# Top **URL:** https://discuss.elastic.co/top.md?page=97&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 98 --- ## [Stop proccesing events/lines after first grok match](https://discuss.elastic.co/t/stop-proccesing-events-lines-after-first-grok-match/214696)
**Author:** [@nino](https://discuss.elastic.co/u/nino)\ **Replies:** 10\ **Last updated:** [January 12, 2020, 11:41pm UTC](https://discuss.elastic.co/t/stop-proccesing-events-lines-after-first-grok-match/214696 "2020-01-12T23:41:16Z")
Hello all, i am not be able to avoid logstash continues proccesing events after grok patter matched. I just want to index the first occurence of the entire file. Here is what i have: File content first line content... … --- ## [Can we limit es master instance disk size to specified number no matter how much its memory size is?](https://discuss.elastic.co/t/can-we-limit-es-master-instance-disk-size-to-specified-number-no-matter-how-much-its-memory-size-is/170640)
**Author:** [@rockybean](https://discuss.elastic.co/u/rockybean)\ **Replies:** 16\ **Last updated:** [March 6, 2019, 10:58am UTC](https://discuss.elastic.co/t/can-we-limit-es-master-instance-disk-size-to-specified-number-no-matter-how-much-its-memory-size-is/170640 "2019-03-06T10:58:31Z")
Hi, In ECE template configuration page, we can create dedicated master type instance. For sizing part, we can set memory-to-disk ratio. If we set a high ratio like 32, ece will allocate 32GB disk per 1GB memory. So i… --- ## [Exiting: error connecting to Kibana: fail to get the Kibana version: fail to parse kibana version (): passed version is not semver:](https://discuss.elastic.co/t/exiting-error-connecting-to-kibana-fail-to-get-the-kibana-version-fail-to-parse-kibana-version-passed-version-is-not-semver/353450)
**Author:** [@alsoGAMER](https://discuss.elastic.co/u/alsoGAMER)\ **Replies:** 20\ **Last updated:** [February 19, 2024, 2:35pm UTC](https://discuss.elastic.co/t/exiting-error-connecting-to-kibana-fail-to-get-the-kibana-version-fail-to-parse-kibana-version-passed-version-is-not-semver/353450 "2024-02-19T14:35:15Z")
I'm trying to setup an ELK instance to use as a winlogbeat output, and even though both the ELK stack and winlogbeat versions are the exact same, I'm getting this cryptic error: Exiting: error connecting to Kibana: fail… --- ## [Horrible indexing performance as index size grows](https://discuss.elastic.co/t/horrible-indexing-performance-as-index-size-grows/61674)
**Author:** [@jorgen](https://discuss.elastic.co/u/jorgen)\ **Replies:** 12\ **Last updated:** [September 29, 2016, 10:21am UTC](https://discuss.elastic.co/t/horrible-indexing-performance-as-index-size-grows/61674 "2016-09-29T10:21:47Z")
Let me first say that due to an API we use, we are atm. locked to ES 0.90.12, so it would be great if any advice you have applies to that version of ES. We have an ES-cluster with two nodes, each node is a CentOS-VM w… --- ## [Kibana login Issue due to space full](https://discuss.elastic.co/t/kibana-login-issue-due-to-space-full/328153)
**Author:** [@elasticlog](https://discuss.elastic.co/u/elasticlog)\ **Replies:** 11\ **Last updated:** [March 23, 2023, 12:15pm UTC](https://discuss.elastic.co/t/kibana-login-issue-due-to-space-full/328153 "2023-03-23T12:15:27Z")
Hello Expert, We have created the Kibana and Elasticsearch with filebeat. Below are the details. Kibana version: 7.14.1. running in Kubernetes. Issue: Not able to login to Kibana as Elasticsearch space is full. but … --- ## [Any interest in an Elasticsearch query language (EQL)?](https://discuss.elastic.co/t/any-interest-in-an-elasticsearch-query-language-eql/2132)
**Author:** [@metadave](https://discuss.elastic.co/u/metadave)\ **Replies:** 11\ **Last updated:** [July 29, 2015, 5:20am UTC](https://discuss.elastic.co/t/any-interest-in-an-elasticsearch-query-language-eql/2132 "2015-07-29T05:20:39Z")
Hello - I spent a few hours getting a prototype of an Elasticsearch query language (dubbed "eql") up and running \[0\]. I'm posting here to see if there is any interest at all in a project like this. Here are some ex… --- ## [Volume claim templates cannot be modified](https://discuss.elastic.co/t/volume-claim-templates-cannot-be-modified/219493)
**Author:** [@NickL2](https://discuss.elastic.co/u/NickL2)\ **Replies:** 9\ **Last updated:** [May 17, 2020, 7:40am UTC](https://discuss.elastic.co/t/volume-claim-templates-cannot-be-modified/219493 "2020-05-17T07:40:58Z")
Hi there, I'm trying to upgrade my ECK cluster by bumping up the apiVersion from elasticsearch.k8s.elastic.co/v1beta1 to elasticsearch.k8s.elastic.co/v1 and bumping the version from 7.5.1 to 7.6.0. After applying the c… --- ## [Filebeat error on Windows: index management requested but the Elasticsearch output is not configured/enabled](https://discuss.elastic.co/t/filebeat-error-on-windows-index-management-requested-but-the-elasticsearch-output-is-not-configured-enabled/353310)
**Author:** [@tcalvillo](https://discuss.elastic.co/u/tcalvillo)\ **Replies:** 17\ **Last updated:** [February 15, 2024, 9:42pm UTC](https://discuss.elastic.co/t/filebeat-error-on-windows-index-management-requested-but-the-elasticsearch-output-is-not-configured-enabled/353310 "2024-02-15T21:42:26Z")
Hello Filebeat team, I did my due-diligence and did read all the posts with same error as mine but still stuck. I'm following this doc-\> Filebeat quick start: installation and configuration | Filebeat Reference \[8.12\] … --- ## [Uploading sourcemaps from AIX webserver](https://discuss.elastic.co/t/uploading-sourcemaps-from-aix-webserver/303526)
**Author:** [@Hamunaptroid](https://discuss.elastic.co/u/Hamunaptroid)\ **Replies:** 17\ **Last updated:** [June 24, 2022, 2:41pm UTC](https://discuss.elastic.co/t/uploading-sourcemaps-from-aix-webserver/303526 "2022-06-24T14:41:46Z")
Hello, I can't figure out how to upload sourcemaps to kibana. \*\*Config for APM\*\* // using full condition instead of PROD variable (webpack will remove this code if syntax is like this) if (process.env.NODE\_ENV === 'pro… --- ## [Total Hits in elastic Search prepareSearch() behaves in an inconsistent manner](https://discuss.elastic.co/t/total-hits-in-elastic-search-preparesearch-behaves-in-an-inconsistent-manner/150963)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 14\ **Last updated:** [October 15, 2018, 11:21am UTC](https://discuss.elastic.co/t/total-hits-in-elastic-search-preparesearch-behaves-in-an-inconsistent-manner/150963 "2018-10-15T11:21:15Z")
I'm new to ElasticSearch and my scenario is something like, there is an index with some 100 documents. I'm using following snippet to retrieve those ListenableActionFuture f = esClient.prepareSearch(index) .setTypes(typ… --- ## [Filter latest record for each user and aggregate on different field in elasticsearch](https://discuss.elastic.co/t/filter-latest-record-for-each-user-and-aggregate-on-different-field-in-elasticsearch/250435)
**Author:** [@matrix1](https://discuss.elastic.co/u/matrix1)\ **Replies:** 15\ **Last updated:** [October 2, 2020, 10:05am UTC](https://discuss.elastic.co/t/filter-latest-record-for-each-user-and-aggregate-on-different-field-in-elasticsearch/250435 "2020-10-02T10:05:18Z")
Need to filter the latest record for each user and aggregate the count on each vote type. Still cannot able to figure out. any help pls? {user:"sam", vote: 20, "createdDate": 1601285178238} {user:"sam", vote: 21, "crea… --- ## [Embedded JSON written by realtime logger](https://discuss.elastic.co/t/embedded-json-written-by-realtime-logger/42519)
**Author:** [@CPoston](https://discuss.elastic.co/u/CPoston)\ **Replies:** 12\ **Last updated:** [March 2, 2016, 2:51pm UTC](https://discuss.elastic.co/t/embedded-json-written-by-realtime-logger/42519 "2016-03-02T14:51:40Z")
Very new to ElasticSearch - working on a first demo. I have a simple question: my logger is emitting log entries with embedded Json and want to be able to index these embedded portions the same as the whole. How do I d… --- ## [Unable to login](https://discuss.elastic.co/t/unable-to-login/257605)
**Author:** [@georgina](https://discuss.elastic.co/u/georgina)\ **Replies:** 11\ **Last updated:** [January 28, 2021, 7:23am UTC](https://discuss.elastic.co/t/unable-to-login/257605 "2021-01-28T07:23:57Z")
Hi, I've just installed Elasticsearch, Kibana and Enterprise Search via docker on desktop. It is a three node elastic cluster with Kibana and enterprise search https://www.elastic.co/guide/en/elastic-stack-get-started… --- ## [Filebeat don't pick up overwritten log file](https://discuss.elastic.co/t/filebeat-dont-pick-up-overwritten-log-file/140360)
**Author:** [@lueneburger](https://discuss.elastic.co/u/lueneburger)\ **Replies:** 9\ **Last updated:** [July 23, 2018, 7:13am UTC](https://discuss.elastic.co/t/filebeat-dont-pick-up-overwritten-log-file/140360 "2018-07-23T07:13:41Z")
Hi Everyone, already looked here and Fielbeat documentation, but something isn't working :confused: there is only 1 log file that i want to collect and this one get overwritten every 3 minutes. i already added close\_e… --- ## [Kubernetes Module \[Kubelet SSL\]](https://discuss.elastic.co/t/kubernetes-module-kubelet-ssl/147770)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 10\ **Last updated:** [September 14, 2018, 1:02pm UTC](https://discuss.elastic.co/t/kubernetes-module-kubelet-ssl/147770 "2018-09-14T13:02:37Z")
Hi everyone, I have installed Kubernetes v1.11.2 by Kubeadm. I have configured Metricbeat (on Kubernetes) in order to get some metrics from Kubelet, however, I am not able to run it. I suppose that I have to use the ce… --- ## [FsCrawler 2.10 Rest Service upload returns error for file more than 20 MB](https://discuss.elastic.co/t/fscrawler-2-10-rest-service-upload-returns-error-for-file-more-than-20-mb/342706)
**Author:** [@Nilesh\_Pegasus](https://discuss.elastic.co/u/Nilesh_Pegasus)\ **Replies:** 12\ **Last updated:** [September 18, 2023, 6:00am UTC](https://discuss.elastic.co/t/fscrawler-2-10-rest-service-upload-returns-error-for-file-more-than-20-mb/342706 "2023-09-18T06:00:00Z")
Hi, I am using FsCrawler 2.10 with elasticsearch 8.9, I am trying to upload a 20Mb .msg file using rest service of FsCrawler, but it gives error. Please note that I am able to upload smaller files without any issues. F… --- ## [Compilation dockerbeat](https://discuss.elastic.co/t/compilation-dockerbeat/43393)
**Author:** [@axil\_76](https://discuss.elastic.co/u/axil_76)\ **Replies:** 16\ **Last updated:** [June 21, 2016, 1:16pm UTC](https://discuss.elastic.co/t/compilation-dockerbeat/43393 "2016-06-21T13:16:19Z")
Hello, I have a client compilation problem dockerbeat make first make sure we have godep go get github.com/tools/godep /usr/bin/godep go build github.com/elastic/beats/libbeat/logp Godeps/\_workspace/src/github.com… --- ## [Help with search on website](https://discuss.elastic.co/t/help-with-search-on-website/100321)
**Author:** [@tomsk](https://discuss.elastic.co/u/tomsk)\ **Replies:** 16\ **Last updated:** [September 25, 2017, 10:28am UTC](https://discuss.elastic.co/t/help-with-search-on-website/100321 "2017-09-25T10:28:11Z")
I am creating a search on website based on ElasticSearch, and I am very new to ElasticSearch so I would be happy for any help. This is a structure of my ElasticSearch content: hits: 0: \_index: "mysite"… --- ## [How to save and retrieve usernames and passwords from logstash config](https://discuss.elastic.co/t/how-to-save-and-retrieve-usernames-and-passwords-from-logstash-config/73037)
**Author:** [@gmmurugan](https://discuss.elastic.co/u/gmmurugan)\ **Replies:** 10\ **Last updated:** [February 1, 2017, 1:50pm UTC](https://discuss.elastic.co/t/how-to-save-and-retrieve-usernames-and-passwords-from-logstash-config/73037 "2017-02-01T13:50:21Z")
i need to get a password to connect to database using jdbc plugin. please let me know best vault method to use inside logstash config jdbc\_connection\_string =\> "jdbc:db2://xxxxxxxxxxxxxx:port" jdbc\_user =\> "username" … --- ## [OutOfMemoryError ELK 5.0.2](https://discuss.elastic.co/t/outofmemoryerror-elk-5-0-2/69645)
**Author:** [@nugusbayevkk](https://discuss.elastic.co/u/nugusbayevkk)\ **Replies:** 10\ **Last updated:** [December 21, 2016, 11:21am UTC](https://discuss.elastic.co/t/outofmemoryerror-elk-5-0-2/69645 "2016-12-21T11:21:46Z")
Hello guys, today i had problem with ELK. Next error i had in my log: 2016-12-21T14:21:54,206\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[node-1\] fatal error in thread \[elasticsearch\[node-1\]\[generic\]\[T#8\]\], exi… --- ## [SSD and one replica vs HDD and more replicas](https://discuss.elastic.co/t/ssd-and-one-replica-vs-hdd-and-more-replicas/62078)
**Author:** [@Krzysztof\_Barzyk](https://discuss.elastic.co/u/Krzysztof_Barzyk)\ **Replies:** 9\ **Last updated:** [October 4, 2016, 12:39pm UTC](https://discuss.elastic.co/t/ssd-and-one-replica-vs-hdd-and-more-replicas/62078 "2016-10-04T12:39:02Z")
We are monitoring the internet and we have aggregated a large base of documents. We currently have 1 165 908 189 documents, which we want to emigrate to elasticsearch, and we would like to ask you a few questions. Th… --- ## [Data mixed between indices](https://discuss.elastic.co/t/data-mixed-between-indices/41355)
**Author:** [@LoZio](https://discuss.elastic.co/u/LoZio)\ **Replies:** 9\ **Last updated:** [February 11, 2016, 8:13am UTC](https://discuss.elastic.co/t/data-mixed-between-indices/41355 "2016-02-11T08:13:31Z")
I have a pretty simple setup. ES 2.2 and logstash 2.2.0. I have several conf for logstash, each one defines a port to listen to, labels data with "type=\>xyz" and puts in an index with the same name and date time referen… --- ## [Kibana server not starting up](https://discuss.elastic.co/t/kibana-server-not-starting-up/257944)
**Author:** [@sudhakar\_u](https://discuss.elastic.co/u/sudhakar_u)\ **Replies:** 16\ **Last updated:** [December 9, 2020, 4:42am UTC](https://discuss.elastic.co/t/kibana-server-not-starting-up/257944 "2020-12-09T04:42:37Z")
iam seeing this error in the logs.It was working fine till 1 day back.Whta could be the issue here. i restarted the kibana.Still the same issue.ECerything was properly setup. {"type":"log","@timestamp":"2020-12-08T06:5… --- ## [Service Account Unable to Authenticate](https://discuss.elastic.co/t/service-account-unable-to-authenticate/364734)
**Author:** [@Matt\_Clairmont](https://discuss.elastic.co/u/Matt_Clairmont)\ **Replies:** 11\ **Last updated:** [August 20, 2024, 10:20pm UTC](https://discuss.elastic.co/t/service-account-unable-to-authenticate/364734 "2024-08-20T22:20:02Z")
Hello, I have a healthy single node elasticsearch cluster but when I created a service token and plugged it into the kibana.yml file, I'm receiving an authentication error. { "name" : "es01", "cluster\_name" : "SANI… --- ## [Sustainable way to regularly purge deleted docs](https://discuss.elastic.co/t/sustainable-way-to-regularly-purge-deleted-docs/19402)
**Author:** [@Jonathan\_Foy](https://discuss.elastic.co/u/Jonathan_Foy)\ **Replies:** 11\ **Last updated:** [December 20, 2014, 6:44pm UTC](https://discuss.elastic.co/t/sustainable-way-to-regularly-purge-deleted-docs/19402 "2014-12-20T18:44:23Z")
Hello I'm in the process of putting a two-node Elasticsearch cluster (1.1.2) into production, but I'm having a bit of trouble keeping it stable enough for comfort. Specifically, I'm trying to figure out the best … --- ## [Unable to start Elasticsearch in Windows10](https://discuss.elastic.co/t/unable-to-start-elasticsearch-in-windows10/227789)
**Author:** [@srivatsans](https://discuss.elastic.co/u/srivatsans)\ **Replies:** 14\ **Last updated:** [April 16, 2020, 8:56am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-in-windows10/227789 "2020-04-16T08:56:40Z")
I have downloaded 7.6.2 and 7.5.0 .zip versions of ES and unzipped them. When I run '.\\bin\\elasticsearch.bat', it throws error 'The system cannot open the device or file specified'. I have set the JAVA\_HOME to the JRE pa… --- ## [Snapshots not working](https://discuss.elastic.co/t/snapshots-not-working/145653)
**Author:** [@amit.patra](https://discuss.elastic.co/u/amit.patra)\ **Replies:** 13\ **Last updated:** [September 6, 2018, 11:22am UTC](https://discuss.elastic.co/t/snapshots-not-working/145653 "2018-09-06T11:22:15Z")
Hi , I have installed and configured Elastic-search (Multi Node) Cluster on RHEL 6.9. Master : 192.168.2.79 Data-Node1 : 192.168.2.80 Data-Node2 : 192.168.2.81 I have set path.repo: \["/home/es-backup/es\_backup\_basic… --- ## [Cannot connect to localhost:9200/](https://discuss.elastic.co/t/cannot-connect-to-localhost-9200/138158)
**Author:** [@Sonny\_Berggreen\_Mads](https://discuss.elastic.co/u/Sonny_Berggreen_Mads)\ **Replies:** 9\ **Last updated:** [July 2, 2018, 12:38pm UTC](https://discuss.elastic.co/t/cannot-connect-to-localhost-9200/138158 "2018-07-02T12:38:55Z")
Hi, I'm not able to connect to localhost:9200/, can anybody help me? Thanks. Best Sonny --- ## [Elasticsearch losing data](https://discuss.elastic.co/t/elasticsearch-losing-data/67953)
**Author:** [@keshav](https://discuss.elastic.co/u/keshav)\ **Replies:** 9\ **Last updated:** [December 5, 2016, 8:00am UTC](https://discuss.elastic.co/t/elasticsearch-losing-data/67953 "2016-12-05T08:00:48Z")
I have a single node ES cluster with 26 GB RAM, 4 CPUs and 13 GB Heap Space. I am loading data into ES using threading in bulks of 5000 documents, the number of threads running can vary from 5 to 10. The problem that I a… --- ## [Problem with auto-mapping in ElasticSearch 5](https://discuss.elastic.co/t/problem-with-auto-mapping-in-elasticsearch-5/58095)
**Author:** [@xldai](https://discuss.elastic.co/u/xldai)\ **Replies:** 12\ **Last updated:** [September 21, 2016, 3:45am UTC](https://discuss.elastic.co/t/problem-with-auto-mapping-in-elasticsearch-5/58095 "2016-09-21T03:45:19Z")
Hello, We are testing and want to move to ES 5 from ES 1.5.2, the log source PUT into ES looks like this: {code} { "\_index": "esb-2016.08.15", "\_type": "ESB", "id": "AVaMVjDQw5s6KmmdycR", "\_score": null, "\_s… --- ## [Auditbeat randomly shuts down](https://discuss.elastic.co/t/auditbeat-randomly-shuts-down/135335)
**Author:** [@jamesspi](https://discuss.elastic.co/u/jamesspi)\ **Replies:** 23\ **Last updated:** [May 10, 2019, 1:47pm UTC](https://discuss.elastic.co/t/auditbeat-randomly-shuts-down/135335 "2019-05-10T13:47:38Z")
Hi All, I have an auditbeat instance running on RHEL 6, just the file integrity module. At certain times, it just stops running with the following error: panic: runtime error: invalid memory address or nil pointer dere… --- ## [Проблема поиска только что добавленных данных](https://discuss.elastic.co/t/topic/169202)
**Author:** [@andy4195](https://discuss.elastic.co/u/andy4195)\ **Replies:** 23\ **Last updated:** [February 28, 2019, 3:35pm UTC](https://discuss.elastic.co/t/topic/169202 "2019-02-28T15:35:05Z")
В БД льются данные сразу в несколько потоков в разные индексы например в А и в Б. Поток А ищет данные в индексе Б и поток Б ищет в индексе А. Время пересоздания индекса стоит 1сек. Если в эту секунду добавить и попытать… --- ## [Metricbeat writing to .ds-metricbeat instead of .ds-.monitoring](https://discuss.elastic.co/t/metricbeat-writing-to-ds-metricbeat-instead-of-ds-monitoring/353798)
**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\ **Replies:** 50\ **Last updated:** [February 21, 2024, 8:12pm UTC](https://discuss.elastic.co/t/metricbeat-writing-to-ds-metricbeat-instead-of-ds-monitoring/353798 "2024-02-21T20:12:47Z")
I have a new elastic cluster on the basic license. I have deployed metricbeat to it and it is pulling data from the new cluster and successfully outputting logs to our monitoring cluster. The new cluster is not showing … --- ## [StackOverflowError after node connect, java api](https://discuss.elastic.co/t/stackoverflowerror-after-node-connect-java-api/3529)
**Author:** [@Sebastian\_Gavarini](https://discuss.elastic.co/u/Sebastian_Gavarini)\ **Replies:** 9\ **Last updated:** [November 7, 2010, 3:07am UTC](https://discuss.elastic.co/t/stackoverflowerror-after-node-connect-java-api/3529 "2010-11-07T03:07:24Z")
Hi all, I am using ES 0.12.1, java api, local gw, JRockit 1.6, and I am seeing from time to time in my logs: Exception in thread "elasticsearch\[Summers, Alexander\]\[tp\]-pool-1- thread-1" java.lang.StackOverflowError… --- ## [Elastic Cluster change to applyingphase after receiving data stream and logs](https://discuss.elastic.co/t/elastic-cluster-change-to-applyingphase-after-receiving-data-stream-and-logs/313120)
**Author:** [@steveytam](https://discuss.elastic.co/u/steveytam)\ **Replies:** 12\ **Last updated:** [September 19, 2022, 3:10am UTC](https://discuss.elastic.co/t/elastic-cluster-change-to-applyingphase-after-receiving-data-stream-and-logs/313120 "2022-09-19T03:10:12Z")
My elastic cluster is just crashing after I installed one elastic agent, I use ECK 2.4 and deploy Elasticsearch 8.3.3 apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name: elasticsearch spec:… --- ## [Java API Plainless script \`indexOf\` give wrong answer](https://discuss.elastic.co/t/java-api-plainless-script-indexof-give-wrong-answer/139016)
**Author:** [@Zt\_Zeng](https://discuss.elastic.co/u/Zt_Zeng)\ **Replies:** 11\ **Last updated:** [July 12, 2018, 10:41pm UTC](https://discuss.elastic.co/t/java-api-plainless-script-indexof-give-wrong-answer/139016 "2018-07-12T22:41:42Z")
Executor following script using rest way and Java API give different result: "script": { "inline": "ctx.\_source.t = params.users; ctx.\_source.i1= ctx.\_source.users.indexOf(params.users); ctx.\_source.i2= ctx.\_sourc… --- ## [How to correctly parse and then enrich log data in Logstash?](https://discuss.elastic.co/t/how-to-correctly-parse-and-then-enrich-log-data-in-logstash/46244)
**Author:** [@nateuni](https://discuss.elastic.co/u/nateuni)\ **Replies:** 12\ **Last updated:** [April 13, 2016, 1:45pm UTC](https://discuss.elastic.co/t/how-to-correctly-parse-and-then-enrich-log-data-in-logstash/46244 "2016-04-13T13:45:16Z")
I am working on my thesis and I have this setup: Webserver-\>Filebeats-\>Logstash-\>Kafka-\>ELK Server I have logs that contain the product info in the GET request from the webserver, depending on what was being served. An… --- ## [Automate Elasticsearch-reset-password in bash script](https://discuss.elastic.co/t/automate-elasticsearch-reset-password-in-bash-script/317429)
**Author:** [@Chma](https://discuss.elastic.co/u/Chma)\ **Replies:** 10\ **Last updated:** [October 27, 2022, 12:20am UTC](https://discuss.elastic.co/t/automate-elasticsearch-reset-password-in-bash-script/317429 "2022-10-27T00:20:45Z")
I am running the latest elasticsearch version via a script, and I am trying to automate the reset password process via this method recommended @TimV back in 2018, but it seems to no longer work with the latest version: H… --- ## [Bool Query Should clause in elasticsearch vs java OR condition?](https://discuss.elastic.co/t/bool-query-should-clause-in-elasticsearch-vs-java-or-condition/132690)
**Author:** [@san88922](https://discuss.elastic.co/u/san88922)\ **Replies:** 10\ **Last updated:** [May 23, 2018, 5:26pm UTC](https://discuss.elastic.co/t/bool-query-should-clause-in-elasticsearch-vs-java-or-condition/132690 "2018-05-23T17:26:50Z")
{ "bool": { "should": \[ { "term": { "title": "brown" }} , -----\> 1. { "term": { "title": "fox" }} \] } } I am new into the Elasticsearch world need help in understanding the "bool" query "should" clause, as ment… --- ## [Extract logs from the message field and create new separate runtime fields](https://discuss.elastic.co/t/extract-logs-from-the-message-field-and-create-new-separate-runtime-fields/320670)
**Author:** [@Ajmal\_Khalil](https://discuss.elastic.co/u/Ajmal_Khalil)\ **Replies:** 19\ **Last updated:** [December 8, 2022, 6:58pm UTC](https://discuss.elastic.co/t/extract-logs-from-the-message-field-and-create-new-separate-runtime-fields/320670 "2022-12-08T18:58:03Z")
Hi everyone, I'm using ELK stack version 8.4.0 and i need to extract logs data from message field that is something like "ERRORS" "EXCEPTIONS" etc and i want a new field for every extracted value so that i can easily cr… --- ## [Need a logical end of file definition for filebeat](https://discuss.elastic.co/t/need-a-logical-end-of-file-definition-for-filebeat/41099)
**Author:** [@tringuyen](https://discuss.elastic.co/u/tringuyen)\ **Replies:** 13\ **Last updated:** [February 18, 2016, 5:16pm UTC](https://discuss.elastic.co/t/need-a-logical-end-of-file-definition-for-filebeat/41099 "2016-02-18T17:16:22Z")
I have problem with the log that defines end of file by a string, the end of file can be in the middle of the log, So filebeat needs to stop reading log at that line instead of reading all the way down to physical end-of… --- ## [Logstash 6.5.1 : undefined method \`path' for nil:NilClass](https://discuss.elastic.co/t/logstash-6-5-1-undefined-method-path-for-nil-nilclass/158708)
**Author:** [@gfigoni](https://discuss.elastic.co/u/gfigoni)\ **Replies:** 13\ **Last updated:** [December 26, 2018, 2:40pm UTC](https://discuss.elastic.co/t/logstash-6-5-1-undefined-method-path-for-nil-nilclass/158708 "2018-12-26T14:40:24Z")
I have an ELK stack installed on my workstation (windows 10). I recently migrated my ELK stack from v6.3.2 to the latest v6.5.1. On this local stack, I daily handle a fair amount of log files throw Logstash to Elastic. … --- ## [Problems with logstash codecs (json, rubydebug)](https://discuss.elastic.co/t/problems-with-logstash-codecs-json-rubydebug/44252)
**Author:** [@tetlika](https://discuss.elastic.co/u/tetlika)\ **Replies:** 10\ **Last updated:** [March 14, 2016, 2:56pm UTC](https://discuss.elastic.co/t/problems-with-logstash-codecs-json-rubydebug/44252 "2016-03-14T14:56:59Z")
hi, we're using logstash 2.2.2 I'm trying to feed logstash with kibana logs, kibana log looks like: {"type":"log","@timestamp":"2016-03-13T10:05:30+00:00","tags":\["status","plugin:elasticsearch","info"\],"pid":15856,"na… --- ## [Failed to connect to Elastic search backend.make sure it is running and healthy](https://discuss.elastic.co/t/failed-to-connect-to-elastic-search-backend-make-sure-it-is-running-and-healthy/268149)
**Author:** [@saqib619](https://discuss.elastic.co/u/saqib619)\ **Replies:** 9\ **Last updated:** [March 25, 2021, 2:23pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-elastic-search-backend-make-sure-it-is-running-and-healthy/268149 "2021-03-25T14:23:02Z")
I am trying to set app search on my linux server. All the prerequisites are done and I am at the last step to start it. It gives the below 2 errors Failed to connect to Elasticsearch backend.Make sure it is running an… --- ## [SInce updating to logstash 5.2 (from 2.x) glob is \[\]](https://discuss.elastic.co/t/since-updating-to-logstash-5-2-from-2-x-glob-is/74983)
**Author:** [@logstashisawesome](https://discuss.elastic.co/u/logstashisawesome)\ **Replies:** 13\ **Last updated:** [March 6, 2017, 1:53pm UTC](https://discuss.elastic.co/t/since-updating-to-logstash-5-2-from-2-x-glob-is/74983 "2017-03-06T13:53:45Z")
Since updating my system (centos 6.5), logstash and elasticsearch, there has been no input from logstash. The files are in the correct directory (it's an NTFS share with a windows server) and everyone has read access on … --- ## [Multiple Domain Support - No Common Forest](https://discuss.elastic.co/t/multiple-domain-support-no-common-forest/87645)
**Author:** [@Nobby](https://discuss.elastic.co/u/Nobby)\ **Replies:** 9\ **Last updated:** [June 9, 2017, 7:32am UTC](https://discuss.elastic.co/t/multiple-domain-support-no-common-forest/87645 "2017-06-09T07:32:16Z")
Hey guys, I'm looking to see if there's a solution for authentication users in two different domains that don't exist in the same forest, don't have a common root domain but have a two-way trust between them. For exa… --- ## [Need help for installing Elastic-search, filebeat, logstash, metricbeat and kibana via helm using 8.5.1](https://discuss.elastic.co/t/need-help-for-installing-elastic-search-filebeat-logstash-metricbeat-and-kibana-via-helm-using-8-5-1/325994)
**Author:** [@Ram\_M](https://discuss.elastic.co/u/Ram_M)\ **Replies:** 11\ **Last updated:** [February 22, 2023, 4:43am UTC](https://discuss.elastic.co/t/need-help-for-installing-elastic-search-filebeat-logstash-metricbeat-and-kibana-via-helm-using-8-5-1/325994 "2023-02-22T04:43:25Z")
Hi all... I've using the helm chart for Elastic -search, Filebeat, Logstash and Kibana. Version is 8.5.1 environment in kubernetes AKS. Issue is Logstash not recognize the elastic-search. I need proper installation gui… --- ## [Индексация данных с помощью C++. Проблемы с wchar\_t](https://discuss.elastic.co/t/c-wchar-t/34274)
**Author:** [@Anton\_Kotelev](https://discuss.elastic.co/u/Anton_Kotelev)\ **Replies:** 12\ **Last updated:** [November 23, 2015, 7:41am UTC](https://discuss.elastic.co/t/c-wchar-t/34274 "2015-11-23T07:41:17Z")
Здравствуйте. Подскажите с таким вопросом. Программно отправляю данные на ES с использованием C++ по сокету. Когда посылаю пакеты, где строки представлены однобайтовыми символами - все хорошо. Но когда отправляются двухб… --- ## [Logstash import failed](https://discuss.elastic.co/t/logstash-import-failed/51569)
**Author:** [@danivu](https://discuss.elastic.co/u/danivu)\ **Replies:** 13\ **Last updated:** [June 8, 2016, 10:54am UTC](https://discuss.elastic.co/t/logstash-import-failed/51569 "2016-06-08T10:54:37Z")
Hi, I made a successful import data into ELK, logstash, elastic search kibana, after several days i rerun import i get error: io/console not supported; tty will not be manipulated Install the multipart-post gem. Loa… --- ## [3 hour time difference between Kibana reports and PostgreSQL database](https://discuss.elastic.co/t/3-hour-time-difference-between-kibana-reports-and-postgresql-database/254551)
**Author:** [@bogdan.oproescu](https://discuss.elastic.co/u/bogdan.oproescu)\ **Replies:** 31\ **Last updated:** [November 19, 2020, 8:12am UTC](https://discuss.elastic.co/t/3-hour-time-difference-between-kibana-reports-and-postgresql-database/254551 "2020-11-19T08:12:10Z")
hello Elastic forum, We have noticed a 3-hour time difference in our results, when comparing the output of our PostgreSQL database and our Kibana reports, and various requests to the \_search endpoint with Query DSL. For… [Previous page](https://discuss.elastic.co/top.md?page=96&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=98&per_page=50&period=all)