# Top **URL:** https://discuss.elastic.co/top.md?page=761&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 762 --- ## [Recover cluster after adding a data node](https://discuss.elastic.co/t/recover-cluster-after-adding-a-data-node/190956)
**Author:** [@viratag26](https://discuss.elastic.co/u/viratag26)\ **Replies:** 7\ **Last updated:** [July 18, 2019, 6:44am UTC](https://discuss.elastic.co/t/recover-cluster-after-adding-a-data-node/190956 "2019-07-18T06:44:00Z")
I have added a data node to my ES cluster which already had 4 nodes. After addition, the number of shards jumped from 4(2 primary, 2 replica) to 8(4 primary and 4 replica). The newly made 4 shards are unassigned and my c… --- ## [Using micrometer to ship metrics instead of java agent](https://discuss.elastic.co/t/using-micrometer-to-ship-metrics-instead-of-java-agent/178685)
**Author:** [@sabareesh1](https://discuss.elastic.co/u/sabareesh1)\ **Replies:** 1\ **Last updated:** [April 29, 2019, 2:00am UTC](https://discuss.elastic.co/t/using-micrometer-to-ship-metrics-instead-of-java-agent/178685 "2019-04-29T02:00:53Z")
Spring boot comes with micrometer which can now ship metrics to ElasticSearch. Currently we are using Spring Cloud Sleuth, Zipkin, Elastics Search for distributed tracing. Spring Cloud Sleuth covers lot of other spring … --- ## [XML format on rows](https://discuss.elastic.co/t/xml-format-on-rows/104269)
**Author:** [@Maekee](https://discuss.elastic.co/u/Maekee)\ **Replies:** 7\ **Last updated:** [October 19, 2017, 6:34pm UTC](https://discuss.elastic.co/t/xml-format-on-rows/104269 "2017-10-19T18:34:21Z")
Hi, I have an Microsoft NPS server that ouputs monthly logfiles with XML formatted rows that looks like this: \\10/17/2017 15:57:24.465\\NPSSERVER01\ **Author:** [@Gurveer\_Singh](https://discuss.elastic.co/u/Gurveer_Singh)\ **Replies:** 1\ **Last updated:** [March 13, 2017, 8:42am UTC](https://discuss.elastic.co/t/datetime-function-in-ruby-logstash-filter/78126 "2017-03-13T08:42:49Z") Hi, I am trying to add a new field which will have value, week of year. Following code is working fine. ruby { code =\> ' require "date" d = DateTime.new(2017,02,02) event\["Week\_of\_Year"\] = d.cweek … --- ## [Error on Kibana on Browser](https://discuss.elastic.co/t/error-on-kibana-on-browser/45935)
**Author:** [@seeni](https://discuss.elastic.co/u/seeni)\ **Replies:** 1\ **Last updated:** [May 19, 2016, 8:37am UTC](https://discuss.elastic.co/t/error-on-kibana-on-browser/45935 "2016-05-19T08:37:46Z")
Hi , I am facing below error when I am starting browser for the first time after kibana started Oops! Looks like something went wrong. Refreshing may do the trick. Go back or clear your session Fatal Error Unca… --- ## [CVE-2021-44228 Alternative Mitigation](https://discuss.elastic.co/t/cve-2021-44228-alternative-mitigation/291877)
**Author:** [@boris111](https://discuss.elastic.co/u/boris111)\ **Replies:** 2\ **Last updated:** [December 15, 2021, 7:55pm UTC](https://discuss.elastic.co/t/cve-2021-44228-alternative-mitigation/291877 "2021-12-15T19:55:02Z")
Is it possible to drop the new log4j-core-2.15.0.jar for logstash as an alternative mitigation for the 5.x logstash version? The recommended mitigation step to remove the JndiLookup.class would not be desirable for dep… --- ## [Need help with grok parsing](https://discuss.elastic.co/t/need-help-with-grok-parsing/100437)
**Author:** [@Benoit\_Martin](https://discuss.elastic.co/u/Benoit_Martin)\ **Replies:** 2\ **Last updated:** [September 14, 2017, 3:27pm UTC](https://discuss.elastic.co/t/need-help-with-grok-parsing/100437 "2017-09-14T15:27:43Z")
Hi, I try to use grok and parse two type of log entry possibility. The field is a hostname receive by Cisco Prime. Possibility 1 : AP23132\_01,80:e0:1d:e0:c2:10 Possibility 2 : 80:e0:1d:e0:c2:10:AP23132\_01 AP23132\_01… --- ## [How to convert a field to uppercase in Kibana and do a lookup](https://discuss.elastic.co/t/how-to-convert-a-field-to-uppercase-in-kibana-and-do-a-lookup/192472)
**Author:** [@Nagendra\_Dattatreya](https://discuss.elastic.co/u/Nagendra_Dattatreya)\ **Replies:** 2\ **Last updated:** [July 26, 2019, 10:40pm UTC](https://discuss.elastic.co/t/how-to-convert-a-field-to-uppercase-in-kibana-and-do-a-lookup/192472 "2019-07-26T22:40:57Z")
I have a field that has both uppercase and lowercase, I want to transform all values to uppercase and also want to transform the code to a description. I know you can do either of this using format, can we do both on the… --- ## [Installation aborted, plugin 'logstash-input-jdbc' is already provided by 'logstash-integration-jdbc'](https://discuss.elastic.co/t/installation-aborted-plugin-logstash-input-jdbc-is-already-provided-by-logstash-integration-jdbc/287562)
**Author:** [@Kumar\_Reddy](https://discuss.elastic.co/u/Kumar_Reddy)\ **Replies:** 4\ **Last updated:** [October 25, 2021, 6:17pm UTC](https://discuss.elastic.co/t/installation-aborted-plugin-logstash-input-jdbc-is-already-provided-by-logstash-integration-jdbc/287562 "2021-10-25T18:17:45Z")
I am facing this issue when i try to run command from docker-compose.yml file. version: '3.7' services: Elasticsearch: image: docker.elastic.co/elasticsearch/elasticsearch:7.15.1 ports: - '9200:9200' environment: … --- ## [Group and keep only first result of that group](https://discuss.elastic.co/t/group-and-keep-only-first-result-of-that-group/250624)
**Author:** [@lanwin](https://discuss.elastic.co/u/lanwin)\ **Replies:** 4\ **Last updated:** [October 8, 2020, 11:18am UTC](https://discuss.elastic.co/t/group-and-keep-only-first-result-of-that-group/250624 "2020-10-08T11:18:44Z")
Is there any way to do a search, do a group (and discard all but one result of that group)? We have a simple parent-\>children relationship (building also a group). Our problem is now that we have a complex filter and it… --- ## [Alerting slack](https://discuss.elastic.co/t/alerting-slack/158582)
**Author:** [@Tommy\_Cabrelli](https://discuss.elastic.co/u/Tommy_Cabrelli)\ **Replies:** 4\ **Last updated:** [November 29, 2018, 4:59pm UTC](https://discuss.elastic.co/t/alerting-slack/158582 "2018-11-29T16:59:32Z")
Hello I do use APM to logs all my nodejs errors in ES/Kibana and it works pretty well. Is there a way to use a slack hook to notifiy for instance every errors which have status\_code = 500 ? I found a working slack log… --- ## [Kubernetes filebeat not sending logs to secured Elasticsearch](https://discuss.elastic.co/t/kubernetes-filebeat-not-sending-logs-to-secured-elasticsearch/319334)
**Author:** [@pratikshatiwari](https://discuss.elastic.co/u/pratikshatiwari)\ **Replies:** 8\ **Last updated:** [November 25, 2022, 6:53pm UTC](https://discuss.elastic.co/t/kubernetes-filebeat-not-sending-logs-to-secured-elasticsearch/319334 "2022-11-25T18:53:46Z")
Hello Team We are facing an issue where we have setup the filebeat on kubernetes environment it is working well if we setup the output without https but while setting the output as secured elasticsearch node i.e. https:… --- ## [Elasticsearch space character problem](https://discuss.elastic.co/t/elasticsearch-space-character-problem/268506)
**Author:** [@Celal\_Poyraz](https://discuss.elastic.co/u/Celal_Poyraz)\ **Replies:** 3\ **Last updated:** [March 26, 2021, 3:21pm UTC](https://discuss.elastic.co/t/elasticsearch-space-character-problem/268506 "2021-03-26T15:21:05Z")
I do elasticsearch indexing, but the first 2 characters after the space character do not search. For example, when I search for "John", the results come, but when I search for "John S", the result is not available. The n… --- ## [DHCP Logs to Logstash](https://discuss.elastic.co/t/dhcp-logs-to-logstash/250777)
**Author:** [@Craig2188](https://discuss.elastic.co/u/Craig2188)\ **Replies:** 8\ **Last updated:** [October 7, 2020, 10:03am UTC](https://discuss.elastic.co/t/dhcp-logs-to-logstash/250777 "2020-10-07T10:03:06Z")
I plan to use Filebeat to send the DHCP log file to Logstash. I have the following setup in Logstash to send the file to Elasticsearch: # Beats -\> Logstash -\> Elasticsearch pipeline. input { beats { port =\> 5044… --- ## [Logstash can't handle large messages](https://discuss.elastic.co/t/logstash-cant-handle-large-messages/238499)
**Author:** [@rzwarts](https://discuss.elastic.co/u/rzwarts)\ **Replies:** 3\ **Last updated:** [June 24, 2020, 2:52pm UTC](https://discuss.elastic.co/t/logstash-cant-handle-large-messages/238499 "2020-06-24T14:52:22Z")
Hi all, I'm having an issue with logstash and large syslog messages. I am using logstash 7.8 and a json template to get the files sent from rsyslog to logstash. But some messages are too long and completely crash the se… --- ## [ERROR: Starting the Logstash with Xpack](https://discuss.elastic.co/t/error-starting-the-logstash-with-xpack/186008)
**Author:** [@Sundaramoorthy\_Anand](https://discuss.elastic.co/u/Sundaramoorthy_Anand)\ **Replies:** 3\ **Last updated:** [June 17, 2019, 8:38am UTC](https://discuss.elastic.co/t/error-starting-the-logstash-with-xpack/186008 "2019-06-17T08:38:44Z")
I have enabled xpack in elasticsearch and kibana which is working fine. I tried to enable it in logstash and used filebeat to ingest the data. But while starting the logstash it is spitting out the following error: ( I … --- ## [Using elasticsearch with jupyter notebook](https://discuss.elastic.co/t/using-elasticsearch-with-jupyter-notebook/142317)
**Author:** [@caroline](https://discuss.elastic.co/u/caroline)\ **Replies:** 0\ **Last updated:** [July 31, 2018, 9:04am UTC](https://discuss.elastic.co/t/using-elasticsearch-with-jupyter-notebook/142317 "2018-07-31T09:04:52Z")
' m trying to use elasticsearch with jupyter notebook I have installed elasticsearch python client using pip install elasticsearch and I have included the elasticsearch spark connector jar on the classpath when launching… --- ## [Can someone explain Beats Architecture?](https://discuss.elastic.co/t/can-someone-explain-beats-architecture/105249)
**Author:** [@cmpsoares](https://discuss.elastic.co/u/cmpsoares)\ **Replies:** 3\ **Last updated:** [October 27, 2017, 1:03pm UTC](https://discuss.elastic.co/t/can-someone-explain-beats-architecture/105249 "2017-10-27T13:03:27Z")
Hello, We're analysing the Beats for custom beat developments, and I was wondering if someone can explain the architecture under the hood? I remember to see a diagram of it (from an old version) but was not able to fin… --- ## [Filebeat harvester not starting](https://discuss.elastic.co/t/filebeat-harvester-not-starting/244838)
**Author:** [@koos](https://discuss.elastic.co/u/koos)\ **Replies:** 6\ **Last updated:** [September 3, 2020, 2:50pm UTC](https://discuss.elastic.co/t/filebeat-harvester-not-starting/244838 "2020-09-03T14:50:52Z")
Hi, I'm running Filebeat 7.8.1 on ECK, however, it seems that the harvester is not starting. I'm not getting any logs in Elasticsearch. After some investigation, I found that the /usr/share/filebeat/data/registry/fileb… --- ## [Port Exhaustion](https://discuss.elastic.co/t/port-exhaustion/85186)
**Author:** [@amccool](https://discuss.elastic.co/u/amccool)\ **Replies:** 6\ **Last updated:** [May 15, 2017, 4:07pm UTC](https://discuss.elastic.co/t/port-exhaustion/85186 "2017-05-15T16:07:55Z")
using NEST or ElasticsearchClient (1.9,2) outputting trace diagnostics from .net services I'm running to into port exhaustion problems. netstat -ano | findstr 9200 | measure-object -line yields well over 5000 establishe… --- ## [Возможность указать мастера в кластере](https://discuss.elastic.co/t/topic/75323)
**Author:** [@intech](https://discuss.elastic.co/u/intech)\ **Replies:** 6\ **Last updated:** [February 17, 2017, 7:23am UTC](https://discuss.elastic.co/t/topic/75323 "2017-02-17T07:23:16Z")
После сбоя, не получается назначить определённый сервер мастером, вообще хорошего было бы задавать приоритет где-то какой сервер после какого желательно, чтобы был мастером. А то сейчас у меня по локации сервер с самым б… --- ## [Unable to compile spark 2.0 project with es-hadoop](https://discuss.elastic.co/t/unable-to-compile-spark-2-0-project-with-es-hadoop/98569)
**Author:** [@Noorul\_Islam\_Kamal\_M](https://discuss.elastic.co/u/Noorul_Islam_Kamal_M)\ **Replies:** 2\ **Last updated:** [September 13, 2017, 8:19am UTC](https://discuss.elastic.co/t/unable-to-compile-spark-2-0-project-with-es-hadoop/98569 "2017-09-13T08:19:37Z")
I have the following dependency added in sbt "org.elasticsearch" %% "elasticsearch-spark-20" % "5.5.2" I get the following error \[warn\] Run ‘evicted’ to see detailed eviction warnings \[info\] Compiling 1 protobuf file… --- ## [How to encrypt clear text password in ELK Config files - Shield](https://discuss.elastic.co/t/how-to-encrypt-clear-text-password-in-elk-config-files-shield/54707)
**Author:** [@pvignesh92](https://discuss.elastic.co/u/pvignesh92)\ **Replies:** 2\ **Last updated:** [July 5, 2016, 11:25am UTC](https://discuss.elastic.co/t/how-to-encrypt-clear-text-password-in-elk-config-files-shield/54707 "2016-07-05T11:25:14Z")
Hi team, I have installed Shield and enabled SSL by following the documentation. We could see that the passwords are in clear text as below in the configuration files which can be a concern. Elasticsearch.yml shield… --- ## [OutOfMemoryError: Direct buffer memory](https://discuss.elastic.co/t/outofmemoryerror-direct-buffer-memory/16402)
**Author:** [@Daniel\_Guo](https://discuss.elastic.co/u/Daniel_Guo)\ **Replies:** 2\ **Last updated:** [March 17, 2014, 3:00pm UTC](https://discuss.elastic.co/t/outofmemoryerror-direct-buffer-memory/16402 "2014-03-17T15:00:36Z")
I use elasticsearch as an index server. And I deploy a web project to create index and search result from my es server. I got the following error from the logs of the web project: \[elasticsearch\[Vengeance\]\[transp… --- ## [Elasticsearch as a primary storage](https://discuss.elastic.co/t/elasticsearch-as-a-primary-storage/290196)
**Author:** [@xtapodi](https://discuss.elastic.co/u/xtapodi)\ **Replies:** 5\ **Last updated:** [November 26, 2021, 4:17am UTC](https://discuss.elastic.co/t/elasticsearch-as-a-primary-storage/290196 "2021-11-26T04:17:42Z")
We have lots of users(30-200 million). Each user has N(30-100) attributes. The attribute can be of type integer, text, timestamp or counter. Schema is not defined. We are looking for a database to which we can index and… --- ## [Update the "index" mapping parameter in the existing mapping](https://discuss.elastic.co/t/update-the-index-mapping-parameter-in-the-existing-mapping/172070)
**Author:** [@Praneet\_Khandelwal](https://discuss.elastic.co/u/Praneet_Khandelwal)\ **Replies:** 5\ **Last updated:** [March 13, 2019, 8:20am UTC](https://discuss.elastic.co/t/update-the-index-mapping-parameter-in-the-existing-mapping/172070 "2019-03-13T08:20:04Z")
I have a field in my ES index with the following mapping: "to": { "index": false, "type": "text" } I would like to change the "index"parameter to True for this field. I guess th… --- ## [Installing NPM Packages for Plugin Development](https://discuss.elastic.co/t/installing-npm-packages-for-plugin-development/237707)
**Author:** [@s-newman](https://discuss.elastic.co/u/s-newman)\ **Replies:** 4\ **Last updated:** [June 25, 2020, 11:58am UTC](https://discuss.elastic.co/t/installing-npm-packages-for-plugin-development/237707 "2020-06-25T11:58:25Z")
I am developing a Kibana plugin for a personal project, and I would like to install an NPM package for my plugin to use. Specifically, I would like to install eslint-plugin-react-hooks as a development dependency. Unfor… --- ## [IllegalStateException: alias has more than one write index](https://discuss.elastic.co/t/illegalstateexception-alias-has-more-than-one-write-index/254065)
**Author:** [@exper0](https://discuss.elastic.co/u/exper0)\ **Replies:** 1\ **Last updated:** [August 3, 2021, 11:08pm UTC](https://discuss.elastic.co/t/illegalstateexception-alias-has-more-than-one-write-index/254065 "2021-08-03T23:08:39Z")
Hello, I'm getting the same error on all ES data nodes saying that alias has more than one write index so none of data nodes can actually start, cluster is dead. Is there any way to fix the problem without deleting all … --- ## [How to regulate filebeat memory usages](https://discuss.elastic.co/t/how-to-regulate-filebeat-memory-usages/277653)
**Author:** [@rp346](https://discuss.elastic.co/u/rp346)\ **Replies:** 1\ **Last updated:** [July 5, 2021, 9:24am UTC](https://discuss.elastic.co/t/how-to-regulate-filebeat-memory-usages/277653 "2021-07-05T09:24:41Z")
I have filebeat deployed in kubernetes with following configuration filebeat.ymlfilebeat.config: inputs: enabled: true path: inputs.d/\*.yml reload.enabled: true reload.period: 10s … --- ## [Filebeat is not sending complete logs](https://discuss.elastic.co/t/filebeat-is-not-sending-complete-logs/52219)
**Author:** [@sinwar](https://discuss.elastic.co/u/sinwar)\ **Replies:** 4\ **Last updated:** [June 13, 2016, 7:08am UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-complete-logs/52219 "2016-06-13T07:08:30Z")
I am using docker elk for logs and forwarding logs using filebeat but some logs were sent or some not? my filebeat.yml -\> https://ghostbin.com/paste/rrjeh filebeat logs in debug mode -\> https://ghostbin.com/paste/fm2… --- ## [Getting SSL issue when running reindex api for elastic cluster build via eck 1.0.1](https://discuss.elastic.co/t/getting-ssl-issue-when-running-reindex-api-for-elastic-cluster-build-via-eck-1-0-1/235567)
**Author:** [@avi1](https://discuss.elastic.co/u/avi1)\ **Replies:** 2\ **Last updated:** [June 4, 2020, 7:09am UTC](https://discuss.elastic.co/t/getting-ssl-issue-when-running-reindex-api-for-elastic-cluster-build-via-eck-1-0-1/235567 "2020-06-04T07:09:47Z")
I created elasticsearch cluster with operator (ECK 1.0.1) and configured kibana to talk to elastic cluster. When i'm running reindex api copy the index from our docker elastic cluster to kubernetes cluster I'm getting be… --- ## [Ruby code not updating integer](https://discuss.elastic.co/t/ruby-code-not-updating-integer/78791)
**Author:** [@whyapenny](https://discuss.elastic.co/u/whyapenny)\ **Replies:** 2\ **Last updated:** [March 16, 2017, 3:29pm UTC](https://discuss.elastic.co/t/ruby-code-not-updating-integer/78791 "2017-03-16T15:29:47Z")
i am attempting to take a field and increment the number by one. I had assumed this would be an easy task but it appears to be not so trivial. I have resorted to using the ruby filter and attempting to do this here: … --- ## [Elasticsearch 5 ESIntegTestCase simple testcase problem](https://discuss.elastic.co/t/elasticsearch-5-esintegtestcase-simple-testcase-problem/72499)
**Author:** [@whelanp](https://discuss.elastic.co/u/whelanp)\ **Replies:** 2\ **Last updated:** [January 25, 2017, 10:58am UTC](https://discuss.elastic.co/t/elasticsearch-5-esintegtestcase-simple-testcase-problem/72499 "2017-01-25T10:58:28Z")
Hello I have the following simple test case and I am trying to figure out why the document count does not work? I can see in the logs the following. \[2017-01-23T22:59:03,039\]\[DEBUG\]\[p.ServiceIntTest \] \[-1\]… --- ## [How to exclude numeric values from ES-Index?](https://discuss.elastic.co/t/how-to-exclude-numeric-values-from-es-index/26371)
**Author:** [@fluehmann](https://discuss.elastic.co/u/fluehmann)\ **Replies:** 2\ **Last updated:** [July 29, 2015, 8:18am UTC](https://discuss.elastic.co/t/how-to-exclude-numeric-values-from-es-index/26371 "2015-07-29T08:18:01Z")
Hey there I'm looking for a way to remove/filter numeric values from my index. I want to exclude values like dates or numbers.. Can this be done with an analyzer? Thank you for your answers an suggestions. Simon --- ## [Error sending bulk request do Elasticsearch](https://discuss.elastic.co/t/error-sending-bulk-request-do-elasticsearch/183193)
**Author:** [@luisdiasbh](https://discuss.elastic.co/u/luisdiasbh)\ **Replies:** 3\ **Last updated:** [June 18, 2019, 2:54pm UTC](https://discuss.elastic.co/t/error-sending-bulk-request-do-elasticsearch/183193 "2019-06-18T14:54:18Z")
I'm able to read some data from hive table throught jdbc connection but when it will be inserted on elastic i have the following error: \[ERROR\] 2019-05-28 17:39:36.643 \[\[main\]\>worker1\] elasticsearch - An unknown error … --- ## [MongoDB River Plugin 1.1.0](https://discuss.elastic.co/t/mongodb-river-plugin-1-1-0/6878)
**Author:** [@Richard\_Louapre](https://discuss.elastic.co/u/Richard_Louapre)\ **Replies:** 8\ **Last updated:** [May 23, 2012, 10:54am UTC](https://discuss.elastic.co/t/mongodb-river-plugin-1-1-0/6878 "2012-05-23T10:54:15Z")
Hi, MongoDB River Plugin 1.1.0 has just been released \[0\]. MongoDB River will now work with the new Elasticsearch 0.19.0. To install it use: plugin.bat -install elasticsearch/elasticsearch-mapper-attachments/1.… --- ## [How to use fuzzy and match phrase?](https://discuss.elastic.co/t/how-to-use-fuzzy-and-match-phrase/301386)
**Author:** [@asil](https://discuss.elastic.co/u/asil)\ **Replies:** 1\ **Last updated:** [April 6, 2022, 2:56pm UTC](https://discuss.elastic.co/t/how-to-use-fuzzy-and-match-phrase/301386 "2022-04-06T14:56:59Z")
I'm using elasticsearch version 7.6.2 I want to search for a sentence and get results of the same words order (like match\_phrase) with sentence fuzziness for example: suppose for simplicity i have 1 document in the in… --- ## [Auto login with authentication api 6.7.1](https://discuss.elastic.co/t/auto-login-with-authentication-api-6-7-1/206431)
**Author:** [@Anish\_Raju](https://discuss.elastic.co/u/Anish_Raju)\ **Replies:** 6\ **Last updated:** [November 26, 2019, 6:41am UTC](https://discuss.elastic.co/t/auto-login-with-authentication-api-6-7-1/206431 "2019-11-26T06:41:47Z")
I have Kibana hosted in unix server. But we dont have access to the server. we have login details to the kibana application. So now i want to display the dashboard without manually logging in everytime. So i tried to con… --- ## [Couldn't connect to AWS ES](https://discuss.elastic.co/t/couldnt-connect-to-aws-es/193294)
**Author:** [@sv\_bcvt92](https://discuss.elastic.co/u/sv_bcvt92)\ **Replies:** 6\ **Last updated:** [August 1, 2019, 3:19pm UTC](https://discuss.elastic.co/t/couldnt-connect-to-aws-es/193294 "2019-08-01T15:19:39Z")
Hi Gurus, I'm setting Filebeat to send nginx logs to AWS Elasticsearch service. I do follow exactly this guide But in step 4, I got this error Exiting: Couldn't connect to any of the configured Elasticsearch hosts… --- ## [High node JVM heap cause ES cluster almost stop working](https://discuss.elastic.co/t/high-node-jvm-heap-cause-es-cluster-almost-stop-working/165880)
**Author:** [@blackgrill](https://discuss.elastic.co/u/blackgrill)\ **Replies:** 5\ **Last updated:** [January 27, 2019, 9:10am UTC](https://discuss.elastic.co/t/high-node-jvm-heap-cause-es-cluster-almost-stop-working/165880 "2019-01-27T09:10:47Z")
Hi Everyone, We meet some JVM memory issue in 3 of our warm nodes,the JVM heap of this nodes keep increasing and up to 99%,and then the following error message are reported in the node log file.and then,the cluster seem… --- ## [Grok parse failure in LogStash, but works in Kibana debugger](https://discuss.elastic.co/t/grok-parse-failure-in-logstash-but-works-in-kibana-debugger/161746)
**Author:** [@swright-eti](https://discuss.elastic.co/u/swright-eti)\ **Replies:** 5\ **Last updated:** [December 26, 2018, 1:18pm UTC](https://discuss.elastic.co/t/grok-parse-failure-in-logstash-but-works-in-kibana-debugger/161746 "2018-12-26T13:18:18Z")
I have a pattern that the Grok Debugger in Kibana says works. Testing gives me the output I expect. However when run in Logstash I get a failure. Here is the log message I am trying to parse: DEBUG: 12/17/18 00:01:42.6… --- ## [Exception while retrieving instance list from AWS API](https://discuss.elastic.co/t/exception-while-retrieving-instance-list-from-aws-api/123345)
**Author:** [@Amit\_Hora](https://discuss.elastic.co/u/Amit_Hora)\ **Replies:** 5\ **Last updated:** [March 10, 2018, 12:17pm UTC](https://discuss.elastic.co/t/exception-while-retrieving-instance-list-from-aws-api/123345 "2018-03-10T12:17:39Z")
Hi , I am using same IAM roles for my two opswork stack one stack with ES5.4 other stack has ES6.2 with 5.4 discovery-ec2 plugin works fine. But with 6.0 i am getting below error java.security.AccessControlExcep… --- ## [Host name display of the host which send the log to logstash](https://discuss.elastic.co/t/host-name-display-of-the-host-which-send-the-log-to-logstash/136430)
**Author:** [@nandha\_88](https://discuss.elastic.co/u/nandha_88)\ **Replies:** 4\ **Last updated:** [June 19, 2018, 10:04am UTC](https://discuss.elastic.co/t/host-name-display-of-the-host-which-send-the-log-to-logstash/136430 "2018-06-19T10:04:53Z")
Hi All, I need to show or list the host on which filebeat is installed in the kibana dashboard or the list of hosts that send the log the kibana. Once again I don't want the count , I need to show the hosts monitored. R… --- ## [Skipping older files](https://discuss.elastic.co/t/skipping-older-files/79653)
**Author:** [@blacklobo](https://discuss.elastic.co/u/blacklobo)\ **Replies:** 4\ **Last updated:** [March 23, 2017, 1:46pm UTC](https://discuss.elastic.co/t/skipping-older-files/79653 "2017-03-23T13:46:01Z")
How can I get Logstash to open and process files modified more than 24 hours ago? Logstash is skipping files that were written over 24 hours ago. I found a topic that references the Logstash forwarder accepting a "dea… --- ## [Logstash multiline codec functional question](https://discuss.elastic.co/t/logstash-multiline-codec-functional-question/88845)
**Author:** [@bterhorst](https://discuss.elastic.co/u/bterhorst)\ **Replies:** 7\ **Last updated:** [June 13, 2017, 11:35am UTC](https://discuss.elastic.co/t/logstash-multiline-codec-functional-question/88845 "2017-06-13T11:35:20Z")
Hello, I am kind of new to logstash and was wondering about the functionality of the multiline codec. If I have a multiline codec that has the following definition: input { beats { port =\> "5045" cod… --- ## [Logstash.inputs.jdbc Unable to connect to database](https://discuss.elastic.co/t/logstash-inputs-jdbc-unable-to-connect-to-database/197276)
**Author:** [@whalien52](https://discuss.elastic.co/u/whalien52)\ **Replies:** 1\ **Last updated:** [September 2, 2019, 8:48am UTC](https://discuss.elastic.co/t/logstash-inputs-jdbc-unable-to-connect-to-database/197276 "2019-09-02T08:48:59Z")
Hi, I am trying to connect an SQL database with Elasticsearch. So I have done all the changes in the config file of logstash and created an index in Kibana console. But I am getting error. My config file looks like th… --- ## [Creating visualization,search or dashboard using dev tools?](https://discuss.elastic.co/t/creating-visualization-search-or-dashboard-using-dev-tools/100444)
**Author:** [@Cap\_Ho](https://discuss.elastic.co/u/Cap_Ho)\ **Replies:** 1\ **Last updated:** [September 14, 2017, 4:49pm UTC](https://discuss.elastic.co/t/creating-visualization-search-or-dashboard-using-dev-tools/100444 "2017-09-14T16:49:48Z")
Hello, I have the requirement for created many visualization with different parameter (e.g host name), just wondering if i may use devtool to import the json and create that ? (i try to use the import/export in saved ob… --- ## [Not able to monitor with Metricbeat. Monitoring with Self monitoring in kibana](https://discuss.elastic.co/t/not-able-to-monitor-with-metricbeat-monitoring-with-self-monitoring-in-kibana/316790)
**Author:** [@Rakhshunda\_Noorein\_J](https://discuss.elastic.co/u/Rakhshunda_Noorein_J)\ **Replies:** 6\ **Last updated:** [October 19, 2022, 6:14am UTC](https://discuss.elastic.co/t/not-able-to-monitor-with-metricbeat-monitoring-with-self-monitoring-in-kibana/316790 "2022-10-19T06:14:30Z")
Hello, I have configured metricbeat in windows providing you the steps I followed. kibana -\> stack monitoring -\> monitor with metricbeat -\> followed the steps mentioned there -\> downloaded and setup metricbeat. -\> cha… --- ## [Kibana is not running on FreeBSD](https://discuss.elastic.co/t/kibana-is-not-running-on-freebsd/178880)
**Author:** [@Andromedae93](https://discuss.elastic.co/u/Andromedae93)\ **Replies:** 6\ **Last updated:** [April 29, 2019, 1:28pm UTC](https://discuss.elastic.co/t/kibana-is-not-running-on-freebsd/178880 "2019-04-29T13:28:20Z")
Hello everybody, I'm fighting with kibana since few days and I don't overcome to start it on my FreeBSD server. This is my environment: FreeBSD 11.1-STABLE ElasticSearch 5.3.0 Kibana 5.3.0 Logstash 5.. ElasticSearc… --- ## [Curator Reindex](https://discuss.elastic.co/t/curator-reindex/124328)
**Author:** [@Ben96](https://discuss.elastic.co/u/Ben96)\ **Replies:** 6\ **Last updated:** [March 20, 2018, 7:20am UTC](https://discuss.elastic.co/t/curator-reindex/124328 "2018-03-20T07:20:39Z")
Hi Everyone, Today i wanted to manage my reindex from daily indices to monthly with Curator. The thing is i encoutered a error and i can't debug it, waste a bit time on google to find some help but nothing. Here Actio… [Previous page](https://discuss.elastic.co/top.md?page=760&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=762&per_page=50&period=all)