# Top **URL:** https://discuss.elastic.co/top.md?page=860&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 861 --- ## [Output to file, codec for windows events](https://discuss.elastic.co/t/output-to-file-codec-for-windows-events/128696)
**Author:** [@Rakkijake](https://discuss.elastic.co/u/Rakkijake)\ **Replies:** 5\ **Last updated:** [April 23, 2018, 11:56am UTC](https://discuss.elastic.co/t/output-to-file-codec-for-windows-events/128696 "2018-04-23T11:56:36Z")
Hello, Setting up my first Elastic, and ran to an issue with logstash output to file. I am trying to get output both on elastic and to file, and both are working otherwise fine; however, I dont get any timestamp on the… --- ## [Percentage of downtime](https://discuss.elastic.co/t/percentage-of-downtime/108354)
**Author:** [@OucemaBellagha](https://discuss.elastic.co/u/OucemaBellagha)\ **Replies:** 5\ **Last updated:** [November 21, 2017, 1:02pm UTC](https://discuss.elastic.co/t/percentage-of-downtime/108354 "2017-11-21T13:02:51Z")
Hi folks, I'm using scripted fields to calculate my host downtime over a month statically using 43800 which is the number of minutes per month: 100 - ((doc\['downtime'\].value / 43800) \*100) Now this is static and not ac… --- ## [AWS IAM role not working with Elasticsearch 5.0.0-alpha2, but works with 2.3 version](https://discuss.elastic.co/t/aws-iam-role-not-working-with-elasticsearch-5-0-0-alpha2-but-works-with-2-3-version/51347)
**Author:** [@randhirkr](https://discuss.elastic.co/u/randhirkr)\ **Replies:** 5\ **Last updated:** [May 31, 2016, 4:56pm UTC](https://discuss.elastic.co/t/aws-iam-role-not-working-with-elasticsearch-5-0-0-alpha2-but-works-with-2-3-version/51347 "2016-05-31T16:56:51Z")
AWS IAM role not working with Elasticsearch 5.0.0-alpha2, but works with 2.3 version I am trying to use AWS IAM role with Elasticsearch 5.0.0-alpha2 and EC2 discovery plug-in, but it does not seem to be working and I am… --- ## [Logstash Keystore doesn’t work - v7.7.1](https://discuss.elastic.co/t/logstash-keystore-doesn-t-work-v7-7-1/248711)
**Author:** [@Ashishtechnaut](https://discuss.elastic.co/u/Ashishtechnaut)\ **Replies:** 0\ **Last updated:** [September 15, 2020, 4:06pm UTC](https://discuss.elastic.co/t/logstash-keystore-doesn-t-work-v7-7-1/248711 "2020-09-15T16:06:57Z")
Hi All, We are facing an issue while using Logstash keystore. We followed the steps available at the below link. This is setup on a single node cluster with Platinum License and xpack/TLS enabled. Please find the err… --- ## [Show fields with zero value in last](https://discuss.elastic.co/t/show-fields-with-zero-value-in-last/199764)
**Author:** [@sinscary](https://discuss.elastic.co/u/sinscary)\ **Replies:** 0\ **Last updated:** [September 17, 2019, 6:51am UTC](https://discuss.elastic.co/t/show-fields-with-zero-value-in-last/199764 "2019-09-17T06:51:46Z")
Hi, I have documents with the price field. I am sorting the documents by price. There are few documents which have price value zero. Problem is when I sort the documents with price field, it shows documents with zero fie… --- ## [Does es support docker swarm mode?](https://discuss.elastic.co/t/does-es-support-docker-swarm-mode/161986)
**Author:** [@wxywj1005](https://discuss.elastic.co/u/wxywj1005)\ **Replies:** 0\ **Last updated:** [December 24, 2018, 8:59am UTC](https://discuss.elastic.co/t/does-es-support-docker-swarm-mode/161986 "2018-12-24T08:59:08Z")
Hi, es team! It works normally with docker-compose up, but when I am switching to production mode，I meet a problem. when I run docker deploy -c docker-compose.yml es as a swarm, console logges that Ignoring unsupported… --- ## [Grok: logstash package does not include default patterns](https://discuss.elastic.co/t/grok-logstash-package-does-not-include-default-patterns/40297)
**Author:** [@biswajit86](https://discuss.elastic.co/u/biswajit86)\ **Replies:** 6\ **Last updated:** [January 28, 2016, 10:12pm UTC](https://discuss.elastic.co/t/grok-logstash-package-does-not-include-default-patterns/40297 "2016-01-28T22:12:04Z")
Hi, I am currently running logstash-2.1.1 . While using grok patterns, I am not able to get the built-in logstash patterns for grok (like SPACE, NOTSPACE etc by default). As a result I had to download all the patterns… --- ## [Error in installing elasticsearch 6.7 and above](https://discuss.elastic.co/t/error-in-installing-elasticsearch-6-7-and-above/180980)
**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\ **Replies:** 2\ **Last updated:** [November 14, 2019, 3:11pm UTC](https://discuss.elastic.co/t/error-in-installing-elasticsearch-6-7-and-above/180980 "2019-11-14T15:11:06Z")
While installing elaticsearch 6.7 and above I am getting this error: sudo systemctl start elasticsearch.service could not find java in JAVA\_HOME or bundled at /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.212.b04-0.el7\_6.x86\_6… --- ## [Kibana 7.0 Disable collapse sidebar by default](https://discuss.elastic.co/t/kibana-7-0-disable-collapse-sidebar-by-default/177179)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 2\ **Last updated:** [April 18, 2019, 12:34am UTC](https://discuss.elastic.co/t/kibana-7-0-disable-collapse-sidebar-by-default/177179 "2019-04-18T00:34:18Z")
Is there a way to do this? I can't seem to find the setting to make the change Thanks --- ## [Help Indexing Twitter created\_at field](https://discuss.elastic.co/t/help-indexing-twitter-created-at-field/33904)
**Author:** [@sparrowdev](https://discuss.elastic.co/u/sparrowdev)\ **Replies:** 2\ **Last updated:** [January 31, 2017, 4:51pm UTC](https://discuss.elastic.co/t/help-indexing-twitter-created-at-field/33904 "2017-01-31T16:51:36Z")
I'm trying to index objects coming in from the Twitter Stream api. I've defined the index mapping as following, but the date-picker and histogram panels in Kibana are not accepting the created\_at field properly, so I am … --- ## [Configuration of Kibana running in Docker](https://discuss.elastic.co/t/configuration-of-kibana-running-in-docker/278181)
**Author:** [@ppuschmann](https://discuss.elastic.co/u/ppuschmann)\ **Replies:** 4\ **Last updated:** [August 11, 2021, 3:43pm UTC](https://discuss.elastic.co/t/configuration-of-kibana-running-in-docker/278181 "2021-08-11T15:43:55Z")
Hi, we're running Kibana as a Docker-container and can configure some options with environment-variables, but not all. These see to work just fine: "ELASTICSEARCH\_HOSTS": "http://xxxxxxx:9200", "ELASTICSEARCH\_PASSWORD… --- ## [Output with condition](https://discuss.elastic.co/t/output-with-condition/206505)
**Author:** [@sud0](https://discuss.elastic.co/u/sud0)\ **Replies:** 4\ **Last updated:** [November 5, 2019, 8:56pm UTC](https://discuss.elastic.co/t/output-with-condition/206505 "2019-11-05T20:56:48Z")
HI. I have two businesses that must be separated in two different indexes. I'm trying to separate them on the output: output { if \[region\] == "au" { elasticsearch { hosts =\> \["localhost:9200"\] … --- ## [Is this rally result valid?](https://discuss.elastic.co/t/is-this-rally-result-valid/68239)
**Author:** [@obudiman](https://discuss.elastic.co/u/obudiman)\ **Replies:** 4\ **Last updated:** [December 8, 2016, 7:12am UTC](https://discuss.elastic.co/t/is-this-rally-result-valid/68239 "2016-12-08T07:12:56Z")
Hello, We have deployed rally (0.4.5) to measure our existing cluster (external car) which consisted of 3 dedicated data nodes and 2 ingest/client nodes. We are indexing 5 million apache log documents already in JSON fo… --- ## [Kibana4 adding index patterns](https://discuss.elastic.co/t/kibana4-adding-index-patterns/26357)
**Author:** [@dopey](https://discuss.elastic.co/u/dopey)\ **Replies:** 4\ **Last updated:** [July 29, 2015, 5:19pm UTC](https://discuss.elastic.co/t/kibana4-adding-index-patterns/26357 "2015-07-29T17:19:18Z")
I have ugraded to kibana4 and by default kibana was able to find and add two of my indices (logstash-\[date\], and another), however, I am having an issue adding the rest of the indices. I can go to Settings -\> Indices -\> … --- ## [Top hits aggregation default sort](https://discuss.elastic.co/t/top-hits-aggregation-default-sort/19334)
**Author:** [@dantuff](https://discuss.elastic.co/u/dantuff)\ **Replies:** 4\ **Last updated:** [August 19, 2014, 8:59pm UTC](https://discuss.elastic.co/t/top-hits-aggregation-default-sort/19334 "2014-08-19T20:59:48Z")
I using the top hits aggregation with a has\_child query. In the top\_hits aggregation documentation it says '\*By default the hits are sorted by the score of the main query\*', but I'm not seeing that in the results for… --- ## [Kibana Controls Filter missing IP Filter by type](https://discuss.elastic.co/t/kibana-controls-filter-missing-ip-filter-by-type/313070)
**Author:** [@matled](https://discuss.elastic.co/u/matled)\ **Replies:** 2\ **Last updated:** [August 30, 2022, 3:25pm UTC](https://discuss.elastic.co/t/kibana-controls-filter-missing-ip-filter-by-type/313070 "2022-08-30T15:25:18Z")
Not sure if this is intended but I'm missing the type "IP" for filtering with the new custom controls. The old version can filter ip fields. Am I missing something or does anyone know a workaround? --- ## [Failed to obtain node locks Elasticsearch \[8.0.1\]](https://discuss.elastic.co/t/failed-to-obtain-node-locks-elasticsearch-8-0-1/298994)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 1\ **Last updated:** [March 9, 2022, 5:40pm UTC](https://discuss.elastic.co/t/failed-to-obtain-node-locks-elasticsearch-8-0-1/298994 "2022-03-09T17:40:27Z")
Hi Can You help me with fix it? During install elasticsearch over docker swarm/docker compose I've met a common issue with java.lang.IllegalStateException: failed to obtain node locks I'm pretty sure that only one… --- ## [Potential Race Condition during Document Updates in ES 6.7](https://discuss.elastic.co/t/potential-race-condition-during-document-updates-in-es-6-7/192089)
**Author:** [@Ryan\_Bales](https://discuss.elastic.co/u/Ryan_Bales)\ **Replies:** 1\ **Last updated:** [July 25, 2019, 1:27pm UTC](https://discuss.elastic.co/t/potential-race-condition-during-document-updates-in-es-6-7/192089 "2019-07-25T13:27:29Z")
We've recently upgraded our stand-by cluster to ES 6.7.1 from ES 5.6. Since our upgrade we're seeing a situation where some updates to our documents are not being applied correctly. Some additional details on our use c… --- ## [Does elasticsearch recommend to use any special character in user password for user](https://discuss.elastic.co/t/does-elasticsearch-recommend-to-use-any-special-character-in-user-password-for-user/252974)
**Author:** [@sreerama.naga](https://discuss.elastic.co/u/sreerama.naga)\ **Replies:** 3\ **Last updated:** [October 23, 2020, 4:23am UTC](https://discuss.elastic.co/t/does-elasticsearch-recommend-to-use-any-special-character-in-user-password-for-user/252974 "2020-10-23T04:23:59Z")
Hi, Here I am trying to get the details, does elasticsearch recommend to use any special character for user password? I tried doing some search in those lines but didn't succeed in getting any proper pages with recommen… --- ## [Elasticsearch and kibana service stopped after x-pack installation ,\[Failed to load plugin class \[org.elasticsearch.xpack.XPackPlugin\]](https://discuss.elastic.co/t/elasticsearch-and-kibana-service-stopped-after-x-pack-installation-failed-to-load-plugin-class-org-elasticsearch-xpack-xpackplugin/72896)
**Author:** [@FardinBehboudi](https://discuss.elastic.co/u/FardinBehboudi)\ **Replies:** 3\ **Last updated:** [January 28, 2017, 3:09pm UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-service-stopped-after-x-pack-installation-failed-to-load-plugin-class-org-elasticsearch-xpack-xpackplugin/72896 "2017-01-28T15:09:59Z")
i am using Elastic stack 5.1 i had elasticsearcha nd kibana installed with xpack installed on themPreformatted text and they were working also i installed logstash and beats.(order of installation was like what i wrote) a… --- ## [New user - Simple problem with adding a field with mutate](https://discuss.elastic.co/t/new-user-simple-problem-with-adding-a-field-with-mutate/59605)
**Author:** [@jazzed](https://discuss.elastic.co/u/jazzed)\ **Replies:** 3\ **Last updated:** [September 3, 2016, 3:36pm UTC](https://discuss.elastic.co/t/new-user-simple-problem-with-adding-a-field-with-mutate/59605 "2016-09-03T15:36:51Z")
I want to add a new field based on the content of the source field from filebeat. The filebeat-\* index shows SOME logs get the new field, and other logs are empty. However, the logstash-\* index has file defined for eve… --- ## [Logstash 2.3.3 Elasticsearch Output Vulnerability](https://discuss.elastic.co/t/logstash-2-3-3-elasticsearch-output-vulnerability/54973)
**Author:** [@suyograo](https://discuss.elastic.co/u/suyograo)\ **Replies:** 0\ **Last updated:** [July 7, 2016, 4:57pm UTC](https://discuss.elastic.co/t/logstash-2-3-3-elasticsearch-output-vulnerability/54973 "2016-07-07T16:57:05Z")
Hi all, we would like to announce a security vulnerability we discovered in our testing. Logstash 2.3.4 has been released with a patch to fix this. Issue Prior to version 2.3.4, Elasticsearch Output plugin would log to… --- ## [HashMap\ to JsonData in new elasticsearch Java client API](https://discuss.elastic.co/t/hashmap-string-object-to-jsondata-in-new-elasticsearch-java-client-api/311357)
**Author:** [@ALX\_DM](https://discuss.elastic.co/u/ALX_DM)\ **Replies:** 2\ **Last updated:** [August 15, 2022, 1:58am UTC](https://discuss.elastic.co/t/hashmap-string-object-to-jsondata-in-new-elasticsearch-java-client-api/311357 "2022-08-15T01:58:38Z")
How to convert a hashmap to co.elastic.clients.json.JsonData in new elasticsearch Java client API? I am doing this conversion to provide the document to a IndexRequest.Builder. IndexRequest.Builder\ request = … --- ## [Need to decrease Kibana loading time](https://discuss.elastic.co/t/need-to-decrease-kibana-loading-time/189675)
**Author:** [@Atul\_Soni](https://discuss.elastic.co/u/Atul_Soni)\ **Replies:** 2\ **Last updated:** [July 11, 2019, 6:20am UTC](https://discuss.elastic.co/t/need-to-decrease-kibana-loading-time/189675 "2019-07-11T06:20:34Z")
Hi, I am new to ELK and I could not find how I can decrease the kibana loading time, when I load it the first time then vendors.bundle.dll.js files takes almost 1 min to load, its size is 32MB and when I open discover p… --- ## [Kibana problem](https://discuss.elastic.co/t/kibana-problem/170498)
**Author:** [@DavidLevi](https://discuss.elastic.co/u/DavidLevi)\ **Replies:** 2\ **Last updated:** [March 4, 2019, 6:10am UTC](https://discuss.elastic.co/t/kibana-problem/170498 "2019-03-04T06:10:16Z")
Hi guys, My Kiabana was working last week but not anymore. I see this on Kibana. How can I troubleshoot this error? Error Message on Kibana: "No monitoring data found. Try setting the time filter to "Last 1 hour" or c… --- ## [Hi Guys , I got Error whe I connect remote filebeat with logstash](https://discuss.elastic.co/t/hi-guys-i-got-error-whe-i-connect-remote-filebeat-with-logstash/233526)
**Author:** [@Maxwell\_Chu](https://discuss.elastic.co/u/Maxwell_Chu)\ **Replies:** 5\ **Last updated:** [May 20, 2020, 1:27pm UTC](https://discuss.elastic.co/t/hi-guys-i-got-error-whe-i-connect-remote-filebeat-with-logstash/233526 "2020-05-20T13:27:16Z")
2020-05-20T21:41:56.637+1000 ERROR \[logstash\] logstash/async.go:279 Failed to publish events caused by: write tcp 192.168.110.144:51994-\>192.168.110.143:5044: write: connection reset by peer 2020-05-20T21:41… --- ## [Rally failed for downloading data file from aws S3](https://discuss.elastic.co/t/rally-failed-for-downloading-data-file-from-aws-s3/154856)
**Author:** [@mahesh\_varak89](https://discuss.elastic.co/u/mahesh_varak89)\ **Replies:** 5\ **Last updated:** [November 1, 2018, 9:57am UTC](https://discuss.elastic.co/t/rally-failed-for-downloading-data-file-from-aws-s3/154856 "2018-11-01T09:57:36Z")
It reports an error as following : \*\*\*\*\*\* Use this pipeline only if you are aware of the tradeoffs. \*\*\*\*\*\* \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* Watch your step! \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* \[INFO\] Racing on track \[company\], … --- ## [High bulk rejection on specific nodes](https://discuss.elastic.co/t/high-bulk-rejection-on-specific-nodes/124033)
**Author:** [@Oferkes](https://discuss.elastic.co/u/Oferkes)\ **Replies:** 5\ **Last updated:** [March 22, 2018, 9:08am UTC](https://discuss.elastic.co/t/high-bulk-rejection-on-specific-nodes/124033 "2018-03-22T09:08:06Z")
Hi, i noticed that 2 data nodes out of 21 data nodes overall are rejecting high number of bulk requests, and only those 2: \[image\] the load on the machines is very low, the specs are the following: machine A: 16 cor… --- ## [\_routing keys limit?](https://discuss.elastic.co/t/-routing-keys-limit/86519)
**Author:** [@yandooo](https://discuss.elastic.co/u/yandooo)\ **Replies:** 5\ **Last updated:** [May 21, 2017, 10:09am UTC](https://discuss.elastic.co/t/-routing-keys-limit/86519 "2017-05-21T10:09:59Z")
Documentation doesn't say anything about \_routing keys limit that can be passed in the query? I suspect it's limited by URL length? What if number \_routing keys is too big - does it mean one should use applicatio… --- ## [Search term position](https://discuss.elastic.co/t/search-term-position/226514)
**Author:** [@Luan\_Pereira](https://discuss.elastic.co/u/Luan_Pereira)\ **Replies:** 7\ **Last updated:** [April 7, 2020, 12:39am UTC](https://discuss.elastic.co/t/search-term-position/226514 "2020-04-07T00:39:20Z")
Hi, I'm using version 6.8. How to configure the search to prioritize products that have the search term in ascending order? For example, when typing the word "oil" (cooking oil) I want the search result to prioritize pr… --- ## [How to let user choose time slot in shared dashboard?](https://discuss.elastic.co/t/how-to-let-user-choose-time-slot-in-shared-dashboard/94080)
**Author:** [@TaurusD](https://discuss.elastic.co/u/TaurusD)\ **Replies:** 7\ **Last updated:** [July 25, 2017, 9:56am UTC](https://discuss.elastic.co/t/how-to-let-user-choose-time-slot-in-shared-dashboard/94080 "2017-07-25T09:56:08Z")
Hi, I'm visualizing some data to some users in my intranet, where I do not need high-level security. I only want my users to see Dashboard part in KIBANA but hide all other parts from them. And I have tried to share a … --- ## [Docker Compose ELK 8.10.2](https://discuss.elastic.co/t/docker-compose-elk-8-10-2/344770)
**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\ **Replies:** 8\ **Last updated:** [October 13, 2023, 2:07pm UTC](https://discuss.elastic.co/t/docker-compose-elk-8-10-2/344770 "2023-10-13T14:07:41Z")
Hi, I'm trying to create a docker-compose.yml file by following the instructions here. The only change I made to the docker-compose.yml file was to add the Logstash service. This is what I added to the docker-compose.… --- ## [Embedded elasticsearch - ClassCastException when clustered](https://discuss.elastic.co/t/embedded-elasticsearch-classcastexception-when-clustered/11942)
**Author:** [@esadhir](https://discuss.elastic.co/u/esadhir)\ **Replies:** 8\ **Last updated:** [April 27, 2016, 8:19pm UTC](https://discuss.elastic.co/t/embedded-elasticsearch-classcastexception-when-clustered/11942 "2016-04-27T20:19:05Z")
We have a java application which embeds elasticsearch instances on multiple servers, and starts them as follows: node = nodeBuilder().client(false).local(false).node(); client = node.client(); //wait for ready… --- ## [Correlating information from different indexes](https://discuss.elastic.co/t/correlating-information-from-different-indexes/134249)
**Author:** [@espogian](https://discuss.elastic.co/u/espogian)\ **Replies:** 4\ **Last updated:** [June 4, 2018, 6:28am UTC](https://discuss.elastic.co/t/correlating-information-from-different-indexes/134249 "2018-06-04T06:28:50Z")
Hi, this is something I have already found in several discussions here and in other places, but I would like to ask for your advice because I'm still not sure about which is the best solution. I have data coming from a … --- ## [Unable to fetch mapping. Do you have indices matching the pattern?No default index pattern. You must select or create one to continue](https://discuss.elastic.co/t/unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern-no-default-index-pattern-you-must-select-or-create-one-to-continue/99514)
**Author:** [@saliormoon](https://discuss.elastic.co/u/saliormoon)\ **Replies:** 4\ **Last updated:** [September 15, 2017, 12:13am UTC](https://discuss.elastic.co/t/unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern-no-default-index-pattern-you-must-select-or-create-one-to-continue/99514 "2017-09-15T00:13:46Z")
Elasticsearch version: 5.5.2 Kibana version: 5.5.2 Logstash version: 5.5.2 When I install kibana and open the page on the Google Chrome with “http://10.62.179.32:5601/app/kibana#/management/kibana/index?\_g=()” In the… --- ## [Configuring Logstash to parse Apache log files and send](https://discuss.elastic.co/t/configuring-logstash-to-parse-apache-log-files-and-send/49591)
**Author:** [@Jemli\_Fathi](https://discuss.elastic.co/u/Jemli_Fathi)\ **Replies:** 4\ **Last updated:** [May 10, 2016, 11:06am UTC](https://discuss.elastic.co/t/configuring-logstash-to-parse-apache-log-files-and-send/49591 "2016-05-10T11:06:30Z")
I'm trying to parse xampp log files and to send them to ES, i found a configuration example: input{ file{ path =\> '/opt/lampp/logs/\*.log' start\_position =\> beginning } } filter { if \[path\] =~ "access" { m… --- ## [Pod is not running](https://discuss.elastic.co/t/pod-is-not-running/307245)
**Author:** [@gerardgorrion](https://discuss.elastic.co/u/gerardgorrion)\ **Replies:** 6\ **Last updated:** [June 30, 2022, 9:50am UTC](https://discuss.elastic.co/t/pod-is-not-running/307245 "2022-06-30T09:50:18Z")
Good morning, We try to update kubernetes version from 1.19 to 1.20, and when try to renew an Elasticsearch data pod, this data pod is not runnning, showing this error in logs: {"type": "server", "timestamp": "2022-06-… --- ## [FileBeat + LogsTash port 5044](https://discuss.elastic.co/t/filebeat-logstash-port-5044/271777)
**Author:** [@Paveltest](https://discuss.elastic.co/u/Paveltest)\ **Replies:** 6\ **Last updated:** [May 21, 2021, 7:00am UTC](https://discuss.elastic.co/t/filebeat-logstash-port-5044/271777 "2021-05-21T07:00:03Z")
Error ERROR#011\[publisher\_pipeline\_output\]#011pipeline/output.go:154#011Failed to connect to backoff(async(tcp://192.168.10.14:5044)). I can not connect on port 5044 with logstash! On the logstash server port 5044 is op… --- ## [Cross cluster Monitoring](https://discuss.elastic.co/t/cross-cluster-monitoring/92611)
**Author:** [@abraxxa](https://discuss.elastic.co/u/abraxxa)\ **Replies:** 6\ **Last updated:** [July 19, 2017, 7:23am UTC](https://discuss.elastic.co/t/cross-cluster-monitoring/92611 "2017-07-19T07:23:00Z")
I'm trying to find out if Kibana 5.5 supports accessing monitoring data of remove clusters using the cross cluster search feature. We have a central three-node Elasticsearch cluster and plan to scale by adding per custom… --- ## [Limit access to dashboard](https://discuss.elastic.co/t/limit-access-to-dashboard/72308)
**Author:** [@Mormaii](https://discuss.elastic.co/u/Mormaii)\ **Replies:** 6\ **Last updated:** [January 24, 2017, 2:44am UTC](https://discuss.elastic.co/t/limit-access-to-dashboard/72308 "2017-01-24T02:44:42Z")
How can I limit a roles ability to access certain dashboards? Is it possible to let a role only see certain dashboards? --- ## [Removing a part of every line on a multiple codec](https://discuss.elastic.co/t/removing-a-part-of-every-line-on-a-multiple-codec/43874)
**Author:** [@jervdv](https://discuss.elastic.co/u/jervdv)\ **Replies:** 6\ **Last updated:** [March 15, 2016, 9:52am UTC](https://discuss.elastic.co/t/removing-a-part-of-every-line-on-a-multiple-codec/43874 "2016-03-15T09:52:19Z")
Hi I'm combining a stack trace with a mutiline codec everything is going great my multiline codec combines evertyhing to one logstash event. But as you can see in the logstash event below i need to delete a part of the… --- ## [Combining two events in one to calculate time difference](https://discuss.elastic.co/t/combining-two-events-in-one-to-calculate-time-difference/292155)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 2\ **Last updated:** [December 16, 2021, 3:35pm UTC](https://discuss.elastic.co/t/combining-two-events-in-one-to-calculate-time-difference/292155 "2021-12-16T15:35:54Z")
Hello team, I have case where information is being displayed in different lines. These lines are not even consecutive lines. Unique field is log\_processed.companyId. I have to display time difference between entry and e… --- ## [Dealing with Arrays and IP address fields in elasticsearch SQL](https://discuss.elastic.co/t/dealing-with-arrays-and-ip-address-fields-in-elasticsearch-sql/142122)
**Author:** [@blueren](https://discuss.elastic.co/u/blueren)\ **Replies:** 2\ **Last updated:** [July 31, 2018, 1:03pm UTC](https://discuss.elastic.co/t/dealing-with-arrays-and-ip-address-fields-in-elasticsearch-sql/142122 "2018-07-31T13:03:13Z")
I'm using elastiflow by @rcowart \[tagging for FYI\]. Certain flow fields such as TCP flags return array. Other fields such as source / dest IP return IP address types. If I try to query them using the Elasticsearch SQL a… --- ## [How to get the podman container name , cpu and memory usage details using metricbeat](https://discuss.elastic.co/t/how-to-get-the-podman-container-name-cpu-and-memory-usage-details-using-metricbeat/233728)
**Author:** [@balamurugan\_ravi](https://discuss.elastic.co/u/balamurugan_ravi)\ **Replies:** 1\ **Last updated:** [May 21, 2020, 1:34pm UTC](https://discuss.elastic.co/t/how-to-get-the-podman-container-name-cpu-and-memory-usage-details-using-metricbeat/233728 "2020-05-21T13:34:13Z")
Hi, We are using rootless podman to our containers and would like to monitor the containers performance using metricbeat installed on the host. I have seen this blog post https://www.elastic.co/blog/blog-detail and unde… --- ## [How to search relationship between log lines](https://discuss.elastic.co/t/how-to-search-relationship-between-log-lines/119078)
**Author:** [@aybhave](https://discuss.elastic.co/u/aybhave)\ **Replies:** 1\ **Last updated:** [February 8, 2018, 3:35pm UTC](https://discuss.elastic.co/t/how-to-search-relationship-between-log-lines/119078 "2018-02-08T15:35:12Z")
Hello, I’m using ElasticSearch to index log files coming from a system. The format of the log files is almost identical to syslog. It starts with a time stamp, then PID and TID of the logging thread, a log level and the… --- ## [NoClassDefFoundError for log4j when running rest based IT tests](https://discuss.elastic.co/t/noclassdeffounderror-for-log4j-when-running-rest-based-it-tests/83292)
**Author:** [@apanimesh061](https://discuss.elastic.co/u/apanimesh061)\ **Replies:** 1\ **Last updated:** [April 23, 2017, 12:18am UTC](https://discuss.elastic.co/t/noclassdeffounderror-for-log4j-when-running-rest-based-it-tests/83292 "2017-04-23T00:18:43Z")
Full mvn based output: \> mvn -Dtest=org.elasticsearch.plugin.ingest.vader.processor.VaderRestIT test \[INFO\] Scanning for projects... \[INFO\] \[INFO\] -----------------------------------------------------------------------… --- ## [URL in Markdown widget](https://discuss.elastic.co/t/url-in-markdown-widget/53240)
**Author:** [@Sumantha\_Kannantha](https://discuss.elastic.co/u/Sumantha_Kannantha)\ **Replies:** 1\ **Last updated:** [June 20, 2016, 6:47pm UTC](https://discuss.elastic.co/t/url-in-markdown-widget/53240 "2016-06-20T18:47:52Z")
In Markdown widget we want to provide URL. Something similar to Navigation widget in http://demo.elastic.co/packetbeat We provide URL link below Web transactions We want to open URL in new Tab instead of opening in s… --- ## [Logstash Error](https://discuss.elastic.co/t/logstash-error/287404)
**Author:** [@Mudit\_Tripathi](https://discuss.elastic.co/u/Mudit_Tripathi)\ **Replies:** 5\ **Last updated:** [October 25, 2021, 9:22am UTC](https://discuss.elastic.co/t/logstash-error/287404 "2021-10-25T09:22:27Z")
Hi Guys, I have created a sample csv file with 3 columns and I am using to log the csv file into Elasticsearch using logstash. This is my logstash.conf input { file { path =\> "/Users/mudit.tripathi/Downloads/samplel… --- ## [Get Sum value of an aggregation than group by a term looks not possible](https://discuss.elastic.co/t/get-sum-value-of-an-aggregation-than-group-by-a-term-looks-not-possible/251271)
**Author:** [@miri](https://discuss.elastic.co/u/miri)\ **Replies:** 5\ **Last updated:** [October 8, 2020, 7:13am UTC](https://discuss.elastic.co/t/get-sum-value-of-an-aggregation-than-group-by-a-term-looks-not-possible/251271 "2020-10-08T07:13:59Z")
Is there a way to get from a field value ( like "devices\_connected"), seperated by a term (like "servers") ... the sum of that? Example: There are 3 servers sending connected device information into elasticsearch //1se… --- ## [\[KIBANA\] Programatically get the number of log lines for a saved search (e.g: via curl)?](https://discuss.elastic.co/t/kibana-programatically-get-the-number-of-log-lines-for-a-saved-search-e-g-via-curl/210616)
**Author:** [@TomHome](https://discuss.elastic.co/u/TomHome)\ **Replies:** 5\ **Last updated:** [December 13, 2019, 6:49am UTC](https://discuss.elastic.co/t/kibana-programatically-get-the-number-of-log-lines-for-a-saved-search-e-g-via-curl/210616 "2019-12-13T06:49:58Z")
Hi, We'd like to programmatically access saved searches to count the number of log lines they return by using the ES query and get the count from ES directly. These monitoring saved searches will be created by a separat… [Previous page](https://discuss.elastic.co/top.md?page=859&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=861&per_page=50&period=all)