Questions tagged [elastic-stack]

Elastic Stack combines the Elasticsearch, Logstash, Kibana, and the Beats Framework to provide real-time insights of any type of structured or unstructured data.

Elastic Stack combines the , , , and the Beats Framework to provide real-time insights of any type of structured or unstructured data.

In 2015, Elastic introduced the Beats framework (,,) into their stack and decided to rename the ELK Stack to the Elastic Stack

3683 questions
11
votes
2 answers

Query to see if a field contains a string using Query DSL

I am trying to filter Kibana for a field that contains the string "pH". The field is called extra.monitor_value_name. Examples of potential values are Temperature_ABC01, DO_ABC01, or pH_ABC01. Kibana's Elasticsearch Query DSL does not seem to have…
Intrastellar Explorer
  • 3,005
  • 9
  • 52
  • 119
11
votes
4 answers

elasticsearch es_rejected_execution_exception

I'm trying to index a 12mb log file which has 50,000 logs. After Indexing around 30,000 logs, I'm getting the following error [2018-04-17T05:52:48,254][INFO ][logstash.outputs.elasticsearch] retrying failed action with response code: 429…
steve
  • 171
  • 1
  • 2
  • 10
11
votes
1 answer

How to to retrieve OSSEC's log alerts into Elasticsearch (ELK)?

I have tried this tutorial. But it didn't catch the OSSEC log (alerts, syslog, etc), it just give me this message for my Kibana apps. Couldn't find any Elasticsearch data You'll need to index some data into Elasticsearch before you can create an…
Gagantous
  • 432
  • 6
  • 29
  • 69
11
votes
1 answer

analyzed or not_analyzed, what to choose

I'm using only kibana to search ElasticSearch and i have several fields that can only take a few values (worst case, servername, 30 different values). I do understand what analyze do to bigger, more complex fields like this, but the small and simple…
higuita
  • 2,127
  • 20
  • 25
10
votes
4 answers

Elastic search AccessDeniedException[/usr/share/elasticsearch/data/nodes/0] -- Access denied error

I am trying to use nfs mount as my elasticsearch data directory, earlier I was using host storage. But when I am trying to up my container, I am facing below mentioned error : ElasticsearchException[failed to bind service]; nested:…
vansh madan
  • 128
  • 1
  • 1
  • 10
10
votes
2 answers

How I can get authentication token or do loging in Elastic Search using REST API? For example from POSTMAN

I'm trying to list data from Elastic Search using the REST API on Postman. But I get a security_exception error I read the elastic documentation at https://www.elastic.co/guide/en/elasticsearch/reference/current/security-api-get-token.html but…
10
votes
3 answers

is Security free in Elastic search Stack Features?

we are building an opensource application which needs elasticsearch security feature. i am trying to find if the security feature is free for elastic search. elastic search website says Xpack is open now. Not sure if it is really opensource. Could…
Sathish
  • 245
  • 1
  • 3
  • 16
10
votes
2 answers

Is it a good idea to use serilog to write logs directly to the elasticsearch

I'm evaluating different options about the distributed log server. In the Java world, as I can see, the most popular solution is filebeat + kafka + logstash + elasticsearch + kibana. However, in .NET world, there's a serilog which can send…
Charlie
  • 2,141
  • 3
  • 19
  • 35
10
votes
1 answer

How to set an Elasticsearch output template in Logstash

I’m relatively new to Kibana and the ELK (Elasticsearch, Logstash and Kibana) stack and I’ve been doing pretty well setting one up, but I have run into what I see as an odd issue and need some help understanding what’s happening. I’m using the ELK…
Giacomo1968
  • 25,759
  • 11
  • 71
  • 103
9
votes
1 answer

Elastic Search version conflict issue

I am using an elastic search for search purpose. But recently I observer that some random error while adding data into elastic search: version conflict, required seqNo [113789], primary term [19]. current document has seqNo [113797] and primary…
Suraj Dalvi
  • 988
  • 1
  • 20
  • 34
9
votes
1 answer

Timelion split multiple times

Is there any possibility to split multiple times in timelion? Currently I use an expression like this: .es(q='name:*jvm*', metric=avg:mean, split=name.keyword:10) .label(regex='.*whatever\.(.*) >.*', label=$1) resulting in a timeseries…
Franz Ebner
  • 4,951
  • 3
  • 39
  • 57
9
votes
4 answers

org.apache.http.ContentTooLongException: entity content is too long [105539255] for the configured buffer limit [104857600]

Am trying to fetch the indexed PDF documents from my index (ElasticSearch). I have indexed my pdf documents using ingest-attachment processor plugin. Totally its 2500 documents has been indexed along with PDF attachment. Now am fetching those PDF by…
Karthikeyan
  • 1,927
  • 6
  • 44
  • 109
9
votes
1 answer

Kibana filter regex 'string starts with' doesn't work

In Kibana chart I want to filter all urls that start with string CANCELLED so I wrote a regex: ^CANCELLED.* but when I use filter in Discover tab then I notice that filter doesn't work properly because it also accepts urls with phrase CANCELLED…
Michael Dz
  • 3,655
  • 8
  • 40
  • 74
9
votes
0 answers

org.apache.kafka.common.network.InvalidReceiveException: Invalid receive (size = 30662099 larger than 30662028)

I am trying to push data from Flume channels to Kafka cluster using Kafka sink and i can see related data into associated topic but simultaneously i am observing below mentioned exception trace in Kafka logs too frequently , [2017-03-21…
Ritesh Sharma
  • 163
  • 1
  • 3
  • 10
9
votes
1 answer

Confusions about the Elasticsearch json dsl query structure

In many places of the elasticsearch dsl query grammar documentation, the wrapper json queries are skipped out in explanations probably to reduce documentation size. But its been confusing as I've been navigating the documentation. What are…
Horse Voice
  • 8,138
  • 15
  • 69
  • 120