# Top

**URL:** https://discuss.elastic.co/top.md?page=75&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 76

---

## [Wildcard queries and custom templates](https://discuss.elastic.co/t/wildcard-queries-and-custom-templates/65820)

<div class="topic-metadata">

**Author:** [@trondhindenes](https://discuss.elastic.co/u/trondhindenes)\
**Replies:** 11\
**Last updated:** [November 14, 2016, 8:27am UTC](https://discuss.elastic.co/t/wildcard-queries-and-custom-templates/65820 "2016-11-14T08:27:31Z")

</div>

hi, We're in the process of moving from the logstash builtin template to our own in order to have more control of our fields and data types. I'm seeing some problems with wildcard searches using our new index that I'd ve…

---

## [Hadoop jar elasticsearch-yarn-2.1.1.jar -start throws ArithmeticException: / by zero](https://discuss.elastic.co/t/hadoop-jar-elasticsearch-yarn-2-1-1-jar-start-throws-arithmeticexception-by-zero/33300)

<div class="topic-metadata">

**Author:** [@ralphlevan](https://discuss.elastic.co/u/ralphlevan)\
**Replies:** 14\
**Last updated:** [January 18, 2016, 5:44pm UTC](https://discuss.elastic.co/t/hadoop-jar-elasticsearch-yarn-2-1-1-jar-start-throws-arithmeticexception-by-zero/33300 "2016-01-18T17:44:16Z")

</div>

I'm trying to install version 1.6.0 on a Cloudera Hadoop. The download and install seem to have gone correctly. hadoop jar elasticsearch-yarn-2.1.1.jar -download-es hadoop jar elasticsearch-yarn-2.1.1.jar -install But,…

---

## [Elastic-agent with system module does not send any data to elasticsearch](https://discuss.elastic.co/t/elastic-agent-with-system-module-does-not-send-any-data-to-elasticsearch/319689)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 24\
**Last updated:** [November 24, 2022, 8:38pm UTC](https://discuss.elastic.co/t/elastic-agent-with-system-module-does-not-send-any-data-to-elasticsearch/319689 "2022-11-24T20:38:20Z")

</div>

Hello, I have deployed a simple elastic-agent with a system system module where I wanted to have the /var/log/syslog ad messages parsed and send metrics (pretty default). But the module does not send any data into the e…

---

## [Date query does not work](https://discuss.elastic.co/t/date-query-does-not-work/71828)

<div class="topic-metadata">

**Author:** [@Peter\_Andersson](https://discuss.elastic.co/u/Peter_Andersson)\
**Replies:** 11\
**Last updated:** [January 18, 2017, 10:25am UTC](https://discuss.elastic.co/t/date-query-does-not-work/71828 "2017-01-18T10:25:27Z")

</div>

Hi i have the following query not not @timestamp: \[now/d+1h now/d+2h\] but it does not seem to work? what am i missing? (im trying to exclude a specific timespan from the query)

---

## [Sending email on some event](https://discuss.elastic.co/t/sending-email-on-some-event/40540)

<div class="topic-metadata">

**Author:** [@abinay](https://discuss.elastic.co/u/abinay)\
**Replies:** 10\
**Last updated:** [February 2, 2016, 8:23pm UTC](https://discuss.elastic.co/t/sending-email-on-some-event/40540 "2016-02-02T20:23:04Z")

</div>

Hii I am using logstash . I want to send an email on receiving a error log . This is my config - if \[loglevel\] == "local.ERROR" or \[loglevel\] == "staging.ERROR" { email { from =\>…

---

## [Use curl for PKI realm authentication](https://discuss.elastic.co/t/use-curl-for-pki-realm-authentication/165834)

<div class="topic-metadata">

**Author:** [@li\_jessen2016](https://discuss.elastic.co/u/li_jessen2016)\
**Replies:** 12\
**Last updated:** [January 31, 2019, 7:20am UTC](https://discuss.elastic.co/t/use-curl-for-pki-realm-authentication/165834 "2019-01-31T07:20:52Z")

</div>

Is it possible to use curl - for client PKI realm authentication? I know that we can fulfill file realm authentication by using curl -u username:password ... . But how to present client x509 certificate for PKI realm aut…

---

## [Watcher Configuration to print results in Email](https://discuss.elastic.co/t/watcher-configuration-to-print-results-in-email/136410)

<div class="topic-metadata">

**Author:** [@sanky186](https://discuss.elastic.co/u/sanky186)\
**Replies:** 12\
**Last updated:** [June 27, 2018, 3:33pm UTC](https://discuss.elastic.co/t/watcher-configuration-to-print-results-in-email/136410 "2018-06-27T15:33:51Z")

</div>

Guys, I have looked all over the internet, and i cant seem to get a simple answer at all. So, we have an watcher configuration which triggers an email when a particular condition is satisfied. But, it prints only the …

---

## [Elastic Agent ca\_trusted\_fingerprint does not working, but the certificate works](https://discuss.elastic.co/t/elastic-agent-ca-trusted-fingerprint-does-not-working-but-the-certificate-works/362239)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 9\
**Last updated:** [June 30, 2024, 12:53am UTC](https://discuss.elastic.co/t/elastic-agent-ca-trusted-fingerprint-does-not-working-but-the-certificate-works/362239 "2024-06-30T00:53:04Z")

</div>

Hello, I've built a simple docker compose that will spin up a single node cluster with Elasticsearch, Kibana and a Fleet server and I'm facing an issue where the ca\_trusted\_fingerprint is not working as expected. The c…

---

## [AVAYA CDR analyses with ELK](https://discuss.elastic.co/t/avaya-cdr-analyses-with-elk/29374)

<div class="topic-metadata">

**Author:** [@Karl\_Trasschaert](https://discuss.elastic.co/u/Karl_Trasschaert)\
**Replies:** 9\
**Last updated:** [September 17, 2015, 2:01pm UTC](https://discuss.elastic.co/t/avaya-cdr-analyses-with-elk/29374 "2015-09-17T14:01:22Z")

</div>

Hi, I've setup log stash to receive CDR from a avaya pabx. Iv'e used the filter bellow: filter { if \[type\] == "cdr" { csv { separator =\> "," columns =\> \[ "call Start", "Connected Time…

---

## [Index Health often red](https://discuss.elastic.co/t/index-health-often-red/294367)

<div class="topic-metadata">

**Author:** [@it-dept](https://discuss.elastic.co/u/it-dept)\
**Replies:** 10\
**Last updated:** [January 31, 2022, 10:24am UTC](https://discuss.elastic.co/t/index-health-often-red/294367 "2022-01-31T10:24:17Z")

</div>

Good day. We have Elasticsearch version 7.13.3 on separated server, not a cluster. And often one of the indexes turns red. We are deleting it. But after a while it turns red again. May be there is a solution to how to …

---

## [Error : "tags" =\> \[ \[0\] "\_grokparsefailure" \]..Grok filter error](https://discuss.elastic.co/t/error-tags-0-grokparsefailure-grok-filter-error/195384)

<div class="topic-metadata">

**Author:** [@naveenrt23](https://discuss.elastic.co/u/naveenrt23)\
**Replies:** 21\
**Last updated:** [August 21, 2019, 5:16pm UTC](https://discuss.elastic.co/t/error-tags-0-grokparsefailure-grok-filter-error/195384 "2019-08-21T17:16:21Z")

</div>

Hello, I am using grok filters for parsing messages and I can see parsing failures but can't figure out what's causing the issue. Grok Filter: filter { # Create a copy of original message mutate { …

---

## [Reporting Error in Kibana: Spawning Chromium Browser in Docker, Kibana 8](https://discuss.elastic.co/t/reporting-error-in-kibana-spawning-chromium-browser-in-docker-kibana-8/300574)

<div class="topic-metadata">

**Author:** [@Kirubanandhan](https://discuss.elastic.co/u/Kirubanandhan)\
**Replies:** 12\
**Last updated:** [April 1, 2022, 7:10pm UTC](https://discuss.elastic.co/t/reporting-error-in-kibana-spawning-chromium-browser-in-docker-kibana-8/300574 "2022-04-01T19:10:40Z")

</div>

I am having issue in Report generation in Kibana v8. I am running in Docker. Getting like Chromium headless Browser error. After that i had ran Diagnostics. It shows the error that i need to disable sandbox. That also m…

---

## [SIEM doesn't show any Winlogbeat events, despite ES receiving them](https://discuss.elastic.co/t/siem-doesnt-show-any-winlogbeat-events-despite-es-receiving-them/224008)

<div class="topic-metadata">

**Author:** [@Aura](https://discuss.elastic.co/u/Aura)\
**Replies:** 11\
**Last updated:** [April 10, 2020, 8:38pm UTC](https://discuss.elastic.co/t/siem-doesnt-show-any-winlogbeat-events-despite-es-receiving-them/224008 "2020-04-10T20:38:13Z")

</div>

Hi, New ELK stack user here. I just installed v7.6.1 on a Ubuntu Server 18.04 that I have running on an old Lenovo I had lying around. Took me a couple of hours to install, set up, and get working. One issue I can't see…

---

## [Xml filtering subfields](https://discuss.elastic.co/t/xml-filtering-subfields/177436)

<div class="topic-metadata">

**Author:** [@nane96](https://discuss.elastic.co/u/nane96)\
**Replies:** 20\
**Last updated:** [May 15, 2019, 10:39pm UTC](https://discuss.elastic.co/t/xml-filtering-subfields/177436 "2019-05-15T22:39:58Z")

</div>

Hey! I'm a complete beginner to everything elasticsearch/logstash/kibana related, so please have mercy. I have a xml-File with many Eventlogs that is (simplified) structured like this: \<xmldata\> \<Event\> …

---

## [Snapshot to AWS S3 fails ES 1.5.2 AWS cloud plugin 2.5.1](https://discuss.elastic.co/t/snapshot-to-aws-s3-fails-es-1-5-2-aws-cloud-plugin-2-5-1/49541)

<div class="topic-metadata">

**Author:** [@itaiy](https://discuss.elastic.co/u/itaiy)\
**Replies:** 16\
**Last updated:** [October 12, 2016, 12:54pm UTC](https://discuss.elastic.co/t/snapshot-to-aws-s3-fails-es-1-5-2-aws-cloud-plugin-2-5-1/49541 "2016-10-12T12:54:54Z")

</div>

Hey, I'm running daily backups of my ES cluster (using AWS Data Pipeline). Every now and then, my backup fails due to AmazonS3Exception status code 500 (see below). When it fails, my scheduler (i.e Data Pipeline) automat…

---

## [Elasticsearch with Helm Charts (Caused by: java.nio.file.AccessDeniedException: /usr/share/elasticsearch/data/nodes)](https://discuss.elastic.co/t/elasticsearch-with-helm-charts-caused-by-java-nio-file-accessdeniedexception-usr-share-elasticsearch-data-nodes/174297)

<div class="topic-metadata">

**Author:** [@bishwajitsamanta1689](https://discuss.elastic.co/u/bishwajitsamanta1689)\
**Replies:** 11\
**Last updated:** [April 15, 2019, 6:57am UTC](https://discuss.elastic.co/t/elasticsearch-with-helm-charts-caused-by-java-nio-file-accessdeniedexception-usr-share-elasticsearch-data-nodes/174297 "2019-04-15T06:57:07Z")

</div>

I am unable to create Elasticsearch by Helm charts. Need some guidance. I am a layman so please explain me in details if possible. root@kubemaster:~/kube\_dir/elasticsearch# kubectl get pvc NAME …

---

## [Can't figure out how to get Logstash to talk to Elastic Cloud](https://discuss.elastic.co/t/cant-figure-out-how-to-get-logstash-to-talk-to-elastic-cloud/118942)

<div class="topic-metadata">

**Author:** [@Josh\_A](https://discuss.elastic.co/u/Josh_A)\
**Replies:** 11\
**Last updated:** [February 8, 2018, 1:55pm UTC](https://discuss.elastic.co/t/cant-figure-out-how-to-get-logstash-to-talk-to-elastic-cloud/118942 "2018-02-08T13:55:27Z")

</div>

Hi there... I'm trying to run Logstash on Ubuntu 16.04 and ship some syslog data to Elastic Cloud. Here's my /etc/logstash/conf.d/logstash.conf file... input { udp { host =\> "172.31.27.139" port =\> 10514 …

---

## [Highlight field type object or custom highlight](https://discuss.elastic.co/t/highlight-field-type-object-or-custom-highlight/51793)

<div class="topic-metadata">

**Author:** [@2111002778](https://discuss.elastic.co/u/2111002778)\
**Replies:** 11\
**Last updated:** [June 21, 2016, 4:32am UTC](https://discuss.elastic.co/t/highlight-field-type-object-or-custom-highlight/51793 "2016-06-21T04:32:30Z")

</div>

Hi all, Sorry for my bad English I have a problem with hightlight query search. $params\['body'\]\[\] = \[ 'index' =\> \[ '\_index' =\> 'my\_index', '\_type' =\> 'my\_type', \] \]; $param…

---

## [Why does a kibana lens pretend my fields have no data, when they clearly do?](https://discuss.elastic.co/t/why-does-a-kibana-lens-pretend-my-fields-have-no-data-when-they-clearly-do/300506)

<div class="topic-metadata">

**Author:** [@gcanyon](https://discuss.elastic.co/u/gcanyon)\
**Replies:** 9\
**Last updated:** [March 24, 2022, 10:43am UTC](https://discuss.elastic.co/t/why-does-a-kibana-lens-pretend-my-fields-have-no-data-when-they-clearly-do/300506 "2022-03-24T10:43:11Z")

</div>

I click on kibana I click on visualize I click on Create visualization I click on Lens The left column, under "Individual fields" says: "Looks like you don't have any data. Try extending the time range" I see that I am …

---

## [MSSQL datetime column parsing good format mapping and good date filter?](https://discuss.elastic.co/t/mssql-datetime-column-parsing-good-format-mapping-and-good-date-filter/70946)

<div class="topic-metadata">

**Author:** [@Lemec\_Cinq](https://discuss.elastic.co/u/Lemec_Cinq)\
**Replies:** 13\
**Last updated:** [January 19, 2017, 6:38am UTC](https://discuss.elastic.co/t/mssql-datetime-column-parsing-good-format-mapping-and-good-date-filter/70946 "2017-01-19T06:38:24Z")

</div>

I am importing a MS SQL table with a datetime column. It makes stored values of this type: 2008-02-18 00:00:00.000 2009-04-28 00:00:00.000 2000-05-03 00:00:00.000 ... by default jdbc input plugin does not detect thi…

---

## [Not able to see latest logs in discover in kibana](https://discuss.elastic.co/t/not-able-to-see-latest-logs-in-discover-in-kibana/257688)

<div class="topic-metadata">

**Author:** [@prat](https://discuss.elastic.co/u/prat)\
**Replies:** 10\
**Last updated:** [December 8, 2020, 5:23pm UTC](https://discuss.elastic.co/t/not-able-to-see-latest-logs-in-discover-in-kibana/257688 "2020-12-08T17:23:20Z")

</div>

Hi Team, I am not able to see latest logs in discover tab in kibana. the last logs I can see is of 1 Dec 2020 but not after that. I can see folders getting created till today in /opt/elasticsearch/nodes/0/indices/, the…

---

## [Unknown setting 'definitions' for netflow!](https://discuss.elastic.co/t/unknown-setting-definitions-for-netflow/54120)

<div class="topic-metadata">

**Author:** [@bzaki](https://discuss.elastic.co/u/bzaki)\
**Replies:** 11\
**Last updated:** [June 29, 2016, 10:43am UTC](https://discuss.elastic.co/t/unknown-setting-definitions-for-netflow/54120 "2016-06-29T10:43:04Z")

</div>

Hello, I'm trying to use ELK to collect netflows. I'm using logstash 2.3.3 . But when I use the configuration option 'definitions' I get the error "Unknown setting 'definitions' for netflow". Here's my config file belo…

---

## [Package Creation Errors](https://discuss.elastic.co/t/package-creation-errors/87831)

<div class="topic-metadata">

**Author:** [@FareehaNaaz](https://discuss.elastic.co/u/FareehaNaaz)\
**Replies:** 11\
**Last updated:** [June 6, 2017, 6:17am UTC](https://discuss.elastic.co/t/package-creation-errors/87831 "2017-06-06T06:17:17Z")

</div>

Hi! iwas trying to create kibana rpm package "npm run build -- --rpm", and went ran into this issue. Fatal error: Path must be a string. Received true npm ERR! code ELIFECYCLE npm ERR! errno 1 npm ERR! kibana@6.0.0-alp…

---

## [Boost based on field value](https://discuss.elastic.co/t/boost-based-on-field-value/4205)

<div class="topic-metadata">

**Author:** [@Enrique\_Medina\_Monte](https://discuss.elastic.co/u/Enrique_Medina_Monte)\
**Replies:** 10\
**Last updated:** [April 11, 2011, 2:46pm UTC](https://discuss.elastic.co/t/boost-based-on-field-value/4205 "2011-04-11T14:46:30Z")

</div>

Hi, I was wondering whether it's possible to boost a field based on its value. Let me explain my scenario. At my website, we're indexing products from different shops, but the book shops are the ones with most pr…

---

## [Logstash CSV ingest 5.2.1 "Attempting to install template" still broken](https://discuss.elastic.co/t/logstash-csv-ingest-5-2-1-attempting-to-install-template-still-broken/77341)

<div class="topic-metadata">

**Author:** [@GregMeadows](https://discuss.elastic.co/u/GregMeadows)\
**Replies:** 9\
**Last updated:** [March 9, 2017, 5:45pm UTC](https://discuss.elastic.co/t/logstash-csv-ingest-5-2-1-attempting-to-install-template-still-broken/77341 "2017-03-09T17:45:33Z")

</div>

Spend days in this forum before posting. I have large csv file/conf file with mappings from previous ELK VM (no longer running) which worked great - alpha 5x. File permissions allow read/write to all ELK directories. Thi…

---

## [Kibana is not working, properly, it is very slow](https://discuss.elastic.co/t/kibana-is-not-working-properly-it-is-very-slow/238797)

<div class="topic-metadata">

**Author:** [@Sagar\_jain](https://discuss.elastic.co/u/Sagar_jain)\
**Replies:** 9\
**Last updated:** [June 26, 2020, 7:45am UTC](https://discuss.elastic.co/t/kibana-is-not-working-properly-it-is-very-slow/238797 "2020-06-26T07:45:51Z")

</div>

kibana is not working, properly, it is very slow Is there any cache stored, which makes it slow?

---

## [Elastic search snopshot azure repoistory](https://discuss.elastic.co/t/elastic-search-snopshot-azure-repoistory/182225)

<div class="topic-metadata">

**Author:** [@tamil6593](https://discuss.elastic.co/u/tamil6593)\
**Replies:** 21\
**Last updated:** [May 24, 2019, 8:16am UTC](https://discuss.elastic.co/t/elastic-search-snopshot-azure-repoistory/182225 "2019-05-24T08:16:30Z")

</div>

i need to save the elastic search snapshot in azure blobs container. how to config the elastic search and azure repository? i already installed azure repository plug in elastic Search.but not its show settings\_exceptio…

---

## [Aggregate?](https://discuss.elastic.co/t/aggregate/47486)

<div class="topic-metadata">

**Author:** [@Rubytor](https://discuss.elastic.co/u/Rubytor)\
**Replies:** 10\
**Last updated:** [April 24, 2016, 9:12pm UTC](https://discuss.elastic.co/t/aggregate/47486 "2016-04-24T21:12:48Z")

</div>

What is the best solution for one of the basic requirements in log's analisis. "CALCULATE DURATION" The problem is to calculate the duration between 2 events. For example: Logs lines: 15-04-2016T10:00:00:000+UTC 1…

---

## [Postgresql Module in Filebeat Not Getting Start](https://discuss.elastic.co/t/postgresql-module-in-filebeat-not-getting-start/114693)

<div class="topic-metadata">

**Author:** [@manya12](https://discuss.elastic.co/u/manya12)\
**Replies:** 14\
**Last updated:** [January 19, 2018, 3:49pm UTC](https://discuss.elastic.co/t/postgresql-module-in-filebeat-not-getting-start/114693 "2018-01-19T15:49:55Z")

</div>

Hi Team, I am trying to integrate postgresql logs in Kibana using postgres module. Here is my filebeat.yml ######################## Filebeat Configuration ############################ #========================== Modu…

---

## [How to Increase Indexing rate](https://discuss.elastic.co/t/how-to-increase-indexing-rate/37237)

<div class="topic-metadata">

**Author:** [@mvenkat\_in](https://discuss.elastic.co/u/mvenkat_in)\
**Replies:** 9\
**Last updated:** [December 17, 2015, 2:30am UTC](https://discuss.elastic.co/t/how-to-increase-indexing-rate/37237 "2015-12-17T02:30:24Z")

</div>

Stack: Logstash 2.1 --\> Elastic Search 2.1 --\> Kibana 4.3.0 Logstash Input: File Server Spec: RHEL, 8 Core, 16 GB RAM Indexing Rate: 1 Cluster - 1 Node --\> Approx 2500 to 3000 /Sec …

---

## [Logstash mirror output](https://discuss.elastic.co/t/logstash-mirror-output/84982)

<div class="topic-metadata">

**Author:** [@PandKing](https://discuss.elastic.co/u/PandKing)\
**Replies:** 14\
**Last updated:** [May 12, 2017, 2:12am UTC](https://discuss.elastic.co/t/logstash-mirror-output/84982 "2017-05-12T02:12:11Z")

</div>

Hi, Is there a way to mirror a logstash input to 2 or more outputs ? I added 2 outputs to my winlogbeat.yml but only seems to take the first. Trying to send one pipeline to ES and a copy to another output. Th…

---

## [Transport Client unable to resolve hostname in certain cases](https://discuss.elastic.co/t/transport-client-unable-to-resolve-hostname-in-certain-cases/11408)

<div class="topic-metadata">

**Author:** [@ElasticRook](https://discuss.elastic.co/u/ElasticRook)\
**Replies:** 11\
**Last updated:** [December 11, 2013, 9:18pm UTC](https://discuss.elastic.co/t/transport-client-unable-to-resolve-hostname-in-certain-cases/11408 "2013-12-11T21:18:03Z")

</div>

I been having an issue where my transport client is able to communicate okay with elasticsearch on EC2, however soon as I rebuild the elasticsearch box and the ip changes, the transportclient throws no node available…

---

## [Duplicate results](https://discuss.elastic.co/t/duplicate-results/295808)

<div class="topic-metadata">

**Author:** [@motoki](https://discuss.elastic.co/u/motoki)\
**Replies:** 10\
**Last updated:** [February 25, 2022, 7:12am UTC](https://discuss.elastic.co/t/duplicate-results/295808 "2022-02-25T07:12:20Z")

</div>

Elasticsearch.... . 7.4 Status... Duplicate results were seen in pagination search results when there were multiple data nodes, regardless of whether there was a dedicated master or not (the same was true when specifyin…

---

## [Metricbeat VM Can't Connect To Elasticsearch On Different Device](https://discuss.elastic.co/t/metricbeat-vm-cant-connect-to-elasticsearch-on-different-device/326722)

<div class="topic-metadata">

**Author:** [@Tw1cUser](https://discuss.elastic.co/u/Tw1cUser)\
**Replies:** 44\
**Last updated:** [March 8, 2023, 12:47am UTC](https://discuss.elastic.co/t/metricbeat-vm-cant-connect-to-elasticsearch-on-different-device/326722 "2023-03-08T00:47:22Z")

</div>

Hello i'm new on ELK, Metricbeat on my VM can't connect to my laptop for monitoring the system on VM, i already following the instruction from many source but still can't connect from Metricbeat VM to my laptop for monit…

---

## [Not receiving correct info about services: "The system cannot find the file specified"](https://discuss.elastic.co/t/not-receiving-correct-info-about-services-the-system-cannot-find-the-file-specified/164331)

<div class="topic-metadata">

**Author:** [@martink](https://discuss.elastic.co/u/martink)\
**Replies:** 15\
**Last updated:** [January 22, 2019, 7:06am UTC](https://discuss.elastic.co/t/not-receiving-correct-info-about-services-the-system-cannot-find-the-file-specified/164331 "2019-01-22T07:06:50Z")

</div>

I found this topic from december last year, but it was closed without answer (auto). I have a similar issue: I recently started using the ELK-Stack and now I want to use metricbeat/windows/service to get "heartbeats" fro…

---

## [Log stash error](https://discuss.elastic.co/t/log-stash-error/206141)

<div class="topic-metadata">

**Author:** [@Seetharaman\_K](https://discuss.elastic.co/u/Seetharaman_K)\
**Replies:** 21\
**Last updated:** [November 6, 2019, 6:53am UTC](https://discuss.elastic.co/t/log-stash-error/206141 "2019-11-06T06:53:32Z")

</div>

below is the error i get while running logstash Sending Logstash logs to C:/busapps/rrsb/gbl1/logstash/7.0.0/logs which is now configured via log4j2.properties \[2019-11-01T10:04:00,538\]\[WARN \]\[logstash.config.source.m…

---

## [Watcher failing to send emails](https://discuss.elastic.co/t/watcher-failing-to-send-emails/62141)

<div class="topic-metadata">

**Author:** [@mtarimo](https://discuss.elastic.co/u/mtarimo)\
**Replies:** 9\
**Last updated:** [October 10, 2016, 8:46am UTC](https://discuss.elastic.co/t/watcher-failing-to-send-emails/62141 "2016-10-10T08:46:59Z")

</div>

Hi, I am using elastic cloud. I have just created a script and I am getting this error; MessagingException\[failed to send email with subject \[Daily MNO Snapshot\] via account \[work\]\]; nested: SendFailedException\[Inval…

---

## [Elastic Server is stopped and not starting](https://discuss.elastic.co/t/elastic-server-is-stopped-and-not-starting/116798)

<div class="topic-metadata">

**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\
**Replies:** 9\
**Last updated:** [January 24, 2018, 9:25am UTC](https://discuss.elastic.co/t/elastic-server-is-stopped-and-not-starting/116798 "2018-01-24T09:25:26Z")

</div>

Hi Elastic Search is stopped and not restarting. Attached log file. Please help me to find what is the issue and how can i solve it? \*\*Attached log file screenshots Thanks Aneesh L \[2\]\[3\]\[1\]

---

## [Having problem with parsing Json data using Filebeat and Logstash](https://discuss.elastic.co/t/having-problem-with-parsing-json-data-using-filebeat-and-logstash/101683)

<div class="topic-metadata">

**Author:** [@Shubham\_Mahajan](https://discuss.elastic.co/u/Shubham_Mahajan)\
**Replies:** 10\
**Last updated:** [September 25, 2017, 1:58pm UTC](https://discuss.elastic.co/t/having-problem-with-parsing-json-data-using-filebeat-and-logstash/101683 "2017-09-25T13:58:22Z")

</div>

i have this type of json logs: 1485907213693 {"counter\_name": "image", "resource\_id": "999d4b25-0539-419e-9991-42f2cf26061b", "timestamp": "2017-02-01T00:00:40Z", "counter\_volume": 1, "user\_id": null, "message\_signature…

---

## [Unable to send reporting via email](https://discuss.elastic.co/t/unable-to-send-reporting-via-email/70141)

<div class="topic-metadata">

**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Replies:** 14\
**Last updated:** [December 30, 2016, 8:37am UTC](https://discuss.elastic.co/t/unable-to-send-reporting-via-email/70141 "2016-12-30T08:37:36Z")

</div>

I don't receive email with report from Kibana console. When executing the command: POST /\_xpack/watcher/watch/reporting\_demo/\_execute { "record\_execution": true } I am getting the response: "actions": \[ { …

---

## [ES Cloud - Running ingest pipelines on warm nodes?](https://discuss.elastic.co/t/es-cloud-running-ingest-pipelines-on-warm-nodes/259054)

<div class="topic-metadata">

**Author:** [@Alain\_St\_Pierre](https://discuss.elastic.co/u/Alain_St_Pierre)\
**Replies:** 40\
**Last updated:** [January 7, 2021, 8:15am UTC](https://discuss.elastic.co/t/es-cloud-running-ingest-pipelines-on-warm-nodes/259054 "2021-01-07T08:15:52Z")

</div>

Hi there, I have a hot/warm cluster running on ES cloud with the following setup: 2x 29Gb hot nodes 2x 29Gb warm nodes time series data ingest rate: 2500/s (350 bytes each) ~75Gb/day enrich pipeline (with enrich snaps…

---

## [Output to different index based on field](https://discuss.elastic.co/t/output-to-different-index-based-on-field/293804)

<div class="topic-metadata">

**Author:** [@krsecurity](https://discuss.elastic.co/u/krsecurity)\
**Replies:** 11\
**Last updated:** [January 8, 2022, 11:01pm UTC](https://discuss.elastic.co/t/output-to-different-index-based-on-field/293804 "2022-01-08T23:01:30Z")

</div>

Hi there, I have a couple of use-cases where I want to ingest filebeat module data, send it through Logstash, and then put it into different indexes based on what filebeat module that it used. So for example, the two I…

---

## [Rejecting mapping update to \[.kibana\] as the final mapping would have more than 1 type: \[visualization, doc\]" error](https://discuss.elastic.co/t/rejecting-mapping-update-to-kibana-as-the-final-mapping-would-have-more-than-1-type-visualization-doc-error/133557)

<div class="topic-metadata">

**Author:** [@Ben\_Chaabene\_Wissem](https://discuss.elastic.co/u/Ben_Chaabene_Wissem)\
**Replies:** 9\
**Last updated:** [May 31, 2018, 3:12pm UTC](https://discuss.elastic.co/t/rejecting-mapping-update-to-kibana-as-the-final-mapping-would-have-more-than-1-type-visualization-doc-error/133557 "2018-05-31T15:12:08Z")

</div>

Hello, I followed the topic of Import a visualisation using API. But unfortunately I have this error Rejecting mapping update to \[.kibana\] as the final mapping would have more than 1 type: \[visualization, doc\]" Any one…

---

## [Dell Powerconnect remote logging setup](https://discuss.elastic.co/t/dell-powerconnect-remote-logging-setup/31349)

<div class="topic-metadata">

**Author:** [@cotcadaver](https://discuss.elastic.co/u/cotcadaver)\
**Replies:** 10\
**Last updated:** [October 26, 2015, 10:49am UTC](https://discuss.elastic.co/t/dell-powerconnect-remote-logging-setup/31349 "2015-10-26T10:49:43Z")

</div>

Has anyone used ELK to setup a log server for an Dell Powerconnect stack? I'm at a loss for what to do next. I used this article to set up the server and have the filter (I believe) set up for the logs, however not sure …

---

## [\[Ann\] JDBC River Plugin for ElasticSearch](https://discuss.elastic.co/t/ann-jdbc-river-plugin-for-elasticsearch/8132)

<div class="topic-metadata">

**Author:** [@jprante](https://discuss.elastic.co/u/jprante)\
**Replies:** 19\
**Last updated:** [August 1, 2014, 5:11pm UTC](https://discuss.elastic.co/t/ann-jdbc-river-plugin-for-elasticsearch/8132 "2014-08-01T17:11:26Z")

</div>

Hi, I'd like to announce a JDBC river implementation. It can be found at https://github.com/jprante/elasticsearch-river-jdbc I hope it is useful for all of you who need to index data from SQL databases into El…

---

## [Why multi-index queries are so slow? And how to troubleshoot?](https://discuss.elastic.co/t/why-multi-index-queries-are-so-slow-and-how-to-troubleshoot/125282)

<div class="topic-metadata">

**Author:** [@alexu](https://discuss.elastic.co/u/alexu)\
**Replies:** 9\
**Last updated:** [April 9, 2018, 6:35pm UTC](https://discuss.elastic.co/t/why-multi-index-queries-are-so-slow-and-how-to-troubleshoot/125282 "2018-04-09T18:35:45Z")

</div>

Elasticsearch 5.6.4 on centos We recently noticed that multi-index queries against our production Logshash database became very slow (5-10+ seconds). After some investigation the problem looks pretty weird OBSERVATIONS…

---

## [Как понять видит ли filebeat логи docker](https://discuss.elastic.co/t/filebeat-docker/231704)

<div class="topic-metadata">

**Author:** [@111333](https://discuss.elastic.co/u/111333)\
**Replies:** 20\
**Last updated:** [May 8, 2020, 6:51pm UTC](https://discuss.elastic.co/t/filebeat-docker/231704 "2020-05-08T18:51:17Z")

</div>

Пытаюсь запустить связку filebeat - logstash - elasticsearch -kibana в докер-контейнерах через docker-compose. Само по себе вроде все запускается и работает, но логи не доходят. Такое ощущение, что уже на первом этапе fi…

---

## [Cannot read property 'aliases' of undefined](https://discuss.elastic.co/t/cannot-read-property-aliases-of-undefined/293079)

<div class="topic-metadata">

**Author:** [@andrerca12](https://discuss.elastic.co/u/andrerca12)\
**Replies:** 10\
**Last updated:** [January 19, 2022, 4:43pm UTC](https://discuss.elastic.co/t/cannot-read-property-aliases-of-undefined/293079 "2022-01-19T16:43:35Z")

</div>

Hello, After i updated my Elasticsearch to version 7.16, Kibana can’t load Index Management page, with error Cannot read property ‘aliases’ of undefined. Everything else is working fine, my applications are streaming …

---

## [What is depth weight represent in graph](https://discuss.elastic.co/t/what-is-depth-weight-represent-in-graph/113733)

<div class="topic-metadata">

**Author:** [@krishnaraj221193](https://discuss.elastic.co/u/krishnaraj221193)\
**Replies:** 28\
**Last updated:** [January 8, 2018, 11:48am UTC](https://discuss.elastic.co/t/what-is-depth-weight-represent-in-graph/113733 "2018-01-08T11:48:28Z")

</div>

hi Im working on graph and im seeing depth and weight in vertex and connection on response but im not able to understand what is that. im trying to make parent child relationship using copy\_to having id of parent but i…

---

## [Enabling LDAP and authentication isssue](https://discuss.elastic.co/t/enabling-ldap-and-authentication-isssue/171034)

<div class="topic-metadata">

**Author:** [@B123](https://discuss.elastic.co/u/B123)\
**Replies:** 12\
**Last updated:** [March 18, 2019, 1:29pm UTC](https://discuss.elastic.co/t/enabling-ldap-and-authentication-isssue/171034 "2019-03-18T13:29:12Z")

</div>

Hi, I am trying to enable the LDAP authentiaction realm for my elasticsearch instance using the configurations in elasticsearch.yml: xpack.security.authc.realms.ldap.type: ldap xpack.security.authc.realms.ldap.order: …

[Previous page](https://discuss.elastic.co/top.md?page=74&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=76&per_page=50&period=all)
