# Top

**URL:** https://discuss.elastic.co/top.md?page=883&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 884

---

## [Verification failed for logstash-filter-multiline](https://discuss.elastic.co/t/verification-failed-for-logstash-filter-multiline/83991)

<div class="topic-metadata">

**Author:** [@manopmk](https://discuss.elastic.co/u/manopmk)\
**Replies:** 4\
**Last updated:** [May 5, 2017, 6:18am UTC](https://discuss.elastic.co/t/verification-failed-for-logstash-filter-multiline/83991 "2017-05-05T06:18:33Z")

</div>

hi Getting this error when i execute the cmd : logstash-plugin install logstash-filter-multiline "Unable to download data from https://rubygems.org/ - SocketError: initialize: name or service not known (ht…

---

## [How i can parse weblogic log file to logstash in windows :](https://discuss.elastic.co/t/how-i-can-parse-weblogic-log-file-to-logstash-in-windows/24450)

<div class="topic-metadata">

**Author:** [@Tariq\_Turabi](https://discuss.elastic.co/u/Tariq_Turabi)\
**Replies:** 4\
**Last updated:** [June 29, 2015, 1:31pm UTC](https://discuss.elastic.co/t/how-i-can-parse-weblogic-log-file-to-logstash-in-windows/24450 "2015-06-29T13:31:59Z")

</div>

i am using logstash in windows 7 and now i need to parse weblogic log file to logstash ,any help ? thank you.

---

## [Too many cached tokens with illegal\_state\_exception](https://discuss.elastic.co/t/too-many-cached-tokens-with-illegal-state-exception/245539)

<div class="topic-metadata">

**Author:** [@111375](https://discuss.elastic.co/u/111375)\
**Replies:** 3\
**Last updated:** [August 25, 2020, 4:13pm UTC](https://discuss.elastic.co/t/too-many-cached-tokens-with-illegal-state-exception/245539 "2020-08-25T16:13:47Z")

</div>

Доброго времени суток. При использовании фонетического анализатора (см transliteration в конфиге ниже), во время записи (индексации) документов в Elasticsearch, используя Bulk API (пачка порядка 100 документов за один …

---

## [UnavailableShardsException](https://discuss.elastic.co/t/unavailableshardsexception/29404)

<div class="topic-metadata">

**Author:** [@genesis](https://discuss.elastic.co/u/genesis)\
**Replies:** 0\
**Last updated:** [September 16, 2015, 12:25pm UTC](https://discuss.elastic.co/t/unavailableshardsexception/29404 "2015-09-16T12:25:02Z")

</div>

This exception is preventing the cluster to be green, it is red. Any idea how to fix it? 2015-09-16 12:19:35,513\]\[ERROR\]\[marvel.agent.exporter \] \[ElasticSearch-08\] create failure (index:\[.marvel-2015.09.16\] type: \[clu…

---

## [Filebeat with opensearch](https://discuss.elastic.co/t/filebeat-with-opensearch/295915)

<div class="topic-metadata">

**Author:** [@mohammed.sabil](https://discuss.elastic.co/u/mohammed.sabil)\
**Replies:** 2\
**Last updated:** [February 1, 2022, 9:00am UTC](https://discuss.elastic.co/t/filebeat-with-opensearch/295915 "2022-02-01T09:00:11Z")

</div>

Hello Team, I would like to know if I can use filebeat (elastic) docker image with Opensearch as part of the OpenSource licence (Apache 2.0). Is there any restriction as far as the licensing concern? Regards.

---

## [How to reindex, to remove unwanted nested structure](https://discuss.elastic.co/t/how-to-reindex-to-remove-unwanted-nested-structure/193617)

<div class="topic-metadata">

**Author:** [@weed101](https://discuss.elastic.co/u/weed101)\
**Replies:** 2\
**Last updated:** [August 6, 2019, 2:16am UTC](https://discuss.elastic.co/t/how-to-reindex-to-remove-unwanted-nested-structure/193617 "2019-08-06T02:16:38Z")

</div>

Hi, I'm trying to reindex an index of nested records into an index that is more flat and cleaner. Is there a way to handle painless scripts with using the root field name as my column and the nested value as its value? …

---

## [Cleanup Kibana](https://discuss.elastic.co/t/cleanup-kibana/108076)

<div class="topic-metadata">

**Author:** [@Shreyas\_Gade](https://discuss.elastic.co/u/Shreyas_Gade)\
**Replies:** 2\
**Last updated:** [November 17, 2017, 7:41am UTC](https://discuss.elastic.co/t/cleanup-kibana/108076 "2017-11-17T07:41:28Z")

</div>

I have processed some of the log files and tested ELK with command line inputs. There is a lot of mess in Kibana with these testing data. Can anyone please let me know how do I cleanup Kibana ? I need to clear everythi…

---

## [Get substring of a field and use it in index name](https://discuss.elastic.co/t/get-substring-of-a-field-and-use-it-in-index-name/77999)

<div class="topic-metadata">

**Author:** [@ldms020255](https://discuss.elastic.co/u/ldms020255)\
**Replies:** 2\
**Last updated:** [March 10, 2017, 12:29am UTC](https://discuss.elastic.co/t/get-substring-of-a-field-and-use-it-in-index-name/77999 "2017-03-10T00:29:33Z")

</div>

Here's my config input { redis { data\_type =\> "list" key =\> "filebeat" host =\> "127.0.0.1" port =\> 6379 threads =\> 5 type =\> "log" } } filter { grok { …

---

## [Kibana5のterm表示で文字数制限はあるのでしょうか？](https://discuss.elastic.co/t/kibana5-term/67293)

<div class="topic-metadata">

**Author:** [@111142](https://discuss.elastic.co/u/111142)\
**Replies:** 2\
**Last updated:** [November 28, 2016, 4:34am UTC](https://discuss.elastic.co/t/kibana5-term/67293 "2016-11-28T04:34:06Z")

</div>

ログを取込み、kibana5のdiscoverからはログの検索が出来るのですが、 visualizeでtermを作成したところ、該当ログが検索されません。 何かしら設定をいじる必要があるのでしょうか？ discoverの表示 visualizeのterm表示 メッセージ部分は700byte程度でした。 他の短いメッセージは正常に表示されます。

---

## [Wrong config?](https://discuss.elastic.co/t/wrong-config/180419)

<div class="topic-metadata">

**Author:** [@Jerry1](https://discuss.elastic.co/u/Jerry1)\
**Replies:** 7\
**Last updated:** [May 10, 2019, 8:50am UTC](https://discuss.elastic.co/t/wrong-config/180419 "2019-05-10T08:50:29Z")

</div>

Hi all, I'm just looking at elasticsearch 7.0.1. And my nodes are not entering the cluster. What is wrong with my config? cluster.name: es-cluster node.name: elasticsearch-1 node.master: true node.data: true path.data…

---

## [Canvas filters - is it possible to filter a visualization](https://discuss.elastic.co/t/canvas-filters-is-it-possible-to-filter-a-visualization/334165)

<div class="topic-metadata">

**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\
**Replies:** 5\
**Last updated:** [June 14, 2023, 6:11pm UTC](https://discuss.elastic.co/t/canvas-filters-is-it-possible-to-filter-a-visualization/334165 "2023-06-14T18:11:15Z")

</div>

Hi there, I'm playing with Canvas and I have particular use case where I need to place a filter on a kibana object to filter the data out by a range from 3 thru 5 (event severity), I don't want to modify the visualizati…

---

## [High HEAP and CPU utilization due to long and inefficient Garbage Collector (GC)](https://discuss.elastic.co/t/high-heap-and-cpu-utilization-due-to-long-and-inefficient-garbage-collector-gc/324669)

<div class="topic-metadata">

**Author:** [@GustavoSantos](https://discuss.elastic.co/u/GustavoSantos)\
**Replies:** 5\
**Last updated:** [February 7, 2023, 1:33pm UTC](https://discuss.elastic.co/t/high-heap-and-cpu-utilization-due-to-long-and-inefficient-garbage-collector-gc/324669 "2023-02-07T13:33:00Z")

</div>

Hi all, We constantly get Circuit Breaker errors and GC overhead logs in clusters with high indexation load. Looking at the Kibana dashboards and analyzing the logs, it is clear that the GC is one of our main bottleneck…

---

## [1. Apm server is not creating index in ElasticSearch](https://discuss.elastic.co/t/1-apm-server-is-not-creating-index-in-elasticsearch/195649)

<div class="topic-metadata">

**Author:** [@vikassharma123](https://discuss.elastic.co/u/vikassharma123)\
**Replies:** 5\
**Last updated:** [August 19, 2019, 1:57pm UTC](https://discuss.elastic.co/t/1-apm-server-is-not-creating-index-in-elasticsearch/195649 "2019-08-19T13:57:51Z")

</div>

Apm server is not creating index in ElasticSearch. Apm server logs getting 503 and 202 responses with error Queue is Full from APM agent. Without ElasticSearch index not get APM in Kibana. command ./apm-server test …

---

## [Envoi de données ElasticSearch](https://discuss.elastic.co/t/envoi-de-donnees-elasticsearch/116065)

<div class="topic-metadata">

**Author:** [@mat.bst](https://discuss.elastic.co/u/mat.bst)\
**Replies:** 5\
**Last updated:** [January 24, 2018, 10:28am UTC](https://discuss.elastic.co/t/envoi-de-donnees-elasticsearch/116065 "2018-01-24T10:28:19Z")

</div>

Bonjour à tous ! j'envoi mes donées dans elasticsearch depuis un programme écrit en java. Ma méthode n'est peut être pas la plus optimisée mais en bref j'envoi une liste de 30 000 documents chaque jours. Chaque requête…

---

## [Mysql data no longer getting into ES](https://discuss.elastic.co/t/mysql-data-no-longer-getting-into-es/38635)

<div class="topic-metadata">

**Author:** [@Guillaume\_Vachon](https://discuss.elastic.co/u/Guillaume_Vachon)\
**Replies:** 5\
**Last updated:** [January 11, 2016, 11:39am UTC](https://discuss.elastic.co/t/mysql-data-no-longer-getting-into-es/38635 "2016-01-11T11:39:34Z")

</div>

Hi all, I have been running packetbeat to collect mysql data since the early beta and it always worked perfectly. I upgraded through every release and now im running 1.0.1. Sending the mysql data stopped working a …

---

## [Get child doument by id](https://discuss.elastic.co/t/get-child-doument-by-id/7719)

<div class="topic-metadata">

**Author:** [@Yuriy\_Bondaruk](https://discuss.elastic.co/u/Yuriy_Bondaruk)\
**Replies:** 5\
**Last updated:** [May 17, 2012, 7:05am UTC](https://discuss.elastic.co/t/get-child-doument-by-id/7719 "2012-05-17T07:05:35Z")

</div>

Hi, I have a problem with getting a child document by it's id. I send GET request 'localhost:9200/test-index/ChildItem/41311aa0' and the response says that item with the specified id doesn't exist. If use \_search q…

---

## [Url.extension not populated](https://discuss.elastic.co/t/url-extension-not-populated/274278)

<div class="topic-metadata">

**Author:** [@peasead](https://discuss.elastic.co/u/peasead)\
**Replies:** 2\
**Last updated:** [May 28, 2021, 2:24pm UTC](https://discuss.elastic.co/t/url-extension-not-populated/274278 "2021-05-28T14:24:35Z")

</div>

I am trying to get Packetbeat to populate the url.extension field. It is in ECS and reported as an exported field for Packetbeat, but I cannot get it to work. In the below example, I would think it should be url.extensi…

---

## [Getting 502 bad gateway error while creating new index](https://discuss.elastic.co/t/getting-502-bad-gateway-error-while-creating-new-index/295183)

<div class="topic-metadata">

**Author:** [@Nikhil\_Sonkar](https://discuss.elastic.co/u/Nikhil_Sonkar)\
**Replies:** 3\
**Last updated:** [January 24, 2022, 8:23am UTC](https://discuss.elastic.co/t/getting-502-bad-gateway-error-while-creating-new-index/295183 "2022-01-24T08:23:54Z")

</div>

502 Bad Gateway 502 Bad Gateway

---

## [Filebeat lotstash output and 'exported fields'](https://discuss.elastic.co/t/filebeat-lotstash-output-and-exported-fields/119796)

<div class="topic-metadata">

**Author:** [@nathharp](https://discuss.elastic.co/u/nathharp)\
**Replies:** 3\
**Last updated:** [February 16, 2018, 3:36pm UTC](https://discuss.elastic.co/t/filebeat-lotstash-output-and-exported-fields/119796 "2018-02-16T15:36:11Z")

</div>

Hi all, I am planning our migration from our ageing rsyslog(RELP) \> logtash \> elasticsearch with a new set of infrastructure. I have been experimenting with filebeat \> logstash \> elasticsearch but I'm not getting the m…

---

## [Es 2.1.0 keep throwing exception](https://discuss.elastic.co/t/es-2-1-0-keep-throwing-exception/37551)

<div class="topic-metadata">

**Author:** [@makeyang](https://discuss.elastic.co/u/makeyang)\
**Replies:** 3\
**Last updated:** [December 18, 2015, 11:25pm UTC](https://discuss.elastic.co/t/es-2-1-0-keep-throwing-exception/37551 "2015-12-18T23:25:46Z")

</div>

\[DEBUG\]\[action.admin.cluster.node.info\] \[node1\] failed to execute on node \[yQYHZ3hxTWOwrQPq8w4rrQ\] RemoteTransportException\[\[node2\]\[node2:9305\]\[cluster:monitor/nodes/info\[n\]\]\]; nested: NotSerializableExceptionWrapper; Ca…

---

## [Added a data node, replica shards from .scripts index unassigned, cluster won't rebalance](https://discuss.elastic.co/t/added-a-data-node-replica-shards-from-scripts-index-unassigned-cluster-wont-rebalance/73892)

<div class="topic-metadata">

**Author:** [@bploetz](https://discuss.elastic.co/u/bploetz)\
**Replies:** 2\
**Last updated:** [February 3, 2017, 8:05pm UTC](https://discuss.elastic.co/t/added-a-data-node-replica-shards-from-scripts-index-unassigned-cluster-wont-rebalance/73892 "2017-02-03T20:05:41Z")

</div>

Hi, I added a new data node to our cluster (all nodes running ES 2.4.1), and after the node has successfully joined the cluster, the cluster state is yellow because 5 replica shards from the .scripts index are unassigne…

---

## [Cannot restore index \[.ds-.logs-deprecation.elasticsearch-default](https://discuss.elastic.co/t/cannot-restore-index-ds-logs-deprecation-elasticsearch-default/316856)

<div class="topic-metadata">

**Author:** [@hjsroldan](https://discuss.elastic.co/u/hjsroldan)\
**Replies:** 4\
**Last updated:** [October 19, 2022, 5:21am UTC](https://discuss.elastic.co/t/cannot-restore-index-ds-logs-deprecation-elasticsearch-default/316856 "2022-10-19T05:21:33Z")

</div>

Hi, Does someone know if .ds-.logs-deprecation.elasticsearch-default index can be deleted or can it be disabled on the configuration? I'm encountering the error below while restoring my cluster. {"error":{"root\_cause":…

---

## [Fleet Server - Error - failed version compatibility check with elasticsearch: x509: certificate signed by unknown authority](https://discuss.elastic.co/t/fleet-server-error-failed-version-compatibility-check-with-elasticsearch-x509-certificate-signed-by-unknown-authority/365646)

<div class="topic-metadata">

**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\
**Replies:** 1\
**Last updated:** [August 28, 2024, 2:25pm UTC](https://discuss.elastic.co/t/fleet-server-error-failed-version-compatibility-check-with-elasticsearch-x509-certificate-signed-by-unknown-authority/365646 "2024-08-28T14:25:39Z")

</div>

Hello everyone, Once again I am asking for your valuable help. I have ELK installed for testing purposes before moving configurations to production, I am currently working with logstash, elasticsearch and kibana on the…

---

## [Payload content length greater than maximum allowed: 1048576](https://discuss.elastic.co/t/payload-content-length-greater-than-maximum-allowed-1048576/276303)

<div class="topic-metadata">

**Author:** [@Akanksha\_Pandey](https://discuss.elastic.co/u/Akanksha_Pandey)\
**Replies:** 1\
**Last updated:** [June 18, 2021, 2:46am UTC](https://discuss.elastic.co/t/payload-content-length-greater-than-maximum-allowed-1048576/276303 "2021-06-18T02:46:52Z")

</div>

Hi, I am working on log data(present on client machine) to monitor on Kibana server(present on differnt machine). I started with setup and installation of Filebeat on the client machine and enabled logstash elasticserac…

---

## [No permission to manage](https://discuss.elastic.co/t/no-permission-to-manage/111949)

<div class="topic-metadata">

**Author:** [@Nima\_van\_Persien](https://discuss.elastic.co/u/Nima_van_Persien)\
**Replies:** 1\
**Last updated:** [December 22, 2017, 10:00am UTC](https://discuss.elastic.co/t/no-permission-to-manage/111949 "2017-12-22T10:00:41Z")

</div>

Hi community, after I installed X-Pack on my ELK-Stack, I see this message when I click in Management Tab. "You do not have permission to manage .... Please contact your administrator." can somebody help me to solve t…

---

## [Subtract term X from Y on the same log?](https://discuss.elastic.co/t/subtract-term-x-from-y-on-the-same-log/100782)

<div class="topic-metadata">

**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\
**Replies:** 1\
**Last updated:** [September 17, 2017, 8:44am UTC](https://discuss.elastic.co/t/subtract-term-x-from-y-on-the-same-log/100782 "2017-09-17T08:44:34Z")

</div>

How can I Subtract term X from Y on the same log? I saw this, but it doesn't do any arithmetical use. (This uses mutate). I also tried through a scripted field in Kibana but the fields are not saved in ES and I need to…

---

## [Unable to connect to Kibana](https://discuss.elastic.co/t/unable-to-connect-to-kibana/53766)

<div class="topic-metadata">

**Author:** [@brandonmcgrath1](https://discuss.elastic.co/u/brandonmcgrath1)\
**Replies:** 1\
**Last updated:** [June 24, 2016, 6:00pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-kibana/53766 "2016-06-24T18:00:16Z")

</div>

Hey, Im setting up ELK on a Ubuntu after successfully getting it working on a windows server. However, When I try to browse to my Kibana on port 5601 I just get Unable to Connect. However, I can connect to Elasticsearch …

---

## [Exporting and importing Elastic data](https://discuss.elastic.co/t/exporting-and-importing-elastic-data/224470)

<div class="topic-metadata">

**Author:** [@Daniel\_Lupisella](https://discuss.elastic.co/u/Daniel_Lupisella)\
**Replies:** 2\
**Last updated:** [April 5, 2020, 6:25am UTC](https://discuss.elastic.co/t/exporting-and-importing-elastic-data/224470 "2020-04-05T06:25:24Z")

</div>

Hello all, I recently was using Elastic to do some testing. I exported the data from my running instance of Elastic using the Save, Share, Generate CSV method. I started up a new instance to continue working at home (…

---

## [Can't install marvel on Windows 10](https://discuss.elastic.co/t/cant-install-marvel-on-windows-10/110013)

<div class="topic-metadata">

**Author:** [@johngerman1984](https://discuss.elastic.co/u/johngerman1984)\
**Replies:** 2\
**Last updated:** [December 2, 2017, 9:11pm UTC](https://discuss.elastic.co/t/cant-install-marvel-on-windows-10/110013 "2017-12-02T21:11:26Z")

</div>

Installed Elasticsearch verson 6 this morning, that part went well. The next step in the tutorial I am following says to install Marvel, that's not going so well. On the official "Getting Started with Marvel" it says t…

---

## [Query Across Indices and Apply Different Function Scores (get parsing exception unknown field error)](https://discuss.elastic.co/t/query-across-indices-and-apply-different-function-scores-get-parsing-exception-unknown-field-error/122982)

<div class="topic-metadata">

**Author:** [@cpritcha](https://discuss.elastic.co/u/cpritcha)\
**Replies:** 0\
**Last updated:** [March 7, 2018, 11:27pm UTC](https://discuss.elastic.co/t/query-across-indices-and-apply-different-function-scores-get-parsing-exception-unknown-field-error/122982 "2018-03-07T23:27:58Z")

</div>

I would like to implement a search across indexes that applies different function scoring for each index so that more recent jobs and events rank higher in search results. Suppose the website has jobs, events given by m…

---

## [Multiline isn't working](https://discuss.elastic.co/t/multiline-isnt-working/48172)

<div class="topic-metadata">

**Author:** [@jervdv](https://discuss.elastic.co/u/jervdv)\
**Replies:** 5\
**Last updated:** [May 3, 2016, 11:53am UTC](https://discuss.elastic.co/t/multiline-isnt-working/48172 "2016-05-03T11:53:08Z")

</div>

I honestly have no idea why my multiline isn't working and here is a sample of my multiline config multiline: pattern: ^INFO \\| jvm 1 \\| main \\| \[0-9\]{4}\\/\[0-9\]{2}\\/\[0-9\]{2} \[0-9\]{2}:\[0-9\]{2}:\[0-9\]{2}.\[0-9\]…

---

## [Logstash - filter and drop lines that record\_date is older than 30mins of current timestamp?](https://discuss.elastic.co/t/logstash-filter-and-drop-lines-that-record-date-is-older-than-30mins-of-current-timestamp/51975)

<div class="topic-metadata">

**Author:** [@mt.michael](https://discuss.elastic.co/u/mt.michael)\
**Replies:** 3\
**Last updated:** [June 10, 2016, 5:33am UTC](https://discuss.elastic.co/t/logstash-filter-and-drop-lines-that-record-date-is-older-than-30mins-of-current-timestamp/51975 "2016-06-10T05:33:57Z")

</div>

Hi. I have issue where I'd duplicate data send to the target through filebeat \> logstash \> target. I couldn't figure what was the issue on the server as it was terminated in aws autoscale so I'm thinking of having a fi…

---

## [Marvel does not work after upgrading to Elastic 2.3.2](https://discuss.elastic.co/t/marvel-does-not-work-after-upgrading-to-elastic-2-3-2/49674)

<div class="topic-metadata">

**Author:** [@edalford11](https://discuss.elastic.co/u/edalford11)\
**Replies:** 3\
**Last updated:** [May 10, 2016, 5:49pm UTC](https://discuss.elastic.co/t/marvel-does-not-work-after-upgrading-to-elastic-2-3-2/49674 "2016-05-10T17:49:58Z")

</div>

I've just upgraded our elastic cluster from 2.1 to 2.3.2. Everything is working great except now marvel is constantly saying "No marvel data found". We have 4 elastic nodes in our cluster, all with marvel.agent.exporte…

---

## [Is it possible to use same data storage for nodes?](https://discuss.elastic.co/t/is-it-possible-to-use-same-data-storage-for-nodes/157848)

<div class="topic-metadata">

**Author:** [@mutluozel](https://discuss.elastic.co/u/mutluozel)\
**Replies:** 1\
**Last updated:** [November 22, 2018, 11:10am UTC](https://discuss.elastic.co/t/is-it-possible-to-use-same-data-storage-for-nodes/157848 "2018-11-22T11:10:02Z")

</div>

Hello All, I am newbie on elasticsearch cluster and i don't understood the storage mechanism, could you please help me with my questions; My Question-1 For MASTER NODE: I created master nodes with replica value 3 on t…

---

## [Deleting logstash logs older than 4 days](https://discuss.elastic.co/t/deleting-logstash-logs-older-than-4-days/174341)

<div class="topic-metadata">

**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\
**Replies:** 6\
**Last updated:** [April 5, 2019, 2:18pm UTC](https://discuss.elastic.co/t/deleting-logstash-logs-older-than-4-days/174341 "2019-04-05T14:18:48Z")

</div>

My log4j.properties like below. How can i edit it to delete logs older than 4 days status = error name = LogstashPropertiesConfig appender.console.type = Console appender.console.name = plain\_console appender.console.l…

---

## [Filebeat\[5.6.3\] - tail\_files not working](https://discuss.elastic.co/t/filebeat-5-6-3-tail-files-not-working/106642)

<div class="topic-metadata">

**Author:** [@olololll](https://discuss.elastic.co/u/olololll)\
**Replies:** 6\
**Last updated:** [November 7, 2017, 10:01am UTC](https://discuss.elastic.co/t/filebeat-5-6-3-tail-files-not-working/106642 "2017-11-07T10:01:27Z")

</div>

Problem: I want filebeat only read the newly added line in log file and send it to logstash. For example, there are 2lines in the log originally. Line1: A Line2: B The log file will keep updating, says a new line3, …

---

## [Not prompting for password?!](https://discuss.elastic.co/t/not-prompting-for-password/36105)

<div class="topic-metadata">

**Author:** [@jjdepaul](https://discuss.elastic.co/u/jjdepaul)\
**Replies:** 4\
**Last updated:** [December 2, 2015, 5:08pm UTC](https://discuss.elastic.co/t/not-prompting-for-password/36105 "2015-12-02T17:08:05Z")

</div>

I have ES 2.0 and latest Shield that I downloaded today (12/01/15) - not sure how to tell which version I have. My curl tool version is as follows: curl 7.40.0 (x86\_64-pc-win32) libcurl/7.40.0 OpenSSL/1.0.1g zlib/1.2.8…

---

## [Setup problem: No handler for action exception on 9300](https://discuss.elastic.co/t/setup-problem-no-handler-for-action-exception-on-9300/8186)

<div class="topic-metadata">

**Author:** [@Yuhan](https://discuss.elastic.co/u/Yuhan)\
**Replies:** 4\
**Last updated:** [June 21, 2012, 8:07pm UTC](https://discuss.elastic.co/t/setup-problem-no-handler-for-action-exception-on-9300/8186 "2012-06-21T20:07:15Z")

</div>

Hi all, I just followed the guide to create elasticsearch on ubuntu. It works fine when I access it through http://localhost:9200. But when I try to connect to it through the java client, at port 9300, it throws…

---

## [Deleting Index kibana](https://discuss.elastic.co/t/deleting-index-kibana/293773)

<div class="topic-metadata">

**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\
**Replies:** 2\
**Last updated:** [January 7, 2022, 8:09pm UTC](https://discuss.elastic.co/t/deleting-index-kibana/293773 "2022-01-07T20:09:46Z")

</div>

Hello there, Following log entry is appearing in kibana logs. I understand this is because of previous kibana versions. can I delete these indexes? Will deleting this affect my cluster? log \[15:17:55.850\] \[error\]\[eve…

---

## [Kibana doesn't recognize keyword fields](https://discuss.elastic.co/t/kibana-doesnt-recognize-keyword-fields/194586)

<div class="topic-metadata">

**Author:** [@JulGor](https://discuss.elastic.co/u/JulGor)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 8:55am UTC](https://discuss.elastic.co/t/kibana-doesnt-recognize-keyword-fields/194586 "2019-08-12T08:55:38Z")

</div>

Hi, I realized that Kibana is not recognizing some fields that are mapped as "text" with a second field "keyword". This is the mapping of my index: And this is the select menu when I'm trying to use them in a "Term"…

---

## [How to Disable X-pack security 6.1.1 in Elasticsearch 6.1.1?](https://discuss.elastic.co/t/how-to-disable-x-pack-security-6-1-1-in-elasticsearch-6-1-1/114105)

<div class="topic-metadata">

**Author:** [@Rym\_Guerbi\_Michaut](https://discuss.elastic.co/u/Rym_Guerbi_Michaut)\
**Replies:** 2\
**Last updated:** [January 5, 2018, 8:56am UTC](https://discuss.elastic.co/t/how-to-disable-x-pack-security-6-1-1-in-elasticsearch-6-1-1/114105 "2018-01-05T08:56:06Z")

</div>

Hi there, I've just installed the new version 6.1.1 of Elsticsearch, Kibana and Logstash. At the same time, I installed x-pack for the three of them (thinking it might be interesting to have it in Kibana for the graphs…

---

## [Kibana showing geo-ip location as number not as geopoint](https://discuss.elastic.co/t/kibana-showing-geo-ip-location-as-number-not-as-geopoint/75600)

<div class="topic-metadata">

**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\
**Replies:** 2\
**Last updated:** [February 19, 2017, 8:14am UTC](https://discuss.elastic.co/t/kibana-showing-geo-ip-location-as-number-not-as-geopoint/75600 "2017-02-19T08:14:16Z")

</div>

my template is as below { "template" : "iisnew", "settings": { "index.refresh\_interval": "5s" }, "mappings" : { "iisnew" : { "properties": { "@timestamp":{"type":"date","format":"dateOptionalTime"}, "@version":…

---

## [How to upgrade node.js (from v10.23.1 to v16.13.2) in Kibana 7.10.2](https://discuss.elastic.co/t/how-to-upgrade-node-js-from-v10-23-1-to-v16-13-2-in-kibana-7-10-2/307409)

<div class="topic-metadata">

**Author:** [@mridul.tamuli](https://discuss.elastic.co/u/mridul.tamuli)\
**Replies:** 2\
**Last updated:** [August 17, 2022, 9:02am UTC](https://discuss.elastic.co/t/how-to-upgrade-node-js-from-v10-23-1-to-v16-13-2-in-kibana-7-10-2/307409 "2022-08-17T09:02:19Z")

</div>

Hi, We are using Kibana 7.10.2 with Elasticsearch of the same version. Currently we have a urgent need to upgrade the node.js version of Kibana to 16.13.2. We tried but unable to get the desired result. Is it possible t…

---

## [Hyper-V Monitoring using ELK Stack](https://discuss.elastic.co/t/hyper-v-monitoring-using-elk-stack/118636)

<div class="topic-metadata">

**Author:** [@PauliniMrtns](https://discuss.elastic.co/u/PauliniMrtns)\
**Replies:** 1\
**Last updated:** [February 6, 2018, 2:18pm UTC](https://discuss.elastic.co/t/hyper-v-monitoring-using-elk-stack/118636 "2018-02-06T14:18:11Z")

</div>

Hello all! I'm currently deploying an ELK cluster for monitoring several virtualization platforms. I'm currently using vSphere module for monitoring VMWare vCenter resources using Metricbeats, but and I also have some …

---

## [SMTP logs from Windows Server can't be parsed](https://discuss.elastic.co/t/smtp-logs-from-windows-server-cant-be-parsed/229916)

<div class="topic-metadata">

**Author:** [@Vadym\_Mykolaichuk](https://discuss.elastic.co/u/Vadym_Mykolaichuk)\
**Replies:** 3\
**Last updated:** [April 27, 2020, 3:39pm UTC](https://discuss.elastic.co/t/smtp-logs-from-windows-server-cant-be-parsed/229916 "2020-04-27T15:39:20Z")

</div>

Hi! I'm using filebeat to send IIS log files from Windows Server machine. It parses logs from IIS (web logs) just fine, but it can't parse SMTP logs which have the same format. On Kibana I see this error: Provided Gro…

---

## [How to Create Fields from Data in JSON Object](https://discuss.elastic.co/t/how-to-create-fields-from-data-in-json-object/150066)

<div class="topic-metadata">

**Author:** [@capsnumber1](https://discuss.elastic.co/u/capsnumber1)\
**Replies:** 3\
**Last updated:** [September 26, 2018, 9:05pm UTC](https://discuss.elastic.co/t/how-to-create-fields-from-data-in-json-object/150066 "2018-09-26T21:05:06Z")

</div>

I have JSON that looks like this: "httpMessage":{ "method":"GET", "query":"v=1.020.107", "start":"1537967152", "path":"/themes/main/js/jscript.js", "protocol":"HTTP/1.1", "requestHeaders":"Host: www.example.com Re…

---

## [Kibana single bar spans the entire x-axis](https://discuss.elastic.co/t/kibana-single-bar-spans-the-entire-x-axis/106148)

<div class="topic-metadata">

**Author:** [@mad-max](https://discuss.elastic.co/u/mad-max)\
**Replies:** 8\
**Last updated:** [November 6, 2017, 2:31pm UTC](https://discuss.elastic.co/t/kibana-single-bar-spans-the-entire-x-axis/106148 "2017-11-06T14:31:47Z")

</div>

Hi at All, I would like to know if is it possible to select a bar of a barchartA; applying relative filters, and the size of the chart filtered remains of its original size, and NOT the bar spans the entire x-axis. Fo…

---

## [Received an event that has a different character encoding than you configured](https://discuss.elastic.co/t/received-an-event-that-has-a-different-character-encoding-than-you-configured/70251)

<div class="topic-metadata">

**Author:** [@sid.sidhant44](https://discuss.elastic.co/u/sid.sidhant44)\
**Replies:** 0\
**Last updated:** [December 30, 2016, 5:05am UTC](https://discuss.elastic.co/t/received-an-event-that-has-a-different-character-encoding-than-you-configured/70251 "2016-12-30T05:05:42Z")

</div>

Received an event that has a different character encoding than you configured. {text=\>"log message" :expected\_charset=\>"UTF-8", :level=\>:warn } I have tried setting JAVA\_TOOL\_OPTIONS="-Dfile.encoding=UTF-8". // and "IS…

---

## [Blank message field](https://discuss.elastic.co/t/blank-message-field/244441)

<div class="topic-metadata">

**Author:** [@matheus.santoro](https://discuss.elastic.co/u/matheus.santoro)\
**Replies:** 5\
**Last updated:** [August 10, 2020, 9:17pm UTC](https://discuss.elastic.co/t/blank-message-field/244441 "2020-08-10T21:17:23Z")

</div>

Trying to create a simple, non-filtered pipeline, but Kibana shows the message field as blank Pipeline conf is input { tcp { port =\> 9600 codec =\> json mode =\> server } } output { elasticsearch { …

---

## [Create index from the the grok pattern output](https://discuss.elastic.co/t/create-index-from-the-the-grok-pattern-output/167119)

<div class="topic-metadata">

**Author:** [@kolli\_dilip](https://discuss.elastic.co/u/kolli_dilip)\
**Replies:** 5\
**Last updated:** [February 7, 2019, 1:43pm UTC](https://discuss.elastic.co/t/create-index-from-the-the-grok-pattern-output/167119 "2019-02-07T13:43:04Z")

</div>

Hi I have a requirement of creating the index based on the filed in the message for example my grok is as below (?:%{WORD:method}|-)(?:%{NOTSPACE:Appname}|-) so in my message i have a set of Appname's, so i need to i…

[Previous page](https://discuss.elastic.co/top.md?page=882&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=884&per_page=50&period=all)
