# Top **URL:** https://discuss.elastic.co/top.md?page=773&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 774 --- ## [How to filter out duplicate documents across multiple types?](https://discuss.elastic.co/t/how-to-filter-out-duplicate-documents-across-multiple-types/19636)
**Author:** [@anand](https://discuss.elastic.co/u/anand)\ **Replies:** 2\ **Last updated:** [September 5, 2014, 8:58pm UTC](https://discuss.elastic.co/t/how-to-filter-out-duplicate-documents-across-multiple-types/19636 "2014-09-05T20:58:18Z")
We have certain documents stored across multiple types with translated values, for example, US and ES types has same document but with different values in title fields. Example: US: { "title":"Manning: Spring i… --- ## [Faire un lien entre deux index](https://discuss.elastic.co/t/faire-un-lien-entre-deux-index/136810)
**Author:** [@hamidou830](https://discuss.elastic.co/u/hamidou830)\ **Replies:** 6\ **Last updated:** [July 2, 2018, 12:38pm UTC](https://discuss.elastic.co/t/faire-un-lien-entre-deux-index/136810 "2018-07-02T12:38:53Z")
Bonjour, J'ai un petit problème et je sais que Elasticsearch n'est pas vraiment adapté mais j'essaie quand même. J'ai deux index : L'un contient des infos de jobs : job\_id, salaire et niveau\_expérience L'autre des st… --- ## [OSX error install bin/kibana-plugin install x-pack](https://discuss.elastic.co/t/osx-error-install-bin-kibana-plugin-install-x-pack/88191)
**Author:** [@bargitta](https://discuss.elastic.co/u/bargitta)\ **Replies:** 6\ **Last updated:** [June 8, 2017, 9:15am UTC](https://discuss.elastic.co/t/osx-error-install-bin-kibana-plugin-install-x-pack/88191 "2017-06-08T09:15:30Z")
I use OSX with elastic search5.4.0 and kibana 5.4.1, I'm trying to install xpack for kibana, but get following errors. Any ideas? Error: end of central directory record signature not found at /Users/abc/kibana-5.4.… --- ## [Changing mappings or renaming an index](https://discuss.elastic.co/t/changing-mappings-or-renaming-an-index/2822)
**Author:** [@Clinton\_Gormley](https://discuss.elastic.co/u/Clinton_Gormley)\ **Replies:** 3\ **Last updated:** [February 20, 2010, 10:31pm UTC](https://discuss.elastic.co/t/changing-mappings-or-renaming-an-index/2822 "2010-02-20T22:31:26Z")
Hiya From what I can see, one a field has been assigned a type (either explicitly with create\_mapping or automatically by indexing a document) it is immutable. Even updating the mapping won't change that field typ… --- ## [Kibana canvas gauges](https://discuss.elastic.co/t/kibana-canvas-gauges/241480)
**Author:** [@Hugo\_Pires](https://discuss.elastic.co/u/Hugo_Pires)\ **Replies:** 2\ **Last updated:** [July 16, 2020, 4:53pm UTC](https://discuss.elastic.co/t/kibana-canvas-gauges/241480 "2020-07-16T16:53:07Z")
Hello Is it possible to create a dynamic gauge in Canvas, just like on visualisation dashboard, setting a goal from data? Thank you Hugo --- ## [Elastic 7.13.3 update to 7.13.4 --- Ouch that was an interesting bug](https://discuss.elastic.co/t/elastic-7-13-3-update-to-7-13-4-ouch-that-was-an-interesting-bug/280354)
**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\ **Replies:** 2\ **Last updated:** [August 4, 2021, 4:27pm UTC](https://discuss.elastic.co/t/elastic-7-13-3-update-to-7-13-4-ouch-that-was-an-interesting-bug/280354 "2021-08-04T16:27:42Z")
So simple version to anyone that runs a custom CA for Fleet/Endpoint integration. Using fleet to manage your agents will delete the CA certificate if you put it in the Agent folder when you deploy it initially. The agen… --- ## [How to separate bars from each other in Timelion Kibana?](https://discuss.elastic.co/t/how-to-separate-bars-from-each-other-in-timelion-kibana/192974)
**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\ **Replies:** 5\ **Last updated:** [July 31, 2019, 5:52pm UTC](https://discuss.elastic.co/t/how-to-separate-bars-from-each-other-in-timelion-kibana/192974 "2019-07-31T17:52:58Z")
I would like to see the red and blue bars next to each other and not stacked on top of each other. Note: doing .bars(stack=false) didn't work for me. Timelion code: .es(index=stage-athena-aux\*, metric=avg:duration\_tim… --- ## [Error while installing X-Pack license](https://discuss.elastic.co/t/error-while-installing-x-pack-license/68431)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 5\ **Last updated:** [December 8, 2016, 1:32pm UTC](https://discuss.elastic.co/t/error-while-installing-x-pack-license/68431 "2016-12-08T13:32:17Z")
Hi, When I try to install X-Pack license using the command; curl -XPUT -u user 'http://localhost:9200/\_license&acknowledge=true' -d @/license/license.json I am getting the following error; {"error":{"root\_cause":\[… --- ## [Filebeat might erroneously hold on to the file descriptor?](https://discuss.elastic.co/t/filebeat-might-erroneously-hold-on-to-the-file-descriptor/104957)
**Author:** [@filebeater](https://discuss.elastic.co/u/filebeater)\ **Replies:** 4\ **Last updated:** [October 25, 2017, 12:29pm UTC](https://discuss.elastic.co/t/filebeat-might-erroneously-hold-on-to-the-file-descriptor/104957 "2017-10-25T12:29:43Z")
Hello, Filebeat experts, we just encountered a disk usage issue after deploying filebeat to production a few weeks. We set up filebeat to ship log files (file with extension .log) to kafka. The log files are rotated e… --- ## [Elasticsearch LXC on Ubuntu 14.04 and recomended settings](https://discuss.elastic.co/t/elasticsearch-lxc-on-ubuntu-14-04-and-recomended-settings/15597)
**Author:** [@engel\_der](https://discuss.elastic.co/u/engel_der)\ **Replies:** 4\ **Last updated:** [February 5, 2014, 9:56am UTC](https://discuss.elastic.co/t/elasticsearch-lxc-on-ubuntu-14-04-and-recomended-settings/15597 "2014-02-05T09:56:39Z")
Hi, we are setting up a Elasticsearch 1.0 (RC2) Cluster and I think I need some help were to start with (settings related). We have got 6 physical server with 265GB RAM and 2TB local SAS storage (seperated in two … --- ## [Xpack.monitoring.history.duration with a value other than "7d" does not work](https://discuss.elastic.co/t/xpack-monitoring-history-duration-with-a-value-other-than-7d-does-not-work/238134)
**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\ **Replies:** 1\ **Last updated:** [June 22, 2020, 7:16pm UTC](https://discuss.elastic.co/t/xpack-monitoring-history-duration-with-a-value-other-than-7d-does-not-work/238134 "2020-06-22T19:16:27Z")
Hi, Referring to the documentation: https://www.elastic.co/guide/en/elasticsearch/reference/current/monitoring-settings.html We have value: xpack.monitoring.history.duration (default 7d). I can execute query: PUT \_c… --- ## [Unable to setup elastic stack in docker with tls enabled](https://discuss.elastic.co/t/unable-to-setup-elastic-stack-in-docker-with-tls-enabled/212734)
**Author:** [@pythonredhat](https://discuss.elastic.co/u/pythonredhat)\ **Replies:** 7\ **Last updated:** [December 21, 2019, 3:20pm UTC](https://discuss.elastic.co/t/unable-to-setup-elastic-stack-in-docker-with-tls-enabled/212734 "2019-12-21T15:20:22Z")
Followed these instructions verbatim: https://www.elastic.co/guide/en/elastic-stack-get-started/7.5/get-started-docker.html#get-started-docker-tls This issue is when you attempt to setup passwords this is the error rec… --- ## [How to store .pdf or .txt file and search in it using Java](https://discuss.elastic.co/t/how-to-store-pdf-or-txt-file-and-search-in-it-using-java/304025)
**Author:** [@Tasdiq\_Shaikh](https://discuss.elastic.co/u/Tasdiq_Shaikh)\ **Replies:** 8\ **Last updated:** [May 9, 2022, 11:03am UTC](https://discuss.elastic.co/t/how-to-store-pdf-or-txt-file-and-search-in-it-using-java/304025 "2022-05-09T11:03:21Z")
I am trying to save and search a .txt and .pdf file in Elasticsearch using Java code. Maybe i'm able to save the file but unable to fetch it. My controller @GetMapping("/finals") public String trail1() throws IOExcept… --- ## [Installing specific elasticsearch version in Homebrew - Mac OS](https://discuss.elastic.co/t/installing-specific-elasticsearch-version-in-homebrew-mac-os/278586)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 3\ **Last updated:** [July 22, 2021, 6:33am UTC](https://discuss.elastic.co/t/installing-specific-elasticsearch-version-in-homebrew-mac-os/278586 "2021-07-22T06:33:12Z")
Hi all, I'm having trouble in installing specific versions of elasticsearch in mac OS using Homebrew. In Homebrew, I can only install the latest version which is available. If I want to install a version eg: 7.13.2 , … --- ## [Installing Elastic Search on shared webhosting](https://discuss.elastic.co/t/installing-elastic-search-on-shared-webhosting/262046)
**Author:** [@MyGIS](https://discuss.elastic.co/u/MyGIS)\ **Replies:** 3\ **Last updated:** [January 25, 2021, 1:54am UTC](https://discuss.elastic.co/t/installing-elastic-search-on-shared-webhosting/262046 "2021-01-25T01:54:36Z")
Hello, Is it possible to installed Elasticsearch on a shared web hosting such as Hostgator or Bluehost? Thanks. --- ## [Static lookup in Visualization](https://discuss.elastic.co/t/static-lookup-in-visualization/230934)
**Author:** [@rohitarora275](https://discuss.elastic.co/u/rohitarora275)\ **Replies:** 3\ **Last updated:** [May 5, 2020, 1:21pm UTC](https://discuss.elastic.co/t/static-lookup-in-visualization/230934 "2020-05-05T13:21:37Z")
Hi Team , I am trying to use static lookup field in Visualization include tag but I am not get appropriate result. I have written around static lookup value in INSTANCE field. However if I use the output in include, I a… --- ## [Elasticsearch and Curator restore action for .kibana/.kibana\_n indices](https://discuss.elastic.co/t/elasticsearch-and-curator-restore-action-for-kibana-kibana-n-indices/224350)
**Author:** [@danksim](https://discuss.elastic.co/u/danksim)\ **Replies:** 3\ **Last updated:** [March 24, 2020, 3:58am UTC](https://discuss.elastic.co/t/elasticsearch-and-curator-restore-action-for-kibana-kibana-n-indices/224350 "2020-03-24T03:58:00Z")
Docker image versions: Elasticsearch 6.8.2 Kibana 6.8.2 Before I ask the Curator question, I have a few questions about Elasticsearch and .kibana/.kibana\_n indices migration when Kibana starts. Note: Before the Kibana… --- ## [Kibana degraded mode](https://discuss.elastic.co/t/kibana-degraded-mode/183730)
**Author:** [@dariuszsq](https://discuss.elastic.co/u/dariuszsq)\ **Replies:** 3\ **Last updated:** [June 3, 2019, 12:14am UTC](https://discuss.elastic.co/t/kibana-degraded-mode/183730 "2019-06-03T00:14:46Z")
Hello, Today i have installed the newest version of kibana and elasticsearch but my "GUI" looks different than on elastic webpage. Should i enable any additional option ?! I have checked and all x-pack features / fi… --- ## [How to install the basic License](https://discuss.elastic.co/t/how-to-install-the-basic-license/131586)
**Author:** [@akml\_kk](https://discuss.elastic.co/u/akml_kk)\ **Replies:** 3\ **Last updated:** [May 14, 2018, 5:01am UTC](https://discuss.elastic.co/t/how-to-install-the-basic-license/131586 "2018-05-14T05:01:57Z")
Hello, I need x-pack so i need to install the free basic license. in the subscriptions, i can download my license but how to install it and make it functional ? --- ## [Elasticsearch-setup-passwords connection issue](https://discuss.elastic.co/t/elasticsearch-setup-passwords-connection-issue/279254)
**Author:** [@Aboli\_77](https://discuss.elastic.co/u/Aboli_77)\ **Replies:** 6\ **Last updated:** [July 27, 2021, 11:46am UTC](https://discuss.elastic.co/t/elasticsearch-setup-passwords-connection-issue/279254 "2021-07-27T11:46:25Z")
Hello Team, I tried to run the following command: ./elasticsearch-setup-passwords auto -u "https://XXXXXXX:9200" But got the following error: Connection failure to: https://XXXXXXX:9200/\_xpack/security/\_authenticate?… --- ## [Unable to use mounted elastic-agent.yml if running in elastic-agent container](https://discuss.elastic.co/t/unable-to-use-mounted-elastic-agent-yml-if-running-in-elastic-agent-container/239202)
**Author:** [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\ **Replies:** 6\ **Last updated:** [July 8, 2020, 1:41pm UTC](https://discuss.elastic.co/t/unable-to-use-mounted-elastic-agent-yml-if-running-in-elastic-agent-container/239202 "2020-07-08T13:41:21Z")
Hi, I am using elastic-agent-7.9.0-SNAPSHOT docker image (also tested and encountered the same error with elastic-agent-8.0.0-SNAPSHOT docker image). My docker-compose.yml: version: '3.7' services: elastic-agent: … --- ## [All data nodes died on the cluster](https://discuss.elastic.co/t/all-data-nodes-died-on-the-cluster/172443)
**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Replies:** 6\ **Last updated:** [March 20, 2019, 11:48pm UTC](https://discuss.elastic.co/t/all-data-nodes-died-on-the-cluster/172443 "2019-03-20T23:48:35Z")
For the very first time after upgrading to 5.6.8.2 version (in last 3 months), we observed a strange and fatal error on production in elasticsearch cluster. What happened: All dedicated data nodes died one after anothe… --- ## [Parent/Child functionality](https://discuss.elastic.co/t/parent-child-functionality/2045)
**Author:** [@MikeB](https://discuss.elastic.co/u/MikeB)\ **Replies:** 6\ **Last updated:** [June 9, 2015, 3:49pm UTC](https://discuss.elastic.co/t/parent-child-functionality/2045 "2015-06-09T15:49:43Z")
I'm trying to get some more information about Parent Child (\_parent) mapping functionality in elasticsearch, I have not been able to find a definitive answer to these questions: Can parent child mappings be nested to m… --- ## [Field data loading is forbidden on client](https://discuss.elastic.co/t/field-data-loading-is-forbidden-on-client/36270)
**Author:** [@Darius\_Seroka](https://discuss.elastic.co/u/Darius_Seroka)\ **Replies:** 2\ **Last updated:** [December 5, 2015, 7:59am UTC](https://discuss.elastic.co/t/field-data-loading-is-forbidden-on-client/36270 "2015-12-05T07:59:59Z")
I have been away from using the ELK stack for over a year and there seems to have been a lot of changes. I have a job to bulk process about 20k of files which I have managed to get ELK to ingest but now that I need to pr… --- ## [Diagnosing "ElasticSearchParseException\[Failed to derive xcontent from \]" error](https://discuss.elastic.co/t/diagnosing-elasticsearchparseexception-failed-to-derive-xcontent-from-error/4144)
**Author:** [@skaffman\_2](https://discuss.elastic.co/u/skaffman_2)\ **Replies:** 2\ **Last updated:** [March 22, 2011, 12:17pm UTC](https://discuss.elastic.co/t/diagnosing-elasticsearchparseexception-failed-to-derive-xcontent-from-error/4144 "2011-03-22T12:17:23Z")
Whilst updating a mapping document using the REST API, I suddenly started getting a 500 error from the server when PUTting the document: {"error":"ElasticSearchParseException\[Failed to derive xcontent from \]","statu… --- ## [Count in C# NEST for ES 5.5](https://discuss.elastic.co/t/count-in-c-nest-for-es-5-5/98525)
**Author:** [@mwdoerner](https://discuss.elastic.co/u/mwdoerner)\ **Replies:** 1\ **Last updated:** [August 28, 2017, 11:31am UTC](https://discuss.elastic.co/t/count-in-c-nest-for-es-5-5/98525 "2017-08-28T11:31:21Z")
Hi, I’m writing a simple C# app that uses the NEST client for retrieving data from a local Elasticsearch instance. I have a small problem trying to get the number of all indexed (over all indices) documents. There is so… --- ## [Errors with elasticsearch-users useradd -- 7.17.1](https://discuss.elastic.co/t/errors-with-elasticsearch-users-useradd-7-17-1/312070)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 4\ **Last updated:** [August 15, 2022, 11:44pm UTC](https://discuss.elastic.co/t/errors-with-elasticsearch-users-useradd-7-17-1/312070 "2022-08-15T23:44:23Z")
I am trying to add a user to the file realm to recover from the elastic user failing to login -- I have no idea why logins started to fail. From the manual I understand that the file realm is active by default so I don… --- ## [Aggregationの結果をfilterしたい](https://discuss.elastic.co/t/aggregation-filter/76357)
**Author:** [@jbl4232000](https://discuss.elastic.co/u/jbl4232000)\ **Replies:** 4\ **Last updated:** [February 25, 2017, 2:38am UTC](https://discuss.elastic.co/t/aggregation-filter/76357 "2017-02-25T02:38:19Z")
Aggregationの対象をfilterするのではなく、Aggregationした結果をfilterしたいのですが可能でしょうか？ SQL脳でもうしわけないですが、副問合せした結果にあるterms等で完全一致した複数の条件でしぼりたいというのが要件となります。 --- ## [Active Directory integration](https://discuss.elastic.co/t/active-directory-integration/38488)
**Author:** [@bibikmik](https://discuss.elastic.co/u/bibikmik)\ **Replies:** 4\ **Last updated:** [January 11, 2016, 12:56pm UTC](https://discuss.elastic.co/t/active-directory-integration/38488 "2016-01-11T12:56:25Z")
Hi, Community. Here is elasticsearch.yml: shield.authc.realms.esusers.type: esusers shield.authc.realms.esusers.order: 0 shield.authc.realms.esusers.enabled: true shield.authc.realms.active\_directory1.type: active\_di… --- ## [Filtering Index or custom rules for Elastic ML anomaly detection](https://discuss.elastic.co/t/filtering-index-or-custom-rules-for-elastic-ml-anomaly-detection/275326)
**Author:** [@elizobee](https://discuss.elastic.co/u/elizobee)\ **Replies:** 5\ **Last updated:** [June 11, 2021, 4:22pm UTC](https://discuss.elastic.co/t/filtering-index-or-custom-rules-for-elastic-ml-anomaly-detection/275326 "2021-06-11T16:22:32Z")
I would like to run anomaly detection on a subset of an index. It looks like I am supposed to set up a filter list containing the values I wish to select, and then create a custom rule to associate a field with a filter… --- ## [Getting last document per specific field](https://discuss.elastic.co/t/getting-last-document-per-specific-field/300564)
**Author:** [@Malo\_Maisonneuve](https://discuss.elastic.co/u/Malo_Maisonneuve)\ **Replies:** 3\ **Last updated:** [March 28, 2022, 8:15am UTC](https://discuss.elastic.co/t/getting-last-document-per-specific-field/300564 "2022-03-28T08:15:22Z")
Hi, I'm collecting logs from multiple devices, and I'm trying to retrieve the last log from each device. For instance, I'd like to have : "deviceId": 4568 =\> {content of last log according to timestamp for this devic… --- ## [Metricbeat for Solaris x86](https://discuss.elastic.co/t/metricbeat-for-solaris-x86/199881)
**Author:** [@ConnorRies](https://discuss.elastic.co/u/ConnorRies)\ **Replies:** 3\ **Last updated:** [September 24, 2019, 9:30pm UTC](https://discuss.elastic.co/t/metricbeat-for-solaris-x86/199881 "2019-09-24T21:30:58Z")
Hey guys, Was just curious if it was possible to successfully run Metricbeat on Solaris x86 or if that was going to be a significant effort. I was able to build Filebeat from source for Solaris 11.3 (x86) just fine, bu… --- ## [Gelfd failed to parse a message](https://discuss.elastic.co/t/gelfd-failed-to-parse-a-message/89462)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 3\ **Last updated:** [June 16, 2017, 5:24am UTC](https://discuss.elastic.co/t/gelfd-failed-to-parse-a-message/89462 "2017-06-16T05:24:21Z")
Hello, I have a gelf input gelf { host =\> "0.0.0.0" port =\> 555 type =\> "gelf" codec =\> "json" } } I am getting this error: \[2017-06-14T20:53:03,518\]\[WARN \]\[logstash.input… --- ## [Export from elasticsearch to csv problem. Where I am wrong?](https://discuss.elastic.co/t/export-from-elasticsearch-to-csv-problem-where-i-am-wrong/65558)
**Author:** [@Swina\_Allen](https://discuss.elastic.co/u/Swina_Allen)\ **Replies:** 3\ **Last updated:** [November 15, 2016, 7:18am UTC](https://discuss.elastic.co/t/export-from-elasticsearch-to-csv-problem-where-i-am-wrong/65558 "2016-11-15T07:18:44Z")
Hi have the following logstash config file: input { elasticsearch { hosts =\> \["localhost"\] index =\> "myindex" type =\> "mytype" query =\> '{"query" : { "match\_all" : {} }}' } } output { csv … --- ## [Failed to connect to ip-myip port 80: Connection refused](https://discuss.elastic.co/t/failed-to-connect-to-ip-myip-port-80-connection-refused/182780)
**Author:** [@Hooman\_Bahreini](https://discuss.elastic.co/u/Hooman_Bahreini)\ **Replies:** 7\ **Last updated:** [May 26, 2019, 5:41am UTC](https://discuss.elastic.co/t/failed-to-connect-to-ip-myip-port-80-connection-refused/182780 "2019-05-26T05:41:22Z")
I have installed elasticsearch 7 on Ubuntu 18. I have 3 nodes, all master eligible. This is my configuration: First server: 172.31.1.1 # /etc/elasticsearch/elasticsearch.yml cluster.name: es-cluster node.name: es-1 p… --- ## [Stopping pipeline after sending data](https://discuss.elastic.co/t/stopping-pipeline-after-sending-data/84563)
**Author:** [@ulysse07](https://discuss.elastic.co/u/ulysse07)\ **Replies:** 2\ **Last updated:** [May 15, 2017, 3:39pm UTC](https://discuss.elastic.co/t/stopping-pipeline-after-sending-data/84563 "2017-05-15T15:39:26Z")
Hi everyone, When I launch logstash on Windows with the config file below, the pipeline is created, the data are send to elasticsearch but the pipeline stopped few seconds after. I ran it in the verbose mod et I have o… --- ## [Change color on kibana dashboard](https://discuss.elastic.co/t/change-color-on-kibana-dashboard/69738)
**Author:** [@anonymous4](https://discuss.elastic.co/u/anonymous4)\ **Replies:** 2\ **Last updated:** [December 22, 2016, 7:59pm UTC](https://discuss.elastic.co/t/change-color-on-kibana-dashboard/69738 "2016-12-22T19:59:30Z")
Hi, Could not find the option to change background color of kibana dashboard. There are only two options dark theme or white theme. What if we want to any other color in background of dashboard.How to do that? --- ## [Logstash - Saving Soap/Rest Request](https://discuss.elastic.co/t/logstash-saving-soap-rest-request/36912)
**Author:** [@rakesh76](https://discuss.elastic.co/u/rakesh76)\ **Replies:** 2\ **Last updated:** [December 11, 2015, 3:21pm UTC](https://discuss.elastic.co/t/logstash-saving-soap-rest-request/36912 "2015-12-11T15:21:37Z")
Hi I am very new to elastic search and logstash so need guidance. 1) We are having different environment e.g dev1, dev2, test, For each environment there is log4 log file which contains soap/rest request. 2… --- ## [Help with Setting up new Index/ dashboards Filebeat 7.1.1 and logstash indexes](https://discuss.elastic.co/t/help-with-setting-up-new-index-dashboards-filebeat-7-1-1-and-logstash-indexes/185405)
**Author:** [@Lee\_Lilleorg-Meilleu](https://discuss.elastic.co/u/Lee_Lilleorg-Meilleu)\ **Replies:** 6\ **Last updated:** [June 12, 2019, 1:46pm UTC](https://discuss.elastic.co/t/help-with-setting-up-new-index-dashboards-filebeat-7-1-1-and-logstash-indexes/185405 "2019-06-12T13:46:55Z")
Dear Support forum, I have upgraded my ELK to 7.1.1 and wanted to use the plugins and dashboards that filbeat ships with natively however I am unable to get the index to stay consistant. When using file beat and the se… --- ## [Shards will be relocated away from this node](https://discuss.elastic.co/t/shards-will-be-relocated-away-from-this-node/86044)
**Author:** [@ajoealex](https://discuss.elastic.co/u/ajoealex)\ **Replies:** 6\ **Last updated:** [May 17, 2017, 7:53am UTC](https://discuss.elastic.co/t/shards-will-be-relocated-away-from-this-node/86044 "2017-05-17T07:53:15Z")
I am getting an error while installing elasticsearch-5.4.0. I already have elasticsearch-2.3.3 in my system. Disk space is 29 GB free. What will be the issue? Error \[2017-05-17T01:19:32,724\]\[WARN \]\[o.e.c.r.a.DiskThres… --- ## [Do we have to install new agent for every new host for Fleet](https://discuss.elastic.co/t/do-we-have-to-install-new-agent-for-every-new-host-for-fleet/346846)
**Author:** [@Umang\_Pachaury](https://discuss.elastic.co/u/Umang_Pachaury)\ **Replies:** 2\ **Last updated:** [November 10, 2023, 3:34pm UTC](https://discuss.elastic.co/t/do-we-have-to-install-new-agent-for-every-new-host-for-fleet/346846 "2023-11-10T15:34:42Z")
I was currently exploring regarding elasticsearch fleet and I set up a basic fleet server and a enrolled an elastic-agent on one machine, for example, "machine-A" with a agent policy: "p1", Agent policy p1 is configured … --- ## [Parse log using logstash and make ecs format](https://discuss.elastic.co/t/parse-log-using-logstash-and-make-ecs-format/251980)
**Author:** [@111387](https://discuss.elastic.co/u/111387)\ **Replies:** 4\ **Last updated:** [October 15, 2020, 6:36pm UTC](https://discuss.elastic.co/t/parse-log-using-logstash-and-make-ecs-format/251980 "2020-10-15T18:36:37Z")
i Receiving WAF(Web Application FireWall) log, Network Scan Result log file(xml) And try to send this log to ElasticSearch using logstash i want to parse this log according to ECS Format. but, "https://github.com/elas… --- ## [Turn Packetbeat IP data from String to IP field type](https://discuss.elastic.co/t/turn-packetbeat-ip-data-from-string-to-ip-field-type/51546)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 4\ **Last updated:** [June 1, 2016, 2:27pm UTC](https://discuss.elastic.co/t/turn-packetbeat-ip-data-from-string-to-ip-field-type/51546 "2016-06-01T14:27:54Z")
I have been working on logstash to read packetbeat data, however, 90% of the data are strings. I would wanna know how can I turn the fields related to IP address back into the data field as IP. One of the filters I hav… --- ## [Unable to change index off default logstash-\*](https://discuss.elastic.co/t/unable-to-change-index-off-default-logstash/47989)
**Author:** [@kprime](https://discuss.elastic.co/u/kprime)\ **Replies:** 5\ **Last updated:** [April 25, 2016, 1:31pm UTC](https://discuss.elastic.co/t/unable-to-change-index-off-default-logstash/47989 "2016-04-25T13:31:51Z")
Hello, I am trying to get logstash to not use the default index but it isn't working for me. I have a JSON template that is successful updating in ES but logstash keeps trying to use the default index and parsing error… --- ## [Convert Microseconds to Milliseconds](https://discuss.elastic.co/t/convert-microseconds-to-milliseconds/169453)
**Author:** [@jwilson-chess](https://discuss.elastic.co/u/jwilson-chess)\ **Replies:** 3\ **Last updated:** [February 21, 2019, 5:05pm UTC](https://discuss.elastic.co/t/convert-microseconds-to-milliseconds/169453 "2019-02-21T17:05:57Z")
I have the following ruby code to do a conversion: ruby { code =\> "event.set('redis.slowlog.duration.ms', event.get('redis.slowlog.duration.us').to\_f / 1000)" } But it doesn't seem to produce any output: I've tr… --- ## [Filebeat: Error on Windows\* with SSL Certificates](https://discuss.elastic.co/t/filebeat-error-on-windows-with-ssl-certificates/134559)
**Author:** [@SimonSays4223](https://discuss.elastic.co/u/SimonSays4223)\ **Replies:** 3\ **Last updated:** [June 5, 2018, 9:24am UTC](https://discuss.elastic.co/t/filebeat-error-on-windows-with-ssl-certificates/134559 "2018-06-05T09:24:05Z")
Hello @all, I'm trying to configure filebeat on a Win7 and Win10 machine with SSL-Certificates. After configuring it as described: output.logstash hosts: \["mylogstaship:myport"\] ssl.certificate\_authorities… --- ## [Logstash does not start on windows 10](https://discuss.elastic.co/t/logstash-does-not-start-on-windows-10/121583)
**Author:** [@srini724](https://discuss.elastic.co/u/srini724)\ **Replies:** 3\ **Last updated:** [March 6, 2018, 10:36am UTC](https://discuss.elastic.co/t/logstash-does-not-start-on-windows-10/121583 "2018-03-06T10:36:19Z")
Hi - I have logstash installed on windows 10 laptop.When I try to execute logstash using the command below , nothing happens and all see is the message below. logstash -f logstash.conf --config.test\_and\_exit warning: … --- ## [Correct grok pattern?](https://discuss.elastic.co/t/correct-grok-pattern/41090)
**Author:** [@trekr5](https://discuss.elastic.co/u/trekr5)\ **Replies:** 3\ **Last updated:** [February 9, 2016, 6:53pm UTC](https://discuss.elastic.co/t/correct-grok-pattern/41090 "2016-02-09T18:53:36Z")
Hello, I have the following grok pattern: (?\\d{4}/\\d{2}/\\d{2} \\d{2}:\\d{2}:\\d{2}) \[%{DATA:err\_severity}\] (%{NUMBER:pid:int}#%{NUMBER}: \*%{NUMBER}|\*%{NUMBER}) %{DATA:err\_message}(?:, client: (?%{IP}|%{HOSTNAME}))(?:, s… --- ## [How do I measure/monitor my logstash servers performance?](https://discuss.elastic.co/t/how-do-i-measure-monitor-my-logstash-servers-performance/23879)
**Author:** [@Bruce\_Lysik](https://discuss.elastic.co/u/Bruce_Lysik)\ **Replies:** 3\ **Last updated:** [June 22, 2015, 3:24pm UTC](https://discuss.elastic.co/t/how-do-i-measure-monitor-my-logstash-servers-performance/23879 "2015-06-22T15:24:27Z")
Hi, With logstash version 1.5.1, my crashing issues went away. Great! Now I'd like to see about making sure my logstash cluster is sized correctly. Currently have a number of logstash servers behind a DSR hardware … --- ## [\[Kubernetes Autodiscover 7.6.2\] Error creating runner from config: No paths were defined for input accessing config](https://discuss.elastic.co/t/kubernetes-autodiscover-7-6-2-error-creating-runner-from-config-no-paths-were-defined-for-input-accessing-config/229829)
**Author:** [@scriptdb](https://discuss.elastic.co/u/scriptdb)\ **Replies:** 3\ **Last updated:** [May 7, 2020, 7:18am UTC](https://discuss.elastic.co/t/kubernetes-autodiscover-7-6-2-error-creating-runner-from-config-no-paths-were-defined-for-input-accessing-config/229829 "2020-05-07T07:18:43Z")
Hello, I'm running filebeat 7.6.2 on AKS with the following configuration: filebeatConfig: filebeat.yml: | filebeat.autodiscover: providers: - type: kubernetes hints.enabled: false … [Previous page](https://discuss.elastic.co/top.md?page=772&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=774&per_page=50&period=all)