# Top **URL:** https://discuss.elastic.co/top.md?page=805&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 806 --- ## [Build/Create A URL for Kibana Dashboards/Graphs](https://discuss.elastic.co/t/build-create-a-url-for-kibana-dashboards-graphs/132576)
**Author:** [@ktvasan](https://discuss.elastic.co/u/ktvasan)\ **Replies:** 3\ **Last updated:** [May 21, 2018, 8:12pm UTC](https://discuss.elastic.co/t/build-create-a-url-for-kibana-dashboards-graphs/132576 "2018-05-21T20:12:35Z")
We are in the process of automating to display the Kibana logs in a Dashboards out of Kibana UI. We are thinking to use Python to pull the critical dashboards/graphs to show in our internal GUI. Is there any way to get t… --- ## [Too many open files in Elasticsearch](https://discuss.elastic.co/t/too-many-open-files-in-elasticsearch/39249)
**Author:** [@constantino](https://discuss.elastic.co/u/constantino)\ **Replies:** 3\ **Last updated:** [January 14, 2016, 7:55pm UTC](https://discuss.elastic.co/t/too-many-open-files-in-elasticsearch/39249 "2016-01-14T19:55:47Z")
Hello, I have this problema in Elasticsearch, can't solve. \[2016-01-14 10:09:34,789\]\[WARN \]\[netty.channel.socket.nio.AbstractNioSelector\] Failed to accept a connection. java.io.IOException: Too many open files … --- ## [Determine size of logstash indexes in elasticsearch](https://discuss.elastic.co/t/determine-size-of-logstash-indexes-in-elasticsearch/23853)
**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\ **Replies:** 3\ **Last updated:** [June 17, 2015, 4:35pm UTC](https://discuss.elastic.co/t/determine-size-of-logstash-indexes-in-elasticsearch/23853 "2015-06-17T16:35:11Z")
Hi guys, I need to try to determine how much size logstash is taking up in indexing the logs. We have a 3 node elastic search cluster with logstash indexes on each one corresponding to the same days. i.e.: o… --- ## [Using a char\_filter in combination with a lowercase filter](https://discuss.elastic.co/t/using-a-char-filter-in-combination-with-a-lowercase-filter/19316)
**Author:** [@Matthias\_Hogerheijde](https://discuss.elastic.co/u/Matthias_Hogerheijde)\ **Replies:** 3\ **Last updated:** [August 19, 2014, 4:36pm UTC](https://discuss.elastic.co/t/using-a-char-filter-in-combination-with-a-lowercase-filter/19316 "2014-08-19T16:36:50Z")
Hi, We're using Elasticsearch with an Analyzer to map the \`y\` character to \`ij\`, (\*char\_fitler\* named "char\_mapper") since in Dutch these two are "somewhat" interchangeable. We're also using a \*lowercase filter\*. … --- ## [ElasticSearch and lookups/set difference](https://discuss.elastic.co/t/elasticsearch-and-lookups-set-difference/65803)
**Author:** [@Andrew\_Davis](https://discuss.elastic.co/u/Andrew_Davis)\ **Replies:** 2\ **Last updated:** [November 14, 2016, 2:15pm UTC](https://discuss.elastic.co/t/elasticsearch-and-lookups-set-difference/65803 "2016-11-14T14:15:03Z")
Any one, got a idea how i do differences in documents indexes , like set difference i have 2 sets of documents in elasticsearch , and indexed Documents A (indexd on Name field) (temp index) Documents B (indexd on Name … --- ## [Logstash: Unable to create java\_pid2361.hprof: Permission denied](https://discuss.elastic.co/t/logstash-unable-to-create-java-pid2361-hprof-permission-denied/118634)
**Author:** [@mourlos](https://discuss.elastic.co/u/mourlos)\ **Replies:** 1\ **Last updated:** [February 9, 2018, 10:47am UTC](https://discuss.elastic.co/t/logstash-unable-to-create-java-pid2361-hprof-permission-denied/118634 "2018-02-09T10:47:16Z")
Hello, Today we upgraded from 6.1.1 to 6.1.3 After the upgrade, the logstash input UDP kept on failing Looking into the logs of logstash, there wasn't any error, but on the system logs the following was coming up: lo… --- ## [Packetbeat not monitoring https protocol](https://discuss.elastic.co/t/packetbeat-not-monitoring-https-protocol/313766)
**Author:** [@pratikshatiwari](https://discuss.elastic.co/u/pratikshatiwari)\ **Replies:** 1\ **Last updated:** [September 8, 2022, 5:50pm UTC](https://discuss.elastic.co/t/packetbeat-not-monitoring-https-protocol/313766 "2022-09-08T17:50:36Z")
Hello Environment detail - We are having Elasticsearch cluster running with secured http port 9200, 9201 & 9202 with version 8.3 We have installed packetbeat v8.3 on elasticsearch server to monitor the http traffic on… --- ## [How to access each value separately in ctx.payload.\_value](https://discuss.elastic.co/t/how-to-access-each-value-separately-in-ctx-payload-value/302450)
**Author:** [@700grm](https://discuss.elastic.co/u/700grm)\ **Replies:** 1\ **Last updated:** [April 19, 2022, 11:18am UTC](https://discuss.elastic.co/t/how-to-access-each-value-separately-in-ctx-payload-value/302450 "2022-04-19T11:18:52Z")
Hi, I have two values in payload the host name and IP Address, which I need to access separately: "transform" : { "type" : "script", "status" : "success", "payload" : { "\_value" :… --- ## [CPU usage \[Metricbeat Apache\] No apache.status.cpu.load](https://discuss.elastic.co/t/cpu-usage-metricbeat-apache-no-apache-status-cpu-load/148474)
**Author:** [@txivo83](https://discuss.elastic.co/u/txivo83)\ **Replies:** 4\ **Last updated:** [September 17, 2018, 4:27pm UTC](https://discuss.elastic.co/t/cpu-usage-metricbeat-apache-no-apache-status-cpu-load/148474 "2018-09-17T16:27:38Z")
Hi community. I'm trying to get all metrics of my apache through metricbeat but I'm not getting apace.status.cpu.\* metrics I've been googling about this possible issue, but I've not find any information. Does any one g… --- ## [APM agent an Typescript](https://discuss.elastic.co/t/apm-agent-an-typescript/235952)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 0\ **Last updated:** [June 5, 2020, 1:04pm UTC](https://discuss.elastic.co/t/apm-agent-an-typescript/235952 "2020-06-05T13:04:40Z")
Hello. I'm trying to use APM in a Node+Express+Typescript backend. I followed this: https://www.elastic.co/guide/en/apm/agent/nodejs/current/es-modules.html So now I have this on my tsconfig.json: "esModuleInterop": … --- ## [Elasticsearch Cross Cluster Search behind nginx proxy](https://discuss.elastic.co/t/elasticsearch-cross-cluster-search-behind-nginx-proxy/142706)
**Author:** [@kalash969](https://discuss.elastic.co/u/kalash969)\ **Replies:** 0\ **Last updated:** [August 2, 2018, 7:52am UTC](https://discuss.elastic.co/t/elasticsearch-cross-cluster-search-behind-nginx-proxy/142706 "2018-08-02T07:52:06Z")
I want to setup sort of aggregation for multiple Elasticsearch clusters based on Cross Cluster Search feature. I have the following layout: As seed for Cross Cluster Search I am using the only available via network cl… --- ## [Automate setting node.name to be the same as host name](https://discuss.elastic.co/t/automate-setting-node-name-to-be-the-same-as-host-name/66400)
**Author:** [@rs\_ela](https://discuss.elastic.co/u/rs_ela)\ **Replies:** 4\ **Last updated:** [November 18, 2016, 8:21am UTC](https://discuss.elastic.co/t/automate-setting-node-name-to-be-the-same-as-host-name/66400 "2016-11-18T08:21:44Z")
Hello Nodes' names out of the box are just some random values, like "8akjns787k". For humans it's easier if these names are the same as names of the hosts running ELK (say, "host-001-dev" or something like that). I'm w… --- ## [Elasticsearch Crashing OOM](https://discuss.elastic.co/t/elasticsearch-crashing-oom/326210)
**Author:** [@mbrimmer83](https://discuss.elastic.co/u/mbrimmer83)\ **Replies:** 8\ **Last updated:** [February 22, 2023, 9:29pm UTC](https://discuss.elastic.co/t/elasticsearch-crashing-oom/326210 "2023-02-22T21:29:20Z")
My local Enterprise Search development environment keeps crashing while indexing documents. My docker compose version: '3' services: setup: image: docker.elastic.co/elasticsearch/elasticsearch:8.6.1 volumes:… --- ## [\[Filebeat\] Bug with multiple aws-cloudwatch logs using log\_group\_name\_prefix](https://discuss.elastic.co/t/filebeat-bug-with-multiple-aws-cloudwatch-logs-using-log-group-name-prefix/319683)
**Author:** [@EDzhelyov](https://discuss.elastic.co/u/EDzhelyov)\ **Replies:** 8\ **Last updated:** [December 16, 2022, 10:09pm UTC](https://discuss.elastic.co/t/filebeat-bug-with-multiple-aws-cloudwatch-logs-using-log-group-name-prefix/319683 "2022-12-16T22:09:12Z")
I have a lot of running AWS Lambdas and I'm trying to fetch their logs using Filebeat's aws-cloudwatch input type. I'm using the start\_position: beginning in order to backfill the logs when the filebeat starts. When I s… --- ## [No stack trace available in JAVA APM](https://discuss.elastic.co/t/no-stack-trace-available-in-java-apm/243002)
**Author:** [@itssameer](https://discuss.elastic.co/u/itssameer)\ **Replies:** 8\ **Last updated:** [July 30, 2020, 10:35am UTC](https://discuss.elastic.co/t/no-stack-trace-available-in-java-apm/243002 "2020-07-30T10:35:58Z")
Hi, I am having the latest version of Elastic Stack & Java APM agent. Everything is working fine, but when I am open trace sample I always get No stack trace available in Span details whereas I would like to get all qu… --- ## [Filebeat and Logstash in Kubernetes](https://discuss.elastic.co/t/filebeat-and-logstash-in-kubernetes/151219)
**Author:** [@tsbu](https://discuss.elastic.co/u/tsbu)\ **Replies:** 3\ **Last updated:** [October 12, 2018, 5:11pm UTC](https://discuss.elastic.co/t/filebeat-and-logstash-in-kubernetes/151219 "2018-10-12T17:11:19Z")
Hello, I'm running Filebeat as daemonset in seperate kubernete cluster and sending logs to multiple logstash statefulsets which is running in other Kubernetes cluster. So, do I need to create seperate Logstash Service … --- ## [Watcher: Error 400 Bad Request: json argument must contain a watchStatusJson property](https://discuss.elastic.co/t/watcher-error-400-bad-request-json-argument-must-contain-a-watchstatusjson-property/120115)
**Author:** [@rippfx](https://discuss.elastic.co/u/rippfx)\ **Replies:** 3\ **Last updated:** [February 20, 2018, 8:51pm UTC](https://discuss.elastic.co/t/watcher-error-400-bad-request-json-argument-must-contain-a-watchstatusjson-property/120115 "2018-02-20T20:51:16Z")
Just upgraded to 6.2 from 5.6. everything seems to work except watcher. I'm getting this error when clicking Watcher under management. Watcher: Error 400 Bad Request: json argument must contain a watchStatusJson propert… --- ## [CPU/Memory consumption after upgrading to Version 5.1.2](https://discuss.elastic.co/t/cpu-memory-consumption-after-upgrading-to-version-5-1-2/72735)
**Author:** [@tokraft](https://discuss.elastic.co/u/tokraft)\ **Replies:** 8\ **Last updated:** [January 31, 2017, 12:04pm UTC](https://discuss.elastic.co/t/cpu-memory-consumption-after-upgrading-to-version-5-1-2/72735 "2017-01-31T12:04:09Z")
Hi, last week I upgraded metricbeat from version 5.1.1 to version 5.1.2. When I take a look at the memory and also the CPU consumption of metricbeat itself for the last 7 days it seems that metricbeat is continuously c… --- ## [The client is unable to verify that the server is Elasticsearch due to an unsuccessful product check call](https://discuss.elastic.co/t/the-client-is-unable-to-verify-that-the-server-is-elasticsearch-due-to-an-unsuccessful-product-check-call/348635)
**Author:** [@GRK](https://discuss.elastic.co/u/GRK)\ **Replies:** 7\ **Last updated:** [December 5, 2023, 12:29pm UTC](https://discuss.elastic.co/t/the-client-is-unable-to-verify-that-the-server-is-elasticsearch-due-to-an-unsuccessful-product-check-call/348635 "2023-12-05T12:29:19Z")
Invalid NEST response built from a unsuccessful () low level call on HEAD: /indexname Audit trail of this API call: \[1\] ProductCheckOnStartup: Took: \[2\] ProductCheckFailure: Node: OriginalException: Elasticsearch.Net… --- ## [Filebeat 7.7 panw module sends THREAT, but not TRAFFIC logs](https://discuss.elastic.co/t/filebeat-7-7-panw-module-sends-threat-but-not-traffic-logs/239792)
**Author:** [@nverrill](https://discuss.elastic.co/u/nverrill)\ **Replies:** 7\ **Last updated:** [July 24, 2020, 6:13pm UTC](https://discuss.elastic.co/t/filebeat-7-7-panw-module-sends-threat-but-not-traffic-logs/239792 "2020-07-24T18:13:17Z")
I am testing Filebeat 7.7 with the panw module, and am receiving THREAT type logs, but not TRAFFIC type logs. Elasticsearch version is also 7.7. filebeat.yml config: filebeat.config.modules: path: ${path.config}/modu… --- ## [Elasticsearch-service-x64 failed starting](https://discuss.elastic.co/t/elasticsearch-service-x64-failed-starting/50687)
**Author:** [@Leonard\_Larios\_Chan](https://discuss.elastic.co/u/Leonard_Larios_Chan)\ **Replies:** 1\ **Last updated:** [May 24, 2016, 1:17pm UTC](https://discuss.elastic.co/t/elasticsearch-service-x64-failed-starting/50687 "2016-05-24T13:17:43Z")
Hi all, I'm running windows server 2012 and I can't seem to get the service running. It throws me a "refer to service-specific error code 1" I have pointed JAVA\_HOME to the proper environment C:\\Program Files\\Java\\j… --- ## [HTTP monitor and TLS connection in Heartbeat 7.17.0](https://discuss.elastic.co/t/http-monitor-and-tls-connection-in-heartbeat-7-17-0/300343)
**Author:** [@gigaset](https://discuss.elastic.co/u/gigaset)\ **Replies:** 5\ **Last updated:** [March 25, 2022, 9:59am UTC](https://discuss.elastic.co/t/http-monitor-and-tls-connection-in-heartbeat-7-17-0/300343 "2022-03-25T09:59:59Z")
Hi, I'm using Heartbeat v7.17.0, and it looks like there is a problem with establishing the TLS connection in the HTTP monitor. The first problem is that the config option ssl.verification\_mode: none seems not to work. … --- ## [SOC Workflow App Community Edition for ELK Stack](https://discuss.elastic.co/t/soc-workflow-app-community-edition-for-elk-stack/155184)
**Author:** [@Andrew\_Vdovin](https://discuss.elastic.co/u/Andrew_Vdovin)\ **Replies:** 5\ **Last updated:** [November 13, 2018, 6:12am UTC](https://discuss.elastic.co/t/soc-workflow-app-community-edition-for-elk-stack/155184 "2018-11-13T06:12:17Z")
SOC Workflow App Community Edition for ELK Stack is released! SOC Workflow App helps Security Analysts and Threat Hunters explore suspicious events, look into raw events arriving at Elastic stack and view Saved Searches… --- ## [Documents not showing Discover, show in queries and document counts](https://discuss.elastic.co/t/documents-not-showing-discover-show-in-queries-and-document-counts/272740)
**Author:** [@LoganS](https://discuss.elastic.co/u/LoganS)\ **Replies:** 2\ **Last updated:** [May 11, 2021, 8:35pm UTC](https://discuss.elastic.co/t/documents-not-showing-discover-show-in-queries-and-document-counts/272740 "2021-05-11T20:35:01Z")
I have some documents that were created via Elastic's REST API. When logged into Kibana to view these records, I am able to see them in the results using a GET or PUT request in Dev Tools and in the document count for t… --- ## [Connecting UiPath to Elastic](https://discuss.elastic.co/t/connecting-uipath-to-elastic/278288)
**Author:** [@Dzious](https://discuss.elastic.co/u/Dzious)\ **Replies:** 1\ **Last updated:** [July 21, 2021, 3:03pm UTC](https://discuss.elastic.co/t/connecting-uipath-to-elastic/278288 "2021-07-21T15:03:22Z")
Hi, I've been struggling for a while now trying to connect UiPath/Orchestrator to Elastic. On their documentation they explicitly say that it's possible to output logs to Elastic. Unfortunately i still did not managed … --- ## [Multiple types vs Multiple indexes](https://discuss.elastic.co/t/multiple-types-vs-multiple-indexes/13868)
**Author:** [@y\_itay](https://discuss.elastic.co/u/y_itay)\ **Replies:** 2\ **Last updated:** [October 8, 2013, 7:07pm UTC](https://discuss.elastic.co/t/multiple-types-vs-multiple-indexes/13868 "2013-10-08T19:07:39Z")
Hey, I am planning to use elasticsearch for my website and I need to index 3 different types of entities. It's something like: users/tweets/tags Would it be better to create 3 different indexes or create 1 index w… --- ## [Querying a file path field by just the basename](https://discuss.elastic.co/t/querying-a-file-path-field-by-just-the-basename/257582)
**Author:** [@dansei](https://discuss.elastic.co/u/dansei)\ **Replies:** 6\ **Last updated:** [December 30, 2020, 7:02pm UTC](https://discuss.elastic.co/t/querying-a-file-path-field-by-just-the-basename/257582 "2020-12-30T19:02:25Z")
I have a field that stores the full path of a file on disk. The file's basename is unique and I'd like to be able to query for just the basename as well. The simplest solution is to add a second field which contains the… --- ## [How to get all relevant data of anomaly into alert message](https://discuss.elastic.co/t/how-to-get-all-relevant-data-of-anomaly-into-alert-message/130489)
**Author:** [@admlko](https://discuss.elastic.co/u/admlko)\ **Replies:** 6\ **Last updated:** [May 8, 2018, 5:51am UTC](https://discuss.elastic.co/t/how-to-get-all-relevant-data-of-anomaly-into-alert-message/130489 "2018-05-08T05:51:00Z")
I am trying to write a python script in order to find anomalies and relay them forward into our monitoring system. What I am looking for is to get all the same information I can find from anomaly explorer (in the pictur… --- ## [100% CPU Usage](https://discuss.elastic.co/t/100-cpu-usage/6213)
**Author:** [@Shaun\_Farrell](https://discuss.elastic.co/u/Shaun_Farrell)\ **Replies:** 3\ **Last updated:** [December 23, 2011, 3:08am UTC](https://discuss.elastic.co/t/100-cpu-usage/6213 "2011-12-23T03:08:16Z")
I have elasticsearch installed on a AWS box. I am doing some testing with it. Indexing like 3K records. All text. I kick off an indexing with Elastica and after about 15 seconds JAVA goes to 100% CPU. Memory is co… --- ## [X509 Certificate Error for Fleet Enrollment](https://discuss.elastic.co/t/x509-certificate-error-for-fleet-enrollment/264461)
**Author:** [@secopsgeek](https://discuss.elastic.co/u/secopsgeek)\ **Replies:** 4\ **Last updated:** [February 27, 2021, 6:59pm UTC](https://discuss.elastic.co/t/x509-certificate-error-for-fleet-enrollment/264461 "2021-02-27T18:59:26Z")
Hello friends, I am needing some help with setting up the fleet enrollment for my clients on windows systems. Am having an issue with this EDR portion of the SIEM build. Any help would be nice, I have the cert, but not … --- ## [Elasticsearch won't even try to launch](https://discuss.elastic.co/t/elasticsearch-wont-even-try-to-launch/253339)
**Author:** [@larslevie](https://discuss.elastic.co/u/larslevie)\ **Replies:** 4\ **Last updated:** [October 28, 2020, 7:30am UTC](https://discuss.elastic.co/t/elasticsearch-wont-even-try-to-launch/253339 "2020-10-28T07:30:52Z")
Try to deploy Elasticsearch into a new EKS 1.18 cluster. For some reason no Elasticsearch instances will even attempt to launch, i.e. not pods even attempt to start. The operator just sits in a reconciliation loop and no… --- ## [Syslog with logstash mapping](https://discuss.elastic.co/t/syslog-with-logstash-mapping/95516)
**Author:** [@talial](https://discuss.elastic.co/u/talial)\ **Replies:** 4\ **Last updated:** [August 7, 2017, 12:57pm UTC](https://discuss.elastic.co/t/syslog-with-logstash-mapping/95516 "2017-08-07T12:57:09Z")
Hi I have logstash that get the syslog from other machines. The conf.d file is like: input { tcp { port =\> 514 type =\> syslog } udp { port =\> 514 type =\> syslog } } filter { if \[type\] == "sy… --- ## [Create index on pdf file input using logstash](https://discuss.elastic.co/t/create-index-on-pdf-file-input-using-logstash/52724)
**Author:** [@Tamanna](https://discuss.elastic.co/u/Tamanna)\ **Replies:** 2\ **Last updated:** [June 20, 2016, 11:06am UTC](https://discuss.elastic.co/t/create-index-on-pdf-file-input-using-logstash/52724 "2016-06-20T11:06:15Z")
Hi All, I am new to Logstash and have little idea about it. I need to create an index in ElasticSearch on a pdf file. Ingesting this pdf file, i heard, can be done with Logstash. But i have no idea how it could be don… --- ## [Count active docs and display by date in Line Chart](https://discuss.elastic.co/t/count-active-docs-and-display-by-date-in-line-chart/251129)
**Author:** [@r97](https://discuss.elastic.co/u/r97)\ **Replies:** 5\ **Last updated:** [October 7, 2020, 4:00pm UTC](https://discuss.elastic.co/t/count-active-docs-and-display-by-date-in-line-chart/251129 "2020-10-07T16:00:45Z")
Hi, I have an index with the fields: @timestamp, boolean: active and solved\_date (see below). If I import the values, the solved\_date field is not set and the boolean is true. When I want to make the document inactive… --- ## [Dealing with units](https://discuss.elastic.co/t/dealing-with-units/6904)
**Author:** [@Eric\_Jain](https://discuss.elastic.co/u/Eric_Jain)\ **Replies:** 5\ **Last updated:** [March 7, 2012, 11:10am UTC](https://discuss.elastic.co/t/dealing-with-units/6904 "2012-03-07T11:10:57Z")
I'm curious how others here index fields with different units, e.g. 5 miles and 10 km, and support queries (and facets) that then use either miles or km. Given a document with a property like: distance : { … --- ## [Getting "Mixing up field types" for keyword](https://discuss.elastic.co/t/getting-mixing-up-field-types-for-keyword/84304)
**Author:** [@Badger](https://discuss.elastic.co/u/Badger)\ **Replies:** 1\ **Last updated:** [May 3, 2017, 6:59pm UTC](https://discuss.elastic.co/t/getting-mixing-up-field-types-for-keyword/84304 "2017-05-03T18:59:24Z")
In Logstash I am parsing a field out of a line using %{NOTSPACE:xxhttpversion} . That field is going to be HTTP/1.1 (or maybe HTTP/1.0), so I do not need it analyzed. So in my template (applied after a copy of the defaul… --- ## [callWithRequest](https://discuss.elastic.co/t/callwithrequest/94151)
**Author:** [@daneitz](https://discuss.elastic.co/u/daneitz)\ **Replies:** 3\ **Last updated:** [July 26, 2017, 6:42pm UTC](https://discuss.elastic.co/t/callwithrequest/94151 "2017-07-26T18:42:33Z")
I'm building a plugin for use in Kibana. I'm having difficulties calling elasticsearch where I have some custom rest apis running. I'm able to query an index but am unsure how i call an api with a format similar to this… --- ## [Catching JSON parse errors](https://discuss.elastic.co/t/catching-json-parse-errors/78083)
**Author:** [@elssar](https://discuss.elastic.co/u/elssar)\ **Replies:** 3\ **Last updated:** [March 10, 2017, 12:40pm UTC](https://discuss.elastic.co/t/catching-json-parse-errors/78083 "2017-03-10T12:40:52Z")
Hi, We have an old logstash system (v1.5) which had been running just fine until recently. Some of the messages are getting mangled, for reasons unknown, and the JSON filter keeps throwing parse fail errors. That cause… --- ## [Watcher execution](https://discuss.elastic.co/t/watcher-execution/24762)
**Author:** [@gphadke](https://discuss.elastic.co/u/gphadke)\ **Replies:** 3\ **Last updated:** [July 2, 2015, 10:27am UTC](https://discuss.elastic.co/t/watcher-execution/24762 "2015-07-02T10:27:54Z")
When there are multiple nodes in a cluster we need to have one watcher instance on each node ( please correct me if its not the case), in such a case how does the watcher distribute rule execution to distribute load? Als… --- ## [Config validation of \[xpack.security\].authc.providers](https://discuss.elastic.co/t/config-validation-of-xpack-security-authc-providers/282258)
**Author:** [@etrpchevska](https://discuss.elastic.co/u/etrpchevska)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 10:54am UTC](https://discuss.elastic.co/t/config-validation-of-xpack-security-authc-providers/282258 "2021-08-25T10:54:45Z")
I am trying to setup SSO authentication with Azure AD. elasticsearch.yml: | cluster.name: dev-observability network.host: "0.0.0.0" bootstrap.memory\_lock: false discovery.zen.ping.unicast.hosts: es-clust… --- ## [Logstash mysql input credentials error](https://discuss.elastic.co/t/logstash-mysql-input-credentials-error/105588)
**Author:** [@Tim\_Rourke](https://discuss.elastic.co/u/Tim_Rourke)\ **Replies:** 2\ **Last updated:** [October 27, 2017, 4:10pm UTC](https://discuss.elastic.co/t/logstash-mysql-input-credentials-error/105588 "2017-10-27T16:10:02Z")
Hello! I'm trying to migrate some MySQL data from my local dev Vagrant box into Elasticsearch using the jdbc MySQL connector, and I'm running into a MySQL credentials problem. I'm not sure if the problem is the .conf fi… --- ## [Logstash config to delete records in elastic?](https://discuss.elastic.co/t/logstash-config-to-delete-records-in-elastic/88366)
**Author:** [@west415](https://discuss.elastic.co/u/west415)\ **Replies:** 2\ **Last updated:** [June 8, 2017, 11:22pm UTC](https://discuss.elastic.co/t/logstash-config-to-delete-records-in-elastic/88366 "2017-06-08T23:22:59Z")
Hi, I'm using Logstash 5.1.1 and new to the ELK stack. I have a logstash config file setup that does an upsert of records from my Microsoft SQL Server database every 5 minutes into an index in Elastic. When a record… --- ## [Getting "reason"=\>"geo\_point expected" error from geoip whilst indexing](https://discuss.elastic.co/t/getting-reason-geo-point-expected-error-from-geoip-whilst-indexing/66847)
**Author:** [@thomas.knowles](https://discuss.elastic.co/u/thomas.knowles)\ **Replies:** 2\ **Last updated:** [November 22, 2016, 7:46pm UTC](https://discuss.elastic.co/t/getting-reason-geo-point-expected-error-from-geoip-whilst-indexing/66847 "2016-11-22T19:46:01Z")
I have filebeat running on one of my servers which collects iptables and telnet logs, both feeds use the geoip filter plugin and both feed into the logstash for parsing and then subsequently into elasticsearch for storin… --- ## [Index.max\_result\_window increase limit- not updating?](https://discuss.elastic.co/t/index-max-result-window-increase-limit-not-updating/47692)
**Author:** [@bmilesp](https://discuss.elastic.co/u/bmilesp)\ **Replies:** 1\ **Last updated:** [September 29, 2016, 2:09pm UTC](https://discuss.elastic.co/t/index-max-result-window-increase-limit-not-updating/47692 "2016-09-29T14:09:47Z")
hello, i'm trying to update my index.max\_result\_window using put to here with the following body: http://:9200/.kibana/\_settings PUT { "index" : { "max\_result\_window" : 2147483647 } } it returns: {acknowledged : tru… --- ## [ECK operator throws "certificate signed by unknown authority"](https://discuss.elastic.co/t/eck-operator-throws-certificate-signed-by-unknown-authority/265558)
**Author:** [@leonz](https://discuss.elastic.co/u/leonz)\ **Replies:** 4\ **Last updated:** [March 8, 2021, 4:29pm UTC](https://discuss.elastic.co/t/eck-operator-throws-certificate-signed-by-unknown-authority/265558 "2021-03-08T16:29:14Z")
Hi! We are trying to configure an ECK operator (version 1.3.2) that manages an Elasticsearch (6.8.14). We have configured the Elasticsearch to use our own custom certificates via xpack: xpack.security.http.ssl.certifi… --- ## [Shield 1.3.2 Released](https://discuss.elastic.co/t/shield-1-3-2-released/27144)
**Author:** [@jaymode](https://discuss.elastic.co/u/jaymode)\ **Replies:** 4\ **Last updated:** [December 21, 2015, 8:50am UTC](https://discuss.elastic.co/t/shield-1-3-2-released/27144 "2015-12-21T08:50:04Z")
We have released Shield 1.3.2 today. This release fixes bugs related to auditing, LDAP, and the clear cache API. Check out the change list for all of the fixes. --- ## [Node subfolders have differnet indices](https://discuss.elastic.co/t/node-subfolders-have-differnet-indices/28318)
**Author:** [@CScrace](https://discuss.elastic.co/u/CScrace)\ **Replies:** 4\ **Last updated:** [August 31, 2015, 1:32am UTC](https://discuss.elastic.co/t/node-subfolders-have-differnet-indices/28318 "2015-08-31T01:32:14Z")
We have a single node elasticsearch installation for ELK and today we noticed that all of our Kibana Dashboards are gone and only data from the last few days is being displayed. Looking in the Elasticsearch data direct… --- ## [Single Dashboard utilization for different index](https://discuss.elastic.co/t/single-dashboard-utilization-for-different-index/44692)
**Author:** [@Prateek\_Kshtriya](https://discuss.elastic.co/u/Prateek_Kshtriya)\ **Replies:** 6\ **Last updated:** [March 31, 2016, 10:07am UTC](https://discuss.elastic.co/t/single-dashboard-utilization-for-different-index/44692 "2016-03-31T10:07:58Z")
Hi All, I have been trying to utilize a dashboard which is created earlier for one index but it is not picking up the data for new index created. Background- Index 1 - There are 7 fields in the index having nearly 1500… --- ## [Support for Dublin Core](https://discuss.elastic.co/t/support-for-dublin-core/6669)
**Author:** [@ian\_mayo](https://discuss.elastic.co/u/ian_mayo)\ **Replies:** 6\ **Last updated:** [February 14, 2012, 2:19am UTC](https://discuss.elastic.co/t/support-for-dublin-core/6669 "2012-02-14T02:19:33Z")
Hi all, I'd like to find out if/how ElasticSearch supports Dublin Core metadata, as formalised by the Dublin Core Metadata Initiative (DCMI) I'm aware that ElasticSearch sits on top of Apache Lucene, but I can't fi… --- ## [Unable to ingest JSON file and output to stdout](https://discuss.elastic.co/t/unable-to-ingest-json-file-and-output-to-stdout/226793)
**Author:** [@leosoaivan](https://discuss.elastic.co/u/leosoaivan)\ **Replies:** 5\ **Last updated:** [April 7, 2020, 8:44pm UTC](https://discuss.elastic.co/t/unable-to-ingest-json-file-and-output-to-stdout/226793 "2020-04-07T20:44:00Z")
New to Logstash, and I've attempted to start with a simple JSON file, though I can't get anything to output to stdout. It just hangs at Successfully started Logstash API endpoint {:port=\>9646} I've looked at a few posts… [Previous page](https://discuss.elastic.co/top.md?page=804&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=806&per_page=50&period=all)