Questions tagged [elasticsearch]
Elasticsearch is an open source, distributed, RESTful Search Engine.
43
questions
0
votes
0
answers
12
views
illegal_argument_exception: index.lifecycle.rollover_alias [elbtest] does not point to index [elb-test-2023.06.27]
I have set up a server with Kibana + Elasticsearch + Logstash
Idea is to have logstash fetch logs from Amazon ELB and send them to elasticsearch so that they are viewable in Kibana. It works great for ...
0
votes
0
answers
8
views
Checking Database backups
i have NoSQL Database ( Elasticsearch ) on which snapshots are taken daily, there is also a separately Elasticsearch which every day is restored by a script from the last snapshot and after ...
- 1
1
vote
2
answers
554
views
force filebeat to log to a file
Using filebeat-8.7.1, I have it configured to push several sources to a remote elastisearch. I cannot get it to log its own logging to a local file /var/log/filebeat/filebeat.log, and I cannot prevent ...
- 530
0
votes
0
answers
28
views
How to expose the Elasticsearch API via Nginx on Ubuntu?
I have Elasticsearch running on an Ubuntu 22.04 VM:
sergey@localhost:~$ curl http://localhost:9200/_cat/indices
green open .geoip_databases HPZPSV-wTIC8QRDJXPbQEg 1 0 42 5 40.7mb ...
- 101
0
votes
0
answers
136
views
Curl using Logstash Keystore values
I would like to curl to our Elastic cluster using the logstash keystore.
Right now we can curl with username/password. Our keystore is setup and functional but I do not know what the syntax would be ...
- 1
0
votes
1
answer
530
views
filebeat works from file but not from syslog with checkpoint module
I'm trying send CheckPoint Firewall logs to Elasticsearch 8.0.
I have machine A 192.168.1.123 running Rsyslog receiving logs on port 514 that logs to a file and machine B 192.168.1.234 running ...
- 261
0
votes
1
answer
156
views
Is it possible to start elastic search using java without installing it in local machine?
I did a java application to do simple elastic search operations... I need to start elastic search before running it. I don't want my client to do the same. is there any ways to start elastic search ...
11
votes
2
answers
5k
views
Windows IP Helper Service (iphlpsvc) - is it possible to change port?
The Windows IP Helper Service (iphlpsvc) is using port 9200 on my system (Windows 10), which is also used by Elasticsearch by default. Obviously, I could just set Elasticsearch to use another port, ...
- 153
1
vote
1
answer
2k
views
Metadata file does not match checksum after yum install
I'm trying to install elasticsearch using YUM repo on centos.
I configured the yum repo as described here :
https://www.elastic.co/guide/en/beats/filebeat/current/setup-repositories.html
but after the ...
- 131
0
votes
1
answer
836
views
elasticsearch-keystore not populated by kubernetes InitContainer
I try to add a snapshot repository using the Azure Repository Plugin to an elasticsearch instance running on Azure (with K8s) deployed through helm using the chart from helm.elastic.com.
The chart is ...
- 1
0
votes
1
answer
441
views
SYSLOG-NG: Sending same log to two different index in elasticsearch
I'm trying to send the same log flow to two different elasticsearch indexes, because of users with different roles each index.
I use a file for destination too. Here is a sample:
2021-02-12T14:00:00+...
- 101
0
votes
0
answers
1k
views
How to add a CA certificate from Windows 10 to Ubuntu 20.04
I'd like to get your guidances on the following issue:
I am having some problems to install elasticsearch on virtualBox Ubuntu 20.04, this virtual environment is on Windows 10 which has a Trusted Root ...
- 111
0
votes
1
answer
37
views
How to compile this program without coding knowledge? [closed]
Please forgive my illeteracy as far as coding goes but I am trying to set up a program I found on github and although I don't have much coding knowledge I was able by following wome tutorial to do ...
- 13
2
votes
2
answers
5k
views
I can't uninstall elasticsearch from Windows 10
In Apps & Features, I try to uninstall Elasticsearch 7.6.1. It seems like uninstalling but rewinds back at the end of the progress. I only got a warning once: "You need to be an admin to ...
- 293
0
votes
0
answers
843
views
No connection could be made because the target machine actively refused it. Elasticsearch
Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to http://192.168.0.101:5602/api/status fails: fail to execute.
I am elasticsearch AND kibana running on a ...
1
vote
0
answers
731
views
Create an index with logstash with custom settings
I'm trying to create a new Elasticsearch (7.0.1) Index from Logstash (7.3.1), but it's not working when I put a template file with my settings (it worked pretty without my template setting).
My ...
1
vote
0
answers
914
views
Unable to locate plugin type for IfFileName
When i try to install sonarqube on windows 10, elasticsearch give me this error:
wrapper | --> Wrapper Started as Console
wrapper | Launching a JVM...
jvm 1 | Wrapper (Version 3.2.3) http://...
- 11
0
votes
0
answers
90
views
ELK - web page load time
I need to do some analysis on web pages stored in httpd server, I'm using ELK with filebeat and metricbeat but I don't find any way to visualize in kibana the page load time.
Is there any way to do ...
- 1
0
votes
1
answer
439
views
Create index pattern in Kibana circle for 'creating' is spinning forever
Installed software:
Elastic version:
Kibana:
I hit the trouble described here: high disk watermark [90%] exceeded One way to spot the sign pointing at this state is to open Developer Tools in FF ...
- 101
0
votes
3
answers
4k
views
Curl command with date appended in filename for elastic search snapshot creation
I am using below command to create snapshot with date appended to the filename but getting error as invalid snapshot name and it must be lowercase.
#!/bin/bash
SNAPSHOT=`date +%Y%m%d-%H%M%S`
curl -...
0
votes
2
answers
6k
views
SonarQube starting Failed
I installed SonarQube Version 7.9.1 on CentOS 7 and the service set to start with non root user. My vm.max_map_count is set to 262144.
sysctl vm.max_map_count
vm.max_map_count = 262144
Because of My ...
0
votes
1
answer
139
views
Custom AMI with source code
In aws how can we create a custom ami which contains both config files and source code? (I want to create an ami with source code for the application embedded in it)
- 1
0
votes
1
answer
5k
views
Elasticsearch 3 Node Cluster (master_not_discovered_exception)
Sigh.... Been at this for a bit and am now looking to the community....
Have a brand new 3 node cluster for Elasticsearch. Ubunutu 18.04 TLS
I am getting this when I do curl -XGET 'http://localhost:...
2
votes
2
answers
4k
views
systemd service running from pipenv
I wanted to install ElastAlert, an alerting tool written in python2, inside of a pipenv in an attempt to keep applications and their requirements/ dependencies from stepping on one another while ...
- 21
1
vote
0
answers
148
views
Accessing Web App running on EC2 instance
I have an EC2 instance that is running searchkit.
I successfully started the searchkit web app and it gave me an IP address that I should be able to access via my local machine, as well as a ...
- 11
0
votes
0
answers
52
views
Deploy Software with Ansible on a Platform without install privileges
A while ago I have installed Elasticsearch on a cluster of 8 machines , on which I do not have install privileges , therefore I manually downloaded the binaries on each machine and created aliases to ...
- 1
0
votes
0
answers
199
views
Nginx Forward traffic from one URL to Another
I am using elasticsearch cloud and I've been provided a long URL of kibana example.
https://5e765d3c21d84e8f8d6bd362d8bf6564.us-central1.gcp.cloud.es.io:9243
I have configured the DNS routing in my ...
0
votes
1
answer
1k
views
How to setup blacklist rule of elastalert
I have syslog messages of following type. I want to capture all such messages which contains "errors" in message field of syslog.
<30>Apr 9 04:27:13 ip-172-31-26-235 POSTMETHOD_fx-control-...
- 149
0
votes
1
answer
291
views
How to upload data in ElasticSearch(TLS secured via search Guard) using Excelastic
I have ElasticSearch v6.2.4 installed. It worked perfectly fine but recently because of security reasons I installed Search Guard plugin which provide TLS and authentication features to ElasticSearch ...
- 101
0
votes
0
answers
55
views
Running startup on elasticsearch using eclipse
I am trying to run the code below:
`// on startup
TransportClient client = new PreBuiltTransportClient(Settings.EMPTY)
.addTransportAddress(new TransportAddress(InetAddress.getByName("host1"),...
1
vote
0
answers
116
views
Group Visualization objects of Kibana in Dashboard
I am new to Kibana. I have a requirement to group, similar topic visual objects, in Dashboard. For Example: Suppose I have Pie Object for CARS,Bike and Monitors, then I need to group the CARS,BIKES ...
- 19
1
vote
1
answer
1k
views
ElasticSearch Failing to Authenticate LDAP Host
I have the below ElasticSearch configuration, where ES is configured to trust both the root CA and the issuing CA. (The LDAP1 realm contains the relevant information.)
xpack:
security:
enabled: ...
- 111
1
vote
0
answers
33
views
How to start auto Kibana after system boot (Linux)
So we are hosting our development environment on our internal LAN network. However, we keep facing an issue of restarting kibana every few minutes. Also if there is a way that I can schedule it to ...
- 11
0
votes
1
answer
3k
views
Elasticsearch uses 100% CPU when doing nothing
When I run top, I consistently see elasticsearch using around 100% CPU. I've completely disconnected logstash, and the output of checking "curl localhost:9200/_nodes/hot_threads" only shows threads ...
- 115
0
votes
2
answers
1k
views
Starting up elasticsearch.bat on windows fails with parser error
When starting up elasticsearch on windows, I encountered the following issue:
\Java\jdk1.8.0_171\bin\java.exe" -cp "!ES_CLASSPATH!"
"org.elasticsearch.tools.l aunchers.JvmOptionsParser"
"!...
- 266
1
vote
1
answer
354
views
unable to re-load index from filebeat in elasticsearch
I am new at the ELK stack (more ELG stack as I am using Grafana as the front end instead of kibana for personal reasons). I am using filebeat to send the logs file to the logstash which are then ...
- 21
0
votes
1
answer
6k
views
How can you sort by descending date/time on the Kibana "Discover" tab.
Kibana is a tool that exposes data stored in Elastic Search. Is there way to sort the data on the discover tab by descending date/time, kind of like an EventLog. I have various messages with ...
- 383
1
vote
2
answers
1k
views
tshark -ek creates duplicate keys that elasticsearch 6.0 does not accept
I try to enter a pcap file into elasticsearch. So I first convert the pcap file to json like this:
tshark -T ek -j "http tcp ip" -x -r file.pcap > file.json
Then I want to load it up to ...
- 111
2
votes
1
answer
699
views
How to install NPM / elasticsearch-head without Internet connection?
I am trying to install NPM on my machine without any Internet connection. Through some research on the Web I have come across suggestions to use npmbox. So I gave npmbox a try but when I try to bin/...
- 21
1
vote
1
answer
3k
views
sending an http request over ssh server
i have my data residing on an SSH server and i want to inquire and retrieve the data via HTTP POST and GET requests. i have been trying to do that using the simple url's http://127.0.0.1:9200/_search? ...
- 113
2
votes
0
answers
247
views
How do I resolve a SSH admin user command for a bitbucket installation on the QNAP?
I’m attempting to install Atlassian’s BitBucket on my QNAP 453 with little success. I’ve downloaded the .bin file from Atlassian, paid for a subscription, and am now trying to install on my QNAP via ...
- 121
1
vote
1
answer
1k
views
Elasticsearch not assigning shards to a (new) node
I have an issue with my cluster not balancing shards with a restarded node which is now empty.
I stopped my_node from my_cluster and waited the shards and
replicas to be reallocted. This succeded.
...
- 140
2
votes
1
answer
672
views
Tools cannot connect to ElasticSearch
I have ElasticSearch running in a docker container with an exposed 9200 port.
I can access it using the browser and using curl on http://192.168.59.103:9200/ (I get the You Know, for Search response), ...
- 423