# Top **URL:** https://discuss.elastic.co/top.md?page=821&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 822 --- ## [Filebeat is not running after ELK setup in ubuntu machine](https://discuss.elastic.co/t/filebeat-is-not-running-after-elk-setup-in-ubuntu-machine/108663)
**Author:** [@anujjain0801](https://discuss.elastic.co/u/anujjain0801)\ **Replies:** 8\ **Last updated:** [November 23, 2017, 2:22pm UTC](https://discuss.elastic.co/t/filebeat-is-not-running-after-elk-setup-in-ubuntu-machine/108663 "2017-11-23T14:22:07Z")
Hi Team, Recently I started setting up ELK in one of the ubuntu machines and Filebeat in someother machine using the https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elk-… --- ## [Failed to initialize a TrustManager for the system keystore (using elasticsearch-oss; i.e. no XPack)](https://discuss.elastic.co/t/failed-to-initialize-a-trustmanager-for-the-system-keystore-using-elasticsearch-oss-i-e-no-xpack/303778)
**Author:** [@Alex\_Nelson](https://discuss.elastic.co/u/Alex_Nelson)\ **Replies:** 4\ **Last updated:** [May 3, 2022, 1:44pm UTC](https://discuss.elastic.co/t/failed-to-initialize-a-trustmanager-for-the-system-keystore-using-elasticsearch-oss-i-e-no-xpack/303778 "2022-05-03T13:44:42Z")
I manage Elasticsearch on multiple instances. One of my instances is having problems bringing up Elasticsearch. I am unable to determine why this one instance is having problems. All of my instances should have the sa… --- ## [How can I split string in Elasticsearch](https://discuss.elastic.co/t/how-can-i-split-string-in-elasticsearch/266576)
**Author:** [@pakwai122](https://discuss.elastic.co/u/pakwai122)\ **Replies:** 5\ **Last updated:** [March 9, 2021, 7:57am UTC](https://discuss.elastic.co/t/how-can-i-split-string-in-elasticsearch/266576 "2021-03-09T07:57:04Z")
I'm using nodejs as the client-side for Elasticsearch and got the following settings for the query. I want to split the text while users input text like "aa123 bb234" into "aa123 bb" "234". Only split the pattern like "b… --- ## [Missing data when using using fields and tags in uptime 7.3.0](https://discuss.elastic.co/t/missing-data-when-using-using-fields-and-tags-in-uptime-7-3-0/199460)
**Author:** [@Dannyb](https://discuss.elastic.co/u/Dannyb)\ **Replies:** 5\ **Last updated:** [September 23, 2019, 6:42pm UTC](https://discuss.elastic.co/t/missing-data-when-using-using-fields-and-tags-in-uptime-7-3-0/199460 "2019-09-23T18:42:31Z")
I’ve added some tags to my heartbeat monitor: fields: Environment: test SiteName: mysite fields\_under\_root: true ( although this doesn't make any different to the issue) Soon as I do this on the uptime board, the mo… --- ## [What is the use of payload?](https://discuss.elastic.co/t/what-is-the-use-of-payload/183838)
**Author:** [@grefon](https://discuss.elastic.co/u/grefon)\ **Replies:** 3\ **Last updated:** [June 2, 2019, 5:18pm UTC](https://discuss.elastic.co/t/what-is-the-use-of-payload/183838 "2019-06-02T17:18:22Z")
The documentation describes the plugin "Delimited Payload Token Filter": https://www.elastic.co/guide/en/elasticsearch/reference/7.0/analysis-delimited-payload-tokenfilter.html What is the use of it? How can I use it? … --- ## [ELK Stack on Microsoft Azure](https://discuss.elastic.co/t/elk-stack-on-microsoft-azure/40522)
**Author:** [@mellberg](https://discuss.elastic.co/u/mellberg)\ **Replies:** 3\ **Last updated:** [June 14, 2016, 1:15pm UTC](https://discuss.elastic.co/t/elk-stack-on-microsoft-azure/40522 "2016-06-14T13:15:45Z")
I'm thinking about trying out the ELK stack using Microsoft Azure and I am wondering if someone here knows a good way of setting it up. Any advice as well as links to tutorials/guides/walkthroughs will be highly apprec… --- ## [How to extract a field from message and create a visualization?](https://discuss.elastic.co/t/how-to-extract-a-field-from-message-and-create-a-visualization/164559)
**Author:** [@friscos](https://discuss.elastic.co/u/friscos)\ **Replies:** 1\ **Last updated:** [January 17, 2019, 6:26am UTC](https://discuss.elastic.co/t/how-to-extract-a-field-from-message-and-create-a-visualization/164559 "2019-01-17T06:26:06Z")
Hi, I would like to extract a responsetime from message and create a visualization for the response time. How do i do that? Here is how my message looks like: { "\_index": "test", "\_type": "logs", "\_id": "pTylV93", … --- ## [Multiple ports from Kibana to Elasticsearch in TIME\_WAIT](https://discuss.elastic.co/t/multiple-ports-from-kibana-to-elasticsearch-in-time-wait/74551)
**Author:** [@cawoody](https://discuss.elastic.co/u/cawoody)\ **Replies:** 1\ **Last updated:** [February 9, 2017, 10:21pm UTC](https://discuss.elastic.co/t/multiple-ports-from-kibana-to-elasticsearch-in-time-wait/74551 "2017-02-09T22:21:59Z")
I am running Kibana version 4.5.0 and Elasticsearch 2.3.0 on a Linux server. Kibana appears to be running fine but upon running the command. netstat -anp | grep 9200 I constantly see between 85-93 tcp to port 920… --- ## [\[8.3.2\] Message at Kibana's login page "Please upgrade your browser" when applying a Tampermonkey userscript](https://discuss.elastic.co/t/8-3-2-message-at-kibanas-login-page-please-upgrade-your-browser-when-applying-a-tampermonkey-userscript/309796)
**Author:** [@gerib](https://discuss.elastic.co/u/gerib)\ **Replies:** 2\ **Last updated:** [July 19, 2022, 10:51am UTC](https://discuss.elastic.co/t/8-3-2-message-at-kibanas-login-page-please-upgrade-your-browser-when-applying-a-tampermonkey-userscript/309796 "2022-07-19T10:51:49Z")
When applying the following userscript in Tampermonkey: // ==UserScript== // @name tab-size: 2 // @description Sets the tab (U+9) character's display size to 2. // @version 22.07.16-1645 // @author G… --- ## [Machine Learning on scripted field?](https://discuss.elastic.co/t/machine-learning-on-scripted-field/89054)
**Author:** [@bcz](https://discuss.elastic.co/u/bcz)\ **Replies:** 2\ **Last updated:** [June 12, 2017, 5:18pm UTC](https://discuss.elastic.co/t/machine-learning-on-scripted-field/89054 "2017-06-12T17:18:17Z")
I want to be able to run machine learning on an ingested field, but need to do a transformation to that field to make it useable. The transformation is the conversion of a score from a log scale to a linear scale. I hav… --- ## [Is there any way to access all cloudwatch log groups without providing the exact name?](https://discuss.elastic.co/t/is-there-any-way-to-access-all-cloudwatch-log-groups-without-providing-the-exact-name/186349)
**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\ **Replies:** 4\ **Last updated:** [June 19, 2019, 12:21am UTC](https://discuss.elastic.co/t/is-there-any-way-to-access-all-cloudwatch-log-groups-without-providing-the-exact-name/186349 "2019-06-19T00:21:18Z")
Hi everyone, question about Logstash input plugin for Cloudwatch logs. I want to get all the logs in the log groups that start with /aws/lambda/, is that possible? I tried the below configuration with log\_group =\> \["/a… --- ## [How to Query last 90 minutes records in elasticsearch sql query](https://discuss.elastic.co/t/how-to-query-last-90-minutes-records-in-elasticsearch-sql-query/176180)
**Author:** [@Gnanendra](https://discuss.elastic.co/u/Gnanendra)\ **Replies:** 1\ **Last updated:** [April 11, 2019, 7:03am UTC](https://discuss.elastic.co/t/how-to-query-last-90-minutes-records-in-elasticsearch-sql-query/176180 "2019-04-11T07:03:18Z")
Hi, how to query and get last 90 minutes data using elasticsearch sql query. now i am running below command please modified this one: select index\_stats.index, index\_stats.primaries.indexing.index\_total, index\_stats.p… --- ## [Remote access to Kibana](https://discuss.elastic.co/t/remote-access-to-kibana/165252)
**Author:** [@Alexandra\_B](https://discuss.elastic.co/u/Alexandra_B)\ **Replies:** 1\ **Last updated:** [January 22, 2019, 2:45pm UTC](https://discuss.elastic.co/t/remote-access-to-kibana/165252 "2019-01-22T14:45:38Z")
Hello, I would like to access to Kibana (ip-address:5601), not only from localhost, but from my laptop, which is in the same LAN. How can I do ? Thank you very much PS : same issue for Elasticsearch... --- ## [Anonymize some fields in specifc index](https://discuss.elastic.co/t/anonymize-some-fields-in-specifc-index/125824)
**Author:** [@mlobo](https://discuss.elastic.co/u/mlobo)\ **Replies:** 1\ **Last updated:** [March 27, 2018, 10:16pm UTC](https://discuss.elastic.co/t/anonymize-some-fields-in-specifc-index/125824 "2018-03-27T22:16:40Z")
Hi all, I'd like to know if is possible in Elasticsearch to store some fields, in a specific index, anonymized. So, for example, I'd like that for index named "index\_secret", the fields named "gender" and "religion", a… --- ## [Unable to convert field from string to integer](https://discuss.elastic.co/t/unable-to-convert-field-from-string-to-integer/38915)
**Author:** [@echerno21](https://discuss.elastic.co/u/echerno21)\ **Replies:** 6\ **Last updated:** [July 2, 2017, 11:56pm UTC](https://discuss.elastic.co/t/unable-to-convert-field-from-string-to-integer/38915 "2017-07-02T23:56:52Z")
I am unable to convert a field, that I am generating using 'kv' plugin, from string to integer. Here is the snippet of the config: filter { kv { allow\_duplicate\_values =\> false value\_split =\> "=" } mutate { conver… --- ## [How can i search a null value in an ES query?](https://discuss.elastic.co/t/how-can-i-search-a-null-value-in-an-es-query/191411)
**Author:** [@morihend](https://discuss.elastic.co/u/morihend)\ **Replies:** 3\ **Last updated:** [July 25, 2019, 11:49pm UTC](https://discuss.elastic.co/t/how-can-i-search-a-null-value-in-an-es-query/191411 "2019-07-25T23:49:32Z")
Hello, I have a query ES that must search a null value in a field that is a date type in my BDD. Logstash is my program that put datas in the ES. Look at my query below. The problem is here : "DATE\_FIN": null { "qu… --- ## [Investigating elasticsearch load issues](https://discuss.elastic.co/t/investigating-elasticsearch-load-issues/11959)
**Author:** [@Dale\_Beermann\_2](https://discuss.elastic.co/u/Dale_Beermann_2)\ **Replies:** 8\ **Last updated:** [May 16, 2013, 5:36pm UTC](https://discuss.elastic.co/t/investigating-elasticsearch-load-issues/11959 "2013-05-16T17:36:14Z")
I'm trying to investigate relatively high load we're seeing across every node in a 15 instance cluster. So far I haven't been able to track down exactly what's going on. Performance itself doesn't seem to be a pro… --- ## [2 node cluster on Elasticsearch 7.0.1](https://discuss.elastic.co/t/2-node-cluster-on-elasticsearch-7-0-1/189127)
**Author:** [@duncRed](https://discuss.elastic.co/u/duncRed)\ **Replies:** 5\ **Last updated:** [July 8, 2019, 3:41pm UTC](https://discuss.elastic.co/t/2-node-cluster-on-elasticsearch-7-0-1/189127 "2019-07-08T15:41:41Z")
Hi We had configured a 2 node cluster on Elasticsearch 6.x with both nodes configured as master eligible and the minimum number of master nodes configured to 1. We found this worked for our requirements particularly wh… --- ## [SignificantTerms Agg : \_superset\_size greater than doc\_count !?](https://discuss.elastic.co/t/significantterms-agg--superset-size-greater-than-doc-count/29486)
**Author:** [@tomlameche](https://discuss.elastic.co/u/tomlameche)\ **Replies:** 5\ **Last updated:** [September 18, 2015, 8:28am UTC](https://discuss.elastic.co/t/significantterms-agg--superset-size-greater-than-doc-count/29486 "2015-09-18T08:28:16Z")
Hello, My appology for my bad english... I'm trying to script a custom score for significant aggregation, and i'm very surprised with the value off the variables supersetfreq and supersetsize. =\> supersetsize is grea… --- ## [Journalbeat processor logical operators fail with expanded notation](https://discuss.elastic.co/t/journalbeat-processor-logical-operators-fail-with-expanded-notation/233813)
**Author:** [@Disconn3ct](https://discuss.elastic.co/u/Disconn3ct)\ **Replies:** 3\ **Last updated:** [June 3, 2020, 11:54pm UTC](https://discuss.elastic.co/t/journalbeat-processor-logical-operators-fail-with-expanded-notation/233813 "2020-06-03T23:54:48Z")
Version: 7.6.1 Operating System: Ubuntu 16.04 Creating a journalbeat configuration using logical operators according to the documentation causes failures: processors: - drop\_event: when: or: … --- ## [Problems with date subtraction](https://discuss.elastic.co/t/problems-with-date-subtraction/87123)
**Author:** [@Mickael\_fraga](https://discuss.elastic.co/u/Mickael_fraga)\ **Replies:** 1\ **Last updated:** [May 26, 2017, 9:23pm UTC](https://discuss.elastic.co/t/problems-with-date-subtraction/87123 "2017-05-26T21:23:25Z")
Good morning, I would like help. My problem is this, I need to create a field in kibana which is the subtraction of two date fields ex (2017-01-01 - 2017-01-11) where the result would be 10 days Script I'm creating a… --- ## [Read data from OPC-UA Server](https://discuss.elastic.co/t/read-data-from-opc-ua-server/77619)
**Author:** [@sasauz](https://discuss.elastic.co/u/sasauz)\ **Replies:** 1\ **Last updated:** [March 9, 2017, 12:34pm UTC](https://discuss.elastic.co/t/read-data-from-opc-ua-server/77619 "2017-03-09T12:34:21Z")
Hello everyone, I'm trying to read data from an OPC-UA Server. OPC-UA communicates via TCP and my hope was that it would work with the standard TCP-plugin, but it doesn't input { tcp { host =\> "localhost… --- ## [Constrain Terms Aggregation by Doc Count Range](https://discuss.elastic.co/t/constrain-terms-aggregation-by-doc-count-range/78888)
**Author:** [@jamesaharvey](https://discuss.elastic.co/u/jamesaharvey)\ **Replies:** 1\ **Last updated:** [March 16, 2017, 7:22pm UTC](https://discuss.elastic.co/t/constrain-terms-aggregation-by-doc-count-range/78888 "2017-03-16T19:22:24Z")
I'm looking for a reliable and complete way to get Terms Aggregation doc\_counts within a specific range. I'm currently using the min\_doc\_count to constrain on one end of the range however this is limiting for my use ca… --- ## [Packetbeat memory and cpu consumption when monitoring cassandra](https://discuss.elastic.co/t/packetbeat-memory-and-cpu-consumption-when-monitoring-cassandra/105210)
**Author:** [@chris060986](https://discuss.elastic.co/u/chris060986)\ **Replies:** 4\ **Last updated:** [October 25, 2017, 2:33pm UTC](https://discuss.elastic.co/t/packetbeat-memory-and-cpu-consumption-when-monitoring-cassandra/105210 "2017-10-25T14:33:47Z")
Hi, I have problems when I try to monitor cassandra with packetbeat, the cpu usage is round about 99.9 % and memory usage is increasing up to 90% of the available memory. The setup is the following: There is a network… --- ## [Is there a for loop to iterate from %{header1} to %{header40}](https://discuss.elastic.co/t/is-there-a-for-loop-to-iterate-from-header1-to-header40/185078)
**Author:** [@TsuWeiQuan](https://discuss.elastic.co/u/TsuWeiQuan)\ **Replies:** 2\ **Last updated:** [June 11, 2019, 9:59am UTC](https://discuss.elastic.co/t/is-there-a-for-loop-to-iterate-from-header1-to-header40/185078 "2019-06-11T09:59:12Z")
Hello, I was wondering if there exists a more elegant way to do this. Currently, in my pipeline to process .log files, I used grok filter to filter field header and field data. This allows me to achieve 40 fields & 40… --- ## [Can you make sure this path is a logstash config file?](https://discuss.elastic.co/t/can-you-make-sure-this-path-is-a-logstash-config-file/132897)
**Author:** [@cmardonespino](https://discuss.elastic.co/u/cmardonespino)\ **Replies:** 2\ **Last updated:** [May 23, 2018, 1:02pm UTC](https://discuss.elastic.co/t/can-you-make-sure-this-path-is-a-logstash-config-file/132897 "2018-05-23T13:02:57Z")
Hi guys, Im a really novice guy working for first time with Logstash, Elasticsearch and Kibana. I created a logstash.conf file: input{ stdin{} } output{ elasticsearch { hosts =\> \["elasticsearch:9200"\] } } I cre… --- ## [How to display images from a scripted Field](https://discuss.elastic.co/t/how-to-display-images-from-a-scripted-field/80945)
**Author:** [@somaz80](https://discuss.elastic.co/u/somaz80)\ **Replies:** 2\ **Last updated:** [April 4, 2017, 7:18am UTC](https://discuss.elastic.co/t/how-to-display-images-from-a-scripted-field/80945 "2017-04-04T07:18:31Z")
Hi, I am new to elastic search and Kibana. I have created a scripted field in Kibana 5.2.2 and value for that looks like "https://img.pokemondb.net/artwork/vaporeon.jpg" It is pointing to an image. Now I want to disp… --- ## [Viewing archive topics causes them to be marked unread](https://discuss.elastic.co/t/viewing-archive-topics-causes-them-to-be-marked-unread/25520)
**Author:** [@colings86](https://discuss.elastic.co/u/colings86)\ **Replies:** 3\ **Last updated:** [December 15, 2015, 8:06am UTC](https://discuss.elastic.co/t/viewing-archive-topics-causes-them-to-be-marked-unread/25520 "2015-12-15T08:06:37Z")
If I view any of the archive topics (the ones imported from GGroups) the topic is added to the unread list. Can this be disabled so that all the archive topics are implictly read. It's pretty annoying when searching thro… --- ## [Mutate -\> convert filter is not working as expected](https://discuss.elastic.co/t/mutate-convert-filter-is-not-working-as-expected/145431)
**Author:** [@Malli](https://discuss.elastic.co/u/Malli)\ **Replies:** 6\ **Last updated:** [August 23, 2018, 9:38pm UTC](https://discuss.elastic.co/t/mutate-convert-filter-is-not-working-as-expected/145431 "2018-08-23T21:38:46Z")
I am trying to creating a new field using mutate-\> add\_field filter for a key coming from json data. I need to convert that filed to a integer/number. i am using the below syntax mutate { convert =\> {"timeTaken" =\> "i… --- ## [Elastic Cloud Integration with FusionAuth](https://discuss.elastic.co/t/elastic-cloud-integration-with-fusionauth/263323)
**Author:** [@vexana](https://discuss.elastic.co/u/vexana)\ **Replies:** 7\ **Last updated:** [February 8, 2021, 8:51am UTC](https://discuss.elastic.co/t/elastic-cloud-integration-with-fusionauth/263323 "2021-02-08T08:51:26Z")
Hi Everyone, I am trying to using FusionAuth (https://fusionauth.io/) as IdP (OpenID or SAML) to my elastic stack running on Elastic Cloud. Here is my elasticsearch.yaml configuration: xpack: security: authc: … --- ## [Kibana: getting 503 "service unavailable"](https://discuss.elastic.co/t/kibana-getting-503-service-unavailable/303471)
**Author:** [@Poojan](https://discuss.elastic.co/u/Poojan)\ **Replies:** 5\ **Last updated:** [April 29, 2022, 5:42am UTC](https://discuss.elastic.co/t/kibana-getting-503-service-unavailable/303471 "2022-04-29T05:42:56Z")
Hello guys, I am working on kibana 8.1.2 version. while creating/updating charts and loading dashboard I am getting 503 "service unavailable" message. Can anyone please help me to understand this issue? Thanks Pooja… --- ## [Support buckets-path with significant terms aggregations](https://discuss.elastic.co/t/support-buckets-path-with-significant-terms-aggregations/90381)
**Author:** [@marb](https://discuss.elastic.co/u/marb)\ **Replies:** 8\ **Last updated:** [June 28, 2017, 3:19pm UTC](https://discuss.elastic.co/t/support-buckets-path-with-significant-terms-aggregations/90381 "2017-06-28T15:19:06Z")
Hi, I would like to use the significant terms aggregations to do the comparison based on something else than a ratio: the significant term aggregation is used to compare the proportion of an element against a foregroun… --- ## [Not Sending Unique Errors](https://discuss.elastic.co/t/not-sending-unique-errors/59340)
**Author:** [@denton64](https://discuss.elastic.co/u/denton64)\ **Replies:** 8\ **Last updated:** [September 1, 2016, 2:54am UTC](https://discuss.elastic.co/t/not-sending-unique-errors/59340 "2016-09-01T02:54:01Z")
Hey there, Right now, I have a watch set up to send errors within a set window to a hipchat webhook. Unfortunately, it is only sending the most recent error. I would like to send all unique errors in that window but un… --- ## [How to read same file multiple times in Filebeat?](https://discuss.elastic.co/t/how-to-read-same-file-multiple-times-in-filebeat/193706)
**Author:** [@Daniel6](https://discuss.elastic.co/u/Daniel6)\ **Replies:** 2\ **Last updated:** [August 5, 2019, 7:45am UTC](https://discuss.elastic.co/t/how-to-read-same-file-multiple-times-in-filebeat/193706 "2019-08-05T07:45:07Z")
Hi, I run ELK on Linux(CentOS7). I know in Logstash we could add sincedb\_path =\> "/dev/null" in config/logstash.conf, so we could read same file again and again. How to do this in filebeat? --- ## [How to setup Kafka output in Filebeat](https://discuss.elastic.co/t/how-to-setup-kafka-output-in-filebeat/67154)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 2\ **Last updated:** [November 29, 2016, 5:14am UTC](https://discuss.elastic.co/t/how-to-setup-kafka-output-in-filebeat/67154 "2016-11-29T05:14:07Z")
Hi, I have the following Filebeat configuration; output.kafka: enabled: true hosts: \["192.168.0.1:\"\] topic: testtopic What port should I provide here? I am entirely new to Kafka. I have Kafka installed a… --- ## [Proxy / Forwarder security issue](https://discuss.elastic.co/t/proxy-forwarder-security-issue/205082)
**Author:** [@robrotheram](https://discuss.elastic.co/u/robrotheram)\ **Replies:** 4\ **Last updated:** [October 24, 2019, 9:23pm UTC](https://discuss.elastic.co/t/proxy-forwarder-security-issue/205082 "2019-10-24T21:23:16Z")
Hi I am trialing ECE and I have setup secure route to a new cluster and that works fine. I get a access denied when I try and access it from anywhere except the host I allowed. But I can hit the frc-services-forwarders… --- ## [Embedding Kibana dashboard iframe with authentication](https://discuss.elastic.co/t/embedding-kibana-dashboard-iframe-with-authentication/312370)
**Author:** [@bhushan\_pathak](https://discuss.elastic.co/u/bhushan_pathak)\ **Replies:** 1\ **Last updated:** [August 25, 2022, 5:36am UTC](https://discuss.elastic.co/t/embedding-kibana-dashboard-iframe-with-authentication/312370 "2022-08-25T05:36:12Z")
Hello People, We are using Kibana v7.16.3 in our production. I know there are lots of similar questions asked regarding this topic and I have gone through many of them but they don't seem to answer my question. I am t… --- ## [Setting variables in logstash configuration files](https://discuss.elastic.co/t/setting-variables-in-logstash-configuration-files/49431)
**Author:** [@Ryan\_Groten](https://discuss.elastic.co/u/Ryan_Groten)\ **Replies:** 1\ **Last updated:** [May 6, 2016, 8:49pm UTC](https://discuss.elastic.co/t/setting-variables-in-logstash-configuration-files/49431 "2016-05-06T20:49:58Z")
I have multiple logstash clients that use identical logstash configurations except for small things like the path to the file to monitor. I'm wondering if this value can be parameterized for easier templating? Current… --- ## [Logstash not listening on 5044](https://discuss.elastic.co/t/logstash-not-listening-on-5044/181642)
**Author:** [@thadc](https://discuss.elastic.co/u/thadc)\ **Replies:** 3\ **Last updated:** [May 20, 2019, 1:17pm UTC](https://discuss.elastic.co/t/logstash-not-listening-on-5044/181642 "2019-05-20T13:17:35Z")
Hi, I have had filebeat/logstash/elasticsearch running successfully on (I'll call it) boxA for several weeks. Recently I had the need to set up on (I'll call it) boxB. I am using the same version of the elk components on… --- ## [Elasticsearch run error](https://discuss.elastic.co/t/elasticsearch-run-error/170581)
**Author:** [@Hyeon-Seung\_Choi](https://discuss.elastic.co/u/Hyeon-Seung_Choi)\ **Replies:** 3\ **Last updated:** [March 2, 2019, 9:22am UTC](https://discuss.elastic.co/t/elasticsearch-run-error/170581 "2019-03-02T09:22:53Z")
My machine : Raspberry pi Elasticsearch log: \[2019-03-02T08:44:25,497\]\[WARN \]\[o.e.b.Natives \] \[unknown\] unable to load JNA native support library, native methods will be disabled. java.lang.UnsatisfiedLinkEr… --- ## [Combining result sets from two or more queries](https://discuss.elastic.co/t/combining-result-sets-from-two-or-more-queries/20516)
**Author:** [@tpapad](https://discuss.elastic.co/u/tpapad)\ **Replies:** 0\ **Last updated:** [October 31, 2014, 1:34pm UTC](https://discuss.elastic.co/t/combining-result-sets-from-two-or-more-queries/20516 "2014-10-31T13:34:07Z")
I'm trying to compile a DSL query to satisfy the following requirement (test case) but I can't: Model: \*Customer\* documents stored in ES, each \*customer\* has \*nested\* objects of type \*Invoice\* and each \*invoice… --- ## [Error Uploading Template to Elasticsearch](https://discuss.elastic.co/t/error-uploading-template-to-elasticsearch/272275)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 3\ **Last updated:** [May 10, 2021, 8:58am UTC](https://discuss.elastic.co/t/error-uploading-template-to-elasticsearch/272275 "2021-05-10T08:58:58Z")
Hi. I'm adding the 7.12.1 template to our elasticsearch cluster. However, I'm getting this error: Exiting: error loading template: could not load template. Elasticsearch returned: couldn't load template: 400 Bad Reques… --- ## [Query text which starting with slash by ElasticSearch 6.4.3](https://discuss.elastic.co/t/query-text-which-starting-with-slash-by-elasticsearch-6-4-3/172892)
**Author:** [@Chia-Wen\_Wu](https://discuss.elastic.co/u/Chia-Wen_Wu)\ **Replies:** 5\ **Last updated:** [March 19, 2019, 9:58am UTC](https://discuss.elastic.co/t/query-text-which-starting-with-slash-by-elasticsearch-6-4-3/172892 "2019-03-19T09:58:09Z")
Hi all, Here is my data structure in Elasticsearch { "took" : 13, "timed\_out" : false, "\_shards" : { "total" : 4, "successful" : 4, "skipped" : 0, "failed" : 0 }, "hits" : { "total" : 1, … --- ## [Moving Average aggregation does not work with data points](https://discuss.elastic.co/t/moving-average-aggregation-does-not-work-with-data-points/54226)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 5\ **Last updated:** [July 5, 2016, 4:43pm UTC](https://discuss.elastic.co/t/moving-average-aggregation-does-not-work-with-data-points/54226 "2016-07-05T16:43:41Z")
Hi everyone, I am using Elasticsearch 2.3.2, and Kibana 4.5.0 with Timelion plugin to generate visualization data at the moment. Nevertheless, there is an issue in regard of Timelion. The issue comes with the MOVINGAVER… --- ## [Logstash - Cassandra error-NoHostAvailableException](https://discuss.elastic.co/t/logstash-cassandra-error-nohostavailableexception/53923)
**Author:** [@Srivastavark](https://discuss.elastic.co/u/Srivastavark)\ **Replies:** 5\ **Last updated:** [July 1, 2016, 8:47pm UTC](https://discuss.elastic.co/t/logstash-cassandra-error-nohostavailableexception/53923 "2016-07-01T20:47:07Z")
Hello Experts, I am new to logstash and trying to index Cassandra data in Elasticsearch using JDBC input plugin but facing issue in test Logstash 2.3.3, Cassandra -3.5 Pipeline aborted due to error {:exception=\># … --- ## [Xfs memory allocation problem?](https://discuss.elastic.co/t/xfs-memory-allocation-problem/73779)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 2\ **Last updated:** [February 21, 2017, 1:47am UTC](https://discuss.elastic.co/t/xfs-memory-allocation-problem/73779 "2017-02-21T01:47:18Z")
I would like to ask question if this xfs filesystem problem will be a related issue for elasticsearch when incoming requests becomes high. Recently my colleague had experienced memory allocation problem using xfs on RH… --- ## [How to prevent access to specific indexes?](https://discuss.elastic.co/t/how-to-prevent-access-to-specific-indexes/30083)
**Author:** [@John\_Damore](https://discuss.elastic.co/u/John_Damore)\ **Replies:** 2\ **Last updated:** [September 28, 2015, 9:17pm UTC](https://discuss.elastic.co/t/how-to-prevent-access-to-specific-indexes/30083 "2015-09-28T21:17:00Z")
For a user role, I would like to provide access to all indexes except specific indexes patterns can I do that? Something like: user: indices: '\*': read '.\*': no access to these Thanks --- ## [How does Elasticsearch map Integer doc IDs to shards](https://discuss.elastic.co/t/how-does-elasticsearch-map-integer-doc-ids-to-shards/261329)
**Author:** [@rex-remind](https://discuss.elastic.co/u/rex-remind)\ **Replies:** 7\ **Last updated:** [January 17, 2021, 6:58pm UTC](https://discuss.elastic.co/t/how-does-elasticsearch-map-integer-doc-ids-to-shards/261329 "2021-01-17T18:58:59Z")
How does Elasticsearch map Integer doc IDs to shards? What algorithm does it use? I've been digging around but haven't seemed to find the answer. For context, every document we have has an id that's a row id from postg… --- ## [Add aliases to filebeat template?](https://discuss.elastic.co/t/add-aliases-to-filebeat-template/161867)
**Author:** [@AlanW](https://discuss.elastic.co/u/AlanW)\ **Replies:** 1\ **Last updated:** [December 25, 2018, 5:57am UTC](https://discuss.elastic.co/t/add-aliases-to-filebeat-template/161867 "2018-12-25T05:57:21Z")
Is there any way to set an index alias when configuring a template in filebeat.yml? According to https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-template.html we can set the number of shards and replicas… --- ## [Filebeat.yml not picking up env variables](https://discuss.elastic.co/t/filebeat-yml-not-picking-up-env-variables/121795)
**Author:** [@vaidabhishek](https://discuss.elastic.co/u/vaidabhishek)\ **Replies:** 1\ **Last updated:** [March 4, 2018, 12:06am UTC](https://discuss.elastic.co/t/filebeat-yml-not-picking-up-env-variables/121795 "2018-03-04T00:06:17Z")
I have a filebeat.yml file as written below and it's not taking up the env variable. I get error like this: Exiting: error unpacking config data: missing field accessing 'name' (source:'/etc/filebeat/filebeat.yml') ...… [Previous page](https://discuss.elastic.co/top.md?page=820&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=822&per_page=50&period=all)