# Top **URL:** https://discuss.elastic.co/top.md?page=954&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 955 --- ## [Elb logs grok inside grok](https://discuss.elastic.co/t/elb-logs-grok-inside-grok/82615)
**Author:** [@bob-bza](https://discuss.elastic.co/u/bob-bza)\ **Replies:** 5\ **Last updated:** [May 1, 2017, 9:06pm UTC](https://discuss.elastic.co/t/elb-logs-grok-inside-grok/82615 "2017-05-01T21:06:07Z")
This was my filter looks like for ELB log. filter { grok { \*\* match =\> \[ "message", "%{TIMESTAMP\_ISO8601:timestamp} %{NOTSPACE:elb\_name} %{IP:elb\_client\_ip}:%{INT:elb\_client\_port:int} (?:%{IP:elb\_backend\_ip}:%{NUMBER:e… --- ## [Shard Failed: marking and sending shard failed due to \[failed recovery\]](https://discuss.elastic.co/t/shard-failed-marking-and-sending-shard-failed-due-to-failed-recovery/297352)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 2\ **Last updated:** [February 17, 2022, 6:24am UTC](https://discuss.elastic.co/t/shard-failed-marking-and-sending-shard-failed-due-to-failed-recovery/297352 "2022-02-17T06:24:21Z")
Hi, I've installed a new windows ELK stack for testing, worked once but then got the below errors when trying to run again. I can see that there are issues with shards, but don't know how to fix this. \[2022-02-16T11:… --- ## [Scripted fields performace](https://discuss.elastic.co/t/scripted-fields-performace/201528)
**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\ **Replies:** 2\ **Last updated:** [October 2, 2019, 6:56am UTC](https://discuss.elastic.co/t/scripted-fields-performace/201528 "2019-10-02T06:56:13Z")
Hi, We had lot of fields in our elasticsearch documets due to which we had mapping explosion. To solve this recently we implemented flattened object which helped us to reduce the number of fields drastically. post this… --- ## [Parsing netflow data](https://discuss.elastic.co/t/parsing-netflow-data/35334)
**Author:** [@Ian\_Hayes](https://discuss.elastic.co/u/Ian_Hayes)\ **Replies:** 2\ **Last updated:** [June 6, 2017, 10:28pm UTC](https://discuss.elastic.co/t/parsing-netflow-data/35334 "2017-06-06T22:28:56Z")
Hello all- I'm trying to have Logstash help out with some Netflow data. It receives data nicely and sends it to Elasticsearch with no problem, but I'm trying to add an extra field that contains the connection duration. … --- ## [Custom event parsing](https://discuss.elastic.co/t/custom-event-parsing/290568)
**Author:** [@ohliuw](https://discuss.elastic.co/u/ohliuw)\ **Replies:** 7\ **Last updated:** [December 1, 2021, 9:52pm UTC](https://discuss.elastic.co/t/custom-event-parsing/290568 "2021-12-01T21:52:04Z")
I am relatively new to SO. I am trying to understand how to ingest and parse customs logs in ELS. I currently use the NXLog agent to send json formatted data (coming from the SYSMON windows eventlog) from a host to the … --- ## [How to Put Elasticsearch data to Oracle Table](https://discuss.elastic.co/t/how-to-put-elasticsearch-data-to-oracle-table/250498)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 7\ **Last updated:** [October 1, 2020, 2:48am UTC](https://discuss.elastic.co/t/how-to-put-elasticsearch-data-to-oracle-table/250498 "2020-10-01T02:48:26Z")
Hi Could you please help me with my requirement of putting Elasticsearch index data into oracle table. Do we have any additional plugin required for logstash to achieve same. ? I am aware of CSV method , but its too t… --- ## [Mongoose spans are missing(When i add custom spans i can see also the mongo spans)](https://discuss.elastic.co/t/mongoose-spans-are-missing-when-i-add-custom-spans-i-can-see-also-the-mongo-spans/205744)
**Author:** [@Aviad\_Hadida](https://discuss.elastic.co/u/Aviad_Hadida)\ **Replies:** 7\ **Last updated:** [November 16, 2019, 8:07pm UTC](https://discuss.elastic.co/t/mongoose-spans-are-missing-when-i-add-custom-spans-i-can-see-also-the-mongo-spans/205744 "2019-11-16T20:07:44Z")
Kibana version: 7.4.0 On Elastic cloud Elasticsearch version: 7.4.0 On Elastic cloud APM Server version: 7.4.0 On Elastic cloud APM Agent language and version: Node.js - Elatic apm node 3.1.0 Description of the p… --- ## [Query performance after 6.1.1 upgrade](https://discuss.elastic.co/t/query-performance-after-6-1-1-upgrade/114415)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 7\ **Last updated:** [February 3, 2018, 12:05am UTC](https://discuss.elastic.co/t/query-performance-after-6-1-1-upgrade/114415 "2018-02-03T00:05:01Z")
We have a development / proof of concept / begging for funds stack that has been running for several months. I upgraded from 5.5 to 5.6.5 and everything seemed OK, then I upgraded to 6.1.1. Platform is physical (junk p… --- ## [Filebeat & Kibana error: "Visualize: Fielddata is disabled on text fields by default."](https://discuss.elastic.co/t/filebeat-kibana-error-visualize-fielddata-is-disabled-on-text-fields-by-default/71678)
**Author:** [@rootameen](https://discuss.elastic.co/u/rootameen)\ **Replies:** 1\ **Last updated:** [January 20, 2017, 9:04pm UTC](https://discuss.elastic.co/t/filebeat-kibana-error-visualize-fielddata-is-disabled-on-text-fields-by-default/71678 "2017-01-20T21:04:59Z")
Hi guys, I recently started a new setup of ELK stack based on version 5.1. Everything went smoothly except for the visualization section on Kibana. Whenever I try to create something (like a visual of beat.name), I get … --- ## [Functionbeat cloudwatch S3 AccessDenied](https://discuss.elastic.co/t/functionbeat-cloudwatch-s3-accessdenied/187432)
**Author:** [@Nivead\_Transposit](https://discuss.elastic.co/u/Nivead_Transposit)\ **Replies:** 4\ **Last updated:** [June 26, 2019, 1:56pm UTC](https://discuss.elastic.co/t/functionbeat-cloudwatch-s3-accessdenied/187432 "2019-06-26T13:56:37Z")
Following the documents, I am trying to configure functionbeat to ingest cloudwatch logs to elastic cloud deployment. I have already given 'AmazonS3FullAccess' policy to the IAM user I use for this operation. I just tes… --- ## [How to parallelize ES load operation in Spark using the connector lib?](https://discuss.elastic.co/t/how-to-parallelize-es-load-operation-in-spark-using-the-connector-lib/174618)
**Author:** [@traam](https://discuss.elastic.co/u/traam)\ **Replies:** 4\ **Last updated:** [April 8, 2019, 11:10pm UTC](https://discuss.elastic.co/t/how-to-parallelize-es-load-operation-in-spark-using-the-connector-lib/174618 "2019-04-08T23:10:04Z")
I have a three node Spark cluster (8 cores and 16GB RAM each) in standalone mode. I am using Elasticsearch-hadoop connector to read an ES index. The index is really huge with over 100M documents and has 5 shards and … --- ## [Crash after a few days](https://discuss.elastic.co/t/crash-after-a-few-days/100224)
**Author:** [@Maekee](https://discuss.elastic.co/u/Maekee)\ **Replies:** 4\ **Last updated:** [September 19, 2017, 10:06am UTC](https://discuss.elastic.co/t/crash-after-a-few-days/100224 "2017-09-19T10:06:11Z")
Hello everybody, I have run the ELK-stack on a single server for testing purposes that last week. Everything has worked fine, but i have seen more and more WARN rows in the elasticsearchlogs. And today this happened: … --- ## [No Sort Options on Kibana Lens Table](https://discuss.elastic.co/t/no-sort-options-on-kibana-lens-table/295436)
**Author:** [@Johanes\_Mistrialdo](https://discuss.elastic.co/u/Johanes_Mistrialdo)\ **Replies:** 3\ **Last updated:** [January 27, 2022, 3:22am UTC](https://discuss.elastic.co/t/no-sort-options-on-kibana-lens-table/295436 "2022-01-27T03:22:04Z")
Hi All, I am new to kibana and doesn't know why there is no options to sort by columns... discussion on Sorting in Kibana Data Table Visualization shows that i can sort the table by columns, but i cannot do the same… --- ## [Main ERROR Null object returned for RollingFile in Appenders](https://discuss.elastic.co/t/main-error-null-object-returned-for-rollingfile-in-appenders/246335)
**Author:** [@divya\_lakshmi](https://discuss.elastic.co/u/divya_lakshmi)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 5:24pm UTC](https://discuss.elastic.co/t/main-error-null-object-returned-for-rollingfile-in-appenders/246335 "2020-08-25T17:24:35Z")
i use ES 6.5 , on trying to start ES getting following error 2020-08-25 11:58:01,121 main ERROR Null object returned for RollingFile in Appenders. 2020-08-25 11:58:01,122 main ERROR Unable to locate appender "rolling" … --- ## [Connection to ES nodes can only be made with Elastic Superuser 401 Error](https://discuss.elastic.co/t/connection-to-es-nodes-can-only-be-made-with-elastic-superuser-401-error/160957)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 3\ **Last updated:** [January 10, 2019, 7:49pm UTC](https://discuss.elastic.co/t/connection-to-es-nodes-can-only-be-made-with-elastic-superuser-401-error/160957 "2019-01-10T19:49:13Z")
Elastic version 6.5.1 on RPM I've been working on our encrypted Logstash to Elasticsearch connection and the only way I can get it to work is by using our elastic user (superuser roles). I've followed the instructions … --- ## [Unable to Access Kibana Remotely](https://discuss.elastic.co/t/unable-to-access-kibana-remotely/99607)
**Author:** [@satej.ramdin](https://discuss.elastic.co/u/satej.ramdin)\ **Replies:** 3\ **Last updated:** [September 7, 2017, 11:27am UTC](https://discuss.elastic.co/t/unable-to-access-kibana-remotely/99607 "2017-09-07T11:27:31Z")
Hello I have ELK hosted on Azure VM Windows 2012 server , i am able to access kibana via local host , even after changing the server.host replacing with IP address of the server , but still unable to access the Kibana lo… --- ## [ES-Hadoop 5.0 Spark write issue](https://discuss.elastic.co/t/es-hadoop-5-0-spark-write-issue/68749)
**Author:** [@dudasen](https://discuss.elastic.co/u/dudasen)\ **Replies:** 3\ **Last updated:** [December 12, 2016, 8:55pm UTC](https://discuss.elastic.co/t/es-hadoop-5-0-spark-write-issue/68749 "2016-12-12T20:55:23Z")
I currently have a CDH 5.7.0 with spark and hive running on it. Elastic search version is 5.0 I can read from indexes just fine with spark or hive. when i attempt the write to a index or create a new index it fails. … --- ## [Filebeat multiline help](https://discuss.elastic.co/t/filebeat-multiline-help/43827)
**Author:** [@nradonicich](https://discuss.elastic.co/u/nradonicich)\ **Replies:** 3\ **Last updated:** [March 10, 2016, 11:21am UTC](https://discuss.elastic.co/t/filebeat-multiline-help/43827 "2016-03-10T11:21:45Z")
I am running filebeat v1.1.1 and can't seem to get multiline to work unless the input timeout passes. my data is from NNMi (trying to forward audit to ELK), the data/log looks like... 2016-03-08 14:31:49,744 INFO \[… --- ## [Too Many Open Files](https://discuss.elastic.co/t/too-many-open-files/15344)
**Author:** [@smonasco\_2](https://discuss.elastic.co/u/smonasco_2)\ **Replies:** 3\ **Last updated:** [March 4, 2014, 7:58pm UTC](https://discuss.elastic.co/t/too-many-open-files/15344 "2014-03-04T19:58:08Z")
Hi, I am using version 0.19.3 I have the nofile limit set to 128K and am getting errors like \[2014-01-18 06:52:54,857\]\[WARN \]\[netty.channel.socket.nio.NioServerSocketPipelineSink\] Failed to initialize an acce… --- ## [Optimizing --\> Invalid assignment error](https://discuss.elastic.co/t/optimizing-invalid-assignment-error/136831)
**Author:** [@jesusgn90](https://discuss.elastic.co/u/jesusgn90)\ **Replies:** 6\ **Last updated:** [June 21, 2018, 6:43pm UTC](https://discuss.elastic.co/t/optimizing-invalid-assignment-error/136831 "2018-06-21T18:43:53Z")
Struggling with the next error: Plugin installation was unsuccessful due to error "Command failed: /usr/share/kibana/node/bin/node /usr/share/kibana/src/cli --env.name=production --optimize.useBundleCache=false --server… --- ## [Multiple path.data for one elastic data node](https://discuss.elastic.co/t/multiple-path-data-for-one-elastic-data-node/116884)
**Author:** [@111126](https://discuss.elastic.co/u/111126)\ **Replies:** 6\ **Last updated:** [January 30, 2018, 3:05pm UTC](https://discuss.elastic.co/t/multiple-path-data-for-one-elastic-data-node/116884 "2018-01-30T15:05:29Z")
Hello. Explain me please, how to work elastic data node if I set multiple path.data with different volumes. For explain, I set path.data: \[/path/for/data1, /path/for/data2, /path/for/data3\] where /path/for/data1 - 1Tb … --- ## [Logstash stops automatically with an error](https://discuss.elastic.co/t/logstash-stops-automatically-with-an-error/43774)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 6\ **Last updated:** [March 8, 2016, 3:32pm UTC](https://discuss.elastic.co/t/logstash-stops-automatically-with-an-error/43774 "2016-03-08T15:32:00Z")
Hi Experts, My logstash1.5.4 stops working with the flowing error . Please help me to resolve and understand this issue . {:timestamp=\>"2016-03-08T17:01:33.421000+0530", :message=\>"Failed to flush outgoing items", :o… --- ## [Elasticsearchでidの自動採番について](https://discuss.elastic.co/t/elasticsearch-id/256726)
**Author:** [@Tasu](https://discuss.elastic.co/u/Tasu)\ **Replies:** 2\ **Last updated:** [November 27, 2020, 4:31am UTC](https://discuss.elastic.co/t/elasticsearch-id/256726 "2020-11-27T04:31:03Z")
logstashからElasticsearchにデータを送っています。 データが送られると、elasticsearchでidが自動採番されると思うのですが、 idには桁数や数の制限はあるのでしょうか？ ご存じのかたおられましたらご教示ください。 --- ## [Still getting emails from sub forums](https://discuss.elastic.co/t/still-getting-emails-from-sub-forums/85333)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 2\ **Last updated:** [May 11, 2017, 5:54pm UTC](https://discuss.elastic.co/t/still-getting-emails-from-sub-forums/85333 "2017-05-11T17:54:02Z")
Might be similar to https://discuss.elastic.co/t/getting-mail-from-all-topics-just-not-the-ones-im-following/84900 I set the #beats:metricbeat to normal: But I'm still getting email notifications: Wondering if I d… --- ## [Logstash JVM GC "Allocation Failure"](https://discuss.elastic.co/t/logstash-jvm-gc-allocation-failure/42498)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 2\ **Last updated:** [February 23, 2016, 7:26pm UTC](https://discuss.elastic.co/t/logstash-jvm-gc-allocation-failure/42498 "2016-02-23T19:26:52Z")
I run Logstash 2.2 with head size of 8G: export LS\_HEAP\_SIZE=8G exec setuser logstash logstash agent --pipeline-workers 4 --pipeline-batch-size 2500 --pipeline-batch-delay 10 -f /etc/service/logstash/logstas… --- ## [How to check python test coverage against go lang code](https://discuss.elastic.co/t/how-to-check-python-test-coverage-against-go-lang-code/33010)
**Author:** [@Prerna\_Manaktala](https://discuss.elastic.co/u/Prerna_Manaktala)\ **Replies:** 2\ **Last updated:** [October 27, 2015, 4:53am UTC](https://discuss.elastic.co/t/how-to-check-python-test-coverage-against-go-lang-code/33010 "2015-10-27T04:53:05Z")
Hi I am able to generate the \*.test files in the go lang code and also run the ./value.test -systemTest -test.coverprofile coverage.cov to generate various coverage.cov files and unit.cov files separately. But I did… --- ## [Date range query](https://discuss.elastic.co/t/date-range-query/2930)
**Author:** [@talsalmona](https://discuss.elastic.co/u/talsalmona)\ **Replies:** 2\ **Last updated:** [May 3, 2010, 8:08pm UTC](https://discuss.elastic.co/t/date-range-query/2930 "2010-05-03T20:08:42Z")
Hi, I have an index that was created with the following calls: curl -XPUT 'http://localhost:9200/t/o/1' -d '{name:"May 1st", date:"2010-05-01"}' curl -XPUT 'http://localhost:9200/t/o/2' -d '{name:"May 2nd", date:"… --- ## [Does utf8json used in elastic v7.x support user defined custom formatters?](https://discuss.elastic.co/t/does-utf8json-used-in-elastic-v7-x-support-user-defined-custom-formatters/237283)
**Author:** [@stoj](https://discuss.elastic.co/u/stoj)\ **Replies:** 5\ **Last updated:** [June 23, 2020, 9:43pm UTC](https://discuss.elastic.co/t/does-utf8json-used-in-elastic-v7-x-support-user-defined-custom-formatters/237283 "2020-06-23T21:43:29Z")
I've got an interesting situation whereby elastic v7 default utf8json has managed to serialize my object, but is unable to de-serialize it correctly. public class MyClass : FlagsSet { \[JsonIgnore\] … --- ## [Elastic.co blog RSS URL missing](https://discuss.elastic.co/t/elastic-co-blog-rss-url-missing/22880)
**Author:** [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Replies:** 5\ **Last updated:** [April 15, 2016, 2:53pm UTC](https://discuss.elastic.co/t/elastic-co-blog-rss-url-missing/22880 "2016-04-15T14:53:55Z")
The not too widely announced move from elasticsearch.(com|org) to elastic.co the other week seems to have broken the old Elasticsearch blog RSS feed, and I can’t find the RSS URL for the replacement elastic.co blog. P… --- ## [Elasticsearch is asking for authentication after running .bat file](https://discuss.elastic.co/t/elasticsearch-is-asking-for-authentication-after-running-bat-file/174629)
**Author:** [@Ashwin\_srivatsa](https://discuss.elastic.co/u/Ashwin_srivatsa)\ **Replies:** 8\ **Last updated:** [April 13, 2019, 1:20pm UTC](https://discuss.elastic.co/t/elasticsearch-is-asking-for-authentication-after-running-bat-file/174629 "2019-04-13T13:20:45Z")
I am trying elasticsearch for the first time but when i hit http://localhost:9200 it is asking me to authenticate using username and password. how do i get rid of it. thanks --- ## [Setting timezone in painless source](https://discuss.elastic.co/t/setting-timezone-in-painless-source/203278)
**Author:** [@jwallace](https://discuss.elastic.co/u/jwallace)\ **Replies:** 1\ **Last updated:** [October 12, 2019, 6:47pm UTC](https://discuss.elastic.co/t/setting-timezone-in-painless-source/203278 "2019-10-12T18:47:02Z")
I am having trouble setting timezone in a query. I am attempting to group data into day of the week over a time period of a month (so all mondays, tuesdays, etc would be grouped). I am doing this by doing a query for the… --- ## [Possible to load map without internet connection?](https://discuss.elastic.co/t/possible-to-load-map-without-internet-connection/180475)
**Author:** [@jrplus](https://discuss.elastic.co/u/jrplus)\ **Replies:** 1\ **Last updated:** [May 10, 2019, 4:49pm UTC](https://discuss.elastic.co/t/possible-to-load-map-without-internet-connection/180475 "2019-05-10T16:49:19Z")
The issue is that our Kibana has to be in an instance where there is no internet connection (organization regulations). And because of that, maps are not loading as there is no internet connection for CORS to work as per… --- ## [Using Basic Auth Reverse Proxy for iframe Kibana Dashboard](https://discuss.elastic.co/t/using-basic-auth-reverse-proxy-for-iframe-kibana-dashboard/140945)
**Author:** [@synack.d](https://discuss.elastic.co/u/synack.d)\ **Replies:** 1\ **Last updated:** [August 6, 2018, 2:55pm UTC](https://discuss.elastic.co/t/using-basic-auth-reverse-proxy-for-iframe-kibana-dashboard/140945 "2018-08-06T14:55:50Z")
I'm developing an application that embeds one of my company's internal Kibana dashboards into an iframe so that the application's users have restricted access to only a specific dashboard. I'm using an Nginx reverse pro… --- ## [Dot product in Elastic Search](https://discuss.elastic.co/t/dot-product-in-elastic-search/31746)
**Author:** [@cuongvt101](https://discuss.elastic.co/u/cuongvt101)\ **Replies:** 1\ **Last updated:** [October 8, 2015, 3:49pm UTC](https://discuss.elastic.co/t/dot-product-in-elastic-search/31746 "2015-10-08T15:49:52Z")
How can I do dot product in Elastic Search? Let's say my indexed documents in the form: { "name": "...", "features": \[ {"f\_i": 0.xxx}, ... {"f\_j": 0.xxx} \] } For example, one document coul… --- ## [Failed to authenticate user with OpenID Connect in trial version of elasticsearch](https://discuss.elastic.co/t/failed-to-authenticate-user-with-openid-connect-in-trial-version-of-elasticsearch/227348)
**Author:** [@viveknagar](https://discuss.elastic.co/u/viveknagar)\ **Replies:** 4\ **Last updated:** [April 10, 2020, 7:15am UTC](https://discuss.elastic.co/t/failed-to-authenticate-user-with-openid-connect-in-trial-version-of-elasticsearch/227348 "2020-04-10T07:15:21Z")
Hello All, I am using elasticsearch 7.5.2 and kbana 7.5.2 with this i am using keyclock as OP . I have enabled trial version for 30 to run single-sign-on on elasticsearch . But I am getting below error in elasticsearch. … --- ## [Elastic nodes and kibana on different VM](https://discuss.elastic.co/t/elastic-nodes-and-kibana-on-different-vm/156542)
**Author:** [@Sj\_Tom](https://discuss.elastic.co/u/Sj_Tom)\ **Replies:** 4\ **Last updated:** [November 14, 2018, 11:04pm UTC](https://discuss.elastic.co/t/elastic-nodes-and-kibana-on-different-vm/156542 "2018-11-14T23:04:56Z")
I have deployed elastic nodes, logstash through azure template. i have installed kibana on a separate VM. Kibana is not communicating with elasticsearch. elasticsearch.yml cluster.name: "rsxxxxxx" node.name: "DvELKdat… --- ## [Geoip "illegal latitude" after upgrading 1.5 -\> 2.1](https://discuss.elastic.co/t/geoip-illegal-latitude-after-upgrading-1-5-2-1/40083)
**Author:** [@ceekay](https://discuss.elastic.co/u/ceekay)\ **Replies:** 4\ **Last updated:** [January 23, 2017, 3:53am UTC](https://discuss.elastic.co/t/geoip-illegal-latitude-after-upgrading-1-5-2-1/40083 "2017-01-23T03:53:32Z")
I've just upgraded some boxes from 1.5 to 2.1 and have been getting indexing errors for all messages containing geoip data ever since. Messages that don't contain geoip info are indexing without errors. As far as I c… --- ## [Not capturing MySQL Prepared Statements](https://discuss.elastic.co/t/not-capturing-mysql-prepared-statements/42683)
**Author:** [@ferrydg](https://discuss.elastic.co/u/ferrydg)\ **Replies:** 4\ **Last updated:** [February 26, 2016, 7:12am UTC](https://discuss.elastic.co/t/not-capturing-mysql-prepared-statements/42683 "2016-02-26T07:12:17Z")
Hi, I am trying to monitor the traffic to our Percona XtraDB cluster but packetbeat only catches the "start transaction" and "commit" statements of my laravel application. The rest result in "WARN Response from unknown… --- ## [Fleet Server 8.19.15, 9.3.4, 9.4.0 Security Update (ESA-2026-41)](https://discuss.elastic.co/t/fleet-server-8-19-15-9-3-4-9-4-0-security-update-esa-2026-41/387438)
**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\ **Replies:** 0\ **Last updated:** [July 1, 2026, 1:48pm UTC](https://discuss.elastic.co/t/fleet-server-8-19-15-9-3-4-9-4-0-security-update-esa-2026-41/387438 "2026-07-01T13:48:04Z")
Dependency on Vulnerable Third-Party Component in Fleet Server Leading to Denial of Service Dependency on Vulnerable Third-Party Component (CWE-1395) exists in the Go standard library used by Fleet Server that could all… --- ## [Signal Field Schema Documentation](https://discuss.elastic.co/t/signal-field-schema-documentation/274912)
**Author:** [@Amorik](https://discuss.elastic.co/u/Amorik)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 7:06pm UTC](https://discuss.elastic.co/t/signal-field-schema-documentation/274912 "2021-06-03T19:06:27Z")
Detection's creates the .siem-signals index responsible for housing alerts generated by the system. While it conforms to ECS the fields under signal.\* are not documented GitHub - elastic/ecs: Elastic Common Schema. Is th… --- ## [Sending output to two indices](https://discuss.elastic.co/t/sending-output-to-two-indices/282909)
**Author:** [@proxymoxy](https://discuss.elastic.co/u/proxymoxy)\ **Replies:** 2\ **Last updated:** [September 1, 2021, 10:24am UTC](https://discuss.elastic.co/t/sending-output-to-two-indices/282909 "2021-09-01T10:24:12Z")
Hi, I am in the process of implementing Filebeat/Elasticsearch (not using logstash) to index my logs and create some graphics in Kibana. I have set up the system module in Filebeat which works fine and sends the logs to… --- ## [Problem getting Windows Event log inside ELK](https://discuss.elastic.co/t/problem-getting-windows-event-log-inside-elk/54043)
**Author:** [@Gennady\_Sorochan](https://discuss.elastic.co/u/Gennady_Sorochan)\ **Replies:** 2\ **Last updated:** [June 29, 2016, 9:28am UTC](https://discuss.elastic.co/t/problem-getting-windows-event-log-inside-elk/54043 "2016-06-29T09:28:57Z")
Hey. We're test ELK for for accumulating logs from various systems. We're using ELK on Windows and nxlog to forward logs from the Windows servers to the ELK server. Getting IIS logs works fine. Once we're starting fo… --- ## [Field change value](https://discuss.elastic.co/t/field-change-value/263738)
**Author:** [@paasi6666](https://discuss.elastic.co/u/paasi6666)\ **Replies:** 3\ **Last updated:** [February 9, 2021, 3:20pm UTC](https://discuss.elastic.co/t/field-change-value/263738 "2021-02-09T15:20:30Z")
I want to change the value of the field user.id , so that it only shows the username. In this example, I want to remove the "slu" so that the value only shows "AlbissR" and not "slu\\AlbissR" --- ## [Import large PCAP with Packetbeat](https://discuss.elastic.co/t/import-large-pcap-with-packetbeat/203578)
**Author:** [@sutello](https://discuss.elastic.co/u/sutello)\ **Replies:** 3\ **Last updated:** [October 17, 2019, 1:52pm UTC](https://discuss.elastic.co/t/import-large-pcap-with-packetbeat/203578 "2019-10-17T13:52:51Z")
Hey, we sitting here in a Study-Project in Germany and want to work with packetbeat and ELK to find security issues in network-traffic. The live-capturing works fine. Now, we want to import our old PCAP-files from the … --- ## [APM Server has still not connected to Elasticsearch](https://discuss.elastic.co/t/apm-server-has-still-not-connected-to-elasticsearch/183133)
**Author:** [@Gidi\_Kalef](https://discuss.elastic.co/u/Gidi_Kalef)\ **Replies:** 3\ **Last updated:** [May 28, 2019, 4:24pm UTC](https://discuss.elastic.co/t/apm-server-has-still-not-connected-to-elasticsearch/183133 "2019-05-28T16:24:51Z")
Hi Guys, i installed APM server and config it to connect to my elastic, when i click " APM Server status" button i get the following message: "APM Server has still not connected to Elasticsearch" although in apm -serv… --- ## [Document similarity problem](https://discuss.elastic.co/t/document-similarity-problem/116429)
**Author:** [@jiangshigen](https://discuss.elastic.co/u/jiangshigen)\ **Replies:** 3\ **Last updated:** [January 24, 2018, 6:32am UTC](https://discuss.elastic.co/t/document-similarity-problem/116429 "2018-01-24T06:32:07Z")
\[image\]I use this way to achieve some documents, howerer,the relevance scoring of each document is 1. template example: { "query": { "bool": { "must": \[ { "query\_string": { "default\_field": "progress\_note", "que… --- ## [WARN netty:620 - \[node-1\] exception caught on transport layer](https://discuss.elastic.co/t/warn-netty-620-node-1-exception-caught-on-transport-layer/43218)
**Author:** [@h\_w](https://discuss.elastic.co/u/h_w)\ **Replies:** 3\ **Last updated:** [March 8, 2016, 10:41am UTC](https://discuss.elastic.co/t/warn-netty-620-node-1-exception-caught-on-transport-layer/43218 "2016-03-08T10:41:49Z")
Hello. I wonder if someone could help me with this error. I am trying to get cassanda + elasticsearch + usergrid up and running. My cassandra is healthy and when I do a "curl -v localhost:9200" I get a nice reply: { … --- ## [Testing Protocol with Packets out of order](https://discuss.elastic.co/t/testing-protocol-with-packets-out-of-order/34321)
**Author:** [@lonangel](https://discuss.elastic.co/u/lonangel)\ **Replies:** 3\ **Last updated:** [November 17, 2015, 5:35pm UTC](https://discuss.elastic.co/t/testing-protocol-with-packets-out-of-order/34321 "2015-11-17T17:35:16Z")
Hi, Sorry if this is a very noobish question but I'm only starting with packetbeat and Go. I've been playing around with packetbeat and the ELK stack and decided to implement a new protocol to test how packet beat work… --- ## [Kibana server is not ready after upgrading to 7.10](https://discuss.elastic.co/t/kibana-server-is-not-ready-after-upgrading-to-7-10/256029)
**Author:** [@patrickr](https://discuss.elastic.co/u/patrickr)\ **Replies:** 6\ **Last updated:** [November 19, 2020, 8:19pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-after-upgrading-to-7-10/256029 "2020-11-19T20:19:34Z")
Hello, We seem to constantly have issues when attempting to upgrade. This time, after the upgrade is complete and the server has rebooted, we simply get a kibana is not ready message. Can someone provide any informati… --- ## [\[APM\] ASP.Net Agent no span data captured in Elasticsearch](https://discuss.elastic.co/t/apm-asp-net-agent-no-span-data-captured-in-elasticsearch/218491)
**Author:** [@ryan.xu](https://discuss.elastic.co/u/ryan.xu)\ **Replies:** 6\ **Last updated:** [February 19, 2020, 1:20am UTC](https://discuss.elastic.co/t/apm-asp-net-agent-no-span-data-captured-in-elasticsearch/218491 "2020-02-19T01:20:56Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.5.… [Previous page](https://discuss.elastic.co/top.md?page=953&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=955&per_page=50&period=all)