# Top

**URL:** https://discuss.elastic.co/top.md?page=832&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 833

---

## [\[synthetics\] errors with private location with synthetics browser monitors](https://discuss.elastic.co/t/synthetics-errors-with-private-location-with-synthetics-browser-monitors/327094)

<div class="topic-metadata">

**Author:** [@irivas95](https://discuss.elastic.co/u/irivas95)\
**Replies:** 1\
**Last updated:** [March 9, 2023, 5:14pm UTC](https://discuss.elastic.co/t/synthetics-errors-with-private-location-with-synthetics-browser-monitors/327094 "2023-03-09T17:14:13Z")

</div>

Hi, I am trying to create a monitor using a private location. I am following this procedure however, when I set up the monitor with the private location from the uptime page in kibana, I get the following error: io:jo…

---

## [Permission denied - /etc/logstash/conf.d/logstash.conf](https://discuss.elastic.co/t/permission-denied-etc-logstash-conf-d-logstash-conf/169392)

<div class="topic-metadata">

**Author:** [@shaonbean](https://discuss.elastic.co/u/shaonbean)\
**Replies:** 1\
**Last updated:** [February 21, 2019, 10:50am UTC](https://discuss.elastic.co/t/permission-denied-etc-logstash-conf-d-logstash-conf/169392 "2019-02-21T10:50:36Z")

</div>

\[2019-02-21T18:44:36,180\]\[INFO \]\[logstash.runner \] Starting Logstash {"logstash.version"=\>"6.6.1"} \[2019-02-21T18:44:37,623\]\[ERROR\]\[logstash.config.sourceloader\] Could not fetch all the sources {:exception=\>Err…

---

## [Detect difference between elastic search and SQL databse](https://discuss.elastic.co/t/detect-difference-between-elastic-search-and-sql-databse/46800)

<div class="topic-metadata">

**Author:** [@rocco337](https://discuss.elastic.co/u/rocco337)\
**Replies:** 1\
**Last updated:** [April 8, 2016, 5:24pm UTC](https://discuss.elastic.co/t/detect-difference-between-elastic-search-and-sql-databse/46800 "2016-04-08T17:24:54Z")

</div>

I am building Elasticsearch solution. Data for indexing will come from Message queue and service will index that data to Elasticsearch. Applications -\> SQL DB Applications -\> Message Queue -\> Indexer Service -\> Elasti…

---

## [Snapshot issue](https://discuss.elastic.co/t/snapshot-issue/70930)

<div class="topic-metadata">

**Author:** [@ankit2255](https://discuss.elastic.co/u/ankit2255)\
**Replies:** 8\
**Last updated:** [January 11, 2017, 5:32am UTC](https://discuss.elastic.co/t/snapshot-issue/70930 "2017-01-11T05:32:44Z")

</div>

Hi team, unable to take snapshot of elasticsearch while i am taking snapshot it save with .dat format. i am using nfs storage for repo can you please help me on this issue. thanks in advance

---

## [Kibana dashboard with "message" filter as a user input](https://discuss.elastic.co/t/kibana-dashboard-with-message-filter-as-a-user-input/303408)

<div class="topic-metadata">

**Author:** [@melkamar](https://discuss.elastic.co/u/melkamar)\
**Replies:** 2\
**Last updated:** [April 28, 2022, 8:39am UTC](https://discuss.elastic.co/t/kibana-dashboard-with-message-filter-as-a-user-input/303408 "2022-04-28T08:39:32Z")

</div>

Hi! I am in the process of setting up Filebeat-based monitoring of our Kubernetes workloads' logs. For starters, I want to have a simple page where devs and PMs can go to to view the logs ingested from our deployments. I…

---

## [Load balancer for elasticsearch cluster](https://discuss.elastic.co/t/load-balancer-for-elasticsearch-cluster/280589)

<div class="topic-metadata">

**Author:** [@markrity](https://discuss.elastic.co/u/markrity)\
**Replies:** 3\
**Last updated:** [August 9, 2021, 10:11pm UTC](https://discuss.elastic.co/t/load-balancer-for-elasticsearch-cluster/280589 "2021-08-09T22:11:02Z")

</div>

Elasticsearch version - 5.1.2 16GB of max heap configured Installed and used enterprise modules, if any - No JVM version and operating system version - openjdk version "1.8.0\_292" , CentOS Other installed Elasticsearch …

---

## [ILM hot/warm policy is not moving shards](https://discuss.elastic.co/t/ilm-hot-warm-policy-is-not-moving-shards/272603)

<div class="topic-metadata">

**Author:** [@vkatsikaros](https://discuss.elastic.co/u/vkatsikaros)\
**Replies:** 3\
**Last updated:** [May 11, 2021, 10:25am UTC](https://discuss.elastic.co/t/ilm-hot-warm-policy-is-not-moving-shards/272603 "2021-05-11T10:25:20Z")

</div>

Hi I have created an ILM policy and template, and I create daily indices with Logstash on an ES cluster 7.10. I have some fast and expensive nodes as hot (and other types) and a few slow and inexpensive as warm only. I …

---

## [Multilingual field handling with multiple fields in ES](https://discuss.elastic.co/t/multilingual-field-handling-with-multiple-fields-in-es/9867)

<div class="topic-metadata">

**Author:** [@Derry\_O\_Sullivan](https://discuss.elastic.co/u/Derry_O_Sullivan)\
**Replies:** 3\
**Last updated:** [February 4, 2013, 10:56am UTC](https://discuss.elastic.co/t/multilingual-field-handling-with-multiple-fields-in-es/9867 "2013-02-04T10:56:02Z")

</div>

Hi all, We have a document index which has a number of fields such as 'title', 'description', 'searches' etc. These can all be provided in the input from any locale e.g. i could put in these 3 fields in english an…

---

## [Installed elastic search on Window 11. I hit localhost:9200 and Asking for Username and Password?](https://discuss.elastic.co/t/installed-elastic-search-on-window-11-i-hit-localhost-9200-and-asking-for-username-and-password/327022)

<div class="topic-metadata">

**Author:** [@wsdevprogrammer](https://discuss.elastic.co/u/wsdevprogrammer)\
**Replies:** 1\
**Last updated:** [March 6, 2023, 3:50am UTC](https://discuss.elastic.co/t/installed-elastic-search-on-window-11-i-hit-localhost-9200-and-asking-for-username-and-password/327022 "2023-03-06T03:50:35Z")

</div>

I have installed Latest Elastic search setup on Window 11 , as i type lcoalhost:9200 as i hit enter it says user name and password. i don't know which type of pass and username need to enter.

---

## [Get error 'no such index \[pdf\_test\]' after use fscrawer to create index](https://discuss.elastic.co/t/get-error-no-such-index-pdf-test-after-use-fscrawer-to-create-index/267791)

<div class="topic-metadata">

**Author:** [@lxia](https://discuss.elastic.co/u/lxia)\
**Replies:** 7\
**Last updated:** [March 22, 2021, 10:06am UTC](https://discuss.elastic.co/t/get-error-no-such-index-pdf-test-after-use-fscrawer-to-create-index/267791 "2021-03-22T10:06:35Z")

</div>

FSCrawler verssion: 2.7 when I first run the command: bin\\fscrawler --config\_dir ./DS pdf\_test, it showed info: job \[pdf\_test\] does not exist Do you want to create it (Y/N)? Y Settings have been created in \[.\\DS\\pdf\_…

---

## [Elasticsearch 7.10.2](https://discuss.elastic.co/t/elasticsearch-7-10-2/320960)

<div class="topic-metadata">

**Author:** [@faen](https://discuss.elastic.co/u/faen)\
**Replies:** 4\
**Last updated:** [December 11, 2022, 2:00pm UTC](https://discuss.elastic.co/t/elasticsearch-7-10-2/320960 "2022-12-11T14:00:49Z")

</div>

I am trying to install Elasticsearch 7.10.2 though the Elastic repository. I'm getting an error: "The repository ‘https://artifacts.elastic.co/packages/oss-7.10.2/apt stable Release’ does not have a Release file.” Has…

---

## [Web Analytics via Elastic RUM](https://discuss.elastic.co/t/web-analytics-via-elastic-rum/192865)

<div class="topic-metadata">

**Author:** [@digitalron](https://discuss.elastic.co/u/digitalron)\
**Replies:** 4\
**Last updated:** [July 31, 2019, 1:24pm UTC](https://discuss.elastic.co/t/web-analytics-via-elastic-rum/192865 "2019-07-31T13:24:20Z")

</div>

We are looking to consolidate our technology stack into a more manageable size and one of the areas we are investigating is potentially changing our Web Analytics tool with Elastic RUM. After making a side-by-side compar…

---

## [Match\_phrase\_prefix acts erratically when there is a filter](https://discuss.elastic.co/t/match-phrase-prefix-acts-erratically-when-there-is-a-filter/33395)

<div class="topic-metadata">

**Author:** [@paol](https://discuss.elastic.co/u/paol)\
**Replies:** 4\
**Last updated:** [November 3, 2015, 2:24pm UTC](https://discuss.elastic.co/t/match-phrase-prefix-acts-erratically-when-there-is-a-filter/33395 "2015-11-03T14:24:31Z")

</div>

I'm trying to make sense of the behaviour of this query: GET /categories/category/\_search { "query": { "bool": { "filter": { "term": { "classification\_system\_id": 1 } }, …

---

## [Configuring replica nodes at a global level](https://discuss.elastic.co/t/configuring-replica-nodes-at-a-global-level/13741)

<div class="topic-metadata">

**Author:** [@Phani](https://discuss.elastic.co/u/Phani)\
**Replies:** 4\
**Last updated:** [September 26, 2013, 4:59pm UTC](https://discuss.elastic.co/t/configuring-replica-nodes-at-a-global-level/13741 "2013-09-26T16:59:57Z")

</div>

Again some newbie questions. I'm wondering how to configure a replica node at a global level rather than at index level. These are the questions that I have : 1. Can we configure that nodes 2 & 3 are replicas …

---

## [ElasticSearch 8.1 - Multinode Cluster Setup](https://discuss.elastic.co/t/elasticsearch-8-1-multinode-cluster-setup/301677)

<div class="topic-metadata">

**Author:** [@Aldo2](https://discuss.elastic.co/u/Aldo2)\
**Replies:** 2\
**Last updated:** [April 6, 2022, 5:40pm UTC](https://discuss.elastic.co/t/elasticsearch-8-1-multinode-cluster-setup/301677 "2022-04-06T17:40:21Z")

</div>

Hi Elastic Community, I have a question about the multi node version 8.1.1 cluster setup. When I need to add the 2nd node to the cluster according to the elastic support I must add: cluster.name: aiops node.name: elas…

---

## [Search API requests returns Error 500 Internal Server Error: An internal server error occurred](https://discuss.elastic.co/t/search-api-requests-returns-error-500-internal-server-error-an-internal-server-error-occurred/235606)

<div class="topic-metadata">

**Author:** [@gpribi](https://discuss.elastic.co/u/gpribi)\
**Replies:** 2\
**Last updated:** [June 3, 2020, 9:53pm UTC](https://discuss.elastic.co/t/search-api-requests-returns-error-500-internal-server-error-an-internal-server-error-occurred/235606 "2020-06-03T21:53:37Z")

</div>

Hello, I have many requests in the search and multi-search endpoints returning "Internal server error. Please check your application server logs for more details and contact Elastic support if the problem persists". Wha…

---

## [Upgrade elasticsearch 1.7.1 to 2.2](https://discuss.elastic.co/t/upgrade-elasticsearch-1-7-1-to-2-2/41939)

<div class="topic-metadata">

**Author:** [@genesis](https://discuss.elastic.co/u/genesis)\
**Replies:** 2\
**Last updated:** [February 17, 2016, 4:02pm UTC](https://discuss.elastic.co/t/upgrade-elasticsearch-1-7-1-to-2-2/41939 "2016-02-17T16:02:13Z")

</div>

I upgraded our QA environment running centos 6.5 Elasticsearch 1.7.1 to 2.2 I used the yum repository: yum -y install elasticsearch When I tried to start Elasticsearch service elasticsearch start I get the follow…

---

## [Getting error INVALID\_FETCH\_SESSION\_EPOCH in logstash](https://discuss.elastic.co/t/getting-error-invalid-fetch-session-epoch-in-logstash/139340)

<div class="topic-metadata">

**Author:** [@Krishna\_Oza](https://discuss.elastic.co/u/Krishna_Oza)\
**Replies:** 0\
**Last updated:** [July 10, 2018, 12:14pm UTC](https://discuss.elastic.co/t/getting-error-invalid-fetch-session-epoch-in-logstash/139340 "2018-07-10T12:14:51Z")

</div>

I am getting the error INVALID\_FETCH\_SESSION\_EPOCH while reading messages from kafka. The error I get is as below. \[2018-07-10T17:42:20,547\]\[INFO \]\[org.apache.kafka.clients.FetchSessionHandler\] \[Consumer clientId=logst…

---

## [File descriptors: is it ok to go beyond 32k or 64k?](https://discuss.elastic.co/t/file-descriptors-is-it-ok-to-go-beyond-32k-or-64k/49099)

<div class="topic-metadata">

**Author:** [@Philip\_Kobezak](https://discuss.elastic.co/u/Philip_Kobezak)\
**Replies:** 5\
**Last updated:** [May 4, 2016, 9:27pm UTC](https://discuss.elastic.co/t/file-descriptors-is-it-ok-to-go-beyond-32k-or-64k/49099 "2016-05-04T21:27:06Z")

</div>

I've been researching this but was hoping to understand more of the underlying reasons. The official documentation recommends increasing the open file descriptor limit to 32k or 64k. In our cluster we currently have 12…

---

## [Clustering Across Multiple Data Centers](https://discuss.elastic.co/t/clustering-across-multiple-data-centers/80166)

<div class="topic-metadata">

**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\
**Replies:** 1\
**Last updated:** [March 27, 2017, 11:32pm UTC](https://discuss.elastic.co/t/clustering-across-multiple-data-centers/80166 "2017-03-27T23:32:07Z")

</div>

Hi, As per the blog (Clustering Across Multiple Data Centers - https://www.elastic.co/blog/clustering\_across\_multiple\_data\_centers) it is not recommended to have clusters in multiple DCs. When we create a new ES HA…

---

## [Is there a way to put kibana dashboard png report in the body of the email](https://discuss.elastic.co/t/is-there-a-way-to-put-kibana-dashboard-png-report-in-the-body-of-the-email/210278)

<div class="topic-metadata">

**Author:** [@sushmamagesh](https://discuss.elastic.co/u/sushmamagesh)\
**Replies:** 3\
**Last updated:** [December 6, 2019, 6:29am UTC](https://discuss.elastic.co/t/is-there-a-way-to-put-kibana-dashboard-png-report-in-the-body-of-the-email/210278 "2019-12-06T06:29:01Z")

</div>

From the Documentation to generate email reports in Kibana using Watcher as attachments, but is there a way to add the PNG as part of the email? embedded image within the email body. There seems to an option body.html, …

---

## [Multiple logstash config files](https://discuss.elastic.co/t/multiple-logstash-config-files/130471)

<div class="topic-metadata">

**Author:** [@Hamza\_Dhahri](https://discuss.elastic.co/u/Hamza_Dhahri)\
**Replies:** 3\
**Last updated:** [May 4, 2018, 9:27am UTC](https://discuss.elastic.co/t/multiple-logstash-config-files/130471 "2018-05-04T09:27:44Z")

</div>

hello everyone i have a log in which i have to parse some informations i have did 7 patterns (7 config files ) and i have to stock this informations in elasticsearch well when i use logstash to run each config file …

---

## [Ingest index recommendations](https://discuss.elastic.co/t/ingest-index-recommendations/85182)

<div class="topic-metadata">

**Author:** [@Wayne\_Taylor](https://discuss.elastic.co/u/Wayne_Taylor)\
**Replies:** 8\
**Last updated:** [May 19, 2017, 11:15am UTC](https://discuss.elastic.co/t/ingest-index-recommendations/85182 "2017-05-19T11:15:52Z")

</div>

Dear ES Team, I have now got a few months worth of data into ES via Logstash. Some of the volumes are small e.g. several hundred MB per day. Whereas some are bigger (still not large) e.g. 10-15Gb per day. Based …

---

## [Very low speed resync after node stop/start](https://discuss.elastic.co/t/very-low-speed-resync-after-node-stop-start/72122)

<div class="topic-metadata">

**Author:** [@Electron](https://discuss.elastic.co/u/Electron)\
**Replies:** 8\
**Last updated:** [January 19, 2017, 2:15pm UTC](https://discuss.elastic.co/t/very-low-speed-resync-after-node-stop-start/72122 "2017-01-19T14:15:04Z")

</div>

Hello, I have 5 elasticsearch nodes in one cluster ( near 85.000.000 docs , 30Gb data ). After stop and start one server I saw, that resync started with very low speed and very high load at each of cluster nodes. Rando…

---

## [Processing bro output logs (from pcaps) with logstash](https://discuss.elastic.co/t/processing-bro-output-logs-from-pcaps-with-logstash/80853)

<div class="topic-metadata">

**Author:** [@10past10](https://discuss.elastic.co/u/10past10)\
**Replies:** 2\
**Last updated:** [April 1, 2017, 1:27pm UTC](https://discuss.elastic.co/t/processing-bro-output-logs-from-pcaps-with-logstash/80853 "2017-04-01T13:27:09Z")

</div>

I'm trying to get bro output processed with logstash to elasticsearch, but for some reason I can't get it to work. Am I missing something? Below is some sample output that I'm trying to process. I got this from a pcap …

---

## [Shipping of Heroku Log into elastic cloud](https://discuss.elastic.co/t/shipping-of-heroku-log-into-elastic-cloud/246009)

<div class="topic-metadata">

**Author:** [@anoopkrishna](https://discuss.elastic.co/u/anoopkrishna)\
**Replies:** 4\
**Last updated:** [September 24, 2020, 3:43pm UTC](https://discuss.elastic.co/t/shipping-of-heroku-log-into-elastic-cloud/246009 "2020-09-24T15:43:54Z")

</div>

HI All I am using Heroku to host our application in common runtime and private space. I would like to check what is the best option to ship all the log of Dyno, Prostgres, etc from Heroku to Elastic Cloud. Regards Ano…

---

## [Parse bitvise login log in windows event log](https://discuss.elastic.co/t/parse-bitvise-login-log-in-windows-event-log/101662)

<div class="topic-metadata">

**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\
**Replies:** 4\
**Last updated:** [September 26, 2017, 3:05pm UTC](https://discuss.elastic.co/t/parse-bitvise-login-log-in-windows-event-log/101662 "2017-09-26T15:05:25Z")

</div>

Hi, i have new case. All my windows server are using bitvise for remote dessktop. (when i used bitvise for remote dessktop in windows, event\_id 4624 contain username logon, but not contain real IP login. It alway 127.0…

---

## [Table visualization with header defined as row as well as cols](https://discuss.elastic.co/t/table-visualization-with-header-defined-as-row-as-well-as-cols/94775)

<div class="topic-metadata">

**Author:** [@Prashant\_Agrawal](https://discuss.elastic.co/u/Prashant_Agrawal)\
**Replies:** 4\
**Last updated:** [August 5, 2017, 9:35am UTC](https://discuss.elastic.co/t/table-visualization-with-header-defined-as-row-as-well-as-cols/94775 "2017-08-05T09:35:46Z")

</div>

Is there a way in kibana to make a table as attached, where header as row has name and header as first column has date. Nothing but a table which can be made in excel.

---

## [Kibana 4.5.4 Tilemap](https://discuss.elastic.co/t/kibana-4-5-4-tilemap/59124)

<div class="topic-metadata">

**Author:** [@amran1](https://discuss.elastic.co/u/amran1)\
**Replies:** 4\
**Last updated:** [August 30, 2016, 12:59am UTC](https://discuss.elastic.co/t/kibana-4-5-4-tilemap/59124 "2016-08-30T00:59:20Z")

</div>

Hello, Old kibana I can spesific tile map til some area, but new kibana 4.5.4 I couldn't zoom in til spesific area. eg. Taiwan only saw til one of county.. tilemap can't zoom in till school area ... if zoom in again the …

---

## [Load Balancing Between Non-identical Master Nodes](https://discuss.elastic.co/t/load-balancing-between-non-identical-master-nodes/171844)

<div class="topic-metadata">

**Author:** [@henrytran026](https://discuss.elastic.co/u/henrytran026)\
**Replies:** 6\
**Last updated:** [March 13, 2019, 6:05pm UTC](https://discuss.elastic.co/t/load-balancing-between-non-identical-master-nodes/171844 "2019-03-13T18:05:14Z")

</div>

Hello, Here is my cluster setup (version 6.6.1): 5 master nodes: 2 of those, each is: 8GB for heap, 32-core CPU 3 of those, each is: 1GB for heap, 4 -core CPU There are also other 5 data nodes, and 1 coordinating no…

---

## [Filebeat write to Redis so fast that Logstash couldn't keep up reading from Redis](https://discuss.elastic.co/t/filebeat-write-to-redis-so-fast-that-logstash-couldnt-keep-up-reading-from-redis/57998)

<div class="topic-metadata">

**Author:** [@tanxiaolong](https://discuss.elastic.co/u/tanxiaolong)\
**Replies:** 6\
**Last updated:** [April 4, 2017, 8:06pm UTC](https://discuss.elastic.co/t/filebeat-write-to-redis-so-fast-that-logstash-couldnt-keep-up-reading-from-redis/57998 "2017-04-04T20:06:37Z")

</div>

Hi all, my logstash is 2.3.4 elasticsearch is 2.3.4 filebeat is 1.2.3 redis is 3.2.0 my os is CentOS my situation is as title said, big logs wrote from Filebeat to Redis, just one Filebeat process out there doing th…

---

## [Get current active users in the application using Elastic/Kibana Visualization](https://discuss.elastic.co/t/get-current-active-users-in-the-application-using-elastic-kibana-visualization/262030)

<div class="topic-metadata">

**Author:** [@SAKA\_RAM\_DEWASI](https://discuss.elastic.co/u/SAKA_RAM_DEWASI)\
**Replies:** 3\
**Last updated:** [January 29, 2021, 3:27pm UTC](https://discuss.elastic.co/t/get-current-active-users-in-the-application-using-elastic-kibana-visualization/262030 "2021-01-29T15:27:03Z")

</div>

Hi all, I am new to elastic and kibana. I want to get current active users in web application using audit logs stored in elastic index. We capture login and logout event of user in audit log and stored as document in el…

---

## [Customize panel time range not work with vega visualize on my dashboard](https://discuss.elastic.co/t/customize-panel-time-range-not-work-with-vega-visualize-on-my-dashboard/213335)

<div class="topic-metadata">

**Author:** [@steven.l](https://discuss.elastic.co/u/steven.l)\
**Replies:** 3\
**Last updated:** [December 31, 2019, 9:57am UTC](https://discuss.elastic.co/t/customize-panel-time-range-not-work-with-vega-visualize-on-my-dashboard/213335 "2019-12-31T09:57:42Z")

</div>

My dashboard screenshot is the following: I want to set my plot with "Last 1 minute", however, it still shows the whole timeline at the x-axis. I have checked my kibana index patterns, it seems that the "@datatime" …

---

## [Script filter field value is in array](https://discuss.elastic.co/t/script-filter-field-value-is-in-array/161572)

<div class="topic-metadata">

**Author:** [@CrinaGrigore](https://discuss.elastic.co/u/CrinaGrigore)\
**Replies:** 3\
**Last updated:** [December 28, 2018, 11:31pm UTC](https://discuss.elastic.co/t/script-filter-field-value-is-in-array/161572 "2018-12-28T23:31:23Z")

</div>

Here is a part of my query: must\_not: { script: { script: { source: "doc\['type.keyword'\].value=='CHANNEL' ? doc\['id'\].value == 0 : \['1','3','7'\].contains(doc\['id'\].value"), lang: 'painless' …

---

## [Having trouble with filebeat not releasing rotated file](https://discuss.elastic.co/t/having-trouble-with-filebeat-not-releasing-rotated-file/49920)

<div class="topic-metadata">

**Author:** [@Zibby](https://discuss.elastic.co/u/Zibby)\
**Replies:** 3\
**Last updated:** [May 17, 2016, 6:43am UTC](https://discuss.elastic.co/t/having-trouble-with-filebeat-not-releasing-rotated-file/49920 "2016-05-17T06:43:33Z")

</div>

We're having some trouble with filebeat not releasing files after logrotate is run. Here is the filebeat conf: filebeat: prospectors: - paths: - /home/vhosts/XXXX/current/log/production.log d…

---

## [Creating new topics by email does not work for me](https://discuss.elastic.co/t/creating-new-topics-by-email-does-not-work-for-me/2351)

<div class="topic-metadata">

**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Replies:** 2\
**Last updated:** [July 31, 2015, 7:23am UTC](https://discuss.elastic.co/t/creating-new-topics-by-email-does-not-work-for-me/2351 "2015-07-31T07:23:05Z")

</div>

I'm trying to announce new plugins using STMP and my messages don't appear. So I add them manually. Is there anything wrong? Here is what I'm sending: Content-Type: multipart/alternative; boundary="===============2737…

---

## [Process auditd log to elasticsearch by using Filebeat](https://discuss.elastic.co/t/process-auditd-log-to-elasticsearch-by-using-filebeat/37773)

<div class="topic-metadata">

**Author:** [@rpuserh](https://discuss.elastic.co/u/rpuserh)\
**Replies:** 1\
**Last updated:** [December 23, 2015, 4:37pm UTC](https://discuss.elastic.co/t/process-auditd-log-to-elasticsearch-by-using-filebeat/37773 "2015-12-23T16:37:06Z")

</div>

Hi, We are using auditd to monitor all user actions on all machines (Now we are using rsyslog auditd and syslog-ng). I would like to switch to Filebeat, elasticsearch and kibana. But auditd has output for 3 lines for on…

---

## [Monitoring cluster](https://discuss.elastic.co/t/monitoring-cluster/199222)

<div class="topic-metadata">

**Author:** [@akshay\_singh2](https://discuss.elastic.co/u/akshay_singh2)\
**Replies:** 8\
**Last updated:** [September 18, 2019, 6:09am UTC](https://discuss.elastic.co/t/monitoring-cluster/199222 "2019-09-18T06:09:56Z")

</div>

Hello Team, I have deployed elastic monitoring cluster for my production cluster, now I can see monitoring data to new cluster, but cant see the same data in production cluster monitoring tab of kibana. Is this normal,…

---

## [Populate data from production to test server with less nodes](https://discuss.elastic.co/t/populate-data-from-production-to-test-server-with-less-nodes/55194)

<div class="topic-metadata">

**Author:** [@nikosd23](https://discuss.elastic.co/u/nikosd23)\
**Replies:** 8\
**Last updated:** [July 12, 2016, 9:55am UTC](https://discuss.elastic.co/t/populate-data-from-production-to-test-server-with-less-nodes/55194 "2016-07-12T09:55:52Z")

</div>

I'm trying to use the backup and restore functionality via the kopf plugin in order to populate the production data to a test server. The production setup consists of 3 nodes. The test setup is one node. I'm able to d…

---

## [Filebeat with multiple different index type](https://discuss.elastic.co/t/filebeat-with-multiple-different-index-type/178847)

<div class="topic-metadata">

**Author:** [@sahinguler](https://discuss.elastic.co/u/sahinguler)\
**Replies:** 4\
**Last updated:** [April 30, 2019, 1:27pm UTC](https://discuss.elastic.co/t/filebeat-with-multiple-different-index-type/178847 "2019-04-30T13:27:14Z")

</div>

Hi all. I want to use filebeat with different input in a single yml file. Such as input type docker and input type log in same file. Does anybody help? My config yml for filebeat as following: Autodiscover allows you …

---

## [Self hosted in aws ec2](https://discuss.elastic.co/t/self-hosted-in-aws-ec2/272483)

<div class="topic-metadata">

**Author:** [@THOM-AwS](https://discuss.elastic.co/u/THOM-AwS)\
**Replies:** 5\
**Last updated:** [May 10, 2021, 1:13pm UTC](https://discuss.elastic.co/t/self-hosted-in-aws-ec2/272483 "2021-05-10T13:13:27Z")

</div>

Hey all, this is part question, and part tips for my elastic experience on ec2. for background I am running two servers, one with elasticsearch on an m6gd.large, and the other server runs kibana on an m6gd.medium. this i…

---

## [I upgraded elasticsearch to 7.8.0 version but I got "java.lang.NoClassDefFoundError: Could not initialize class org.elasticsearch.http.netty4.Netty4HttpServerTransport" error](https://discuss.elastic.co/t/i-upgraded-elasticsearch-to-7-8-0-version-but-i-got-java-lang-noclassdeffounderror-could-not-initialize-class-org-elasticsearch-http-netty4-netty4httpservertransport-error/239621)

<div class="topic-metadata">

**Author:** [@aysnur](https://discuss.elastic.co/u/aysnur)\
**Replies:** 5\
**Last updated:** [July 2, 2020, 4:13pm UTC](https://discuss.elastic.co/t/i-upgraded-elasticsearch-to-7-8-0-version-but-i-got-java-lang-noclassdeffounderror-could-not-initialize-class-org-elasticsearch-http-netty4-netty4httpservertransport-error/239621 "2020-07-02T16:13:12Z")

</div>

I upgraded elasticsearch to 7.8.0 version my dependencies like \` \<dependency\> \<groupId\>org.elasticsearch\</groupId\> \<artifactId\>elasticsearch\</artifactId\> \<version\>7.8.0\</version\> …

---

## [Time series visual builder differences VS Basic charts Vertical Bars](https://discuss.elastic.co/t/time-series-visual-builder-differences-vs-basic-charts-vertical-bars/103753)

<div class="topic-metadata">

**Author:** [@doume06](https://discuss.elastic.co/u/doume06)\
**Replies:** 5\
**Last updated:** [October 13, 2017, 2:36pm UTC](https://discuss.elastic.co/t/time-series-visual-builder-differences-vs-basic-charts-vertical-bars/103753 "2017-10-13T14:36:28Z")

</div>

I have some differences when I use TSVB vs a basic vertical bars. Here is its: \[image\] Same reports, same fields. On top Basic vertical Bars. At the bottom, TSVB. First, when I embed Kibana in Elastic search, as you …

---

## [Issue with date format](https://discuss.elastic.co/t/issue-with-date-format/209598)

<div class="topic-metadata">

**Author:** [@ShaneLillie\_RAD](https://discuss.elastic.co/u/ShaneLillie_RAD)\
**Replies:** 7\
**Last updated:** [November 27, 2019, 6:46pm UTC](https://discuss.elastic.co/t/issue-with-date-format/209598 "2019-11-27T18:46:12Z")

</div>

We're using this date filter: filter { date { …

---

## [Filtering/Querying by indexed geo\_shapes](https://discuss.elastic.co/t/filtering-querying-by-indexed-geo-shapes/188800)

<div class="topic-metadata">

**Author:** [@BenjaminHenry](https://discuss.elastic.co/u/BenjaminHenry)\
**Replies:** 7\
**Last updated:** [July 8, 2019, 1:28pm UTC](https://discuss.elastic.co/t/filtering-querying-by-indexed-geo-shapes/188800 "2019-07-08T13:28:44Z")

</div>

Hi there, I am attempting to filter or query a index with geo points by using a geo\_shape I have indexed already. For context, the "ais\_2016\_nov\_zone11\_enriched5" index is the one with geo points and the "ben\_clusters" …

---

## [Intermittent 503 error with Scroll API](https://discuss.elastic.co/t/intermittent-503-error-with-scroll-api/172199)

<div class="topic-metadata">

**Author:** [@BinarMorker](https://discuss.elastic.co/u/BinarMorker)\
**Replies:** 7\
**Last updated:** [March 23, 2019, 10:27am UTC](https://discuss.elastic.co/t/intermittent-503-error-with-scroll-api/172199 "2019-03-23T10:27:38Z")

</div>

Hi, I have built a console app in .Net Core that interfaces with ElasticSearch through NEST. I'm trying to send this command: POST /products\_en-ca\_b2df44e0-2a4e-433e-9ea0-ec8a9e8f9e19/product/\_search?pretty=true&error\_t…

---

## [Logstash grok matches on two different fields log\_type and message](https://discuss.elastic.co/t/logstash-grok-matches-on-two-different-fields-log-type-and-message/103077)

<div class="topic-metadata">

**Author:** [@ajstark123](https://discuss.elastic.co/u/ajstark123)\
**Replies:** 1\
**Last updated:** [October 10, 2017, 6:29pm UTC](https://discuss.elastic.co/t/logstash-grok-matches-on-two-different-fields-log-type-and-message/103077 "2017-10-10T18:29:24Z")

</div>

We are using file beat to read multiple logs and we are send the output to logstash. We want a logstash grok filter to activate when (log\_type == syslog) and (matches on syslog message) grok { match =\> {"log\_type"…

---

## [Ingest volume](https://discuss.elastic.co/t/ingest-volume/157245)

<div class="topic-metadata">

**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\
**Replies:** 3\
**Last updated:** [November 19, 2018, 4:44am UTC](https://discuss.elastic.co/t/ingest-volume/157245 "2018-11-19T04:44:51Z")

</div>

I want to get the value of total volume of data ingested on any index in Elasticsearch. What is the right way to do it? There are multiple pipelines pushing data to it and I do not have control over the data sources so I…

---

## [Kibana 3 to Kibana 4: Confusing...convoluted](https://discuss.elastic.co/t/kibana-3-to-kibana-4-confusing-convoluted/2066)

<div class="topic-metadata">

**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\
**Replies:** 3\
**Last updated:** [June 11, 2015, 4:22pm UTC](https://discuss.elastic.co/t/kibana-3-to-kibana-4-confusing-convoluted/2066 "2015-06-11T16:22:37Z")

</div>

I've spent the last hour trying to get Kibana 4 to look even something like my Kibana 3 dashboard. So far I'm not even close. I made my first "Visualization"...i vertical bar chart. How do I change the colors of the b…

---

## [Logstash not pushing data to AWS Elasticsearch endpoint](https://discuss.elastic.co/t/logstash-not-pushing-data-to-aws-elasticsearch-endpoint/138669)

<div class="topic-metadata">

**Author:** [@Shweta\_Priyadarshani](https://discuss.elastic.co/u/Shweta_Priyadarshani)\
**Replies:** 2\
**Last updated:** [July 5, 2018, 9:34am UTC](https://discuss.elastic.co/t/logstash-not-pushing-data-to-aws-elasticsearch-endpoint/138669 "2018-07-05T09:34:52Z")

</div>

Hi all, I am trying to push my logs from logstash to elasticsearch but its failing. here is my logstash.conf file : input { file { path =\> "D:/shweta/ELK\_poc/test3.txt" start\_p…

[Previous page](https://discuss.elastic.co/top.md?page=831&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=833&per_page=50&period=all)
