# Top **URL:** https://discuss.elastic.co/top.md?page=99&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 100 --- ## [Syslog not working](https://discuss.elastic.co/t/syslog-not-working/131950)
**Author:** [@TheOnlyOne](https://discuss.elastic.co/u/TheOnlyOne)\ **Replies:** 13\ **Last updated:** [May 19, 2018, 6:53pm UTC](https://discuss.elastic.co/t/syslog-not-working/131950 "2018-05-19T18:53:09Z")
Hello, i get no logs from syslog 2 different syslog server first i have try with Port 514, but this port is not allowed then i will switch to port 5044 (high port). ive got this error message in logstash.log \[2018-05-… --- ## [Attempt to divide two fields at the aggregate level causing infinity response](https://discuss.elastic.co/t/attempt-to-divide-two-fields-at-the-aggregate-level-causing-infinity-response/296198)
**Author:** [@LuigiGalati](https://discuss.elastic.co/u/LuigiGalati)\ **Replies:** 20\ **Last updated:** [February 5, 2022, 11:08pm UTC](https://discuss.elastic.co/t/attempt-to-divide-two-fields-at-the-aggregate-level-causing-infinity-response/296198 "2022-02-05T23:08:45Z")
I am feeding kibana with an HR dataset from peoplesoft. The data is beginning, end and termination counts by fiscal year. There is no timestamped data used. I need to calculate percent turnover which is Terminations/(Ave… --- ## [Index balance in the cluster](https://discuss.elastic.co/t/index-balance-in-the-cluster/241371)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 12\ **Last updated:** [July 20, 2020, 7:04am UTC](https://discuss.elastic.co/t/index-balance-in-the-cluster/241371 "2020-07-20T07:04:27Z")
Hello All, I have noticed that I have 1 server out of 5 in the cluster, that stores the majority of the data/indices. Also, one of the nodes holds a lower number of shards. How can I balance the indices across the nod… --- ## [Winlogbeat New ECS Fields and security module questions](https://discuss.elastic.co/t/winlogbeat-new-ecs-fields-and-security-module-questions/190479)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 15\ **Last updated:** [September 6, 2019, 2:50pm UTC](https://discuss.elastic.co/t/winlogbeat-new-ecs-fields-and-security-module-questions/190479 "2019-09-06T14:50:14Z")
Hi, I've been working on events 4624 (An account was successfully logged on), 4634 (An account was logged off), 4672 (Special privileges assigned to new logon) in order to correlate logon information about Administrato… --- ## [Confused about setting up Kibana with X-Pack Security](https://discuss.elastic.co/t/confused-about-setting-up-kibana-with-x-pack-security/158448)
**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\ **Replies:** 15\ **Last updated:** [December 3, 2018, 12:11pm UTC](https://discuss.elastic.co/t/confused-about-setting-up-kibana-with-x-pack-security/158448 "2018-12-03T12:11:31Z")
I'm doing a trial of X-Pack but am struggling with setting up TLS. I followed the instructions on how to use X-Pack certutil to create a CA, then use that to create certs for each Elasticsearch node. However, when I get … --- ## [Unique feilds count](https://discuss.elastic.co/t/unique-feilds-count/294268)
**Author:** [@Naga\_Prudhvi](https://discuss.elastic.co/u/Naga_Prudhvi)\ **Replies:** 9\ **Last updated:** [January 13, 2022, 6:25pm UTC](https://discuss.elastic.co/t/unique-feilds-count/294268 "2022-01-13T18:25:16Z")
How can i right DSL query for count of unique value in fields (Colom) for one day. where unique value is greater than 15 SQL example: select /+parallel(15)/ fruits ,count(1) from all\_items where LOAD\_DATE=trunc(sysda… --- ## [Executing Alert has resulted in Error](https://discuss.elastic.co/t/executing-alert-has-resulted-in-error/267889)
**Author:** [@radovan](https://discuss.elastic.co/u/radovan)\ **Replies:** 9\ **Last updated:** [March 22, 2021, 1:32pm UTC](https://discuss.elastic.co/t/executing-alert-has-resulted-in-error/267889 "2021-03-22T13:32:15Z")
Hi, so I tried to setup multiple Kibana instances in our self-managed environment hoping it will improve alerting and detections performance. Together there are 4 Kibana instances, 2 were setup before (as a service with… --- ## [Complex polygons errors (geo\_shape)](https://discuss.elastic.co/t/complex-polygons-errors-geo-shape/11932)
**Author:** [@Jilles\_van\_Gurp](https://discuss.elastic.co/u/Jilles_van_Gurp)\ **Replies:** 11\ **Last updated:** [July 15, 2013, 11:11am UTC](https://discuss.elastic.co/t/complex-polygons-errors-geo-shape/11932 "2013-07-15T11:11:40Z")
I've been indexing some complex polygons using the geo\_shape type from e.g. http://code.flickr.net/2011/01/08/flickr-shapefiles-public-dataset-2-0/ and https://github.com/johan/world.geo.json. Both files are in geojs… --- ## [\[Resolved\] Elasticsearch 2.1.0 indexing 40% slower than 1.7.0](https://discuss.elastic.co/t/resolved-elasticsearch-2-1-0-indexing-40-slower-than-1-7-0/37230)
**Author:** [@dimitris](https://discuss.elastic.co/u/dimitris)\ **Replies:** 13\ **Last updated:** [December 16, 2015, 4:18pm UTC](https://discuss.elastic.co/t/resolved-elasticsearch-2-1-0-indexing-40-slower-than-1-7-0/37230 "2015-12-16T16:18:53Z")
We have upgraded from version 1.7.0 to 2.1.0. Running our regression test suite and maintaining the same settings as before (e.g. 1 shard/index, 0 replicas) we observe a 40% slowdown. I even tried simply sending some doc… --- ## [What's eating node's memory?](https://discuss.elastic.co/t/whats-eating-nodes-memory/35366)
**Author:** [@michaelr524](https://discuss.elastic.co/u/michaelr524)\ **Replies:** 9\ **Last updated:** [November 30, 2015, 10:52am UTC](https://discuss.elastic.co/t/whats-eating-nodes-memory/35366 "2015-11-30T10:52:26Z")
Hi, We are running a 3 node cluster, 25GB each, index size is 3TB at the moment. Only running indexing, no searches have been made and heap usage moves between 75%-95%. We are running two parallel indexers, each sendin… --- ## [Import csv file to elasticsearch using logstash](https://discuss.elastic.co/t/import-csv-file-to-elasticsearch-using-logstash/83682)
**Author:** [@zegdene](https://discuss.elastic.co/u/zegdene)\ **Replies:** 12\ **Last updated:** [April 26, 2017, 3:57pm UTC](https://discuss.elastic.co/t/import-csv-file-to-elasticsearch-using-logstash/83682 "2017-04-26T15:57:25Z")
Hi, I need to import a csv file to elasticsearch using logstash, i create a file.config: input { file { path =\> "/Users/salma/Desktop/creditcard.csv" start\_position =\> "beginning" since… --- ## [Problem with cipher not available](https://discuss.elastic.co/t/problem-with-cipher-not-available/117987)
**Author:** [@iDavico](https://discuss.elastic.co/u/iDavico)\ **Replies:** 9\ **Last updated:** [March 2, 2018, 1:18am UTC](https://discuss.elastic.co/t/problem-with-cipher-not-available/117987 "2018-03-02T01:18:22Z")
Hi, I have a problem with logstash 5.3.3. When i start Logstash, the folowing error is generated: Pipeline aborted due to error {:exception=\>#\ **Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\ **Replies:** 20\ **Last updated:** [September 23, 2020, 6:34pm UTC](https://discuss.elastic.co/t/transforms-how-to-check-next-run-time/249150 "2020-09-23T18:34:56Z") Hi, I created a continuous Transforms to run once a day and calculate the P95 of some fields for the previous 24hrs. When I initially created and started this Transform it created the daily P95 values from all the previo… --- ## [Logstash Indexer to Elastcsearch Tunnings ( must go faster!)](https://discuss.elastic.co/t/logstash-indexer-to-elastcsearch-tunnings-must-go-faster/58171)
**Author:** [@eperry](https://discuss.elastic.co/u/eperry)\ **Replies:** 13\ **Last updated:** [August 29, 2016, 1:10am UTC](https://discuss.elastic.co/t/logstash-indexer-to-elastcsearch-tunnings-must-go-faster/58171 "2016-08-29T01:10:37Z")
Hi, I am trying to come up with tunning settings for my Logstash Indexer It sits between Kafka and Elasticsearch (Pulling off of 1 topic called logstash with 25 partitions) I have 12 nodes (2 client, 3 masters and t… --- ## [\[7.2\] Kibana plugin development possible bug](https://discuss.elastic.co/t/7-2-kibana-plugin-development-possible-bug/204672)
**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\ **Replies:** 19\ **Last updated:** [October 24, 2019, 9:19am UTC](https://discuss.elastic.co/t/7-2-kibana-plugin-development-possible-bug/204672 "2019-10-24T09:19:01Z")
Hi there! I'm having some problems developing a kibana plugin for this specific Kibana version. If I make EXACTLY the same steps which I'm about to describe to develop the plugin for version 7.0 or 7.1 or even 7.3, it … --- ## [Does a snapshot repo created on default?](https://discuss.elastic.co/t/does-a-snapshot-repo-created-on-default/25377)
**Author:** [@BZen](https://discuss.elastic.co/u/BZen)\ **Replies:** 15\ **Last updated:** [July 18, 2015, 4:04pm UTC](https://discuss.elastic.co/t/does-a-snapshot-repo-created-on-default/25377 "2015-07-18T16:04:30Z")
I'm using Logstash with elasticsearch to index data. I don't remember setting up snapshot for my indices. But today when I look at the data folder, there is a snapshot directory created. Any idead how this can happen? I… --- ## [Зависание и последующее падение сервера elasticsearch](https://discuss.elastic.co/t/elasticsearch/174506)
**Author:** [@AlexEkb](https://discuss.elastic.co/u/AlexEkb)\ **Replies:** 25\ **Last updated:** [April 17, 2019, 1:07pm UTC](https://discuss.elastic.co/t/elasticsearch/174506 "2019-04-17T13:07:56Z")
Здравствуйте. Я добавил в своё rails приложение gem 'elasticsearch-model' gem 'elasticsearch-rails'. Настроил согласно инструкции, поиск работает. Но, постоянно при старте поиска идёт жуткое подвисание всей системы и … --- ## [Increasing index.max\_result\_window using CentOS CLI](https://discuss.elastic.co/t/increasing-index-max-result-window-using-centos-cli/246432)
**Author:** [@hishan42](https://discuss.elastic.co/u/hishan42)\ **Replies:** 11\ **Last updated:** [September 17, 2020, 11:28pm UTC](https://discuss.elastic.co/t/increasing-index-max-result-window-using-centos-cli/246432 "2020-09-17T23:28:13Z")
I am using graylog with mongodb and elasticsearch 6.8 on CentOS 7. Now I have received an error saying "Elasticsearch limits the search result to 10000 messages". How do I increase the index.max\_result\_window? I dont … --- ## [Help on multiline](https://discuss.elastic.co/t/help-on-multiline/99819)
**Author:** [@rosselg](https://discuss.elastic.co/u/rosselg)\ **Replies:** 11\ **Last updated:** [October 18, 2017, 10:47pm UTC](https://discuss.elastic.co/t/help-on-multiline/99819 "2017-10-18T22:47:12Z")
Hi there, I'm trying to translate my logstash configuration for using filebeat and the ingest pipeline feature. While using logstash, I had the following configuration: ---- LOGSTASH ----- input: codec =\> multiline… --- ## [Профилирование запроса](https://discuss.elastic.co/t/topic/123942)
**Author:** [@GreenX](https://discuss.elastic.co/u/GreenX)\ **Replies:** 18\ **Last updated:** [March 22, 2018, 1:55pm UTC](https://discuss.elastic.co/t/topic/123942 "2018-03-22T13:55:47Z")
Доброго времени суток! Пропущу предысторию про тормоза ) В общем, решил понять куда уходит время в запросе. Контрольный запрос выполняется за 1,14сек,. Запустил его с прифилированием, и получается, что на каждой шард… --- ## [Can't delete an ES index](https://discuss.elastic.co/t/cant-delete-an-es-index/58041)
**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\ **Replies:** 11\ **Last updated:** [January 20, 2017, 6:06am UTC](https://discuss.elastic.co/t/cant-delete-an-es-index/58041 "2017-01-20T06:06:27Z")
I deleted an index from elasticsearch using the command curl -XDELETE 'http://localhost:9200/twitter/' and also from the elasticsearch-head plugin interface..however, that index pops up again and populates with data. I… --- ## [Export to CSV shows blank fields](https://discuss.elastic.co/t/export-to-csv-shows-blank-fields/292218)
**Author:** [@Richard\_Schroeder](https://discuss.elastic.co/u/Richard_Schroeder)\ **Replies:** 15\ **Last updated:** [February 9, 2022, 11:36pm UTC](https://discuss.elastic.co/t/export-to-csv-shows-blank-fields/292218 "2022-02-09T23:36:52Z")
I'm exporting data from a view created from the discover module. In the data there is a field that is filled only in some records, less than 10% of records have this field filled. When I filter or export the entire listi… --- ## [Machine learning - host stopped sending logs or events](https://discuss.elastic.co/t/machine-learning-host-stopped-sending-logs-or-events/96938)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 14\ **Last updated:** [August 30, 2017, 1:55pm UTC](https://discuss.elastic.co/t/machine-learning-host-stopped-sending-logs-or-events/96938 "2017-08-30T13:55:54Z")
Hi All, Iam using elastic stack 5.5 to monitor the netflow and sflow and I have two separate indexes , I view them in kibana , for search and dashboards. If i stop receiving the logs in the indexes, from logstash or th… --- ## [JAVA APM Agent Config in Wildfly 8 with JAVA 1.8.0\_144](https://discuss.elastic.co/t/java-apm-agent-config-in-wildfly-8-with-java-1-8-0-144/226377)
**Author:** [@Andre\_Lima](https://discuss.elastic.co/u/Andre_Lima)\ **Replies:** 10\ **Last updated:** [April 3, 2020, 12:29pm UTC](https://discuss.elastic.co/t/java-apm-agent-config-in-wildfly-8-with-java-1-8-0-144/226377 "2020-04-03T12:29:08Z")
Kibana version: 7.6.2 Elasticsearch version: 7.6.2 APM Server version: 7.6.2 APM Agent language and version: elastic-apm-agent-1.15.0.jar Browser version: Chrome Original install method (e.g. download page, yum, deb… --- ## [Kibana can't open through nginx](https://discuss.elastic.co/t/kibana-cant-open-through-nginx/255335)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 12\ **Last updated:** [November 18, 2020, 4:47pm UTC](https://discuss.elastic.co/t/kibana-cant-open-through-nginx/255335 "2020-11-18T16:47:56Z")
I am using elk stack 7.9 with xpack-security. When i dont use nginx it works properly( a login page comes up of kibana).When i use nginx.. i provide the user name and password of nginx but kibana page doesn't open.. i … --- ## [Logstash Event Limit](https://discuss.elastic.co/t/logstash-event-limit/152928)
**Author:** [@peter.alfafara](https://discuss.elastic.co/u/peter.alfafara)\ **Replies:** 9\ **Last updated:** [October 22, 2018, 5:26am UTC](https://discuss.elastic.co/t/logstash-event-limit/152928 "2018-10-22T05:26:10Z")
Hi Experts, I'd like to inquire about logstash limits. I have an event coming in to logstash with about 6700 records however it doesn't process any of these and ignore it. Is there any configuration I can adjust in ord… --- ## [ElasticSearch built-in Jackson stream parser is fastest way to extract fields](https://discuss.elastic.co/t/elasticsearch-built-in-jackson-stream-parser-is-fastest-way-to-extract-fields/11112)
**Author:** [@brian\_yoder](https://discuss.elastic.co/u/brian_yoder)\ **Replies:** 9\ **Last updated:** [May 4, 2015, 2:03pm UTC](https://discuss.elastic.co/t/elasticsearch-built-in-jackson-stream-parser-is-fastest-way-to-extract-fields/11112 "2015-05-04T14:03:30Z")
Just an FYI... Start with, for example, the following JSON document (all on one line for the \_bulk API, but pretty printed below). This follows my basic document struture: An array of field names, whith each of those… --- ## [Getting error while enabled tls](https://discuss.elastic.co/t/getting-error-while-enabled-tls/257525)
**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\ **Replies:** 14\ **Last updated:** [January 6, 2021, 4:22am UTC](https://discuss.elastic.co/t/getting-error-while-enabled-tls/257525 "2021-01-06T04:22:26Z")
Enabled tls certs in elasticsearch and kibana.Using custom certificates and passed the secrets in elasticsearch.yaml. Elasticsearch pods are running. But kibana pod is not in running state. Below are the kibana logs: {… --- ## [Error running rally on existing cluster](https://discuss.elastic.co/t/error-running-rally-on-existing-cluster/111379)
**Author:** [@Alp1](https://discuss.elastic.co/u/Alp1)\ **Replies:** 9\ **Last updated:** [December 15, 2017, 9:08pm UTC](https://discuss.elastic.co/t/error-running-rally-on-existing-cluster/111379 "2017-12-15T21:08:06Z")
Hi , I am following http://esrally.readthedocs.io/en/stable/recipes.html#benchmarking-an-existing-cluster docs and trying to run rally on existing elastic search and getting below error esrally --track=pmc --target-hos… --- ## [Windows NXLOG Connecting but not showing up in ES](https://discuss.elastic.co/t/windows-nxlog-connecting-but-not-showing-up-in-es/39986)
**Author:** [@jnpetty](https://discuss.elastic.co/u/jnpetty)\ **Replies:** 17\ **Last updated:** [January 25, 2016, 6:47pm UTC](https://discuss.elastic.co/t/windows-nxlog-connecting-but-not-showing-up-in-es/39986 "2016-01-25T18:47:08Z")
I am trying to setup my first Windows server to send logs, via NXLOG, to Logstash and having some difficulty. According to the NXLOG log file on my Windows host it is successfully connecting to Logstash. So I think the i… --- ## [No Handlers could be found for logger "elasticsearch"](https://discuss.elastic.co/t/no-handlers-could-be-found-for-logger-elasticsearch/206117)
**Author:** [@tharu85](https://discuss.elastic.co/u/tharu85)\ **Replies:** 16\ **Last updated:** [November 6, 2019, 1:20pm UTC](https://discuss.elastic.co/t/no-handlers-could-be-found-for-logger-elasticsearch/206117 "2019-11-06T13:20:29Z")
I have created a python script to create snapshot on elasticsearch including elasticsearch-curator library. How ever this script worked perfectly more than one year and suddenly I got following error. I tried adding logg… --- ## [Grok filter for log files in logstash](https://discuss.elastic.co/t/grok-filter-for-log-files-in-logstash/213377)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 13\ **Last updated:** [January 10, 2020, 7:30pm UTC](https://discuss.elastic.co/t/grok-filter-for-log-files-in-logstash/213377 "2020-01-10T19:30:35Z")
input { beats { port =\> 5044 } } filter { if\[log\_type\] =="access"{ grok { match =\> {"message" =\> "%{COMBINEDAPACHELOG}"} } else if \[log\_type\] == "errors" { grok { match =\> { "messa… --- ## [Searching performance dramatically decreases (+15s) if the indexation process is enabled](https://discuss.elastic.co/t/searching-performance-dramatically-decreases-15s-if-the-indexation-process-is-enabled/37833)
**Author:** [@Albert\_Vila](https://discuss.elastic.co/u/Albert_Vila)\ **Replies:** 15\ **Last updated:** [December 31, 2015, 10:21am UTC](https://discuss.elastic.co/t/searching-performance-dramatically-decreases-15s-if-the-indexation-process-is-enabled/37833 "2015-12-31T10:21:31Z")
Hello, We have an Elasticsearch cluster of 7 servers in Amazon, two clients, three master nodes (with data), and two data. All master and data nodes are m4.2xlarge with 32GB of RAM 8 cores and SSD. The 2 clients are … --- ## [Filebeat load balancing failing because of ssl certificate](https://discuss.elastic.co/t/filebeat-load-balancing-failing-because-of-ssl-certificate/52500)
**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\ **Replies:** 9\ **Last updated:** [June 14, 2016, 11:49am UTC](https://discuss.elastic.co/t/filebeat-load-balancing-failing-because-of-ssl-certificate/52500 "2016-06-14T11:49:04Z")
I set up SSL for filebeat and logstash connections following this link. https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elk-stack-on-ubuntu-14-04. Here i am creating a… --- ## [Error](https://discuss.elastic.co/t/error/136973)
**Author:** [@varsha\_ann](https://discuss.elastic.co/u/varsha_ann)\ **Replies:** 40\ **Last updated:** [June 28, 2018, 8:44am UTC](https://discuss.elastic.co/t/error/136973 "2018-06-28T08:44:57Z")
hey am not able to do mapping for the following code PUT washroom { "mapping" : { "jsondata" : { "properties" : { "sno" : {"type": "integer"}, "feedback\_toilet\_id": {"type": "keyword"}, "sensor\_value": {"typ… --- ## [Dynamic fetch data from index to generate TreeFlow](https://discuss.elastic.co/t/dynamic-fetch-data-from-index-to-generate-treeflow/268993)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 30\ **Last updated:** [April 15, 2021, 1:28pm UTC](https://discuss.elastic.co/t/dynamic-fetch-data-from-index-to-generate-treeflow/268993 "2021-04-15T13:28:00Z")
Kibana version : 7.9 Elasticsearch version : 7.9 APM Server version : 7.9 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your setup… --- ## [Is FileBeat Alive?](https://discuss.elastic.co/t/is-filebeat-alive/49121)
**Author:** [@ori.rubinfeld](https://discuss.elastic.co/u/ori.rubinfeld)\ **Replies:** 13\ **Last updated:** [May 9, 2016, 8:31am UTC](https://discuss.elastic.co/t/is-filebeat-alive/49121 "2016-05-09T08:31:16Z")
Hi, I am having Filebeat running on Windows Servers Reading many log files on each server. The data is being sent to RHEL Servers running the Logstash and Elasticsearch. I would like to have a way in which I will be … --- ## [500 Error when attempting to drill into Marvel cluster](https://discuss.elastic.co/t/500-error-when-attempting-to-drill-into-marvel-cluster/36078)
**Author:** [@Danny830x](https://discuss.elastic.co/u/Danny830x)\ **Replies:** 10\ **Last updated:** [March 24, 2016, 12:20am UTC](https://discuss.elastic.co/t/500-error-when-attempting-to-drill-into-marvel-cluster/36078 "2016-03-24T00:20:18Z")
I'm running an Elasticsearch 2.0 cluster primarily used for Logstash with the latest versions of Marvel and Kibana. All Kibana functionality seems to work as expected. When accessing Marvel, the page loads with the clust… --- ## [Kibana Alert and Action "Error: error validating action params"](https://discuss.elastic.co/t/kibana-alert-and-action-error-error-validating-action-params/244502)
**Author:** [@msszafar](https://discuss.elastic.co/u/msszafar)\ **Replies:** 11\ **Last updated:** [August 17, 2020, 5:37am UTC](https://discuss.elastic.co/t/kibana-alert-and-action-error-error-validating-action-params/244502 "2020-08-17T05:37:47Z")
Hi, I'm using kibana alert and action feature (stack management \> kibana \> alert and action) My purpose is to store the alert results on index. I have created an alert with all conditions and other stuff but document … --- ## [Create pattern in logstash](https://discuss.elastic.co/t/create-pattern-in-logstash/111221)
**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\ **Replies:** 15\ **Last updated:** [December 18, 2017, 6:19am UTC](https://discuss.elastic.co/t/create-pattern-in-logstash/111221 "2017-12-18T06:19:56Z")
Greetings, My logs are of the format 2017-12-08 01:42:23,658 app="capture", level=ERROR, thread=play-thread-5, logger=play, userId="client:release", reqAction="GET", reqUrl="/api/labels", message=" console.App.html ac… --- ## [Elastic APM Agent Getting HTTP 404](https://discuss.elastic.co/t/elastic-apm-agent-getting-http-404/167052)
**Author:** [@harry2190](https://discuss.elastic.co/u/harry2190)\ **Replies:** 13\ **Last updated:** [February 11, 2019, 2:43am UTC](https://discuss.elastic.co/t/elastic-apm-agent-getting-http-404/167052 "2019-02-11T02:43:00Z")
Hi, We have setup a java agent in our server running the java base CA7 API Gateway. Reference Log: 2019-01-31T18:50:41.279+0800 INFO 9 STDOUT : 2019-01-31 18:50:41.279 \[apm-reporter\] ERROR co.elastic.apm.agent.report.… --- ## [Failed to connect to master](https://discuss.elastic.co/t/failed-to-connect-to-master/33597)
**Author:** [@zpp](https://discuss.elastic.co/u/zpp)\ **Replies:** 12\ **Last updated:** [November 3, 2015, 10:20am UTC](https://discuss.elastic.co/t/failed-to-connect-to-master/33597 "2015-11-03T10:20:41Z")
Hi, Our logstash(indexer) recently encountered below error frequently, what is this error and how can we fix it? Nov 03, 2015 2:00:25 PM org.elasticsearch.discovery.zen.ZenDiscovery joinElectedMaster WARNING: \[logst… --- ## [\_score doesn't update in a function score query with script](https://discuss.elastic.co/t/score-doesnt-update-in-a-function-score-query-with-script/153998)
**Author:** [@Maarten\_Koopmans](https://discuss.elastic.co/u/Maarten_Koopmans)\ **Replies:** 10\ **Last updated:** [October 26, 2018, 6:41pm UTC](https://discuss.elastic.co/t/score-doesnt-update-in-a-function-score-query-with-script/153998 "2018-10-26T18:41:16Z")
I'm trying to get some basic working by setting the \_score of a document, using function scores and/or painless scripts. I plan to use the basic block to find the mechanism to build out my final use case. Sadly it alread… --- ## [Elasticsearch mapper attachment issues](https://discuss.elastic.co/t/elasticsearch-mapper-attachment-issues/52464)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 15\ **Last updated:** [June 12, 2016, 1:13pm UTC](https://discuss.elastic.co/t/elasticsearch-mapper-attachment-issues/52464 "2016-06-12T13:13:57Z")
I have created an index in Sense like this PUT /test/person/\_mapping { "person" : { "properties" : { "file" : { "type" : "attachment", "fields" : { … --- ## [Filebeat: active (running) then code=exited, status=2 or code=exited, status=1](https://discuss.elastic.co/t/filebeat-active-running-then-code-exited-status-2-or-code-exited-status-1/322233)
**Author:** [@Anthony\_Allen](https://discuss.elastic.co/u/Anthony_Allen)\ **Replies:** 11\ **Last updated:** [January 7, 2023, 1:49am UTC](https://discuss.elastic.co/t/filebeat-active-running-then-code-exited-status-2-or-code-exited-status-1/322233 "2023-01-07T01:49:49Z")
I am running Elasticsearch/Kibana 7.14. on Ubuntu 22.04 on the backend of an Apache reverse proxy. Filebeat is on another Ubuntu 22.04 on the backend of the same reverse proxy. Other beats are on the Filebeat's machine. … --- ## [How do you set default index with x-pack installed?](https://discuss.elastic.co/t/how-do-you-set-default-index-with-x-pack-installed/109018)
**Author:** [@mathias](https://discuss.elastic.co/u/mathias)\ **Replies:** 14\ **Last updated:** [November 28, 2017, 9:47pm UTC](https://discuss.elastic.co/t/how-do-you-set-default-index-with-x-pack-installed/109018 "2017-11-28T21:47:23Z")
Hi, Without X-Pack I can set default index with the following curl command: curl --verbose -POST http://kibana:5601/api/saved\_objects/index-pattern -H "kbn-version: $KIBANA\_VERSION" -H 'Content-Type: application/json;c… --- ## [Securing Elasticsearch/Kibana / "Bad Decrypt" Error](https://discuss.elastic.co/t/securing-elasticsearch-kibana-bad-decrypt-error/340944)
**Author:** [@Shaakxuur](https://discuss.elastic.co/u/Shaakxuur)\ **Replies:** 15\ **Last updated:** [August 21, 2023, 10:08am UTC](https://discuss.elastic.co/t/securing-elasticsearch-kibana-bad-decrypt-error/340944 "2023-08-21T10:08:59Z")
Hi! I think I totally lost the thread, I don't know where my error is right now. I wanted to change my Elasticsearch-Kibana-WinlogBeat installation, which was working flawlessly so far, to an encrypted connection. The … --- ## [Date script not working](https://discuss.elastic.co/t/date-script-not-working/201873)
**Author:** [@Cain310](https://discuss.elastic.co/u/Cain310)\ **Replies:** 15\ **Last updated:** [October 18, 2019, 2:46pm UTC](https://discuss.elastic.co/t/date-script-not-working/201873 "2019-10-18T14:46:19Z")
I am having trouble writing a script to work with my two date fields. ES/KB version 5.6.16 "doc": { "chargebackDate": "2019-09-23 14:51:29", "products": \[ { "recurr… --- ## [Elasticsearch doesn't cache query with rounded date](https://discuss.elastic.co/t/elasticsearch-doesnt-cache-query-with-rounded-date/269706)
**Author:** [@tlinhart](https://discuss.elastic.co/u/tlinhart)\ **Replies:** 25\ **Last updated:** [April 15, 2021, 3:39pm UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-cache-query-with-rounded-date/269706 "2021-04-15T15:39:48Z")
I originally posted the question to Stack Overflow but I guess it's more appropriate to ask here. (For reference, the original question is here - caching - Elasticsearch doesn't cache query with rounded date - Stack Over… --- ## [Parse string to timestamp in csv](https://discuss.elastic.co/t/parse-string-to-timestamp-in-csv/171408)
**Author:** [@scorpioy1](https://discuss.elastic.co/u/scorpioy1)\ **Replies:** 9\ **Last updated:** [March 8, 2019, 4:43pm UTC](https://discuss.elastic.co/t/parse-string-to-timestamp-in-csv/171408 "2019-03-08T16:43:30Z")
Hi, I'm trying to parse the 1st column of line in csv to be a timestamp column. But elasticsearch is still treating it as string, not a timestamp. Please help. filter { csv { columns =\> \["nowdatetime","Total\_sum","DIF… [Previous page](https://discuss.elastic.co/top.md?page=98&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=100&per_page=50&period=all)