# Top **URL:** https://discuss.elastic.co/top.md?page=774&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 775 --- ## [Ingest-attachment not found](https://discuss.elastic.co/t/ingest-attachment-not-found/322150)
**Author:** [@WhatCouldGoWrong](https://discuss.elastic.co/u/WhatCouldGoWrong)\ **Replies:** 7\ **Last updated:** [December 29, 2022, 2:53pm UTC](https://discuss.elastic.co/t/ingest-attachment-not-found/322150 "2022-12-29T14:53:08Z")
Hi, I'm trying to install the ingest-attachment (using elasticsearch-plugin install ingest-attachment). I'm behind a proxy, so I use this line: sudo CLI\_JAVA\_OPTS="-Dhttp.proxyHost=192.168.0.1 -Dhttp.proxyPort=8080 -D… --- ## [Getaddrinfo EAI\_AGAIN elasticsearch](https://discuss.elastic.co/t/getaddrinfo-eai-again-elasticsearch/304757)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 1\ **Last updated:** [May 15, 2022, 9:39pm UTC](https://discuss.elastic.co/t/getaddrinfo-eai-again-elasticsearch/304757 "2022-05-15T21:39:12Z")
I have following problem with Kibana, which just installed with whole ELK stack on fresh system Ubuntu 20.04.4 LTS: Kibana server is not ready yet. Error in logs: {"ecs":{"version":"8.0.0"},"@timestamp":"2022-05-15T15… --- ## [Error sending data to APM server](https://discuss.elastic.co/t/error-sending-data-to-apm-server/284695)
**Author:** [@Prasanth\_V](https://discuss.elastic.co/u/Prasanth_V)\ **Replies:** 7\ **Last updated:** [September 23, 2021, 2:31am UTC](https://discuss.elastic.co/t/error-sending-data-to-apm-server/284695 "2021-09-23T02:31:57Z")
Dear Team, I'm facing the below issue, Could you please suggest me? Note: We've a sufficient disk space and CPU core. 2021-09-21 12:07:05,978 \[elastic-apm-server-reporter\] WARN co.elastic.apm.agent.report.IntakeV2Rep… --- ## [Which technology to use for custom metrics for node.js?](https://discuss.elastic.co/t/which-technology-to-use-for-custom-metrics-for-node-js/245890)
**Author:** [@DenProg](https://discuss.elastic.co/u/DenProg)\ **Replies:** 6\ **Last updated:** [August 23, 2020, 7:08am UTC](https://discuss.elastic.co/t/which-technology-to-use-for-custom-metrics-for-node-js/245890 "2020-08-23T07:08:08Z")
I want to watch some metrics in my nodejs app. Those metrics are some values (int, double, ...). I see the APM Node.js API supports only transactions and spans. So, which API should I use to watch the metrics in Kibana? … --- ## [Timestamp issue in elasticsearch!](https://discuss.elastic.co/t/timestamp-issue-in-elasticsearch/57073)
**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\ **Replies:** 6\ **Last updated:** [August 13, 2016, 5:22am UTC](https://discuss.elastic.co/t/timestamp-issue-in-elasticsearch/57073 "2016-08-13T05:22:04Z")
No idea, why elasticsearch have a 4 hours delay in storing logs. In what basis it retrives the date settings ?. When I restarted the elasticsearch cluster and checked the logs, timestamp printed on the logs too have de… --- ## [How separate the logs each device](https://discuss.elastic.co/t/how-separate-the-logs-each-device/84210)
**Author:** [@ramindia](https://discuss.elastic.co/u/ramindia)\ **Replies:** 4\ **Last updated:** [May 9, 2017, 12:50pm UTC](https://discuss.elastic.co/t/how-separate-the-logs-each-device/84210 "2017-05-09T12:50:22Z")
Hi I have Centralized SYSLOG-NG Installed in my network. I have few hundred devices in the network, including Cisco Switch, Routers, FW and other kind of devices. All the devices send logs to centralized Logging s… --- ## [Kibana For Solaris Sparc](https://discuss.elastic.co/t/kibana-for-solaris-sparc/39424)
**Author:** [@Yukti\_Kaura](https://discuss.elastic.co/u/Yukti_Kaura)\ **Replies:** 4\ **Last updated:** [January 20, 2016, 6:23am UTC](https://discuss.elastic.co/t/kibana-for-solaris-sparc/39424 "2016-01-20T06:23:06Z")
Hi , We worked hard getting ElasticSearch and Kibana ready for our Customer. However, we ended up getting Solaris Sparc machines. Unfortunately, Kibana is not compatible with Solaris. Kindly suggest if anyone has b… --- ## [Lucene query for AND operator is not working](https://discuss.elastic.co/t/lucene-query-for-and-operator-is-not-working/207333)
**Author:** [@debasish283](https://discuss.elastic.co/u/debasish283)\ **Replies:** 3\ **Last updated:** [November 11, 2019, 1:37pm UTC](https://discuss.elastic.co/t/lucene-query-for-and-operator-is-not-working/207333 "2019-11-11T13:37:44Z")
We are trying to use lucene search based on two fields below is the query we tried but we are not getting appropriate results. GET test/message/\_search { "size": 180, "\_source": \[ "host\_name", "value", "… --- ## [Bulk API to Elastic Cloud write: connection reset by peer](https://discuss.elastic.co/t/bulk-api-to-elastic-cloud-write-connection-reset-by-peer/184304)
**Author:** [@werowe](https://discuss.elastic.co/u/werowe)\ **Replies:** 5\ **Last updated:** [June 5, 2019, 8:49am UTC](https://discuss.elastic.co/t/bulk-api-to-elastic-cloud-write-connection-reset-by-peer/184304 "2019-06-05T08:49:38Z")
I am trying to bulk load to elastic cloud and get connection reset by peer error. Looks like it is getting trying to write back to my server using a 10.\* IP address. I'm not supposed to log into the command line shell … --- ## [Area chart bug](https://discuss.elastic.co/t/area-chart-bug/24298)
**Author:** [@anoban](https://discuss.elastic.co/u/anoban)\ **Replies:** 5\ **Last updated:** [June 29, 2015, 4:41pm UTC](https://discuss.elastic.co/t/area-chart-bug/24298 "2015-06-29T16:41:39Z")
I used an Area chart to compute view of some kind of usage. I have 26 lines, each one with a random max nb of tokens. I want to graph the overall nb of tokens at any one time. I use an area chart, graph the min of the … --- ## [Logstash "Received fatal alert : bad\_certificate"](https://discuss.elastic.co/t/logstash-received-fatal-alert-bad-certificate/277032)
**Author:** [@diegz](https://discuss.elastic.co/u/diegz)\ **Replies:** 1\ **Last updated:** [June 25, 2021, 8:51am UTC](https://discuss.elastic.co/t/logstash-received-fatal-alert-bad-certificate/277032 "2021-06-25T08:51:50Z")
Hello, I setup TLS on Elasticsearch, kibana, logstash and filebeat. I don't know if it comes from the configuration of logstash or filebeat. I have a cluster of 3 elastic nodes, logstash and filebeat are on node1. Th… --- ## [Error: org.postgresql.Driver not loaded](https://discuss.elastic.co/t/error-org-postgresql-driver-not-loaded/155850)
**Author:** [@elasitcboy](https://discuss.elastic.co/u/elasitcboy)\ **Replies:** 1\ **Last updated:** [November 12, 2018, 9:02am UTC](https://discuss.elastic.co/t/error-org-postgresql-driver-not-loaded/155850 "2018-11-12T09:02:58Z")
I have problem with jdbc\_driver\_library. ELK\_VERSION = 6.4.2 And I use Docker for elk. when i run: /opt/logstash# bin/logstash --path.data=/opt/logstash/ -f /etc/logstash/conf.d/simple.conf Get Error: Error: org.po… --- ## [Unable to start logstash via conf file in windows](https://discuss.elastic.co/t/unable-to-start-logstash-via-conf-file-in-windows/61500)
**Author:** [@bhat64](https://discuss.elastic.co/u/bhat64)\ **Replies:** 3\ **Last updated:** [September 26, 2016, 1:28pm UTC](https://discuss.elastic.co/t/unable-to-start-logstash-via-conf-file-in-windows/61500 "2016-09-26T13:28:45Z")
I am new to ELK. Installed ELK on Windows 7 desktop. Ensured i set the JAVA\_HOME as per the guidelines. ELK services are running, i used nssm. I have a simple logstash.conf file to read tcp as below: input { tcp { por… --- ## [Kibana and IPv6](https://discuss.elastic.co/t/kibana-and-ipv6/231478)
**Author:** [@faxm0dem](https://discuss.elastic.co/u/faxm0dem)\ **Replies:** 4\ **Last updated:** [May 20, 2020, 3:45pm UTC](https://discuss.elastic.co/t/kibana-and-ipv6/231478 "2020-05-20T15:45:33Z")
There doesn't seem to be any way to consistently configure kibana to listen on both IPv4 and IPv6 addresses of a dual-stack server. There are similar open issues which discuss the fact that kibana is parsing the server.… --- ## [Reindex API: parallel reindex requests, reindexing while still indexing to source indices](https://discuss.elastic.co/t/reindex-api-parallel-reindex-requests-reindexing-while-still-indexing-to-source-indices/92331)
**Author:** [@mpereira](https://discuss.elastic.co/u/mpereira)\ **Replies:** 4\ **Last updated:** [August 4, 2017, 12:50am UTC](https://discuss.elastic.co/t/reindex-api-parallel-reindex-requests-reindexing-while-still-indexing-to-source-indices/92331 "2017-08-04T00:50:15Z")
We upgraded ES from 2 to 5 and want to do a full reindex so that our indices are upgradable to ES6. Given clusters running on AWS D2 nodes each with hundreds of +100GB indices configured to have 1 primary and 0 replica… --- ## [Parent Aggregation Doc Count At Child Level](https://discuss.elastic.co/t/parent-aggregation-doc-count-at-child-level/206441)
**Author:** [@Justin\_Cross1](https://discuss.elastic.co/u/Justin_Cross1)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 4:41pm UTC](https://discuss.elastic.co/t/parent-aggregation-doc-count-at-child-level/206441 "2019-11-04T16:41:50Z")
I am using parent-child mapping and have a query using has\_parent where I search on parent fields and it returns the children. Then in there I also have a filter on the child fields as well. That is working good. But n… --- ## [{"statusCode":503,"error":"Service Unavailable","message":"License is not available."}](https://discuss.elastic.co/t/statuscode-503-error-service-unavailable-message-license-is-not-available/326340)
**Author:** [@nvelumani](https://discuss.elastic.co/u/nvelumani)\ **Replies:** 5\ **Last updated:** [March 22, 2023, 6:43pm UTC](https://discuss.elastic.co/t/statuscode-503-error-service-unavailable-message-license-is-not-available/326340 "2023-03-22T18:43:59Z")
Hello Team, I have installed elastic version 8.5.2 on three node cluster, it runs good. when I take down down node 2 (master -2), cluster is up and running with other two nodes. when I take down down node 3 (master -3… --- ## [Aggregation on multiple documents in same index, but relation defined in another index](https://discuss.elastic.co/t/aggregation-on-multiple-documents-in-same-index-but-relation-defined-in-another-index/63877)
**Author:** [@rohit-raj](https://discuss.elastic.co/u/rohit-raj)\ **Replies:** 5\ **Last updated:** [October 25, 2016, 3:43pm UTC](https://discuss.elastic.co/t/aggregation-on-multiple-documents-in-same-index-but-relation-defined-in-another-index/63877 "2016-10-25T15:43:57Z")
I have a requirement to aggregate fields from 2 or more document in a single index(Pages index), and the relation between these documents is defined in another index(Relations index). localhost:9200/pages/page/0277e82d… --- ## [Can i send multiple line log directly to elastic search using file beat?](https://discuss.elastic.co/t/can-i-send-multiple-line-log-directly-to-elastic-search-using-file-beat/162900)
**Author:** [@Mayurbiw](https://discuss.elastic.co/u/Mayurbiw)\ **Replies:** 8\ **Last updated:** [January 4, 2019, 11:34am UTC](https://discuss.elastic.co/t/can-i-send-multiple-line-log-directly-to-elastic-search-using-file-beat/162900 "2019-01-04T11:34:23Z")
consider this scenario - This is log file (Directly taken from example conf files in file beat reference) Exception in thread "main" java.lang.NullPointerException at com.example.myproject.Book.getTitle(Book.java:16… --- ## [\[FORBIDDEN / 12 / index read - only / allow delete(api)\] Error with Elasticsearch.Net](https://discuss.elastic.co/t/forbidden-12-index-read-only-allow-delete-api-error-with-elasticsearch-net/148706)
**Author:** [@Rammohan91](https://discuss.elastic.co/u/Rammohan91)\ **Replies:** 1\ **Last updated:** [September 15, 2018, 2:08pm UTC](https://discuss.elastic.co/t/forbidden-12-index-read-only-allow-delete-api-error-with-elasticsearch-net/148706 "2018-09-15T14:08:18Z")
Hi There, I am having an issue while trying to perform PUT request from ElasticSearch.Net. First run successsfully inserts the document record, however when i update the data for another document and runs again, it just… --- ## [Help needed with using ESTestCase](https://discuss.elastic.co/t/help-needed-with-using-estestcase/134817)
**Author:** [@bacem.hagui](https://discuss.elastic.co/u/bacem.hagui)\ **Replies:** 1\ **Last updated:** [June 6, 2018, 3:53pm UTC](https://discuss.elastic.co/t/help-needed-with-using-estestcase/134817 "2018-06-06T15:53:59Z")
I am trying to perform unit tests on ElasticSearch methods written in Java. My methods are composed of a query builder and then a parser for the json reply received from the server after the query is received. I would l… --- ## [Replace Kibana Logo](https://discuss.elastic.co/t/replace-kibana-logo/75452)
**Author:** [@Uma\_Ananthu](https://discuss.elastic.co/u/Uma_Ananthu)\ **Replies:** 1\ **Last updated:** [February 18, 2017, 3:48am UTC](https://discuss.elastic.co/t/replace-kibana-logo/75452 "2017-02-18T03:48:19Z")
Hi I am trying to replace Kibana logo and i have my corporate SVG image with same name as Kibana. I have replaced in the following path in kibana 5.2.0 version and its not getting replaced. Even I tried restarting kibana… --- ## [Mapper\_parsing\_exception,reason:object mapping for \[process\] tried to parse field \[process\] as object, but found a concrete value](https://discuss.elastic.co/t/mapper-parsing-exception-reason-object-mapping-for-process-tried-to-parse-field-process-as-object-but-found-a-concrete-value/330979)
**Author:** [@ramdas](https://discuss.elastic.co/u/ramdas)\ **Replies:** 2\ **Last updated:** [May 2, 2023, 9:05am UTC](https://discuss.elastic.co/t/mapper-parsing-exception-reason-object-mapping-for-process-tried-to-parse-field-process-as-object-but-found-a-concrete-value/330979 "2023-05-02T09:05:41Z")
i am using elasticsearch to store logs and metrics for our applications on kubernetes environment. so now there are two different containers whose logs are collected by fluentd agent and pushed to elasticsearch. one of … --- ## [Search based on variables' count](https://discuss.elastic.co/t/search-based-on-variables-count/47004)
**Author:** [@mirnuj\_atom](https://discuss.elastic.co/u/mirnuj_atom)\ **Replies:** 3\ **Last updated:** [April 12, 2016, 3:45pm UTC](https://discuss.elastic.co/t/search-based-on-variables-count/47004 "2016-04-12T15:45:09Z")
Hey Guys I have the following json structure saved under variable in elastic: accounts\_info { "server": "localhost", "type": "encrypt" }, { "server": "localhost", "type": "decrypt" } Number of such short… --- ## [Source of Truth for Possible Field Mapping](https://discuss.elastic.co/t/source-of-truth-for-possible-field-mapping/53206)
**Author:** [@KodrAus](https://discuss.elastic.co/u/KodrAus)\ **Replies:** 7\ **Last updated:** [June 21, 2016, 4:32am UTC](https://discuss.elastic.co/t/source-of-truth-for-possible-field-mapping/53206 "2016-06-21T04:32:22Z")
So I'm just wondering if the docs can be totally trusted as a complete source of truth for all possible field mapping properties on a data type. I'm not much of a Java dev, but if pointed in the right direction I could… --- ## [TransportClient Connection Pool using JavaAPI](https://discuss.elastic.co/t/transportclient-connection-pool-using-javaapi/40193)
**Author:** [@anusha6](https://discuss.elastic.co/u/anusha6)\ **Replies:** 1\ **Last updated:** [January 27, 2016, 8:04am UTC](https://discuss.elastic.co/t/transportclient-connection-pool-using-javaapi/40193 "2016-01-27T08:04:03Z")
Hello Team, I would like to know the default size that a connection pool is having for TransportClient, and how to check the size that connection pool is holding?? Is this default setting is a good practice or else do we… --- ## [Runtime in Kibana Visualization Only (without using Index Pattern/Index Runtime Field)](https://discuss.elastic.co/t/runtime-in-kibana-visualization-only-without-using-index-pattern-index-runtime-field/276979)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 6\ **Last updated:** [June 29, 2021, 10:29pm UTC](https://discuss.elastic.co/t/runtime-in-kibana-visualization-only-without-using-index-pattern-index-runtime-field/276979 "2021-06-29T22:29:04Z")
Hi All, I was wondering if there is a way to add a runtime field that is only available in a single Kibana visualization. Looking at the runtime field docs it seems possible to add the field at query execution time. Th… --- ## [Sync local Elasticsearch index with remote Elasticsearch continuously](https://discuss.elastic.co/t/sync-local-elasticsearch-index-with-remote-elasticsearch-continuously/233708)
**Author:** [@Abolurah](https://discuss.elastic.co/u/Abolurah)\ **Replies:** 6\ **Last updated:** [May 21, 2020, 2:01pm UTC](https://discuss.elastic.co/t/sync-local-elasticsearch-index-with-remote-elasticsearch-continuously/233708 "2020-05-21T14:01:52Z")
Hi All, I have local Elasticsearch that collects a lot of data into the index lets call it eventIndex. My goal is to move this data from "localEventIndex" to the remote Elasticsearch "remoteEventIndex" index. I made s… --- ## [Binary fields do not support searching es 6.0.0-rc1](https://discuss.elastic.co/t/binary-fields-do-not-support-searching-es-6-0-0-rc1/103690)
**Author:** [@Junon\_Lim](https://discuss.elastic.co/u/Junon_Lim)\ **Replies:** 6\ **Last updated:** [November 10, 2017, 12:42am UTC](https://discuss.elastic.co/t/binary-fields-do-not-support-searching-es-6-0-0-rc1/103690 "2017-11-10T00:42:53Z")
I've followed the instructions given by rjernst at the below link but I'm getting "Binary fields do not support searching" error. Index Mapping: { "testindex" : { "mappings" : { "testtype" : { "da… --- ## [Dynamic .kibana index name](https://discuss.elastic.co/t/dynamic-kibana-index-name/73862)
**Author:** [@faxm0dem](https://discuss.elastic.co/u/faxm0dem)\ **Replies:** 6\ **Last updated:** [February 10, 2017, 7:37pm UTC](https://discuss.elastic.co/t/dynamic-kibana-index-name/73862 "2017-02-10T19:37:58Z")
Hi, We would like to have personal .kibana indices per user (and per group). We used to achieve this using a patched version of kibana that will use a HTTP header instead of the fixed .kibana name. Obviously, it's hard… --- ## [Elasticsearch Cluster Setup using public ip on aws and google cloud](https://discuss.elastic.co/t/elasticsearch-cluster-setup-using-public-ip-on-aws-and-google-cloud/62031)
**Author:** [@Harsha\_Reddy](https://discuss.elastic.co/u/Harsha_Reddy)\ **Replies:** 6\ **Last updated:** [October 3, 2016, 1:19pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-setup-using-public-ip-on-aws-and-google-cloud/62031 "2016-10-03T13:19:29Z")
I have 1 instance in aws and 1 instance in google cloud. I am trying to make 2 node cluster between them. I am using following configuration on both nodes Node-1:(aws): cluster.name: abc node.name: node1 network.host: … --- ## [Failed to fetch X-pack information from ES - Failure to reach live ES Cluster](https://discuss.elastic.co/t/failed-to-fetch-x-pack-information-from-es-failure-to-reach-live-es-cluster/317306)
**Author:** [@jakinmayowa](https://discuss.elastic.co/u/jakinmayowa)\ **Replies:** 2\ **Last updated:** [November 2, 2022, 10:49am UTC](https://discuss.elastic.co/t/failed-to-fetch-x-pack-information-from-es-failure-to-reach-live-es-cluster/317306 "2022-11-02T10:49:12Z")
I'm currently configuring Logstash ArcSight Module, however I've reached a road-block, error message below: Sending Logstash logs to /usr/share/logstash/logs which is now configured via log4j2.properties \[2022-10-24T10:… --- ## [Is there any special settings for disabling TLSv1.1 from the elasticsearch?](https://discuss.elastic.co/t/is-there-any-special-settings-for-disabling-tlsv1-1-from-the-elasticsearch/233716)
**Author:** [@Bingu\_Shim](https://discuss.elastic.co/u/Bingu_Shim)\ **Replies:** 2\ **Last updated:** [May 22, 2020, 6:15am UTC](https://discuss.elastic.co/t/is-there-any-special-settings-for-disabling-tlsv1-1-from-the-elasticsearch/233716 "2020-05-22T06:15:53Z")
Hello, I'm trying to disable TLSv1.1 from the supported ssl protocol. I referenced THIS GUIDE, and change 'xpack.security.transport.ssl.supported\_protocols' as follow apiVersion: elasticsearch.k8s.elastic.co/v1 kind: … --- ## [How to create a date field target with date {}?](https://discuss.elastic.co/t/how-to-create-a-date-field-target-with-date/58043)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 2\ **Last updated:** [August 18, 2016, 6:50pm UTC](https://discuss.elastic.co/t/how-to-create-a-date-field-target-with-date/58043 "2016-08-18T18:50:03Z")
I am parsing my logs date using this filter: date { match =\> \[ "datetime", "YYYY-MM-dd HH:mm:ss.SSS" \] target =\> "datetime" } but the new "datetime" field is created of type s… --- ## [ECE Deployment within 2 Zones failed: "Plan change failed: Failed to validate cluster health/prerequisites."](https://discuss.elastic.co/t/ece-deployment-within-2-zones-failed-plan-change-failed-failed-to-validate-cluster-health-prerequisites/287807)
**Author:** [@Icaka](https://discuss.elastic.co/u/Icaka)\ **Replies:** 3\ **Last updated:** [November 4, 2021, 1:28pm UTC](https://discuss.elastic.co/t/ece-deployment-within-2-zones-failed-plan-change-failed-failed-to-validate-cluster-health-prerequisites/287807 "2021-11-04T13:28:36Z")
Hi, I've spin up new ECE cluster with 6 VMs (2 Controll Plane, 2 Allocators for Hot data and 2 Allocators for Warm data) as half of them are in Zone-1 others in Zone-2 repectively per roles. I've setup tags for all my … --- ## [How to include special characters in modified index pattern string. When using URL Format and 'value' label template](https://discuss.elastic.co/t/how-to-include-special-characters-in-modified-index-pattern-string-when-using-url-format-and-value-label-template/205284)
**Author:** [@Apollyon](https://discuss.elastic.co/u/Apollyon)\ **Replies:** 8\ **Last updated:** [November 14, 2019, 11:46am UTC](https://discuss.elastic.co/t/how-to-include-special-characters-in-modified-index-pattern-string-when-using-url-format-and-value-label-template/205284 "2019-11-14T11:46:20Z")
Hello, On kibana and when editing the values on an Index Pattern, e.g. from the default 'string' to URL. When modifying the URL template to include a value, e.g. an email address, is there a way to take in this value to… --- ## [Parsing problem for iis server error log using filebeat 6.3.2](https://discuss.elastic.co/t/parsing-problem-for-iis-server-error-log-using-filebeat-6-3-2/148639)
**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\ **Replies:** 8\ **Last updated:** [October 16, 2018, 10:32am UTC](https://discuss.elastic.co/t/parsing-problem-for-iis-server-error-log-using-filebeat-6-3-2/148639 "2018-10-16T10:32:05Z")
My IIS HTTPERROR log is like below 2018-07-11 05:02:45 10.100.4.168 51477 10.100.4.97 47001 HTTP/1.1 GET /..\\pixfir~1\\how\_to\_login.html 403 - Forbidden - i am getting parse error in filebeat. How to solve it ? Grock… --- ## [Elastic Search Docker Container Throwing a Ton of unexpected error while indexing monitoring document exceptions](https://discuss.elastic.co/t/elastic-search-docker-container-throwing-a-ton-of-unexpected-error-while-indexing-monitoring-document-exceptions/119127)
**Author:** [@kevinjcoleman](https://discuss.elastic.co/u/kevinjcoleman)\ **Replies:** 3\ **Last updated:** [February 8, 2018, 10:33pm UTC](https://discuss.elastic.co/t/elastic-search-docker-container-throwing-a-ton-of-unexpected-error-while-indexing-monitoring-document-exceptions/119127 "2018-02-08T22:33:48Z")
We're using the docker container with docker-compose, here's our configuration. Is there something I'm missing here? ln\_elasticsearch: image: docker.elastic.co/elasticsearch/elasticsearch:6.2.1 container\_name:… --- ## [How to use a dynamic value (from shell?) in input { } configuration?](https://discuss.elastic.co/t/how-to-use-a-dynamic-value-from-shell-in-input-configuration/82208)
**Author:** [@endersonmaia](https://discuss.elastic.co/u/endersonmaia)\ **Replies:** 3\ **Last updated:** [April 13, 2017, 12:41pm UTC](https://discuss.elastic.co/t/how-to-use-a-dynamic-value-from-shell-in-input-configuration/82208 "2017-04-13T12:41:43Z")
I'm testing logstash for the first time, and I'm using it to get data from a database. I've already managed to configure jdbc-input pluging, and I'm using a query that uses a date as a parameter. ... parameters =\> { … --- ## [Effect of deleting index after disk space crash](https://discuss.elastic.co/t/effect-of-deleting-index-after-disk-space-crash/11619)
**Author:** [@kaush777](https://discuss.elastic.co/u/kaush777)\ **Replies:** 3\ **Last updated:** [April 19, 2013, 9:32am UTC](https://discuss.elastic.co/t/effect-of-deleting-index-after-disk-space-crash/11619 "2013-04-19T09:32:30Z")
Hi All, Kindly forgive a very basic question. I use Graylog + ES. Say my disk runs out of space, crashes and I do a system reboot. Now, I restart ES and then graylog. On the graylog web ui, my search does … --- ## [Got response code '403' contacting Elasticsearch at URL](https://discuss.elastic.co/t/got-response-code-403-contacting-elasticsearch-at-url/323368)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 4\ **Last updated:** [January 18, 2023, 2:27am UTC](https://discuss.elastic.co/t/got-response-code-403-contacting-elasticsearch-at-url/323368 "2023-01-18T02:27:40Z")
Hello World! I'm trying to follow Configuring Security in Logstash | Logstash Reference \[7.17\] | Elastic, specifically these: Configuring Logstash to use Basic Authentication Granting Users Access to the Logstash Indi… --- ## [Elasticsearch terms aggregation with partition does not honor the “size” value](https://discuss.elastic.co/t/elasticsearch-terms-aggregation-with-partition-does-not-honor-the-size-value/271294)
**Author:** [@sayali\_hinge](https://discuss.elastic.co/u/sayali_hinge)\ **Replies:** 4\ **Last updated:** [April 27, 2021, 11:26am UTC](https://discuss.elastic.co/t/elasticsearch-terms-aggregation-with-partition-does-not-honor-the-size-value/271294 "2021-04-27T11:26:55Z")
I have a nested field in the ES index. I used the cardinality aggregation to get the total number of buckets and then came up with num\_partitions, and size values to fetch the buckets. E.g. the total number of term buck… --- ## [No config files found in path error Logstash Ubuntu](https://discuss.elastic.co/t/no-config-files-found-in-path-error-logstash-ubuntu/267318)
**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\ **Replies:** 4\ **Last updated:** [April 18, 2021, 6:06am UTC](https://discuss.elastic.co/t/no-config-files-found-in-path-error-logstash-ubuntu/267318 "2021-04-18T06:06:01Z")
MLinux1@MLinux1:~/shared$ l LogStash-Beats-MTenant.conf\* MLinux1@MLinux1:~/shared$ My pipeline.yml as below - pipeline.id: beat\_input-shared path.config: "/home/MLinux1/shared/\*.conf" pipeline.workers: 2 queue.… --- ## [Timeout while migrating .kibana-6 index to .kibana\_7](https://discuss.elastic.co/t/timeout-while-migrating-kibana-6-index-to-kibana-7/177477)
**Author:** [@EldrosKandar](https://discuss.elastic.co/u/EldrosKandar)\ **Replies:** 4\ **Last updated:** [April 18, 2019, 3:06pm UTC](https://discuss.elastic.co/t/timeout-while-migrating-kibana-6-index-to-kibana-7/177477 "2019-04-18T15:06:14Z")
I'm currently updating my Elastic Stack from 6.3.2 to 6.7. For some reason, each time I start the kibana service after update, there is a timeout during the original migration. Apr 18 15:36:36 es1 kibana\[18082\]: {"type"… --- ## [Dashboard : display the sum of several counts](https://discuss.elastic.co/t/dashboard-display-the-sum-of-several-counts/123883)
**Author:** [@Florent\_Fauvin](https://discuss.elastic.co/u/Florent_Fauvin)\ **Replies:** 4\ **Last updated:** [March 20, 2018, 5:27pm UTC](https://discuss.elastic.co/t/dashboard-display-the-sum-of-several-counts/123883 "2018-03-20T17:27:28Z")
Hello, I would like to display in my dashboard the sum of several counts. For example, today, my search returns the authentication errors for SSH : result: "authentication failure" =\> count:3 result: "Authentication … --- ## [Pipeline ordering when using the new pipeline output](https://discuss.elastic.co/t/pipeline-ordering-when-using-the-new-pipeline-output/138116)
**Author:** [@Dheeraj\_Gupta](https://discuss.elastic.co/u/Dheeraj_Gupta)\ **Replies:** 2\ **Last updated:** [July 13, 2018, 8:57am UTC](https://discuss.elastic.co/t/pipeline-ordering-when-using-the-new-pipeline-output/138116 "2018-07-13T08:57:52Z")
Hi, I have already posted about the startup/shutdown order when using multiple pipelines. Till v6.2.4, it seems that Logstash arranged the startup/shutdown of pipelines in alphabetic order. I recently upgraded to 6.3.0… --- ## [Discovery EC2 Failed When Adding More Nodes ES 5.2.1](https://discuss.elastic.co/t/discovery-ec2-failed-when-adding-more-nodes-es-5-2-1/76487)
**Author:** [@ritchierich](https://discuss.elastic.co/u/ritchierich)\ **Replies:** 2\ **Last updated:** [February 26, 2017, 11:02pm UTC](https://discuss.elastic.co/t/discovery-ec2-failed-when-adding-more-nodes-es-5-2-1/76487 "2017-02-26T23:02:36Z")
I got the following Errors while trying to add more Elasticsearch nodes to my v5.2.1 Cluster with EC2 Discovery. My solution was to replace discovery.ec2 with set the IPs with discovery.zen.ping.unicast.hosts. Belo… --- ## [Is there way to pass dynamically built JSON query object to Elasticsearch?](https://discuss.elastic.co/t/is-there-way-to-pass-dynamically-built-json-query-object-to-elasticsearch/23423)
**Author:** [@Nithyanand](https://discuss.elastic.co/u/Nithyanand)\ **Replies:** 2\ **Last updated:** [April 28, 2015, 6:15am UTC](https://discuss.elastic.co/t/is-there-way-to-pass-dynamically-built-json-query-object-to-elasticsearch/23423 "2015-04-28T06:15:01Z")
I am using angularjs and elasticsearch.angular.js. I have build a dynamic JSON query object based on user requests. Is there a way to in ES javascript to pass it to the search api? In the below example, myJSONQUer… --- ## [Query filter not working with SparkSql](https://discuss.elastic.co/t/query-filter-not-working-with-sparksql/72719)
**Author:** [@zpp](https://discuss.elastic.co/u/zpp)\ **Replies:** 6\ **Last updated:** [February 2, 2017, 7:44pm UTC](https://discuss.elastic.co/t/query-filter-not-working-with-sparksql/72719 "2017-02-02T19:44:59Z")
I'm trying to pull data from Elasticsearch using below two commands, both returned data with the same record count, however, sql\_rdd returned all fields in elasticsearch, while es\_rdd only returned timestamp, host and me… --- ## [ES Query bottleneck](https://discuss.elastic.co/t/es-query-bottleneck/13257)
**Author:** [@Anand\_Nalya](https://discuss.elastic.co/u/Anand_Nalya)\ **Replies:** 6\ **Last updated:** [August 29, 2013, 6:54am UTC](https://discuss.elastic.co/t/es-query-bottleneck/13257 "2013-08-29T06:54:53Z")
Hi, I'm trying to figure out the bottleneck in query performance. I'm runing ES 0.90 on a 8GB, 4core machine. The index size is 38GB with 10m documents in 4 shards. On running a query, I'm getting 2k result in… [Previous page](https://discuss.elastic.co/top.md?page=773&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=775&per_page=50&period=all)