# Top **URL:** https://discuss.elastic.co/top.md?page=905&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 906 --- ## [Can't visualize data in Kibana](https://discuss.elastic.co/t/cant-visualize-data-in-kibana/56525)
**Author:** [@hamdi-charef](https://discuss.elastic.co/u/hamdi-charef)\ **Replies:** 4\ **Last updated:** [July 29, 2016, 7:57pm UTC](https://discuss.elastic.co/t/cant-visualize-data-in-kibana/56525 "2016-07-29T19:57:57Z")
Hello folks, i have indexed apache logs using logstash and store it in Elasticsearch, now i want to visualize this data using Kibana, i can discover the data as shown in the first picture but when i want to visualize t… --- ## [Configure LDAP Authentication](https://discuss.elastic.co/t/configure-ldap-authentication/350460)
**Author:** [@kadmin](https://discuss.elastic.co/u/kadmin)\ **Replies:** 3\ **Last updated:** [January 5, 2024, 3:34pm UTC](https://discuss.elastic.co/t/configure-ldap-authentication/350460 "2024-01-05T15:34:53Z")
Hello I want to configure LDAP authentication for my elastic cluster. On a test cluster I can check the configs before going to production. For this I use docker with this git repo. elasticsearch.yml cluster.name: do… --- ## [Failed to set password for user \[apm\_system\] with elastic password](https://discuss.elastic.co/t/failed-to-set-password-for-user-apm-system-with-elastic-password/256005)
**Author:** [@xziten](https://discuss.elastic.co/u/xziten)\ **Replies:** 3\ **Last updated:** [November 20, 2020, 5:12am UTC](https://discuss.elastic.co/t/failed-to-set-password-for-user-apm-system-with-elastic-password/256005 "2020-11-20T05:12:24Z")
Hi, I'm trying to setup an elasticsearch cluster. 3 nodes : 1 master, 1 master / data\_hot, 1 data\_warm Elastic Version : 7.10 System : RHEL 8.3 Step by step : Installing Configuring nodes and test if everything… --- ## [Logstash 6.5.2 does not start with openjdk11](https://discuss.elastic.co/t/logstash-6-5-2-does-not-start-with-openjdk11/160334)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 2\ **Last updated:** [December 18, 2018, 12:57pm UTC](https://discuss.elastic.co/t/logstash-6-5-2-does-not-start-with-openjdk11/160334 "2018-12-18T12:57:06Z")
Hello, Since it was announced that ELK stack has support of Java 11 since 6.5.0 release I thought that I could start it on openjdk11. When starting I can see in the logs the following error: Dec 10 17:18:28 mgt-wazuh-0… --- ## [Grok pattern performance](https://discuss.elastic.co/t/grok-pattern-performance/75047)
**Author:** [@german23](https://discuss.elastic.co/u/german23)\ **Replies:** 2\ **Last updated:** [February 14, 2017, 3:09pm UTC](https://discuss.elastic.co/t/grok-pattern-performance/75047 "2017-02-14T15:09:38Z")
Hey folks, there was a nice article on the elastic homepage a while ago about the performance of grok filters, so i went on and set up this script to mesure throughput for the filter. In my understand using %{DATA:sth}… --- ## [Removing the “$” sign from event\_data.TargetUserName](https://discuss.elastic.co/t/removing-the-sign-from-event-data-targetusername/285742)
**Author:** [@schroray](https://discuss.elastic.co/u/schroray)\ **Replies:** 0\ **Last updated:** [October 2, 2021, 4:18pm UTC](https://discuss.elastic.co/t/removing-the-sign-from-event-data-targetusername/285742 "2021-10-02T16:18:14Z")
I found an Elastic blog on a possible dashboard for Winlogbeat logs: Monitoring Windows Logons with Winlogbeat | Elastic Blog I was trying to remove the dollar sign "$" from usernames in the field winlog.event\_data.Targ… --- ## [Completion Suggester with the Slop parameter](https://discuss.elastic.co/t/completion-suggester-with-the-slop-parameter/119542)
**Author:** [@tallosan](https://discuss.elastic.co/u/tallosan)\ **Replies:** 0\ **Last updated:** [February 12, 2018, 7:38pm UTC](https://discuss.elastic.co/t/completion-suggester-with-the-slop-parameter/119542 "2018-02-12T19:38:06Z")
How can I use the slop parameter, or achieve the same functionality, with the Completion Suggester? An example use for this is if a User is typing the query "Quick fox", and I have the document "Quick Brown Fox", I want… --- ## [How to update by inline script using logstash ES output](https://discuss.elastic.co/t/how-to-update-by-inline-script-using-logstash-es-output/119176)
**Author:** [@Zt\_Zeng](https://discuss.elastic.co/u/Zt_Zeng)\ **Replies:** 0\ **Last updated:** [February 9, 2018, 6:51am UTC](https://discuss.elastic.co/t/how-to-update-by-inline-script-using-logstash-es-output/119176 "2018-02-09T06:51:23Z")
I use the following config to update document by id with inlined script, but it is not working. Any one knows why? elasticsearch { index =\> "announcement%{\[@metadata\]\[suffix\]}" document\_type =\> "announcement" docu… --- ## [Benchmark Elasticsearch vs Influxdb](https://discuss.elastic.co/t/benchmark-elasticsearch-vs-influxdb/84705)
**Author:** [@imaad](https://discuss.elastic.co/u/imaad)\ **Replies:** 0\ **Last updated:** [May 5, 2017, 11:30am UTC](https://discuss.elastic.co/t/benchmark-elasticsearch-vs-influxdb/84705 "2017-05-05T11:30:00Z")
Hello, I defined a new mapping to use Elasticsearch (v 5.3.2) as a TSDB. I'm new in Benchmark and I want to benchmark query performance, write performance and disk storage for Elasticsearch so as to compare with Influx… --- ## [High CPU Usage across entire cluster](https://discuss.elastic.co/t/high-cpu-usage-across-entire-cluster/299508)
**Author:** [@Kevin\_Comer](https://discuss.elastic.co/u/Kevin_Comer)\ **Replies:** 8\ **Last updated:** [March 14, 2022, 4:14pm UTC](https://discuss.elastic.co/t/high-cpu-usage-across-entire-cluster/299508 "2022-03-14T16:14:33Z")
We have a version 5.6 100 plus node cluster which has been suffering from high cpu usage for a sometime now. The hot threads show several different threads which are usually taking 100% cpu. 3 masters 6i.xlarge 38 node… --- ## [Does update\_by\_query always reindex entire document](https://discuss.elastic.co/t/does-update-by-query-always-reindex-entire-document/166363)
**Author:** [@ahummel25](https://discuss.elastic.co/u/ahummel25)\ **Replies:** 8\ **Last updated:** [February 7, 2019, 2:46pm UTC](https://discuss.elastic.co/t/does-update-by-query-always-reindex-entire-document/166363 "2019-02-07T14:46:58Z")
I'm trying to figure out if the \_update\_by\_query elasticsearch endpoint reindexes entire documents. I ran a batch process that generated and ran thousands of update\_by\_query statements. My CPU escalated after some time s… --- ## [Should A Full DLQ Queue Effect Logstash Performance Signifigantly?](https://discuss.elastic.co/t/should-a-full-dlq-queue-effect-logstash-performance-signifigantly/271036)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 7\ **Last updated:** [April 25, 2021, 3:49am UTC](https://discuss.elastic.co/t/should-a-full-dlq-queue-effect-logstash-performance-signifigantly/271036 "2021-04-25T03:49:08Z")
I'm sending logs from Filebeat -\> Logstash -\> ES with 7.10.2. I have enabled DLQ and set it to 50 MB's. Once something is in the DLQ I do not bother reprocessing it and I'm fine with the data loss. Once I start seeing… --- ## [Display data results in Markdown visualization](https://discuss.elastic.co/t/display-data-results-in-markdown-visualization/267986)
**Author:** [@elpiloto100](https://discuss.elastic.co/u/elpiloto100)\ **Replies:** 1\ **Last updated:** [March 22, 2021, 8:31pm UTC](https://discuss.elastic.co/t/display-data-results-in-markdown-visualization/267986 "2021-03-22T20:31:27Z")
Is it possible to display results from a data query in a Markdown visualization to be used in a Kibana dashboard? For example, I want a Markdown to display Temperature: \[temp\] C Pressure: \[pres\] kPa Humidity: \[humid\] %R… --- ## [Fuzzy search question](https://discuss.elastic.co/t/fuzzy-search-question/228675)
**Author:** [@giorgio](https://discuss.elastic.co/u/giorgio)\ **Replies:** 7\ **Last updated:** [April 25, 2020, 8:31am UTC](https://discuss.elastic.co/t/fuzzy-search-question/228675 "2020-04-25T08:31:47Z")
Hello I am doing reverse image search using elasticsearch. I have hashes stored in index and now I am trying to find similar hashes(to compensate compression and what not) using Query String fuzziness. my code for searc… --- ## [Error with ruby filter plugin](https://discuss.elastic.co/t/error-with-ruby-filter-plugin/158081)
**Author:** [@ou\_snaaksie](https://discuss.elastic.co/u/ou_snaaksie)\ **Replies:** 1\ **Last updated:** [November 26, 2018, 11:08am UTC](https://discuss.elastic.co/t/error-with-ruby-filter-plugin/158081 "2018-11-26T11:08:58Z")
I am receiving errors I can't solve, since my config seems correct to me. It is complaining about the use of the ruby filter plugin, but the ruby code is valid. input { beats { port =\> 5443 } } filter { ruby … --- ## [Exception in thread "main" java.lang.IllegalStateException: Unsupported transport.type \[netty4\]](https://discuss.elastic.co/t/exception-in-thread-main-java-lang-illegalstateexception-unsupported-transport-type-netty4/119996)
**Author:** [@sathish\_AH\_Kumar](https://discuss.elastic.co/u/sathish_AH_Kumar)\ **Replies:** 1\ **Last updated:** [February 15, 2018, 4:21pm UTC](https://discuss.elastic.co/t/exception-in-thread-main-java-lang-illegalstateexception-unsupported-transport-type-netty4/119996 "2018-02-15T16:21:58Z")
Am trying to connect our ES from Java App using TransportClient. ES Version 6.1.0 POM: \ \org.elasticsearch\ \elasticsearch\ \6.1.0\ \ … --- ## [Protwords support?](https://discuss.elastic.co/t/protwords-support/7480)
**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\ **Replies:** 7\ **Last updated:** [June 13, 2012, 6:14pm UTC](https://discuss.elastic.co/t/protwords-support/7480 "2012-06-13T18:14:51Z")
Is there any support for Solr's protwords (stemming overrides)? If not, should be doable to modify the existing stemmer filter to provide a list of words. Never looked up the Solr's implementation. -- Ivan --- ## [Scripted fields to convert seconds to hours](https://discuss.elastic.co/t/scripted-fields-to-convert-seconds-to-hours/261790)
**Author:** [@ykara84](https://discuss.elastic.co/u/ykara84)\ **Replies:** 4\ **Last updated:** [January 21, 2021, 2:04pm UTC](https://discuss.elastic.co/t/scripted-fields-to-convert-seconds-to-hours/261790 "2021-01-21T14:04:20Z")
Cant figure it out, need an additional field that will convert seconds into hours I have a number field called Session-Time which i need converting into hours and displayed in another field. I have tried to create a scr… --- ## [Continuous transform, updated documents?](https://discuss.elastic.co/t/continuous-transform-updated-documents/228396)
**Author:** [@Cain310](https://discuss.elastic.co/u/Cain310)\ **Replies:** 4\ **Last updated:** [April 28, 2020, 3:13pm UTC](https://discuss.elastic.co/t/continuous-transform-updated-documents/228396 "2020-04-28T15:13:47Z")
Hi does transfom update documents? I have a continuous transform running on and index which continuously has new documents injested and existing documents updated. Each Document has a field which is called "doc.lastUpda… --- ## [Kibana “visualization control” not working for String Field](https://discuss.elastic.co/t/kibana-visualization-control-not-working-for-string-field/176612)
**Author:** [@igour](https://discuss.elastic.co/u/igour)\ **Replies:** 4\ **Last updated:** [April 20, 2019, 6:12am UTC](https://discuss.elastic.co/t/kibana-visualization-control-not-working-for-string-field/176612 "2019-04-20T06:12:18Z")
I have one field named(ID), which in index pattern set as String(even i check with default value type as well). But when I used "Options list" control visualization for the same field to do the filter, i am not getting … --- ## [Index-\>table, document-\>row?](https://discuss.elastic.co/t/index-table-document-row/166890)
**Author:** [@li\_jessen2016](https://discuss.elastic.co/u/li_jessen2016)\ **Replies:** 4\ **Last updated:** [February 6, 2019, 2:21pm UTC](https://discuss.elastic.co/t/index-table-document-row/166890 "2019-02-06T14:21:19Z")
I wanna make some rough comparison between Elasticsearch basic concepts and that of legacy DB. Can we say that index is similar to table, document is similar to row, and field is similar to column? --- ## [Client Timeout error in elastic heartbeat for http POST](https://discuss.elastic.co/t/client-timeout-error-in-elastic-heartbeat-for-http-post/273002)
**Author:** [@Bikram\_Dhoju](https://discuss.elastic.co/u/Bikram_Dhoju)\ **Replies:** 3\ **Last updated:** [May 24, 2021, 7:33pm UTC](https://discuss.elastic.co/t/client-timeout-error-in-elastic-heartbeat-for-http-post/273002 "2021-05-24T19:33:20Z")
I have an error while trying to apply the heartbeat for the post request. My heartbeat config is: heartbeat.monitors: - type: http ipv4: true mode: any timeout: 30s name: test schedule:… --- ## [Performance Issues during data-ingestion](https://discuss.elastic.co/t/performance-issues-during-data-ingestion/258092)
**Author:** [@M-O](https://discuss.elastic.co/u/M-O)\ **Replies:** 3\ **Last updated:** [December 9, 2020, 12:42pm UTC](https://discuss.elastic.co/t/performance-issues-during-data-ingestion/258092 "2020-12-09T12:42:10Z")
Hi everyone, i am currently testing the elastic stack for observerability use-cases in my company. For testing purposes we build a small elasticsearch cluster (3 nodes) and ingesting http-logs with filebeat. Our PoC-se… --- ## [How to parse Watcher/Aggs in JSON format into a table automatically?](https://discuss.elastic.co/t/how-to-parse-watcher-aggs-in-json-format-into-a-table-automatically/247623)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 3\ **Last updated:** [September 17, 2020, 12:32pm UTC](https://discuss.elastic.co/t/how-to-parse-watcher-aggs-in-json-format-into-a-table-automatically/247623 "2020-09-17T12:32:12Z")
The output of an aggregation in search (or in watcher), currently comes as JSON and contains key-value. The outcome is different and may contain different fields, so hardcoding them into an html body is not possible. Is … --- ## [Create C# Class from existing Index](https://discuss.elastic.co/t/create-c-class-from-existing-index/223138)
**Author:** [@Michal\_Svacina](https://discuss.elastic.co/u/Michal_Svacina)\ **Replies:** 3\ **Last updated:** [March 12, 2020, 7:14am UTC](https://discuss.elastic.co/t/create-c-class-from-existing-index/223138 "2020-03-12T07:14:46Z")
Hello, I am pretty new to working with Elasticsearch. Right now I am trying to query some data from Elastic 6.5 with .net client NEST. So I have existing index that I want to search In. I tried to create the C# class m… --- ## [Getting sudden bursts of CPU](https://discuss.elastic.co/t/getting-sudden-bursts-of-cpu/230190)
**Author:** [@fgourichon](https://discuss.elastic.co/u/fgourichon)\ **Replies:** 2\ **Last updated:** [April 30, 2020, 7:37am UTC](https://discuss.elastic.co/t/getting-sudden-bursts-of-cpu/230190 "2020-04-30T07:37:01Z")
Hi there, We just started using Elasticsearch Services and we're facing a few issues we could get help with. Our setup and use cases are quite simple: One index containing 14M documents (orders), used for plain text … --- ## [Automatically create "logstash-\*" as index pattern for Kibana](https://discuss.elastic.co/t/automatically-create-logstash-as-index-pattern-for-kibana/84221)
**Author:** [@Pat92](https://discuss.elastic.co/u/Pat92)\ **Replies:** 2\ **Last updated:** [May 8, 2017, 10:13am UTC](https://discuss.elastic.co/t/automatically-create-logstash-as-index-pattern-for-kibana/84221 "2017-05-08T10:13:22Z")
Hi all , I'm using the elatic stack ( logstash 5.3.0 , kibana 5.3.0 and elasticsearch 5.3.0) with Docker I'm running a test environment where all the Docker containers are being removed and recreated automatically every… --- ## [Shrinking an index](https://discuss.elastic.co/t/shrinking-an-index/180159)
**Author:** [@atom](https://discuss.elastic.co/u/atom)\ **Replies:** 6\ **Last updated:** [May 8, 2019, 1:06pm UTC](https://discuss.elastic.co/t/shrinking-an-index/180159 "2019-05-08T13:06:53Z")
Hi, i have many indexes with 5 primary shards and 1 replica (default). Since i have only one node and the data the indexes are holding are small, i want to reduce the number of shards. This is my machine: 64GB ram, ~1… --- ## [Filebeat and Logstash tuning - How to align performance](https://discuss.elastic.co/t/filebeat-and-logstash-tuning-how-to-align-performance/300268)
**Author:** [@bar0n36](https://discuss.elastic.co/u/bar0n36)\ **Replies:** 1\ **Last updated:** [March 24, 2022, 10:22pm UTC](https://discuss.elastic.co/t/filebeat-and-logstash-tuning-how-to-align-performance/300268 "2022-03-24T22:22:55Z")
I am in the process of trying to ingest a massive backlog of logs (10s of TB) via Filebeat \> Logstash \> Ingest Node \> Elasticsearch. I have scaled out the pipeline extensively and am now at a point where I am struggling… --- ## [CSV::MalformedCSVError: Unquoted fields do not allow \\r or \\n](https://discuss.elastic.co/t/csv-unquoted-fields-do-not-allow-r-or-n/154292)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 1\ **Last updated:** [October 27, 2018, 3:47pm UTC](https://discuss.elastic.co/t/csv-unquoted-fields-do-not-allow-r-or-n/154292 "2018-10-27T15:47:14Z")
Hello, I'm getting a CSV::MalformedCSVError exception for events where the (possible) multilined field has line breaks. I think I managed to join all the event's lines in one single event (at least that's what I unders… --- ## [Limit of total fields \[1000\] in index \[metricbeat-2017.05.09\] has been exceeded](https://discuss.elastic.co/t/limit-of-total-fields-1000-in-index-metricbeat-2017-05-09-has-been-exceeded/85081)
**Author:** [@Exocomp](https://discuss.elastic.co/u/Exocomp)\ **Replies:** 1\ **Last updated:** [May 9, 2017, 12:34pm UTC](https://discuss.elastic.co/t/limit-of-total-fields-1000-in-index-metricbeat-2017-05-09-has-been-exceeded/85081 "2017-05-09T12:34:40Z")
I'm getting the following error: java.lang.IllegalArgumentException: Limit of total fields \[1000\] in index \[metricbeat-2017.05.09\] has been exceeded The issue is temporarliy resolved with the following: PUT metricb… --- ## [Release tracking](https://discuss.elastic.co/t/release-tracking/132170)
**Author:** [@AdriVanHoudt](https://discuss.elastic.co/u/AdriVanHoudt)\ **Replies:** 1\ **Last updated:** [May 17, 2018, 8:13pm UTC](https://discuss.elastic.co/t/release-tracking/132170 "2018-05-17T20:13:37Z")
Opbeat used to have release tracking, which was handy to notify on Slack and handy to see on the graphs. Makes is obvious where a regression happened. Is this something that is being looked at? / Has been considered on … --- ## [Problems deploying ECK on k8 v1.23.10](https://discuss.elastic.co/t/problems-deploying-eck-on-k8-v1-23-10/323129)
**Author:** [@Dennis\_Christensen](https://discuss.elastic.co/u/Dennis_Christensen)\ **Replies:** 2\ **Last updated:** [January 16, 2023, 8:10am UTC](https://discuss.elastic.co/t/problems-deploying-eck-on-k8-v1-23-10/323129 "2023-01-16T08:10:04Z")
Hi. I am new to ECK, and would like to install it on our development cluster. But I have problems just installing the CRDs. From the quickstart I've tried to install the CRDs: kubectl apply -f https://download.elastic… --- ## [Enterprise-search.yml is not a valid YAML file](https://discuss.elastic.co/t/enterprise-search-yml-is-not-a-valid-yaml-file/235589)
**Author:** [@schoffelman](https://discuss.elastic.co/u/schoffelman)\ **Replies:** 2\ **Last updated:** [June 8, 2020, 3:19pm UTC](https://discuss.elastic.co/t/enterprise-search-yml-is-not-a-valid-yaml-file/235589 "2020-06-08T15:19:41Z")
When following the installer instructions for my localhost install, I'm getting a Invalid config file (...): /Users/...enterprise-search.yml is not a valid YAML file. In my elasticsearch.yml file I have xpack.security.e… --- ## [INFO No non-zero metrics in the last 30s](https://discuss.elastic.co/t/info-no-non-zero-metrics-in-the-last-30s/87960)
**Author:** [@Me\_Cloud](https://discuss.elastic.co/u/Me_Cloud)\ **Replies:** 2\ **Last updated:** [June 2, 2017, 7:48am UTC](https://discuss.elastic.co/t/info-no-non-zero-metrics-in-the-last-30s/87960 "2017-06-02T07:48:37Z")
Hello, i have a question where i change non-zero metrics in the last 30s from 30s i want change to 10s. i already search the configuration about that but i can't find that --- ## [Loading a .csv file into Elasticsearch using Logstash](https://discuss.elastic.co/t/loading-a-csv-file-into-elasticsearch-using-logstash/56128)
**Author:** [@puja.jena](https://discuss.elastic.co/u/puja.jena)\ **Replies:** 2\ **Last updated:** [July 22, 2016, 8:48am UTC](https://discuss.elastic.co/t/loading-a-csv-file-into-elasticsearch-using-logstash/56128 "2016-07-22T08:48:21Z")
Hi, I'm trying to import this one CSV file to Elasticsearch using Logstash, but it seems to be failing despite the fact that my configuration file is okay. My .conf file in Elasticsearch looks like the following: input… --- ## [Filebeat not picking up log files](https://discuss.elastic.co/t/filebeat-not-picking-up-log-files/293910)
**Author:** [@aamir\_mustafa](https://discuss.elastic.co/u/aamir_mustafa)\ **Replies:** 3\ **Last updated:** [January 11, 2022, 9:30am UTC](https://discuss.elastic.co/t/filebeat-not-picking-up-log-files/293910 "2022-01-11T09:30:49Z")
Hello Team, I'm using Filebeat 7.10.2 to ship logs directly to Elasticsearch. But I'm facing an issue while giving input to filebeat. Filebeat only picks up one log file even when I'm specifying to read all files from i… --- ## [Kibana in iFrame Cross-Origin](https://discuss.elastic.co/t/kibana-in-iframe-cross-origin/68711)
**Author:** [@mgaunt](https://discuss.elastic.co/u/mgaunt)\ **Replies:** 3\ **Last updated:** [December 13, 2016, 2:55pm UTC](https://discuss.elastic.co/t/kibana-in-iframe-cross-origin/68711 "2016-12-13T14:55:18Z")
Hello, I am trying to embed a kibana dashboard in my webpage using an iFrame. This works flawlessly in internet explorer, but in Chrome and Firefox, I get : Uncaught SecurityError: Blocked a frame with origin "http:/… --- ## [Podman or Docker CE 20.10 for best performance?](https://discuss.elastic.co/t/podman-or-docker-ce-20-10-for-best-performance/348308)
**Author:** [@jojsf](https://discuss.elastic.co/u/jojsf)\ **Replies:** 4\ **Last updated:** [December 17, 2023, 4:35pm UTC](https://discuss.elastic.co/t/podman-or-docker-ce-20-10-for-best-performance/348308 "2023-12-17T16:35:20Z")
Hi, I would like to know if anyone have noticed any performance issues with Redhat 8 and Podaman? We are in the decision to either use podman or docker ce 20.10 on red hat 8 on new hw, cisco ucs 240 m7 with nvme drives… --- ## [Filebeat does not harvest logs](https://discuss.elastic.co/t/filebeat-does-not-harvest-logs/165519)
**Author:** [@alfian](https://discuss.elastic.co/u/alfian)\ **Replies:** 4\ **Last updated:** [January 26, 2019, 6:02am UTC](https://discuss.elastic.co/t/filebeat-does-not-harvest-logs/165519 "2019-01-26T06:02:02Z")
I have deploy filebeat in kubernetes as daemon set (the node is ubuntu 18.04), but some of the filebeat pod do not send any log, it did not harvest any log. What might cause this? This is my filebeat configuration: ---… --- ## [Weekyear\_week as scripted field](https://discuss.elastic.co/t/weekyear-week-as-scripted-field/117770)
**Author:** [@jakn](https://discuss.elastic.co/u/jakn)\ **Replies:** 4\ **Last updated:** [February 19, 2018, 7:17am UTC](https://discuss.elastic.co/t/weekyear-week-as-scripted-field/117770 "2018-02-19T07:17:30Z")
How do I create a scripted field showing timestamp formatted as 'weekyear\_week'? The weekyear\_week format is described here: https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping-date-format.html#date… --- ## [Copy ssl certificate from centOS 7 to windows for beats](https://discuss.elastic.co/t/copy-ssl-certificate-from-centos-7-to-windows-for-beats/48756)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 4\ **Last updated:** [May 1, 2016, 2:20am UTC](https://discuss.elastic.co/t/copy-ssl-certificate-from-centos-7-to-windows-for-beats/48756 "2016-05-01T02:20:12Z")
I have copied ssl certificate from te ELK server, set up on cent OS 7, with this command scp /etc/pki/tls/certs/logstash-forwarder.crt user@client\_server\_private\_address:/tmp but then how should I place it into the Win… --- ## [GCP上のプロジェクトとElasticsearch Serviceの連携について](https://discuss.elastic.co/t/gcp-elasticsearch-service/198820)
**Author:** [@Masanori\_Mishima](https://discuss.elastic.co/u/Masanori_Mishima)\ **Replies:** 5\ **Last updated:** [September 17, 2019, 3:56am UTC](https://discuss.elastic.co/t/gcp-elasticsearch-service/198820 "2019-09-17T03:56:24Z")
GCP上のプロジェクトにFirebaseでホスティングをしてSPAを開発しています。 開発しているSPAでは、文字列検索によって目的のコンテンツの情報を取得しており、 現在はローカルサーバ上に立てたDockerにElasticsearchのインデックスを作成してそこから 検索結果の情報を取得しています。 ローカルでElasticsearchを使用する場合、そのローカルサーバを立ててるPCが何らかの原因で故障して停止した場合、SP… --- ## [Can Logstash jdbc inputs be processed in certain order and how to control that 1 input process has ended?](https://discuss.elastic.co/t/can-logstash-jdbc-inputs-be-processed-in-certain-order-and-how-to-control-that-1-input-process-has-ended/69856)
**Author:** [@iti](https://discuss.elastic.co/u/iti)\ **Replies:** 5\ **Last updated:** [December 28, 2016, 9:41pm UTC](https://discuss.elastic.co/t/can-logstash-jdbc-inputs-be-processed-in-certain-order-and-how-to-control-that-1-input-process-has-ended/69856 "2016-12-28T21:41:18Z")
I have the following config: input { jdbc { ... staement =\> "select \* from tab\_1st" type =\> "1st"} jdbc { ... staement =\> "select \* from tab\_2nd" … --- ## [FileNotFound not catched by file\_rotator](https://discuss.elastic.co/t/filenotfound-not-catched-by-file-rotator/45934)
**Author:** [@simonecottini](https://discuss.elastic.co/u/simonecottini)\ **Replies:** 5\ **Last updated:** [April 4, 2016, 11:56am UTC](https://discuss.elastic.co/t/filenotfound-not-catched-by-file-rotator/45934 "2016-04-04T11:56:39Z")
Hi all, I had configured Filebeat to write it's output to file on filesystem. During Filebeat execution if you delete the output file ( or obviously one of it's parent folders ) Filebeat keep running and doesn't throw … --- ## [How to use SSL LetsEncrypt in Kibana?](https://discuss.elastic.co/t/how-to-use-ssl-letsencrypt-in-kibana/255446)
**Author:** [@houmie](https://discuss.elastic.co/u/houmie)\ **Replies:** 1\ **Last updated:** [November 19, 2020, 3:17pm UTC](https://discuss.elastic.co/t/how-to-use-ssl-letsencrypt-in-kibana/255446 "2020-11-19T15:17:00Z")
Hello, Kibana can't start and throw this permission error in journal: { Error: EACCES: permission denied, open '/etc/kibana/privkey.pem' I'm using Let's encrypt to get the domain certified: So all I did was creating … --- ## [Unable to return SearchResponse with aggregations Java High Level REST Client](https://discuss.elastic.co/t/unable-to-return-searchresponse-with-aggregations-java-high-level-rest-client/166448)
**Author:** [@Luke\_Giles](https://discuss.elastic.co/u/Luke_Giles)\ **Replies:** 1\ **Last updated:** [January 31, 2019, 10:59pm UTC](https://discuss.elastic.co/t/unable-to-return-searchresponse-with-aggregations-java-high-level-rest-client/166448 "2019-01-31T22:59:45Z")
Hi all, I'm trying to using the Java High Level REST Client API to return a SearchResponse from a search template using aggregates and getting the following error; \`Request processing failed; nested exception is org.sp… --- ## [Sorting in scroll API](https://discuss.elastic.co/t/sorting-in-scroll-api/65344)
**Author:** [@bharath\_meka](https://discuss.elastic.co/u/bharath_meka)\ **Replies:** 1\ **Last updated:** [November 8, 2016, 12:24pm UTC](https://discuss.elastic.co/t/sorting-in-scroll-api/65344 "2016-11-08T12:24:30Z")
Hi, We are using scroll API (Elastic Search 2.x) to retrieve large number of records. Though we are able to retrieve the logs the sorting seems to be an issue. We have specified sort in the query but still see the logs… --- ## [Bind kibana's server.host to multiple interfaces (both localhost and 192.168.0.0/16)](https://discuss.elastic.co/t/bind-kibanas-server-host-to-multiple-interfaces-both-localhost-and-192-168-0-0-16/229789)
**Author:** [@archon810](https://discuss.elastic.co/u/archon810)\ **Replies:** 2\ **Last updated:** [April 27, 2020, 9:14pm UTC](https://discuss.elastic.co/t/bind-kibanas-server-host-to-multiple-interfaces-both-localhost-and-192-168-0-0-16/229789 "2020-04-27T21:14:32Z")
Hi, I'd like to be able to access kibana by typing in localhost:5601 as well as MACHINE\_HOST\_NAME:5601. Elastic can do it easily with network.host: \[\_site\_, \_local\_\]. But I haven't found a way to do this in kibana. I … --- ## [Data Table - show number of events for each device, each day for last 7 days](https://discuss.elastic.co/t/data-table-show-number-of-events-for-each-device-each-day-for-last-7-days/190068)
**Author:** [@MichaelC](https://discuss.elastic.co/u/MichaelC)\ **Replies:** 2\ **Last updated:** [July 13, 2019, 12:35am UTC](https://discuss.elastic.co/t/data-table-show-number-of-events-for-each-device-each-day-for-last-7-days/190068 "2019-07-13T00:35:37Z")
I've been trying to recreate a report that shows the number of events occurring on specific devices, each day over seven days. The purpose of the report is to monitor the event number and make note of event counts that … [Previous page](https://discuss.elastic.co/top.md?page=904&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=906&per_page=50&period=all)