# Top

**URL:** https://discuss.elastic.co/top.md?page=84&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 85

---

## [Logstash skips file while reading config](https://discuss.elastic.co/t/logstash-skips-file-while-reading-config/205770)

<div class="topic-metadata">

**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Replies:** 9\
**Last updated:** [October 30, 2019, 8:28pm UTC](https://discuss.elastic.co/t/logstash-skips-file-while-reading-config/205770 "2019-10-30T20:28:08Z")

</div>

Logstash just starts and shuts down due to configpathloader error. Please explain what the issue is. Below is the error - \[DEBUG\]\[logstash.config.source.local.configpathloader\] Skipping the following files while reading…

---

## [XPACK Security in ELK stack 7.1.1](https://discuss.elastic.co/t/xpack-security-in-elk-stack-7-1-1/184004)

<div class="topic-metadata">

**Author:** [@sunnynazar](https://discuss.elastic.co/u/sunnynazar)\
**Replies:** 10\
**Last updated:** [June 6, 2019, 3:42pm UTC](https://discuss.elastic.co/t/xpack-security-in-elk-stack-7-1-1/184004 "2019-06-06T15:42:05Z")

</div>

Hi Guys, I am working with ELK stack 7.1.1 version on kubernetes using image: docker.elastic.co/elasticsearch/elasticsearch:7.1.1 I am facing an issue , when xpack security is enabled on elasticsearch cluster , elastic…

---

## [Using Logstash to process syslog](https://discuss.elastic.co/t/using-logstash-to-process-syslog/88636)

<div class="topic-metadata">

**Author:** [@Adyne](https://discuss.elastic.co/u/Adyne)\
**Replies:** 12\
**Last updated:** [June 12, 2017, 8:46am UTC](https://discuss.elastic.co/t/using-logstash-to-process-syslog/88636 "2017-06-12T08:46:57Z")

</div>

I read an article https://anderikistan.com/2016/03/26/elk-palo-alto-networks/ and I am now trying to setup Logstash to process Palo Alto logs. However, I am running into 1 issue. I am using a plain Ubuntu 16.04.2 LTS ins…

---

## [Events time difference between event.created and event.ingested](https://discuss.elastic.co/t/events-time-difference-between-event-created-and-event-ingested/303269)

<div class="topic-metadata">

**Author:** [@Elie\_Sbat](https://discuss.elastic.co/u/Elie_Sbat)\
**Replies:** 12\
**Last updated:** [April 28, 2022, 12:44pm UTC](https://discuss.elastic.co/t/events-time-difference-between-event-created-and-event-ingested/303269 "2022-04-28T12:44:40Z")

</div>

Hello, I am using elk stack v8. traffic is flowing winlog-\>kafka - \> logstash -\> Elasticsearch. there is a time difference between "event created" and "event.ingest". the time difference is around 1 hour. Logstash co…

---

## [Some logs to Elastic, some to SIEM](https://discuss.elastic.co/t/some-logs-to-elastic-some-to-siem/186307)

<div class="topic-metadata">

**Author:** [@Vladx](https://discuss.elastic.co/u/Vladx)\
**Replies:** 11\
**Last updated:** [July 14, 2019, 11:59am UTC](https://discuss.elastic.co/t/some-logs-to-elastic-some-to-siem/186307 "2019-07-14T11:59:14Z")

</div>

Hi, I'm quite new here, so please forgive my dumbness on this. But I've spent the whole afternoon to figure out how can I achieve what I want. Digged into docs, forums and so on... Maybe it is because I'm coming from th…

---

## [Logstash is not reading the log file(that's being updated automatically) continuously](https://discuss.elastic.co/t/logstash-is-not-reading-the-log-file-thats-being-updated-automatically-continuously/92686)

<div class="topic-metadata">

**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\
**Replies:** 15\
**Last updated:** [August 20, 2017, 4:26pm UTC](https://discuss.elastic.co/t/logstash-is-not-reading-the-log-file-thats-being-updated-automatically-continuously/92686 "2017-08-20T16:26:37Z")

</div>

Hi, I have a log file that will be modified every 6 hours by a script. Problem is Logstash is not reading the file when the file is updated automatically. But when I update the file manually logstash is picking the data.…

---

## [Logstash with IBM JDK 1.8 and TLS connections](https://discuss.elastic.co/t/logstash-with-ibm-jdk-1-8-and-tls-connections/64571)

<div class="topic-metadata">

**Author:** [@dcarissi](https://discuss.elastic.co/u/dcarissi)\
**Replies:** 11\
**Last updated:** [November 9, 2016, 2:25pm UTC](https://discuss.elastic.co/t/logstash-with-ibm-jdk-1-8-and-tls-connections/64571 "2016-11-09T14:25:49Z")

</div>

Hi, I'm having a problem with Logstash (version 1.5.4, 2.4.0 or 5.0.0-rc1) and the IBM JDK version 1.8 where a NodeJS application can not connect using TLS. In the Logstash log file, I get a message about "no cipher sui…

---

## [Logstash/grok to match only first occurrence and stop parsing repeatedly for same values](https://discuss.elastic.co/t/logstash-grok-to-match-only-first-occurrence-and-stop-parsing-repeatedly-for-same-values/274201)

<div class="topic-metadata">

**Author:** [@theirfan](https://discuss.elastic.co/u/theirfan)\
**Replies:** 23\
**Last updated:** [June 7, 2021, 12:10pm UTC](https://discuss.elastic.co/t/logstash-grok-to-match-only-first-occurrence-and-stop-parsing-repeatedly-for-same-values/274201 "2021-06-07T12:10:28Z")

</div>

Hi all, I have this issue with logstash/grok. Stated Working with ELK some days back. A newbie, please help. I have a log (sample below) Timestamp temperature 20 Timestamp temperature 20 Timestamp temperature 21 N…

---

## [How to define multiline.pattern for complex pattern](https://discuss.elastic.co/t/how-to-define-multiline-pattern-for-complex-pattern/68924)

<div class="topic-metadata">

**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Replies:** 20\
**Last updated:** [December 16, 2016, 12:49pm UTC](https://discuss.elastic.co/t/how-to-define-multiline-pattern-for-complex-pattern/68924 "2016-12-16T12:49:54Z")

</div>

I need to define the multiline.pattern field in my prospectors, instead of doing it in the logstash filter. The first pattern looks like that: \<Feb 24, 2016 4:30:07 PM IST\> The second pattern looks like that: \<\<ERROR\>\> …

---

## [OpenTelemetry metrics don't have labels](https://discuss.elastic.co/t/opentelemetry-metrics-dont-have-labels/287510)

<div class="topic-metadata">

**Author:** [@benbek](https://discuss.elastic.co/u/benbek)\
**Replies:** 13\
**Last updated:** [October 26, 2021, 10:33pm UTC](https://discuss.elastic.co/t/opentelemetry-metrics-dont-have-labels/287510 "2021-10-26T22:33:55Z")

</div>

Hello, I am trying to understand why otel metrics don't display the labels I set in my code. I use: go 1.17 elastic/apm 7.15.1 opentelemetry 1.0.1 native otlp collector 0.6.0 My metrics index has: "apm-7.15.1-metri…

---

## [Azure cloud repository error in elasticsearch 2.4.1?](https://discuss.elastic.co/t/azure-cloud-repository-error-in-elasticsearch-2-4-1/80275)

<div class="topic-metadata">

**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\
**Replies:** 21\
**Last updated:** [March 29, 2017, 8:48am UTC](https://discuss.elastic.co/t/azure-cloud-repository-error-in-elasticsearch-2-4-1/80275 "2017-03-29T08:48:45Z")

</div>

HI, I installed azure cloud plugin in all the nodes of ES cluster with the following configuration in elasticsearch.yml cloud: azure: storage: my\_account: account: your\_azure\_…

---

## [Indexing of HTML content](https://discuss.elastic.co/t/indexing-of-html-content/3190)

<div class="topic-metadata">

**Author:** [@James\_Cook](https://discuss.elastic.co/u/James_Cook)\
**Replies:** 11\
**Last updated:** [August 13, 2010, 1:10am UTC](https://discuss.elastic.co/t/indexing-of-html-content/3190 "2010-08-13T01:10:10Z")

</div>

I see that the attachments plugin uses Tika under the hood to intelligently index text content embedded in other formats. We have a situation where we are storing a field in our JSON object that can contain HTML con…

---

## [Json file parsing not working in logstash using beats](https://discuss.elastic.co/t/json-file-parsing-not-working-in-logstash-using-beats/40242)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 15\
**Last updated:** [January 29, 2016, 7:43am UTC](https://discuss.elastic.co/t/json-file-parsing-not-working-in-logstash-using-beats/40242 "2016-01-29T07:43:47Z")

</div>

Hi, I have a log which contain the json as input . when i was using lower version of logstash with logcouier i had processed the json input. But now im using latest version of logstash with beats. In this scenario json i…

---

## [Issue with Multiple Logstash Conf files](https://discuss.elastic.co/t/issue-with-multiple-logstash-conf-files/87762)

<div class="topic-metadata">

**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\
**Replies:** 13\
**Last updated:** [June 7, 2017, 6:16pm UTC](https://discuss.elastic.co/t/issue-with-multiple-logstash-conf-files/87762 "2017-06-07T18:16:29Z")

</div>

I am facing a problem when multiple logstash conf are used within a folder and trying to connect the same using filebeat. I had posted this issue under filebeat section and now I am asked to post it under logstash as wel…

---

## [Search in the same phrase](https://discuss.elastic.co/t/search-in-the-same-phrase/9783)

<div class="topic-metadata">

**Author:** [@Loic\_Bertron](https://discuss.elastic.co/u/Loic_Bertron)\
**Replies:** 9\
**Last updated:** [November 23, 2012, 1:45am UTC](https://discuss.elastic.co/t/search-in-the-same-phrase/9783 "2012-11-23T01:45:34Z")

</div>

Hey, I want to offert to my client the ability to look for two words in the same phrase, in the same field. Is there a way to do it easily in ElasticSearch ? Thanks Loïc --

---

## [Filebeat 1.1.0: Log Collection Halting](https://discuss.elastic.co/t/filebeat-1-1-0-log-collection-halting/47130)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 17\
**Last updated:** [April 18, 2016, 9:27am UTC](https://discuss.elastic.co/t/filebeat-1-1-0-log-collection-halting/47130 "2016-04-18T09:27:57Z")

</div>

Hi, I've started log collection for a cassandra cluster and am seeing some odd behaviour. That is, when I start the service in debug mode I see the log lines being processed and published to the remote logstash endpoint…

---

## [Multiline read in filebeat](https://discuss.elastic.co/t/multiline-read-in-filebeat/66365)

<div class="topic-metadata">

**Author:** [@Aditya\_Srivastava](https://discuss.elastic.co/u/Aditya_Srivastava)\
**Replies:** 15\
**Last updated:** [November 18, 2016, 3:42pm UTC](https://discuss.elastic.co/t/multiline-read-in-filebeat/66365 "2016-11-18T15:42:21Z")

</div>

I have a custom log file which has multiple lines getting logged to it. All those multiple lines do not have any similar pattern to it. Those multilines are random. Which or rather what kind of parser or anything should …

---

## [Keyword term aggregations much slower after 5.6 -\> 6.2 upgrade](https://discuss.elastic.co/t/keyword-term-aggregations-much-slower-after-5-6-6-2-upgrade/129180)

<div class="topic-metadata">

**Author:** [@Emily1](https://discuss.elastic.co/u/Emily1)\
**Replies:** 11\
**Last updated:** [May 17, 2018, 1:49pm UTC](https://discuss.elastic.co/t/keyword-term-aggregations-much-slower-after-5-6-6-2-upgrade/129180 "2018-05-17T13:49:50Z")

</div>

Hello, I recently upgraded my ES cluster from 5.6 to 6.2, along with Kibana, logstash, and filebeat upgrading from 5.6 to 6.2. I had to change my Elasticsearch mapping json file because 6.2 rejected things that 5.6 acce…

---

## [Parse logs](https://discuss.elastic.co/t/parse-logs/29225)

<div class="topic-metadata">

**Author:** [@silviupanaite](https://discuss.elastic.co/u/silviupanaite)\
**Replies:** 11\
**Last updated:** [January 14, 2016, 3:49pm UTC](https://discuss.elastic.co/t/parse-logs/29225 "2016-01-14T15:49:25Z")

</div>

I'm trying to parse: {"log":"86.121.176.201 - - \[09/Sep/2015:14:14:06 +0000\] \\"GET /css/style.less HTTP/1.1\\" 304 0 \\"http://developer.unificationengine.com/login\\" \\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10\_10\_5) Apple…

---

## [Status Break Down Error](https://discuss.elastic.co/t/status-break-down-error/98476)

<div class="topic-metadata">

**Author:** [@suchand](https://discuss.elastic.co/u/suchand)\
**Replies:** 11\
**Last updated:** [September 7, 2017, 11:56am UTC](https://discuss.elastic.co/t/status-break-down-error/98476 "2017-09-07T11:56:42Z")

</div>

Status break Down Error in Kibana. Please help me to resolve this issues. Error screenshots attached. \[Screenshot\_2\].\[Kibana Status\]

---

## [Elastic Fleet Server Agent fails on startup](https://discuss.elastic.co/t/elastic-fleet-server-agent-fails-on-startup/319282)

<div class="topic-metadata">

**Author:** [@WookWook](https://discuss.elastic.co/u/WookWook)\
**Replies:** 12\
**Last updated:** [November 24, 2022, 8:33am UTC](https://discuss.elastic.co/t/elastic-fleet-server-agent-fails-on-startup/319282 "2022-11-24T08:33:26Z")

</div>

Hi, currently I want to evaluate Elastic APM, but first things first, I am trying to setup the Elastic Agent in Fleet-Managed mode which keeps constantly failing. Managed Azure Redhat Openshift 4.9 // ECK 2.5 Right no…

---

## [Date histogram & time zones](https://discuss.elastic.co/t/date-histogram-time-zones/6764)

<div class="topic-metadata">

**Author:** [@Eric\_Jain](https://discuss.elastic.co/u/Eric_Jain)\
**Replies:** 17\
**Last updated:** [February 29, 2012, 8:16pm UTC](https://discuss.elastic.co/t/date-histogram-time-zones/6764 "2012-02-29T20:16:52Z")

</div>

I created a facet like so: FacetBuilders.dateHistogramFacet("date") .field("timestamp").interval("month").zone("-08:00"); And extracted the results like so: DateHistogramFacet date = facets.facet(DateHi…

---

## [Tile Map zoom in disabled on Kibana 5.4.0](https://discuss.elastic.co/t/tile-map-zoom-in-disabled-on-kibana-5-4-0/85095)

<div class="topic-metadata">

**Author:** [@maenu](https://discuss.elastic.co/u/maenu)\
**Replies:** 12\
**Last updated:** [June 8, 2017, 6:12am UTC](https://discuss.elastic.co/t/tile-map-zoom-in-disabled-on-kibana-5-4-0/85095 "2017-06-08T06:12:12Z")

</div>

Hi I have exactly the same Tile Map visualization (Shaded Circle Markers), once on Kibana 5.3.0 and once on Kibana 5.4.0. The Tile Maps use external WMS source. In Kibana 5.4.0, the zoom is restricted to a certain l…

---

## [Spike in response time during deleteByQuery](https://discuss.elastic.co/t/spike-in-response-time-during-deletebyquery/295766)

<div class="topic-metadata">

**Author:** [@bradptp](https://discuss.elastic.co/u/bradptp)\
**Replies:** 23\
**Last updated:** [February 1, 2022, 12:05am UTC](https://discuss.elastic.co/t/spike-in-response-time-during-deletebyquery/295766 "2022-02-01T00:05:57Z")

</div>

We're using a deletebyQuery to remove a large number of records from Elasticsearch using a query similar to this: let query = { "query": { "bool": { "must\_not": { …

---

## [Cannot connect to Elasticsearch endpoint in Azure](https://discuss.elastic.co/t/cannot-connect-to-elasticsearch-endpoint-in-azure/173186)

<div class="topic-metadata">

**Author:** [@bo.clifton](https://discuss.elastic.co/u/bo.clifton)\
**Replies:** 9\
**Last updated:** [March 22, 2019, 3:28pm UTC](https://discuss.elastic.co/t/cannot-connect-to-elasticsearch-endpoint-in-azure/173186 "2019-03-22T15:28:23Z")

</div>

I've deployed an Elasticsearch cluster into Azure using the ARM template and associated script found here: ARM Template. I used default settings, except for the admin user name and password. After deployment succeeded,…

---

## [ElasticSearch stops working after sometime](https://discuss.elastic.co/t/elasticsearch-stops-working-after-sometime/269373)

<div class="topic-metadata">

**Author:** [@Devendra\_Deshmukh](https://discuss.elastic.co/u/Devendra_Deshmukh)\
**Replies:** 9\
**Last updated:** [April 10, 2021, 3:30pm UTC](https://discuss.elastic.co/t/elasticsearch-stops-working-after-sometime/269373 "2021-04-10T15:30:55Z")

</div>

My ElasticSearch server works fine for a few hours or a day and suddenly stops working. It has 1 shard and 1 replica on a single node installed on VPS along with the application server and has only 1 index with 30,000 do…

---

## [Metricbeat - 'system' -\> 'filesystem' metrics does not include network drives](https://discuss.elastic.co/t/metricbeat-system-filesystem-metrics-does-not-include-network-drives/165420)

<div class="topic-metadata">

**Author:** [@yuval\_yellin](https://discuss.elastic.co/u/yuval_yellin)\
**Replies:** 11\
**Last updated:** [February 6, 2019, 1:15pm UTC](https://discuss.elastic.co/t/metricbeat-system-filesystem-metrics-does-not-include-network-drives/165420 "2019-02-06T13:15:12Z")

</div>

Hi all, I am using system module in Metricbeat in order to monitor my computer's drives and I don't see any metrics on network drives, just on local drives. I am using 'filesystem' metricset. Thanks for your help, Yu…

---

## [Logstash 1.5.3 gem plugins](https://discuss.elastic.co/t/logstash-1-5-3-gem-plugins/26436)

<div class="topic-metadata">

**Author:** [@VALERIE](https://discuss.elastic.co/u/VALERIE)\
**Replies:** 9\
**Last updated:** [August 5, 2015, 8:23am UTC](https://discuss.elastic.co/t/logstash-1-5-3-gem-plugins/26436 "2015-08-05T08:23:48Z")

</div>

Hello, I am a newbie on ELK and recently I have installed LOGSTASH 1.5.3 on my ELASTICSEARCH 1.7 on one node on my WINDOWS LAPTOP. I need a plugin which is "logstash-filter-elasticsearch" ... found this on ruby.org, and…

---

## [Filebeat does not create index template](https://discuss.elastic.co/t/filebeat-does-not-create-index-template/243083)

<div class="topic-metadata">

**Author:** [@snolfi](https://discuss.elastic.co/u/snolfi)\
**Replies:** 10\
**Last updated:** [August 3, 2020, 10:36am UTC](https://discuss.elastic.co/t/filebeat-does-not-create-index-template/243083 "2020-08-03T10:36:39Z")

</div>

Hello, as said in the object, i'm using filebeat but for some reason its index template wasn't created on ES, the strange thing is that with the same configuration metricbeat's template was created. I report settings…

---

## [How to stop ES 1.6.0 intermittently hanging?](https://discuss.elastic.co/t/how-to-stop-es-1-6-0-intermittently-hanging/24511)

<div class="topic-metadata">

**Author:** [@tcarver](https://discuss.elastic.co/u/tcarver)\
**Replies:** 10\
**Last updated:** [June 30, 2015, 1:29pm UTC](https://discuss.elastic.co/t/how-to-stop-es-1-6-0-intermittently-hanging/24511 "2015-06-30T13:29:33Z")

</div>

We are just testing elasticsearch and have noticed that intermittently it will hang. We noticed this when we moved from running ES on a single node to a cluster of 3 nodes. This is using Java 1.7.0\_79 OpenJDK with the fo…

---

## [:message=\>"Failed action. ", :status=\>404, :action=\>\["index",](https://discuss.elastic.co/t/message-failed-action-status-404-action-index/36780)

<div class="topic-metadata">

**Author:** [@thomas.dotreppe](https://discuss.elastic.co/u/thomas.dotreppe)\
**Replies:** 12\
**Last updated:** [December 30, 2015, 12:28am UTC](https://discuss.elastic.co/t/message-failed-action-status-404-action-index/36780 "2015-12-30T00:28:16Z")

</div>

I receive very long log entries with issues such as these (this one is truncated) every few seconds in the logs: {:timestamp=\>"2015-12-09T10:51:52.061000-0700", :message=\>"Failed action. ", :status=\>404, :action=\>\["i…

---

## [Kibana and Solaris](https://discuss.elastic.co/t/kibana-and-solaris/24300)

<div class="topic-metadata">

**Author:** [@Voldemar](https://discuss.elastic.co/u/Voldemar)\
**Replies:** 9\
**Last updated:** [September 22, 2016, 9:04am UTC](https://discuss.elastic.co/t/kibana-and-solaris/24300 "2016-09-22T09:04:26Z")

</div>

May be it's very easy question, but i'm still stupid \[smile\] . We're trying to install Kibana(v.4.1.0) on Solaris 10 and have an error: ./bin/kibana: /u/user/kibana-4.1.0/node/bin/node: cannot execute Something about …

---

## [Securing Data in Elasticsearch](https://discuss.elastic.co/t/securing-data-in-elasticsearch/18070)

<div class="topic-metadata">

**Author:** [@Harvii\_Dent](https://discuss.elastic.co/u/Harvii_Dent)\
**Replies:** 14\
**Last updated:** [June 23, 2014, 1:35pm UTC](https://discuss.elastic.co/t/securing-data-in-elasticsearch/18070 "2014-06-23T13:35:41Z")

</div>

Hello, I'm planning to use Elasticsearch with Logstash for logs management and search, however, one thing I'm unable to find an answer for is making sure that the data cannot be modified once it reaches Elasticsea…

---

## [Please, help me tune java GC parameters](https://discuss.elastic.co/t/please-help-me-tune-java-gc-parameters/66940)

<div class="topic-metadata">

**Author:** [@Brad\_Jungsu\_Heo](https://discuss.elastic.co/u/Brad_Jungsu_Heo)\
**Replies:** 11\
**Last updated:** [November 24, 2016, 6:20pm UTC](https://discuss.elastic.co/t/please-help-me-tune-java-gc-parameters/66940 "2016-11-24T18:20:49Z")

</div>

Hi. I have a trouble with long java gc Stop-The-World during heavy bulk load. my environment ES Version: 2.3.2 Heap Size: 20GB Total Ram: 64GB Java Version: 1.8.0\_60 Java HotSpot(TM) 64-Bit OS: CentOS 7.2 1) gc …

---

## [No monitoring data found](https://discuss.elastic.co/t/no-monitoring-data-found/314412)

<div class="topic-metadata">

**Author:** [@P-T-I](https://discuss.elastic.co/u/P-T-I)\
**Replies:** 17\
**Last updated:** [September 23, 2022, 10:13am UTC](https://discuss.elastic.co/t/no-monitoring-data-found/314412 "2022-09-23T10:13:51Z")

</div>

I'm running kibana/elasticsearch/metricbeats 8.4.1 in a docker configuration. Although I'm seeing the monitoring indexes being created ( .ds-metricbeat-8.4.1-2022.09.14-000001, .ds-.monitoring-kibana-8-mb-2022.09.14-0…

---

## [Invalid timestamp format, but the date is formed correctly](https://discuss.elastic.co/t/invalid-timestamp-format-but-the-date-is-formed-correctly/110092)

<div class="topic-metadata">

**Author:** [@Mojster](https://discuss.elastic.co/u/Mojster)\
**Replies:** 15\
**Last updated:** [December 5, 2017, 8:28am UTC](https://discuss.elastic.co/t/invalid-timestamp-format-but-the-date-is-formed-correctly/110092 "2017-12-05T08:28:51Z")

</div>

My logstash: ... date { locale =\> "en" match =\> \["date", "dd.MM.YYYY;HH:mm:ss"\] timezone =\> "Europe/Ljubljana" target =\> "date" } ... I've proced with this 352327606 records. 352327595 were ok, but 11 thrown an err…

---

## [How to search for a data in elasticsearch?](https://discuss.elastic.co/t/how-to-search-for-a-data-in-elasticsearch/124596)

<div class="topic-metadata">

**Author:** [@Souvik\_Ray](https://discuss.elastic.co/u/Souvik_Ray)\
**Replies:** 11\
**Last updated:** [March 20, 2018, 7:43am UTC](https://discuss.elastic.co/t/how-to-search-for-a-data-in-elasticsearch/124596 "2018-03-20T07:43:49Z")

</div>

Recently I followed a tutorial provided in the elasticsearch site to push data to elastic cloud and I have successfully been able to do that. I am also able to post a sample document and search for a term in it.But I c…

---

## [Filebeat visualisation and dashboards not loading](https://discuss.elastic.co/t/filebeat-visualisation-and-dashboards-not-loading/112890)

<div class="topic-metadata">

**Author:** [@kanthimathi](https://discuss.elastic.co/u/kanthimathi)\
**Replies:** 19\
**Last updated:** [December 29, 2017, 2:04am UTC](https://discuss.elastic.co/t/filebeat-visualisation-and-dashboards-not-loading/112890 "2017-12-29T02:04:40Z")

</div>

Hi, I am trying to get logs for kubernete using filebeat while I succeeded getting the content. However, I failed in loading the predefined visualization templates and dashboards in the cloud(trial version). My dashboa…

---

## [Indexing Becomes Inconsistent and Problematic With Additional Capacity Added](https://discuss.elastic.co/t/indexing-becomes-inconsistent-and-problematic-with-additional-capacity-added/189147)

<div class="topic-metadata">

**Author:** [@Sometimes](https://discuss.elastic.co/u/Sometimes)\
**Replies:** 31\
**Last updated:** [July 25, 2019, 9:16pm UTC](https://discuss.elastic.co/t/indexing-becomes-inconsistent-and-problematic-with-additional-capacity-added/189147 "2019-07-25T21:16:33Z")

</div>

Tl;dr - We have added additional capacity to our Elasticsearch cluster and now indexing is actually performing worse than before. We have a fairly large ELK stack that runs across two data centers. Before I get to our e…

---

## [How can I set elasticsearch type in logstash conf file when importing?](https://discuss.elastic.co/t/how-can-i-set-elasticsearch-type-in-logstash-conf-file-when-importing/67579)

<div class="topic-metadata">

**Author:** [@tanimoto](https://discuss.elastic.co/u/tanimoto)\
**Replies:** 12\
**Last updated:** [December 2, 2016, 9:00am UTC](https://discuss.elastic.co/t/how-can-i-set-elasticsearch-type-in-logstash-conf-file-when-importing/67579 "2016-12-02T09:00:19Z")

</div>

I'm trying to import CSV file to elasticsearch through logstash. data can be imported and type name is logs. Is there any way to change type name? Any setting to type name in logstash conf file when importing??

---

## [6.0.0 - Login is currently disabled. Administrators should consult the Kibana logs for more details](https://discuss.elastic.co/t/6-0-0-login-is-currently-disabled-administrators-should-consult-the-kibana-logs-for-more-details/128247)

<div class="topic-metadata">

**Author:** [@pingmehere](https://discuss.elastic.co/u/pingmehere)\
**Replies:** 9\
**Last updated:** [April 17, 2018, 2:49pm UTC](https://discuss.elastic.co/t/6-0-0-login-is-currently-disabled-administrators-should-consult-the-kibana-logs-for-more-details/128247 "2018-04-17T14:49:05Z")

</div>

Hi, I'm new to x-pack. just finished testing with elasticsearch 6.0.0/ kibana6.0.0 with my data and now wants to try x-pack before buying a licence for my project. I have installed and configured x-pack on elasticsearch …

---

## [Do i need to install other "beats" with the elastic and endpoint agents or is something else wrong?](https://discuss.elastic.co/t/do-i-need-to-install-other-beats-with-the-elastic-and-endpoint-agents-or-is-something-else-wrong/281609)

<div class="topic-metadata">

**Author:** [@rconroy](https://discuss.elastic.co/u/rconroy)\
**Replies:** 32\
**Last updated:** [September 10, 2021, 10:31pm UTC](https://discuss.elastic.co/t/do-i-need-to-install-other-beats-with-the-elastic-and-endpoint-agents-or-is-something-else-wrong/281609 "2021-09-10T22:31:45Z")

</div>

Forgive me is this is a silly question but i have installed the agents, under Hosts in security it shows them connected, yet there is no data in the dashboards, everything says "all values returned zero" or "no data to …

---

## [The confusion of configuring cluster.initial\_master\_nodes](https://discuss.elastic.co/t/the-confusion-of-configuring-cluster-initial-master-nodes/229213)

<div class="topic-metadata">

**Author:** [@yc1024](https://discuss.elastic.co/u/yc1024)\
**Replies:** 11\
**Last updated:** [April 23, 2020, 5:28pm UTC](https://discuss.elastic.co/t/the-confusion-of-configuring-cluster-initial-master-nodes/229213 "2020-04-23T17:28:49Z")

</div>

Hi When I read the modules-discovery-bootstrap-cluster documentation, I found the following description When you start a master-eligible node, you can provide this setting on the command line or in the elasticsearch.ym…

---

## [Cloud deployment constantly going unhealthy](https://discuss.elastic.co/t/cloud-deployment-constantly-going-unhealthy/262423)

<div class="topic-metadata">

**Author:** [@Supernovasports](https://discuss.elastic.co/u/Supernovasports)\
**Replies:** 17\
**Last updated:** [January 30, 2021, 8:59pm UTC](https://discuss.elastic.co/t/cloud-deployment-constantly-going-unhealthy/262423 "2021-01-30T20:59:35Z")

</div>

Hi everyone, I have a deployment which today went unhealthy and after a full restart it works for a few minutes and then goes unhealthy again. From what I can see I haven't filled my storage capacity and I haven't increa…

---

## [Fatal Error in Kibana](https://discuss.elastic.co/t/fatal-error-in-kibana/142673)

<div class="topic-metadata">

**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Replies:** 17\
**Last updated:** [August 2, 2018, 1:25pm UTC](https://discuss.elastic.co/t/fatal-error-in-kibana/142673 "2018-08-02T13:25:58Z")

</div>

Hello, While switching on the kibana i encountered the error kibana plugin uncaught type {IP:5601} error cannot read property get of undefined A help would be really appreciated. Regards Shrikant

---

## [TransportClient in 2.1.x](https://discuss.elastic.co/t/transportclient-in-2-1-x/38818)

<div class="topic-metadata">

**Author:** [@Luuk01](https://discuss.elastic.co/u/Luuk01)\
**Replies:** 9\
**Last updated:** [January 11, 2016, 12:35pm UTC](https://discuss.elastic.co/t/transportclient-in-2-1-x/38818 "2016-01-11T12:35:36Z")

</div>

How to create a TranspotClient in 2.1.x? I recently updated to elastic search 2.1.x. Iam suffering to create a TransportClient via the JAVA API. My Code looks like \*\* Settings settings = Settings.setting…

---

## [Timeline & Visualize Request Timeout after 30000ms in Kibana](https://discuss.elastic.co/t/timeline-visualize-request-timeout-after-30000ms-in-kibana/129014)

<div class="topic-metadata">

**Author:** [@jlixfeld](https://discuss.elastic.co/u/jlixfeld)\
**Replies:** 10\
**Last updated:** [April 24, 2018, 7:31pm UTC](https://discuss.elastic.co/t/timeline-visualize-request-timeout-after-30000ms-in-kibana/129014 "2018-04-24T19:31:11Z")

</div>

Hey there, I'm about 4 days new to ELK; very green to all this. Elasticsearch, kibana and logstash are all version 6.2.4, all running on one Debian 9.4 VM. I guess that means my cluster contains only a single node. I…

---

## [Geo\_point Unindexed](https://discuss.elastic.co/t/geo-point-unindexed/102700)

<div class="topic-metadata">

**Author:** [@karnamonkster](https://discuss.elastic.co/u/karnamonkster)\
**Replies:** 19\
**Last updated:** [October 9, 2017, 4:42am UTC](https://discuss.elastic.co/t/geo-point-unindexed/102700 "2017-10-09T04:42:38Z")

</div>

Hi, I am not able to get the geo\_point indexed in the records The field gets converted with correct latitude and longitude fields storing it to location field also gets added successfully Also create a mapping templa…

---

## [Cluster shards unbalanced and keep moving shards around after upgrade to 8.8.1](https://discuss.elastic.co/t/cluster-shards-unbalanced-and-keep-moving-shards-around-after-upgrade-to-8-8-1/336573)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 18\
**Last updated:** [June 28, 2023, 3:56pm UTC](https://discuss.elastic.co/t/cluster-shards-unbalanced-and-keep-moving-shards-around-after-upgrade-to-8-8-1/336573 "2023-06-28T15:56:20Z")

</div>

Hello, Yesterday we upgraded our cluster from 8.5.1 to 8.8.1 and now the shards are unbalacend between the nodes and the cluster keeps moving shards around to try to balance it. I have a hot/warm architecture with 4 ho…

---

## [Watcher Basic Alert](https://discuss.elastic.co/t/watcher-basic-alert/52386)

<div class="topic-metadata">

**Author:** [@dkota](https://discuss.elastic.co/u/dkota)\
**Replies:** 9\
**Last updated:** [June 15, 2016, 10:18am UTC](https://discuss.elastic.co/t/watcher-basic-alert/52386 "2016-06-15T10:18:38Z")

</div>

I'm trying to schedule a cluster health alert curl -k -u usr:pwd-XPUT 'https://localhost:9200/\_watcher/watch/cluster\_red\_alert' -d ' { "trigger" : { "schedule" : { "interval" : "10s" } }, "input" : { "htt…

[Previous page](https://discuss.elastic.co/top.md?page=83&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=85&per_page=50&period=all)
