# Top **URL:** https://discuss.elastic.co/top.md?page=694&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 695 --- ## [Help needed for setup.template.append\_fields usage](https://discuss.elastic.co/t/help-needed-for-setup-template-append-fields-usage/183701)
**Author:** [@Georgios\_Gkinis](https://discuss.elastic.co/u/Georgios_Gkinis)\ **Replies:** 7\ **Last updated:** [June 3, 2019, 2:02pm UTC](https://discuss.elastic.co/t/help-needed-for-setup-template-append-fields-usage/183701 "2019-06-03T14:02:08Z")
I am trying to add fields to filebeat but cannot get it working. When my logs are indexed i cannot find the 'resource' field within my access or error logs from nginx. I have deleted all filebeat indexes and templates f… --- ## [Is Daily-Index better than Monthly-Index](https://discuss.elastic.co/t/is-daily-index-better-than-monthly-index/229863)
**Author:** [@jeffzhao](https://discuss.elastic.co/u/jeffzhao)\ **Replies:** 5\ **Last updated:** [April 28, 2020, 1:49pm UTC](https://discuss.elastic.co/t/is-daily-index-better-than-monthly-index/229863 "2020-04-28T13:49:57Z")
Hi, My Elasticsearch index is time-based: one index per month at this scale: number of Documents: 100M Size: 125 GB The index was created with 12 shards + 2 replicas. Since the date range for most of my user's searc… --- ## [Filter bar usage - how to apply multiple filters question](https://discuss.elastic.co/t/filter-bar-usage-how-to-apply-multiple-filters-question/69666)
**Author:** [@virusu](https://discuss.elastic.co/u/virusu)\ **Replies:** 5\ **Last updated:** [December 22, 2016, 8:44pm UTC](https://discuss.elastic.co/t/filter-bar-usage-how-to-apply-multiple-filters-question/69666 "2016-12-22T20:44:02Z")
Hi, I am developing my own Kibana plugin and applying multiple filters at the same time, in the Tim Roes way: https://www.timroes.de/2015/12/06/writing-kibana-4-plugins-visualizations-using-data/#adding-filters-on-clic… --- ## [Add directoryname and filename as different field to elasticsearch](https://discuss.elastic.co/t/add-directoryname-and-filename-as-different-field-to-elasticsearch/41181)
**Author:** [@techrawther](https://discuss.elastic.co/u/techrawther)\ **Replies:** 1\ **Last updated:** [February 9, 2016, 4:31pm UTC](https://discuss.elastic.co/t/add-directoryname-and-filename-as-different-field-to-elasticsearch/41181 "2016-02-09T16:31:18Z")
I am using file plugin to read mutiple files in directory . I would like to add file name and directory name as fields. how could I do that. Following is a sample directory structure and content inside it D:/test/sh… --- ## [\[Filebeat\] Azure Module - Additional Azure AD Log Sources](https://discuss.elastic.co/t/filebeat-azure-module-additional-azure-ad-log-sources/262026)
**Author:** [@Matthew\_Lubbers](https://discuss.elastic.co/u/Matthew_Lubbers)\ **Replies:** 5\ **Last updated:** [February 4, 2021, 3:22am UTC](https://discuss.elastic.co/t/filebeat-azure-module-additional-azure-ad-log-sources/262026 "2021-02-04T03:22:03Z")
Recently Microsoft Azure has added 4 new Azure AD log sources to be consumed by Azure Monitor Diagnostic Settings. When would be able to receive support for these new log sources for the Azure module? New Log Sources N… --- ## [Problem with sort with polish(POLAND) words!](https://discuss.elastic.co/t/problem-with-sort-with-polish-poland-words/73417)
**Author:** [@matizgal](https://discuss.elastic.co/u/matizgal)\ **Replies:** 4\ **Last updated:** [February 1, 2017, 10:42am UTC](https://discuss.elastic.co/t/problem-with-sort-with-polish-poland-words/73417 "2017-02-01T10:42:14Z")
Please, help me people with my problem. I've got that mapping: "some\_field: {type: 'string', store: 'true', analyzer: 'keyword'}" in this field i've got words "Śrem" "Żnin" with polish sign. When i do sort on this … --- ## [Index tag in Logstash output doesn't seem to work](https://discuss.elastic.co/t/index-tag-in-logstash-output-doesnt-seem-to-work/41008)
**Author:** [@rawill](https://discuss.elastic.co/u/rawill)\ **Replies:** 4\ **Last updated:** [February 4, 2016, 11:36pm UTC](https://discuss.elastic.co/t/index-tag-in-logstash-output-doesnt-seem-to-work/41008 "2016-02-04T23:36:33Z")
While testing Winlogbeat we set the index in the Logstash output but never see it getting passed. Anyone else seeing similar to this? What I have set in my yml: Optional index name. The default index name depends on… --- ## [Kibana error "Client request error: Parse Error",](https://discuss.elastic.co/t/kibana-error-client-request-error-parse-error/215638)
**Author:** [@Ramu\_Kamath](https://discuss.elastic.co/u/Ramu_Kamath)\ **Replies:** 8\ **Last updated:** [January 23, 2020, 2:15pm UTC](https://discuss.elastic.co/t/kibana-error-client-request-error-parse-error/215638 "2020-01-23T14:15:44Z")
Hi All, I have installed es and Kibana on ec2 cluster. everything works fine including search. I have strange issue where I have one query runs in ES but if I run same query in Kibana I get following error. I looked to… --- ## [Can i run rally on local elastic instance](https://discuss.elastic.co/t/can-i-run-rally-on-local-elastic-instance/109488)
**Author:** [@Ankit3](https://discuss.elastic.co/u/Ankit3)\ **Replies:** 8\ **Last updated:** [November 29, 2017, 5:14pm UTC](https://discuss.elastic.co/t/can-i-run-rally-on-local-elastic-instance/109488 "2017-11-29T17:14:28Z")
Hi , I am very new to elastic search and rally. I downloaded elastic on my local and running on 127.0.0.1:9200 Can i run rally on local elastic instance ? I tried few options even with target host but none worked. Ca… --- ## [New ES user : Issue while installation](https://discuss.elastic.co/t/new-es-user-issue-while-installation/111639)
**Author:** [@Elastic\_user](https://discuss.elastic.co/u/Elastic_user)\ **Replies:** 6\ **Last updated:** [December 13, 2017, 10:39pm UTC](https://discuss.elastic.co/t/new-es-user-issue-while-installation/111639 "2017-12-13T22:39:43Z")
Hi there, i am few hours in to ES now and trying to install elastic one of my nodes, and have been getting this error, i did look upon my path.conf file and .yml file wherein i didnt find problems (offcourse with limtied… --- ## [Twitter input for mentioned Hashtag](https://discuss.elastic.co/t/twitter-input-for-mentioned-hashtag/27825)
**Author:** [@Dan](https://discuss.elastic.co/u/Dan)\ **Replies:** 6\ **Last updated:** [August 24, 2015, 6:02am UTC](https://discuss.elastic.co/t/twitter-input-for-mentioned-hashtag/27825 "2015-08-24T06:02:37Z")
HI All, i am using twitter lagstash input configuration to pull data from twitter. i used below configuration file to pull data. input { twitter { consumer\_key =\> "XXXXXXXXXXXXXXX" consume… --- ## [Logstash group imbalance due consumer thread!](https://discuss.elastic.co/t/logstash-group-imbalance-due-consumer-thread/141075)
**Author:** [@SJN8](https://discuss.elastic.co/u/SJN8)\ **Replies:** 1\ **Last updated:** [July 23, 2018, 12:01pm UTC](https://discuss.elastic.co/t/logstash-group-imbalance-due-consumer-thread/141075 "2018-07-23T12:01:11Z")
I have below configuration in Logstash from kafka , input { kafka { bootstrap\_servers =\> "server1 , server2 , server3" security\_protocol =\> "SASL\_PLAINTEXT" sasl\_mechanism =\> "PLAIN" jaas\_path =\> "/etc/logstash/kaf… --- ## [Circuit Breaker \[parent\] Data too large, data for \[\\]](https://discuss.elastic.co/t/circuit-breaker-parent-data-too-large-data-for-http-request/91044)
**Author:** [@ori.rubinfeld](https://discuss.elastic.co/u/ori.rubinfeld)\ **Replies:** 1\ **Last updated:** [July 10, 2017, 6:54am UTC](https://discuss.elastic.co/t/circuit-breaker-parent-data-too-large-data-for-http-request/91044 "2017-07-10T06:54:33Z")
Hi, We are running Elasticsearch version 5.0 as production. Using the Ingest Node to parse the logs data. Logs are being sent by Filebeat Version 5.0 There are more than 25 different logs types being sent, each log w… --- ## [Visualize mongo query performance in Kibana](https://discuss.elastic.co/t/visualize-mongo-query-performance-in-kibana/42018)
**Author:** [@swapnil-jaiswal](https://discuss.elastic.co/u/swapnil-jaiswal)\ **Replies:** 1\ **Last updated:** [February 17, 2016, 2:58pm UTC](https://discuss.elastic.co/t/visualize-mongo-query-performance-in-kibana/42018 "2016-02-17T14:58:37Z")
Hi, I have successfully configured filebeat clients to stream data to centralized ELK server. Now i want to to visualize the mongo query performance data in various dashboards. For this is followed the instructions as… --- ## [How is Hadoop and ES typically used?](https://discuss.elastic.co/t/how-is-hadoop-and-es-typically-used/1756)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 7\ **Last updated:** [July 25, 2015, 11:05am UTC](https://discuss.elastic.co/t/how-is-hadoop-and-es-typically-used/1756 "2015-07-25T11:05:10Z")
Would I store massive data in Hadoop cluster and then using ES plugin to index the data to ES, but disabling the source field in ES. So then query ES which returns back a bunch of document ids and if I want to get the … --- ## [How to create anomaly alert of Machine Learning in Kibana?](https://discuss.elastic.co/t/how-to-create-anomaly-alert-of-machine-learning-in-kibana/160078)
**Author:** [@fr0der1c](https://discuss.elastic.co/u/fr0der1c)\ **Replies:** 3\ **Last updated:** [December 11, 2018, 2:59pm UTC](https://discuss.elastic.co/t/how-to-create-anomaly-alert-of-machine-learning-in-kibana/160078 "2018-12-11T14:59:33Z")
I want to get a Slack notification when there is an anomaly in our APM data. I found this: Alert when there is anomaly in machine learning? but this is Kibana 5.5. I'm using ELK stack 6.5.0, and I didn't see this option. … --- ## [Getting \[docsnew\] IndexNotFoundException\[no such index\]](https://discuss.elastic.co/t/getting-docsnew-indexnotfoundexception-no-such-index/135715)
**Author:** [@stackoverflow\_s](https://discuss.elastic.co/u/stackoverflow_s)\ **Replies:** 2\ **Last updated:** [June 14, 2018, 12:10pm UTC](https://discuss.elastic.co/t/getting-docsnew-indexnotfoundexception-no-such-index/135715 "2018-06-14T12:10:26Z")
Running the command http://localhost:9200/\_cat/indices lists out the index docsnew from the elasticsearch database. Also, able the entries are listed when i enter the following in the browser http://localhost:9200/docsn… --- ## [Integrate D3 in kibana 6.2.2](https://discuss.elastic.co/t/integrate-d3-in-kibana-6-2-2/130251)
**Author:** [@Hanen](https://discuss.elastic.co/u/Hanen)\ **Replies:** 2\ **Last updated:** [May 2, 2018, 4:32pm UTC](https://discuss.elastic.co/t/integrate-d3-in-kibana-6-2-2/130251 "2018-05-02T16:32:44Z")
Hello, please how can I integrate D3 visualization in kibana 6.2.2. Many thanks. --- ## [Elasticsearch threadpool and index settings in ECK](https://discuss.elastic.co/t/elasticsearch-threadpool-and-index-settings-in-eck/261272)
**Author:** [@zohaib](https://discuss.elastic.co/u/zohaib)\ **Replies:** 5\ **Last updated:** [January 18, 2021, 9:53am UTC](https://discuss.elastic.co/t/elasticsearch-threadpool-and-index-settings-in-eck/261272 "2021-01-18T09:53:55Z")
We are using ECK operator 1.2 and ElasticSearch 7.4.0 for a 3 node cluster with the default settings on Azure Kubernetes Services. We need to update the following ElasticSearch configuration in our cluster: threadpool.… --- ## [Setting SSL Between Elasticsearch and Active Directory \[ELK running on Windows server\]](https://discuss.elastic.co/t/setting-ssl-between-elasticsearch-and-active-directory-elk-running-on-windows-server/98661)
**Author:** [@Bozzerreaneaux](https://discuss.elastic.co/u/Bozzerreaneaux)\ **Replies:** 4\ **Last updated:** [August 29, 2017, 12:02pm UTC](https://discuss.elastic.co/t/setting-ssl-between-elasticsearch-and-active-directory-elk-running-on-windows-server/98661 "2017-08-29T12:02:54Z")
Hi Team, I’ve been working on sort of unorthodox ELK stack logging POC solution where all components (ElasticSearch, Kibana, Logstash, X-Pack) are running on windows server. I’ve been able to integrate Elastic search w… --- ## [Decode\_json\_fields and array](https://discuss.elastic.co/t/decode-json-fields-and-array/205218)
**Author:** [@granier](https://discuss.elastic.co/u/granier)\ **Replies:** 2\ **Last updated:** [October 28, 2019, 11:49am UTC](https://discuss.elastic.co/t/decode-json-fields-and-array/205218 "2019-10-28T11:49:13Z")
Hy, We use filbeat to store lgo messages in Json format and we use the processor decode\_json\_fields. We read this post Condition with decode\_json\_fields processor and this documentation Decode JSON fields. We get a pr… --- ## [\[hadoop\] java.lang.NoClassDefFoundError: org/elasticsearch/hadoop/mr/EsOutputFormat](https://discuss.elastic.co/t/hadoop-java-lang-noclassdeffounderror-org-elasticsearch-hadoop-mr-esoutputformat/21249)
**Author:** [@CAI\_Longqi](https://discuss.elastic.co/u/CAI_Longqi)\ **Replies:** 2\ **Last updated:** [December 15, 2014, 12:56pm UTC](https://discuss.elastic.co/t/hadoop-java-lang-noclassdeffounderror-org-elasticsearch-hadoop-mr-esoutputformat/21249 "2014-12-15T12:56:48Z")
Hello, I’m using elasticsearch-hadoop-2.0.2.jar, and meet the problem: Exception in thread "main" java.lang.NoClassDefFoundError: org/elasticsearch/hadoop/mr/EsOutputFormat at com.clqb.app.ElasticSearch.run(… --- ## [Rally 1.0.3 released](https://discuss.elastic.co/t/rally-1-0-3-released/165369)
**Author:** [@danielmitterdorfer](https://discuss.elastic.co/u/danielmitterdorfer)\ **Replies:** 0\ **Last updated:** [January 23, 2019, 9:56am UTC](https://discuss.elastic.co/t/rally-1-0-3-released/165369 "2019-01-23T09:56:48Z")
We have just released Rally 1.0.3. This release contains several improvements and bug fixes and we have improved stability in several areas. See the 1.0.3 release page for all details. How to...? ... upgrade: pip3 in… --- ## [Logstash 2.0.0-beta2 released](https://discuss.elastic.co/t/logstash-2-0-0-beta2-released/32218)
**Author:** [@suyograo](https://discuss.elastic.co/u/suyograo)\ **Replies:** 0\ **Last updated:** [October 14, 2015, 9:44pm UTC](https://discuss.elastic.co/t/logstash-2-0-0-beta2-released/32218 "2015-10-14T21:44:29Z")
Hi, we are happy to announce that beta2 of Logstash 2.0 has been released. Please check the changelog for details, and also the blog for all the goodies \[:smile:\] Download: https://www.elastic.co/downloads/logstash --- ## [Aggs / Max timestamp Term query issue](https://discuss.elastic.co/t/aggs-max-timestamp-term-query-issue/160604)
**Author:** [@mgolubov55](https://discuss.elastic.co/u/mgolubov55)\ **Replies:** 8\ **Last updated:** [December 13, 2018, 5:26pm UTC](https://discuss.elastic.co/t/aggs-max-timestamp-term-query-issue/160604 "2018-12-13T17:26:04Z")
When I execute this query: GET /logstash\*/\_search?size=0 { "aggs" : { "max\_timestamp" : { "max" : { "field" : "@timestamp" } } } } I get this result: . . }, "aggregations" : { "max\_timestamp" : { "value" : 1… --- ## [Xpack after success install Full of errors](https://discuss.elastic.co/t/xpack-after-success-install-full-of-errors/129251)
**Author:** [@omid](https://discuss.elastic.co/u/omid)\ **Replies:** 8\ **Last updated:** [April 26, 2018, 6:17am UTC](https://discuss.elastic.co/t/xpack-after-success-install-full-of-errors/129251 "2018-04-26T06:17:59Z")
im install after install successfully X-pack! but fully error! \[error%20xpack%20elk\] why !? how to solved error ? --- ## [How can I add an array object to tags using add\_Tag](https://discuss.elastic.co/t/how-can-i-add-an-array-object-to-tags-using-add-tag/73676)
**Author:** [@trondhindenes](https://discuss.elastic.co/u/trondhindenes)\ **Replies:** 3\ **Last updated:** [February 2, 2017, 5:28pm UTC](https://discuss.elastic.co/t/how-can-i-add-an-array-object-to-tags-using-add-tag/73676 "2017-02-02T17:28:02Z")
I have the following logstash snippet: elseif \[Properties\]\[Telemetry\] { mutate { update =\> { "logtype" =\> "telemetry" } add\_field =\> { "key" =\> "%{\[Properties\]\[Telemetry\]\[Key\]}" "value" =\> "%{\[Properties… --- ## [Spark + ES-Hadoop 2.1.2 + ElasticSearch 2.0 Unsupported](https://discuss.elastic.co/t/spark-es-hadoop-2-1-2-elasticsearch-2-0-unsupported/33638)
**Author:** [@Mark\_Vervuurt](https://discuss.elastic.co/u/Mark_Vervuurt)\ **Replies:** 3\ **Last updated:** [November 3, 2015, 5:33pm UTC](https://discuss.elastic.co/t/spark-es-hadoop-2-1-2-elasticsearch-2-0-unsupported/33638 "2015-11-03T17:33:38Z")
Dear Friends, I am using Spark 1.4.1 with the ES-Hadoop 2.1.2 Connector together with ElasticSearch 2.0. I get the following error when running my Java code: org.elasticsearch.hadoop.EsHadoopIllegalArgumentException… --- ## [2.0 Question about what's returning within the Highlighter](https://discuss.elastic.co/t/2-0-question-about-whats-returning-within-the-highlighter/34065)
**Author:** [@TryTech](https://discuss.elastic.co/u/TryTech)\ **Replies:** 7\ **Last updated:** [August 22, 2016, 12:44pm UTC](https://discuss.elastic.co/t/2-0-question-about-whats-returning-within-the-highlighter/34065 "2016-08-22T12:44:15Z")
Hello, I've been reading here for a while, but this is my first request for help. I hope I have formatted the requests for you properly. I am using Elastic 2.0, the official release, and the highlighter appears to be r… --- ## [Configure Input and Modules at the same time for Filebeat](https://discuss.elastic.co/t/configure-input-and-modules-at-the-same-time-for-filebeat/266575)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 4\ **Last updated:** [March 16, 2021, 2:37pm UTC](https://discuss.elastic.co/t/configure-input-and-modules-at-the-same-time-for-filebeat/266575 "2021-03-16T14:37:53Z")
Hi, I have following scenario: One filebeat installation to collect icinga logs. For this I am using icinga module On the same host I have another application's logs, which are located in different path and have d… --- ## [Logstash Grok pattern not working](https://discuss.elastic.co/t/logstash-grok-pattern-not-working/181317)
**Author:** [@shabhaskar](https://discuss.elastic.co/u/shabhaskar)\ **Replies:** 4\ **Last updated:** [May 20, 2019, 9:48am UTC](https://discuss.elastic.co/t/logstash-grok-pattern-not-working/181317 "2019-05-20T09:48:07Z")
hi There , I am completely new to ELK and currently learning to configure it for different logs, ELK version 7.0 while parsing the GClogs to logstash through fileBeat I see the pattrent match fails( please note same p… --- ## [After installing X-pack, logstash can't run](https://discuss.elastic.co/t/after-installing-x-pack-logstash-cant-run/114377)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 4\ **Last updated:** [January 7, 2018, 10:17am UTC](https://discuss.elastic.co/t/after-installing-x-pack-logstash-cant-run/114377 "2018-01-07T10:17:35Z")
As title, after I install x-pack, logstash can't run. and it show me some errors: 28,006\]\[WARN \]\[logstash.licensechecker.licensereader\] UNEXPECTED POOL ERROR {:e=\>#\ **Author:** [@LansK](https://discuss.elastic.co/u/LansK)\ **Replies:** 5\ **Last updated:** [September 7, 2015, 7:10am UTC](https://discuss.elastic.co/t/reading-analyzed-fields-as-not-analyzed-and-excluding-parts-of-not-analyzed-fields/28727 "2015-09-07T07:10:50Z") I have a field whose mapping defaulted to analyzed that I would like to search over (for terms) as if it were not-analyzed. Is there a way to do that without re-indexing? (The problem I am encountering is discussed here:… --- ## [Authentication issues while xpack security enabling](https://discuss.elastic.co/t/authentication-issues-while-xpack-security-enabling/214285)
**Author:** [@TheVintik](https://discuss.elastic.co/u/TheVintik)\ **Replies:** 3\ **Last updated:** [January 9, 2020, 2:27pm UTC](https://discuss.elastic.co/t/authentication-issues-while-xpack-security-enabling/214285 "2020-01-09T14:27:40Z")
Hello, I have an issues while enabling security for ES. I have installed and configured several ES VMs. They already working as expected and connected to one ES cluster. After that, I decided to try to install and setup… --- ## [Getsockopt: connection refused error while trying from Docker vm](https://discuss.elastic.co/t/getsockopt-connection-refused-error-while-trying-from-docker-vm/110460)
**Author:** [@Firdaus](https://discuss.elastic.co/u/Firdaus)\ **Replies:** 3\ **Last updated:** [December 7, 2017, 12:38pm UTC](https://discuss.elastic.co/t/getsockopt-connection-refused-error-while-trying-from-docker-vm/110460 "2017-12-07T12:38:25Z")
I have installed filebeat in a docker machine and trying to connect to ELK server but i get below error \[tomluser@tomlvmtest etc\]$ sudo systemctl status filebeat ● filebeat.service - filebeat Loaded: loaded (/usr/lib/… --- ## [Add or update field in filter or elsewhere](https://discuss.elastic.co/t/add-or-update-field-in-filter-or-elsewhere/106297)
**Author:** [@Ram\_Sharan\_Mittal](https://discuss.elastic.co/u/Ram_Sharan_Mittal)\ **Replies:** 3\ **Last updated:** [November 6, 2017, 8:22am UTC](https://discuss.elastic.co/t/add-or-update-field-in-filter-or-elsewhere/106297 "2017-11-06T08:22:35Z")
based on \[@metadata\]\[category\] field , log need to uploaded to different file location. if message have some pattern then need to update \[@metadata\]\[category\] , I am doing in filter filter { if \[message\] =~ ".regextp… --- ## [Datatable visualization on max time taken URLs from nginx access log](https://discuss.elastic.co/t/datatable-visualization-on-max-time-taken-urls-from-nginx-access-log/68861)
**Author:** [@tony\_thomas](https://discuss.elastic.co/u/tony_thomas)\ **Replies:** 3\ **Last updated:** [January 2, 2017, 6:41pm UTC](https://discuss.elastic.co/t/datatable-visualization-on-max-time-taken-urls-from-nginx-access-log/68861 "2017-01-02T18:41:43Z")
Hi, I am new to ELK and creating dashboards with ELK for nginx access logs. I found its pretty useful on creating nice visualizations. On my requirements one more datatable is pending, the requirement is given below (I… --- ## [Filebeat Installation 0 hits? Troubleshoot](https://discuss.elastic.co/t/filebeat-installation-0-hits-troubleshoot/49784)
**Author:** [@Leonard\_Larios\_Chan](https://discuss.elastic.co/u/Leonard_Larios_Chan)\ **Replies:** 3\ **Last updated:** [May 12, 2016, 11:58am UTC](https://discuss.elastic.co/t/filebeat-installation-0-hits-troubleshoot/49784 "2016-05-12T11:58:43Z")
Hi! I'm new to using the ELK stack and after configuring, installing the ELK stack and finally coming to filebeat, I can't seem to get a hit after running curl -XGET 'http://localhost:9200/filebeat-\*/\_search?pretty' … --- ## [Creating searchable and aggregatable mappings for a new index](https://discuss.elastic.co/t/creating-searchable-and-aggregatable-mappings-for-a-new-index/74508)
**Author:** [@leigh](https://discuss.elastic.co/u/leigh)\ **Replies:** 1\ **Last updated:** [February 10, 2017, 3:04pm UTC](https://discuss.elastic.co/t/creating-searchable-and-aggregatable-mappings-for-a-new-index/74508 "2017-02-10T15:04:51Z")
I am trying to create a new index and also specify the mappings before sending any data to ES. Taking a simple example: { "mappings": { "monitor": { "properties": { "MAX": { "type": "float", "fields… --- ## [Packetbeat installation problem](https://discuss.elastic.co/t/packetbeat-installation-problem/134732)
**Author:** [@Saketh\_Chandra\_Kolis](https://discuss.elastic.co/u/Saketh_Chandra_Kolis)\ **Replies:** 6\ **Last updated:** [June 11, 2018, 4:46am UTC](https://discuss.elastic.co/t/packetbeat-installation-problem/134732 "2018-06-11T04:46:51Z")
PS C:\\Program Files\\Packetbeat\> PowerShell.exe -ExecutionPolicy UnRestricted -File .\\install-service-packetbeat.ps1. Security warning Run only scripts that you trust. While scripts from the internet can be useful, this… --- ## [How to use arithmetic operation inside bucket aggregation on a very large data containing millions document in elasticsearch?](https://discuss.elastic.co/t/how-to-use-arithmetic-operation-inside-bucket-aggregation-on-a-very-large-data-containing-millions-document-in-elasticsearch/94091)
**Author:** [@vaibhav\_goel](https://discuss.elastic.co/u/vaibhav_goel)\ **Replies:** 6\ **Last updated:** [July 22, 2017, 5:04am UTC](https://discuss.elastic.co/t/how-to-use-arithmetic-operation-inside-bucket-aggregation-on-a-very-large-data-containing-millions-document-in-elasticsearch/94091 "2017-07-22T05:04:05Z")
Using script within bucket aggregation on a very large set of data takes very long time to return result and many a times Elasticsearch health goes down due to this. ES has around 10 millions documents and it haven't … --- ## [Parsing multiple lines as multiple events using fields from first and last line](https://discuss.elastic.co/t/parsing-multiple-lines-as-multiple-events-using-fields-from-first-and-last-line/234416)
**Author:** [@jsalamanca](https://discuss.elastic.co/u/jsalamanca)\ **Replies:** 4\ **Last updated:** [June 3, 2020, 7:52pm UTC](https://discuss.elastic.co/t/parsing-multiple-lines-as-multiple-events-using-fields-from-first-and-last-line/234416 "2020-06-03T19:52:26Z")
Hi everyone, I am somewhat new to Logstash. I am trying to perform a somewhat special multiline parse, and I have run out of ideas. The thing is, I want to parse some log lines, which must use values found on previous A… --- ## [His Beat requires the default distribution of Elasticsearch. Please install the default distribution of Elasticsearch from elastic.co, or install the oss-only distribution of beats\]](https://discuss.elastic.co/t/his-beat-requires-the-default-distribution-of-elasticsearch-please-install-the-default-distribution-of-elasticsearch-from-elastic-co-or-install-the-oss-only-distribution-of-beats/196614)
**Author:** [@Arman\_Ajdani](https://discuss.elastic.co/u/Arman_Ajdani)\ **Replies:** 2\ **Last updated:** [September 10, 2019, 9:42pm UTC](https://discuss.elastic.co/t/his-beat-requires-the-default-distribution-of-elasticsearch-please-install-the-default-distribution-of-elasticsearch-from-elastic-co-or-install-the-oss-only-distribution-of-beats/196614 "2019-09-10T21:42:41Z")
Hi, I have installed metricbeat 6.8.2 and I have elasticsearch 6.2.4 , when try to setup metricbeat I get this: Exiting: Couldn't connect to any of the configured Elasticsearch hosts. Errors: \[Error connection to Elast… --- ## [Metricbeat support for AIX machines](https://discuss.elastic.co/t/metricbeat-support-for-aix-machines/102650)
**Author:** [@desh](https://discuss.elastic.co/u/desh)\ **Replies:** 2\ **Last updated:** [October 4, 2017, 7:33am UTC](https://discuss.elastic.co/t/metricbeat-support-for-aix-machines/102650 "2017-10-04T07:33:36Z")
Hi, I need to install metricbeat on AIX servers but I don't find any download for AIX machines. Is metricbeat available for AIX machine? if they are not supported, is there any future plan to support it. are there any wo… --- ## [Field data loading is forbidden on \[message\]](https://discuss.elastic.co/t/field-data-loading-is-forbidden-on-message/53134)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 5\ **Last updated:** [June 20, 2016, 12:20pm UTC](https://discuss.elastic.co/t/field-data-loading-is-forbidden-on-message/53134 "2016-06-20T12:20:38Z")
I am using winlogbeat to monitor windows log event. However, when I tried to use message field to do some visulaization, it pops out the message as shown in the topic. Is there any ways to solve it. I am using winlogbe… --- ## [Logstash port 5044 is not listening](https://discuss.elastic.co/t/logstash-port-5044-is-not-listening/106784)
**Author:** [@peterch](https://discuss.elastic.co/u/peterch)\ **Replies:** 3\ **Last updated:** [November 9, 2017, 3:20am UTC](https://discuss.elastic.co/t/logstash-port-5044-is-not-listening/106784 "2017-11-09T03:20:57Z")
Dear all, I would like to receive log from remote server through beats. However I find the port 5044 in ELK server is not listening. The ELK server is window platform. Any idea? Thanks. ELK server - logstash\\config.jso… --- ## [Random appear io timeout error: \`Unable to reach APM Server(): Read timed out\`](https://discuss.elastic.co/t/random-appear-io-timeout-error-unable-to-reach-apm-server-read-timed-out/261488)
**Author:** [@Ackerr](https://discuss.elastic.co/u/Ackerr)\ **Replies:** 6\ **Last updated:** [January 20, 2021, 7:47am UTC](https://discuss.elastic.co/t/random-appear-io-timeout-error-unable-to-reach-apm-server-read-timed-out/261488 "2021-01-20T07:47:34Z")
Kibana version: 7.10.1 Elasticsearch version: 7.10.1 APM Server version:7.10.1 APM Agent language and version: apm-agent-python 5.10.1 Browser version: Original install method (e.g. download page, yum, deb, from sou… --- ## [Search requests for an exact mach on a value with ampersand](https://discuss.elastic.co/t/search-requests-for-an-exact-mach-on-a-value-with-ampersand/218260)
**Author:** [@StephenGoodall](https://discuss.elastic.co/u/StephenGoodall)\ **Replies:** 6\ **Last updated:** [February 10, 2020, 12:18am UTC](https://discuss.elastic.co/t/search-requests-for-an-exact-mach-on-a-value-with-ampersand/218260 "2020-02-10T00:18:01Z")
Hi all, I'm trying to resolve an issue we have where the field has an ampersand. I did a search on a different field (field\_id)and found this document (edited to remove most of it): { "\_index": "index\_v1",… --- ## [Is it possible to create a loop around a challenge](https://discuss.elastic.co/t/is-it-possible-to-create-a-loop-around-a-challenge/117892)
**Author:** [@dipanjan44](https://discuss.elastic.co/u/dipanjan44)\ **Replies:** 6\ **Last updated:** [February 6, 2018, 7:26am UTC](https://discuss.elastic.co/t/is-it-possible-to-create-a-loop-around-a-challenge/117892 "2018-02-06T07:26:49Z")
I would like to loop through my challenge using rally. I have a create, insert and delete operation inside the challenge. I would like to loop through it 10 times or say for 24 hrs. Is there a provision of doing it witho… --- ## [Elastic search process memory consumption continuously increasing](https://discuss.elastic.co/t/elastic-search-process-memory-consumption-continuously-increasing/87433)
**Author:** [@prabhurajreddy](https://discuss.elastic.co/u/prabhurajreddy)\ **Replies:** 2\ **Last updated:** [June 12, 2017, 8:29am UTC](https://discuss.elastic.co/t/elastic-search-process-memory-consumption-continuously-increasing/87433 "2017-06-12T08:29:23Z")
I am using the elastic search 2.4.0 with java version "1.8.0\_111" . I have only indexed 100's of documents into 3 indexes and the total store size is around 100KB. System configuration: 16 GB RAM. ES Configuration… [Previous page](https://discuss.elastic.co/top.md?page=693&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=695&per_page=50&period=all)