# Top **URL:** https://discuss.elastic.co/top.md?page=769&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 770 --- ## [After restart logstash the s3 output plugin not work](https://discuss.elastic.co/t/after-restart-logstash-the-s3-output-plugin-not-work/103154)
**Author:** [@sockaddr\_in](https://discuss.elastic.co/u/sockaddr_in)\ **Replies:** 2\ **Last updated:** [October 9, 2017, 11:18am UTC](https://discuss.elastic.co/t/after-restart-logstash-the-s3-output-plugin-not-work/103154 "2017-10-09T11:18:12Z")
Hello, everyone! I use the s3 as the logstash output. When i first start the logstash, it works well, but after i restart logstash is does not work at all and generated many ERROR log as following, so how to solve this … --- ## [Sort in a Data Table](https://discuss.elastic.co/t/sort-in-a-data-table/58992)
**Author:** [@datadude](https://discuss.elastic.co/u/datadude)\ **Replies:** 1\ **Last updated:** [August 26, 2016, 11:54pm UTC](https://discuss.elastic.co/t/sort-in-a-data-table/58992 "2016-08-26T23:54:21Z")
Lets say I use count as the metric, Then I use said count as the sort metric in a data table this sort metric is used for all of the buckets/sub-buckets. Should I be able to reasonably expect that the lines returned … --- ## [Not display certain fields in Kibana Discover](https://discuss.elastic.co/t/not-display-certain-fields-in-kibana-discover/41522)
**Author:** [@yahoo](https://discuss.elastic.co/u/yahoo)\ **Replies:** 1\ **Last updated:** [February 11, 2016, 6:23pm UTC](https://discuss.elastic.co/t/not-display-certain-fields-in-kibana-discover/41522 "2016-02-11T18:23:46Z")
I don't want to display the fields: host, message, path at the Discover part of Kibana. I went throught the forum and the suggestion was to use mutate at logstash and remove the fields. https://discuss.elastic.co/t/remov… --- ## [Bulkresponse undefined](https://discuss.elastic.co/t/bulkresponse-undefined/233597)
**Author:** [@tcaetano1995](https://discuss.elastic.co/u/tcaetano1995)\ **Replies:** 5\ **Last updated:** [June 2, 2020, 2:04am UTC](https://discuss.elastic.co/t/bulkresponse-undefined/233597 "2020-06-02T02:04:29Z")
I'm using the node js plugin to do bulk indexing. (followed this link) The only things I've changed are the data set and the index creation (i created indices before). The code works fine to index but there is somethin… --- ## [Logstash out put to SQL Server](https://discuss.elastic.co/t/logstash-out-put-to-sql-server/302460)
**Author:** [@Srini12](https://discuss.elastic.co/u/Srini12)\ **Replies:** 3\ **Last updated:** [April 19, 2022, 8:15pm UTC](https://discuss.elastic.co/t/logstash-out-put-to-sql-server/302460 "2022-04-19T20:15:26Z")
@Badger Hi I am using log stash to output to csv -- it is working fine. However I am trying to write from Elasticsearch to sql server using jdbc driver which is giving error. Can you please try to pick what I am doin… --- ## [Uploading document into ES without overwriting the current mapping](https://discuss.elastic.co/t/uploading-document-into-es-without-overwriting-the-current-mapping/67564)
**Author:** [@pkk](https://discuss.elastic.co/u/pkk)\ **Replies:** 2\ **Last updated:** [November 30, 2016, 8:49pm UTC](https://discuss.elastic.co/t/uploading-document-into-es-without-overwriting-the-current-mapping/67564 "2016-11-30T20:49:28Z")
We are using Elasticsearch to index documents automatically from the external system. We added some setting for the current mapping and when we import new documents/data the current mapping setting are overwritten. Is th… --- ## [Splitting One Index into Multiple Indices](https://discuss.elastic.co/t/splitting-one-index-into-multiple-indices/90168)
**Author:** [@panda2004](https://discuss.elastic.co/u/panda2004)\ **Replies:** 0\ **Last updated:** [June 20, 2017, 10:45pm UTC](https://discuss.elastic.co/t/splitting-one-index-into-multiple-indices/90168 "2017-06-20T22:45:19Z")
Background: Presenting ElasticSearch Data Models There are many possible data models available on ElasticSearch, but obviously using ElasticSearch as a time series date store is the most popular. Time series data is usua… --- ## [Elastic Search handle out of order updates](https://discuss.elastic.co/t/elastic-search-handle-out-of-order-updates/298571)
**Author:** [@andy4324](https://discuss.elastic.co/u/andy4324)\ **Replies:** 7\ **Last updated:** [March 3, 2022, 7:44pm UTC](https://discuss.elastic.co/t/elastic-search-handle-out-of-order-updates/298571 "2022-03-03T19:44:01Z")
Hi friends, new to ES and need some help from y'all. How can I handle out of order updates? Some context: We're building a custom monitoring system and planning to send events to ES via Kafka. Producers \> Kafka \> Consume… --- ## [How to run metricbeat as background process](https://discuss.elastic.co/t/how-to-run-metricbeat-as-background-process/243865)
**Author:** [@Mahebub\_Sayyed](https://discuss.elastic.co/u/Mahebub_Sayyed)\ **Replies:** 7\ **Last updated:** [August 5, 2020, 2:26pm UTC](https://discuss.elastic.co/t/how-to-run-metricbeat-as-background-process/243865 "2020-08-05T14:26:44Z")
I want to install metricbeat to monitor server metrics. I dont have internet connection on server so I have manually downloaded "metricbeat-oss-7.3.2-linux-x86\_64.tar.gz" and running it through "./metricbeat -e" when I a… --- ## [Grouping IP addresses by site name](https://discuss.elastic.co/t/grouping-ip-addresses-by-site-name/112285)
**Author:** [@c\_dev](https://discuss.elastic.co/u/c_dev)\ **Replies:** 1\ **Last updated:** [December 19, 2017, 7:59am UTC](https://discuss.elastic.co/t/grouping-ip-addresses-by-site-name/112285 "2017-12-19T07:59:13Z")
I am currently ingesting Apache logs through Filebeat via Logstash into ElasticSearch to create a data table in Kibana to display a list of all IP addresses which are trying to hit a certain resource. Eg. in the apache … --- ## [Logstash apply multiple filters based on condition](https://discuss.elastic.co/t/logstash-apply-multiple-filters-based-on-condition/59299)
**Author:** [@mrunalgosar](https://discuss.elastic.co/u/mrunalgosar)\ **Replies:** 7\ **Last updated:** [August 31, 2016, 3:10pm UTC](https://discuss.elastic.co/t/logstash-apply-multiple-filters-based-on-condition/59299 "2016-08-31T15:10:51Z")
I have log lines as belows: 11:05:44,924 DEBUG DataFeed:? - Data received: data=TextMessage={ Header={ JMSMessageID={ID:someId} JMSDestination={Topic\[someTopic\]} JMSReplyTo={null} JMSDeliveryMode={NON\_PERSISTENT} JM… --- ## [\[WARN \]\[org.logstash.common.io.DeadLetterQueueWriter\] Event previously submitted to dead letter queue. Skipping](https://discuss.elastic.co/t/warn-org-logstash-common-io-deadletterqueuewriter-event-previously-submitted-to-dead-letter-queue-skipping/113250)
**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\ **Replies:** 2\ **Last updated:** [June 23, 2020, 11:07pm UTC](https://discuss.elastic.co/t/warn-org-logstash-common-io-deadletterqueuewriter-event-previously-submitted-to-dead-letter-queue-skipping/113250 "2020-06-23T23:07:03Z")
I just started working with the Dead Letter Queue, but after restarting my pipelines a few times I am now getting this message repeatedly in my logs: \[WARN \]\[org.logstash.common.io.DeadLetterQueueWriter\] Event previousl… --- ## [Can't change a field type](https://discuss.elastic.co/t/cant-change-a-field-type/267382)
**Author:** [@msieumouche](https://discuss.elastic.co/u/msieumouche)\ **Replies:** 3\ **Last updated:** [March 18, 2021, 7:57am UTC](https://discuss.elastic.co/t/cant-change-a-field-type/267382 "2021-03-18T07:57:10Z")
Hello everyone, I have a stack with ELK and wazuh, I'm looking to change the type of some fields ("keyword" to "ip") to personal fields (srcip, dstip, etc.) Their search fields in kibana are data.srcip, etc. I tried t… --- ## [Json logs separated by blank lines](https://discuss.elastic.co/t/json-logs-separated-by-blank-lines/143523)
**Author:** [@yodog](https://discuss.elastic.co/u/yodog)\ **Replies:** 3\ **Last updated:** [August 9, 2018, 7:55pm UTC](https://discuss.elastic.co/t/json-logs-separated-by-blank-lines/143523 "2018-08-09T19:55:15Z")
i have a json log file, where each entry is separated by a blank line {"@timestamp":1456544565,"valid\_domain":true,"ip":"8.8.8.8"} {"@timestamp":2464564543,"valid\_domain":false,"ip":"1.2.3.4"} {"@timestamp":3454678735… --- ## [NEST Client opens new connection for any request](https://discuss.elastic.co/t/nest-client-opens-new-connection-for-any-request/125144)
**Author:** [@Sauter\_Vector](https://discuss.elastic.co/u/Sauter_Vector)\ **Replies:** 3\ **Last updated:** [April 10, 2018, 11:39am UTC](https://discuss.elastic.co/t/nest-client-opens-new-connection-for-any-request/125144 "2018-04-10T11:39:25Z")
Hello there and welcome Elastic community, we are using Elastic search with NEST 5.5. One thing we realized is, that the Elastic Client seems to open a new TCP connection for every request. One of our usecases uses the … --- ## [Remove data from json array in Logstash](https://discuss.elastic.co/t/remove-data-from-json-array-in-logstash/54204)
**Author:** [@Geezer](https://discuss.elastic.co/u/Geezer)\ **Replies:** 3\ **Last updated:** [June 30, 2016, 9:04pm UTC](https://discuss.elastic.co/t/remove-data-from-json-array-in-logstash/54204 "2016-06-30T21:04:44Z")
I have a data source which is sending in data in json format. Some of this data is held in an array, which makes it difficult to visualize. The array only holds one set of data however. For example, the "docs" array b… --- ## [Change the backgroundcolor of the chart](https://discuss.elastic.co/t/change-the-backgroundcolor-of-the-chart/51935)
**Author:** [@bharat](https://discuss.elastic.co/u/bharat)\ **Replies:** 3\ **Last updated:** [June 9, 2016, 10:13am UTC](https://discuss.elastic.co/t/change-the-backgroundcolor-of-the-chart/51935 "2016-06-09T10:13:42Z")
I am using the Kibana 4.5. In visualisation tab, I have created my chart and using it as an iframe. I want to change the background color of the chart as per my page(not Kibana) where this iframe fits. Any suggestions. --- ## [Logstash starts and stops within seconds while running it as a service](https://discuss.elastic.co/t/logstash-starts-and-stops-within-seconds-while-running-it-as-a-service/24998)
**Author:** [@shriyansh\_jain](https://discuss.elastic.co/u/shriyansh_jain)\ **Replies:** 3\ **Last updated:** [May 24, 2016, 5:39am UTC](https://discuss.elastic.co/t/logstash-starts-and-stops-within-seconds-while-running-it-as-a-service/24998 "2016-05-24T05:39:55Z")
The logstash.err file spits out the following error Faraday::ConnectionFailed: Connection refused - Connection refused call at /opt/logstash/vendor/bundle/jruby/1.9/gems/faraday-0.9.0/lib/faraday/adapter… --- ## [Оптимизация запроса с несколькими aggs](https://discuss.elastic.co/t/aggs/41553)
**Author:** [@Bdfy1](https://discuss.elastic.co/u/Bdfy1)\ **Replies:** 3\ **Last updated:** [February 12, 2016, 5:43pm UTC](https://discuss.elastic.co/t/aggs/41553 "2016-02-12T17:43:37Z")
Есть запрос вида: { "aggs": { "test": { "date\_histogram": { "field": "user.date", "interval": "1d" }, "aggs": { "all\_vie… --- ## [Remove fields on windows event log](https://discuss.elastic.co/t/remove-fields-on-windows-event-log/86891)
**Author:** [@tharu85](https://discuss.elastic.co/u/tharu85)\ **Replies:** 5\ **Last updated:** [May 24, 2017, 1:19pm UTC](https://discuss.elastic.co/t/remove-fields-on-windows-event-log/86891 "2017-05-24T13:19:43Z")
{ "message" =\> "The Windows Filtering Platform has permitted a connection......bla bla.....", "@version" =\> "1", "@timestamp" =\> "2017-05-24T03:38:00.775Z", "type" =\> "wineventlog", … --- ## [HTTP Poller not working - No errors](https://discuss.elastic.co/t/http-poller-not-working-no-errors/128213)
**Author:** [@juandanielpujols](https://discuss.elastic.co/u/juandanielpujols)\ **Replies:** 4\ **Last updated:** [April 24, 2018, 8:23pm UTC](https://discuss.elastic.co/t/http-poller-not-working-no-errors/128213 "2018-04-24T20:23:17Z")
Hi, i have the configuration below in my logstash.conf file. But is not working and is not givin any errors. I got a certificate error before that i solved with a jks. Any hints on how can i troubleshoot? NOTE: Is a cont… --- ## [Logstash-plugin install failed](https://discuss.elastic.co/t/logstash-plugin-install-failed/98694)
**Author:** [@arun\_prasath1](https://discuss.elastic.co/u/arun_prasath1)\ **Replies:** 4\ **Last updated:** [September 1, 2017, 3:58am UTC](https://discuss.elastic.co/t/logstash-plugin-install-failed/98694 "2017-09-01T03:58:02Z")
I am trying to install output plugin using below command but it has failed saying there is no connection. But I tried to download and able to download using wget. I have extracted the download .gz file and it is a data f… --- ## [Error: Cannot delete files/folders outside the current working directory](https://discuss.elastic.co/t/error-cannot-delete-files-folders-outside-the-current-working-directory/148702)
**Author:** [@oms1226](https://discuss.elastic.co/u/oms1226)\ **Replies:** 1\ **Last updated:** [September 19, 2018, 4:45pm UTC](https://discuss.elastic.co/t/error-cannot-delete-files-folders-outside-the-current-working-directory/148702 "2018-09-19T16:45:27Z")
Kibana and Elasticsearch are installed in each different server. After Elasticsearch is running well. When I run to start kibana, I meet below error message. " error \[12:04:39.886\] \[fatal\] Error: Cannot delete files/… --- ## [Writing queries in Elasticsearch's Java client](https://discuss.elastic.co/t/writing-queries-in-elasticsearchs-java-client/92392)
**Author:** [@miya1](https://discuss.elastic.co/u/miya1)\ **Replies:** 2\ **Last updated:** [July 11, 2017, 1:57pm UTC](https://discuss.elastic.co/t/writing-queries-in-elasticsearchs-java-client/92392 "2017-07-11T13:57:09Z")
I used Elastic Search java client, I am implementing a search application. (Index has already been built) I want to reproduce the Elastic Search java client, the following query. However, it can not be reproduced. I… --- ## [Ibm as/400](https://discuss.elastic.co/t/ibm-as-400/72769)
**Author:** [@bini](https://discuss.elastic.co/u/bini)\ **Replies:** 2\ **Last updated:** [January 27, 2017, 11:32am UTC](https://discuss.elastic.co/t/ibm-as-400/72769 "2017-01-27T11:32:27Z")
Hi, i wanted to know the options for connecting to an AS 400 machine. And also can ELK be used for AS 400. Kindly help me out . :slight\_smile: --- ## [Show bar count value above each bar by default when graph bar chart loads](https://discuss.elastic.co/t/show-bar-count-value-above-each-bar-by-default-when-graph-bar-chart-loads/48973)
**Author:** [@Jeremy\_Colton](https://discuss.elastic.co/u/Jeremy_Colton)\ **Replies:** 2\ **Last updated:** [May 3, 2016, 8:13am UTC](https://discuss.elastic.co/t/show-bar-count-value-above-each-bar-by-default-when-graph-bar-chart-loads/48973 "2016-05-03T08:13:28Z")
Hi, I have a bar chart of count on Y-Axis and events on X-axis. When I mouseover a bar a tooltip appears with lots of info inside of it including the value of the count. Is it possible to show just the value of the … --- ## [Breaking Changes in 6.0 - reindex indices from 2.x - Why?](https://discuss.elastic.co/t/breaking-changes-in-6-0-reindex-indices-from-2-x-why/103788)
**Author:** [@YeeP](https://discuss.elastic.co/u/YeeP)\ **Replies:** 7\ **Last updated:** [October 14, 2017, 12:36am UTC](https://discuss.elastic.co/t/breaking-changes-in-6-0-reindex-indices-from-2-x-why/103788 "2017-10-14T00:36:03Z")
So along the lines of why does this need to happen, what needs to happen? I see that the reindex API is the recommended method, but this looks like a utility that just copies one index to another. I could be wrong, but I… --- ## [Java HighLevelRestClient search problem](https://discuss.elastic.co/t/java-highlevelrestclient-search-problem/126264)
**Author:** [@danfisk](https://discuss.elastic.co/u/danfisk)\ **Replies:** 6\ **Last updated:** [April 2, 2018, 5:27pm UTC](https://discuss.elastic.co/t/java-highlevelrestclient-search-problem/126264 "2018-04-02T17:27:16Z")
I am new to ElasticSearch and have been trying to write Java EE to bring data in from an Informal DB and then run user searches on it. I have been able to get the indexing to work and am able to retrieve a specific ind… --- ## [Filebeat 32-bit crash in Windows environment](https://discuss.elastic.co/t/filebeat-32-bit-crash-in-windows-environment/58083)
**Author:** [@allenz](https://discuss.elastic.co/u/allenz)\ **Replies:** 6\ **Last updated:** [August 18, 2016, 10:27am UTC](https://discuss.elastic.co/t/filebeat-32-bit-crash-in-windows-environment/58083 "2016-08-18T10:27:11Z")
It seems the filebeat I installed in Window environment keep crashing before send any log files into logstash. currently I am using filebeat version 1.1.1 and later tested with 1.2.3 however the results are the same. … --- ## [\_grokparsefailure also after Grok Constructor](https://discuss.elastic.co/t/-grokparsefailure-also-after-grok-constructor/56178)
**Author:** [@Hans](https://discuss.elastic.co/u/Hans)\ **Replies:** 6\ **Last updated:** [July 31, 2016, 6:37am UTC](https://discuss.elastic.co/t/-grokparsefailure-also-after-grok-constructor/56178 "2016-07-31T06:37:30Z")
HI, I have a challenge that I have been trying to resolve now for some time however not making positive progress. I have logs that I would like to filter and did Incremental Grok Construct and all is matching, however wh… --- ## [Elasticsearch-mapper-attachments errors logs](https://discuss.elastic.co/t/elasticsearch-mapper-attachments-errors-logs/31390)
**Author:** [@gregv](https://discuss.elastic.co/u/gregv)\ **Replies:** 6\ **Last updated:** [October 1, 2015, 11:40am UTC](https://discuss.elastic.co/t/elasticsearch-mapper-attachments-errors-logs/31390 "2015-10-01T11:40:53Z")
Hi, I am testing attachment with elasticsearch-mapper-attachments, a simple job to import document with curl : i encountered some errors and warn : \[2015-09-29 23:49:53,013\]\[ERROR\]\[org.apache.pdfbox.filter.FlateF… --- ## [What's faster /index/\_doc/id or /index/\_search with id query](https://discuss.elastic.co/t/whats-faster-index-doc-id-or-index-search-with-id-query/211297)
**Author:** [@henryn73](https://discuss.elastic.co/u/henryn73)\ **Replies:** 3\ **Last updated:** [December 11, 2019, 9:13am UTC](https://discuss.elastic.co/t/whats-faster-index-doc-id-or-index-search-with-id-query/211297 "2019-12-11T09:13:15Z")
If you are looking for a document based on id, what is faster and why: /index/\_doc/id -\> i would think it is, but maybe under covers it is the same as /index/\_search {"query" : {"terms" : { "\_id": ..... any reason on… --- ## [Event Counts By Week Table](https://discuss.elastic.co/t/event-counts-by-week-table/191438)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 3\ **Last updated:** [July 21, 2019, 1:53pm UTC](https://discuss.elastic.co/t/event-counts-by-week-table/191438 "2019-07-21T13:53:48Z")
I've been charged with creating something called an aging chart. According to the requestor, I need to create a table with rows by week ( week 1, week 2, etc...), and then columns counting the number of events that have… --- ## [Filebeat metric](https://discuss.elastic.co/t/filebeat-metric/55661)
**Author:** [@yanjun](https://discuss.elastic.co/u/yanjun)\ **Replies:** 3\ **Last updated:** [July 26, 2016, 6:33am UTC](https://discuss.elastic.co/t/filebeat-metric/55661 "2016-07-26T06:33:49Z")
Hi, Does filebeat outputs any metrics. We 'd like to track its throughput and something like the lag offsets to the end of the files etc. --- ## [Scroll Id is too long - Java Api](https://discuss.elastic.co/t/scroll-id-is-too-long-java-api/24665)
**Author:** [@Marian\_Valero](https://discuss.elastic.co/u/Marian_Valero)\ **Replies:** 3\ **Last updated:** [July 2, 2015, 1:46pm UTC](https://discuss.elastic.co/t/scroll-id-is-too-long-java-api/24665 "2015-07-02T13:46:38Z")
I am using a search with scroll with the Java API, when I come to call the scroll for the following data through javascript, this returns me the following error: Failed to load resource: net :: ERR\_EMPTY\_RESPONSE, I have… --- ## [Mapped date field returned as string?](https://discuss.elastic.co/t/mapped-date-field-returned-as-string/4223)
**Author:** [@jacorob](https://discuss.elastic.co/u/jacorob)\ **Replies:** 3\ **Last updated:** [May 9, 2014, 1:51pm UTC](https://discuss.elastic.co/t/mapped-date-field-returned-as-string/4223 "2014-05-09T13:51:46Z")
Are date mapped fields not converted to java.lang.Date objects? I search for a document that has one field mapped to a date "properties" : { "\_value" : { "format" : "dateOptionalTime", "type" : "date" }, Whe… --- ## [Alerting on a specific time range](https://discuss.elastic.co/t/alerting-on-a-specific-time-range/266999)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 4\ **Last updated:** [March 12, 2021, 1:52pm UTC](https://discuss.elastic.co/t/alerting-on-a-specific-time-range/266999 "2021-03-12T13:52:19Z")
Hi is there a way to alert only on a specific time range? lets say office hours.... It is possible? how can I do this? --- ## [Logstash stopped processing because of an error: (SystemExit) exit](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/195393)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 5\ **Last updated:** [September 11, 2019, 4:07am UTC](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/195393 "2019-09-11T04:07:10Z")
Hello World! I'm Running Logstash on Docker | Logstash Reference \[6.8\] | Elastic and getting following error: logstash | Sending Logstash logs to /usr/share/logstash/logs which is now configured via log4j2.propertie… --- ## [\[FileBeat\] Configurer un prospectorssur un nom de fichier qui varie](https://discuss.elastic.co/t/filebeat-configurer-un-prospectorssur-un-nom-de-fichier-qui-varie/46332)
**Author:** [@Benjamin\_Carriou](https://discuss.elastic.co/u/Benjamin_Carriou)\ **Replies:** 5\ **Last updated:** [April 12, 2016, 3:16pm UTC](https://discuss.elastic.co/t/filebeat-configurer-un-prospectorssur-un-nom-de-fichier-qui-varie/46332 "2016-04-12T15:16:33Z")
Bonjour, Est-il possible de configurer un prospectors sur un path dont le nom varie (date du jour) ? paths: - /opt/zimbra/log/access\_log.2016-04-04 Je pense que oui mais pas trouvé comment faire \[:slight\_sm… --- ## [Kibana 7.9.0 - 403 Forbidden on /api/kibana/settings](https://discuss.elastic.co/t/kibana-7-9-0-403-forbidden-on-api-kibana-settings/246201)
**Author:** [@cotjoey](https://discuss.elastic.co/u/cotjoey)\ **Replies:** 2\ **Last updated:** [August 26, 2020, 8:06pm UTC](https://discuss.elastic.co/t/kibana-7-9-0-403-forbidden-on-api-kibana-settings/246201 "2020-08-26T20:06:31Z")
I've been struggling trying to set up a read-only user for Kibana. It seems like I have it working now, with the exception of an error popping up in the Discover app. It seems to be exactly the issue listed here: https:/… --- ## [Qucikstart - fail to get API group resources and unable to crate controller manager](https://discuss.elastic.co/t/qucikstart-fail-to-get-api-group-resources-and-unable-to-crate-controller-manager/218198)
**Author:** [@Autumn](https://discuss.elastic.co/u/Autumn)\ **Replies:** 2\ **Last updated:** [February 7, 2020, 1:39pm UTC](https://discuss.elastic.co/t/qucikstart-fail-to-get-api-group-resources-and-unable-to-crate-controller-manager/218198 "2020-02-07T13:39:11Z")
Hi all! I'm trying to deploy the ECK following the quick start document. Running the Step 1: Install custom resource definitions and the operator with its RBAC rules: However, the logging show me that it fails to get AP… --- ## [Useragent filter really slow](https://discuss.elastic.co/t/useragent-filter-really-slow/24759)
**Author:** [@Gabriel\_Rosca](https://discuss.elastic.co/u/Gabriel_Rosca)\ **Replies:** 2\ **Last updated:** [July 2, 2015, 1:46pm UTC](https://discuss.elastic.co/t/useragent-filter-really-slow/24759 "2015-07-02T13:46:20Z")
Hello logstash community. I have a problem with useragent filter. It is pailful slow. :(( Works but really slow. Same problem with the cidr filter. If I use the filter I may get maybe 3 events per second if I am luck… --- ## [NoSuchFileException: /usr/share/elasticsearch/config](https://discuss.elastic.co/t/nosuchfileexception-usr-share-elasticsearch-config/129056)
**Author:** [@souf\_el\_badraoui](https://discuss.elastic.co/u/souf_el_badraoui)\ **Replies:** 0\ **Last updated:** [April 23, 2018, 8:24am UTC](https://discuss.elastic.co/t/nosuchfileexception-usr-share-elasticsearch-config/129056 "2018-04-23T08:24:19Z")
Hello, ES 5.6.5 fails starting with systemd in Red hat and show the following error main ERROR Could not register mbeans java.security.Acces at java.security.AccessControlContext.checkPermission(AccessControlConte a… --- ## [Actual use of join type field](https://discuss.elastic.co/t/actual-use-of-join-type-field/327627)
**Author:** [@SheetalM](https://discuss.elastic.co/u/SheetalM)\ **Replies:** 5\ **Last updated:** [March 15, 2023, 12:39pm UTC](https://discuss.elastic.co/t/actual-use-of-join-type-field/327627 "2023-03-15T12:39:28Z")
Hello Experts, We have a use case with a one-to-many relation scenario where number of documents of a child type are huge for one parent type of document. Something similar to a log store where all the events/messages f… --- ## [Filebeat read log slow when registry file is too large](https://discuss.elastic.co/t/filebeat-read-log-slow-when-registry-file-is-too-large/184184)
**Author:** [@jasper-zhang](https://discuss.elastic.co/u/jasper-zhang)\ **Replies:** 8\ **Last updated:** [June 6, 2019, 11:24am UTC](https://discuss.elastic.co/t/filebeat-read-log-slow-when-registry-file-is-too-large/184184 "2019-06-06T11:24:51Z")
Hello, When the registry file is about 13M, read log is about 1w/s. But when I remove the registry file then restart filebeat, read log grow up to 7w/s. can the size of registry file affect reading speed ? --- ## [Not able to setup elasticsearch using docker](https://discuss.elastic.co/t/not-able-to-setup-elasticsearch-using-docker/164196)
**Author:** [@kartik\_pandey](https://discuss.elastic.co/u/kartik_pandey)\ **Replies:** 8\ **Last updated:** [January 17, 2019, 10:22pm UTC](https://discuss.elastic.co/t/not-able-to-setup-elasticsearch-using-docker/164196 "2019-01-17T22:22:54Z")
I am following this to setup elastic search. But it is not working. Console output when I visit localhost:9200 it say's site cant be reached. I am on windows 10 --- ## [Pipeline worker error in logstash config](https://discuss.elastic.co/t/pipeline-worker-error-in-logstash-config/285496)
**Author:** [@kriss332](https://discuss.elastic.co/u/kriss332)\ **Replies:** 2\ **Last updated:** [September 29, 2021, 5:24pm UTC](https://discuss.elastic.co/t/pipeline-worker-error-in-logstash-config/285496 "2021-09-29T17:24:05Z")
Hello all. I am trying to parse a VPN device logs. t send data in KV format. The data received as I see in netcat's output is- \<13\>Sep 29 21:52:00 172.xx.43.101 488 \<134\>1 2021-09-29T21:52:00+05:30 vpn.com2 PulseSecure… --- ## [Searching/filtering by enums/tags/categories?](https://discuss.elastic.co/t/searching-filtering-by-enums-tags-categories/195500)
**Author:** [@Andrew\_Bennett](https://discuss.elastic.co/u/Andrew_Bennett)\ **Replies:** 6\ **Last updated:** [August 20, 2019, 6:33pm UTC](https://discuss.elastic.co/t/searching-filtering-by-enums-tags-categories/195500 "2019-08-20T18:33:31Z")
Hi all. I've got a large set of food dishes. I'd like to tag each dish with things like 'vegetarian', 'vegan', 'gluten free', etc. and be able to search by these tags. I.e., if a user wants to search 'pasta' as their qu… --- ## [ES 5.2.2 and now every so often a DN node goes offline and then recovers?](https://discuss.elastic.co/t/es-5-2-2-and-now-every-so-often-a-dn-node-goes-offline-and-then-recovers/78324)
**Author:** [@somerandomguy](https://discuss.elastic.co/u/somerandomguy)\ **Replies:** 6\ **Last updated:** [April 1, 2017, 3:09pm UTC](https://discuss.elastic.co/t/es-5-2-2-and-now-every-so-often-a-dn-node-goes-offline-and-then-recovers/78324 "2017-04-01T15:09:25Z")
Hi. I have an ES topology that consists the following: 2 x Master node 2 x Data node 2 x Ingest node 5.2.2 On Ubuntu 16.0.4 that was recently upgraded from 2.3.4 (over the weekend and had no problems before with the… --- ## [Logstash Filter incoming data](https://discuss.elastic.co/t/logstash-filter-incoming-data/279248)
**Author:** [@Hamza\_El\_Aouane](https://discuss.elastic.co/u/Hamza_El_Aouane)\ **Replies:** 7\ **Last updated:** [July 21, 2021, 5:21pm UTC](https://discuss.elastic.co/t/logstash-filter-incoming-data/279248 "2021-07-21T17:21:27Z")
Hello Everyone, I hope you are all doing well. I am sorry to come here with this question but I could really use some experts help to solve an issue I am facing with Logstash. I will explain my situation as in detail a… [Previous page](https://discuss.elastic.co/top.md?page=768&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=770&per_page=50&period=all)