# Top **URL:** https://discuss.elastic.co/top.md?page=938&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 939 --- ## [Filebeat not able to connect to Logstatsh - Getting ERR Failed to connect: dial tcp XX.XX.XXX.X:5044: i/o timeout](https://discuss.elastic.co/t/filebeat-not-able-to-connect-to-logstatsh-getting-err-failed-to-connect-dial-tcp-xx-xx-xxx-x-5044-i-o-timeout/117202)
**Author:** [@Vijai](https://discuss.elastic.co/u/Vijai)\ **Replies:** 1\ **Last updated:** [January 26, 2018, 2:41pm UTC](https://discuss.elastic.co/t/filebeat-not-able-to-connect-to-logstatsh-getting-err-failed-to-connect-dial-tcp-xx-xx-xxx-x-5044-i-o-timeout/117202 "2018-01-26T14:41:59Z")
Hello, I'm trying to do a POC on ELK + Filebeat. I configured the entire setup on my local machine and it works fine. Filebeats is able to establish a connection to Logstash. But when I installed Filebeats on a remote s… --- ## [Add docker meta data for docker log files AND harvest other log files](https://discuss.elastic.co/t/add-docker-meta-data-for-docker-log-files-and-harvest-other-log-files/103688)
**Author:** [@Anders\_Gibson](https://discuss.elastic.co/u/Anders_Gibson)\ **Replies:** 7\ **Last updated:** [October 18, 2017, 11:53am UTC](https://discuss.elastic.co/t/add-docker-meta-data-for-docker-log-files-and-harvest-other-log-files/103688 "2017-10-18T11:53:58Z")
Hi! I am evaluating FileBeat 6.0.0-rc1. It seems as if this configuration: processors: - add\_docker\_metadata: host: "unix:///var/run/docker.sock" works fine and docker fields gets added, but filebeat ignores dock… --- ## [Setting indices.id\_field\_data.enabled for index instead of cluster](https://discuss.elastic.co/t/setting-indices-id-field-data-enabled-for-index-instead-of-cluster/268003)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 0\ **Last updated:** [March 22, 2021, 6:16pm UTC](https://discuss.elastic.co/t/setting-indices-id-field-data-enabled-for-index-instead-of-cluster/268003 "2021-03-22T18:16:27Z")
This setting has been great to be able to change because many problems can come up from aggregating on the \_id field. However, I want to be able to control this setting for a specific index, rather than the whole cluster… --- ## [Data parse error \["\_dateparsefailure"\]](https://discuss.elastic.co/t/data-parse-error-dateparsefailure/139924)
**Author:** [@Gokul\_15](https://discuss.elastic.co/u/Gokul_15)\ **Replies:** 8\ **Last updated:** [July 18, 2018, 4:40am UTC](https://discuss.elastic.co/t/data-parse-error-dateparsefailure/139924 "2018-07-18T04:40:32Z")
data parse error \["\_dateparsefailure"\] filter{ date{ match=\>\["date","yyyy-MM-dd HH:mm:ss:SSS Z"\] target=\>"logdata" } mutate { remove\_field =\> \[ "date" \] } where date inside the match is the field in db.. "date":"2… --- ## [Elasticcloud-Kibana, iframe auto authentication CORS](https://discuss.elastic.co/t/elasticcloud-kibana-iframe-auto-authentication-cors/147001)
**Author:** [@betatester](https://discuss.elastic.co/u/betatester)\ **Replies:** 1\ **Last updated:** [September 4, 2018, 11:42am UTC](https://discuss.elastic.co/t/elasticcloud-kibana-iframe-auto-authentication-cors/147001 "2018-09-04T11:42:01Z")
Hello, I am trying to get Kibana chart to appear inside an iframe of my web app. The browser attempt a CORS request to get cookie before the iframe: POST to: \[kibana-host\]/api/security/v1/login , with kbn-version in… --- ## [Visualizations are not visible when Kibana Visualizations count is \> 100](https://discuss.elastic.co/t/visualizations-are-not-visible-when-kibana-visualizations-count-is-100/104581)
**Author:** [@martb](https://discuss.elastic.co/u/martb)\ **Replies:** 2\ **Last updated:** [October 19, 2017, 4:00pm UTC](https://discuss.elastic.co/t/visualizations-are-not-visible-when-kibana-visualizations-count-is-100/104581 "2017-10-19T16:00:58Z")
Hi, I have over 100 visualizations used across many dashboards, but cannot add any new visuals to my dashboards until the visualizations count is less than 100. Any newly added visuals don't display when you try to ad… --- ## [APM integration with ElysiaJS and Bun](https://discuss.elastic.co/t/apm-integration-with-elysiajs-and-bun/345530)
**Author:** [@Thai\_Huynh](https://discuss.elastic.co/u/Thai_Huynh)\ **Replies:** 6\ **Last updated:** [October 24, 2023, 12:44am UTC](https://discuss.elastic.co/t/apm-integration-with-elysiajs-and-bun/345530 "2023-10-24T00:44:34Z")
Hi, Has anyone successfully integrated the APM with ElysiaJS and Bun runtime? We kept getting the following message in the console: APM Server transport error: premature apm-server response with statusCode=202 We trie… --- ## [ElasticSearch does not see indices](https://discuss.elastic.co/t/elasticsearch-does-not-see-indices/332960)
**Author:** [@not\_correct](https://discuss.elastic.co/u/not_correct)\ **Replies:** 6\ **Last updated:** [May 11, 2023, 9:23am UTC](https://discuss.elastic.co/t/elasticsearch-does-not-see-indices/332960 "2023-05-11T09:23:11Z")
Hi, I had to reboot EC2 instances that hosts 5-node cluster. The data stored on corresponding EBS volumes. Once I have rebooted the instance and started the Elasticsearch my cluster got into status red. \_cat/indices m… --- ## [No documents after 20 hours of crawling](https://discuss.elastic.co/t/no-documents-after-20-hours-of-crawling/179504)
**Author:** [@Hiren\_Patel](https://discuss.elastic.co/u/Hiren_Patel)\ **Replies:** 6\ **Last updated:** [May 7, 2019, 10:22pm UTC](https://discuss.elastic.co/t/no-documents-after-20-hours-of-crawling/179504 "2019-05-07T22:22:05Z")
I've initiated a manual crawl 20 hours ago however I see no documents in the control panel. I see a "Swiftype is currently indexing content for domains in this search engine. Pages will become available as they are inde… --- ## [GROK Multiline Newby](https://discuss.elastic.co/t/grok-multiline-newby/59614)
**Author:** [@somerandomguy](https://discuss.elastic.co/u/somerandomguy)\ **Replies:** 6\ **Last updated:** [September 7, 2016, 7:44am UTC](https://discuss.elastic.co/t/grok-multiline-newby/59614 "2016-09-07T07:44:33Z")
Hi. I have to GROK a multiline log. It's around 15 lines per log. Looking at some examples online, but they are a bit hard to follow.... Anybody got any real life examples? I have installed windows filebeat and am in… --- ## [Как можно сделать облоко тегов на elasticsearch?](https://discuss.elastic.co/t/elasticsearch/50294)
**Author:** [@MaxSeleznov](https://discuss.elastic.co/u/MaxSeleznov)\ **Replies:** 6\ **Last updated:** [May 18, 2016, 11:55pm UTC](https://discuss.elastic.co/t/elasticsearch/50294 "2016-05-18T23:55:19Z")
мне надо получить спосок постов за последнии 24 часа и найти самые весомые слова из этих постов это мой мапинг на es 5.0.0 { "state": "open", "settings": { "index": { "creation\_date": "1463528294402", … --- ## [SearchHit Java API](https://discuss.elastic.co/t/searchhit-java-api/13518)
**Author:** [@Adrian\_2](https://discuss.elastic.co/u/Adrian_2)\ **Replies:** 6\ **Last updated:** [September 9, 2013, 7:13pm UTC](https://discuss.elastic.co/t/searchhit-java-api/13518 "2013-09-09T19:13:25Z")
Hi, I've seen that the SearchHit interface does not provide a method for accessing a field using the common java naming conventions. Would it be possible to add such a method with the name "getField"? Thanks, Adr… --- ## [ElasticSearch on Kubernetes on RPi4](https://discuss.elastic.co/t/elasticsearch-on-kubernetes-on-rpi4/284376)
**Author:** [@George\_Leonard](https://discuss.elastic.co/u/George_Leonard)\ **Replies:** 4\ **Last updated:** [September 20, 2021, 8:43am UTC](https://discuss.elastic.co/t/elasticsearch-on-kubernetes-on-rpi4/284376 "2021-09-20T08:43:26Z")
Hi all Looking at putting together a "little" lab. Thinking of building up to 4 or 5 RPI4's with 4GB each. Want to then drop K8S onto them. Not sure how I will do persistent storage, as a start might just give them e… --- ## [CSV filter, one line of data is missing](https://discuss.elastic.co/t/csv-filter-one-line-of-data-is-missing/127387)
**Author:** [@resuhp](https://discuss.elastic.co/u/resuhp)\ **Replies:** 4\ **Last updated:** [April 17, 2018, 7:10am UTC](https://discuss.elastic.co/t/csv-filter-one-line-of-data-is-missing/127387 "2018-04-17T07:10:36Z")
Hi, first of all, I would like to say that I'm very new to elk stack and have some problems with understanding what I'm doing wrong. I'm having a problem after Logstash indexing. Let's say that I have one log file with… --- ## [Monitor status of filebeats in Kibana](https://discuss.elastic.co/t/monitor-status-of-filebeats-in-kibana/125056)
**Author:** [@kyle\_che](https://discuss.elastic.co/u/kyle_che)\ **Replies:** 4\ **Last updated:** [March 21, 2018, 7:21pm UTC](https://discuss.elastic.co/t/monitor-status-of-filebeats-in-kibana/125056 "2018-03-21T19:21:39Z")
I was at the Elasticon 2018 and I was told that the ability to monitor filebeats inside of Kibana was available in 6.2 just like we have it for elasticsearch, kibana & logstash. I am not seeing how to turn that on insid… --- ## [Make setup command throws error](https://discuss.elastic.co/t/make-setup-command-throws-error/92466)
**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\ **Replies:** 4\ **Last updated:** [July 12, 2017, 4:17am UTC](https://discuss.elastic.co/t/make-setup-command-throws-error/92466 "2017-07-12T04:17:08Z")
Hi - Am trying to build a own beat, which would make a rest calls to a server and will have to send the output to Elastic Search. Am hitting the below error, when I enter the 'make setup' command. Could someone please … --- ## [Setting up date plugin with Delhi timezone](https://discuss.elastic.co/t/setting-up-date-plugin-with-delhi-timezone/54626)
**Author:** [@noemie](https://discuss.elastic.co/u/noemie)\ **Replies:** 4\ **Last updated:** [June 7, 2017, 5:57am UTC](https://discuss.elastic.co/t/setting-up-date-plugin-with-delhi-timezone/54626 "2017-06-07T05:57:53Z")
Hello, I'm trying to set up the @timestamp based on a log date. The date in the log is in Delhi timezone but the one stored in the @timestamp (or another field created to store it) is in London timezone. Here is my l… --- ## [Shield (or X-Pack) on Kibi?](https://discuss.elastic.co/t/shield-or-x-pack-on-kibi/88424)
**Author:** [@Giuseppe\_Merlo](https://discuss.elastic.co/u/Giuseppe_Merlo)\ **Replies:** 1\ **Last updated:** [June 6, 2017, 1:30pm UTC](https://discuss.elastic.co/t/shield-or-x-pack-on-kibi/88424 "2017-06-06T13:30:58Z")
Hi everyone. As title says, there is a way to install Shield or X-Pack on Kibi? I have already read and used X-Pack installation for Kibana, but i'm looking for something similar for Kibi. Thanks for your support. --- ## [Elastic virtual ip](https://discuss.elastic.co/t/elastic-virtual-ip/83011)
**Author:** [@talial](https://discuss.elastic.co/u/talial)\ **Replies:** 4\ **Last updated:** [April 20, 2017, 9:10am UTC](https://discuss.elastic.co/t/elastic-virtual-ip/83011 "2017-04-20T09:10:49Z")
Hi, We configured elastic cluster as follow: server 1+2+3: node.master: true node.data: true server 4+5: (client node) node.master: false node.data:false We configured a virtual ip in f5 that redirect to server 4+5 wit… --- ## [Not able to import complete data using Logstash to Elasticsearch](https://discuss.elastic.co/t/not-able-to-import-complete-data-using-logstash-to-elasticsearch/75825)
**Author:** [@Varun\_Patel](https://discuss.elastic.co/u/Varun_Patel)\ **Replies:** 4\ **Last updated:** [February 22, 2017, 8:11pm UTC](https://discuss.elastic.co/t/not-able-to-import-complete-data-using-logstash-to-elasticsearch/75825 "2017-02-22T20:11:58Z")
Hi, I am using Logstash with JDBC connection for importing data from database to elasticsearch. When i am importing data, all the data present in database is not imported. There are 487745 records in my database but w… --- ## [Filebeat wildcard drectory](https://discuss.elastic.co/t/filebeat-wildcard-drectory/72113)
**Author:** [@rai](https://discuss.elastic.co/u/rai)\ **Replies:** 4\ **Last updated:** [February 3, 2017, 8:29pm UTC](https://discuss.elastic.co/t/filebeat-wildcard-drectory/72113 "2017-02-03T20:29:15Z")
It looks like filebeat does not support wildcards in directories like this: /opt/cloudera/yarn/\*/\*/yarn.log --- ## [Indices/dashboards etc names visibility for every user?](https://discuss.elastic.co/t/indices-dashboards-etc-names-visibility-for-every-user/39451)
**Author:** [@logstaszek](https://discuss.elastic.co/u/logstaszek)\ **Replies:** 4\ **Last updated:** [February 2, 2016, 12:30am UTC](https://discuss.elastic.co/t/indices-dashboards-etc-names-visibility-for-every-user/39451 "2016-02-02T00:30:45Z")
Hello, I have a question. I have configured some roles, for example, user1 can see only dashboard1 and user2 can see only dashboard2. In kibana user2 of course can't access to dashboard1, error show up, but he can see… --- ## [Resolved attribute is missing ... but is not!](https://discuss.elastic.co/t/resolved-attribute-is-missing-but-is-not/277510)
**Author:** [@priamai](https://discuss.elastic.co/u/priamai)\ **Replies:** 1\ **Last updated:** [July 1, 2021, 6:07am UTC](https://discuss.elastic.co/t/resolved-attribute-is-missing-but-is-not/277510 "2021-07-01T06:07:53Z")
I am on ELK 7.13.0 with the Hadoop 7.13.0 library. I have the following schema: root |-- @timestamp: timestamp (nullable = true) |-- AuthenticationPackage: string (nullable = true) |-- Destination: string (nullable … --- ## [New line character in painless](https://discuss.elastic.co/t/new-line-character-in-painless/271604)
**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 11:48am UTC](https://discuss.elastic.co/t/new-line-character-in-painless/271604 "2021-04-29T11:48:38Z")
i want to send new line char to api using watcher "actions": { "sms": { "webhook": { "scheme": "https", "host": "127.0.0.1", "port": 80, "method": "post", "path": "/api/… --- ## [Unable to filter data when using a scripted-field](https://discuss.elastic.co/t/unable-to-filter-data-when-using-a-scripted-field/131744)
**Author:** [@dighan](https://discuss.elastic.co/u/dighan)\ **Replies:** 1\ **Last updated:** [May 14, 2018, 12:53pm UTC](https://discuss.elastic.co/t/unable-to-filter-data-when-using-a-scripted-field/131744 "2018-05-14T12:53:44Z")
Hello, I've created a scripted-field, sc-streaming-performance-score which is a ratio between 2 values and returns a float: def a = doc\['field'\].value; def b = doc\['field'\].value; if (a \> 0 && b \> 0) { return (float… --- ## [Pie chart - Field value alias name](https://discuss.elastic.co/t/pie-chart-field-value-alias-name/49483)
**Author:** [@Rotem](https://discuss.elastic.co/u/Rotem)\ **Replies:** 1\ **Last updated:** [May 9, 2016, 6:09pm UTC](https://discuss.elastic.co/t/pie-chart-field-value-alias-name/49483 "2016-05-09T18:09:27Z")
Hi all, I got a pie chart visualization as you can see, describing some id/count aggregation. Is it possible to show an alias instead of the id value? (both, legend and tooltip labels) for example, instead of: 9 - "A… --- ## [Using aggregations for OLAP](https://discuss.elastic.co/t/using-aggregations-for-olap/15324)
**Author:** [@Roy\_Jacobs](https://discuss.elastic.co/u/Roy_Jacobs)\ **Replies:** 1\ **Last updated:** [January 20, 2014, 5:30pm UTC](https://discuss.elastic.co/t/using-aggregations-for-olap/15324 "2014-01-20T17:30:32Z")
I am interested in using the new aggregations support to implement something similar to an OLAP cube. Let's say I have a big bunch of documents that represent orders. On those documents I want to calculate a bunch… --- ## [Logstash pipeline schedule](https://discuss.elastic.co/t/logstash-pipeline-schedule/269139)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 3\ **Last updated:** [April 4, 2021, 5:18am UTC](https://discuss.elastic.co/t/logstash-pipeline-schedule/269139 "2021-04-04T05:18:45Z")
Hi there I\`ve faced with a problem... I have a running Logstash with multiple pipelines. I just want to run one of these pipelines from 00:00 am until 08:00 am everyday According to Logstash documentation, pipeline co… --- ## [Can elasticsearch help in seo](https://discuss.elastic.co/t/can-elasticsearch-help-in-seo/267622)
**Author:** [@fatheyabelslam](https://discuss.elastic.co/u/fatheyabelslam)\ **Replies:** 3\ **Last updated:** [March 19, 2021, 12:10pm UTC](https://discuss.elastic.co/t/can-elasticsearch-help-in-seo/267622 "2021-03-19T12:10:39Z")
Hi, I working with yoast.js The main use of it is to analyze content and return score of content based on google requirements for best content structure And i think :thinking: that elasticsearch is the best in unders… --- ## [Logstash to Master Node or Hot Node?](https://discuss.elastic.co/t/logstash-to-master-node-or-hot-node/200868)
**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\ **Replies:** 3\ **Last updated:** [September 24, 2019, 2:56pm UTC](https://discuss.elastic.co/t/logstash-to-master-node-or-hot-node/200868 "2019-09-24T14:56:43Z")
Hi, I need some clarification in the Master, Hot Node, Warm Node design I have setup a working cluster with a dedicated master Node thats not set to ingest any data. In my design I have a Hot-Node1 and Hot-Node2 and a… --- ## ["The source does not contain any versions of 'logstash'" when trying to create a logstash filter plugin](https://discuss.elastic.co/t/the-source-does-not-contain-any-versions-of-logstash-when-trying-to-create-a-logstash-filter-plugin/110399)
**Author:** [@anthony-o](https://discuss.elastic.co/u/anthony-o)\ **Replies:** 3\ **Last updated:** [December 14, 2017, 4:31pm UTC](https://discuss.elastic.co/t/the-source-does-not-contain-any-versions-of-logstash-when-trying-to-create-a-logstash-filter-plugin/110399 "2017-12-14T16:31:48Z")
If I follow the current official doc to create a logstash filter plugin, it ends up with the following error: Fetching https://github.com/elastic/logstash Fetching gem metadata from https://rubygems.org/......... Could … --- ## [Why when I start Elasticsearch5.1.1 shows killed and exit?](https://discuss.elastic.co/t/why-when-i-start-elasticsearch5-1-1-shows-killed-and-exit/68501)
**Author:** [@itanqian](https://discuss.elastic.co/u/itanqian)\ **Replies:** 3\ **Last updated:** [December 9, 2016, 6:03am UTC](https://discuss.elastic.co/t/why-when-i-start-elasticsearch5-1-1-shows-killed-and-exit/68501 "2016-12-09T06:03:39Z")
Why when I start Elasticsearch shows killed and exit? \[es@es elasticsearch-5.1.1\]$ ./bin/elasticsearch Killed --- ## [Connecting error publishing events](https://discuss.elastic.co/t/connecting-error-publishing-events/41148)
**Author:** [@Pablo\_perez](https://discuss.elastic.co/u/Pablo_perez)\ **Replies:** 3\ **Last updated:** [February 9, 2016, 12:47am UTC](https://discuss.elastic.co/t/connecting-error-publishing-events/41148 "2016-02-09T00:47:23Z")
I´m having similar issue when I try to connect to my logstash Logstash version 2.0.0 Filebeat 1.0.1 Here the error INFO Connecting error publishing events (retrying): dial tcp 192.168.50.5:14560: getsockopt: connec… --- ## [Watcher and Head Plugin](https://discuss.elastic.co/t/watcher-and-head-plugin/1231)
**Author:** [@peterColclough](https://discuss.elastic.co/u/peterColclough)\ **Replies:** 3\ **Last updated:** [May 25, 2015, 5:33pm UTC](https://discuss.elastic.co/t/watcher-and-head-plugin/1231 "2015-05-25T17:33:51Z")
Hi there, Got watcher installed, but my favourite admin tool Head, is partially broke. 1. Seams that the second Replicas shards are always in 'start mode' (going off to check the reality of that) 2. The 'Browser' tab … --- ## [Logstash is not reading all the logs](https://discuss.elastic.co/t/logstash-is-not-reading-all-the-logs/61302)
**Author:** [@vk126y](https://discuss.elastic.co/u/vk126y)\ **Replies:** 2\ **Last updated:** [September 23, 2016, 6:36am UTC](https://discuss.elastic.co/t/logstash-is-not-reading-all-the-logs/61302 "2016-09-23T06:36:13Z")
I want my logstash to read the following pattern of files from the logs directory Current Date File -\> server.log Historical File Name -\> server.log.yyyy-mm-dd In my system I have 22 files in my logs folder server.lo… --- ## [Elasticsearch won't start after upgrade to 8.1.0](https://discuss.elastic.co/t/elasticsearch-wont-start-after-upgrade-to-8-1-0/299721)
**Author:** [@mralians](https://discuss.elastic.co/u/mralians)\ **Replies:** 5\ **Last updated:** [March 15, 2022, 2:52pm UTC](https://discuss.elastic.co/t/elasticsearch-wont-start-after-upgrade-to-8-1-0/299721 "2022-03-15T14:52:43Z")
I upgraded Elasticsearch from 7.17 to 8.1.0 but since then I can start Elasticsearch. When I run systemctl status Elasticsearch.service I get this error. How can I fix this? org.elasticsearch.bootstrap.StartupException:… --- ## [Logstash unable to create new index](https://discuss.elastic.co/t/logstash-unable-to-create-new-index/69396)
**Author:** [@xsallowed](https://discuss.elastic.co/u/xsallowed)\ **Replies:** 5\ **Last updated:** [December 20, 2016, 7:32am UTC](https://discuss.elastic.co/t/logstash-unable-to-create-new-index/69396 "2016-12-20T07:32:32Z")
Hi Following is my configuration file for logstash and I am trying to create a new index by specifying non standard index name in the output section of this logstash file. I am unable to the data parsed if I am giving t… --- ## [How to update the dashboard automatically](https://discuss.elastic.co/t/how-to-update-the-dashboard-automatically/269188)
**Author:** [@pooja1](https://discuss.elastic.co/u/pooja1)\ **Replies:** 7\ **Last updated:** [April 6, 2021, 1:25am UTC](https://discuss.elastic.co/t/how-to-update-the-dashboard-automatically/269188 "2021-04-06T01:25:03Z")
I want my dashboard to get updated automatically. Whenever I insert data in my csv file and as soon as I press the refresh button it should get updated. I know there is a time filter on the top and I tried using that, b… --- ## [Breakdown of Time Entry](https://discuss.elastic.co/t/breakdown-of-time-entry/165444)
**Author:** [@schoffelman](https://discuss.elastic.co/u/schoffelman)\ **Replies:** 7\ **Last updated:** [January 28, 2019, 3:59pm UTC](https://discuss.elastic.co/t/breakdown-of-time-entry/165444 "2019-01-28T15:59:22Z")
I'm working on project where I have time sheet entries from every employee. Every doc includes the amount logged, their name, and a category id. From those category id's we section it into 3 major groupings. Does anyone… --- ## [Filebeat sending duplicate logs to logstash](https://discuss.elastic.co/t/filebeat-sending-duplicate-logs-to-logstash/119216)
**Author:** [@rajshekhar](https://discuss.elastic.co/u/rajshekhar)\ **Replies:** 1\ **Last updated:** [February 9, 2018, 3:11pm UTC](https://discuss.elastic.co/t/filebeat-sending-duplicate-logs-to-logstash/119216 "2018-02-09T15:11:27Z")
Hi Team, We are testing filebeat for our development setup, using filebeat 5.6.2. The logs are sent to logstash hosted by logz.io via SSL, but we observed that we are getting some duplicate logs entries in elasticsearch… --- ## [Failed parsing date from field using logstash](https://discuss.elastic.co/t/failed-parsing-date-from-field-using-logstash/51384)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 7\ **Last updated:** [May 31, 2016, 9:27am UTC](https://discuss.elastic.co/t/failed-parsing-date-from-field-using-logstash/51384 "2016-05-31T09:27:04Z")
Hi All, I trying to index sample log files to ES using logstash and below is the logstash conf file, input { file { type =\> "apache" path =\> "/opt/esadmin/elasticsearch-1.7.3/bin/logstash-1.5.5/logging\_Adm… --- ## [How to sort and then apply a limit filter](https://discuss.elastic.co/t/how-to-sort-and-then-apply-a-limit-filter/9245)
**Author:** [@bragboy](https://discuss.elastic.co/u/bragboy)\ **Replies:** 1\ **Last updated:** [October 6, 2012, 6:02am UTC](https://discuss.elastic.co/t/how-to-sort-and-then-apply-a-limit-filter/9245 "2012-10-06T06:02:32Z")
Hi, I want to sort the results according to a specific field AND THEN apply the limit filter. A simple example would be to sort a user model by full\_name and then apply the limit say top 100. In this case, how… --- ## [How to grab kafka traceparent and tracestate headers？](https://discuss.elastic.co/t/how-to-grab-kafka-traceparent-and-tracestate-headers/302982)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 4\ **Last updated:** [June 1, 2022, 4:00am UTC](https://discuss.elastic.co/t/how-to-grab-kafka-traceparent-and-tracestate-headers/302982 "2022-06-01T04:00:48Z")
We use dapr framework, which includes opentelemetry trace, all trace data is sent to apmserver, and finally queried on kibana. Everything is fine, but I noticed that if the request goes through kafka (or other middlewar… --- ## [Setting up passwords with elasticsearch-setup-passwords interactive](https://discuss.elastic.co/t/setting-up-passwords-with-elasticsearch-setup-passwords-interactive/265208)
**Author:** [@Archie\_Crawford](https://discuss.elastic.co/u/Archie_Crawford)\ **Replies:** 4\ **Last updated:** [February 24, 2021, 6:04am UTC](https://discuss.elastic.co/t/setting-up-passwords-with-elasticsearch-setup-passwords-interactive/265208 "2021-02-24T06:04:28Z")
Im having an issue with enabling security on my cluster when Im trying to add the passwords to the bulit in users: I have 6 nodes atl-deves01.com atl-deves02.com atl-deves03.com met-deves01.com met-deves02.com met… --- ## [Transforms API not admitting triple quotes](https://discuss.elastic.co/t/transforms-api-not-admitting-triple-quotes/232681)
**Author:** [@Xavier\_Marti\_Bofill](https://discuss.elastic.co/u/Xavier_Marti_Bofill)\ **Replies:** 4\ **Last updated:** [May 15, 2020, 8:11am UTC](https://discuss.elastic.co/t/transforms-api-not-admitting-triple-quotes/232681 "2020-05-15T08:11:51Z")
We are trying to create a transform using painless scripts for aggregations, such as explained here. In Kibana's dev tools, we use Transforms Preview and it works wonderfully. However, whenever we want to post the tran… --- ## [Cannot log in to Kibana in Azure](https://discuss.elastic.co/t/cannot-log-in-to-kibana-in-azure/202838)
**Author:** [@B\_Z](https://discuss.elastic.co/u/B_Z)\ **Replies:** 4\ **Last updated:** [October 10, 2019, 8:14am UTC](https://discuss.elastic.co/t/cannot-log-in-to-kibana-in-azure/202838 "2019-10-10T08:14:01Z")
I've created an ElasticStack from Azure but when I try to log in to Kibana through the IP Address (IPADDRESS:5601) then this error is generated: {"statusCode":403,"error":"Forbidden","message":"Forbidden"} Can you plea… --- ## [The entries in elasticsearch-Keystore is causing the elastic cluster to go DOWN](https://discuss.elastic.co/t/the-entries-in-elasticsearch-keystore-is-causing-the-elastic-cluster-to-go-down/188386)
**Author:** [@Giridhar\_kailasam](https://discuss.elastic.co/u/Giridhar_kailasam)\ **Replies:** 4\ **Last updated:** [July 3, 2019, 7:40am UTC](https://discuss.elastic.co/t/the-entries-in-elasticsearch-keystore-is-causing-the-elastic-cluster-to-go-down/188386 "2019-07-03T07:40:33Z")
My undetstanding is, any missing entries (like passwords) in the yml will be retrieved from the keystore. Having an entry in the keystore should not cause the cluster failure. Eg: Having a "xpack.security.authc.realm… --- ## [APM Java agent websphere startup failure](https://discuss.elastic.co/t/apm-java-agent-websphere-startup-failure/153771)
**Author:** [@D1le](https://discuss.elastic.co/u/D1le)\ **Replies:** 4\ **Last updated:** [October 31, 2018, 5:29am UTC](https://discuss.elastic.co/t/apm-java-agent-websphere-startup-failure/153771 "2018-10-31T05:29:58Z")
Hello! I have some troubles running websphere server with apm agent. Env: RedHat 7.5 WebSphere ND 8.5.5.12 cluster configuration with one node Java 1.8 IBM J9 APM server 6.4.2 APM java agent 0.9 When I use agent,… --- ## [Logstash filter not working for Nagios](https://discuss.elastic.co/t/logstash-filter-not-working-for-nagios/82892)
**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\ **Replies:** 4\ **Last updated:** [April 25, 2017, 4:39pm UTC](https://discuss.elastic.co/t/logstash-filter-not-working-for-nagios/82892 "2017-04-25T16:39:24Z")
My Logstash Conf input { beats { port =\> "5043" type =\> "nagios" } udp { port =\> 9010 type =\> "ossec" } } filter { if \[type\] == "ossec" { grok { match =\> { "message"… --- ## [APM menu does not showing up in in kibana (self hosted)](https://discuss.elastic.co/t/apm-menu-does-not-showing-up-in-in-kibana-self-hosted/150546)
**Author:** [@cabrinoob](https://discuss.elastic.co/u/cabrinoob)\ **Replies:** 2\ **Last updated:** [October 1, 2018, 1:24pm UTC](https://discuss.elastic.co/t/apm-menu-does-not-showing-up-in-in-kibana-self-hosted/150546 "2018-10-01T13:24:50Z")
Hi, I'am running Elasticsearch 6.4.1 on Kubernetes (docker.elastic.co/elasticsearch/elasticsearch:6.4.1). I enabled X-Pack too. I Have installed APM-Server 6.2.4 and everything is working fine : I have data coming from… [Previous page](https://discuss.elastic.co/top.md?page=937&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=939&per_page=50&period=all)