# Top **URL:** https://discuss.elastic.co/top.md?page=751&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 752 --- ## [Not showing data from last 15 minutes](https://discuss.elastic.co/t/not-showing-data-from-last-15-minutes/141644)
**Author:** [@cazorino](https://discuss.elastic.co/u/cazorino)\ **Replies:** 7\ **Last updated:** [August 2, 2018, 4:05pm UTC](https://discuss.elastic.co/t/not-showing-data-from-last-15-minutes/141644 "2018-08-02T16:05:44Z")
Hello ELK community! I'm facing a trouble when trying to view data received from last 15 minutes in Kibana. My server is working with Logstash, Elasticsearch and Kibana 6.3.0, the agent responsible for sending me IIS lo… --- ## [io.netty.handler.codec.DecoderException: javax.net.ssl.SSLException: Session has no PSK](https://discuss.elastic.co/t/io-netty-handler-codec-decoderexception-javax-net-ssl-sslexception-session-has-no-psk/233722)
**Author:** [@rahul\_s](https://discuss.elastic.co/u/rahul_s)\ **Replies:** 5\ **Last updated:** [June 24, 2020, 5:22am UTC](https://discuss.elastic.co/t/io-netty-handler-codec-decoderexception-javax-net-ssl-sslexception-session-has-no-psk/233722 "2020-06-24T05:22:05Z")
Using Elasticsearch 7.6.1 with SSL enabled we noticed the following error being logged in Elasticsearch logs \[WARN \]\[o.e.h.AbstractHttpServerTransport\] \[host\] caught exception while handling client http traffic, closing… --- ## [When does client need cluster.name?](https://discuss.elastic.co/t/when-does-client-need-cluster-name/114916)
**Author:** [@jacobg](https://discuss.elastic.co/u/jacobg)\ **Replies:** 5\ **Last updated:** [January 10, 2018, 5:20pm UTC](https://discuss.elastic.co/t/when-does-client-need-cluster-name/114916 "2018-01-10T17:20:59Z")
The documentation for transport client says to specify cluster.name setting, but the rest client does not. When is cluster.name needed, and what is it used for? Is it for sniffing nodes? Thanks. --- ## [Auditd](https://discuss.elastic.co/t/auditd/64506)
**Author:** [@brunopsitech](https://discuss.elastic.co/u/brunopsitech)\ **Replies:** 5\ **Last updated:** [November 4, 2016, 3:27pm UTC](https://discuss.elastic.co/t/auditd/64506 "2016-11-04T15:27:03Z")
Hi, someone know how to load audit.log of linux in Logstash ? I try use this but not work: input { file { path =\> \["/var/log/audit/audit.log"\] type =\> "auditd" … --- ## [Kibana Throwing 502 Error](https://discuss.elastic.co/t/kibana-throwing-502-error/117874)
**Author:** [@john.akash](https://discuss.elastic.co/u/john.akash)\ **Replies:** 2\ **Last updated:** [January 31, 2018, 7:49pm UTC](https://discuss.elastic.co/t/kibana-throwing-502-error/117874 "2018-01-31T19:49:05Z")
Hi Team, We are using Kibana 5.6.0 and ES 5.6.0. Kibana is hosted behind a loadbalancer. The data which we are used to index is cloudtrail data for 19 AWS accounts. As of now a single index is having nearly 75GiB data.… --- ## [Renaming any field. in elastic search](https://discuss.elastic.co/t/renaming-any-field-in-elastic-search/11460)
**Author:** [@mohit\_Kumar](https://discuss.elastic.co/u/mohit_Kumar)\ **Replies:** 2\ **Last updated:** [April 5, 2013, 9:34am UTC](https://discuss.elastic.co/t/renaming-any-field-in-elastic-search/11460 "2013-04-05T09:34:53Z")
Hi folks, Can you please help in renaming any field name in elastic search. I want to rename a field. For example. {"field":{"MsgData":"abc"} this is my filed. after running the query how can i rename the MsgData f… --- ## [How to model a many to many scenario in elasticsearch](https://discuss.elastic.co/t/how-to-model-a-many-to-many-scenario-in-elasticsearch/2679)
**Author:** [@Sandeepvja](https://discuss.elastic.co/u/Sandeepvja)\ **Replies:** 4\ **Last updated:** [June 22, 2015, 5:54am UTC](https://discuss.elastic.co/t/how-to-model-a-many-to-many-scenario-in-elasticsearch/2679 "2015-06-22T05:54:23Z")
Hi, I have scenario where I need to search for an Person whose employments are listed within its JSON. See below for the person JSON { "name": "David", "workedAt: \[ { "name": "google", … --- ## [I want to Kibana connect with exemple.com](https://discuss.elastic.co/t/i-want-to-kibana-connect-with-exemple-com/122498)
**Author:** [@Amandine](https://discuss.elastic.co/u/Amandine)\ **Replies:** 6\ **Last updated:** [March 13, 2018, 9:08am UTC](https://discuss.elastic.co/t/i-want-to-kibana-connect-with-exemple-com/122498 "2018-03-13T09:08:20Z")
Hello, I wish not to connect anymore to Kibana with the private IP. Thus I want to connect with http://exemple.com. I made a lot of test of configuration but without results. What do I have to make please? --- ## [Add node azure to elasticsearch 2.1](https://discuss.elastic.co/t/add-node-azure-to-elasticsearch-2-1/36684)
**Author:** [@ryodo](https://discuss.elastic.co/u/ryodo)\ **Replies:** 6\ **Last updated:** [December 9, 2015, 5:08pm UTC](https://discuss.elastic.co/t/add-node-azure-to-elasticsearch-2-1/36684 "2015-12-09T17:08:27Z")
I have two didicate server (host1 , host2) i have installed elastic 2.1 in my two didicate server in my config i have host1 \> cluster.name: myclus node.name: node-1 network.host: ip adress 1 http.port: 9200 disco… --- ## [CloudFlare Log Ingest (Grok?)](https://discuss.elastic.co/t/cloudflare-log-ingest-grok/145782)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 3\ **Last updated:** [August 24, 2018, 6:48pm UTC](https://discuss.elastic.co/t/cloudflare-log-ingest-grok/145782 "2018-08-24T18:48:16Z")
Anybody ever setup Logstash to ingest CloudFlare API pulls? I'm not sure how to go about setting up grok patterns to match the output. Additionally, the returned data is in NDJson format, which I think is a double edge… --- ## [Filebeat to Logstash - broken pipe](https://discuss.elastic.co/t/filebeat-to-logstash-broken-pipe/95614)
**Author:** [@z\_m](https://discuss.elastic.co/u/z_m)\ **Replies:** 3\ **Last updated:** [August 7, 2017, 2:40pm UTC](https://discuss.elastic.co/t/filebeat-to-logstash-broken-pipe/95614 "2017-08-07T14:40:47Z")
Hi, It seems the filebeat misses acks from logstash in my testing rig. My arrangement Both Filebeat and Logstash runs on sigle Mac Sierra (10.12.6) Filebeat v.5.5.0 Config filebeat.prospectors: - input\_type: … --- ## [Display a line for. hit(s) per second](https://discuss.elastic.co/t/display-a-line-for-hit-s-per-second/53329)
**Author:** [@Kevin\_Csuka](https://discuss.elastic.co/u/Kevin_Csuka)\ **Replies:** 3\ **Last updated:** [June 21, 2016, 3:44pm UTC](https://discuss.elastic.co/t/display-a-line-for-hit-s-per-second/53329 "2016-06-21T15:44:40Z")
It is possible to display a line on a visualization for each hit per second. Example: On the Discover tab there are total 12 hits, divided in 2 seconds Between 12:00:00 and 12:00:01 there are 8 hits. Between 12:00:01 a… --- ## [How cause ElasticSearch to not throw DocumentAlreadyExistsException?](https://discuss.elastic.co/t/how-cause-elasticsearch-to-not-throw-documentalreadyexistsexception/16702)
**Author:** [@Igor\_Romanov](https://discuss.elastic.co/u/Igor_Romanov)\ **Replies:** 3\ **Last updated:** [April 2, 2014, 7:30am UTC](https://discuss.elastic.co/t/how-cause-elasticsearch-to-not-throw-documentalreadyexistsexception/16702 "2014-04-02T07:30:13Z")
Hi all, I would like that elastic search will index only new documents, but for existing one will not throw any exception and quietly continue Is that possible? I tried to index using "create" operation , but … --- ## [Is it possible to disable Date Histogram auto scale in Kibana visualization?](https://discuss.elastic.co/t/is-it-possible-to-disable-date-histogram-auto-scale-in-kibana-visualization/127615)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 2\ **Last updated:** [April 12, 2018, 4:53am UTC](https://discuss.elastic.co/t/is-it-possible-to-disable-date-histogram-auto-scale-in-kibana-visualization/127615 "2018-04-12T04:53:17Z")
Hi, I am using Kibana 5.0.0. I am trying to create a line chart, and I would like to have Date Histogram in X- Axis. I use @timestamp field for that and I have selected interval Auto and it works fine. When I try to mak… --- ## [Reset admin password for Kibana](https://discuss.elastic.co/t/reset-admin-password-for-kibana/117315)
**Author:** [@puck](https://discuss.elastic.co/u/puck)\ **Replies:** 2\ **Last updated:** [January 28, 2018, 4:05pm UTC](https://discuss.elastic.co/t/reset-admin-password-for-kibana/117315 "2018-01-28T16:05:04Z")
Hi, I'm locked out of the admin page for our Kibana instance. I have a root shell on the box and can access all configurations. How do I go about resetting the admin password, so I can login to Kibana as admin? I can… --- ## [Multiple definitions for the same module?](https://discuss.elastic.co/t/multiple-definitions-for-the-same-module/106839)
**Author:** [@sebastien.k](https://discuss.elastic.co/u/sebastien.k)\ **Replies:** 5\ **Last updated:** [November 10, 2017, 8:56am UTC](https://discuss.elastic.co/t/multiple-definitions-for-the-same-module/106839 "2017-11-10T08:56:16Z")
Hi, We have created a specific filebeat module to parse Drupal logs. In filebeat.yml we declare two entries for filebeat.modules with this custom module in order to distinguish preprod and prod environments (by adding … --- ## [Scripted fields ISO Week](https://discuss.elastic.co/t/scripted-fields-iso-week/56067)
**Author:** [@Carlos\_Vega\_Moreno](https://discuss.elastic.co/u/Carlos_Vega_Moreno)\ **Replies:** 5\ **Last updated:** [April 26, 2017, 6:52am UTC](https://discuss.elastic.co/t/scripted-fields-iso-week/56067 "2017-04-26T06:52:09Z")
Hi, I would like to get the ISO week from the timestamp. I tried using Python but is not possible to import modules on the inline scripts (not sure why). Also, I tried with lucene expressions which would be something lik… --- ## [Running benchmark-only error](https://discuss.elastic.co/t/running-benchmark-only-error/63290)
**Author:** [@duramen](https://discuss.elastic.co/u/duramen)\ **Replies:** 5\ **Last updated:** [October 19, 2016, 11:50am UTC](https://discuss.elastic.co/t/running-benchmark-only-error/63290 "2016-10-19T11:50:20Z")
I run "esrally --track=geonames --offline --pipeline=benchmark-only --target-hosts=xxx.xxx.xxx.xxx:9200" have error: 2016-10-18 11:48:21,989 elasticsearch WARNING PUT /geonames/\_mapping/type \[status:400 request:1.315s\]… --- ## [Nested Json parse failure in logstash?](https://discuss.elastic.co/t/nested-json-parse-failure-in-logstash/195054)
**Author:** [@Abdul\_Gaffar\_Shaikh](https://discuss.elastic.co/u/Abdul_Gaffar_Shaikh)\ **Replies:** 8\ **Last updated:** [August 15, 2019, 7:11am UTC](https://discuss.elastic.co/t/nested-json-parse-failure-in-logstash/195054 "2019-08-15T07:11:00Z")
hi Guys, I am trying to parse my json into logstash and finally into ES, but giving all try i am failing . Could you please help with it input { file{ path =\> "${JSON\_HOME}/\*.json" #path =\> "C:/Users/ashaik13/Dev/sof… --- ## [Elastic server hardware requirements](https://discuss.elastic.co/t/elastic-server-hardware-requirements/157807)
**Author:** [@Aayushi\_Jain](https://discuss.elastic.co/u/Aayushi_Jain)\ **Replies:** 8\ **Last updated:** [November 22, 2018, 11:22am UTC](https://discuss.elastic.co/t/elastic-server-hardware-requirements/157807 "2018-11-22T11:22:30Z")
We have around 5 billion of records per year, retention period is 1 year. General queries will involve a date range selection and around 10 filters and some aggregations to work on. Time taken to run the query should be … --- ## [Bulk importing CSVs with different headers](https://discuss.elastic.co/t/bulk-importing-csvs-with-different-headers/21799)
**Author:** [@Ron\_3](https://discuss.elastic.co/u/Ron_3)\ **Replies:** 8\ **Last updated:** [January 28, 2015, 7:01pm UTC](https://discuss.elastic.co/t/bulk-importing-csvs-with-different-headers/21799 "2015-01-28T19:01:34Z")
Hello all, So I'm trying to import a large number of CSV files into Elasticsearch. All the files have different content in them, with different headers. My goal is to have a directory we can drop CSVs into, and … --- ## [Upgrade reindex helper creates duplicates of indexes that prevent launch](https://discuss.elastic.co/t/upgrade-reindex-helper-creates-duplicates-of-indexes-that-prevent-launch/140214)
**Author:** [@Ant](https://discuss.elastic.co/u/Ant)\ **Replies:** 7\ **Last updated:** [July 17, 2018, 9:30am UTC](https://discuss.elastic.co/t/upgrade-reindex-helper-creates-duplicates-of-indexes-that-prevent-launch/140214 "2018-07-17T09:30:52Z")
org.elasticsearch.bootstrap.StartupException: java.lang.IllegalStateException: index and alias names need to be unique, but the following duplicates were found \[.watches (alias of \[.watches-6/WIUCyhnGQPqZxIZ7Advo6Q\])\] I… --- ## [LOGSTASH convert unix ms timestamp](https://discuss.elastic.co/t/logstash-convert-unix-ms-timestamp/98897)
**Author:** [@Gaurav\_Yadav](https://discuss.elastic.co/u/Gaurav_Yadav)\ **Replies:** 1\ **Last updated:** [August 30, 2017, 5:18pm UTC](https://discuss.elastic.co/t/logstash-convert-unix-ms-timestamp/98897 "2017-08-30T17:18:19Z")
Hi, I am quite new to Logstash , i was able to successfully push the messages from Logstash over to ElasticSearch, however the @timestamp is different from the one specified in logs. I want to set the log time to @times… --- ## [How to add custom field in Topbeat](https://discuss.elastic.co/t/how-to-add-custom-field-in-topbeat/40588)
**Author:** [@ponmoh](https://discuss.elastic.co/u/ponmoh)\ **Replies:** 4\ **Last updated:** [March 8, 2016, 8:43am UTC](https://discuss.elastic.co/t/how-to-add-custom-field-in-topbeat/40588 "2016-03-08T08:43:58Z")
Hello, How to add custom fields in Topbeat yml as it is in filebeat prospectors fields ? thanks, Mohan. --- ## [Automatic index creation using java API](https://discuss.elastic.co/t/automatic-index-creation-using-java-api/36000)
**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\ **Replies:** 4\ **Last updated:** [February 16, 2016, 5:58pm UTC](https://discuss.elastic.co/t/automatic-index-creation-using-java-api/36000 "2016-02-16T17:58:15Z")
Hi All, I am creating monthly index to push my documents this creation has been implemented automatically by java API.Recently i have observed attribute norms added to my not\_analyzed fields automatically when index i… --- ## [Comparing two string in ruby filter / comparing two string fields](https://discuss.elastic.co/t/comparing-two-string-in-ruby-filter-comparing-two-string-fields/31914)
**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\ **Replies:** 2\ **Last updated:** [October 9, 2015, 2:45pm UTC](https://discuss.elastic.co/t/comparing-two-string-in-ruby-filter-comparing-two-string-fields/31914 "2015-10-09T14:45:40Z")
Hi , I was trying to compare two string in logstash ruby filter inside code , it it always showing wrong result . same if I am trying in ruby IDE is working perfectly fine . I am trying to do something code =\> " … --- ## [Set @timestamp value](https://discuss.elastic.co/t/set-timestamp-value/91958)
**Author:** [@Roque\_Moyano](https://discuss.elastic.co/u/Roque_Moyano)\ **Replies:** 1\ **Last updated:** [July 5, 2017, 5:22pm UTC](https://discuss.elastic.co/t/set-timestamp-value/91958 "2017-07-05T17:22:26Z")
Hi , I have a situation , I need to send a lot of "old" logs to our ELK stack , I was doing some tests , and I realized that when logstash send the logs to elasticsearch it is seting the @timestamp field with the curren… --- ## [Kibana: Readiness probe failed: HTTP probe failed with statuscode: 503](https://discuss.elastic.co/t/kibana-readiness-probe-failed-http-probe-failed-with-statuscode-503/286493)
**Author:** [@purushothamkdr143](https://discuss.elastic.co/u/purushothamkdr143)\ **Replies:** 1\ **Last updated:** [October 13, 2021, 5:19am UTC](https://discuss.elastic.co/t/kibana-readiness-probe-failed-http-probe-failed-with-statuscode-503/286493 "2021-10-13T05:19:29Z")
Hi All, I have created Elasticsearch/kibana using eck operator. Although kibana pod is running, I see that readiness probe is failed i.e Readiness probe failed: HTTP probe failed with statuscode: 503. What could be reas… --- ## [elasticsearchに入っているデータがKibanaから参照できない](https://discuss.elastic.co/t/elasticsearch-kibana/292756)
**Author:** [@snowman\_1114](https://discuss.elastic.co/u/snowman_1114)\ **Replies:** 2\ **Last updated:** [December 24, 2021, 3:36am UTC](https://discuss.elastic.co/t/elasticsearch-kibana/292756 "2021-12-24T03:36:09Z")
こんにちは Elasticsearchにはデータが入っており、Index patternも対象のindexを含む形で行っているのですが、Discoverなどでデータを見ることができません。 filebeatのmodule(panw)からElasticsearchにデータ登録を行っています。（バージョンは7.16.1です） APIをたたくとドキュメントは登録されている GET /filebeat-panos-2021.12.23… --- ## [File Input codec =\> "json\_lines" won't work](https://discuss.elastic.co/t/file-input-codec-json-lines-wont-work/281196)
**Author:** [@panagiss](https://discuss.elastic.co/u/panagiss)\ **Replies:** 2\ **Last updated:** [August 12, 2021, 3:05pm UTC](https://discuss.elastic.co/t/file-input-codec-json-lines-wont-work/281196 "2021-08-12T15:05:26Z")
I try to read from a json file but codec=\>"json\_lines" won't work, can't see any output. But when i try and set codec=\>"json" it works and parses the data and i see the output. So you ask me what is the format of the js… --- ## [Week on Week Comparison](https://discuss.elastic.co/t/week-on-week-comparison/160292)
**Author:** [@ramanshu](https://discuss.elastic.co/u/ramanshu)\ **Replies:** 2\ **Last updated:** [December 12, 2018, 9:37pm UTC](https://discuss.elastic.co/t/week-on-week-comparison/160292 "2018-12-12T21:37:45Z")
Looking for week on week comparison (Period on period comparison to be more generic) for in depth analysis and analysis of deviations from expected behaviour. Expected behaviour: Given a line graph visualization and s… --- ## [Docker logstash is not processing input](https://discuss.elastic.co/t/docker-logstash-is-not-processing-input/110079)
**Author:** [@bizmate](https://discuss.elastic.co/u/bizmate)\ **Replies:** 2\ **Last updated:** [December 4, 2017, 10:46pm UTC](https://discuss.elastic.co/t/docker-logstash-is-not-processing-input/110079 "2017-12-04T22:46:05Z")
I have been using a single solution container for running elastic, logstash and kibana and I am trying the images at elastic.co So I am trying with \> FROM docker.elastic.co/logstash/logstash:6.0.0 \> COPY ./config/logst… --- ## [Logstash port 5000 not opening](https://discuss.elastic.co/t/logstash-port-5000-not-opening/47201)
**Author:** [@shekade](https://discuss.elastic.co/u/shekade)\ **Replies:** 2\ **Last updated:** [April 13, 2016, 7:45am UTC](https://discuss.elastic.co/t/logstash-port-5000-not-opening/47201 "2016-04-13T07:45:00Z")
I have been following this link for centos 6 https://www.digitalocean.com/community/tutorials/how-to-use-logstash-and-kibana-to-centralize-logs-on-centos-6 When I do Service logstash restart -- I cant see port 5000… --- ## [Custom tokenizer for phone numbers](https://discuss.elastic.co/t/custom-tokenizer-for-phone-numbers/11306)
**Author:** [@asanderson](https://discuss.elastic.co/u/asanderson)\ **Replies:** 2\ **Last updated:** [March 26, 2013, 7:17pm UTC](https://discuss.elastic.co/t/custom-tokenizer-for-phone-numbers/11306 "2013-03-26T19:17:34Z")
Greetings! I'm trying to figure out how to define a custom tokenizer for phone numbers similar to how we tokenize phone number in Solr using the solr.WordDelimiterFilterFactory with all the parameters set to tru… --- ## [Kibana search based on Lucene Query Parser Syntax](https://discuss.elastic.co/t/kibana-search-based-on-lucene-query-parser-syntax/54298)
**Author:** [@axelfelix](https://discuss.elastic.co/u/axelfelix)\ **Replies:** 3\ **Last updated:** [June 30, 2016, 10:20am UTC](https://discuss.elastic.co/t/kibana-search-based-on-lucene-query-parser-syntax/54298 "2016-06-30T10:20:09Z")
hi all, I try to understand better the behavior of a lucene search through kibana. I'm aware about analyzer, tokenizer, filter ... An exemple: I have a field "test" and I look for "toto-tata.test.ok" value. If… --- ## [Need help, filebeat doesn't seem working (beginner)](https://discuss.elastic.co/t/need-help-filebeat-doesnt-seem-working-beginner/54103)
**Author:** [@mhui](https://discuss.elastic.co/u/mhui)\ **Replies:** 3\ **Last updated:** [June 29, 2016, 6:31am UTC](https://discuss.elastic.co/t/need-help-filebeat-doesnt-seem-working-beginner/54103 "2016-06-29T06:31:06Z")
Filebeat is not picking up logs and there is no log generated in C:\\ProgramData\\filebeat\\Logs, any help is appreciated, thanks filebeat: prospectors: - paths: - "D:/Input-log-files/SUNMRZBK5X942ZZ… --- ## [Topbeat from master](https://discuss.elastic.co/t/topbeat-from-master/39804)
**Author:** [@biswajit86](https://discuss.elastic.co/u/biswajit86)\ **Replies:** 8\ **Last updated:** [January 26, 2016, 12:45am UTC](https://discuss.elastic.co/t/topbeat-from-master/39804 "2016-01-26T00:45:23Z")
Is there any documentation on how to build topbeat from master I am interested in testing out the feature for command line options and would like to build a new binary from the source If it helps, I usually download … --- ## [ELK stack and monitoring/alerting](https://discuss.elastic.co/t/elk-stack-and-monitoring-alerting/20636)
**Author:** [@vishal\_sharma](https://discuss.elastic.co/u/vishal_sharma)\ **Replies:** 3\ **Last updated:** [November 8, 2014, 1:32pm UTC](https://discuss.elastic.co/t/elk-stack-and-monitoring-alerting/20636 "2014-11-08T13:32:18Z")
I am new to ELK stack. I guess, I understand ELK can be used for log management. You can view the details on dash board using kibana etc. however, one question, can we have an alerting system as an extension of EL… --- ## [Winlogbeat is not Connecting to Logstash Which is not connecting to Elasticsearch](https://discuss.elastic.co/t/winlogbeat-is-not-connecting-to-logstash-which-is-not-connecting-to-elasticsearch/328713)
**Author:** [@A.Hani](https://discuss.elastic.co/u/A.Hani)\ **Replies:** 7\ **Last updated:** [March 29, 2023, 9:55am UTC](https://discuss.elastic.co/t/winlogbeat-is-not-connecting-to-logstash-which-is-not-connecting-to-elasticsearch/328713 "2023-03-29T09:55:55Z")
I have a small lab that consists of 2 ES nodes with basic security enabled using a TLS certificate, Kibana, Logstash, and a Windows 10 machine. The thing is that i'm not able to connect winbeat to logstash. Logstash Err… --- ## [Es, kibana 실행오류 질문입니다](https://discuss.elastic.co/t/es-kibana/153374)
**Author:** [@ksb304](https://discuss.elastic.co/u/ksb304)\ **Replies:** 1\ **Last updated:** [October 23, 2018, 5:51am UTC](https://discuss.elastic.co/t/es-kibana/153374 "2018-10-23T05:51:33Z")
키바나가 정상작동하지 않습니다.. es가 문제인지 키바나 문제인지 모르겠습니다. 정상 동작되던 서버가 갑자기 되지않네요 --- ## [Slop distance](https://discuss.elastic.co/t/slop-distance/10764)
**Author:** [@Ophir\_Michaeli](https://discuss.elastic.co/u/Ophir_Michaeli)\ **Replies:** 1\ **Last updated:** [February 17, 2013, 6:52pm UTC](https://discuss.elastic.co/t/slop-distance/10764 "2013-02-17T18:52:14Z")
Slop distance Hi, I'm testing for my company a possible move from lucene to elasticsearch. In lucene I have SetSlop, which when I set to 0 will bring results only for the exact phrase. In elas… --- ## [Xpack Watcher -- Credit card in logs](https://discuss.elastic.co/t/xpack-watcher-credit-card-in-logs/164374)
**Author:** [@jodiaz](https://discuss.elastic.co/u/jodiaz)\ **Replies:** 4\ **Last updated:** [February 21, 2019, 8:19pm UTC](https://discuss.elastic.co/t/xpack-watcher-credit-card-in-logs/164374 "2019-02-21T20:19:27Z")
Hello -- Working on a regex pattern for a watcher that will detect if credit card information is present in our logs. I was hoping that Elastic would have a sample pattern for this as it's one of the specific examples y… --- ## [SSL client failed to connect, Filebeat to ELK](https://discuss.elastic.co/t/ssl-client-failed-to-connect-filebeat-to-elk/64193)
**Author:** [@skeer](https://discuss.elastic.co/u/skeer)\ **Replies:** 4\ **Last updated:** [October 28, 2016, 9:52pm UTC](https://discuss.elastic.co/t/ssl-client-failed-to-connect-filebeat-to-elk/64193 "2016-10-28T21:52:28Z")
Virtual sandbox in ESXi 5.5, comprised of 3 x CentOS 7 minimal servers. 1 ELK, 2 clients w/Filebeats installed. Followed guide here: https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstas… --- ## [SNMP-trap OID escaping .0 for Queries](https://discuss.elastic.co/t/snmp-trap-oid-escaping-0-for-queries/32282)
**Author:** [@tom\_jonge](https://discuss.elastic.co/u/tom_jonge)\ **Replies:** 4\ **Last updated:** [October 19, 2015, 11:02am UTC](https://discuss.elastic.co/t/snmp-trap-oid-escaping-0-for-queries/32282 "2015-10-19T11:02:17Z")
Greetings, I'm currently feeding SNMP traps into my ELK stack and have run into a problem with the translated OID's and trying to query them in a watch. The watch in question: /\_watcher/watch/test\_event { "trigg… --- ## [Can Kibana access response headers coming from the Node server?](https://discuss.elastic.co/t/can-kibana-access-response-headers-coming-from-the-node-server/25112)
**Author:** [@leotcsun](https://discuss.elastic.co/u/leotcsun)\ **Replies:** 4\ **Last updated:** [July 24, 2015, 6:35pm UTC](https://discuss.elastic.co/t/can-kibana-access-response-headers-coming-from-the-node-server/25112 "2015-07-24T18:35:41Z")
Hi Kibana experts! I've been working on a project that involves Kibana 4.0.2 and I'm in a situation where I need to slightly extend the current Kibana. My question as follows: Assuming that the Node server knows the … --- ## [Logstash dynamic elasticsearch hosts output](https://discuss.elastic.co/t/logstash-dynamic-elasticsearch-hosts-output/134615)
**Author:** [@EloaCardoso](https://discuss.elastic.co/u/EloaCardoso)\ **Replies:** 6\ **Last updated:** [June 5, 2018, 2:46pm UTC](https://discuss.elastic.co/t/logstash-dynamic-elasticsearch-hosts-output/134615 "2018-06-05T14:46:44Z")
output { elasticsearch { ... hosts =\> \["%{ELASTICSEARCH\_URL}"\] } } Is that possible? Because it is not working within Logstash 6.1.4. --- ## [Advice for restore/configuration](https://discuss.elastic.co/t/advice-for-restore-configuration/171600)
**Author:** [@tudro](https://discuss.elastic.co/u/tudro)\ **Replies:** 5\ **Last updated:** [March 10, 2019, 4:53pm UTC](https://discuss.elastic.co/t/advice-for-restore-configuration/171600 "2019-03-10T16:53:39Z")
Hello, First of all I'm pretty new to ELK so sorry if my questions seem stupid :slight\_smile: I inherited a crashed elasticsearch. It was a basic/default elk configuration running on one server and used for demo purpos… --- ## [Get average number of hits per time periode](https://discuss.elastic.co/t/get-average-number-of-hits-per-time-periode/48632)
**Author:** [@katrink](https://discuss.elastic.co/u/katrink)\ **Replies:** 1\ **Last updated:** [April 28, 2016, 2:30pm UTC](https://discuss.elastic.co/t/get-average-number-of-hits-per-time-periode/48632 "2016-04-28T14:30:20Z")
Hello! I am looking for a methode to get the number of hits in a time periode. So for example: The average of the number hits per day in the last month. Am I right that there is no way to do this in Kibana? But my ques… --- ## [Parse Old .gz Log File](https://discuss.elastic.co/t/parse-old-gz-log-file/129628)
**Author:** [@dee78](https://discuss.elastic.co/u/dee78)\ **Replies:** 2\ **Last updated:** [May 4, 2018, 3:32pm UTC](https://discuss.elastic.co/t/parse-old-gz-log-file/129628 "2018-05-04T15:32:58Z")
Hi everybody, hope that someone can help me to solve my issue. I've already read all the related topics on this forum but didn't find anything apt to me. So I use ELK to parse and process the access.log files of my Squ… --- ## [Validation Failed: 1: this action would add \[8\] total shards, but this cluster currently has \[3997\]/\[4000\] maximum shards open](https://discuss.elastic.co/t/validation-failed-1-this-action-would-add-8-total-shards-but-this-cluster-currently-has-3997-4000-maximum-shards-open/349527)
**Author:** [@HyebinHong](https://discuss.elastic.co/u/HyebinHong)\ **Replies:** 5\ **Last updated:** [December 18, 2023, 11:12pm UTC](https://discuss.elastic.co/t/validation-failed-1-this-action-would-add-8-total-shards-but-this-cluster-currently-has-3997-4000-maximum-shards-open/349527 "2023-12-18T23:12:26Z")
Hello, Elastic! I'm facing the trouble while indexing data. I run both ES 8.11 and OpenSearch 2.11 but both have same issues. Please help me. I found out my shards had reached the maximum(1000 shards per nodes). My da… [Previous page](https://discuss.elastic.co/top.md?page=750&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=752&per_page=50&period=all)