# Top

**URL:** https://discuss.elastic.co/top.md?page=1002&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1003

---

## [Logstash disable retry on RC 403](https://discuss.elastic.co/t/logstash-disable-retry-on-rc-403/235125)

<div class="topic-metadata">

**Author:** [@hadars](https://discuss.elastic.co/u/hadars)\
**Replies:** 0\
**Last updated:** [June 1, 2020, 7:58am UTC](https://discuss.elastic.co/t/logstash-disable-retry-on-rc-403/235125 "2020-06-01T07:58:03Z")

</div>

Hey all, We used to let Logstash open indices if needed, this is no longer needed due to auto pre-creating of all the needed indices. Right now we removed the permissions to create indeces of the Logstash, this worked …

---

## [Elasticsearch Range Aggregation is including upper limit excluding lower limit](https://discuss.elastic.co/t/elasticsearch-range-aggregation-is-including-upper-limit-excluding-lower-limit/221185)

<div class="topic-metadata">

**Author:** [@tarungargbtp2612](https://discuss.elastic.co/u/tarungargbtp2612)\
**Replies:** 0\
**Last updated:** [February 27, 2020, 9:14am UTC](https://discuss.elastic.co/t/elasticsearch-range-aggregation-is-including-upper-limit-excluding-lower-limit/221185 "2020-02-27T09:14:34Z")

</div>

I am using the following query: { "aggs": { "profiles": { "nested": { "path": "profiles" }, "aggs": { "ctc": { "filter": { "range": { "profil…

---

## [IndicesQueryCache consuming more memory causing none of the configurable nodes available exception](https://discuss.elastic.co/t/indicesquerycache-consuming-more-memory-causing-none-of-the-configurable-nodes-available-exception/93544)

<div class="topic-metadata">

**Author:** [@nrmohta](https://discuss.elastic.co/u/nrmohta)\
**Replies:** 0\
**Last updated:** [July 18, 2017, 9:58am UTC](https://discuss.elastic.co/t/indicesquerycache-consuming-more-memory-causing-none-of-the-configurable-nodes-available-exception/93544 "2017-07-18T09:58:15Z")

</div>

Hi All, We are facing high memory usage scenario by ES. We have allocated 6GB of memory and out of which 5GB is consumed by IndicesQueryCache$ElasticsearchLRUQueryCache. Note - we have not configured indices.queries.ca…

---

## [Logstash fingerprint plugin with JSON data](https://discuss.elastic.co/t/logstash-fingerprint-plugin-with-json-data/147239)

<div class="topic-metadata">

**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\
**Replies:** 1\
**Last updated:** [September 4, 2018, 3:54pm UTC](https://discuss.elastic.co/t/logstash-fingerprint-plugin-with-json-data/147239 "2018-09-04T15:54:57Z")

</div>

Hi, I am parsing the JSON logs using below config: file { type =\>"logstash" path =\> \["/logstash/\*.json"\] sincedb\_path =\>"/logstash/var/json.sincedb" codec =\> json start\_positio…

---

## [Logstash input jms plugin problem for reading message from tibco ems broker](https://discuss.elastic.co/t/logstash-input-jms-plugin-problem-for-reading-message-from-tibco-ems-broker/43756)

<div class="topic-metadata">

**Author:** [@achutak](https://discuss.elastic.co/u/achutak)\
**Replies:** 1\
**Last updated:** [May 31, 2017, 2:49pm UTC](https://discuss.elastic.co/t/logstash-input-jms-plugin-problem-for-reading-message-from-tibco-ems-broker/43756 "2017-05-31T14:49:25Z")

</div>

in my elk setup with logstash version 2.2 .i am trying to pull the messages from tibco jms broker on certain queue for this my logstash config file is input{ jms { include\_header =\> false include\_properti…

---

## [How to stop Logstash running in background](https://discuss.elastic.co/t/how-to-stop-logstash-running-in-background/55018)

<div class="topic-metadata">

**Author:** [@gayathri](https://discuss.elastic.co/u/gayathri)\
**Replies:** 1\
**Last updated:** [July 8, 2016, 6:23am UTC](https://discuss.elastic.co/t/how-to-stop-logstash-running-in-background/55018 "2016-07-08T06:23:17Z")

</div>

Hi Team, I tried "/opt/logstash/bin/logstash agent -f /opt/logstash/conf.d/logstash.conf & " command for starting the logstash in background...but i want to stop this now... Pid is creating again and again even after k…

---

## [How to Install Logstash and Logstash Forwarder](https://discuss.elastic.co/t/how-to-install-logstash-and-logstash-forwarder/29621)

<div class="topic-metadata">

**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\
**Replies:** 1\
**Last updated:** [September 19, 2015, 6:14am UTC](https://discuss.elastic.co/t/how-to-install-logstash-and-logstash-forwarder/29621 "2015-09-19T06:14:25Z")

</div>

May I know the details regarding the installation of Logtash and Logstash-forwarder in ubuntu 14.04 Thanks in Advance, Kartheek Gummaluri

---

## [ElasticSearch and Wicket -\> serialization nightmare](https://discuss.elastic.co/t/elasticsearch-and-wicket-serialization-nightmare/4170)

<div class="topic-metadata">

**Author:** [@K\_B](https://discuss.elastic.co/u/K_B)\
**Replies:** 7\
**Last updated:** [April 1, 2011, 2:16pm UTC](https://discuss.elastic.co/t/elasticsearch-and-wicket-serialization-nightmare/4170 "2011-04-01T14:16:44Z")

</div>

Hello, I use ES together with wicket and all works fine but for one thing I can't tame: Serialization Wicket tries to keep state on the server side by serilizing the whole page, however, as ES has not a single Se…

---

## [Adding nodes does not seem to speed up indexing](https://discuss.elastic.co/t/adding-nodes-does-not-seem-to-speed-up-indexing/2972)

<div class="topic-metadata">

**Author:** [@John\_Chang](https://discuss.elastic.co/u/John_Chang)\
**Replies:** 7\
**Last updated:** [May 28, 2010, 10:20pm UTC](https://discuss.elastic.co/t/adding-nodes-does-not-seem-to-speed-up-indexing/2972 "2010-05-28T22:20:32Z")

</div>

I ran load tests to find out how fast I could index documents. I am using the java client with ElasticSearch 0.7.0, and I found that adding more data nodes didn't really speed things up. Having only one data node was f…

---

## [Java APM agent version \`unknown\` and Host \`N/A\` due to missing \`host.hostname\`](https://discuss.elastic.co/t/java-apm-agent-version-unknown-and-host-n-a-due-to-missing-host-hostname/290076)

<div class="topic-metadata">

**Author:** [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\
**Replies:** 8\
**Last updated:** [November 26, 2021, 2:28am UTC](https://discuss.elastic.co/t/java-apm-agent-version-unknown-and-host-n-a-due-to-missing-host-hostname/290076 "2021-11-26T02:28:23Z")

</div>

Kibana version: 7.15.0 Elasticsearch version: 7.15.0 APM Server version: 7.15.0 APM Agent language and version: Java 1.27.0 (Java 8) Description of the problem including expected versus actual behavior. Please includ…

---

## [Elasticsearch 6.8.12 & Magento 2.3.4](https://discuss.elastic.co/t/elasticsearch-6-8-12-magento-2-3-4/251241)

<div class="topic-metadata">

**Author:** [@mbob](https://discuss.elastic.co/u/mbob)\
**Replies:** 8\
**Last updated:** [October 19, 2020, 9:02am UTC](https://discuss.elastic.co/t/elasticsearch-6-8-12-magento-2-3-4/251241 "2020-10-19T09:02:33Z")

</div>

Hi, I was told to by your User Success Manager to ask for help in this forum regarding issues with using Elasticsearch and Magento 2. The problem: The test of the connection fails in Magento 2 (test fails in backend) w…

---

## [Ecommerce Data modelling with nested documents](https://discuss.elastic.co/t/ecommerce-data-modelling-with-nested-documents/164421)

<div class="topic-metadata">

**Author:** [@codobbit](https://discuss.elastic.co/u/codobbit)\
**Replies:** 8\
**Last updated:** [January 19, 2019, 11:53am UTC](https://discuss.elastic.co/t/ecommerce-data-modelling-with-nested-documents/164421 "2019-01-19T11:53:24Z")

</div>

Hello everyone! It's my first ElasticSearch project and I could use some input. Situation: Ecommerce scenario with 6000 products and 6000 customers. Each customer can have a specific discount for a product and every cu…

---

## [Logstash 7.17 on Windows - Pipeline running but logs are not present in Elasticsearch](https://discuss.elastic.co/t/logstash-7-17-on-windows-pipeline-running-but-logs-are-not-present-in-elasticsearch/297519)

<div class="topic-metadata">

**Author:** [@bianca6](https://discuss.elastic.co/u/bianca6)\
**Replies:** 5\
**Last updated:** [February 24, 2022, 10:56am UTC](https://discuss.elastic.co/t/logstash-7-17-on-windows-pipeline-running-but-logs-are-not-present-in-elasticsearch/297519 "2022-02-24T10:56:03Z")

</div>

Hi, I'm on Windows 10. I'm building a pipeline with Filebeat / Logstash / Elasticsearch / Kibana. Each one of them is at the latest version (downloaded thie previous week). I'm trying to ship a simple log file (ndjson…

---

## [Ml detector with exclude frequent enabled](https://discuss.elastic.co/t/ml-detector-with-exclude-frequent-enabled/241387)

<div class="topic-metadata">

**Author:** [@saraKM](https://discuss.elastic.co/u/saraKM)\
**Replies:** 5\
**Last updated:** [July 16, 2020, 11:40pm UTC](https://discuss.elastic.co/t/ml-detector-with-exclude-frequent-enabled/241387 "2020-07-16T23:40:08Z")

</div>

Hi, I have two jobs (Each job has two detectors with max and high\_mean functions) working on same data and exclude frequent enabled for one. I have seen some high severity anomalies raised when exclude frequent is none,…

---

## [Storing Static data in index pattern and reusing it with live data](https://discuss.elastic.co/t/storing-static-data-in-index-pattern-and-reusing-it-with-live-data/229453)

<div class="topic-metadata">

**Author:** [@rohitarora275](https://discuss.elastic.co/u/rohitarora275)\
**Replies:** 5\
**Last updated:** [April 24, 2020, 1:22pm UTC](https://discuss.elastic.co/t/storing-static-data-in-index-pattern-and-reusing-it-with-live-data/229453 "2020-04-24T13:22:25Z")

</div>

Hi All, We are migrating Auditing in our project from Oracle to ELK. For this , while creating a report/Visualization , we need to add a new column instance , value of which would be like(S1,S2,S3,S4) based on two param…

---

## [ElasticSeearch TimeZone - I appear with 4 hours](https://discuss.elastic.co/t/elasticseearch-timezone-i-appear-with-4-hours/189223)

<div class="topic-metadata">

**Author:** [@amateur](https://discuss.elastic.co/u/amateur)\
**Replies:** 5\
**Last updated:** [July 13, 2019, 4:41pm UTC](https://discuss.elastic.co/t/elasticseearch-timezone-i-appear-with-4-hours/189223 "2019-07-13T16:41:07Z")

</div>

Hi, I'm from Santiago de Chile, I'm inserting data in real time to ElasticSearch, but when I query from Kibana Query or PHP query, I appear with 4 hours. Check the server where ElasticSearch 7.2.0 runs, it is Centos 7 …

---

## [Logstash config error Expected one of \[ \\\\t\\\\r\\\\n\], \\"#\\", \\"{\\", \\",\\", \\"\]\\" at line 10, column 83](https://discuss.elastic.co/t/logstash-config-error-expected-one-of-t-r-n-at-line-10-column-83/254619)

<div class="topic-metadata">

**Author:** [@Tejas\_Bhosale](https://discuss.elastic.co/u/Tejas_Bhosale)\
**Replies:** 2\
**Last updated:** [November 9, 2020, 7:39am UTC](https://discuss.elastic.co/t/logstash-config-error-expected-one-of-t-r-n-at-line-10-column-83/254619 "2020-11-09T07:39:52Z")

</div>

Hello, I am using Logstash to ingest nginx into ElasticSearch. I am using a Linux Machine but i am getting error when try to start logstatsh service elk logstash\[1233\]: \[2020-11-07T20:25:03,741\]\[ERROR\]\[logstash.agent …

---

## [Upgrading ES 2.x to 5.x - Questions about elasticsearch-migration output](https://discuss.elastic.co/t/upgrading-es-2-x-to-5-x-questions-about-elasticsearch-migration-output/66726)

<div class="topic-metadata">

**Author:** [@Roland\_L](https://discuss.elastic.co/u/Roland_L)\
**Replies:** 2\
**Last updated:** [November 22, 2016, 11:24am UTC](https://discuss.elastic.co/t/upgrading-es-2-x-to-5-x-questions-about-elasticsearch-migration-output/66726 "2016-11-22T11:24:32Z")

</div>

Hi, I'm preparing our migration from ES 2.4.1 to 5.0 and I have a few questions about the results the elasticsearch-migration plugin has given me: node.datacenter\_location should be rewritten as node.attr.datacente…

---

## [Monitoring sidepanel item not showing despite basic license being installed](https://discuss.elastic.co/t/monitoring-sidepanel-item-not-showing-despite-basic-license-being-installed/64250)

<div class="topic-metadata">

**Author:** [@mallorybobalice](https://discuss.elastic.co/u/mallorybobalice)\
**Replies:** 2\
**Last updated:** [October 28, 2016, 7:53am UTC](https://discuss.elastic.co/t/monitoring-sidepanel-item-not-showing-despite-basic-license-being-installed/64250 "2016-10-28T07:53:25Z")

</div>

es xpack says {"build":{"hash":"7763f8e","date":"2016-10-26T04:51:59.202Z"},"license":{"uid":"44741fd0-xxxx,"type":"basic","mode":"basic","status":"active","expirydate\_in\_millis":1508284799999},"features":{"graph":{"desc…

---

## [Wildcard query on analyzed fields](https://discuss.elastic.co/t/wildcard-query-on-analyzed-fields/59313)

<div class="topic-metadata">

**Author:** [@nrmohta](https://discuss.elastic.co/u/nrmohta)\
**Replies:** 2\
**Last updated:** [August 30, 2016, 4:33pm UTC](https://discuss.elastic.co/t/wildcard-query-on-analyzed-fields/59313 "2016-08-30T16:33:27Z")

</div>

Mapping : "analysis": { "analyzer": { "itda": { "filter": \["lowercase"\], "tokenizer": "keyword" } } } } "sto…

---

## [Query - Find all ip visiting multiple differents servers](https://discuss.elastic.co/t/query-find-all-ip-visiting-multiple-differents-servers/1216)

<div class="topic-metadata">

**Author:** [@alexis](https://discuss.elastic.co/u/alexis)\
**Replies:** 2\
**Last updated:** [May 25, 2015, 2:01pm UTC](https://discuss.elastic.co/t/query-find-all-ip-visiting-multiple-differents-servers/1216 "2015-05-25T14:01:28Z")

</div>

Hello guys, I'm new here and I discovered the ELK stack a few days ago. I managed to parse all my webserver logs and now I'm having fun with elasticSearch to perform some research. Right now I have a query idea but …

---

## [Open index in readOnly mode](https://discuss.elastic.co/t/open-index-in-readonly-mode/5794)

<div class="topic-metadata">

**Author:** [@ruflin\_2](https://discuss.elastic.co/u/ruflin_2)\
**Replies:** 2\
**Last updated:** [November 10, 2011, 8:32pm UTC](https://discuss.elastic.co/t/open-index-in-readonly-mode/5794 "2011-11-10T20:32:09Z")

</div>

Is there any possibility to set an index to read only? I found that the Lucene IndexReader supports opening an index in read only mode.It would be nice if an index on ES could be set to read only and from this time o…

---

## [Can anyone please explain me the time difference between the json view and the table view?](https://discuss.elastic.co/t/can-anyone-please-explain-me-the-time-difference-between-the-json-view-and-the-table-view/344906)

<div class="topic-metadata">

**Author:** [@surya\_dadi\_dhamarake](https://discuss.elastic.co/u/surya_dadi_dhamarake)\
**Replies:** 6\
**Last updated:** [October 23, 2023, 6:46am UTC](https://discuss.elastic.co/t/can-anyone-please-explain-me-the-time-difference-between-the-json-view-and-the-table-view/344906 "2023-10-23T06:46:17Z")

</div>

Hi Team, I am using an elastic cloud account. My application is sending the data with timestamp in Sydney timezone. I have configured the same in kibana as well. I am almost seeing 11 hours difference between time stamp…

---

## [NEW to ELK: using conditionals in filter](https://discuss.elastic.co/t/new-to-elk-using-conditionals-in-filter/198601)

<div class="topic-metadata">

**Author:** [@hAh0L13](https://discuss.elastic.co/u/hAh0L13)\
**Replies:** 6\
**Last updated:** [September 9, 2019, 10:52am UTC](https://discuss.elastic.co/t/new-to-elk-using-conditionals-in-filter/198601 "2019-09-09T10:52:01Z")

</div>

Hello. Stuck in configuring pipeline. My filebeat agent send apache\_access logs with "fields.type = apache\_access" option: filebeat.inputs: - type: log enabled: true paths: - D:\\log\\apache\\access-\*.log …

---

## [Kibana: Can't visualize collapsed result](https://discuss.elastic.co/t/kibana-cant-visualize-collapsed-result/133520)

<div class="topic-metadata">

**Author:** [@xdholy](https://discuss.elastic.co/u/xdholy)\
**Replies:** 6\
**Last updated:** [May 29, 2018, 9:05am UTC](https://discuss.elastic.co/t/kibana-cant-visualize-collapsed-result/133520 "2018-05-29T09:05:49Z")

</div>

Hi, I'm new in kibana/elastic. So i saved a collapsed search. I get 2 search result but the total hits is still 7. Now, I just want to visualize the collapsed result. But i can't find any solution. Just to be sure, I …

---

## [Issue in parsing the file which has # character at the beginning of the line](https://discuss.elastic.co/t/issue-in-parsing-the-file-which-has-character-at-the-beginning-of-the-line/58486)

<div class="topic-metadata">

**Author:** [@kamesh](https://discuss.elastic.co/u/kamesh)\
**Replies:** 6\
**Last updated:** [August 22, 2016, 2:32pm UTC](https://discuss.elastic.co/t/issue-in-parsing-the-file-which-has-character-at-the-beginning-of-the-line/58486 "2016-08-22T14:32:44Z")

</div>

Hi All, I am new to logstash and recently started scripiting in logstash. we have a requirement where some logs files have # in the beginning of the line. Say \<Aug 11, 2016 11:40:53 AM CDT\>\<Info\> \<Security\> \<HostNam…

---

## [How to implement tcp state transition information with metricbeat](https://discuss.elastic.co/t/how-to-implement-tcp-state-transition-information-with-metricbeat/70632)

<div class="topic-metadata">

**Author:** [@st1t](https://discuss.elastic.co/u/st1t)\
**Replies:** 4\
**Last updated:** [January 6, 2017, 3:09pm UTC](https://discuss.elastic.co/t/how-to-implement-tcp-state-transition-information-with-metricbeat/70632 "2017-01-06T15:09:12Z")

</div>

Hello everyone :slight\_smile: I'd like to display TCP state transitions on metricbeat using "/proc/net/tcp" on Linux. (Established, Listen, SYN-SENT ... etc.) example "system": { "network": { "in": { …

---

## [Shard activity: There are currently no active shard records for this cluster](https://discuss.elastic.co/t/shard-activity-there-are-currently-no-active-shard-records-for-this-cluster/82715)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 3\
**Last updated:** [April 19, 2017, 7:56am UTC](https://discuss.elastic.co/t/shard-activity-there-are-currently-no-active-shard-records-for-this-cluster/82715 "2017-04-19T07:56:16Z")

</div>

Hi, I am running a single instance of ELK 5.1.2 on one server and installed x-pack with basic license. Now I am exploring, what I can see on the monitoring tab in kibana. I noticed following message in elasticsearch …

---

## [Unable to connect enterprise search running through docker to elastic search instance running in AWS](https://discuss.elastic.co/t/unable-to-connect-enterprise-search-running-through-docker-to-elastic-search-instance-running-in-aws/262954)

<div class="topic-metadata">

**Author:** [@schawla](https://discuss.elastic.co/u/schawla)\
**Replies:** 7\
**Last updated:** [February 8, 2021, 6:57am UTC](https://discuss.elastic.co/t/unable-to-connect-enterprise-search-running-through-docker-to-elastic-search-instance-running-in-aws/262954 "2021-02-08T06:57:53Z")

</div>

Trying to run enterprise search through docker using following docker-compose.yml --- version: '2.2' services: enterprisesearch: image: docker.elastic.co/enterprise-search/enterprise-search:7.10.2 environmen…

---

## [Upgrade fleet server](https://discuss.elastic.co/t/upgrade-fleet-server/369177)

<div class="topic-metadata">

**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\
**Replies:** 1\
**Last updated:** [October 21, 2024, 9:39pm UTC](https://discuss.elastic.co/t/upgrade-fleet-server/369177 "2024-10-21T21:39:16Z")

</div>

Hello As I have seen a new version available I decided to upgrade Elasticsearch server OK :white\_check\_mark: Logstas server OK :white\_check\_mark: Elasticsearch server OK :white\_check\_mark: kibana server OK …

---

## [No log4j2 configuration file found error even though it was working a few days back](https://discuss.elastic.co/t/no-log4j2-configuration-file-found-error-even-though-it-was-working-a-few-days-back/75387)

<div class="topic-metadata">

**Author:** [@abd.wsu](https://discuss.elastic.co/u/abd.wsu)\
**Replies:** 1\
**Last updated:** [February 16, 2017, 9:16pm UTC](https://discuss.elastic.co/t/no-log4j2-configuration-file-found-error-even-though-it-was-working-a-few-days-back/75387 "2017-02-16T21:16:30Z")

</div>

I am trying to parse a csv file to remove many unwanted columns and get the output in a different csv file and codec output at the same time. It was working fine till last week. Now i get a Api Webserver ERROR No log4…

---

## [How to fix date field value(change field value from int to string)](https://discuss.elastic.co/t/how-to-fix-date-field-value-change-field-value-from-int-to-string/60028)

<div class="topic-metadata">

**Author:** [@mithril](https://discuss.elastic.co/u/mithril)\
**Replies:** 1\
**Last updated:** [September 9, 2016, 11:00am UTC](https://discuss.elastic.co/t/how-to-fix-date-field-value-change-field-value-from-int-to-string/60028 "2016-09-09T11:00:09Z")

</div>

I used python ship data from mongodb to elasticsearch. There is a timestamp field mapping: "update\_time" : { "type": "date", "format": "yyy-MM-dd HH:mm:ss||yyyy-MM-dd||epoch\_millis" …

---

## [Release Bonanza! Elasticsearch, Graph, Shield, Watcher, Marvel, Reporting, Logstash 2.4, Beats 1.3, and Kibana 4.6 are Now Available!](https://discuss.elastic.co/t/release-bonanza-elasticsearch-graph-shield-watcher-marvel-reporting-logstash-2-4-beats-1-3-and-kibana-4-6-are-now-available/59449)

<div class="topic-metadata">

**Author:** [@michelle](https://discuss.elastic.co/u/michelle)\
**Replies:** 2\
**Last updated:** [October 10, 2016, 6:23pm UTC](https://discuss.elastic.co/t/release-bonanza-elasticsearch-graph-shield-watcher-marvel-reporting-logstash-2-4-beats-1-3-and-kibana-4-6-are-now-available/59449 "2016-10-10T18:23:44Z")

</div>

:tada::tada::tada: Release Bonanza! Elasticsearch, Graph, Shield, Watcher, Marvel, Reporting, Logstash 2.4, Beats 1.3, and Kibana 4.6 are Now Available! Learn all about the new releases, and get the latest versions fro…

---

## [Sending batch to Kafka failed. Will retry after a delay Logstash error](https://discuss.elastic.co/t/sending-batch-to-kafka-failed-will-retry-after-a-delay-logstash-error/114133)

<div class="topic-metadata">

**Author:** [@joaoantoniopereira](https://discuss.elastic.co/u/joaoantoniopereira)\
**Replies:** 0\
**Last updated:** [January 4, 2018, 5:18pm UTC](https://discuss.elastic.co/t/sending-batch-to-kafka-failed-will-retry-after-a-delay-logstash-error/114133 "2018-01-04T17:18:50Z")

</div>

Hi, I have a Logstash agent sending lines to a multi broker kafka setup. Currently I am getting the following error in Logstash log: \[2017-12-27T15:06:15,369\]\[INFO \]\[logstash.outputs.kafka \] Sending batch to Kafka f…

---

## [Security-exception-action-\[indices:admin/settings/update\] is unauthorized for user \[kibana\] on indices \[apm-7.6.0-error-000001\]](https://discuss.elastic.co/t/security-exception-action-indices-admin-settings-update-is-unauthorized-for-user-kibana-on-indices-apm-7-6-0-error-000001/271737)

<div class="topic-metadata">

**Author:** [@Kevin\_Christopher](https://discuss.elastic.co/u/Kevin_Christopher)\
**Replies:** 2\
**Last updated:** [May 4, 2021, 4:24am UTC](https://discuss.elastic.co/t/security-exception-action-indices-admin-settings-update-is-unauthorized-for-user-kibana-on-indices-apm-7-6-0-error-000001/271737 "2021-05-04T04:24:05Z")

</div>

I have the elasticsearch,kibana,apm-server in a single ec2 instance. Able to get apm agent data from other application servers. When I look into Index Management I can see index errors for all apm indices ilm.step:ERR…

---

## [Error in Elasticsearch master pod that FileSystemException: /data/log: Input/output error](https://discuss.elastic.co/t/error-in-elasticsearch-master-pod-that-filesystemexception-data-log-input-output-error/270379)

<div class="topic-metadata">

**Author:** [@subha1](https://discuss.elastic.co/u/subha1)\
**Replies:** 2\
**Last updated:** [April 19, 2021, 11:15am UTC](https://discuss.elastic.co/t/error-in-elasticsearch-master-pod-that-filesystemexception-data-log-input-output-error/270379 "2021-04-19T11:15:59Z")

</div>

I found the below error logs in Elasticsearch master pod logs- Caused by: java.lang.IllegalStateException: Unable to access 'path.logs' (/data/log) at org.elasticsearch.bootstrap.FilePermissionUtils.addDirector…

---

## [Custom Index Name for FileBeat](https://discuss.elastic.co/t/custom-index-name-for-filebeat/200073)

<div class="topic-metadata">

**Author:** [@Ghaith\_Haddad](https://discuss.elastic.co/u/Ghaith_Haddad)\
**Replies:** 2\
**Last updated:** [September 30, 2019, 3:52am UTC](https://discuss.elastic.co/t/custom-index-name-for-filebeat/200073 "2019-09-30T03:52:53Z")

</div>

Hello everyone, So i have ELK configured on a server and filebeat configured on a bunch of other servers which will be sending their log files to the ELK server. Now i need to be able to differentiate each servers' logs…

---

## [How to use ES to find shortest pat(in graph)](https://discuss.elastic.co/t/how-to-use-es-to-find-shortest-pat-in-graph/66504)

<div class="topic-metadata">

**Author:** [@Hyojoung\_Shin](https://discuss.elastic.co/u/Hyojoung_Shin)\
**Replies:** 2\
**Last updated:** [November 18, 2016, 10:01am UTC](https://discuss.elastic.co/t/how-to-use-es-to-find-shortest-pat-in-graph/66504 "2016-11-18T10:01:38Z")

</div>

Hi, Thank you for the amazing work! I am trying to build a GPS tracking system. For this I am concerning to use graph theory. If I build nodes(geo-point) and edges(from node id, to node id), can I find the shortest p…

---

## [Memory consumption and shard allocation](https://discuss.elastic.co/t/memory-consumption-and-shard-allocation/12524)

<div class="topic-metadata">

**Author:** [@Vadim\_Kisselmann](https://discuss.elastic.co/u/Vadim_Kisselmann)\
**Replies:** 2\
**Last updated:** [June 25, 2013, 11:54am UTC](https://discuss.elastic.co/t/memory-consumption-and-shard-allocation/12524 "2013-06-25T11:54:37Z")

</div>

Hi folks, i have a few questions about memory consumption during bulk (re-)indexing and shard allocation. We have a small cluster on the AWS, 3 nodes, 5 indices(5 shards & 1 replica each = 50 active shards) and…

---

## [Logstash input file not working](https://discuss.elastic.co/t/logstash-input-file-not-working/186713)

<div class="topic-metadata">

**Author:** [@paksoft18](https://discuss.elastic.co/u/paksoft18)\
**Replies:** 5\
**Last updated:** [June 21, 2019, 1:36pm UTC](https://discuss.elastic.co/t/logstash-input-file-not-working/186713 "2019-06-21T13:36:39Z")

</div>

Hello, Greetings, I'm new to ELK Stack and I'm trying to put some router logs to elasticsearch via Logstash but it's not working. it doesn't create the index on elasticsearch please help. My Config file is as below i…

---

## [Can we create a node-client with ES/Hadoop or Transport client is the only way out?](https://discuss.elastic.co/t/can-we-create-a-node-client-with-es-hadoop-or-transport-client-is-the-only-way-out/43327)

<div class="topic-metadata">

**Author:** [@ted.fed](https://discuss.elastic.co/u/ted.fed)\
**Replies:** 5\
**Last updated:** [March 8, 2016, 7:13am UTC](https://discuss.elastic.co/t/can-we-create-a-node-client-with-es-hadoop-or-transport-client-is-the-only-way-out/43327 "2016-03-08T07:13:23Z")

</div>

Hi, I have gone through the documentation for https://www.elastic.co/guide/en/elasticsearch/hadoop/current/reference.html but could not see how to create a node-client. Is TransportClient the only one available to be…

---

## [ELK stack needs tuning](https://discuss.elastic.co/t/elk-stack-needs-tuning/17042)

<div class="topic-metadata">

**Author:** [@R\_Toma](https://discuss.elastic.co/u/R_Toma)\
**Replies:** 5\
**Last updated:** [April 18, 2014, 10:16pm UTC](https://discuss.elastic.co/t/elk-stack-needs-tuning/17042 "2014-04-18T22:16:45Z")

</div>

Hi all, At bol.com we use ELK for a logsearch platform, using 3 machines. We need fast indexing (to not loose events) and want fast & near realtime search. The search is currently not fast enough. Simple "give me…

---

## [OutOfMemoryError (Java heap space) during replication enabling on 90 indices](https://discuss.elastic.co/t/outofmemoryerror-java-heap-space-during-replication-enabling-on-90-indices/16907)

<div class="topic-metadata">

**Author:** [@Jesse\_Davis](https://discuss.elastic.co/u/Jesse_Davis)\
**Replies:** 5\
**Last updated:** [April 12, 2014, 6:10pm UTC](https://discuss.elastic.co/t/outofmemoryerror-java-heap-space-during-replication-enabling-on-90-indices/16907 "2014-04-12T18:10:59Z")

</div>

We're attempting to create a new Elasticsearch cluster for indexing URLs, but have run into a memory leak when turning replication on for our indices. The current setup is: 5 x m2.2xlarge, 4 TB mounted on EBS per n…

---

## [Email Tokenizing Not Working?](https://discuss.elastic.co/t/email-tokenizing-not-working/6329)

<div class="topic-metadata">

**Author:** [@davrob](https://discuss.elastic.co/u/davrob)\
**Replies:** 5\
**Last updated:** [February 14, 2012, 9:46am UTC](https://discuss.elastic.co/t/email-tokenizing-not-working/6329 "2012-02-14T09:46:47Z")

</div>

Hi, I've defined an analyser and used it in a Mapping as defined below: https://gist.github.com/1583636 But when I enter something like @gmail.com, it is not matching the wildcard search, it only matches when I…

---

## [Dec 25th, 2025: \[EN\] Eat something healthier at X-mas](https://discuss.elastic.co/t/dec-25th-2025-en-eat-something-healthier-at-x-mas/384137)

<div class="topic-metadata">

**Author:** [@piotrprz](https://discuss.elastic.co/u/piotrprz)\
**Replies:** 0\
**Last updated:** [December 25, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-25th-2025-en-eat-something-healthier-at-x-mas/384137 "2025-12-25T08:00:19Z")

</div>

I hope during the holidays you folks are also eating healthy stuff, not just sweet cakes :wink: Let’s say you wanted to buy some fruit in advance, you may not know all the names, you may not know what kind of fruit y…

---

## [Kibana canvas access permission with on per page basis](https://discuss.elastic.co/t/kibana-canvas-access-permission-with-on-per-page-basis/272752)

<div class="topic-metadata">

**Author:** [@glitz](https://discuss.elastic.co/u/glitz)\
**Replies:** 3\
**Last updated:** [May 12, 2021, 9:13pm UTC](https://discuss.elastic.co/t/kibana-canvas-access-permission-with-on-per-page-basis/272752 "2021-05-12T21:13:58Z")

</div>

hello, if a have a privileged user1 and other unprivileged user2, is there a way that I can control that user 1 can read any page in a canvas (the whole canvas) but user2 can read some pages in the same canvas, provided…

---

## [Kibana is not able to fetch data from kibana collector](https://discuss.elastic.co/t/kibana-is-not-able-to-fetch-data-from-kibana-collector/250694)

<div class="topic-metadata">

**Author:** [@sudhakar1](https://discuss.elastic.co/u/sudhakar1)\
**Replies:** 7\
**Last updated:** [October 2, 2020, 11:55am UTC](https://discuss.elastic.co/t/kibana-is-not-able-to-fetch-data-from-kibana-collector/250694 "2020-10-02T11:55:39Z")

</div>

Kibana is not able to fetch data from kibana collector error is showing as screen shot below. Also Elastic Search is crashing , I am running ES 6.5.4 http://localhost:9200/\_cluster/stats {"\_nodes":{"total":1,"successfu…

---

## [Vega Stacked bar chart](https://discuss.elastic.co/t/vega-stacked-bar-chart/205866)

<div class="topic-metadata">

**Author:** [@Jeremy\_A](https://discuss.elastic.co/u/Jeremy_A)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 2:52pm UTC](https://discuss.elastic.co/t/vega-stacked-bar-chart/205866 "2019-11-01T14:52:55Z")

</div>

I'm trying to make a stacked bar chart. The X axis should be time series by day, and the y axis should show the sum of two fields, where each field is a separate color. The Elasticsearch query gives the expected results …

---

## [How to save spark scala dataframe to elastic search](https://discuss.elastic.co/t/how-to-save-spark-scala-dataframe-to-elastic-search/142315)

<div class="topic-metadata">

**Author:** [@sheryl](https://discuss.elastic.co/u/sheryl)\
**Replies:** 1\
**Last updated:** [August 14, 2018, 3:45am UTC](https://discuss.elastic.co/t/how-to-save-spark-scala-dataframe-to-elastic-search/142315 "2018-08-14T03:45:57Z")

</div>

i am using this df to save into elasticsearch but it showing error --- ERROR NetworkClient: Node \[192.168.0.1:9200\] failed (Connection timed out: connect); no other nodes left - aborting... -- df.write.format("org.elas…

---

## [Scalability: do types carry any built-in routing or do I add type to doc to route on it?](https://discuss.elastic.co/t/scalability-do-types-carry-any-built-in-routing-or-do-i-add-type-to-doc-to-route-on-it/63791)

<div class="topic-metadata">

**Author:** [@reavels](https://discuss.elastic.co/u/reavels)\
**Replies:** 7\
**Last updated:** [October 27, 2016, 5:40am UTC](https://discuss.elastic.co/t/scalability-do-types-carry-any-built-in-routing-or-do-i-add-type-to-doc-to-route-on-it/63791 "2016-10-27T05:40:38Z")

</div>

I am creating a bunch of types (1000s) in elasticsearch that roughly map to classes or tables. So my query looks like this: http://localhost:9200/myindex//\_search. My type might look like this: { "properties": { …

[Previous page](https://discuss.elastic.co/top.md?page=1001&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1003&per_page=50&period=all)
