# Top **URL:** https://discuss.elastic.co/top.md?page=816&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 817 --- ## [Range search on nested object](https://discuss.elastic.co/t/range-search-on-nested-object/11227)
**Author:** [@james\_lewis](https://discuss.elastic.co/u/james_lewis)\ **Replies:** 3\ **Last updated:** [March 21, 2013, 3:43pm UTC](https://discuss.elastic.co/t/range-search-on-nested-object/11227 "2013-03-21T15:43:03Z")
Hi, I have an object that looks like thisand I'm trying to do a range query on the source -\>date property. At the moment, my query looks like thisbut it's not returning any results. I can confirm that in my index … --- ## [Restrict index privilege on space level](https://discuss.elastic.co/t/restrict-index-privilege-on-space-level/320588)
**Author:** [@shinki927](https://discuss.elastic.co/u/shinki927)\ **Replies:** 1\ **Last updated:** [December 7, 2022, 7:22pm UTC](https://discuss.elastic.co/t/restrict-index-privilege-on-space-level/320588 "2022-12-07T19:22:56Z")
Hello, I have a question about how to restrict the index access on space level. I know in general we can create separate role with different index permission to a specific space. But in our use case, we sometimes need t… --- ## [Span data visualisation missing in kibana](https://discuss.elastic.co/t/span-data-visualisation-missing-in-kibana/222824)
**Author:** [@geoffbp](https://discuss.elastic.co/u/geoffbp)\ **Replies:** 6\ **Last updated:** [March 12, 2020, 1:57pm UTC](https://discuss.elastic.co/t/span-data-visualisation-missing-in-kibana/222824 "2020-03-12T13:57:07Z")
Kibana version: 7.5.0 Elasticsearch version: 7.5.0 APM Server version: 7.5.0 APM Agent language and version: Java 1.13.0 Browser version: Safari Version 13.0.5 (14608.5.12) Edge Version 80.0.361.62 (Official bu… --- ## [Error in filter elasticsearch plugin](https://discuss.elastic.co/t/error-in-filter-elasticsearch-plugin/194074)
**Author:** [@leeyu](https://discuss.elastic.co/u/leeyu)\ **Replies:** 7\ **Last updated:** [August 6, 2019, 11:20pm UTC](https://discuss.elastic.co/t/error-in-filter-elasticsearch-plugin/194074 "2019-08-06T23:20:24Z")
Hi all, I am using version 7.2. I encountered some trouble while using the filter elasticsearch plugin. The behavior is very random, some of the data uploaded correctly but I also get some error Here is the log from … --- ## [Logstash configuration- How to do dynamic mapping?](https://discuss.elastic.co/t/logstash-configuration-how-to-do-dynamic-mapping/274749)
**Author:** [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)\ **Replies:** 5\ **Last updated:** [June 4, 2021, 4:16am UTC](https://discuss.elastic.co/t/logstash-configuration-how-to-do-dynamic-mapping/274749 "2021-06-04T04:16:13Z")
I have one requirement to create dynamic mapping in my Logstash configuration to map two different columns. Please find below details: - Below is the ruby code I'm using in my logstash config: !\[image|690x351\](upload:/… --- ## [Docker Stats Metrics](https://discuss.elastic.co/t/docker-stats-metrics/201862)
**Author:** [@Gravador\_Monitor](https://discuss.elastic.co/u/Gravador_Monitor)\ **Replies:** 5\ **Last updated:** [October 9, 2019, 1:55pm UTC](https://discuss.elastic.co/t/docker-stats-metrics/201862 "2019-10-09T13:55:34Z")
"\[Metricbeat Docker\] Overview ECS" dashboard values are different from values displayed by "docker stats" command, even if I filter the exact host and container. Is there any way to show docker stats values in kibana? V… --- ## [Input json file into elasticsearch via logstash](https://discuss.elastic.co/t/input-json-file-into-elasticsearch-via-logstash/92766)
**Author:** [@bhavna\_jha](https://discuss.elastic.co/u/bhavna_jha)\ **Replies:** 5\ **Last updated:** [July 13, 2017, 2:17pm UTC](https://discuss.elastic.co/t/input-json-file-into-elasticsearch-via-logstash/92766 "2017-07-13T14:17:36Z")
HI, I am trying to input json file into elasticsearch but I get this error: Could not find log4j2 configuration at path /logstash-5.4.0/config/log4j2.properties. Using default config which logs to console 12:27:10.702 … --- ## [Using Python to Connect To Elastic Cloud](https://discuss.elastic.co/t/using-python-to-connect-to-elastic-cloud/199350)
**Author:** [@michaelberg](https://discuss.elastic.co/u/michaelberg)\ **Replies:** 4\ **Last updated:** [September 13, 2019, 2:34pm UTC](https://discuss.elastic.co/t/using-python-to-connect-to-elastic-cloud/199350 "2019-09-13T14:34:20Z")
Greetings Everyone! I am building a project for University and want to do some experimenting with connecting to Elastic Cloud using Python ... I already have Elastic Cloud and Kibana set up and it's working perfectly w… --- ## [Timestamp from logfile lacks millisec](https://discuss.elastic.co/t/timestamp-from-logfile-lacks-millisec/51137)
**Author:** [@dasm](https://discuss.elastic.co/u/dasm)\ **Replies:** 4\ **Last updated:** [May 29, 2016, 8:02pm UTC](https://discuss.elastic.co/t/timestamp-from-logfile-lacks-millisec/51137 "2016-05-29T20:02:30Z")
I have logbeat installed on my windows nodes to forward logfiles to logstash. In logstash, I grab the date/time from the logline and insert it into @timestamp. This is all working, but since the date/time in my logline h… --- ## [Return term frequency of a single field](https://discuss.elastic.co/t/return-term-frequency-of-a-single-field/9546)
**Author:** [@Kennedy\_Idialu](https://discuss.elastic.co/u/Kennedy_Idialu)\ **Replies:** 4\ **Last updated:** [November 5, 2012, 2:22am UTC](https://discuss.elastic.co/t/return-term-frequency-of-a-single-field/9546 "2012-11-05T02:22:57Z")
Hi, I have being trying to use facet to get the term frequency of a field. My query returns just one hit, so I would like to have the facet return the terms that have the most frequency in a particular field. M… --- ## [Sorting Plugin Development](https://discuss.elastic.co/t/sorting-plugin-development/8830)
**Author:** [@davrob](https://discuss.elastic.co/u/davrob)\ **Replies:** 4\ **Last updated:** [August 27, 2012, 6:08pm UTC](https://discuss.elastic.co/t/sorting-plugin-development/8830 "2012-08-27T18:08:35Z")
Hi, I would like help in creating a plugin for sorting Nested properties, like below: "fullName": {"type": "string" }, "customColumns": { "type": "nested", "properties": { … --- ## [Fleet Server Error: Error - listen tcp: address https://myserver:8220: too many colons in address](https://discuss.elastic.co/t/fleet-server-error-error-listen-tcp-address-https-myserver-too-many-colons-in-address/303411)
**Author:** [@b0r1s](https://discuss.elastic.co/u/b0r1s)\ **Replies:** 2\ **Last updated:** [May 13, 2022, 1:12pm UTC](https://discuss.elastic.co/t/fleet-server-error-error-listen-tcp-address-https-myserver-too-many-colons-in-address/303411 "2022-05-13T13:12:36Z")
Hello fellows o/ I'm facing a problem to activate my Fleet Server. All my cluster is running on CentOS 7. I used rpm instalation of elastic-agent 7.15.2 and give the follow commands: On my Elasticsearch node 2 (where … --- ## [Metricbeat for MySQL fails - "missing required field accessing '0.queries'"](https://discuss.elastic.co/t/metricbeat-for-mysql-fails-missing-required-field-accessing-0-queries/271895)
**Author:** [@rudimk](https://discuss.elastic.co/u/rudimk)\ **Replies:** 2\ **Last updated:** [May 3, 2021, 8:33pm UTC](https://discuss.elastic.co/t/metricbeat-for-mysql-fails-missing-required-field-accessing-0-queries/271895 "2021-05-03T20:33:31Z")
Hello! I'm setting up Metricbeats on Ubuntu 18.04 to track metrics for a MySQL database. Unfortunately, starting the agent fails with the following error: May 02 11:08:07 ubuntu metricbeat\[69057\]: 2021-05-02T11:08:07.9… --- ## [Docker Kibana: Cannot connect to the Elasticsearch cluster currently configured for Kibana](https://discuss.elastic.co/t/docker-kibana-cannot-connect-to-the-elasticsearch-cluster-currently-configured-for-kibana/190961)
**Author:** [@Philip\_Colmer](https://discuss.elastic.co/u/Philip_Colmer)\ **Replies:** 2\ **Last updated:** [July 19, 2019, 6:47am UTC](https://discuss.elastic.co/t/docker-kibana-cannot-connect-to-the-elasticsearch-cluster-currently-configured-for-kibana/190961 "2019-07-19T06:47:51Z")
I'm using the Docker image for Kibana 7.2.0. I'm trying to connect it to an Elasticsearch Docker container as part of the following docker-compose file: version: "3" services: fess: image: codelibs/fess:13.2 r… --- ## [Kuromoji\_stemmer と kuromoji\_readingform の同時使用について](https://discuss.elastic.co/t/kuromoji-stemmer-kuromoji-readingform/85316)
**Author:** [@tatsuyaoiw](https://discuss.elastic.co/u/tatsuyaoiw)\ **Replies:** 2\ **Last updated:** [May 11, 2017, 2:18am UTC](https://discuss.elastic.co/t/kuromoji-stemmer-kuromoji-readingform/85316 "2017-05-11T02:18:29Z")
Elasticsearch Version: 5.3.1 kuromoji\_stemmer token filterとkuromoji\_readingform token filterを使って、最後の長音の除去とカタカナ読みへの変換を同時に設定しようとしたのですが、kuromoji\_stemmerの後にkuromoji\_readingformを設定すると、kuromoji\_stemmerで除去されたはずの長音がkuromoji\_re… --- ## [Are these values right for Query delay, Frequency and Bucket Span?](https://discuss.elastic.co/t/are-these-values-right-for-query-delay-frequency-and-bucket-span/239498)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 3\ **Last updated:** [July 3, 2020, 12:39pm UTC](https://discuss.elastic.co/t/are-these-values-right-for-query-delay-frequency-and-bucket-span/239498 "2020-07-03T12:39:12Z")
I am trying out the anomaly detection job. The data is coming from logstash at interval of 5 mins. But sometimes there will be no data in those 5 mins. The data itself will be randomly distrubuted in the 5 min slot. Som… --- ## [Elasticsearch 6.8.x and two versions of OpenJDK](https://discuss.elastic.co/t/elasticsearch-6-8-x-and-two-versions-of-openjdk/235039)
**Author:** [@lazyusername](https://discuss.elastic.co/u/lazyusername)\ **Replies:** 3\ **Last updated:** [May 31, 2020, 6:39pm UTC](https://discuss.elastic.co/t/elasticsearch-6-8-x-and-two-versions-of-openjdk/235039 "2020-05-31T18:39:52Z")
Hello, we have some mid sized cluster around ~70 nodes running on Debian Stretch (9.x) with OpenJDK-8. We will need to add some extra nodes with Debian Buster, where is present OpenJDK-11. Both versions of OpenJDK is o… --- ## [Index Pattern behavior](https://discuss.elastic.co/t/index-pattern-behavior/227643)
**Author:** [@fadjar340](https://discuss.elastic.co/u/fadjar340)\ **Replies:** 8\ **Last updated:** [April 13, 2020, 9:36am UTC](https://discuss.elastic.co/t/index-pattern-behavior/227643 "2020-04-13T09:36:29Z")
Hi.. I have a logstash index and already delete\_by\_query of the part of the indexes, and no more particular fields, then I've done to delete the index pattern to make sure the fields is clean. The strange behavior of t… --- ## [Metrics in visualization, calculate a field sum in JSON input script](https://discuss.elastic.co/t/metrics-in-visualization-calculate-a-field-sum-in-json-input-script/185781)
**Author:** [@Magnus\_Andersson1](https://discuss.elastic.co/u/Magnus_Andersson1)\ **Replies:** 1\ **Last updated:** [June 24, 2019, 3:50pm UTC](https://discuss.elastic.co/t/metrics-in-visualization-calculate-a-field-sum-in-json-input-script/185781 "2019-06-24T15:50:53Z")
I have a Metric control in Canvas which uses this query: SELECT SUM(AbstractData.no\_of\_assets\_with\_SIR) \* 100.0 / SUM(AbstractData.count\_total\_assets) as percentage FROM cpg\_abstract\_dev\_project\_kpi Now I need to d… --- ## [GeoIP Lite EOL pipeline filter](https://discuss.elastic.co/t/geoip-lite-eol-pipeline-filter/121369)
**Author:** [@bruno-d](https://discuss.elastic.co/u/bruno-d)\ **Replies:** 5\ **Last updated:** [March 4, 2018, 7:07am UTC](https://discuss.elastic.co/t/geoip-lite-eol-pipeline-filter/121369 "2018-03-04T07:07:38Z")
Hi it seems Geoip Lite DB is not free anymore for home user and will be not be updated anymore as before. What services do you plan to offer to replace this one ? Does IP2Location LITE is in the road map ? I am using … --- ## [RUM and React-Native](https://discuss.elastic.co/t/rum-and-react-native/310648)
**Author:** [@abeasley](https://discuss.elastic.co/u/abeasley)\ **Replies:** 0\ **Last updated:** [July 26, 2022, 1:47pm UTC](https://discuss.elastic.co/t/rum-and-react-native/310648 "2022-07-26T13:47:43Z")
I'm researching adding Elastic logging to our application which is written in React-Native. It appears that the RUM integration for the Elastic Agent has everything we are looking for but there doesn't appear to be a cu… --- ## [Cannot start with Elasticsearch and PHP](https://discuss.elastic.co/t/cannot-start-with-elasticsearch-and-php/69433)
**Author:** [@Pavel\_Peyton\_Calta](https://discuss.elastic.co/u/Pavel_Peyton_Calta)\ **Replies:** 2\ **Last updated:** [January 2, 2017, 4:10am UTC](https://discuss.elastic.co/t/cannot-start-with-elasticsearch-and-php/69433 "2017-01-02T04:10:43Z")
Hi friends, already 3 days I am fighting with tutorials for Elasticsearch, how to install it, how to use it with php etc. Currently I have elasticsearch on server (debian 8) hopefully working, but I can't work with php… --- ## [Visualize Cisco VPN Logins](https://discuss.elastic.co/t/visualize-cisco-vpn-logins/40166)
**Author:** [@csdurbin](https://discuss.elastic.co/u/csdurbin)\ **Replies:** 2\ **Last updated:** [June 30, 2016, 8:19am UTC](https://discuss.elastic.co/t/visualize-cisco-vpn-logins/40166 "2016-06-30T08:19:12Z")
I do not know if this is possible or not, but what I am looking to do is create a visualization/dashboard that displays the users currently logged into our Cisco VPN server. The ASA device is already sending data to our … --- ## [Query with match and wildcard](https://discuss.elastic.co/t/query-with-match-and-wildcard/187325)
**Author:** [@kay-is](https://discuss.elastic.co/u/kay-is)\ **Replies:** 6\ **Last updated:** [June 26, 2019, 3:47pm UTC](https://discuss.elastic.co/t/query-with-match-and-wildcard/187325 "2019-06-26T15:47:06Z")
I have some tagged images in my Elasticsearch and want to query them with a wildcard and an exact match. POST images/image { "fileName": "1319410514097402934+test", "tags": \["someTag", "someOtherTag"\] } POST images/… --- ## [Is there an ES equivalent for Solr Tagger Handler?](https://discuss.elastic.co/t/is-there-an-es-equivalent-for-solr-tagger-handler/179062)
**Author:** [@Thales\_Valias](https://discuss.elastic.co/u/Thales_Valias)\ **Replies:** 6\ **Last updated:** [May 14, 2019, 9:14am UTC](https://discuss.elastic.co/t/is-there-an-es-equivalent-for-solr-tagger-handler/179062 "2019-05-14T09:14:02Z")
Solr has this Tagger Handler feature, is there any ES out of the box equivalent for that? How does the tagger works ? The tagger handler relies on a dedicated collection in which it stores the entities to be extracted.… --- ## [Modifying response](https://discuss.elastic.co/t/modifying-response/197215)
**Author:** [@haroutk](https://discuss.elastic.co/u/haroutk)\ **Replies:** 7\ **Last updated:** [August 29, 2019, 5:34am UTC](https://discuss.elastic.co/t/modifying-response/197215 "2019-08-29T05:34:13Z")
We have a need to modify the response document(s) from a query before returning it to the user. For example, we might need to rename a document field to a more user-friendly name. I understand that elasticsearch has ex… --- ## [Kibana Infrastructure data source](https://discuss.elastic.co/t/kibana-infrastructure-data-source/180493)
**Author:** [@Jehutywong](https://discuss.elastic.co/u/Jehutywong)\ **Replies:** 7\ **Last updated:** [June 3, 2019, 5:11pm UTC](https://discuss.elastic.co/t/kibana-infrastructure-data-source/180493 "2019-06-03T17:11:43Z")
I'd wonder, if Kibana Infrastructure app can support data source other than metricbeat. I am now collecting system metrics by Collectd. I assume Infrastructure app is looking for pre-defined field names. Can I modify f… --- ## [Java/Corretto - Elastic OSS vs Elastic Basic](https://discuss.elastic.co/t/java-corretto-elastic-oss-vs-elastic-basic/207784)
**Author:** [@udaytylertech](https://discuss.elastic.co/u/udaytylertech)\ **Replies:** 5\ **Last updated:** [November 15, 2019, 7:38am UTC](https://discuss.elastic.co/t/java-corretto-elastic-oss-vs-elastic-basic/207784 "2019-11-15T07:38:00Z")
In this discussion, I am only referring to Elastic Basic and OSS versions. Elastic requires Java 7 and above to run. But, can I run Elastic Basic with Amazon Corretto? Can I run Elastic OSS with Amazon Corretto? Also… --- ## [Query returning false results when term exceeds ngram length](https://discuss.elastic.co/t/query-returning-false-results-when-term-exceeds-ngram-length/112392)
**Author:** [@Paul\_Davies](https://discuss.elastic.co/u/Paul_Davies)\ **Replies:** 5\ **Last updated:** [December 19, 2017, 6:54pm UTC](https://discuss.elastic.co/t/query-returning-false-results-when-term-exceeds-ngram-length/112392 "2017-12-19T18:54:12Z")
The requirement is to search partial phrases in a block of text. Most of the words will be standard length. I want to keep the max\_gram value down to 10. But there may be the occasional id/code with more characters than … --- ## [Logstash file input ,message columns reads one line at atime](https://discuss.elastic.co/t/logstash-file-input-message-columns-reads-one-line-at-atime/27041)
**Author:** [@Elastic\_POC](https://discuss.elastic.co/u/Elastic_POC)\ **Replies:** 4\ **Last updated:** [August 11, 2015, 11:49am UTC](https://discuss.elastic.co/t/logstash-file-input-message-columns-reads-one-line-at-atime/27041 "2015-08-11T11:49:56Z")
I am reading one.pdf file ,it reads it multiple events ,but i want to read whole file in one event .is it possible. Also my file content does not appear plain text . it has test as below.how can i get .pdf text as is it… --- ## [Error when creating a kibana token](https://discuss.elastic.co/t/error-when-creating-a-kibana-token/315090)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 3\ **Last updated:** [September 25, 2022, 3:58pm UTC](https://discuss.elastic.co/t/error-when-creating-a-kibana-token/315090 "2022-09-25T15:58:39Z")
ubuntu 22.04 elastic 8.4.1 kibana 8.4.1 filebeat 8.4.1 auditbeat suricata elastic and kibana were working well with an old IP and when now i changed the IP to both of them i try to create a token it doesn't work ..… --- ## [Elasticsearch 7.10.2 Installation - “jdk “ ” was unexpected at this time”](https://discuss.elastic.co/t/elasticsearch-7-10-2-installation-jdk-was-unexpected-at-this-time/262355)
**Author:** [@dcenaculo](https://discuss.elastic.co/u/dcenaculo)\ **Replies:** 3\ **Last updated:** [February 18, 2021, 4:21pm UTC](https://discuss.elastic.co/t/elasticsearch-7-10-2-installation-jdk-was-unexpected-at-this-time/262355 "2021-02-18T16:21:40Z")
Hello, I'm trying to install Elasticsearch on premises. I've unziped it and I can't start it from command line: C:\\Program Files\\elasticsearch-7.10.2\\bin\>elasticsearch.bat Files\\elasticsearch-7.10.2\\jdk"" was unexpected… --- ## [Parsing error in logstash logs](https://discuss.elastic.co/t/parsing-error-in-logstash-logs/134747)
**Author:** [@cppatel](https://discuss.elastic.co/u/cppatel)\ **Replies:** 3\ **Last updated:** [June 8, 2018, 1:22pm UTC](https://discuss.elastic.co/t/parsing-error-in-logstash-logs/134747 "2018-06-08T13:22:33Z")
logstash gives following error in it's logs: \[2018-06-06T10:55:32,611\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"abcd-2018.06.… --- ## [How to do the sum aggregation based on unique id](https://discuss.elastic.co/t/how-to-do-the-sum-aggregation-based-on-unique-id/155139)
**Author:** [@Nethaji](https://discuss.elastic.co/u/Nethaji)\ **Replies:** 2\ **Last updated:** [November 8, 2018, 8:36am UTC](https://discuss.elastic.co/t/how-to-do-the-sum-aggregation-based-on-unique-id/155139 "2018-11-08T08:36:38Z")
Hi ELK Folks, I have a doubt on sum aggregation, My sample data contains three columns id status\_id cost 1 1 1000 1 5 1000 1 6 1000 2 1 … --- ## [Tibco EMS/JMS plugin integration with Logstash](https://discuss.elastic.co/t/tibco-ems-jms-plugin-integration-with-logstash/79009)
**Author:** [@Hanit\_grover](https://discuss.elastic.co/u/Hanit_grover)\ **Replies:** 2\ **Last updated:** [March 22, 2017, 9:17am UTC](https://discuss.elastic.co/t/tibco-ems-jms-plugin-integration-with-logstash/79009 "2017-03-22T09:17:39Z")
Has anyone integrated the input JMS plugin with logstash. I am trying to send events/messages from Tibco ESB and want to recieve that in logstash but could not find the configuration details. Can somebody help with the c… --- ## [Python, Elasticsearch and Apache Spark, Simple data reading](https://discuss.elastic.co/t/python-elasticsearch-and-apache-spark-simple-data-reading/307715)
**Author:** [@Silver137](https://discuss.elastic.co/u/Silver137)\ **Replies:** 1\ **Last updated:** [June 21, 2022, 1:14pm UTC](https://discuss.elastic.co/t/python-elasticsearch-and-apache-spark-simple-data-reading/307715 "2022-06-21T13:14:50Z")
I'm trying to read data from Elasticsearch using Apache Spark, the Hadoop conector and Python language. And it's give me a really true headache. The Python Code is: conf = SparkConf() conf.setMaster("local") conf.setAp… --- ## [Tutorial On Installing ELK on Lubuntu 15.04 (EDITED)](https://discuss.elastic.co/t/tutorial-on-installing-elk-on-lubuntu-15-04-edited/28241)
**Author:** [@killmasta93](https://discuss.elastic.co/u/killmasta93)\ **Replies:** 2\ **Last updated:** [August 29, 2015, 12:59am UTC](https://discuss.elastic.co/t/tutorial-on-installing-elk-on-lubuntu-15-04-edited/28241 "2015-08-29T00:59:46Z")
Hi, I was very interesting in having an ELK server but many tutorials were not too clear about some things so I decided on making one from scratch. I used other guides to help me on making my guide which includes install… --- ## [Java -d64 Option](https://discuss.elastic.co/t/java-d64-option/4986)
**Author:** [@Ed\_Brown\_VSTI](https://discuss.elastic.co/u/Ed_Brown_VSTI)\ **Replies:** 6\ **Last updated:** [December 30, 2014, 9:07pm UTC](https://discuss.elastic.co/t/java-d64-option/4986 "2014-12-30T21:07:24Z")
I added the "-d64" option to the JAVA\_OPTS environment variable in elasticsearch.in.sh. The following was added: JAVA\_OPTS="$JAVA\_OPTS -d64" When the process is running, I don't see the "-d64" being a part of the… --- ## [Logstash not working with https elastic search output](https://discuss.elastic.co/t/logstash-not-working-with-https-elastic-search-output/190494)
**Author:** [@Sharma3007](https://discuss.elastic.co/u/Sharma3007)\ **Replies:** 4\ **Last updated:** [July 16, 2019, 11:54am UTC](https://discuss.elastic.co/t/logstash-not-working-with-https-elastic-search-output/190494 "2019-07-16T11:54:47Z")
Hi Team, I am getting below error while run log stash with https elastic search output: Here are the error details: \[2019-07-15T12:08:17,978\]\[ERROR\]\[logstash.licensechecker.licensereader\] Unable to retrieve license i… --- ## [Connecting error publishing events (retrying)](https://discuss.elastic.co/t/connecting-error-publishing-events-retrying/87610)
**Author:** [@Ranjeet\_Ranjan](https://discuss.elastic.co/u/Ranjeet_Ranjan)\ **Replies:** 4\ **Last updated:** [June 1, 2017, 5:44pm UTC](https://discuss.elastic.co/t/connecting-error-publishing-events-retrying/87610 "2017-06-01T17:44:17Z")
Hi, I am getting below error after installing X-pack. Connecting error publishing events (retrying): dial tcp 192.168.154.170:5044: getsockopt: connection refused Here is my filebeat.yml ###########################… --- ## [How to extract a field to match a keyword from a custom log to create alert](https://discuss.elastic.co/t/how-to-extract-a-field-to-match-a-keyword-from-a-custom-log-to-create-alert/179111)
**Author:** [@Fosiul\_Alam](https://discuss.elastic.co/u/Fosiul_Alam)\ **Replies:** 5\ **Last updated:** [May 8, 2019, 3:49pm UTC](https://discuss.elastic.co/t/how-to-extract-a-field-to-match-a-keyword-from-a-custom-log-to-create-alert/179111 "2019-05-08T15:49:30Z")
Hi, i was watching the video how to create Alert by using system log file ( Load Average etc) however, i have customer log file, bellow log are under message, What i am looking for is , When the Field \[ALARM:NONE\] w… --- ## [Not able to create Index in ES with Logstash](https://discuss.elastic.co/t/not-able-to-create-index-in-es-with-logstash/1173)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 5\ **Last updated:** [May 25, 2015, 5:33am UTC](https://discuss.elastic.co/t/not-able-to-create-index-in-es-with-logstash/1173 "2015-05-25T05:33:59Z")
Continuing the discussion from Not able to create Index with Logstash: --- ## [Aggregation based on Array Intersection](https://discuss.elastic.co/t/aggregation-based-on-array-intersection/252068)
**Author:** [@Charles\_Lariviere](https://discuss.elastic.co/u/Charles_Lariviere)\ **Replies:** 2\ **Last updated:** [October 14, 2020, 4:53pm UTC](https://discuss.elastic.co/t/aggregation-based-on-array-intersection/252068 "2020-10-14T16:53:40Z")
Hi, I'm looking to write a query that will return the "most frequently co-occurring terms given an input of one or more terms", though I'm quite unclear as to how I would structure such a query (or if it is even possibl… --- ## [Slow increase in memory pressure](https://discuss.elastic.co/t/slow-increase-in-memory-pressure/54084)
**Author:** [@afaraone](https://discuss.elastic.co/u/afaraone)\ **Replies:** 7\ **Last updated:** [July 26, 2016, 8:31pm UTC](https://discuss.elastic.co/t/slow-increase-in-memory-pressure/54084 "2016-07-26T20:31:41Z")
Over the past two weeks, the memory pressure on our prod cluster has been slowly ramping up higher and higher. we passed 74% last week, and are in the 80s as I write this. We are using upserts because come documents … --- ## [Elastic-agent as non-root - possible?](https://discuss.elastic.co/t/elastic-agent-as-non-root-possible/319321)
**Author:** [@el\_gg](https://discuss.elastic.co/u/el_gg)\ **Replies:** 2\ **Last updated:** [November 21, 2022, 1:14am UTC](https://discuss.elastic.co/t/elastic-agent-as-non-root-possible/319321 "2022-11-21T01:14:10Z")
Hi, We're doing a POC on the ELK stack and are now looking into the elastic-agent and fleet. Our install is on RHEL8 VMs. We now ran into this: Error: unable to perform install command, not executed with root permissi… --- ## [Unknown-setting-cluster-initial-master-nodes error in ES 7.6.2](https://discuss.elastic.co/t/unknown-setting-cluster-initial-master-nodes-error-in-es-7-6-2/229718)
**Author:** [@fstewart](https://discuss.elastic.co/u/fstewart)\ **Replies:** 2\ **Last updated:** [April 25, 2020, 5:11pm UTC](https://discuss.elastic.co/t/unknown-setting-cluster-initial-master-nodes-error-in-es-7-6-2/229718 "2020-04-25T17:11:27Z")
According to the discussion and breaking doc in this post, ES 7.x should recognize the setting cluster.initial\_master\_nodes. Here's the yml after installing ES 7.6.2 on Windows 7: bootstrap.memory\_lock: true cluster.in… --- ## [Timelion query spaces](https://discuss.elastic.co/t/timelion-query-spaces/126221)
**Author:** [@ConorTier](https://discuss.elastic.co/u/ConorTier)\ **Replies:** 2\ **Last updated:** [April 3, 2018, 7:41am UTC](https://discuss.elastic.co/t/timelion-query-spaces/126221 "2018-04-03T07:41:33Z")
Like the query asked here Is there a way to get Timelion querys to accept spaces, I understand the query is a lucene query The query I have in question is (which works perfectly well): logger: SomeLogger+Monitoring … --- ## [Indexing strategy for sparse data](https://discuss.elastic.co/t/indexing-strategy-for-sparse-data/107356)
**Author:** [@dandrestor](https://discuss.elastic.co/u/dandrestor)\ **Replies:** 2\ **Last updated:** [November 13, 2017, 10:03am UTC](https://discuss.elastic.co/t/indexing-strategy-for-sparse-data/107356 "2017-11-13T10:03:38Z")
Hello, I have a design-related conundrum, and I'm hoping somebody might have already come across the same problem. We have set up ELK to ingest logs from a variety of sources. These come in different types (such as lin… --- ## [Create Tab Page within a Dashboard Page of Kibana](https://discuss.elastic.co/t/create-tab-page-within-a-dashboard-page-of-kibana/31575)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 2\ **Last updated:** [October 3, 2015, 11:35pm UTC](https://discuss.elastic.co/t/create-tab-page-within-a-dashboard-page-of-kibana/31575 "2015-10-03T23:35:02Z")
I have multiple analysis area within a Dashboard I want to split that analysis with tabs within a Dashboard page, so that user have full visibility what all stuff available in dashboard. Please let me know, is there an… --- ## [How to scale daily indexing](https://discuss.elastic.co/t/how-to-scale-daily-indexing/236)
**Author:** [@gmu3](https://discuss.elastic.co/u/gmu3)\ **Replies:** 2\ **Last updated:** [May 12, 2015, 9:03pm UTC](https://discuss.elastic.co/t/how-to-scale-daily-indexing/236 "2015-05-12T21:03:45Z")
I know the default in Logstash is to create a new index daily. I've also seen in different places people recommend not running more than a couple shards per node, because each shard is a Lucene instance under the surfac… [Previous page](https://discuss.elastic.co/top.md?page=815&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=817&per_page=50&period=all)