# Top

**URL:** https://discuss.elastic.co/top.md?page=984&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 985

---

## [Kibana RAW message to text table](https://discuss.elastic.co/t/kibana-raw-message-to-text-table/217708)

<div class="topic-metadata">

**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\
**Replies:** 3\
**Last updated:** [February 4, 2020, 9:33pm UTC](https://discuss.elastic.co/t/kibana-raw-message-to-text-table/217708 "2020-02-04T21:33:39Z")

</div>

I've been at this for a couple days with very limited success. Any tips on how to display 2 fields from a windows event log into a table. For example lets say error 1000 has to field param1 and param2 both are already i…

---

## [Login is disabled because your license has expired. Please extend your license or disable Security in Elasticsearch](https://discuss.elastic.co/t/login-is-disabled-because-your-license-has-expired-please-extend-your-license-or-disable-security-in-elasticsearch/113825)

<div class="topic-metadata">

**Author:** [@kunam](https://discuss.elastic.co/u/kunam)\
**Replies:** 3\
**Last updated:** [January 2, 2018, 7:18pm UTC](https://discuss.elastic.co/t/login-is-disabled-because-your-license-has-expired-please-extend-your-license-or-disable-security-in-elasticsearch/113825 "2018-01-02T19:18:41Z")

</div>

HI, I had kibana node up and running, when i'm trying to log on node it is throwing me following error. \[image\] there is no issue with license and checked with Elastic search, it is up and running. help would be appr…

---

## [Custom fields or a way to analyze tags](https://discuss.elastic.co/t/custom-fields-or-a-way-to-analyze-tags/39129)

<div class="topic-metadata">

**Author:** [@cg-max](https://discuss.elastic.co/u/cg-max)\
**Replies:** 3\
**Last updated:** [January 15, 2016, 4:25pm UTC](https://discuss.elastic.co/t/custom-fields-or-a-way-to-analyze-tags/39129 "2016-01-15T16:25:52Z")

</div>

Hi, We're evaluating topbeat and have a need for a double hostname setup, where both the 'real' hostnames (12349187324.somecloud.com) and nice hostname (elastic08.somecloud.com) can be used to search/filter and graph u…

---

## [After starting filebeat, prospectors initially pushes some logs and then stops](https://discuss.elastic.co/t/after-starting-filebeat-prospectors-initially-pushes-some-logs-and-then-stops/36420)

<div class="topic-metadata">

**Author:** [@Matthew\_Prinvale](https://discuss.elastic.co/u/Matthew_Prinvale)\
**Replies:** 3\
**Last updated:** [January 3, 2016, 5:30pm UTC](https://discuss.elastic.co/t/after-starting-filebeat-prospectors-initially-pushes-some-logs-and-then-stops/36420 "2016-01-03T17:30:08Z")

</div>

Edit: I must have missed a part where you had to remove the elasticsearch portion from the config.yml. In previous versions removing it broke it. Hopefully I explain this correct: Running filebeat with two prospectors…

---

## [Kibana 7.16.1 short url](https://discuss.elastic.co/t/kibana-7-16-1-short-url/292476)

<div class="topic-metadata">

**Author:** [@Marko\_Brkusanin](https://discuss.elastic.co/u/Marko_Brkusanin)\
**Replies:** 1\
**Last updated:** [December 20, 2021, 6:08pm UTC](https://discuss.elastic.co/t/kibana-7-16-1-short-url/292476 "2021-12-20T18:08:38Z")

</div>

Hi, after I upgrade ELK to version 7.16.1 i noticed that API "shorten\_url" is not working anymore. I found Create short URL API | Kibana Guide \[7.16\] | Elastic, but is not clear to me what is: "locatorId" and how to conv…

---

## [Elasticsearch vs relational database](https://discuss.elastic.co/t/elasticsearch-vs-relational-database/183706)

<div class="topic-metadata">

**Author:** [@shayantabrizi](https://discuss.elastic.co/u/shayantabrizi)\
**Replies:** 1\
**Last updated:** [May 31, 2019, 2:50pm UTC](https://discuss.elastic.co/t/elasticsearch-vs-relational-database/183706 "2019-05-31T14:50:50Z")

</div>

If we want to index lots of data of the form \<Key, Value\> (all of the data have the same structure. For example, all of the keys contain values for the same two fields), and then just query them (lookup queries and not e…

---

## [Puppet - Found multiple default providers for elasticsearch\_license](https://discuss.elastic.co/t/puppet-found-multiple-default-providers-for-elasticsearch-license/137441)

<div class="topic-metadata">

**Author:** [@bilsch](https://discuss.elastic.co/u/bilsch)\
**Replies:** 7\
**Last updated:** [June 27, 2018, 9:54pm UTC](https://discuss.elastic.co/t/puppet-found-multiple-default-providers-for-elasticsearch-license/137441 "2018-06-27T21:54:34Z")

</div>

We are in the process of upgrading our puppet module from ~3 years ago with some manual shield hacks to the elastic supported module. Using puppet 4.5.3 ( pe ) , module is 6.3 , host os is rhel 7 I'm getting an error -…

---

## [How do i find the store type of elastic search index?](https://discuss.elastic.co/t/how-do-i-find-the-store-type-of-elastic-search-index/24335)

<div class="topic-metadata">

**Author:** [@skdangi](https://discuss.elastic.co/u/skdangi)\
**Replies:** 1\
**Last updated:** [June 25, 2015, 8:36pm UTC](https://discuss.elastic.co/t/how-do-i-find-the-store-type-of-elastic-search-index/24335 "2015-06-25T20:36:43Z")

</div>

When I send the http request - http://://\_settings , I don't get the store type of my index. I haven't set any store type for the cluster. But I want to know what the elasticcluster chose the store type for my cluster. I…

---

## [Migration data from a cluster to another cluster](https://discuss.elastic.co/t/migration-data-from-a-cluster-to-another-cluster/298915)

<div class="topic-metadata">

**Author:** [@alicango](https://discuss.elastic.co/u/alicango)\
**Replies:** 6\
**Last updated:** [March 6, 2022, 11:41pm UTC](https://discuss.elastic.co/t/migration-data-from-a-cluster-to-another-cluster/298915 "2022-03-06T23:41:53Z")

</div>

Hello, dear community, Assume that I have got 2 different clusters(Cluster-A and Cluster-B). Each cluster has 3 master nodes, 2 hot nodes, 2 warm nodes, and 2 cold nodes. My goal is to migrate all data from Cluster-A t…

---

## [Timelion help](https://discuss.elastic.co/t/timelion-help/115621)

<div class="topic-metadata">

**Author:** [@kanthimathi](https://discuss.elastic.co/u/kanthimathi)\
**Replies:** 5\
**Last updated:** [January 17, 2018, 1:50am UTC](https://discuss.elastic.co/t/timelion-help/115621 "2018-01-17T01:50:36Z")

</div>

In Timelion i wanted to visualise cpu usage per pod. I am using metricbeats for this purpose. .es(index=metricbeat-\*, timefield='@timestamp', metric='avg:system.cpu.user.pct').label('current hour').title('CPU usage over…

---

## [ElasticSearch multiple path.data not storing in all directories](https://discuss.elastic.co/t/elasticsearch-multiple-path-data-not-storing-in-all-directories/103526)

<div class="topic-metadata">

**Author:** [@hasan\_sharekhan](https://discuss.elastic.co/u/hasan_sharekhan)\
**Replies:** 5\
**Last updated:** [October 11, 2017, 10:14am UTC](https://discuss.elastic.co/t/elasticsearch-multiple-path-data-not-storing-in-all-directories/103526 "2017-10-11T10:14:04Z")

</div>

I have 3 nodes of ElasticSearch v5.5 (node0, node1, node2) I have set path.data to 5 different directories for each node on CentOS 7 i.e. /elk\_data0, /elk\_data1, /elk\_data2, /elk\_data3, /elk\_data4 My problem is data i…

---

## [Capture bandwidth of each unique url](https://discuss.elastic.co/t/capture-bandwidth-of-each-unique-url/91310)

<div class="topic-metadata">

**Author:** [@Allan\_John](https://discuss.elastic.co/u/Allan_John)\
**Replies:** 5\
**Last updated:** [July 4, 2017, 3:35am UTC](https://discuss.elastic.co/t/capture-bandwidth-of-each-unique-url/91310 "2017-07-04T03:35:11Z")

</div>

Hi, I have some urls that come in this format in elastic search: 192.168.1.1/livestream/test/media.m3u8 192.168.1.1/livestream/test/media\_aqbcd00100.ts 192.168.1.1/livestream/test/media\_aqbcd00101.ts 192.168.1.1/liv…

---

## [Unable to create index after x-pack](https://discuss.elastic.co/t/unable-to-create-index-after-x-pack/76559)

<div class="topic-metadata">

**Author:** [@ankitc7](https://discuss.elastic.co/u/ankitc7)\
**Replies:** 5\
**Last updated:** [February 28, 2017, 11:09pm UTC](https://discuss.elastic.co/t/unable-to-create-index-after-x-pack/76559 "2017-02-28T23:09:30Z")

</div>

Hello, Filebeat, Logstash, Elasticsearch were working sucessfully until I installed x-pack. Now when I try to index data, I get this: \[2017-02-26T16:10:45,438\]\[WARN \]\[logstash.outputs.elasticsearch\] Failed action. {:sta…

---

## [HPROF Created on ES 6.2.2](https://discuss.elastic.co/t/hprof-created-on-es-6-2-2/126967)

<div class="topic-metadata">

**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\
**Replies:** 2\
**Last updated:** [April 6, 2018, 10:29am UTC](https://discuss.elastic.co/t/hprof-created-on-es-6-2-2/126967 "2018-04-06T10:29:32Z")

</div>

Hi, I installed ELK 6.2 version and allocated -Xms1g as heap space and 370 GB space left out in the drive. Not sure what queries had been passed thru Kibana, Elastic Search stopped abruptly and created a HPROF file, I t…

---

## [Check if sub-field exists](https://discuss.elastic.co/t/check-if-sub-field-exists/66046)

<div class="topic-metadata">

**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\
**Replies:** 2\
**Last updated:** [November 15, 2016, 7:08am UTC](https://discuss.elastic.co/t/check-if-sub-field-exists/66046 "2016-11-15T07:08:20Z")

</div>

I need an if else statement to check if a sub field exists. I want ed to know if a sub-field "city\_name" exists in main field dst\_geoip. Below is what I'm trying to do if !\[dst\_geoip\]\[city\_name\] {mutate{add\_field …

---

## [Higher score for documents which start with searched word](https://discuss.elastic.co/t/higher-score-for-documents-which-start-with-searched-word/28911)

<div class="topic-metadata">

**Author:** [@lenych](https://discuss.elastic.co/u/lenych)\
**Replies:** 2\
**Last updated:** [September 9, 2015, 5:46pm UTC](https://discuss.elastic.co/t/higher-score-for-documents-which-start-with-searched-word/28911 "2015-09-09T17:46:00Z")

</div>

Hello, I cannot figure out a way to assign higher relevance for the documents based on the order of the searched term in the document field. For instance, if we search for "egg" in documents: "bagel, egg", "egg, raw,…

---

## [Search multiple indices in Kibana 4?](https://discuss.elastic.co/t/search-multiple-indices-in-kibana-4/22280)

<div class="topic-metadata">

**Author:** [@Chris\_Neal](https://discuss.elastic.co/u/Chris_Neal)\
**Replies:** 2\
**Last updated:** [July 22, 2015, 5:03pm UTC](https://discuss.elastic.co/t/search-multiple-indices-in-kibana-4/22280 "2015-07-22T17:03:55Z")

</div>

Hi all, Trying out Kibana 4's new release today, and was wondering is this is still possible. In Kibana 3, you could simply comma-delimit all the index patterns you wanted to expose to your searches, but that doesn…

---

## [Metricbeat IIS Module - There is more data to return than will fit in the supplied buffer](https://discuss.elastic.co/t/metricbeat-iis-module-there-is-more-data-to-return-than-will-fit-in-the-supplied-buffer/240442)

<div class="topic-metadata">

**Author:** [@kagoadvs](https://discuss.elastic.co/u/kagoadvs)\
**Replies:** 4\
**Last updated:** [August 6, 2020, 9:52am UTC](https://discuss.elastic.co/t/metricbeat-iis-module-there-is-more-data-to-return-than-will-fit-in-the-supplied-buffer/240442 "2020-08-06T09:52:24Z")

</div>

After enabling the IIS Module in Metricbeat 7.8 (Windows Server 2019 Standard), I am continuously getting errors in the Metricbeat log file: |2020-07-08T20:35:20.831-0700|ERROR|\[website\]|application\_pool/reader.go:94|Th…

---

## [Scripted fields and nested](https://discuss.elastic.co/t/scripted-fields-and-nested/193587)

<div class="topic-metadata">

**Author:** [@popopo](https://discuss.elastic.co/u/popopo)\
**Replies:** 4\
**Last updated:** [August 6, 2019, 5:34am UTC](https://discuss.elastic.co/t/scripted-fields-and-nested/193587 "2019-08-06T05:34:35Z")

</div>

Hi everyone, I'm having trouble using scripted fields in Kibana... Here's my mapping: { "mappings": { "\_doc": { "properties": { "modules": { "type": "nested", "properties": { …

---

## [Retrieve all fields not working with java API](https://discuss.elastic.co/t/retrieve-all-fields-not-working-with-java-api/79067)

<div class="topic-metadata">

**Author:** [@Pasquale\_Lodise](https://discuss.elastic.co/u/Pasquale_Lodise)\
**Replies:** 4\
**Last updated:** [March 20, 2017, 9:52am UTC](https://discuss.elastic.co/t/retrieve-all-fields-not-working-with-java-api/79067 "2017-03-20T09:52:48Z")

</div>

Hi all, i'm new to elastic. I'm using latest version ( 5.2 ) I have a problem: if i search for all data in an index using HTTP REST, i receive the correct JSON with the desired data with all fields, like this: "hits":…

---

## [Some answers needed on the technical what/how of Filebeat](https://discuss.elastic.co/t/some-answers-needed-on-the-technical-what-how-of-filebeat/54616)

<div class="topic-metadata">

**Author:** [@JohnnyS](https://discuss.elastic.co/u/JohnnyS)\
**Replies:** 8\
**Last updated:** [July 4, 2016, 11:38am UTC](https://discuss.elastic.co/t/some-answers-needed-on-the-technical-what-how-of-filebeat/54616 "2016-07-04T11:38:12Z")

</div>

Hi As I'm still new on filebeat, can I ask somebody: Technical what/how ? • (1) Capture text in log file “error” • (2) Capture reg.exp in log file “\[A-Z\]+-\[0-9\]\*/ERR” • Logical operators : capture ( “pattern-1” || “p…

---

## [Handle nested xml file with logstash and ruby script](https://discuss.elastic.co/t/handle-nested-xml-file-with-logstash-and-ruby-script/153603)

<div class="topic-metadata">

**Author:** [@humalog](https://discuss.elastic.co/u/humalog)\
**Replies:** 3\
**Last updated:** [October 25, 2018, 6:45am UTC](https://discuss.elastic.co/t/handle-nested-xml-file-with-logstash-and-ruby-script/153603 "2018-10-25T06:45:53Z")

</div>

Hello, I have an XML structure \<?xml version="1.0" ?\> \<XMLdata\> \<Policy\> \<policyName\>Arena Standard\</policyName\> \<Preferences\> \<ServerPreferences\>max\_simult\_tcp\_sessions\>\</Server…

---

## [Install x-pack](https://discuss.elastic.co/t/install-x-pack/81830)

<div class="topic-metadata">

**Author:** [@Chemse](https://discuss.elastic.co/u/Chemse)\
**Replies:** 3\
**Last updated:** [April 10, 2017, 2:52pm UTC](https://discuss.elastic.co/t/install-x-pack/81830 "2017-04-10T14:52:47Z")

</div>

Hello, I have installed Elasticsearch and Kibana on window 7, and now I want to install the plugin x-pack, I've tried two methods the first one is bin\\elasticsearch-plugin install x-pack but i get this problem: …

---

## [Failed unmarshalling json: invalid character 'i' look ing for beginning of value](https://discuss.elastic.co/t/failed-unmarshalling-json-invalid-character-i-look-ing-for-beginning-of-value/1412)

<div class="topic-metadata">

**Author:** [@iinquisitivee](https://discuss.elastic.co/u/iinquisitivee)\
**Replies:** 0\
**Last updated:** [May 27, 2015, 5:46pm UTC](https://discuss.elastic.co/t/failed-unmarshalling-json-invalid-character-i-look-ing-for-beginning-of-value/1412 "2015-05-27T17:46:11Z")

</div>

my first excercise with logstash so pls pardon anything silly (runing on windows) I was trying it based on the blog post here.. http://blog.webkid.io/visualize-datasets-with-elk/ and get an error when running logstas…

---

## [Logstash YUM installation issue!](https://discuss.elastic.co/t/logstash-yum-installation-issue/110105)

<div class="topic-metadata">

**Author:** [@SJN8](https://discuss.elastic.co/u/SJN8)\
**Replies:** 1\
**Last updated:** [December 4, 2017, 9:47am UTC](https://discuss.elastic.co/t/logstash-yum-installation-issue/110105 "2017-12-04T09:47:42Z")

</div>

Hi All, I am trying to install logstash with YUM package method , But i am facing below issue , sudo yum update logstash Loaded plugins: aliases, changelog, fastestmirror, kabi, langpacks, tmprepo, verify, versionl…

---

## [APM's dependency is blank but data found in indices](https://discuss.elastic.co/t/apms-dependency-is-blank-but-data-found-in-indices/309760)

<div class="topic-metadata">

**Author:** [@swchandu](https://discuss.elastic.co/u/swchandu)\
**Replies:** 0\
**Last updated:** [July 15, 2022, 6:08pm UTC](https://discuss.elastic.co/t/apms-dependency-is-blank-but-data-found-in-indices/309760 "2022-07-15T18:08:48Z")

</div>

Hi, I am using elk 8.2.2 and found a strange issue recently. The APM module is working fine except the Dependencies . It is blank for all services. I have also tried re-attaching the APM integration with kibana objects…

---

## [Fleet server setup documentation incorrect when using quickstart + (elastic with TLS)](https://discuss.elastic.co/t/fleet-server-setup-documentation-incorrect-when-using-quickstart-elastic-with-tls/288526)

<div class="topic-metadata">

**Author:** [@tfriesen](https://discuss.elastic.co/u/tfriesen)\
**Replies:** 0\
**Last updated:** [November 5, 2021, 8:38pm UTC](https://discuss.elastic.co/t/fleet-server-setup-documentation-incorrect-when-using-quickstart-elastic-with-tls/288526 "2021-11-05T20:38:48Z")

</div>

The documentation for setting up a fleet server, both the online guide and via the 'Add a fleet server', don't account for a situation where Elasticsearch is configured with TLS, but you want to use Quickstart for settin…

---

## [Search colon separated values in text field in Kibana fails](https://discuss.elastic.co/t/search-colon-separated-values-in-text-field-in-kibana-fails/81797)

<div class="topic-metadata">

**Author:** [@UnoSD](https://discuss.elastic.co/u/UnoSD)\
**Replies:** 2\
**Last updated:** [April 11, 2017, 9:30am UTC](https://discuss.elastic.co/t/search-colon-separated-values-in-text-field-in-kibana-fails/81797 "2017-04-11T09:30:25Z")

</div>

Kibana version: 5.3.0 Elasticsearch version: 5.3.0 Browser version: Chrome 56 I have some data with the following structure: { "\_index": "...", "\_type": "...", "\_id": "...", "\_score": null, "\_source": {…

---

## [Visualization and Dynamically Parse Field Values](https://discuss.elastic.co/t/visualization-and-dynamically-parse-field-values/29178)

<div class="topic-metadata">

**Author:** [@coderlol](https://discuss.elastic.co/u/coderlol)\
**Replies:** 1\
**Last updated:** [September 12, 2015, 10:56pm UTC](https://discuss.elastic.co/t/visualization-and-dynamically-parse-field-values/29178 "2015-09-12T22:56:34Z")

</div>

I have log events with the following fields: src.class: MyClass src.method: myMethod message: start=12345678,end=12345679,duration=1 src.class: MyClass src.method: myMethod message: start=12345678,end=12345678,durati…

---

## [Enrollment Issue of fleet agent](https://discuss.elastic.co/t/enrollment-issue-of-fleet-agent/292655)

<div class="topic-metadata">

**Author:** [@MuhammadBilal](https://discuss.elastic.co/u/MuhammadBilal)\
**Replies:** 6\
**Last updated:** [January 10, 2022, 3:40pm UTC](https://discuss.elastic.co/t/enrollment-issue-of-fleet-agent/292655 "2022-01-10T15:40:02Z")

</div>

Hello, I m trying to integrate elastic endpoint security into my ELK stack, i have successfully install fleet and elastic agent to my endpoint but the issue is endpoint is not appearing in endpoint management in kibana. …

---

## [Duplicate and forward logs to a new instance of Elasticsearch](https://discuss.elastic.co/t/duplicate-and-forward-logs-to-a-new-instance-of-elasticsearch/182819)

<div class="topic-metadata">

**Author:** [@Camilo\_Diaz](https://discuss.elastic.co/u/Camilo_Diaz)\
**Replies:** 6\
**Last updated:** [June 5, 2019, 11:10pm UTC](https://discuss.elastic.co/t/duplicate-and-forward-logs-to-a-new-instance-of-elasticsearch/182819 "2019-06-05T23:10:42Z")

</div>

Hi, I am fairly new to ELK and I am seeking some advice. I have inherited an ELK stack which is processing logs from multiple sources and I am looking into forwarding some of those logs to another instance of Elasticsea…

---

## [Newbee with logstash an JSON](https://discuss.elastic.co/t/newbee-with-logstash-an-json/52714)

<div class="topic-metadata">

**Author:** [@paracetamol](https://discuss.elastic.co/u/paracetamol)\
**Replies:** 6\
**Last updated:** [June 17, 2016, 7:13am UTC](https://discuss.elastic.co/t/newbee-with-logstash-an-json/52714 "2016-06-17T07:13:04Z")

</div>

Hi, I'm polling a JSON with th following config file: input { http\_poller { urls =\> { myresource =\> "http://192.168.32.40/json/daily.json" } request\_timeout =\> 60 interval =\> 60 codec…

---

## [Issue with Logstash, ILM and Data stream](https://discuss.elastic.co/t/issue-with-logstash-ilm-and-data-stream/364897)

<div class="topic-metadata">

**Author:** [@fio23](https://discuss.elastic.co/u/fio23)\
**Replies:** 5\
**Last updated:** [December 19, 2024, 7:28am UTC](https://discuss.elastic.co/t/issue-with-logstash-ilm-and-data-stream/364897 "2024-12-19T07:28:34Z")

</div>

Hello all, I'm currently trying to create a data stream with a corresponding ILM policy enabled, and then have Logstash to forward logs to that data stream. See below steps I follow: Create Component Template PUT \_co…

---

## [Connection failed thru ODBC (x\_content\_parse\_exception) to ES 7.2.0](https://discuss.elastic.co/t/connection-failed-thru-odbc-x-content-parse-exception-to-es-7-2-0/191957)

<div class="topic-metadata">

**Author:** [@jakubg](https://discuss.elastic.co/u/jakubg)\
**Replies:** 5\
**Last updated:** [August 5, 2019, 11:42pm UTC](https://discuss.elastic.co/t/connection-failed-thru-odbc-x-content-parse-exception-to-es-7-2-0/191957 "2019-08-05T23:42:02Z")

</div>

Hi, I am trying to connect via ODBC driver in version 7.2.0 on Windows 10 to our Elasticsearch cluster. Everything was working fine on Elasticsearch v7.1.1, but after upgrading to 7.2.0 we are receiving just this error m…

---

## [Flag redefinition crash](https://discuss.elastic.co/t/flag-redefinition-crash/117850)

<div class="topic-metadata">

**Author:** [@sujithattinad](https://discuss.elastic.co/u/sujithattinad)\
**Replies:** 5\
**Last updated:** [February 1, 2018, 8:45am UTC](https://discuss.elastic.co/t/flag-redefinition-crash/117850 "2018-02-01T08:45:39Z")

</div>

while executing custom metric beat it shows the following error log run command : ./cantiz-iot-beat-cassandra -e Out put ./cantiz-iot-beat-cassandra flag redefined: v \`panic: ./cantiz-iot-beat-cassandra flag r…

---

## [Filebeat paths logic](https://discuss.elastic.co/t/filebeat-paths-logic/68687)

<div class="topic-metadata">

**Author:** [@Arthur\_Francis](https://discuss.elastic.co/u/Arthur_Francis)\
**Replies:** 5\
**Last updated:** [December 15, 2016, 1:32pm UTC](https://discuss.elastic.co/t/filebeat-paths-logic/68687 "2016-12-15T13:32:50Z")

</div>

Hi, Are there any other alternatives to using a wildcard (\*) in filebeat when defining a log path. My application generates a numeric directory tree based on its activity lifecycle 34..35..36 etc The amount of direc…

---

## [Elastic Agents error after installation: ...fleet-server returned an error: MaxLimit](https://discuss.elastic.co/t/elastic-agents-error-after-installation-fleet-server-returned-an-error-maxlimit/278716)

<div class="topic-metadata">

**Author:** [@jamespichardo](https://discuss.elastic.co/u/jamespichardo)\
**Replies:** 3\
**Last updated:** [July 19, 2021, 5:09pm UTC](https://discuss.elastic.co/t/elastic-agents-error-after-installation-fleet-server-returned-an-error-maxlimit/278716 "2021-07-19T17:09:21Z")

</div>

After installing, Elastic Agents it keeps in "Offline" state and "Healthy" intermittently. When checking Agent logs I found this error several times: -- \[elastic\_agent\]\[error\] Could not communicate with fleet-server Ch…

---

## [Can\`t start Elastin on CentOS 7](https://discuss.elastic.co/t/can-t-start-elastin-on-centos-7/108294)

<div class="topic-metadata">

**Author:** [@esisl](https://discuss.elastic.co/u/esisl)\
**Replies:** 3\
**Last updated:** [November 20, 2017, 7:43pm UTC](https://discuss.elastic.co/t/can-t-start-elastin-on-centos-7/108294 "2017-11-20T19:43:23Z")

</div>

I work with Elastin in CentOS 6 Now migrate on CentOS 7 /etc/elasticsearch/elasticsearch.yml cluster.name: my-application node.name: node-1 path.data: /var/lib/elasticsearch path.logs: /var/log/elasticsearch network.h…

---

## [Pushing the data from Perfmon to elasticsearch](https://discuss.elastic.co/t/pushing-the-data-from-perfmon-to-elasticsearch/50685)

<div class="topic-metadata">

**Author:** [@Prateek\_Kshtriya](https://discuss.elastic.co/u/Prateek_Kshtriya)\
**Replies:** 3\
**Last updated:** [May 23, 2016, 10:14am UTC](https://discuss.elastic.co/t/pushing-the-data-from-perfmon-to-elasticsearch/50685 "2016-05-23T10:14:16Z")

</div>

Hi All, I need to post the perfmon data for visualization. Currently I am saving perfmon data collector data set as CSV and then sending it to elasticsearch for visualization. So every time when I restart perfmon data …

---

## [Do unique/reusable \_scroll\_ids exist?](https://discuss.elastic.co/t/do-unique-reusable--scroll-ids-exist/12280)

<div class="topic-metadata">

**Author:** [@Oli\_McCormack](https://discuss.elastic.co/u/Oli_McCormack)\
**Replies:** 3\
**Last updated:** [June 10, 2013, 6:12pm UTC](https://discuss.elastic.co/t/do-unique-reusable--scroll-ids-exist/12280 "2013-06-10T18:12:27Z")

</div>

Hi guys, I'm attempting to implement pagination for our application. The catch is that our documents require a little post-query filtering, so sometimes if a user requests 500 documents, we scroll, get 500 from ES…

---

## [Error when port data from mySQL](https://discuss.elastic.co/t/error-when-port-data-from-mysql/167344)

<div class="topic-metadata">

**Author:** [@vschaefer](https://discuss.elastic.co/u/vschaefer)\
**Replies:** 4\
**Last updated:** [February 7, 2019, 2:31pm UTC](https://discuss.elastic.co/t/error-when-port-data-from-mysql/167344 "2019-02-07T14:31:06Z")

</div>

I'm a little desperate. I'm trying to index data from a MySQL database. But it just won't work. Can you tell me what I'm doing wrong? Elasticsearch and Kibana is running and the MySQL database is available. Here is my…

---

## [Create snapshot failed](https://discuss.elastic.co/t/create-snapshot-failed/91485)

<div class="topic-metadata">

**Author:** [@kmroz](https://discuss.elastic.co/u/kmroz)\
**Replies:** 4\
**Last updated:** [July 5, 2017, 2:01pm UTC](https://discuss.elastic.co/t/create-snapshot-failed/91485 "2017-07-05T14:01:22Z")

</div>

I am trying to create a repo with the api, I have setup NFS mounts on the hosts in my cluster. When using this command " curl -XPUT 'http://localhost:9200/\_snapshot/es-backup1' -d '{ "type": "fs", "settings": { …

---

## [Lost gelf logs](https://discuss.elastic.co/t/lost-gelf-logs/79924)

<div class="topic-metadata">

**Author:** [@jazz](https://discuss.elastic.co/u/jazz)\
**Replies:** 4\
**Last updated:** [April 10, 2017, 2:12pm UTC](https://discuss.elastic.co/t/lost-gelf-logs/79924 "2017-04-10T14:12:02Z")

</div>

We have an ELK cluster with 3 hosts on Ubuntu 14.04 (logstash 2.4.1+ES 2.4.1 on each host in Docker containers), with logstash configured to receive gelf and syslog/tcp logs. Sometimes some gelf logs are lost. With …

---

## [Retrieve password from keystore key](https://discuss.elastic.co/t/retrieve-password-from-keystore-key/237409)

<div class="topic-metadata">

**Author:** [@Bikash\_Swain](https://discuss.elastic.co/u/Bikash_Swain)\
**Replies:** 2\
**Last updated:** [June 17, 2020, 1:42pm UTC](https://discuss.elastic.co/t/retrieve-password-from-keystore-key/237409 "2020-06-17T13:42:43Z")

</div>

We have different keystore keys for elasticsearch , logstash , kibana and filebeat and all the processes read passwords from their key. Is there a way to retrieve password from that key in linux prompt or through any AP…

---

## [Cannot make packetbeat work](https://discuss.elastic.co/t/cannot-make-packetbeat-work/46467)

<div class="topic-metadata">

**Author:** [@ageldenberg](https://discuss.elastic.co/u/ageldenberg)\
**Replies:** 2\
**Last updated:** [April 6, 2016, 5:19pm UTC](https://discuss.elastic.co/t/cannot-make-packetbeat-work/46467 "2016-04-06T17:19:48Z")

</div>

Hello, beats wizards. I will greatly appreciate help in making packetbeats work. I have the following configuration. An Ubuntu-based sensor with two interfaces (management and sniffing) is running packetbeat versi…

---

## [Java API for multiple sub-aggregations](https://discuss.elastic.co/t/java-api-for-multiple-sub-aggregations/17323)

<div class="topic-metadata">

**Author:** [@Saravanan\_Shanmugasu](https://discuss.elastic.co/u/Saravanan_Shanmugasu)\
**Replies:** 2\
**Last updated:** [July 25, 2014, 9:03am UTC](https://discuss.elastic.co/t/java-api-for-multiple-sub-aggregations/17323 "2014-07-25T09:03:40Z")

</div>

Hi, I am trying to find out the JAVA API that supports nested sub-aggregations in ES. However, the current API's doesn't provide the clear implementation. Req: property1 , property 2 .... property n Using …

---

## [Find documents where field1 is equal to substring of field2](https://discuss.elastic.co/t/find-documents-where-field1-is-equal-to-substring-of-field2/108025)

<div class="topic-metadata">

**Author:** [@Pierig\_LeSaux](https://discuss.elastic.co/u/Pierig_LeSaux)\
**Replies:** 1\
**Last updated:** [November 17, 2017, 8:13am UTC](https://discuss.elastic.co/t/find-documents-where-field1-is-equal-to-substring-of-field2/108025 "2017-11-17T08:13:45Z")

</div>

Hello, I am writing a query to find all documents that have a field equal to a substring of another field { "query": { "bool" : { "filter" : { "script" : { "s…

---

## [Is there a limit on the number of ILM Policies that can be created in a Cluster?](https://discuss.elastic.co/t/is-there-a-limit-on-the-number-of-ilm-policies-that-can-be-created-in-a-cluster/323398)

<div class="topic-metadata">

**Author:** [@siddhartha\_c](https://discuss.elastic.co/u/siddhartha_c)\
**Replies:** 2\
**Last updated:** [January 19, 2023, 5:40am UTC](https://discuss.elastic.co/t/is-there-a-limit-on-the-number-of-ilm-policies-that-can-be-created-in-a-cluster/323398 "2023-01-19T05:40:57Z")

</div>

I have a situation where I need to create 120 indices , wherein each index has the data for a particular month. The data is stored for past 10 years (12 month\*10 year = 120 indices). Each index hold 1 month Data. I ha…

---

## [Kibana Upgrade from 7.12 to 7.13.3 using migrations.enableV2: false](https://discuss.elastic.co/t/kibana-upgrade-from-7-12-to-7-13-3-using-migrations-enablev2-false/284808)

<div class="topic-metadata">

**Author:** [@qiratnahraf](https://discuss.elastic.co/u/qiratnahraf)\
**Replies:** 8\
**Last updated:** [October 1, 2021, 8:52am UTC](https://discuss.elastic.co/t/kibana-upgrade-from-7-12-to-7-13-3-using-migrations-enablev2-false/284808 "2021-10-01T08:52:37Z")

</div>

Hi, We upgraded our kibana from 7.12 to 7.13.3 with migrations.enableV2: false set in configuration. The kibana instance upgraded successfully but Now we are getting following error when trying to save searches or rul…

---

## [Metricbeat jolokia autodiscover question](https://discuss.elastic.co/t/metricbeat-jolokia-autodiscover-question/243736)

<div class="topic-metadata">

**Author:** [@ZMMWMY](https://discuss.elastic.co/u/ZMMWMY)\
**Replies:** 8\
**Last updated:** [August 12, 2020, 2:45am UTC](https://discuss.elastic.co/t/metricbeat-jolokia-autodiscover-question/243736 "2020-08-12T02:45:43Z")

</div>

this is my config , no jvm data sent to es ,so what goes wrong with this config version : 7.6.0 metricbeat.yml metricbeat.config.modules: # Mounted \`metricbeat-daemonset-modules\` configmap: path: ${path.config}/mo…

[Previous page](https://discuss.elastic.co/top.md?page=983&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=985&per_page=50&period=all)
