# Top **URL:** https://discuss.elastic.co/top.md?page=707&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 708 --- ## [HAPROXY (HAPROXYHTTP) truncates last field if over 1024, breaking grok pattern](https://discuss.elastic.co/t/haproxy-haproxyhttp-truncates-last-field-if-over-1024-breaking-grok-pattern/57855)
**Author:** [@Michael\_Tracey](https://discuss.elastic.co/u/Michael_Tracey)\ **Replies:** 4\ **Last updated:** [August 30, 2016, 6:39pm UTC](https://discuss.elastic.co/t/haproxy-haproxyhttp-truncates-last-field-if-over-1024-breaking-grok-pattern/57855 "2016-08-30T18:39:36Z")
According to haproxy, the standard httplog truncates the final field if it's over 1024 characters long (from the manual): "http\_request" is the complete HTTP request line, including the method, request and HTTP ve… --- ## [Courier Fetch: N of N shards failed in kibana](https://discuss.elastic.co/t/courier-fetch-n-of-n-shards-failed-in-kibana/124498)
**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\ **Replies:** 6\ **Last updated:** [March 26, 2018, 8:51am UTC](https://discuss.elastic.co/t/courier-fetch-n-of-n-shards-failed-in-kibana/124498 "2018-03-26T08:51:16Z")
hi there. i run elk since 6 months ago. it is being stable. but these days i got this msg very often courier Fetch: 23 of 420 shards failed. could anybody explain on this msg? i have no idea how to fix. my scenar… --- ## [Logstash drop() combinations](https://discuss.elastic.co/t/logstash-drop-combinations/109423)
**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\ **Replies:** 6\ **Last updated:** [November 30, 2017, 2:04pm UTC](https://discuss.elastic.co/t/logstash-drop-combinations/109423 "2017-11-30T14:04:34Z")
Working with windows event logs, ML 'rare' function and trying to eliminate the 'fake rare' i.e. windows event logs that pop up and it's the same thing over and over again but with different random 'identifiers' in each… --- ## [Cant get proper "type" : "ip"](https://discuss.elastic.co/t/cant-get-proper-type-ip/44490)
**Author:** [@Blake\_Wolfson](https://discuss.elastic.co/u/Blake_Wolfson)\ **Replies:** 6\ **Last updated:** [March 16, 2016, 6:42pm UTC](https://discuss.elastic.co/t/cant-get-proper-type-ip/44490 "2016-03-16T18:42:04Z")
I've seen this around the internet, so I don't think I'm the only one having this issue. I send data from logstash -\> elk This is my config for logstash: if \[type\] == "paloalto" and \[SourceIP\] !~ "(^127.0.0.1)|… --- ## [Bulk indexing tips](https://discuss.elastic.co/t/bulk-indexing-tips/6136)
**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\ **Replies:** 6\ **Last updated:** [December 16, 2011, 10:01pm UTC](https://discuss.elastic.co/t/bulk-indexing-tips/6136 "2011-12-16T22:01:41Z")
Been experimenting with various settings to speed up bulk loading of 30 million medium sized documents to a 2 (for now) node cluster. The eventual goal is to periodically recreate the entire index to a new one, while … --- ## [Three nodes (not in cluster) - same storage](https://discuss.elastic.co/t/three-nodes-not-in-cluster-same-storage/26065)
**Author:** [@nkoleff](https://discuss.elastic.co/u/nkoleff)\ **Replies:** 7\ **Last updated:** [July 24, 2015, 11:26pm UTC](https://discuss.elastic.co/t/three-nodes-not-in-cluster-same-storage/26065 "2015-07-24T23:26:28Z")
Hello, I'm trying to understand something, which is still unclear to me. Check the design below I would like to know if it is possible a Loadbalancer to send requests to elastic node 1, which is a primary node and e… --- ## [Failed to start Elasticsearch on centos 7](https://discuss.elastic.co/t/failed-to-start-elasticsearch-on-centos-7/214158)
**Author:** [@steven.l](https://discuss.elastic.co/u/steven.l)\ **Replies:** 1\ **Last updated:** [January 8, 2020, 10:19am UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-on-centos-7/214158 "2020-01-08T10:19:09Z")
OS: Centos 7 My installation step of elasticsearch was following the command from the website (Install Elasticsearch with RPM | Elasticsearch Guide \[7.5\] | Elastic): \> wget https://artifacts.elastic.co/downloads/elast… --- ## [Fields not working in Syslog output](https://discuss.elastic.co/t/fields-not-working-in-syslog-output/211389)
**Author:** [@grimshad](https://discuss.elastic.co/u/grimshad)\ **Replies:** 5\ **Last updated:** [December 12, 2019, 7:52am UTC](https://discuss.elastic.co/t/fields-not-working-in-syslog-output/211389 "2019-12-12T07:52:09Z")
I'm attempting to convert netflow data from the netflow codec into syslog data using the syslog output plugin. The issue i'm having is that no matter what I set the syslog plugin "message" to, it only ever outputs the d… --- ## [Query on fieldname with wildcard?](https://discuss.elastic.co/t/query-on-fieldname-with-wildcard/157569)
**Author:** [@boeledi01](https://discuss.elastic.co/u/boeledi01)\ **Replies:** 3\ **Last updated:** [November 20, 2018, 2:59pm UTC](https://discuss.elastic.co/t/query-on-fieldname-with-wildcard/157569 "2018-11-20T14:59:26Z")
Hi, In order to support multi-lingual documents, we stored them with the suffix of the language code, such as: { "description\_EN": "My Description", "description\_FR": "Ma Description" } We do not know in advance, i… --- ## [Regexp query for url matching](https://discuss.elastic.co/t/regexp-query-for-url-matching/116770)
**Author:** [@BK1](https://discuss.elastic.co/u/BK1)\ **Replies:** 3\ **Last updated:** [January 26, 2018, 3:05pm UTC](https://discuss.elastic.co/t/regexp-query-for-url-matching/116770 "2018-01-26T15:05:04Z")
Hi there! I’ve trouble using the regexp query of elasticsearch. I want to identify records looking likes this: "parsed\_message": "GET https://server/different-endpoints/fix-endpoint/library.js?m=15f2fe2ddf0, Referrer=… --- ## [Elasticsearch.service: Main process exited, code=killed, status=9/KILL](https://discuss.elastic.co/t/elasticsearch-service-main-process-exited-code-killed-status-9-kill/304358)
**Author:** [@viththakan](https://discuss.elastic.co/u/viththakan)\ **Replies:** 2\ **Last updated:** [May 19, 2022, 3:59am UTC](https://discuss.elastic.co/t/elasticsearch-service-main-process-exited-code-killed-status-9-kill/304358 "2022-05-19T03:59:13Z")
Hi I havefirst installed Elasticsearch, logstash, kibana and filebeats in the same order. When I installed Elasticsearch and checked status It worked. Now it is showing the error like systemctl status elasticsearch.serv… --- ## [Limit Elasticsearch index size](https://discuss.elastic.co/t/limit-elasticsearch-index-size/67059)
**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\ **Replies:** 1\ **Last updated:** [November 24, 2016, 8:41am UTC](https://discuss.elastic.co/t/limit-elasticsearch-index-size/67059 "2016-11-24T08:41:56Z")
I have a data stream that have around 100 - 200 GB of data coming into my logstash. How do I configure logstash or elasticsearch so that the output indexes each has a maximum size of 20 GB? E.g. 200 GB = 10 (20 GB ind… --- ## [Elasticsearch enabling slow logs to all the indices in cluster at once?](https://discuss.elastic.co/t/elasticsearch-enabling-slow-logs-to-all-the-indices-in-cluster-at-once/76014)
**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Replies:** 1\ **Last updated:** [February 24, 2017, 5:54am UTC](https://discuss.elastic.co/t/elasticsearch-enabling-slow-logs-to-all-the-indices-in-cluster-at-once/76014 "2017-02-24T05:54:34Z")
ES 2.4.0 I know that we can enable slow log per-index level but i want to enabling for all the indices in my cluster at once. So i tried giving the setting for the whole cluster: PUT \_cluster/settings { "t… --- ## [How to split array without a target?](https://discuss.elastic.co/t/how-to-split-array-without-a-target/1590)
**Author:** [@aiden](https://discuss.elastic.co/u/aiden)\ **Replies:** 1\ **Last updated:** [June 4, 2015, 10:41pm UTC](https://discuss.elastic.co/t/how-to-split-array-without-a-target/1590 "2015-06-04T22:41:50Z")
Hi, I'm trying to split a JSON array into multiple events. Here's a sample input: {"results" : \[{"id": "a1", "name": "hello"}, {"id": "a2", "name": "logstash"}\]} Here's my filter and output config: filter { spli… --- ## [Failed to execute bulk item (update) BulkShardRequest](https://discuss.elastic.co/t/failed-to-execute-bulk-item-update-bulkshardrequest/242687)
**Author:** [@devinderpal](https://discuss.elastic.co/u/devinderpal)\ **Replies:** 3\ **Last updated:** [July 27, 2020, 7:20am UTC](https://discuss.elastic.co/t/failed-to-execute-bulk-item-update-bulkshardrequest/242687 "2020-07-27T07:20:04Z")
I am facing Live server problem on elastisearch. My RAM is 32 GB and Heap Memory is 8GB. But still i am facing the problem in elastisearch. Bellow are the logs // Error Log \[2020-07-26T20:15:05,456\]\[DEBUG\]\[o.e.a.b.Tra… --- ## [Does Kibana works only with elasticsearch?](https://discuss.elastic.co/t/does-kibana-works-only-with-elasticsearch/25866)
**Author:** [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)\ **Replies:** 3\ **Last updated:** [July 20, 2015, 8:45pm UTC](https://discuss.elastic.co/t/does-kibana-works-only-with-elasticsearch/25866 "2015-07-20T20:45:00Z")
are kibana and elasticsearch are meant to be together ?? Can we use kibana with some other search engine other than elasticsearch or is it meant to be only with elasticsearch? Need this information as soon as possible T… --- ## [Hardware snapshot best practice advice](https://discuss.elastic.co/t/hardware-snapshot-best-practice-advice/2301)
**Author:** [@gavinaiken](https://discuss.elastic.co/u/gavinaiken)\ **Replies:** 6\ **Last updated:** [May 30, 2016, 7:40am UTC](https://discuss.elastic.co/t/hardware-snapshot-best-practice-advice/2301 "2016-05-30T07:40:32Z")
I've read the Elasticsearch guide to using the built-in software snapshots, but I can't find any guidance on hardware snapshots in the docs or with a little googling. What I want to do is quiesce Elasticsearch so that … --- ## [Has anyone come up with a maintainable way to set index.number\_of\_replicas cluster wide?](https://discuss.elastic.co/t/has-anyone-come-up-with-a-maintainable-way-to-set-index-number-of-replicas-cluster-wide/341288)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 7\ **Last updated:** [September 7, 2023, 11:09pm UTC](https://discuss.elastic.co/t/has-anyone-come-up-with-a-maintainable-way-to-set-index-number-of-replicas-cluster-wide/341288 "2023-09-07T23:09:03Z")
Thanks to budget issues, I'm trying to slim down the footprint of my Elastic stack. While not ideal, running in single-node mode would make things easier to manage. But, as far as I can tell, Elastic Agent creates ever… --- ## [Unable to disable dynamic mapping](https://discuss.elastic.co/t/unable-to-disable-dynamic-mapping/41999)
**Author:** [@ronsher](https://discuss.elastic.co/u/ronsher)\ **Replies:** 7\ **Last updated:** [February 24, 2016, 11:07pm UTC](https://discuss.elastic.co/t/unable-to-disable-dynamic-mapping/41999 "2016-02-24T23:07:25Z")
I'm using version 1.7.4 We've set index.mapper.dynamic: false in the elasticsearch.yml I've noticed that new fields are automatically created (and added to the mapping) even though they are not part of the original m… --- ## [Delete a field matching a regex](https://discuss.elastic.co/t/delete-a-field-matching-a-regex/135541)
**Author:** [@GregoryB-T](https://discuss.elastic.co/u/GregoryB-T)\ **Replies:** 4\ **Last updated:** [June 13, 2018, 3:01pm UTC](https://discuss.elastic.co/t/delete-a-field-matching-a-regex/135541 "2018-06-13T15:01:50Z")
Hi is it possible to delete a field in all the document of an index if he match to a regex ? Thanks and Regards --- ## [Option for excluding fields in "all\_fields" mode query for ES 6.0](https://discuss.elastic.co/t/option-for-excluding-fields-in-all-fields-mode-query-for-es-6-0/93218)
**Author:** [@mos](https://discuss.elastic.co/u/mos)\ **Replies:** 4\ **Last updated:** [July 21, 2017, 9:53am UTC](https://discuss.elastic.co/t/option-for-excluding-fields-in-all-fields-mode-query-for-es-6-0/93218 "2017-07-21T09:53:50Z")
In ES 6.0 the indexed "\_all" field will be removed and Elastic is promoting the "all\_fields" query that does the same (at query- and not indexed time). Works fine for us, but there is one part missing: For the "\_all" … --- ## [How can i configure log4j to use AsyncAppender instead SocketAppender?](https://discuss.elastic.co/t/how-can-i-configure-log4j-to-use-asyncappender-instead-socketappender/89951)
**Author:** [@mvleandro](https://discuss.elastic.co/u/mvleandro)\ **Replies:** 4\ **Last updated:** [June 21, 2017, 2:35pm UTC](https://discuss.elastic.co/t/how-can-i-configure-log4j-to-use-asyncappender-instead-socketappender/89951 "2017-06-21T14:35:17Z")
Hi guys, I found this thread from 2015 https://discuss.elastic.co/t/elasticsearch-asyncappender-configuration/22213 and this another from 19d ago https://discuss.elastic.co/t/log4j2-asyncappender-in-elasticsearch-5-x/8… --- ## [Logstash SSL Error with http and https](https://discuss.elastic.co/t/logstash-ssl-error-with-http-and-https/214759)
**Author:** [@DawitCh](https://discuss.elastic.co/u/DawitCh)\ **Replies:** 2\ **Last updated:** [January 15, 2020, 8:08am UTC](https://discuss.elastic.co/t/logstash-ssl-error-with-http-and-https/214759 "2020-01-15T08:08:37Z")
\[ 2018-09-18T11:01:23,207\]\[ERROR\]\[logstash.licensechecker.licensemanager\] Unable to retrieve license information from license server {:message=\>"Explicit value for 'scheme' was declared, but it is different in one of the… --- ## [Visual Time Builder filter limitation](https://discuss.elastic.co/t/visual-time-builder-filter-limitation/98673)
**Author:** [@Alexandre\_Juma](https://discuss.elastic.co/u/Alexandre_Juma)\ **Replies:** 2\ **Last updated:** [August 29, 2017, 7:03pm UTC](https://discuss.elastic.co/t/visual-time-builder-filter-limitation/98673 "2017-08-29T19:03:03Z")
Hi all, I'm having a hard time achieving some simple stuff I normally do with Timelion. The use case is quite simple (i.e: % of distinct clients with specific condition): cardinality(field) metric (with applied filte… --- ## [Why is filebeat reading log files over and over again](https://discuss.elastic.co/t/why-is-filebeat-reading-log-files-over-and-over-again/224654)
**Author:** [@SjonnieW](https://discuss.elastic.co/u/SjonnieW)\ **Replies:** 6\ **Last updated:** [April 22, 2020, 6:37am UTC](https://discuss.elastic.co/t/why-is-filebeat-reading-log-files-over-and-over-again/224654 "2020-04-22T06:37:52Z")
Hello all I know this was posted before, only i never read a satifying answer\\solution. I was advised by my user succes manager to post the problem here Using a windows10 environment (also tried on Linux) I am using … --- ## [Not able to send data to remote host](https://discuss.elastic.co/t/not-able-to-send-data-to-remote-host/91731)
**Author:** [@Prateek\_Kshtriya](https://discuss.elastic.co/u/Prateek_Kshtriya)\ **Replies:** 5\ **Last updated:** [July 28, 2017, 9:17am UTC](https://discuss.elastic.co/t/not-able-to-send-data-to-remote-host/91731 "2017-07-28T09:17:54Z")
Hi All, I am not able to post data to elastic-search remote host . Please suggest if there is any specific configuration required to be done to post data from metric-beat to different Elastic-search host. Below error… --- ## [Logstash File Handler w/ Partially Read Files](https://discuss.elastic.co/t/logstash-file-handler-w-partially-read-files/40418)
**Author:** [@NikolaeVarius](https://discuss.elastic.co/u/NikolaeVarius)\ **Replies:** 5\ **Last updated:** [February 1, 2016, 8:13am UTC](https://discuss.elastic.co/t/logstash-file-handler-w-partially-read-files/40418 "2016-02-01T08:13:48Z")
I'm trying to figure out an official answer as to how filebeat handles this hypothetical scenario, because I can't seem to find an answer in the documentation. Presume we have an hourly log that filebeat reads and send… --- ## [Ingest pipeline : Getting lookup values from another index](https://discuss.elastic.co/t/ingest-pipeline-getting-lookup-values-from-another-index/164731)
**Author:** [@hammadarif](https://discuss.elastic.co/u/hammadarif)\ **Replies:** 1\ **Last updated:** [January 18, 2019, 6:16am UTC](https://discuss.elastic.co/t/ingest-pipeline-getting-lookup-values-from-another-index/164731 "2019-01-18T06:16:57Z")
Main main index (say, countries) has a field CountryId, At the time of indexing I would to grab details about this country from another index (say, population-data) and store in the main index. So if i PUT countries/\_… --- ## [Error when trying to install fleet server (self-managed)](https://discuss.elastic.co/t/error-when-trying-to-install-fleet-server-self-managed/281370)
**Author:** [@Dovan](https://discuss.elastic.co/u/Dovan)\ **Replies:** 2\ **Last updated:** [August 26, 2021, 6:58pm UTC](https://discuss.elastic.co/t/error-when-trying-to-install-fleet-server-self-managed/281370 "2021-08-26T18:58:28Z")
I'm having this error when trying to install the fleet server on a machine, I didn't find anything about the forums and troubleshooting guide, could someone help me? error: 'missing enrolllment api key' root@xxxx:/hom… --- ## [Can not access array with objects in painless](https://discuss.elastic.co/t/can-not-access-array-with-objects-in-painless/198226)
**Author:** [@sailxjx](https://discuss.elastic.co/u/sailxjx)\ **Replies:** 1\ **Last updated:** [September 13, 2019, 6:18pm UTC](https://discuss.elastic.co/t/can-not-access-array-with-objects-in-painless/198226 "2019-09-13T18:18:15Z")
I indexed some documents with the following structure: { "id" : "5d528eb2585e760011d88f84", "visits" : \[ { "visitCount" : 2, "recentlyVisitTime" : 156652428371… --- ## [RestHighLevel Client : Failed to connect to localhost port 9200: Connection refused](https://discuss.elastic.co/t/resthighlevel-client-failed-to-connect-to-localhost-port-9200-connection-refused/230310)
**Author:** [@Amit\_Porwal](https://discuss.elastic.co/u/Amit_Porwal)\ **Replies:** 4\ **Last updated:** [April 30, 2020, 6:58am UTC](https://discuss.elastic.co/t/resthighlevel-client-failed-to-connect-to-localhost-port-9200-connection-refused/230310 "2020-04-30T06:58:00Z")
Learning ELK stack.I had spent ample of time on it, haven't find any solution yet.Any help would be greatly appreciated. I just referred to this article to create this basic demo. https://www.journaldev.com/18148/spri… --- ## [Autorefresh](https://discuss.elastic.co/t/autorefresh/141833)
**Author:** [@logesh\_j](https://discuss.elastic.co/u/logesh_j)\ **Replies:** 4\ **Last updated:** [July 30, 2018, 2:42am UTC](https://discuss.elastic.co/t/autorefresh/141833 "2018-07-30T02:42:21Z")
How does the auto refresh works ? Let say i have the time-picker as Today. And if the data into elastic search updated on 30 mins interval. Will the Kibana dashboard get updated with the latest data or it is mandatory t… --- ## [Multiple filebeat to logstash](https://discuss.elastic.co/t/multiple-filebeat-to-logstash/104251)
**Author:** [@MLdz](https://discuss.elastic.co/u/MLdz)\ **Replies:** 4\ **Last updated:** [October 18, 2017, 12:36pm UTC](https://discuss.elastic.co/t/multiple-filebeat-to-logstash/104251 "2017-10-18T12:36:26Z")
Hello, i want to connect two filebeat (which are on two differents remote machine) to Logstash. i did the configuration on the filebeat.yml with the host of the ELK server. The problem: in Kibana , i dont see the log … --- ## [Facing Bulk queue rejection on index requests](https://discuss.elastic.co/t/facing-bulk-queue-rejection-on-index-requests/95426)
**Author:** [@darthburrito](https://discuss.elastic.co/u/darthburrito)\ **Replies:** 4\ **Last updated:** [August 10, 2017, 6:37pm UTC](https://discuss.elastic.co/t/facing-bulk-queue-rejection-on-index-requests/95426 "2017-08-10T18:37:17Z")
Hi All, Stack trace Error: \[es\_rejected\_execution\_exception\] rejected execution of org.elasticsearch.transport.TransportService$7@1b3a4fac on EsThreadPoolExecutor\[bulk, queue capacity = 1000, org.elasticsearch.common.ut… --- ## [AD auth doesn't work after upgrading from 6.7 to 7.0](https://discuss.elastic.co/t/ad-auth-doesnt-work-after-upgrading-from-6-7-to-7-0/178298)
**Author:** [@Kult](https://discuss.elastic.co/u/Kult)\ **Replies:** 8\ **Last updated:** [April 25, 2019, 4:01pm UTC](https://discuss.elastic.co/t/ad-auth-doesnt-work-after-upgrading-from-6-7-to-7-0/178298 "2019-04-25T16:01:54Z")
Hi, This is the xpack config that I had in 6.7, which worked perfectly fine for AD authentication: xpack: security: enabled: true transport: ssl: enabled: true authc: realms: a… --- ## [How Can I parse why I got the error tag : \_grokparsefailure](https://discuss.elastic.co/t/how-can-i-parse-why-i-got-the-error-tag--grokparsefailure/29610)
**Author:** [@jianfeng\_ye](https://discuss.elastic.co/u/jianfeng_ye)\ **Replies:** 3\ **Last updated:** [May 3, 2016, 11:07am UTC](https://discuss.elastic.co/t/how-can-i-parse-why-i-got-the-error-tag--grokparsefailure/29610 "2016-05-03T11:07:25Z")
I know that my be my grok error, but when I try my grok in this website: http://grokconstructor.appspot.com/do/match#result it return ok. my grok pattern is: %{WORD:http\_host} %{URIHOST:api\_domain} %{IP:inner\_ip} … --- ## [Logstash JDBC input: Encrypted username and password](https://discuss.elastic.co/t/logstash-jdbc-input-encrypted-username-and-password/142538)
**Author:** [@Goyal.vikas87](https://discuss.elastic.co/u/Goyal.vikas87)\ **Replies:** 2\ **Last updated:** [August 2, 2018, 9:43am UTC](https://discuss.elastic.co/t/logstash-jdbc-input-encrypted-username-and-password/142538 "2018-08-02T09:43:56Z")
Please help how I can use encrypted username and password in logstash config files rather than hard coding in input section. Is there any way that I can read the parameters from an external file. --- ## [Outputting service.name instead of / alongside context.service.name](https://discuss.elastic.co/t/outputting-service-name-instead-of-alongside-context-service-name/169088)
**Author:** [@rozling](https://discuss.elastic.co/u/rozling)\ **Replies:** 5\ **Last updated:** [February 26, 2019, 12:19pm UTC](https://discuss.elastic.co/t/outputting-service-name-instead-of-alongside-context-service-name/169088 "2019-02-26T12:19:59Z")
My question also relates to upcoming schema / mapping changes but I didn't want to hijack the other thread from today, and I think my question might be a bit simpler for now. I am currently creating service dashboards, … --- ## [Transport client and coordinating nodes](https://discuss.elastic.co/t/transport-client-and-coordinating-nodes/89123)
**Author:** [@samdash](https://discuss.elastic.co/u/samdash)\ **Replies:** 5\ **Last updated:** [June 14, 2017, 4:00pm UTC](https://discuss.elastic.co/t/transport-client-and-coordinating-nodes/89123 "2017-06-14T16:00:37Z")
I am currently using Transport client ( java) , and I have 3 node setup with master and date = true. and in my java client i am adding all 3 nodes using addTransportAddress My first question is do i need to add all the… --- ## [Scripted field to get percentage](https://discuss.elastic.co/t/scripted-field-to-get-percentage/137071)
**Author:** [@sunny1](https://discuss.elastic.co/u/sunny1)\ **Replies:** 6\ **Last updated:** [June 22, 2018, 10:07pm UTC](https://discuss.elastic.co/t/scripted-field-to-get-percentage/137071 "2018-06-22T22:07:56Z")
Hello Team, I am new to scripted field and facing issue in creating one. I have field called status which has multiple values like "pass", "fail", and few more. I want to create a scripted field to get pass percentage o… --- ## [Kibana/Elastic user restricted to specific index](https://discuss.elastic.co/t/kibana-elastic-user-restricted-to-specific-index/83567)
**Author:** [@groyee](https://discuss.elastic.co/u/groyee)\ **Replies:** 3\ **Last updated:** [April 25, 2017, 2:46pm UTC](https://discuss.elastic.co/t/kibana-elastic-user-restricted-to-specific-index/83567 "2017-04-25T14:46:23Z")
Hi, Is it possible to create a kibana/elastic user limited to a specific index? I would like that this user will be able to perform all readonly operations on a specific index. He must not see any other indices in th… --- ## [Does ECE have user audit trail](https://discuss.elastic.co/t/does-ece-have-user-audit-trail/204435)
**Author:** [@robrotheram](https://discuss.elastic.co/u/robrotheram)\ **Replies:** 7\ **Last updated:** [October 22, 2019, 12:46pm UTC](https://discuss.elastic.co/t/does-ece-have-user-audit-trail/204435 "2019-10-22T12:46:33Z")
Hello, I am experimenting with ECE and I trying to see if the admin console stores a audit trail of user actions. I can see the activity field but there is no user attribute. What I am looking for is something like "Use… --- ## [LS 5.2: how to set different java for logstash process, installed by system-install?](https://discuss.elastic.co/t/ls-5-2-how-to-set-different-java-for-logstash-process-installed-by-system-install/76179)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [February 23, 2017, 5:50pm UTC](https://discuss.elastic.co/t/ls-5-2-how-to-set-different-java-for-logstash-process-installed-by-system-install/76179 "2017-02-23T17:50:47Z")
Hi, I am installing logstash from the tar. To install it as service I use the script $LS\_HOME/bin/system-install I changed the service name on $LS\_HOME/config/startup.options, which works fine. Additionally I would l… --- ## [Display percentage on line/area graph](https://discuss.elastic.co/t/display-percentage-on-line-area-graph/42540)
**Author:** [@DavidL](https://discuss.elastic.co/u/DavidL)\ **Replies:** 1\ **Last updated:** [February 24, 2016, 2:48pm UTC](https://discuss.elastic.co/t/display-percentage-on-line-area-graph/42540 "2016-02-24T14:48:39Z")
Hello: Thanks for helping me out. I am trying to display percentage on my visualization over time. Specifically, I want a percentage calculated by (count of hits by one filter)/ (count of hits by another filter), and … --- ## [Elastic not creating fields](https://discuss.elastic.co/t/elastic-not-creating-fields/101085)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 8\ **Last updated:** [October 10, 2017, 6:16am UTC](https://discuss.elastic.co/t/elastic-not-creating-fields/101085 "2017-10-10T06:16:48Z")
Hello, I'm having a problem I can't figure out at all. I'm using a KV filter in logstash to separate Firwall log files. Tests using stdout result in logs being parsed as expected. However, when I change the output to e… --- ## [NullPointerException when getting list of snapshots on S3](https://discuss.elastic.co/t/nullpointerexception-when-getting-list-of-snapshots-on-s3/94458)
**Author:** [@eirc](https://discuss.elastic.co/u/eirc)\ **Replies:** 8\ **Last updated:** [July 25, 2017, 2:10pm UTC](https://discuss.elastic.co/t/nullpointerexception-when-getting-list-of-snapshots-on-s3/94458 "2017-07-25T14:10:25Z")
Hello, I'm using the repository-s3 plugin and after using it for some months I now cannot get the list of snapshots: curl elasticsearch:9200/\_snapshot/long\_term/\_all {"error":{"root\_cause":\[{"type":"remote\_transport\_… --- ## [Slack configure URL with parameters](https://discuss.elastic.co/t/slack-configure-url-with-parameters/175680)
**Author:** [@krlos](https://discuss.elastic.co/u/krlos)\ **Replies:** 0\ **Last updated:** [April 6, 2019, 5:08pm UTC](https://discuss.elastic.co/t/slack-configure-url-with-parameters/175680 "2019-04-06T17:08:45Z")
Hello! i'm trying to configure elasticsearch for send to slack channel: my url is like: https://someslackurl.slack.com/slack\_webhook/services/XXXXXXXX/XXXXXXXX/Xxxxxxxx?authentication=8dOnF9XxXYyzZ as you can see i… --- ## [Logstash to haddop](https://discuss.elastic.co/t/logstash-to-haddop/48332)
**Author:** [@Lavanya\_Anne](https://discuss.elastic.co/u/Lavanya_Anne)\ **Replies:** 0\ **Last updated:** [April 25, 2016, 2:27pm UTC](https://discuss.elastic.co/t/logstash-to-haddop/48332 "2016-04-25T14:27:14Z")
1.can beats send data to hadoop? 2. can logstash send data to hadoop?(for this i tried webhdfs) but i am getting the following error. Failed to flush outgoing items {:outgoing\_count=\>1, :exception=\>"WebHDFS::ServerEr… --- ## [Filebeat docker help with creating the container](https://discuss.elastic.co/t/filebeat-docker-help-with-creating-the-container/219760)
**Author:** [@zebulyon](https://discuss.elastic.co/u/zebulyon)\ **Replies:** 5\ **Last updated:** [February 23, 2020, 5:20pm UTC](https://discuss.elastic.co/t/filebeat-docker-help-with-creating-the-container/219760 "2020-02-23T17:20:35Z")
Hello, complete beginner with the ELK-stack here so this might be really trivial. I'm using the docker image docker.elastic.co/beats/filebeat:7.6.0 as well as the other corresponding images of the ELK-stack all of versi… --- ## [Filebeatのログのwarning出力について](https://discuss.elastic.co/t/filebeat-warning/208683)
**Author:** [@Negi700](https://discuss.elastic.co/u/Negi700)\ **Replies:** 4\ **Last updated:** [November 21, 2019, 2:51am UTC](https://discuss.elastic.co/t/filebeat-warning/208683 "2019-11-21T02:51:17Z")
filebeatログから、下記のWARNの出力を止めたいです。 filebeatとlogstashの設定で不足等が、あるのでしょうか？ 公式ドキュメントを確認したのですが、原因が不明でした。 可能でしたら、ご教示をお願いします。 ■filebeatのログ出力 2019-11-20T11:11:16.230Z WARN beater/filebeat.go:368 Filebeat is unable to load the I… [Previous page](https://discuss.elastic.co/top.md?page=706&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=708&per_page=50&period=all)