59am UTC](https://discuss.elastic.co/t/caused-by-org-elasticsearch-elasticsearchsecurityexception-missing-authentication-token-for-action-internal-transport-handshake/148758 "2018-09-17T09:59:04Z")

</div>

Hi , Recently I upgraded elastic, logstash and kibana to 6.4.0 from 6.2.x. After restarting es nodes and tribe, getting below exception. Due to which sync is not happening resulting to stopping indexing. I disabled xpac…

---

## [Querying Multiple Nodes on Same Host](https://discuss.elastic.co/t/querying-multiple-nodes-on-same-host/33324)

<div class="topic-metadata">

**Author:** [@rahulnadella](https://discuss.elastic.co/u/rahulnadella)\
**Replies:** 7\
**Last updated:** [November 1, 2015, 2:46pm UTC](https://discuss.elastic.co/t/querying-multiple-nodes-on-same-host/33324 "2015-11-01T14:46:52Z")

</div>

I am new to ElasticSearch (1.7) and currently running a Logstash (1.5.4) and ElasticSearch on the same host. I am trying to scale my ElasticSearch to have multiple instances. I have been able to get multiple ElasticSearc…

---

## [JDBC input multiple tables with table name as a parameter](https://discuss.elastic.co/t/jdbc-input-multiple-tables-with-table-name-as-a-parameter/101970)

<div class="topic-metadata">

**Author:** [@Maxclac](https://discuss.elastic.co/u/Maxclac)\
**Replies:** 4\
**Last updated:** [September 27, 2017, 2:03pm UTC](https://discuss.elastic.co/t/jdbc-input-multiple-tables-with-table-name-as-a-parameter/101970 "2017-09-27T14:03:27Z")

</div>

Hello everyone! I am working currently with a Postgres database and trying to convert it to a json file for Elasticsearch. I found out that Logstash is perfect for doing this with the JDBC input plugin. I have several…

---

## [How to set min\_doc\_count for bucket in Lens visualization?](https://discuss.elastic.co/t/how-to-set-min-doc-count-for-bucket-in-lens-visualization/298519)

<div class="topic-metadata">

**Author:** [@jakn](https://discuss.elastic.co/u/jakn)\
**Replies:** 2\
**Last updated:** [March 16, 2022, 3:05pm UTC](https://discuss.elastic.co/t/how-to-set-min-doc-count-for-bucket-in-lens-visualization/298519 "2022-03-16T15:05:26Z")

</div>

I need to create a Formula Metric in a Lens visualization on some terms/top value buckets. I only want to calculate the metric for buckets with at least 10 records. How do I ensure that? I know that in the aggregation-…

---

## [Balancing disk usage on large clusters?](https://discuss.elastic.co/t/balancing-disk-usage-on-large-clusters/246477)

<div class="topic-metadata">

**Author:** [@akrzos](https://discuss.elastic.co/u/akrzos)\
**Replies:** 2\
**Last updated:** [August 27, 2020, 2:56pm UTC](https://discuss.elastic.co/t/balancing-disk-usage-on-large-clusters/246477 "2020-08-27T14:56:41Z")

</div>

We have a relatively large cluster and one consistent issue we have seen from time to time is inconsistent disk usage balancing because ElasticSearch is balancing by shard count rather than shard resource consumption. B…

---

## [Filebeat Is not Sending Logs to Logstash even Harvesting Successfull](https://discuss.elastic.co/t/filebeat-is-not-sending-logs-to-logstash-even-harvesting-successfull/216579)

<div class="topic-metadata">

**Author:** [@mgnfcnt](https://discuss.elastic.co/u/mgnfcnt)\
**Replies:** 2\
**Last updated:** [January 27, 2020, 9:05am UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-logs-to-logstash-even-harvesting-successfull/216579 "2020-01-27T09:05:33Z")

</div>

I am trying to use ELK space to collect file logs. Everything is OK untill filebeat integration. I can send the logs over tcp to logstash and see in the kibana. But I couldn't achieved filebeat setup to send the logs. I…

---

## [Selecting "file" in logstash input does not send to elasticsearch](https://discuss.elastic.co/t/selecting-file-in-logstash-input-does-not-send-to-elasticsearch/265602)

<div class="topic-metadata">

**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\
**Replies:** 8\
**Last updated:** [March 1, 2021, 8:04am UTC](https://discuss.elastic.co/t/selecting-file-in-logstash-input-does-not-send-to-elasticsearch/265602 "2021-03-01T08:04:24Z")

</div>

I am trying to send log files from logstash to elasticsearch. I have completed the whole setup and the test to send the standard input to elasticsearch has passed. Now, I want to send the file to elasticsearch by speci…

---

## [Parsing dictionary into json file](https://discuss.elastic.co/t/parsing-dictionary-into-json-file/191386)

<div class="topic-metadata">

**Author:** [@saisimo02](https://discuss.elastic.co/u/saisimo02)\
**Replies:** 8\
**Last updated:** [July 22, 2019, 12:35pm UTC](https://discuss.elastic.co/t/parsing-dictionary-into-json-file/191386 "2019-07-22T12:35:08Z")

</div>

Hello, I would like to parse a json file, my file looks like that: file={"id":"\*\*\*\*\*\*\*","name":"test","alarm":{"error":2,"warning":3}} using this filter: json { source =\> "message" } I get only thes…

---

## [CPU usage and Memory usage](https://discuss.elastic.co/t/cpu-usage-and-memory-usage/87670)

<div class="topic-metadata">

**Author:** [@kalyan](https://discuss.elastic.co/u/kalyan)\
**Replies:** 3\
**Last updated:** [May 31, 2017, 9:24am UTC](https://discuss.elastic.co/t/cpu-usage-and-memory-usage/87670 "2017-05-31T09:24:00Z")

</div>

Hi, I am currently using elasticsearch-5.4.0 and metricbeat-5.4.0 with Kibana. I created a basic elasticsearch setup on ubuntu 16.04 version. I created a watcher so that when CPU usage hits more than 75% i should get a…

---

## [Logstash giving HUP error](https://discuss.elastic.co/t/logstash-giving-hup-error/60559)

<div class="topic-metadata">

**Author:** [@Senz79](https://discuss.elastic.co/u/Senz79)\
**Replies:** 8\
**Last updated:** [October 5, 2016, 1:17pm UTC](https://discuss.elastic.co/t/logstash-giving-hup-error/60559 "2016-10-05T13:17:27Z")

</div>

Hello I am trying to run LOGSTASH on Windows but i am constantly getting the below error "The signal HUP is in use by the JVM and will not work correctly on this platform" I have tried all means to resolve the is…

---

## [Polish analyzer](https://discuss.elastic.co/t/polish-analyzer/6428)

<div class="topic-metadata">

**Author:** [@Tomasz\_Kloc](https://discuss.elastic.co/u/Tomasz_Kloc)\
**Replies:** 8\
**Last updated:** [January 26, 2012, 10:45am UTC](https://discuss.elastic.co/t/polish-analyzer/6428 "2012-01-26T10:45:08Z")

</div>

Hi, Any chance to get this https://github.com/elasticsearch/elasticsearch/issues/1155 solved before v0.18.8 ? I would like to help, but i'm not familiar w java. regrads, tk

---

## [Adding multiple input files](https://discuss.elastic.co/t/adding-multiple-input-files/296832)

<div class="topic-metadata">

**Author:** [@abhi.logs](https://discuss.elastic.co/u/abhi.logs)\
**Replies:** 5\
**Last updated:** [February 11, 2022, 7:05am UTC](https://discuss.elastic.co/t/adding-multiple-input-files/296832 "2022-02-11T07:05:19Z")

</div>

Hello, Is it possible to add two inputs files in filebeat.yml? Example:- - /etc/filebeat/inputs.d/\*.yml - /etc/filebeat-oss/inputs.d/\*.yml I wanna add these two files in filebeat.yml under filebeat.config.inp…

---

## [Output to indexes based on \[agent.type\] (or any conditionals) not working](https://discuss.elastic.co/t/output-to-indexes-based-on-agent-type-or-any-conditionals-not-working/231363)

<div class="topic-metadata">

**Author:** [@SteveParker](https://discuss.elastic.co/u/SteveParker)\
**Replies:** 5\
**Last updated:** [May 7, 2020, 10:57am UTC](https://discuss.elastic.co/t/output-to-indexes-based-on-agent-type-or-any-conditionals-not-working/231363 "2020-05-07T10:57:26Z")

</div>

Sorry to ask this, I have searched long for an answer but not found anything. My winlogbeat, packetbeat and metricbeat are all sent to logstash on 5044. I want logstash to output them to dedicated indexes. I am using th…

---

## [Cluster setup using aws Ec2 discovery module](https://discuss.elastic.co/t/cluster-setup-using-aws-ec2-discovery-module/93058)

<div class="topic-metadata">

**Author:** [@ajayrc](https://discuss.elastic.co/u/ajayrc)\
**Replies:** 5\
**Last updated:** [July 14, 2017, 4:27pm UTC](https://discuss.elastic.co/t/cluster-setup-using-aws-ec2-discovery-module/93058 "2017-07-14T16:27:26Z")

</div>

Vm1: cluster.name: cluster-elastic node.name: node 1 node.master: true node.data: false node.ingest: false network.host: ec2:privateIpv4 http.port: 9200 cloud.aws.access\_key: \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* cloud.aws.secret\_k…

---

## [Kibana monitoring shows only 10 logstash nodes (again)](https://discuss.elastic.co/t/kibana-monitoring-shows-only-10-logstash-nodes-again/80994)

<div class="topic-metadata">

**Author:** [@Dan\_Markhasin](https://discuss.elastic.co/u/Dan_Markhasin)\
**Replies:** 5\
**Last updated:** [April 19, 2017, 12:07am UTC](https://discuss.elastic.co/t/kibana-monitoring-shows-only-10-logstash-nodes-again/80994 "2017-04-19T00:07:13Z")

</div>

Following this thread: The issue was indeed fixed in 5.2.1, but has returned in 5.3.0. Using Kibana and X-Pack 5.3.0, I cannot see more than 10 logstash nodes in the UI (even though I have more, and the "Nodes" field a…

---

## [Elasticsearch aggregation from springboot](https://discuss.elastic.co/t/elasticsearch-aggregation-from-springboot/275689)

<div class="topic-metadata">

**Author:** [@saiteja](https://discuss.elastic.co/u/saiteja)\
**Replies:** 1\
**Last updated:** [June 14, 2021, 1:48pm UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-from-springboot/275689 "2021-06-14T13:48:46Z")

</div>

Hello, I am trying to get all the values for a filed with count using Aggregation Here is my code Query searchQuery = new NativeSearchQueryBuilder() .withQuery(QueryBuilders.matchAllQuery()) …

---

## [Composite aggregations and pagination](https://discuss.elastic.co/t/composite-aggregations-and-pagination/240268)

<div class="topic-metadata">

**Author:** [@xeraa](https://discuss.elastic.co/u/xeraa)\
**Replies:** 0\
**Last updated:** [July 8, 2020, 6:10am UTC](https://discuss.elastic.co/t/composite-aggregations-and-pagination/240268 "2020-07-08T06:10:33Z")

</div>

Here's an example on how to do forward and reverse pagination with a composite aggregation. Example data, for use in Kibana's Dev Tools: POST test/\_doc { "date": "2020-01-01", "product": "a" } POST test/\_doc { "d…

---

## [Logstash - rename every occurrence of a multi-level nested JSON array element](https://discuss.elastic.co/t/logstash-rename-every-occurrence-of-a-multi-level-nested-json-array-element/163989)

<div class="topic-metadata">

**Author:** [@amitnegi6190](https://discuss.elastic.co/u/amitnegi6190)\
**Replies:** 4\
**Last updated:** [January 13, 2019, 3:35pm UTC](https://discuss.elastic.co/t/logstash-rename-every-occurrence-of-a-multi-level-nested-json-array-element/163989 "2019-01-13T15:35:02Z")

</div>

Hi, I am trying to send some JSON data into elasticsearch using logstash: My logstash configuration looks like this: test.config input{ file{ path =\> "/Users/bob/Study/data/test.json" codec =\> json sincedb\_p…

---

## [Spark - querying ElasticSearch cluster over a RDD](https://discuss.elastic.co/t/spark-querying-elasticsearch-cluster-over-a-rdd/38869)

<div class="topic-metadata">

**Author:** [@bug](https://discuss.elastic.co/u/bug)\
**Replies:** 4\
**Last updated:** [January 14, 2016, 3:40pm UTC](https://discuss.elastic.co/t/spark-querying-elasticsearch-cluster-over-a-rdd/38869 "2016-01-14T15:40:30Z")

</div>

Hello. I am trying to query an ElasticSearch cluster for each record in a RDD i.e. a 10 million record RDD map over a function where it queries a remote ElasticSearch cluster over the transport client. I've tried usi…

---

## [Cores Usage by Elasticsearch on Kubernetes](https://discuss.elastic.co/t/cores-usage-by-elasticsearch-on-kubernetes/180536)

<div class="topic-metadata">

**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\
**Replies:** 0\
**Last updated:** [May 10, 2019, 10:32am UTC](https://discuss.elastic.co/t/cores-usage-by-elasticsearch-on-kubernetes/180536 "2019-05-10T10:32:32Z")

</div>

Hi, everyone: We have been experiencing poor indexing performance on an Elastiscsearch cluster deployed with Kubernetes. The Kubernetes cluster consists on 4 nodes (dedicated machines running Ubuntu) with 32Gb of RAM an…

---

## [Elastic Stack Release 5.0.0-beta1](https://discuss.elastic.co/t/elastic-stack-release-5-0-0-beta1/61294)

<div class="topic-metadata">

**Author:** [@suyograo](https://discuss.elastic.co/u/suyograo)\
**Replies:** 0\
**Last updated:** [September 22, 2016, 4:45pm UTC](https://discuss.elastic.co/t/elastic-stack-release-5-0-0-beta1/61294 "2016-09-22T16:45:44Z")

</div>

Hi all, we are pleased to announce 5.0.0-beta1 for the entire Elastic Stack has been released!! Blog: https://www.elastic.co/blog/elastic-stack-release-5-0-0-beta1 Downloads: https://www.elastic.co/downloads/ Pleas…

---

## [Getting errors in web console log after loading Kibana dashboard](https://discuss.elastic.co/t/getting-errors-in-web-console-log-after-loading-kibana-dashboard/284154)

<div class="topic-metadata">

**Author:** [@pranay\_jain](https://discuss.elastic.co/u/pranay_jain)\
**Replies:** 1\
**Last updated:** [September 14, 2021, 9:42am UTC](https://discuss.elastic.co/t/getting-errors-in-web-console-log-after-loading-kibana-dashboard/284154 "2021-09-14T09:42:19Z")

</div>

I have Kibana version 7.14.1 installed. After loading the dashboard I noticed that few errors displayed are being on the web console. Refused to execute inline script because it violates the following Content Security P…

---

## [Unable to see winlogbeat events](https://discuss.elastic.co/t/unable-to-see-winlogbeat-events/234671)

<div class="topic-metadata">

**Author:** [@nkrshna](https://discuss.elastic.co/u/nkrshna)\
**Replies:** 7\
**Last updated:** [July 3, 2020, 5:35pm UTC](https://discuss.elastic.co/t/unable-to-see-winlogbeat-events/234671 "2020-07-03T17:35:32Z")

</div>

Hi, I'm new to Elasticsearch and configured 7 version running on CentOS 7. Trying to configure windows server to send event logs to ESS server but I'm not able to see any events under winlogbeat index pattern. Below is…

---

## [Logstash netflow V9](https://discuss.elastic.co/t/logstash-netflow-v9/40789)

<div class="topic-metadata">

**Author:** [@jdambly](https://discuss.elastic.co/u/jdambly)\
**Replies:** 7\
**Last updated:** [February 18, 2016, 8:49am UTC](https://discuss.elastic.co/t/logstash-netflow-v9/40789 "2016-02-18T08:49:09Z")

</div>

I'm getting the following from logstash Template length doesn't fit cleanly into flowset {:template\_id=\>256, :template\_length=\>47, :record\_length=\>936, :level=\>:warn} Template length doesn't fit cleanly into flowset {…

---

## [Pie Chart with UNIQUE COUNT and Bucket AGGREGATION with TOP HIT](https://discuss.elastic.co/t/pie-chart-with-unique-count-and-bucket-aggregation-with-top-hit/178438)

<div class="topic-metadata">

**Author:** [@MarcFajula](https://discuss.elastic.co/u/MarcFajula)\
**Replies:** 3\
**Last updated:** [May 28, 2019, 8:16am UTC](https://discuss.elastic.co/t/pie-chart-with-unique-count-and-bucket-aggregation-with-top-hit/178438 "2019-05-28T08:16:46Z")

</div>

We have a problem creating a Pie Chart, there’s no way to implement this aggregation in Kibana. We want to make a Unique Count of ID and make the aggregation with the LAST HIT OF STATE (last hit considering the last TIM…

---

## [Filebeat to Elasticsearch grok example](https://discuss.elastic.co/t/filebeat-to-elasticsearch-grok-example/230193)

<div class="topic-metadata">

**Author:** [@rkk](https://discuss.elastic.co/u/rkk)\
**Replies:** 1\
**Last updated:** [April 28, 2020, 3:35pm UTC](https://discuss.elastic.co/t/filebeat-to-elasticsearch-grok-example/230193 "2020-04-28T15:35:28Z")

</div>

Hi, I would like to send log files using filebeat directly to elasticsearch but lines in log file are in custom string format and I would like preprocess those lines using grok or something? I cannot seem to find any e…

---

## [Elasticsearch - how to curl what I need from localhost:9200?](https://discuss.elastic.co/t/elasticsearch-how-to-curl-what-i-need-from-localhost-9200/170798)

<div class="topic-metadata">

**Author:** [@bmw417](https://discuss.elastic.co/u/bmw417)\
**Replies:** 1\
**Last updated:** [March 4, 2019, 10:07pm UTC](https://discuss.elastic.co/t/elasticsearch-how-to-curl-what-i-need-from-localhost-9200/170798 "2019-03-04T22:07:39Z")

</div>

Here's a link to my SO question no one answered: https://stackoverflow.com/questions/54962586/elasticsearch-curl-error-when-trying-to-search To reiterate from that question, I have an index called threat-reports, and o…

---

## [Filebeat 6.2.2 Cannot find nginx module](https://discuss.elastic.co/t/filebeat-6-2-2-cannot-find-nginx-module/122053)

<div class="topic-metadata">

**Author:** [@samiujan](https://discuss.elastic.co/u/samiujan)\
**Replies:** 4\
**Last updated:** [March 12, 2018, 6:39am UTC](https://discuss.elastic.co/t/filebeat-6-2-2-cannot-find-nginx-module/122053 "2018-03-12T06:39:01Z")

</div>

Hi I cannot load the nginx module in using /usr/share/filebeat/bin/filebeat /usr/share/filebeat/bin/filebeat version filebeat version 6.2.2 (amd64), libbeat 6.2.2 /etc/filebeat# /usr/share/filebeat/bin/filebeat modul…

---

## [求教一个 logstash同步中文乱码的问题](https://discuss.elastic.co/t/logstash/127718)

<div class="topic-metadata">

**Author:** [@Blackcat308](https://discuss.elastic.co/u/Blackcat308)\
**Replies:** 2\
**Last updated:** [May 3, 2018, 1:17am UTC](https://discuss.elastic.co/t/logstash/127718 "2018-05-03T01:17:21Z")

</div>

背景是 从mysql数据库同步数据到Elasticsearch中 结果同步信息中出现了中文乱码 我也有在logstash配置文件中 配置过编码 例如 UTF-8 GBK 等等都有配置过 但是并没有用 实在是让人头疼 摸不着头脑 备注：数据库的编码为UTF-8 elk的版本是 5.4.0 elk与mysql都搭建在 linux上 附上截图\[BaiduShurufa\_2018-4-12\_10-55-43\]\[BaiduSh…

---

## [Timeout: request did not complete within requested timeout 30s](https://discuss.elastic.co/t/timeout-request-did-not-complete-within-requested-timeout-30s/197432)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 4\
**Last updated:** [September 3, 2019, 6:11pm UTC](https://discuss.elastic.co/t/timeout-request-did-not-complete-within-requested-timeout-30s/197432 "2019-09-03T18:11:22Z")

</div>

Hello World! I'm just Deploy the Elasticsearch cluster, yet unable to delete it: $ kubectl version Client Version: version.Info{Major:"1", Minor:"15", GitVersion:"v1.15.3", GitCommit:"2d3c76f9091b6bec110a5e63777c332469…

---

## [Curator action, delete\_indices problem](https://discuss.elastic.co/t/curator-action-delete-indices-problem/54858)

<div class="topic-metadata">

**Author:** [@Pedro\_Lopes](https://discuss.elastic.co/u/Pedro_Lopes)\
**Replies:** 4\
**Last updated:** [July 7, 2016, 10:41am UTC](https://discuss.elastic.co/t/curator-action-delete-indices-problem/54858 "2016-07-07T10:41:19Z")

</div>

Hello guys, I have ELK reading a folder with CSV's, everything is working like a charm. I installed curator to delete indices older than 7 days, but I'm in a testing environment so I used minutes instead of days. I've …

---

## [Logstash-forwarder setup... where is my data?](https://discuss.elastic.co/t/logstash-forwarder-setup-where-is-my-data/639)

<div class="topic-metadata">

**Author:** [@alexolivan](https://discuss.elastic.co/u/alexolivan)\
**Replies:** 3\
**Last updated:** [May 14, 2015, 12:18am UTC](https://discuss.elastic.co/t/logstash-forwarder-setup-where-is-my-data/639 "2015-05-14T00:18:29Z")

</div>

I again forum... I have setup a server to send log data to a central logstash server... after some pain with TLS IP SAN certificates it seems it connects and does something according to forwarder logs: root@nodo01:/e…

---

## [Multiline and '\\n' extra character](https://discuss.elastic.co/t/multiline-and-n-extra-character/159485)

<div class="topic-metadata">

**Author:** [@trelo](https://discuss.elastic.co/u/trelo)\
**Replies:** 1\
**Last updated:** [December 5, 2018, 3:41pm UTC](https://discuss.elastic.co/t/multiline-and-n-extra-character/159485 "2018-12-05T15:41:58Z")

</div>

Hi, I successfully turned my multiline log into single line, but now this log has '\\n' character and double quotes are also escaped - ". Any solution how to stop this behavior and configure filebeat to join lines "as i…

---

## [Caught exception while handling client http traffic](https://discuss.elastic.co/t/caught-exception-while-handling-client-http-traffic/76165)

<div class="topic-metadata">

**Author:** [@Balamurali](https://discuss.elastic.co/u/Balamurali)\
**Replies:** 1\
**Last updated:** [February 27, 2017, 9:12am UTC](https://discuss.elastic.co/t/caught-exception-while-handling-client-http-traffic/76165 "2017-02-27T09:12:06Z")

</div>

Hi all, we are using ES 1.3.7 and facing some slowness in cluster. while analysing logs, found some same message repeated \[2017-02-22 23:08:23,190\]\[DEBUG\]\[http.netty \] \[node\] Caught exception while ha…

---

## [Creation de plusieurs noeud elasticsearch](https://discuss.elastic.co/t/creation-de-plusieurs-noeud-elasticsearch/73725)

<div class="topic-metadata">

**Author:** [@amir\_BH](https://discuss.elastic.co/u/amir_BH)\
**Replies:** 7\
**Last updated:** [February 3, 2017, 1:02pm UTC](https://discuss.elastic.co/t/creation-de-plusieurs-noeud-elasticsearch/73725 "2017-02-03T13:02:45Z")

</div>

Bonjour, Je voudrais savoir quelle est la méthode pour créer plusieurs nœud dans elasticsearch c'est à dire un nœud maitre et 2 autres esclaves. j'ai réussi à mettre en place 1 nœud maitre et un autre esclave mais je…

---

## [Tabelle in Vega](https://discuss.elastic.co/t/tabelle-in-vega/268793)

<div class="topic-metadata">

**Author:** [@bab](https://discuss.elastic.co/u/bab)\
**Replies:** 5\
**Last updated:** [March 31, 2021, 3:35pm UTC](https://discuss.elastic.co/t/tabelle-in-vega/268793 "2021-03-31T15:35:36Z")

</div>

hello guys, I have a requirement, looks like this scenario, from a CSV file 5 columns are imported into kibana and the expected visualization of it data is to create kind of table Visia.. where the values of the fields…

---

## [ElasticSearch 2.1.2 JAR for Hadoop Integration is not working](https://discuss.elastic.co/t/elasticsearch-2-1-2-jar-for-hadoop-integration-is-not-working/37031)

<div class="topic-metadata">

**Author:** [@vivsingh](https://discuss.elastic.co/u/vivsingh)\
**Replies:** 5\
**Last updated:** [March 7, 2016, 2:44pm UTC](https://discuss.elastic.co/t/elasticsearch-2-1-2-jar-for-hadoop-integration-is-not-working/37031 "2016-03-07T14:44:05Z")

</div>

Hi, I downloaded elasticsearch2.1.2 JAR and followed the guide to configure it in Hadoop. Everything looks ok but I am getting 'CAST' error while reading from the elasticsearch source. Below is the error message- Failed …

---

## [Elasticsearch doesn't work!](https://discuss.elastic.co/t/elasticsearch-doesnt-work/140096)

<div class="topic-metadata">

**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\
**Replies:** 4\
**Last updated:** [July 16, 2018, 8:20am UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-work/140096 "2018-07-16T08:20:38Z")

</div>

these are the logs : \[root@frghcslnetv12 elasticsearch\]# tail -40 network-logs.log at org.elasticsearch.node.Node.\<init\>(Node.java:252) ~\[elasticsearch-6.3.1.jar:6.3.1\] at org.elasticsearch.bootstrap.Boo…

---

## [How to Auto Login Kibana Dashboard which embedded in Iframe](https://discuss.elastic.co/t/how-to-auto-login-kibana-dashboard-which-embedded-in-iframe/252975)

<div class="topic-metadata">

**Author:** [@Ram\_Chaudhari](https://discuss.elastic.co/u/Ram_Chaudhari)\
**Replies:** 3\
**Last updated:** [October 27, 2020, 1:23am UTC](https://discuss.elastic.co/t/how-to-auto-login-kibana-dashboard-which-embedded-in-iframe/252975 "2020-10-27T01:23:35Z")

</div>

I am using angular 8 for front end application where we have dashboard page where a iframe of kibana dashboard will be present. If user logins to application, he should automatically get logged in to kibana also. How can…

---

## [Logstash GROK filter for tomcat logs](https://discuss.elastic.co/t/logstash-grok-filter-for-tomcat-logs/124213)

<div class="topic-metadata">

**Author:** [@ashok9177](https://discuss.elastic.co/u/ashok9177)\
**Replies:** 3\
**Last updated:** [March 19, 2018, 9:39pm UTC](https://discuss.elastic.co/t/logstash-grok-filter-for-tomcat-logs/124213 "2018-03-19T21:39:53Z")

</div>

Hello elk team , i am new to elk , i need pattern that can find " transactionid following value from tomcat logs and create separate field sample logs are like below ... 2018-03-14 10:58:36,853 INFO so:165 - Female …

---

## [Count how many terms match document](https://discuss.elastic.co/t/count-how-many-terms-match-document/96222)

<div class="topic-metadata">

**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\
**Replies:** 3\
**Last updated:** [August 14, 2017, 8:26am UTC](https://discuss.elastic.co/t/count-how-many-terms-match-document/96222 "2017-08-14T08:26:13Z")

</div>

My document have an array of string: "categories" : \["A", "B", "C"\] I query like this: POST /topic/\_search?explain=true { "query": { "terms": { "categories": \[ "yoga", …

---

## [GC: collection\_count questions](https://discuss.elastic.co/t/gc-collection-count-questions/29041)

<div class="topic-metadata">

**Author:** [@genesis](https://discuss.elastic.co/u/genesis)\
**Replies:** 3\
**Last updated:** [September 11, 2015, 5:35am UTC](https://discuss.elastic.co/t/gc-collection-count-questions/29041 "2015-09-11T05:35:31Z")

</div>

We have been having some issues with our production cluster composed on 7 nodes. Right now the cluster is green but I see something that is making feel comfortable about its state. "version" : { "number" : "1.7.1", …

---

## [Prevent Logstash Service logging to /var/log/messages](https://discuss.elastic.co/t/prevent-logstash-service-logging-to-var-log-messages/181836)

<div class="topic-metadata">

**Author:** [@anshul27jain](https://discuss.elastic.co/u/anshul27jain)\
**Replies:** 2\
**Last updated:** [May 23, 2019, 10:35am UTC](https://discuss.elastic.co/t/prevent-logstash-service-logging-to-var-log-messages/181836 "2019-05-23T10:35:56Z")

</div>

Anyone please guide me in preventing Logstash logging to /var/log/messages? I have configured Syslog Input module on my server & sending those logs to Elasticsearch. Along with that all log related to logsatsh is also g…

---

## [Why the unique count of some item is larger than count in table chart of kibana?](https://discuss.elastic.co/t/why-the-unique-count-of-some-item-is-larger-than-count-in-table-chart-of-kibana/34374)

<div class="topic-metadata">

**Author:** [@zpli](https://discuss.elastic.co/u/zpli)\
**Replies:** 2\
**Last updated:** [December 17, 2015, 1:04am UTC](https://discuss.elastic.co/t/why-the-unique-count-of-some-item-is-larger-than-count-in-table-chart-of-kibana/34374 "2015-12-17T01:04:47Z")

</div>

As shown in the first fig.1, the unique count of group\_id is larger than the count of logs. When search the logs with the same filters, I find only 8 logs (in fig.2), why the unique count of group\_id is 9 ? fig.1 fig…

---

## [Terms aggregation on text](https://discuss.elastic.co/t/terms-aggregation-on-text/62458)

<div class="topic-metadata">

**Author:** [@NickW](https://discuss.elastic.co/u/NickW)\
**Replies:** 0\
**Last updated:** [October 7, 2016, 5:35am UTC](https://discuss.elastic.co/t/terms-aggregation-on-text/62458 "2016-10-07T05:35:18Z")

</div>

It looks like in v5 text fileds have fielddata disabled by default, and the new \*.keyword field is not analyzed. So what is the best way to fetch the most frequent terms in an index or query result? I'm trying to do a …

---

## [Dynamic urls for Logstash http\_poller plugin](https://discuss.elastic.co/t/dynamic-urls-for-logstash-http-poller-plugin/259785)

<div class="topic-metadata">

**Author:** [@malsioufi](https://discuss.elastic.co/u/malsioufi)\
**Replies:** 7\
**Last updated:** [December 29, 2020, 2:57pm UTC](https://discuss.elastic.co/t/dynamic-urls-for-logstash-http-poller-plugin/259785 "2020-12-29T14:57:05Z")

</div>

Hi, I have an implementation of some script that calls an api to start some job, I can follow up the job status another api (jobs-api). I want to use Logstash and Elasticsearch to monitor the status of the jobs I start, …

---

## [Server based filebeat index name](https://discuss.elastic.co/t/server-based-filebeat-index-name/160474)

<div class="topic-metadata">

**Author:** [@Chetan\_Rana](https://discuss.elastic.co/u/Chetan_Rana)\
**Replies:** 7\
**Last updated:** [December 13, 2018, 9:35am UTC](https://discuss.elastic.co/t/server-based-filebeat-index-name/160474 "2018-12-13T09:35:44Z")

</div>

Hi, If filebeat is installed in multiple servers. How to make sure that that logstash able to make index in elasticsearch like filebeat-{servername}-\*. As of now default one is filebeat-\*. The version i am using of fil…

[Previous page](https://discuss.elastic.co/top.md?page=682&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=684&per_page=50&period=all)
