# Top **URL:** https://discuss.elastic.co/top.md?page=1012&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1013 --- ## [ICMP setting ignored?](https://discuss.elastic.co/t/icmp-setting-ignored/54643)
**Author:** [@aros](https://discuss.elastic.co/u/aros)\ **Replies:** 3\ **Last updated:** [July 5, 2016, 8:31pm UTC](https://discuss.elastic.co/t/icmp-setting-ignored/54643 "2016-07-05T20:31:32Z")
Hi, I am trying to monitor my http traffic using packetbeat 5.0.0-alpha4 (something I did before with 1.x with good results). My problem is that I am receiving an increasing number of events, even when no http traffic … --- ## [Mapper Attachments Plugin with .NET client](https://discuss.elastic.co/t/mapper-attachments-plugin-with-net-client/53632)
**Author:** [@richetdan](https://discuss.elastic.co/u/richetdan)\ **Replies:** 3\ **Last updated:** [June 26, 2016, 7:30am UTC](https://discuss.elastic.co/t/mapper-attachments-plugin-with-net-client/53632 "2016-06-26T07:30:56Z")
Hi all, I'm new to Elasticserch and Mapper Attachment Plugin. I am using both .net clients, mixing them: Elasticsearch.net and NEST I've created and indexed with mapping using the following REST command: POST /trkind… --- ## [Detection rules hitting all data tiers](https://discuss.elastic.co/t/detection-rules-hitting-all-data-tiers/310922)
**Author:** [@pushkarsawant](https://discuss.elastic.co/u/pushkarsawant)\ **Replies:** 5\ **Last updated:** [August 3, 2022, 1:46pm UTC](https://discuss.elastic.co/t/detection-rules-hitting-all-data-tiers/310922 "2022-08-03T13:46:13Z")
Hi, We are using elasticsearch detection engine to run detections through logs data. Most of our detection rules are executed against logs-\* index pattern. These rules run every 5 minutes with a look back of 4 minutes. … --- ## [Logstash and mongodb connection using JDBC is not working](https://discuss.elastic.co/t/logstash-and-mongodb-connection-using-jdbc-is-not-working/219119)
**Author:** [@SanTiaGo\_KarThiCk](https://discuss.elastic.co/u/SanTiaGo_KarThiCk)\ **Replies:** 5\ **Last updated:** [February 17, 2020, 5:42am UTC](https://discuss.elastic.co/t/logstash-and-mongodb-connection-using-jdbc-is-not-working/219119 "2020-02-17T05:42:01Z")
This is the configuration file gives output as \[unable to connect to database and no suitable driver was found!\] and I am using logstash version 7.5.1 --- ## [Microsoft Edge, APM JS - Failed sending transactions and Not send data by IE12](https://discuss.elastic.co/t/microsoft-edge-apm-js-failed-sending-transactions-and-not-send-data-by-ie12/188795)
**Author:** [@amateur](https://discuss.elastic.co/u/amateur)\ **Replies:** 5\ **Last updated:** [July 13, 2019, 1:28am UTC](https://discuss.elastic.co/t/microsoft-edge-apm-js-failed-sending-transactions-and-not-send-data-by-ie12/188795 "2019-07-13T01:28:31Z")
Hello, We have the following problem with the Microsoft Edge browser, the following error appears when we try to send the information to the APM server: elastic-apm-js-base.umd.min.js (1736.29) \[object Error\]: {descri… --- ## [Logstash not able to create index on Elastic](https://discuss.elastic.co/t/logstash-not-able-to-create-index-on-elastic/170417)
**Author:** [@vijayakrishna.rg](https://discuss.elastic.co/u/vijayakrishna.rg)\ **Replies:** 6\ **Last updated:** [March 1, 2019, 12:03am UTC](https://discuss.elastic.co/t/logstash-not-able-to-create-index-on-elastic/170417 "2019-03-01T00:03:52Z")
Hi, I have installed logstash on my elastic machine and pointed to one of the log file as input, i have started logstash service, i don't see any logs coming into elastic either index in elastic, when i tail logstash lo… --- ## [Logstash creates index which is 2 dates ahead](https://discuss.elastic.co/t/logstash-creates-index-which-is-2-dates-ahead/88004)
**Author:** [@Steve\_1](https://discuss.elastic.co/u/Steve_1)\ **Replies:** 6\ **Last updated:** [June 5, 2017, 12:37am UTC](https://discuss.elastic.co/t/logstash-creates-index-which-is-2-dates-ahead/88004 "2017-06-05T00:37:36Z")
In my case log record timestamp doesn't have date value, just time, assuming that date value is current date. logstash .conf: input { beats { port =\> 5044 } } filter { if \[type\] == "filebeat" { grok { … --- ## [Font Size in Markdown @Canvas #Canvas](https://discuss.elastic.co/t/font-size-in-markdown-canvas-canvas/192994)
**Author:** [@Que](https://discuss.elastic.co/u/Que)\ **Replies:** 1\ **Last updated:** [July 30, 2019, 10:18pm UTC](https://discuss.elastic.co/t/font-size-in-markdown-canvas-canvas/192994 "2019-07-30T22:18:46Z")
Hello All, I am very newbie with Kibana Canvas where font size can't increase beyond 96 and when i check the video presented in Kibana canvas introduction, it shows font size that's extremely large. any trick to use ? … --- ## [Filebeats for UFW logs - how to define fields?](https://discuss.elastic.co/t/filebeats-for-ufw-logs-how-to-define-fields/155263)
**Author:** [@bvickers](https://discuss.elastic.co/u/bvickers)\ **Replies:** 1\ **Last updated:** [November 5, 2018, 8:52am UTC](https://discuss.elastic.co/t/filebeats-for-ufw-logs-how-to-define-fields/155263 "2018-11-05T08:52:17Z")
Hello. I am trying to set up Elastic Stack to manage some typical and some custom logs. I have Windows and Linux servers to grab logs from and I decided to use Beats to make it a little bit more secure (using logstash … --- ## [What happened to the .Net client?](https://discuss.elastic.co/t/what-happened-to-the-net-client/346068)
**Author:** [@Eric\_Paul](https://discuss.elastic.co/u/Eric_Paul)\ **Replies:** 2\ **Last updated:** [November 4, 2023, 2:21pm UTC](https://discuss.elastic.co/t/what-happened-to-the-net-client/346068 "2023-11-04T14:21:45Z")
OK it's been a bit since I coded against elasticsearch. Now it looks like there is a new client to replace nest. But the documentation is severely lacking. I don't see any examples of code except for the most basic stuff… --- ## [Kibana fails to create kibana.pid in /var/run](https://discuss.elastic.co/t/kibana-fails-to-create-kibana-pid-in-var-run/267247)
**Author:** [@m-b79](https://discuss.elastic.co/u/m-b79)\ **Replies:** 2\ **Last updated:** [March 24, 2021, 8:26am UTC](https://discuss.elastic.co/t/kibana-fails-to-create-kibana-pid-in-var-run/267247 "2021-03-24T08:26:24Z")
Hi, I am a beginner with ELK and since I've updated my Ubuntu 20.04, I have the following problem: When I want to start kibana it fails and when I check the logs it says "\[Error: ENOENT: no such file or directory, open… --- ## [\[ERROR\]\[logstash.outputs.elasticsearch\] Got a bad response code from server, but this code is not considered retryable. Request will be dropped](https://discuss.elastic.co/t/error-logstash-outputs-elasticsearch-got-a-bad-response-code-from-server-but-this-code-is-not-considered-retryable-request-will-be-dropped/176823)
**Author:** [@weijie.zhu](https://discuss.elastic.co/u/weijie.zhu)\ **Replies:** 2\ **Last updated:** [April 15, 2019, 9:33am UTC](https://discuss.elastic.co/t/error-logstash-outputs-elasticsearch-got-a-bad-response-code-from-server-but-this-code-is-not-considered-retryable-request-will-be-dropped/176823 "2019-04-15T09:33:10Z")
Hello, as of recent I've been getting the following error: \`\[2019-04-12T00:00:30,775\]\[ERROR\]\[logstash.outputs.elasticsearch\] Got a bad response code from server, but this code is not considered retryable. Request will b… --- ## [Filebeat service not starting on reboot after OS upgrade](https://discuss.elastic.co/t/filebeat-service-not-starting-on-reboot-after-os-upgrade/125376)
**Author:** [@juhlig](https://discuss.elastic.co/u/juhlig)\ **Replies:** 2\ **Last updated:** [March 26, 2018, 11:04am UTC](https://discuss.elastic.co/t/filebeat-service-not-starting-on-reboot-after-os-upgrade/125376 "2018-03-26T11:04:01Z")
Hi, we were running filebeat 5.6.8 on an Ubuntu 14.04 machine until recently. After a release upgrade to Ubuntu 16.04 via do-release-upgrade, the filebeat service is not starting on system startup any longer. service f… --- ## [Incremental Grok Works, but logstash grok filter fails to parse simple literal string](https://discuss.elastic.co/t/incremental-grok-works-but-logstash-grok-filter-fails-to-parse-simple-literal-string/56503)
**Author:** [@darioc](https://discuss.elastic.co/u/darioc)\ **Replies:** 2\ **Last updated:** [July 27, 2016, 3:34pm UTC](https://discuss.elastic.co/t/incremental-grok-works-but-logstash-grok-filter-fails-to-parse-simple-literal-string/56503 "2016-07-27T15:34:19Z")
Hello, Trying to extract as many fields from my log messages, but running into some basic issues. I have a log message like the following: INFO 2016-07-21 13:17:48,139 \[http-bio-8080-exec-5\] com.vendor.recserver.c… --- ## [Creating Elasticsearch Indexes from JSON with Elastic.Clients.Elasticsearch in .NET](https://discuss.elastic.co/t/creating-elasticsearch-indexes-from-json-with-elastic-clients-elasticsearch-in-net/357580)
**Author:** [@Jacques\_du\_Plessis](https://discuss.elastic.co/u/Jacques_du_Plessis)\ **Replies:** 2\ **Last updated:** [April 18, 2024, 8:16pm UTC](https://discuss.elastic.co/t/creating-elasticsearch-indexes-from-json-with-elastic-clients-elasticsearch-in-net/357580 "2024-04-18T20:16:50Z")
I'm currently updating my NEST client, which is deprecated, to the latest Elasticsearch client, Elastic.Clients.Elasticsearch. Previously, with NEST, I utilized the low-level client to create indexes from a JSON file con… --- ## [Logstash Cache](https://discuss.elastic.co/t/logstash-cache/241202)
**Author:** [@csgeek](https://discuss.elastic.co/u/csgeek)\ **Replies:** 4\ **Last updated:** [July 14, 2020, 10:34pm UTC](https://discuss.elastic.co/t/logstash-cache/241202 "2020-07-14T22:34:58Z")
I'm working on an event filter written in ruby that needs to do a lookup. I have the data stored in a JSON file that i'm loading locally and I'd like to know if there is any concept of a shared cache that I can leverage… --- ## [Combining cardinality and sum metrics in timelion](https://discuss.elastic.co/t/combining-cardinality-and-sum-metrics-in-timelion/201287)
**Author:** [@apiras](https://discuss.elastic.co/u/apiras)\ **Replies:** 4\ **Last updated:** [October 4, 2019, 1:47pm UTC](https://discuss.elastic.co/t/combining-cardinality-and-sum-metrics-in-timelion/201287 "2019-10-04T13:47:32Z")
Hi all, I don't find a good combination of commands to create a timelion visualization to show the sum of the age of unique users. My idea was to select users by cardinality metric on 'userId' field and sum the age of … --- ## [File input v4.1.2 tailing - duplicate docs ingested](https://discuss.elastic.co/t/file-input-v4-1-2-tailing-duplicate-docs-ingested/130648)
**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Replies:** 4\ **Last updated:** [May 9, 2018, 12:21pm UTC](https://discuss.elastic.co/t/file-input-v4-1-2-tailing-duplicate-docs-ingested/130648 "2018-05-09T12:21:47Z")
Hi Team, I'm seeing numerous duplicates (a lot of them) for each individual doc being sent by logstash. I am still unsure whether this is specific to 4.1.x plugin - I will a test with 4.0.3 and confirm this later. Belo… --- ## [Lowercase searches not working](https://discuss.elastic.co/t/lowercase-searches-not-working/12087)
**Author:** [@Chris\_Kinsalb](https://discuss.elastic.co/u/Chris_Kinsalb)\ **Replies:** 4\ **Last updated:** [May 23, 2013, 1:10pm UTC](https://discuss.elastic.co/t/lowercase-searches-not-working/12087 "2013-05-23T13:10:59Z")
Hello group, Here's what I am trying to achieve: For testing purposes I created a default template which is inserted using the \_template endpoint into elastic search. The template should be applied to all indexe… --- ## [Filename search using nGram-tokenizer and span\_near-query](https://discuss.elastic.co/t/filename-search-using-ngram-tokenizer-and-span-near-query/8859)
**Author:** [@da\_mkay](https://discuss.elastic.co/u/da_mkay)\ **Replies:** 4\ **Last updated:** [September 5, 2012, 1:55pm UTC](https://discuss.elastic.co/t/filename-search-using-ngram-tokenizer-and-span-near-query/8859 "2012-09-05T13:55:27Z")
Hi, I try to build a simple filename search. I want that the user can search for any part of the name. Let's say the following filenames are indexed: \[1\] My\_file\_2012.01.12.txt \[2\] My\_file\_2012.01.05.txt \[3\] M… --- ## [Setup Elasticsearch cluster on Multi-Cloud(AWS and GCP)](https://discuss.elastic.co/t/setup-elasticsearch-cluster-on-multi-cloud-aws-and-gcp/230065)
**Author:** [@Taewoo](https://discuss.elastic.co/u/Taewoo)\ **Replies:** 3\ **Last updated:** [April 28, 2020, 7:46am UTC](https://discuss.elastic.co/t/setup-elasticsearch-cluster-on-multi-cloud-aws-and-gcp/230065 "2020-04-28T07:46:44Z")
Hello? I'm newbie to Elasticsearch. I'm planning to manage Multi-Cloud logs using Elasticsearch. Some of nodes are in AWS and other nodes are in GCP. (Let's assume each public cloud's instances are in same vpc) I came… --- ## [Elasticsearch bulk slows down after a certain amount of documents](https://discuss.elastic.co/t/elasticsearch-bulk-slows-down-after-a-certain-amount-of-documents/225434)
**Author:** [@Ivan\_Janev](https://discuss.elastic.co/u/Ivan_Janev)\ **Replies:** 3\ **Last updated:** [March 27, 2020, 5:41pm UTC](https://discuss.elastic.co/t/elasticsearch-bulk-slows-down-after-a-certain-amount-of-documents/225434 "2020-03-27T17:41:03Z")
Hello, I'm experiencing problems when using the bulk feature of Elastic but I'm still very novice in ES so I don't know how to even debug it properly. The problem: I'm trying to index 2 million documents using the bul… --- ## [Plot multiple graphs in Kibana](https://discuss.elastic.co/t/plot-multiple-graphs-in-kibana/206594)
**Author:** [@ajg](https://discuss.elastic.co/u/ajg)\ **Replies:** 3\ **Last updated:** [November 18, 2019, 11:11am UTC](https://discuss.elastic.co/t/plot-multiple-graphs-in-kibana/206594 "2019-11-18T11:11:41Z")
Hi everybody, I am working on a proyect that requires to visualize several graphs in the same plot: The problem is that I cannot create them on the same "visualization line", because they get the data from different s… --- ## [Lost connection when adding filter files and patterns in logstash](https://discuss.elastic.co/t/lost-connection-when-adding-filter-files-and-patterns-in-logstash/81654)
**Author:** [@aziz\_007](https://discuss.elastic.co/u/aziz_007)\ **Replies:** 8\ **Last updated:** [April 14, 2017, 1:56pm UTC](https://discuss.elastic.co/t/lost-connection-when-adding-filter-files-and-patterns-in-logstash/81654 "2017-04-14T13:56:27Z")
i work with zimbra i have created a grok filter for mailbox.log and a pattern file i have put the filter file called zimbra\_mailbox.conf in /etc/logstash/conf.d/ and i have created a directory called patterns in /etc… --- ## [Kibana Still Displays Data From Uninstalled Filebeat](https://discuss.elastic.co/t/kibana-still-displays-data-from-uninstalled-filebeat/78527)
**Author:** [@peter.alfafara](https://discuss.elastic.co/u/peter.alfafara)\ **Replies:** 3\ **Last updated:** [March 16, 2017, 3:47pm UTC](https://discuss.elastic.co/t/kibana-still-displays-data-from-uninstalled-filebeat/78527 "2017-03-16T15:47:37Z")
Hi, We are currently experiencing an issue where Kibana still displays data gathered by our uninstalled Filebeat. We initially installed Filebeat along with ElasticSearch, Kibana and Logstash. Then we decided to use… --- ## [Export Schema for Kibana 4/5?](https://discuss.elastic.co/t/export-schema-for-kibana-4-5/37602)
**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\ **Replies:** 3\ **Last updated:** [December 19, 2015, 5:51am UTC](https://discuss.elastic.co/t/export-schema-for-kibana-4-5/37602 "2015-12-19T05:51:50Z")
So as I'm mucking with this..my plan was to get a solid Kibana 5 setup...the whole works with searches, visualizations, and ultimately dashboard, then export and import from development to production. I am not finding a… --- ## [How to create line from source to destination in MAP](https://discuss.elastic.co/t/how-to-create-line-from-source-to-destination-in-map/2343)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 3\ **Last updated:** [June 11, 2015, 6:33am UTC](https://discuss.elastic.co/t/how-to-create-line-from-source-to-destination-in-map/2343 "2015-06-11T06:33:44Z")
Hi Experts , I want to show data flow from source to destination using lines something like "http://map.ipviking.com/". Please suggest from where I can start . I have source IP , destination IP, port no etc in my log. … --- ## [Does elastic.apm.span\_frames\_min\_duration setting apply?](https://discuss.elastic.co/t/does-elastic-apm-span-frames-min-duration-setting-apply/217187)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 5\ **Last updated:** [February 2, 2020, 6:48am UTC](https://discuss.elastic.co/t/does-elastic-apm-span-frames-min-duration-setting-apply/217187 "2020-02-02T06:48:22Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version:7.5.2 … --- ## [Logstash cannot handle huge amount of data](https://discuss.elastic.co/t/logstash-cannot-handle-huge-amount-of-data/162906)
**Author:** [@longnx](https://discuss.elastic.co/u/longnx)\ **Replies:** 5\ **Last updated:** [January 7, 2019, 8:02am UTC](https://discuss.elastic.co/t/logstash-cannot-handle-huge-amount-of-data/162906 "2019-01-07T08:02:00Z")
Hi Experts, We are using Logstash to get data from Oracle database using JDBC with SQL query base on ID and time stamp. The Oracle table has around 15 billions/ month and the data inserted continuous to that table. It … --- ## [Getting fixed number of results using multi search API](https://discuss.elastic.co/t/getting-fixed-number-of-results-using-multi-search-api/138839)
**Author:** [@rs123](https://discuss.elastic.co/u/rs123)\ **Replies:** 5\ **Last updated:** [July 7, 2018, 6:35pm UTC](https://discuss.elastic.co/t/getting-fixed-number-of-results-using-multi-search-api/138839 "2018-07-07T18:35:35Z")
Is it possible to get fixed number of results from each index searched? For example if it1, it2 and it3 are three different indexes and I want 6 results from it1, 4 results from it2 and 5 from it3. And I want only these… --- ## [RTT/Duration Increasing for Heartbeat agent on Windows 10](https://discuss.elastic.co/t/rtt-duration-increasing-for-heartbeat-agent-on-windows-10/75780)
**Author:** [@misabel](https://discuss.elastic.co/u/misabel)\ **Replies:** 5\ **Last updated:** [February 20, 2017, 7:06pm UTC](https://discuss.elastic.co/t/rtt-duration-increasing-for-heartbeat-agent-on-windows-10/75780 "2017-02-20T19:06:55Z")
I've noticed an add behavior for the Heartbeat agent running on Windows 10. I haven't tested with other OS yet but I figured I would ask if anyone hit that problem. Basically it seems the duration for the checks is incre… --- ## [Removing null fields from nexted fields - xml filter](https://discuss.elastic.co/t/removing-null-fields-from-nexted-fields-xml-filter/56747)
**Author:** [@whyapenny](https://discuss.elastic.co/u/whyapenny)\ **Replies:** 5\ **Last updated:** [August 1, 2016, 9:41pm UTC](https://discuss.elastic.co/t/removing-null-fields-from-nexted-fields-xml-filter/56747 "2016-08-01T21:41:43Z")
im using the xml filter to parse xml with logstash. This places the xml info in a nested field, such as: \[entry\]\[xmlField1\] \[entry\]\[xmlField2\] i am having issues with mappings and data when the fields are periodically… --- ## [Agentless Setup for Elastic SIEM](https://discuss.elastic.co/t/agentless-setup-for-elastic-siem/371504)
**Author:** [@lastshadow](https://discuss.elastic.co/u/lastshadow)\ **Replies:** 4\ **Last updated:** [December 12, 2024, 12:41pm UTC](https://discuss.elastic.co/t/agentless-setup-for-elastic-siem/371504 "2024-12-12T12:41:32Z")
I've used Elastic SIEM before but always in environments where the Elastic agent can be deployed to endpoints and servers. In my current environment I cannot deploy the agent. I have both Linux and Windows boxes. Questi… --- ## [Logstash output changing field location randomly](https://discuss.elastic.co/t/logstash-output-changing-field-location-randomly/185448)
**Author:** [@mdavis00](https://discuss.elastic.co/u/mdavis00)\ **Replies:** 4\ **Last updated:** [June 12, 2019, 4:24pm UTC](https://discuss.elastic.co/t/logstash-output-changing-field-location-randomly/185448 "2019-06-12T16:24:44Z")
I am pulling in logs from Kafka and sending them out to Elasticsearch. I have been getting this set up over the last few weeks and everything seems to be working as expected. Today I noticed every time I start the serv… --- ## [Index bulk data from SQL to elastic search?](https://discuss.elastic.co/t/index-bulk-data-from-sql-to-elastic-search/183891)
**Author:** [@SudevPK](https://discuss.elastic.co/u/SudevPK)\ **Replies:** 1\ **Last updated:** [June 3, 2019, 7:43am UTC](https://discuss.elastic.co/t/index-bulk-data-from-sql-to-elastic-search/183891 "2019-06-03T07:43:29Z")
What is the best and fastest way or tool to index bulk data from SQL to Elastic search ? --- ## [Noisy rule](https://discuss.elastic.co/t/noisy-rule/358643)
**Author:** [@bbreer](https://discuss.elastic.co/u/bbreer)\ **Replies:** 1\ **Last updated:** [May 9, 2024, 2:15pm UTC](https://discuss.elastic.co/t/noisy-rule/358643 "2024-05-09T14:15:16Z")
We have some endpoint security applications that are triggering the built-in rule Suspicious Lsass Process Access. They are using Powershell to access the lsass process. I created a rule exception using the field proces… --- ## [Customize text from login page in Kibana 7.6 - not working](https://discuss.elastic.co/t/customize-text-from-login-page-in-kibana-7-6-not-working/238432)
**Author:** [@marrel](https://discuss.elastic.co/u/marrel)\ **Replies:** 7\ **Last updated:** [June 26, 2020, 5:27am UTC](https://discuss.elastic.co/t/customize-text-from-login-page-in-kibana-7-6-not-working/238432 "2020-06-26T05:27:15Z")
Hi everyone! I wanted to customize the texts from login/logout page in Kibana version 7.6 with my custom text. I have found where the texts are written: for the Welcome to Kibana and Your window into the Elastic Sta… --- ## [Translog files not clearing, each associated with an open file descriptor](https://discuss.elastic.co/t/translog-files-not-clearing-each-associated-with-an-open-file-descriptor/231791)
**Author:** [@hhsuey](https://discuss.elastic.co/u/hhsuey)\ **Replies:** 7\ **Last updated:** [May 19, 2020, 3:14am UTC](https://discuss.elastic.co/t/translog-files-not-clearing-each-associated-with-an-open-file-descriptor/231791 "2020-05-19T03:14:12Z")
One of our clusters is in a bad state where the nodes appear to have thousands of file descriptors open. I found out there are many open translog files since filename translog-1 and now up to translog-2358. Every hour ab… --- ## [Warnings when installing logstash?](https://discuss.elastic.co/t/warnings-when-installing-logstash/203201)
**Author:** [@hanserik](https://discuss.elastic.co/u/hanserik)\ **Replies:** 1\ **Last updated:** [October 11, 2019, 3:12pm UTC](https://discuss.elastic.co/t/warnings-when-installing-logstash/203201 "2019-10-11T15:12:16Z")
When installling release 7.4 of logstash, I get below warnings. Do I need to be concerned? What needs to be done? OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely… --- ## [Logstash S3 input issues](https://discuss.elastic.co/t/logstash-s3-input-issues/175306)
**Author:** [@cfinnie](https://discuss.elastic.co/u/cfinnie)\ **Replies:** 1\ **Last updated:** [April 12, 2019, 2:26pm UTC](https://discuss.elastic.co/t/logstash-s3-input-issues/175306 "2019-04-12T14:26:45Z")
Hi there, I am having trouble trying to get Logstash to use the S3 input plugin to load log files from an S3 bucket. This is the error I get: \[INFO \]\[logstash.inputs.s3 \] S3 input: No files found in bucket {:pr… --- ## [Logsatash同士の通信エラー](https://discuss.elastic.co/t/logsatash/151543)
**Author:** [@aurantiacus](https://discuss.elastic.co/u/aurantiacus)\ **Replies:** 1\ **Last updated:** [October 22, 2018, 7:20am UTC](https://discuss.elastic.co/t/logsatash/151543 "2018-10-22T07:20:28Z")
3つ質問があります。 上記lumberjack同士の通信において、LSサーバ(srv1)のlogstashのログで発生が頻発しています。 1.下記ログが発生している場合、何台かhostからのログの受信ができていないのでしょうか？ 2.このログの発生を無くす（限りなく減らす）ための有効な設定や試せることはあるでしょうか？ 3.そもそもbeatを動かしすぎでlumberjackでのログ送受信運用が厳しいとかありますでしょうか？ 構… --- ## [Return both aggregation AND field value in ES](https://discuss.elastic.co/t/return-both-aggregation-and-field-value-in-es/113985)
**Author:** [@Natalia\_Kuleniuk](https://discuss.elastic.co/u/Natalia_Kuleniuk)\ **Replies:** 1\ **Last updated:** [January 5, 2018, 2:11pm UTC](https://discuss.elastic.co/t/return-both-aggregation-and-field-value-in-es/113985 "2018-01-05T14:11:05Z")
Let’s say that each document in my ES index has following fields: ASIN, name, referenceNumber, videoViews, timeWatched There can be many documents with the same ASIN fields. I’m doing teams aggregation, that aggregate… --- ## [About details of Multi-Metric Anomaly Detection](https://discuss.elastic.co/t/about-details-of-multi-metric-anomaly-detection/293413)
**Author:** [@Furkan](https://discuss.elastic.co/u/Furkan)\ **Replies:** 6\ **Last updated:** [January 6, 2022, 6:06am UTC](https://discuss.elastic.co/t/about-details-of-multi-metric-anomaly-detection/293413 "2022-01-06T06:06:43Z")
Hi, In the multi-metric job in anomaly detection, do the metrics affect each other to find the anomalies as multivariate anomaly detection or is the main point of multi-metric job creating a job for different metrics in… --- ## [403 Error on Kibaha UI when loading time filter field name](https://discuss.elastic.co/t/403-error-on-kibaha-ui-when-loading-time-filter-field-name/123624)
**Author:** [@challa\_sai\_kiran](https://discuss.elastic.co/u/challa_sai_kiran)\ **Replies:** 6\ **Last updated:** [March 12, 2018, 9:18pm UTC](https://discuss.elastic.co/t/403-error-on-kibaha-ui-when-loading-time-filter-field-name/123624 "2018-03-12T21:18:08Z")
HI, When I try to load the Kibana UI, I see the following error: at http://kibana.dev.commandcentral.com/bundles/kibana.bundle.js?v=15571:227:19758 at processQueue (http://kibana.dev.commandcentral.com/bundles/… --- ## [Replacing @timestamp with a custom field does not occur](https://discuss.elastic.co/t/replacing-timestamp-with-a-custom-field-does-not-occur/63627)
**Author:** [@the\_iobender](https://discuss.elastic.co/u/the_iobender)\ **Replies:** 6\ **Last updated:** [October 27, 2016, 3:20pm UTC](https://discuss.elastic.co/t/replacing-timestamp-with-a-custom-field-does-not-occur/63627 "2016-10-27T15:20:59Z")
Hello, I am currently using the HTTP-IN plugin to receive HTTP PUT requests from various systems. The systems have a field called CreationTime which I am trying to use instead of the @timestamp field. I have read few … --- ## [Logstash 5.0.0-alpha5: kafka not found](https://discuss.elastic.co/t/logstash-5-0-0-alpha5-kafka-not-found/57950)
**Author:** [@kaem2111](https://discuss.elastic.co/u/kaem2111)\ **Replies:** 6\ **Last updated:** [September 7, 2016, 10:01am UTC](https://discuss.elastic.co/t/logstash-5-0-0-alpha5-kafka-not-found/57950 "2016-09-07T10:01:18Z")
Hello, after upgrading 5.0.0-alpha4 to 5 using logstash-rpm I get the error: /usr/share/logstash/bin/logstash --path.settings=/etc/logstash -t --log.level debug -e 'output { kafka { topic\_id =\> "logstash" }}' ---… --- ## [Japanese Search Results with Kuromoji plugin](https://discuss.elastic.co/t/japanese-search-results-with-kuromoji-plugin/22887)
**Author:** [@Mangesh\_Ralegankar](https://discuss.elastic.co/u/Mangesh_Ralegankar)\ **Replies:** 6\ **Last updated:** [March 29, 2015, 7:20am UTC](https://discuss.elastic.co/t/japanese-search-results-with-kuromoji-plugin/22887 "2015-03-29T07:20:11Z")
We are using Elastic Search 1.1 and Kuromoji plugin 2.1.0 Trying to create index based on below two to three approaches in the settings for test index. localhost:9200/test/ PUT 1. { "index":{ "analys… --- ## [Logstash 7.5 GC too frequently to work](https://discuss.elastic.co/t/logstash-7-5-gc-too-frequently-to-work/290331)
**Author:** [@chenchuangc](https://discuss.elastic.co/u/chenchuangc)\ **Replies:** 2\ **Last updated:** [November 28, 2021, 8:44am UTC](https://discuss.elastic.co/t/logstash-7-5-gc-too-frequently-to-work/290331 "2021-11-28T08:44:46Z")
thank you for read my problem , sorry for bother you !!! 1. Env logstash version 7.5.0 java version java -version openjdk version "1.8.0\_312" OpenJDK Runtime Environment (build 1.8.0\_312-b07) OpenJDK 64-Bit Server VM … --- ## [Create daily index](https://discuss.elastic.co/t/create-daily-index/200053)
**Author:** [@Yoav\_Ben\_Moha](https://discuss.elastic.co/u/Yoav_Ben_Moha)\ **Replies:** 2\ **Last updated:** [September 19, 2019, 10:32am UTC](https://discuss.elastic.co/t/create-daily-index/200053 "2019-09-19T10:32:29Z")
I would like to create a daily index in elastic 7 Somthing like the one in the example bellow: \[elasticsearch@elk7-lab ~\]$ curl -X GET 'http://172.xx.xxx.xx:9200/\_cat/indices?v' health status index … --- ## [How to query multiple indexes in ElasticSearch 5.6 when they have different parent-child mappings?](https://discuss.elastic.co/t/how-to-query-multiple-indexes-in-elasticsearch-5-6-when-they-have-different-parent-child-mappings/105300)
**Author:** [@sclaggett](https://discuss.elastic.co/u/sclaggett)\ **Replies:** 2\ **Last updated:** [October 31, 2017, 5:47pm UTC](https://discuss.elastic.co/t/how-to-query-multiple-indexes-in-elasticsearch-5-6-when-they-have-different-parent-child-mappings/105300 "2017-10-31T17:47:00Z")
We're attempting to retrieve results from several different Elasticsearch indexes and sort them by a common field. The way we're approaching this is to create a boolean query that is composed of multiple should statement… [Previous page](https://discuss.elastic.co/top.md?page=1011&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1013&per_page=50&period=all)