Questions tagged [elasticsearch]

Elasticsearch is an open source, distributed, RESTful Search Engine.

Filter by
Sorted by
Tagged with
0
votes
0answers
16 views

How do I query by date range in a Kibana 7.6.2 dashboard

I'm using a Kibana dashboard that displays programming logs. How do I query by date range? Using @timestamp:"2020-06-21" as a filter criteria in the search bar doesn't work, but Using the ...
0
votes
0answers
10 views

How do I search the Kibana website for “.kibana” rather than “kibana”?

A simple question really; how do I search for any content within the elastic.co website for ".kibana" rather than "kibana"? The reason for this is to find any documentation on the .kibana index. I'm ...
0
votes
0answers
69 views

How to Add a Tag to Filebeat's System Module?

Using the System module from Elasticsearch's Filebeat, the documents created in the index do not have any tags. How can I add a tag to just the entries from this module? The documentation for the ...
0
votes
0answers
58 views

Logstash pipeline.yml

I was wondering if I config my pipeline.yml with my .files in conf.d directory it's not necessary to run the following command to create indexes on Elastic Search: bin/logstash -f /etc/logstash/conf....
0
votes
0answers
129 views

Error scheduling task in kibana

I am using mongo-connector to integrate kibana(elasticsearch with mongodb for efficient searching. On setup i am getting following error message on kibana log. log [11:34:53.291] [warning][...
0
votes
0answers
18 views

Elastic Stack : Auditbeat installation stopped

My installation is always stopped. I have already enabled running unsigned scripts by entering this to PS: set-executionpolicy remotesigned However, executing install-service-auditbeat.ps1 always ...
0
votes
0answers
14 views

How to concfigure kibana charts for syslog message

I have configured elk in one of our server and installed filebeat on it. We have rsyslog server running on another machine and logs are storing on the shared area. I have selected file beat input as ...
0
votes
0answers
115 views

No connection could be made because the target machine actively refused it. Elasticsearch

Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to http://192.168.0.101:5602/api/status fails: fail to execute. I am elasticsearch AND kibana running on a ...
0
votes
0answers
12 views

Changes in Elasticsearch lucene behavior

We've been upgrading our ELK stack from 5.x to 7.x and noticed a change in search behavior for query_string searches as they are used by Kibana when set to Lucene as query language. Before the ...
0
votes
0answers
20 views

How to import winlogbeat Kibana dashboards without Windows machine?

I only have Linux machine running the EKL. I would like to import the Winlogbeat Kibana dashboards, how can I do that?
0
votes
0answers
27 views

elk auto importing dangled indices

Hey hoping I could get some more insight on the issue. I'm currently running ELK stack inside GKE client/master/data I've recently updated the cluster from version 1.13.X.X to 1.14.X.X during the ...
0
votes
0answers
15 views

How to retrieve data from Elasticsearch snapshots with some query

I have taken snapshot of my elasticsearch indexes Now I want to pull some data from the snapshot for some of the zip_id(column present in my documents stored in elasticsearch indexes) Please suggest ...
0
votes
0answers
35 views

Unable to install Elastic search with Open distro

Unable to install Elastic search with Open distro. commands(from official website): wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-oss-7.2.0-amd64.deb sudo dpkg -i ...
1
vote
0answers
89 views

Create an index with logstash with custom settings

I'm trying to create a new Elasticsearch (7.0.1) Index from Logstash (7.3.1), but it's not working when I put a template file with my settings (it worked pretty without my template setting). My ...
1
vote
0answers
209 views

Unable to locate plugin type for IfFileName

When i try to install sonarqube on windows 10, elasticsearch give me this error: wrapper | --> Wrapper Started as Console wrapper | Launching a JVM... jvm 1 | Wrapper (Version 3.2.3) http://...
0
votes
0answers
20 views

cannot bind to logstash 5000 port

I am not able to connect to my localhost 5000 port in which I have configured by logstash…I am attaching a screenshot of my "filebeat test output",logstash input conf and filebeat.yml configurations....
0
votes
0answers
20 views

Throughput and Latency of ELk/EFK

Is there a baseline for the desired throughput and latency of a EFK and an ELK architecture? If not, how would I know if these metrics are performing well or bad?
0
votes
0answers
54 views

Using ECS, how to collect logs and send them to ElasticSearch using ELK stack

Using ECS, what is the best way to collect logs from containers and send them to ElasticSearch using the ELK stack? Or preferably, attach a custom process to the stdout/stderr of your containers, and ...
0
votes
0answers
12 views

Unable to parse logs from S3 due to logstash Pipeline Error

I have ELB logs in S3 where I am trying to pare the logs to logstash. I do not know suddenly logs getting parsed. When checked the logs of logstash I am able to see an error:
0
votes
0answers
12 views

Elasticsearch services error

I have the following environment: SW. Centos 7 HW -> Server02 (logstash) --- 9200 ---> Server01 (kibana + elasticsearch) I have installed elasticsearch release "7.3.1" The system works correctly in ...
0
votes
0answers
36 views

Kibana Spaces - Metricbeats - Keep data separated

I'm new with Elastic and Kibana I setup an environment, defined in Kibana 3 spaces and installed metricbeat on 3 servers running nginx I've configured metricbeat of each server with a different kibana ...
0
votes
0answers
46 views

how to ElasticSearch7 QPS

I know Elasticsearch-7.x remove type, how do I test QPS? I know esperf/elasticsearch_stress_test/jmeter/httpload/esrally but I didn't find the QPS target I wanted. WARNING: request [GET http://172....
0
votes
0answers
51 views

Not able to setup Index Lifecycle Policies for Indices in ELK

I'm new to ELK. I'm getting "Indexes have lifecycle errors" whenever I'm setting Lifecycle policies for my indexes in Kibana. Should I configure anything in order to get a proper Index lifecycle ...
0
votes
0answers
94 views

how to Natural sort on Elasticsearch 2.4.4

sorry for I'm not good at English. I want to sort naturally on elasticsearch 2.4.4. For example, with these documents: { name: "Bob: 3 points" } { name: "Bob: 10 points" } { name: "Bob: 2 points" } ...
0
votes
0answers
12 views

Why some indices in Elasticsearch are closed?

Can someone explain me why and how some indices in Elasticsearch are closed? What defines and put them in a "closed" state? Furthermore, when I put all from "close" to "open" state my Cluster went ...
0
votes
0answers
73 views

Run Elasticdump Multiple Times Without Duplicates

I am using elasticdump to copy all of my index mappings and index data from one cluster to another. Along the way there was a failure that caused elasticdump to fail in the middle of dumping an index....
0
votes
0answers
7 views

Elasticsearch Backup - 800gb indice, 200gb remaining

I have an Elasticsearch indice that is currently 800gb. I want to create a backup snapshot and store it offsite in the cloud. However, I only have 200gb of remaining local disk space. Is there a way ...
0
votes
0answers
122 views

Elasticsearch ssl certificate issue

I tried to increase the security of elasticsearch but facing the issue below. i am unable to find the solution of it. request to please help me. below are the logs. > [ERROR][o.e.b....
0
votes
0answers
258 views

How do I upload CSV files into AWS elasticsearch if I have converted all the fields into JSON?

Need to put a csv file into AWS Elasticsearch. I have converted the fields into json and can update the index using POST in dev controls on Kibana. However, I have 300 entries and cannot do each ...
0
votes
0answers
14 views

How to get elements from elasticsearch in given order?

I wrote a query for getting the element details from elasticsearch but the values returned in some different order but I want them in the same order in which I provided in the search query. { "...
0
votes
0answers
32 views

ELK - web page load time

I need to do some analysis on web pages stored in httpd server, I'm using ELK with filebeat and metricbeat but I don't find any way to visualize in kibana the page load time. Is there any way to do ...
0
votes
0answers
5 views

Elastic Search snapshot cyclic deletion

I have setup scheduled daily ES snapshot backup in my system but i dont want to keep any snapshot older than 1 week . I know there is curl -XDELETE to delete the snapshot . But how can we delete the ...
0
votes
1answer
201 views

Create index pattern in Kibana circle for 'creating' is spinning forever

Installed software: Elastic version: Kibana: I hit the trouble described here: high disk watermark [90%] exceeded One way to spot the sign pointing at this state is to open Developer Tools in FF ...
0
votes
0answers
981 views

Sonarqube 7.9.1 fails to start after upgrade

The previous version of SQ was 6.7.7 LTS, so i upgraded to 7.9.1 LTS. I installed a new JDK java version "11.0.4" 2019-07-16 LTS Java(TM) SE Runtime Environment 18.9 (build 11.0.4+10-LTS) Java ...
0
votes
0answers
118 views

logstash.inputs.udp - UDP listener died {:exception=>#<SocketError: bind: name or service not known>

On a windows ELK platform on which is targeted a syslog file through port 514, I have a problem with Logstash 5.4.0, it was working perfectly and suddenly stopped with throwing in loop : 18:07:35.639 ...
0
votes
3answers
205 views

Curl command with date appended in filename for elastic search snapshot creation

I am using below command to create snapshot with date appended to the filename but getting error as invalid snapshot name and it must be lowercase. #!/bin/bash SNAPSHOT=`date +%Y%m%d-%H%M%S` curl -...
0
votes
2answers
3k views

SonarQube starting Failed

I installed SonarQube Version 7.9.1 on CentOS 7 and the service set to start with non root user. My vm.max_map_count is set to 262144. sysctl vm.max_map_count vm.max_map_count = 262144 Because of My ...
0
votes
1answer
22 views

Custom AMI with source code

In aws how can we create a custom ami which contains both config files and source code? (I want to create an ami with source code for the application embedded in it)
0
votes
1answer
2k views

Elasticsearch 3 Node Cluster (master_not_discovered_exception)

Sigh.... Been at this for a bit and am now looking to the community.... Have a brand new 3 node cluster for Elasticsearch. Ubunutu 18.04 TLS I am getting this when I do curl -XGET 'http://localhost:...
0
votes
0answers
40 views

Why packetbeat drop packet with elastic search on local machine

I am trying to capture my network interface card traffic on my local machine. But Packetbeat is not capturing all packets. This is the error I am getting. {"monitoring": {"metrics": {"beat":{"cpu":{"...
0
votes
2answers
1k views

systemd service running from pipenv

I wanted to install ElastAlert, an alerting tool written in python2, inside of a pipenv in an attempt to keep applications and their requirements/ dependencies from stepping on one another while ...
1
vote
0answers
32 views

Accessing Web App running on EC2 instance

I have an EC2 instance that is running searchkit. I successfully started the searchkit web app and it gave me an IP address that I should be able to access via my local machine, as well as a ...
0
votes
0answers
29 views

Deploy Software with Ansible on a Platform without install privileges

A while ago I have installed Elasticsearch on a cluster of 8 machines , on which I do not have install privileges , therefore I manually downloaded the binaries on each machine and created aliases to ...
0
votes
0answers
667 views

Elasticsearch query_string query type for multi field

https://www.elastic.co/guide/en/elasticsearch/reference/7.x/query-dsl-query-string-query.html . Here I found query_string for multiple fields "query_string" : { "fields" : ["content", "name"]...
0
votes
0answers
169 views

Nginx Forward traffic from one URL to Another

I am using elasticsearch cloud and I've been provided a long URL of kibana example. https://5e765d3c21d84e8f8d6bd362d8bf6564.us-central1.gcp.cloud.es.io:9243 I have configured the DNS routing in my ...
0
votes
1answer
656 views

How to setup blacklist rule of elastalert

I have syslog messages of following type. I want to capture all such messages which contains "errors" in message field of syslog. <30>Apr 9 04:27:13 ip-172-31-26-235 POSTMETHOD_fx-control-...
0
votes
1answer
209 views

How to upload data in ElasticSearch(TLS secured via search Guard) using Excelastic

I have ElasticSearch v6.2.4 installed. It worked perfectly fine but recently because of security reasons I installed Search Guard plugin which provide TLS and authentication features to ElasticSearch ...
0
votes
0answers
31 views

Running startup on elasticsearch using eclipse

I am trying to run the code below: `// on startup TransportClient client = new PreBuiltTransportClient(Settings.EMPTY) .addTransportAddress(new TransportAddress(InetAddress.getByName("host1"),...
1
vote
0answers
20 views

Group Visualization objects of Kibana in Dashboard

I am new to Kibana. I have a requirement to group, similar topic visual objects, in Dashboard. For Example: Suppose I have Pie Object for CARS,Bike and Monitors, then I need to group the CARS,BIKES ...
1
vote
1answer
533 views

ElasticSearch Failing to Authenticate LDAP Host

I have the below ElasticSearch configuration, where ES is configured to trust both the root CA and the issuing CA. (The LDAP1 realm contains the relevant information.) xpack: security: enabled: ...