# Top

**URL:** https://discuss.elastic.co/top.md?page=98&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 99

---

## [Elasticsearch on CentOS 6.9](https://discuss.elastic.co/t/elasticsearch-on-centos-6-9/105583)

<div class="topic-metadata">

**Author:** [@Quadrosh](https://discuss.elastic.co/u/Quadrosh)\
**Replies:** 17\
**Last updated:** [October 29, 2017, 8:14am UTC](https://discuss.elastic.co/t/elasticsearch-on-centos-6-9/105583 "2017-10-29T08:14:35Z")

</div>

Hello, i have problem with install elasticsearch on CentOS 6.9 install itself goes well (by creating a file elasticsearch.repo in the /etc/yum.repos.d/ and run sudo yum install elasticsearch) but command "sudo -i serv…

---

## [Logstash 5.4 - Repeated deserialization errors and losing data with Persistent Queues](https://discuss.elastic.co/t/logstash-5-4-repeated-deserialization-errors-and-losing-data-with-persistent-queues/91503)

<div class="topic-metadata">

**Author:** [@subhasdan](https://discuss.elastic.co/u/subhasdan)\
**Replies:** 11\
**Last updated:** [September 25, 2017, 10:18pm UTC](https://discuss.elastic.co/t/logstash-5-4-repeated-deserialization-errors-and-losing-data-with-persistent-queues/91503 "2017-09-25T22:18:06Z")

</div>

Hi, We are getting repeated deserialization errors with Persistent Queues. Environment: - Logstash 5.4.1 (unmodified CentOS image from elastic repos) - 200GB SSD mounted disk for the queue - Persistent queues enabled …

---

## [Kibana calculate Apdex with value from scripted\_field](https://discuss.elastic.co/t/kibana-calculate-apdex-with-value-from-scripted-field/149845)

<div class="topic-metadata">

**Author:** [@VincentNijhuis](https://discuss.elastic.co/u/VincentNijhuis)\
**Replies:** 9\
**Last updated:** [October 2, 2018, 7:27am UTC](https://discuss.elastic.co/t/kibana-calculate-apdex-with-value-from-scripted-field/149845 "2018-10-02T07:27:44Z")

</div>

Hello. Currently we maintain a cluster of 10 Elasticsearch nodes for our customer and we started experimenting with APM. The thing we are missing is a possibility to determine the Apdex score like New Relic describes: h…

---

## [Failed add node](https://discuss.elastic.co/t/failed-add-node/187715)

<div class="topic-metadata">

**Author:** [@Dave\_Hafid](https://discuss.elastic.co/u/Dave_Hafid)\
**Replies:** 13\
**Last updated:** [July 11, 2019, 7:56am UTC](https://discuss.elastic.co/t/failed-add-node/187715 "2019-07-11T07:56:01Z")

</div>

Dear All, i cannot add node data to dedicated master-eligible node, we have one master-eligible and 2 dedicated data node master configuration 192.168.11.12 node.name: ${HOSTNAME} node.data: false node.ingest: fals…

---

## [Documents doesn't get updated after the version is updated & response is successful in ES](https://discuss.elastic.co/t/documents-doesnt-get-updated-after-the-version-is-updated-response-is-successful-in-es/276742)

<div class="topic-metadata">

**Author:** [@Farah\_Zaidi](https://discuss.elastic.co/u/Farah_Zaidi)\
**Replies:** 13\
**Last updated:** [June 23, 2021, 9:22am UTC](https://discuss.elastic.co/t/documents-doesnt-get-updated-after-the-version-is-updated-response-is-successful-in-es/276742 "2021-06-23T09:22:34Z")

</div>

Hi , I am facing an issue on AWS Elastic search instance. I am sending POST api request to create/update the document in ES , somehow the version gets updated but on querying the record , it still shows the old re…

---

## [Need own unqiue ID with Bulk insert](https://discuss.elastic.co/t/need-own-unqiue-id-with-bulk-insert/235599)

<div class="topic-metadata">

**Author:** [@elasticitm](https://discuss.elastic.co/u/elasticitm)\
**Replies:** 11\
**Last updated:** [June 12, 2020, 9:35pm UTC](https://discuss.elastic.co/t/need-own-unqiue-id-with-bulk-insert/235599 "2020-06-12T21:35:52Z")

</div>

Hallo @all, I've switched from a older elasticsearch version to the current 7.7 and now getting troubles using unique id's. In the newer elasticsearch version the "\_id" is set automatically to a short one and this brea…

---

## [Index lifecycle policy does not apply to newly created timeseries indexes](https://discuss.elastic.co/t/index-lifecycle-policy-does-not-apply-to-newly-created-timeseries-indexes/277993)

<div class="topic-metadata">

**Author:** [@PMDubuc](https://discuss.elastic.co/u/PMDubuc)\
**Replies:** 17\
**Last updated:** [July 14, 2021, 2:03pm UTC](https://discuss.elastic.co/t/index-lifecycle-policy-does-not-apply-to-newly-created-timeseries-indexes/277993 "2021-07-14T14:03:21Z")

</div>

I'm using version 7.8.1 of the elastic stack for indexing log files with filebeat into daily logstash-yyyy-mm-dd indexes. I've created an index pattern and template for the indexes and a Logstash\_Index\_Retention policy …

---

## [I can't get system.cpu.total.pct metrics from my metricbeats](https://discuss.elastic.co/t/i-cant-get-system-cpu-total-pct-metrics-from-my-metricbeats/279653)

<div class="topic-metadata">

**Author:** [@shell](https://discuss.elastic.co/u/shell)\
**Replies:** 9\
**Last updated:** [July 27, 2021, 2:01pm UTC](https://discuss.elastic.co/t/i-cant-get-system-cpu-total-pct-metrics-from-my-metricbeats/279653 "2021-07-27T14:01:25Z")

</div>

I'm getting into ELK stack and now I can't figure out how to get and visualize in Kibana metrics of CPU load (in any form, but I suppose the best choice is system.cpu.total.pct ) from my metricbeats. I can do this for me…

---

## [Elastic Agent - problems following the documentation, stumbled upon dead links and more](https://discuss.elastic.co/t/elastic-agent-problems-following-the-documentation-stumbled-upon-dead-links-and-more/319495)

<div class="topic-metadata">

**Author:** [@SirMuffington](https://discuss.elastic.co/u/SirMuffington)\
**Replies:** 13\
**Last updated:** [December 1, 2022, 2:26pm UTC](https://discuss.elastic.co/t/elastic-agent-problems-following-the-documentation-stumbled-upon-dead-links-and-more/319495 "2022-12-01T14:26:56Z")

</div>

In the documentation for setting up Elastic Agent the following is stated: Kibana user with All privileges on Fleet and Integrations. Since many Integrations assets are shared across spaces, users need the Kibana privi…

---

## [Can I use role based authentication for free?](https://discuss.elastic.co/t/can-i-use-role-based-authentication-for-free/183968)

<div class="topic-metadata">

**Author:** [@Martin\_H\_Andersen](https://discuss.elastic.co/u/Martin_H_Andersen)\
**Replies:** 13\
**Last updated:** [June 6, 2019, 3:36pm UTC](https://discuss.elastic.co/t/can-i-use-role-based-authentication-for-free/183968 "2019-06-06T15:36:06Z")

</div>

In this link https://www.elastic.co/subscriptions I can see that x-pack basic has role-based access control. How do I set it up? I have read the documentation but I am very confused. Can I with the basic license setup…

---

## [Need help on Elastalert](https://discuss.elastic.co/t/need-help-on-elastalert/49295)

<div class="topic-metadata">

**Author:** [@vmankala](https://discuss.elastic.co/u/vmankala)\
**Replies:** 9\
**Last updated:** [March 5, 2017, 3:29pm UTC](https://discuss.elastic.co/t/need-help-on-elastalert/49295 "2017-03-05T15:29:40Z")

</div>

I have setup ELK environment. Installed filebeat on few servers and installed logstash on separate single server -10-192-4-253. I have setup Elastalert configuration in logstash server. Below is "/example\_frequency.yaml"…

---

## [ConcurrencyError: interrupted waiting for mutex: null in Logstash 2.3.1](https://discuss.elastic.co/t/concurrencyerror-interrupted-waiting-for-mutex-null-in-logstash-2-3-1/47617)

<div class="topic-metadata">

**Author:** [@Fedele\_Mantuano](https://discuss.elastic.co/u/Fedele_Mantuano)\
**Replies:** 15\
**Last updated:** [August 17, 2016, 9:04am UTC](https://discuss.elastic.co/t/concurrencyerror-interrupted-waiting-for-mutex-null-in-logstash-2-3-1/47617 "2016-08-17T09:04:54Z")

</div>

Sometimes I have the following issue: {:timestamp=\>"2016-04-16T04:35:38.758000+0000", :message=\>"Exception in pipelineworker, the pipeline stopped processing new events, please check your filter configuration and resta…

---

## [Cannot start filebeat because of instance/beat.go error](https://discuss.elastic.co/t/cannot-start-filebeat-because-of-instance-beat-go-error/261472)

<div class="topic-metadata">

**Author:** [@jfasajr](https://discuss.elastic.co/u/jfasajr)\
**Replies:** 9\
**Last updated:** [January 18, 2021, 11:32pm UTC](https://discuss.elastic.co/t/cannot-start-filebeat-because-of-instance-beat-go-error/261472 "2021-01-18T23:32:56Z")

</div>

When I run filebeat setup -e It runs through and it is able to get through to the point of installing dashboard for kibana, but then fails due to an error, below: Index setup finished. Loading dashboards (Kibana must b…

---

## [Its about parent-child relationship](https://discuss.elastic.co/t/its-about-parent-child-relationship/36837)

<div class="topic-metadata">

**Author:** [@Kruthika](https://discuss.elastic.co/u/Kruthika)\
**Replies:** 16\
**Last updated:** [June 17, 2016, 2:50am UTC](https://discuss.elastic.co/t/its-about-parent-child-relationship/36837 "2016-06-17T02:50:53Z")

</div>

can we have multiple child for a same parent relationship in elasticsearch ?? or can a single parent document have multiple child document ??

---

## [Is it possible to modify Managed Pipelines, Component Templates, and Index Templates?](https://discuss.elastic.co/t/is-it-possible-to-modify-managed-pipelines-component-templates-and-index-templates/353901)

<div class="topic-metadata">

**Author:** [@fredyfredburger1](https://discuss.elastic.co/u/fredyfredburger1)\
**Replies:** 17\
**Last updated:** [February 23, 2024, 12:40pm UTC](https://discuss.elastic.co/t/is-it-possible-to-modify-managed-pipelines-component-templates-and-index-templates/353901 "2024-02-23T12:40:44Z")

</div>

Good morning. I'm on a project using OpenTelementry to collect system health and status metrics for servers, and we are integrated with Elasticsearch through APM. There is a field we are setting in the data which I nee…

---

## [ECS and Python logging](https://discuss.elastic.co/t/ecs-and-python-logging/202554)

<div class="topic-metadata">

**Author:** [@darren.skinner](https://discuss.elastic.co/u/darren.skinner)\
**Replies:** 10\
**Last updated:** [October 9, 2019, 6:19pm UTC](https://discuss.elastic.co/t/ecs-and-python-logging/202554 "2019-10-09T18:19:41Z")

</div>

Hi, I'm working on an update to a set of interlinked internal projects to adopt the ECS for easier correlation and tracking of pipelines. One of the apps uses python logging, so i'm trying to work on renaming the stand…

---

## [Logstash warning](https://discuss.elastic.co/t/logstash-warning/107368)

<div class="topic-metadata">

**Author:** [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Replies:** 9\
**Last updated:** [November 20, 2017, 8:54am UTC](https://discuss.elastic.co/t/logstash-warning/107368 "2017-11-20T08:54:10Z")

</div>

i get this warning in logstash log \[2017-11-13T10:41:22,803\]\[WARN \]\[logstash.filters.json \] Error parsing json {:source=\>"LogMsg", :raw=\>"UID:420: Out /getData/{city}/{speciality}/{doctorName} all/all/all", :exception=\>#…

---

## [Is elastichsearch-oss still maintained?](https://discuss.elastic.co/t/is-elastichsearch-oss-still-maintained/274040)

<div class="topic-metadata">

**Author:** [@confuseduser](https://discuss.elastic.co/u/confuseduser)\
**Replies:** 10\
**Last updated:** [May 27, 2021, 7:09pm UTC](https://discuss.elastic.co/t/is-elastichsearch-oss-still-maintained/274040 "2021-05-27T19:09:54Z")

</div>

I am really confused at the moment. I have this apt repo config which pulls from: deb https://artifacts.elastic.co/packages/oss-7.x/apt stable main The last update of elastichsearch-oss seems to be from january 2021 w…

---

## [Filebeat Need Restart To send Logs](https://discuss.elastic.co/t/filebeat-need-restart-to-send-logs/60266)

<div class="topic-metadata">

**Author:** [@Me\_Cloud](https://discuss.elastic.co/u/Me_Cloud)\
**Replies:** 9\
**Last updated:** [September 15, 2016, 6:07am UTC](https://discuss.elastic.co/t/filebeat-need-restart-to-send-logs/60266 "2016-09-15T06:07:34Z")

</div>

Hallo all, i was first using filebeat, i have a problem with my filebeat. i cannot send logs to logstash dynamically? because in my case, my filebeat not pushing the logs to logstash dynamically. so, i have to manually …

---

## [FSCrawler not running](https://discuss.elastic.co/t/fscrawler-not-running/121650)

<div class="topic-metadata">

**Author:** [@pkasson](https://discuss.elastic.co/u/pkasson)\
**Replies:** 10\
**Last updated:** [February 28, 2018, 3:24pm UTC](https://discuss.elastic.co/t/fscrawler-not-running/121650 "2018-02-28T15:24:42Z")

</div>

Hi group, I just tried to run FSCrawler for the first time, and it did not work. I have been asked to include any logs, etc, and don't see any. I created a test job and here is that ... following that, is the error m…

---

## [How to view multiple fields in kibana add filter section](https://discuss.elastic.co/t/how-to-view-multiple-fields-in-kibana-add-filter-section/245765)

<div class="topic-metadata">

**Author:** [@hemant\_472](https://discuss.elastic.co/u/hemant_472)\
**Replies:** 10\
**Last updated:** [August 21, 2020, 11:38am UTC](https://discuss.elastic.co/t/how-to-view-multiple-fields-in-kibana-add-filter-section/245765 "2020-08-21T11:38:34Z")

</div>

i am unable to see multiple filters in add filter field of kibana, can someone suggst anything as i cannot find anything in kibana settings

---

## [Error during elasticsearch deployment via puppet](https://discuss.elastic.co/t/error-during-elasticsearch-deployment-via-puppet/108008)

<div class="topic-metadata">

**Author:** [@shoshoro99](https://discuss.elastic.co/u/shoshoro99)\
**Replies:** 13\
**Last updated:** [January 3, 2018, 9:32pm UTC](https://discuss.elastic.co/t/error-during-elasticsearch-deployment-via-puppet/108008 "2018-01-03T21:32:36Z")

</div>

Deploying elasticsearch via puppet ( puppet version 4.10.8) elasticsearch module (elastic-elasticsearch (v5.4.3)) , i got te below errors Info: Applying configuration version '1510860503' Error: /Stage\[main\]/Analytic::E…

---

## [Java RestHighLevelClient put mapping manually](https://discuss.elastic.co/t/java-resthighlevelclient-put-mapping-manually/116091)

<div class="topic-metadata">

**Author:** [@Onoxider](https://discuss.elastic.co/u/Onoxider)\
**Replies:** 9\
**Last updated:** [January 19, 2018, 10:49am UTC](https://discuss.elastic.co/t/java-resthighlevelclient-put-mapping-manually/116091 "2018-01-19T10:49:45Z")

</div>

Hello, is there any way to put mapping with RestHighLevelClient? I know that it's possible with TransportClient via this Doc page: https://www.elastic.co/guide/en/elasticsearch/client/java-api/current/java-admin-indic…

---

## [Help on creating GROK patterns](https://discuss.elastic.co/t/help-on-creating-grok-patterns/95413)

<div class="topic-metadata">

**Author:** [@shroh](https://discuss.elastic.co/u/shroh)\
**Replies:** 15\
**Last updated:** [August 10, 2017, 3:50pm UTC](https://discuss.elastic.co/t/help-on-creating-grok-patterns/95413 "2017-08-10T15:50:10Z")

</div>

Hi I am kind of new to ELK and also GROK pattern , below is the log file line for which i want to create a GROK pattern, The fields that i need are before the ‘=’ as parsed by splunk \[{applicationSystemCode=appname, cl…

---

## [How to use Script as Stored Procedure?](https://discuss.elastic.co/t/how-to-use-script-as-stored-procedure/129923)

<div class="topic-metadata">

**Author:** [@GDV](https://discuss.elastic.co/u/GDV)\
**Replies:** 9\
**Last updated:** [May 3, 2018, 3:55am UTC](https://discuss.elastic.co/t/how-to-use-script-as-stored-procedure/129923 "2018-05-03T03:55:12Z")

</div>

Hi, All! I'm novice in ES. I've read about scripts (painless) and want to use it as stored procedures in a RDBMS. It's possible, right? I want receive some docs by call my script (it should does some selection) It's i…

---

## [Cluster crash, symptoms and possible explanation](https://discuss.elastic.co/t/cluster-crash-symptoms-and-possible-explanation/12711)

<div class="topic-metadata">

**Author:** [@Vadim\_Kisselmann](https://discuss.elastic.co/u/Vadim_Kisselmann)\
**Replies:** 19\
**Last updated:** [July 22, 2013, 9:09am UTC](https://discuss.elastic.co/t/cluster-crash-symptoms-and-possible-explanation/12711 "2013-07-22T09:09:52Z")

</div>

Hi folks, our cluster was "crashed" this night. We have a couple symptoms and try to narrow down the problem. Our setup: 3 Nodes in AWS, ES version 19.11, 4 indices for different services. Master was node1. The c…

---

## [Elastic Ingest Pipeline Works with Test, but Fails on real usage](https://discuss.elastic.co/t/elastic-ingest-pipeline-works-with-test-but-fails-on-real-usage/295984)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 16\
**Last updated:** [February 2, 2022, 4:57pm UTC](https://discuss.elastic.co/t/elastic-ingest-pipeline-works-with-test-but-fails-on-real-usage/295984 "2022-02-02T16:57:05Z")

</div>

Hi All, Elasticsearch: 7.16.2 Logstash: 7.16.2 I have an ingest pipeline which processes syslog messages: Example message: \<86\>Feb 1 18:38:07 ASDF1234 sudo: pam\_unix(sudo:session): session closed for user root The …

---

## [Filebeat Index Lifecycle Management Issue (No Data)](https://discuss.elastic.co/t/filebeat-index-lifecycle-management-issue-no-data/180039)

<div class="topic-metadata">

**Author:** [@chadhanson](https://discuss.elastic.co/u/chadhanson)\
**Replies:** 11\
**Last updated:** [May 9, 2019, 3:59pm UTC](https://discuss.elastic.co/t/filebeat-index-lifecycle-management-issue-no-data/180039 "2019-05-09T15:59:02Z")

</div>

My filebeat index seems to be corrupted and will not take new ingestion data. While reviewing the logs I noticed the life cycle error below over and over in the logs. The filebeat index is the only index that seems t…

---

## [Comparing fields of log files with different index in kibana](https://discuss.elastic.co/t/comparing-fields-of-log-files-with-different-index-in-kibana/91103)

<div class="topic-metadata">

**Author:** [@Arpit](https://discuss.elastic.co/u/Arpit)\
**Replies:** 10\
**Last updated:** [July 4, 2017, 7:10am UTC](https://discuss.elastic.co/t/comparing-fields-of-log-files-with-different-index-in-kibana/91103 "2017-07-04T07:10:38Z")

</div>

I have 2 different log files in elasticsearch, output as two different indexes I1 and I2 respectively in kibana. I want to compare the these two indexes or files and produce a result on the matching of field. Basically, …

---

## [Harvester stats always 0, no harvester logs at all but logs shipping](https://discuss.elastic.co/t/harvester-stats-always-0-no-harvester-logs-at-all-but-logs-shipping/328204)

<div class="topic-metadata">

**Author:** [@Alex\_Stuck](https://discuss.elastic.co/u/Alex_Stuck)\
**Replies:** 29\
**Last updated:** [March 29, 2023, 2:06am UTC](https://discuss.elastic.co/t/harvester-stats-always-0-no-harvester-logs-at-all-but-logs-shipping/328204 "2023-03-29T02:06:22Z")

</div>

Hey there, new to filebeats. I'm watching a large directory at the root (/log/\*/\*\*) and am sending the logs to another team's LS that I don't control. We are seeing what looks like a major lag at time from some systems …

---

## [Elasticsearch index not created after adding logstash (works fine with filebeat -\> es)](https://discuss.elastic.co/t/elasticsearch-index-not-created-after-adding-logstash-works-fine-with-filebeat-es/237374)

<div class="topic-metadata">

**Author:** [@code\_share](https://discuss.elastic.co/u/code_share)\
**Replies:** 13\
**Last updated:** [June 22, 2020, 12:45pm UTC](https://discuss.elastic.co/t/elasticsearch-index-not-created-after-adding-logstash-works-fine-with-filebeat-es/237374 "2020-06-22T12:45:11Z")

</div>

I spin up an ELK stack using docker-compose (see below). I have manged to successfully enable basic authentication (using xpack + certs + built-in passwords) for the ES cluster and connect filebeat to the the ES cluster …

---

## [Java project connects to elasticsearch ,but it gets waring](https://discuss.elastic.co/t/java-project-connects-to-elasticsearch-but-it-gets-waring/85213)

<div class="topic-metadata">

**Author:** [@guoych](https://discuss.elastic.co/u/guoych)\
**Replies:** 10\
**Last updated:** [May 11, 2017, 7:50am UTC](https://discuss.elastic.co/t/java-project-connects-to-elasticsearch-but-it-gets-waring/85213 "2017-05-11T07:50:53Z")

</div>

hi, I create a java project for using elasticsearch,it can be userful in localhost to connect the ES envioment，but if I make the project in outside network, it will get waring: I have make the outside and inside net…

---

## [Feedback regarding Synthetics Tests](https://discuss.elastic.co/t/feedback-regarding-synthetics-tests/335587)

<div class="topic-metadata">

**Author:** [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\
**Replies:** 11\
**Last updated:** [July 14, 2023, 5:12am UTC](https://discuss.elastic.co/t/feedback-regarding-synthetics-tests/335587 "2023-07-14T05:12:03Z")

</div>

Dear all, We are currently evaluating the Synthetic Monitoring of Elastic with 2 applications (1 Java with JSP, 1 Angular) and although we did not create huge tests yet, I would like to give our opinion about the curren…

---

## [Logstash don't send logs to elasticsearch](https://discuss.elastic.co/t/logstash-dont-send-logs-to-elasticsearch/278339)

<div class="topic-metadata">

**Author:** [@diegz](https://discuss.elastic.co/u/diegz)\
**Replies:** 20\
**Last updated:** [July 11, 2021, 12:50am UTC](https://discuss.elastic.co/t/logstash-dont-send-logs-to-elasticsearch/278339 "2021-07-11T00:50:43Z")

</div>

Hi community, I configured ssl on the whole stack (elasticsearch, kibana, logstash, filebeat) When I manually launch logstash to test my configuration, I have this return. I think it's good but I don't see anything in…

---

## [Strange behaviour when counting events in bar chart](https://discuss.elastic.co/t/strange-behaviour-when-counting-events-in-bar-chart/51537)

<div class="topic-metadata">

**Author:** [@kruelah](https://discuss.elastic.co/u/kruelah)\
**Replies:** 11\
**Last updated:** [July 21, 2016, 5:41pm UTC](https://discuss.elastic.co/t/strange-behaviour-when-counting-events-in-bar-chart/51537 "2016-07-21T17:41:38Z")

</div>

Hi I want to create a vertical bar chart visualisation where I count the number of events depending to event timestamp, and I notice a behavior that does not understand. My event time field is called ACT\_HEURE\_ACTIVITE…

---

## [X-Pack & LDAP user group role mapping](https://discuss.elastic.co/t/x-pack-ldap-user-group-role-mapping/123077)

<div class="topic-metadata">

**Author:** [@Darius](https://discuss.elastic.co/u/Darius)\
**Replies:** 11\
**Last updated:** [March 29, 2018, 9:54am UTC](https://discuss.elastic.co/t/x-pack-ldap-user-group-role-mapping/123077 "2018-03-29T09:54:06Z")

</div>

Hello, I'm running elastic 6.2.2 /w x-pack and integrating it with LDAP. The problem I am having is that I'm able to define users by specifying each user individually, but not an LDAP group. Let me try to clarify: Co…

---

## [Не четкий поиск по массиву значений](https://discuss.elastic.co/t/topic/198577)

<div class="topic-metadata">

**Author:** [@Dima\_Sid](https://discuss.elastic.co/u/Dima_Sid)\
**Replies:** 15\
**Last updated:** [September 10, 2019, 1:55pm UTC](https://discuss.elastic.co/t/topic/198577 "2019-09-10T13:55:57Z")

</div>

Подскажите как оформить запрос что бы можно было сделать поиск по текстовому полю с использованием массива значений К примеру запросом curl -XPOST 'elk:9200/shopcategory/shopcategory/\_search?pretty' -d '{ "q…

---

## [Any Help Un-structure log message to map structure message in Logstash](https://discuss.elastic.co/t/any-help-un-structure-log-message-to-map-structure-message-in-logstash/36258)

<div class="topic-metadata">

**Author:** [@jayaram](https://discuss.elastic.co/u/jayaram)\
**Replies:** 11\
**Last updated:** [December 4, 2015, 6:28pm UTC](https://discuss.elastic.co/t/any-help-un-structure-log-message-to-map-structure-message-in-logstash/36258 "2015-12-04T18:28:11Z")

</div>

Hello, I have the log message 2015-11-18 21:11:38,693 \[WARN \] \[xx.web.common.filter.RequestFilter\] NDC\[UserPrincipal(ABCDF22602)\] request (/member/control/loginAction) exceeded threshold; elapsed milliseconds since star…

---

## [Metricbeat showing "server's certificate chain verification is disabled"](https://discuss.elastic.co/t/metricbeat-showing-servers-certificate-chain-verification-is-disabled/287759)

<div class="topic-metadata">

**Author:** [@gboer](https://discuss.elastic.co/u/gboer)\
**Replies:** 9\
**Last updated:** [January 10, 2022, 1:38pm UTC](https://discuss.elastic.co/t/metricbeat-showing-servers-certificate-chain-verification-is-disabled/287759 "2022-01-10T13:38:14Z")

</div>

Hello, As far as I can see, I've set up Metricbeat to correctly validate/use SSL, but it still gives the following warning when running 'metricbeat test output': server's certificate chain verification is disabled My …

---

## [Extremely increased disk usage since upgrade to 8.17.1](https://discuss.elastic.co/t/extremely-increased-disk-usage-since-upgrade-to-8-17-1/374405)

<div class="topic-metadata">

**Author:** [@Alphayeeeet](https://discuss.elastic.co/u/Alphayeeeet)\
**Replies:** 39\
**Last updated:** [February 19, 2025, 8:46pm UTC](https://discuss.elastic.co/t/extremely-increased-disk-usage-since-upgrade-to-8-17-1/374405 "2025-02-19T20:46:39Z")

</div>

Hi, we upgraded our production stack to 8.17.1 at the beginning of the week. Now after it ran for a few days the amount of data (especially Kubernetes cluster metrics) has been increased enormously since the upgrade. …

---

## [Parameters in Using Calculation aggregation](https://discuss.elastic.co/t/parameters-in-using-calculation-aggregation/112369)

<div class="topic-metadata">

**Author:** [@Shubham\_Mahajan](https://discuss.elastic.co/u/Shubham_Mahajan)\
**Replies:** 16\
**Last updated:** [December 21, 2017, 7:58pm UTC](https://discuss.elastic.co/t/parameters-in-using-calculation-aggregation/112369 "2017-12-21T19:58:29Z")

</div>

Hi guys, i am trying to use calculation aggregation in TSVB as below: \[image\] but is there way where i can find the number of events matching the criteria in the given timeframe using the painless script??? what other…

---

## [Сбор syslog с помощью ELK](https://discuss.elastic.co/t/syslog-elk/279993)

<div class="topic-metadata">

**Author:** [@Savai](https://discuss.elastic.co/u/Savai)\
**Replies:** 12\
**Last updated:** [August 5, 2021, 10:50pm UTC](https://discuss.elastic.co/t/syslog-elk/279993 "2021-08-05T22:50:27Z")

</div>

Здравствуйте. Не подскажете, в чем может быть проблема? Запускаю ELK стек через docker-compose и пытаюсь получить syslog через logstash, однако индекс в elastic не создается и при запуске logstash выдается предупреждени…

---

## [Cluster in Yellow due to replica not assigned](https://discuss.elastic.co/t/cluster-in-yellow-due-to-replica-not-assigned/145822)

<div class="topic-metadata">

**Author:** [@newlearner](https://discuss.elastic.co/u/newlearner)\
**Replies:** 24\
**Last updated:** [August 24, 2018, 9:41am UTC](https://discuss.elastic.co/t/cluster-in-yellow-due-to-replica-not-assigned/145822 "2018-08-24T09:41:37Z")

</div>

Hi team I have .watches replica in UNASSIGNED state due to which my cluster in showing Yellow .watches 0 p STARTED .watches 0 r UNASSIGNED I restarted the cluster, updated the replica not nothing working. I also trie…

---

## [FIlebeat doesn't reparse logs](https://discuss.elastic.co/t/filebeat-doesnt-reparse-logs/46136)

<div class="topic-metadata">

**Author:** [@bronzelion](https://discuss.elastic.co/u/bronzelion)\
**Replies:** 10\
**Last updated:** [April 4, 2016, 4:48pm UTC](https://discuss.elastic.co/t/filebeat-doesnt-reparse-logs/46136 "2016-04-04T16:48:07Z")

</div>

Hey, I did read a couple of posts here but was not able to get the issue resolved. I'm using filebeat-1.2.0(downloaded tar) and Logstash2.2.2. I want to force re-parse the files provided in the path section, but that d…

---

## [Merge values in JSON (jdbc events logstash)](https://discuss.elastic.co/t/merge-values-in-json-jdbc-events-logstash/99367)

<div class="topic-metadata">

**Author:** [@malhotras](https://discuss.elastic.co/u/malhotras)\
**Replies:** 13\
**Last updated:** [October 2, 2017, 6:49am UTC](https://discuss.elastic.co/t/merge-values-in-json-jdbc-events-logstash/99367 "2017-10-02T06:49:48Z")

</div>

I have a JSON structure like this: { "details": \[ { "place": "abc", "group": 3, "year": 2006, "id": 1304, "street": "xyz 14", "lf\_number": "0118", "code": 4433, "name": "abc coorperation", "group2": 3817…

---

## [How to transfer index from 1 node to a different node](https://discuss.elastic.co/t/how-to-transfer-index-from-1-node-to-a-different-node/162917)

<div class="topic-metadata">

**Author:** [@PolterFox](https://discuss.elastic.co/u/PolterFox)\
**Replies:** 25\
**Last updated:** [January 8, 2019, 2:49pm UTC](https://discuss.elastic.co/t/how-to-transfer-index-from-1-node-to-a-different-node/162917 "2019-01-08T14:49:25Z")

</div>

Hey guys, I want to transfer specified indices from source node to a different node (they are not in the same cluster!!!). How can I do this? Best regards, PolterFox

---

## [IIS Log message field doesn't always get parsed](https://discuss.elastic.co/t/iis-log-message-field-doesnt-always-get-parsed/143383)

<div class="topic-metadata">

**Author:** [@AlexB](https://discuss.elastic.co/u/AlexB)\
**Replies:** 11\
**Last updated:** [August 8, 2018, 6:57pm UTC](https://discuss.elastic.co/t/iis-log-message-field-doesnt-always-get-parsed/143383 "2018-08-08T18:57:56Z")

</div>

I'm pushing a few IIS logs to logstash and some of the "message" fields do not get parsed. I've tested the log lines in the "message" field against the pattern that's in the default.json injest and the lines were parsed …

---

## [Exiting: error connecting to Kibana: fail to get the Kibana version](https://discuss.elastic.co/t/exiting-error-connecting-to-kibana-fail-to-get-the-kibana-version/341353)

<div class="topic-metadata">

**Author:** [@BenKenobi](https://discuss.elastic.co/u/BenKenobi)\
**Replies:** 11\
**Last updated:** [September 1, 2023, 9:14am UTC](https://discuss.elastic.co/t/exiting-error-connecting-to-kibana-fail-to-get-the-kibana-version/341353 "2023-09-01T09:14:30Z")

</div>

Hi, I am new to ElasticStack and trying to load dashboards into Kibana. Kibana and Elastic Search run on same cluster and I want to monitor a remote server with metricbeat. When I enter the command metricbeat setup --…

---

## [Issue setting up ES on AWS: No route to host](https://discuss.elastic.co/t/issue-setting-up-es-on-aws-no-route-to-host/12565)

<div class="topic-metadata">

**Author:** [@Chris\_Carpenter](https://discuss.elastic.co/u/Chris_Carpenter)\
**Replies:** 17\
**Last updated:** [June 27, 2013, 9:52pm UTC](https://discuss.elastic.co/t/issue-setting-up-es-on-aws-no-route-to-host/12565 "2013-06-27T21:52:56Z")

</div>

I am trying to setup a Elasticsearch instance in AWS. I am using Ubuntu 13.04, Elasticsearch 0.90.2, and cloud-aws 1.12.0. \*My config:\* cluster.name: SometaroLoggin path.conf: /opt/elasticsearch/config path.data…

---

## [Data nodes are not able to join master node and failed to make a cluster](https://discuss.elastic.co/t/data-nodes-are-not-able-to-join-master-node-and-failed-to-make-a-cluster/147657)

<div class="topic-metadata">

**Author:** [@dhananjay88](https://discuss.elastic.co/u/dhananjay88)\
**Replies:** 13\
**Last updated:** [September 7, 2018, 9:21am UTC](https://discuss.elastic.co/t/data-nodes-are-not-able-to-join-master-node-and-failed-to-make-a-cluster/147657 "2018-09-07T09:21:39Z")

</div>

Hi All, I have created elasticsearch cluster beofre and it is working fine without any issue with the same configuration as given below. But I am not sure why I am getting message "not enough master nodes discovered du…

[Previous page](https://discuss.elastic.co/top.md?page=97&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=99&per_page=50&period=all)
