# Top **URL:** https://discuss.elastic.co/top.md?page=1023&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1024 --- ## [Unable to Tessellate shape](https://discuss.elastic.co/t/unable-to-tessellate-shape/290384)
**Author:** [@Liangliang\_Qiu](https://discuss.elastic.co/u/Liangliang_Qiu)\ **Replies:** 5\ **Last updated:** [November 29, 2021, 12:09pm UTC](https://discuss.elastic.co/t/unable-to-tessellate-shape/290384 "2021-11-29T12:09:59Z")
when i ingest geo\_shape data to ES, it shows this kind of error elasticsearch.helpers.errors.BulkIndexError: ('1 document(s) failed to index.', \[{'index': {'\_index': 'spx\_id\_station\_zone\_detail\_di\_test', '\_type': '\_doc'… --- ## [Watcher - Alarm to match two field from two index](https://discuss.elastic.co/t/watcher-alarm-to-match-two-field-from-two-index/209195)
**Author:** [@carmezsa](https://discuss.elastic.co/u/carmezsa)\ **Replies:** 5\ **Last updated:** [December 14, 2019, 3:06am UTC](https://discuss.elastic.co/t/watcher-alarm-to-match-two-field-from-two-index/209195 "2019-12-14T03:06:02Z")
I am trying to deploy a watcher to my lab home. I have logs from zeek (json) and logs from intelmq (Threat Intelligence Sharing). I need compare one field from zeek\_index (field: id.resp\_h) with one field from intelmq\_in… --- ## [Name in place of IP](https://discuss.elastic.co/t/name-in-place-of-ip/200937)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 5\ **Last updated:** [September 26, 2019, 8:28pm UTC](https://discuss.elastic.co/t/name-in-place-of-ip/200937 "2019-09-26T20:28:36Z")
is there a way I can convert all IP that are getting register in to elasticsearch as name? I am just using regular packetbeat configuration and outputting straight to elasticsearch output.elasticsearch: # Array of ho… --- ## [Max event size for tcp input plugin](https://discuss.elastic.co/t/max-event-size-for-tcp-input-plugin/241773)
**Author:** [@Jehutywong](https://discuss.elastic.co/u/Jehutywong)\ **Replies:** 1\ **Last updated:** [July 21, 2020, 3:52pm UTC](https://discuss.elastic.co/t/max-event-size-for-tcp-input-plugin/241773 "2020-07-21T15:52:40Z")
Logstash version 7.6 I am sending a big json over TCP to Logstash. Somehow only partial of the event was able to output. roughly 60KB. The rest of the event was dicarded. Any way i can increase this limit. I tried to i… --- ## [How can I log response body in APM in python](https://discuss.elastic.co/t/how-can-i-log-response-body-in-apm-in-python/219733)
**Author:** [@alza](https://discuss.elastic.co/u/alza)\ **Replies:** 7\ **Last updated:** [February 19, 2020, 11:08am UTC](https://discuss.elastic.co/t/how-can-i-log-response-body-in-apm-in-python/219733 "2020-02-19T11:08:11Z")
I have a Flask API, and I want to log responses body using APM. I used this example code: from elasticapm.contrib.flask import ElasticAPM from flask import Flask app = Flask(\_\_name\_\_) apm = ElasticAPM(app, server\_url='… --- ## [ElasticSearc and Lucene compatibility issues](https://discuss.elastic.co/t/elasticsearc-and-lucene-compatibility-issues/118204)
**Author:** [@ashuspeed](https://discuss.elastic.co/u/ashuspeed)\ **Replies:** 1\ **Last updated:** [February 2, 2018, 2:14pm UTC](https://discuss.elastic.co/t/elasticsearc-and-lucene-compatibility-issues/118204 "2018-02-02T14:14:27Z")
Hello, I am using ElasticSearch 5.6.3 version as well as Lucene version 6.6.1 in one of my projects. While trying to run the application for the first time, I am getting the following exception An SPI class of type org… --- ## [Elastic stack - get last message which fails on logstash](https://discuss.elastic.co/t/elastic-stack-get-last-message-which-fails-on-logstash/100867)
**Author:** [@Mojster](https://discuss.elastic.co/u/Mojster)\ **Replies:** 7\ **Last updated:** [October 11, 2017, 10:22am UTC](https://discuss.elastic.co/t/elastic-stack-get-last-message-which-fails-on-logstash/100867 "2017-10-11T10:22:47Z")
I'm indexing custom longs into Logstash. In some file I'm getting timeouts & I can't determine which line is causing them. As I can se, Filebeats is shipping them in batches. Is there any option to get this single mes… --- ## [Duplicating dashboard / Save As different name](https://discuss.elastic.co/t/duplicating-dashboard-save-as-different-name/57142)
**Author:** [@dvandyk](https://discuss.elastic.co/u/dvandyk)\ **Replies:** 7\ **Last updated:** [August 5, 2016, 1:56am UTC](https://discuss.elastic.co/t/duplicating-dashboard-save-as-different-name/57142 "2016-08-05T01:56:06Z")
Greetings all, We have been using Kibana dashboard for awhile now and love it, but it doesn't seem like there is a way to Save a dashboard as a different name. Essentially making a copy of a dashboard. My colleague… --- ## [Removing '.' (DOT) character from field name using ES-Hadoop SerDe](https://discuss.elastic.co/t/removing-dot-character-from-field-name-using-es-hadoop-serde/49127)
**Author:** [@gowthamsadasivam](https://discuss.elastic.co/u/gowthamsadasivam)\ **Replies:** 1\ **Last updated:** [May 10, 2016, 8:59am UTC](https://discuss.elastic.co/t/removing-dot-character-from-field-name-using-es-hadoop-serde/49127 "2016-05-10T08:59:42Z")
I am inserting data from Hive table to Elastic Search using ES-Hadoop SerDe. The data are multiple JSON files containing highly sparse fields. I am using the mapping like "app map\" for all the JSON root e… --- ## [Kibana: aggregation of timestamp field with date](https://discuss.elastic.co/t/kibana-aggregation-of-timestamp-field-with-date/183823)
**Author:** [@igour](https://discuss.elastic.co/u/igour)\ **Replies:** 2\ **Last updated:** [June 6, 2019, 10:23am UTC](https://discuss.elastic.co/t/kibana-aggregation-of-timestamp-field-with-date/183823 "2019-06-06T10:23:42Z")
Hi Team, I have a timestamp field which is coming from my log data source, the format is like: "batchDate": "2019-05-30 09:11:08" But in visualization, I wanted to make the chart on each day basis from the same field … --- ## [Failed to connect to backoff](https://discuss.elastic.co/t/failed-to-connect-to-backoff/284922)
**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\ **Replies:** 4\ **Last updated:** [September 24, 2021, 2:20am UTC](https://discuss.elastic.co/t/failed-to-connect-to-backoff/284922 "2021-09-24T02:20:02Z")
I set up minimum and basic TLS security for the Elasticsearch cluster. The metricbeat cannot push data to the Elasticsearch node. Here is the error in log file. metricbeat\[26335\]: 2021-09-22T18:08:39.471Z ERROR \[publish… --- ## [Cors in Kibana](https://discuss.elastic.co/t/cors-in-kibana/264575)
**Author:** [@seba\_galban](https://discuss.elastic.co/u/seba_galban)\ **Replies:** 4\ **Last updated:** [February 22, 2021, 2:27pm UTC](https://discuss.elastic.co/t/cors-in-kibana/264575 "2021-02-22T14:27:33Z")
Hi Everyone, We have a problem when we want to get the cookie from Kibana 7.10.0. We have two scenarios: If we don´t use the credentials: true, In the header response we have the set-cookie attribute but the browser… --- ## [Logstash aggregate filter use with pagination](https://discuss.elastic.co/t/logstash-aggregate-filter-use-with-pagination/226530)
**Author:** [@kamboh](https://discuss.elastic.co/u/kamboh)\ **Replies:** 4\ **Last updated:** [April 5, 2020, 9:51am UTC](https://discuss.elastic.co/t/logstash-aggregate-filter-use-with-pagination/226530 "2020-04-05T09:51:23Z")
I have a logstash pipeline that fetches data from mysql using jdbc input connecter aggregates data for users based on user id pushes aggregated data to elasticsearch cluster It fetches large amount of data (e.g 2 mill… --- ## [Kibana does not refresh list of fields when clicking on the refresh button](https://discuss.elastic.co/t/kibana-does-not-refresh-list-of-fields-when-clicking-on-the-refresh-button/200570)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 4\ **Last updated:** [September 30, 2019, 2:18pm UTC](https://discuss.elastic.co/t/kibana-does-not-refresh-list-of-fields-when-clicking-on-the-refresh-button/200570 "2019-09-30T14:18:13Z")
Hello, I am running an elk stack 7.3.0 with kibana 7.3.0. I have recently enabled lots of incoming data into the APM but in order to have hte new fields searchable I have to refresh the index pattern in order to rescan … --- ## [TypeError: Cannot read property 'aggConfig' of undefined](https://discuss.elastic.co/t/typeerror-cannot-read-property-aggconfig-of-undefined/157945)
**Author:** [@flalar](https://discuss.elastic.co/u/flalar)\ **Replies:** 4\ **Last updated:** [November 27, 2018, 8:23pm UTC](https://discuss.elastic.co/t/typeerror-cannot-read-property-aggconfig-of-undefined/157945 "2018-11-27T20:23:31Z")
After upgrade from 6.4 to 6.5 we get the following warning when loading a dashboard consisting of some pie and heatmap visualisations Deprecation warning: value provided is not in a recognized RFC2822 or ISO format. mo… --- ## [JSON Table Viewer](https://discuss.elastic.co/t/json-table-viewer/97072)
**Author:** [@advers](https://discuss.elastic.co/u/advers)\ **Replies:** 4\ **Last updated:** [August 15, 2017, 10:40am UTC](https://discuss.elastic.co/t/json-table-viewer/97072 "2017-08-15T10:40:26Z")
Hello there. I am currently working on a logging solution for .NET project, and logging data takes format of a JSON, that potentially can be very nested. Right now there are two options to view data - Table view or JSON… --- ## [Delete index using the connector](https://discuss.elastic.co/t/delete-index-using-the-connector/26969)
**Author:** [@RSiebeling](https://discuss.elastic.co/u/RSiebeling)\ **Replies:** 4\ **Last updated:** [August 13, 2015, 7:35pm UTC](https://discuss.elastic.co/t/delete-index-using-the-connector/26969 "2015-08-13T19:35:37Z")
Hi, following up on my previous question in the topic "delete from index" how can I delete an index using the connector? @Costin, you said do it manually but how should I do this, speak to the REST service or can I u… --- ## [Time range based on timestamp in DSL query](https://discuss.elastic.co/t/time-range-based-on-timestamp-in-dsl-query/350962)
**Author:** [@LeCalve](https://discuss.elastic.co/u/LeCalve)\ **Replies:** 3\ **Last updated:** [January 12, 2024, 2:57pm UTC](https://discuss.elastic.co/t/time-range-based-on-timestamp-in-dsl-query/350962 "2024-01-12T14:57:31Z")
Hello, I want to make a filter based on the time of a timestamp. I would like to extract all timestamps which have a time \< 8 or time \> 20. I don't know how to make the DSL query for that :slight\_smile: { --- ## [Setup Beats error time out](https://discuss.elastic.co/t/setup-beats-error-time-out/155389)
**Author:** [@shahid](https://discuss.elastic.co/u/shahid)\ **Replies:** 3\ **Last updated:** [November 6, 2018, 3:23pm UTC](https://discuss.elastic.co/t/setup-beats-error-time-out/155389 "2018-11-06T15:23:46Z")
Hi Team, i am getting the below below when i am tryting to setup the file and meteric beats on my client machines. sudo metricbeat -e setup sudo filebeat -e setup ERROR instance/beat.go:743 Exiting: Error importing K… --- ## [Elasticsearch service stopping automatically after some time](https://discuss.elastic.co/t/elasticsearch-service-stopping-automatically-after-some-time/154638)
**Author:** [@MAHESH\_K1](https://discuss.elastic.co/u/MAHESH_K1)\ **Replies:** 3\ **Last updated:** [November 2, 2018, 8:50pm UTC](https://discuss.elastic.co/t/elasticsearch-service-stopping-automatically-after-some-time/154638 "2018-11-02T20:50:55Z")
elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; disabled; vendor preset: disabled) Active: failed (Result: exit-code) since Tue 2018-10-30 20:08:41 IST; 3s ago Doc… --- ## [Time stamp "\_timestamp" working but not displaying in Discover](https://discuss.elastic.co/t/time-stamp--timestamp-working-but-not-displaying-in-discover/64370)
**Author:** [@brumleyscott](https://discuss.elastic.co/u/brumleyscott)\ **Replies:** 3\ **Last updated:** [October 31, 2016, 7:16pm UTC](https://discuss.elastic.co/t/time-stamp--timestamp-working-but-not-displaying-in-discover/64370 "2016-10-31T19:16:38Z")
I have an index created with jsonStr := "{\\"mappings\\": {\\"" + typeName + "\\": {\\"\_timestamp\\": {\\"enabled\\": true}}}}" which is the only way that timestamp data appears to work for me. I'm using the API to add document… --- ## [Logstash: ^CSIGINT received. Shutting down the pipeline. {:level=\>:warn}](https://discuss.elastic.co/t/logstash-csigint-received-shutting-down-the-pipeline-level-warn/43497)
**Author:** [@Shobhlika](https://discuss.elastic.co/u/Shobhlika)\ **Replies:** 3\ **Last updated:** [March 4, 2016, 12:06pm UTC](https://discuss.elastic.co/t/logstash-csigint-received-shutting-down-the-pipeline-level-warn/43497 "2016-03-04T12:06:20Z")
./logstash -f weblogic-config You are using a deprecated config setting "pattern" set in grok. Deprecated sett ings will continue to work, but are scheduled for removal from logstash in the f uture. You should use this … --- ## [Elastic fleet server fails to install after 8.6.0](https://discuss.elastic.co/t/elastic-fleet-server-fails-to-install-after-8-6-0/323063)
**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\ **Replies:** 6\ **Last updated:** [January 19, 2023, 10:39pm UTC](https://discuss.elastic.co/t/elastic-fleet-server-fails-to-install-after-8-6-0/323063 "2023-01-19T22:39:23Z")
"Fleet Server - Waiting on fleet-server input to be added to default policy","ecs.version":"1.6.0"} {"log.level":"info","@timestamp":"2023-01-12T12:57:55.988-0800","log.origin":{"file.name":"cmd/enroll\_cmd.go","file.lin… --- ## [Kibana Discover Json](https://discuss.elastic.co/t/kibana-discover-json/133083)
**Author:** [@Dhanashree](https://discuss.elastic.co/u/Dhanashree)\ **Replies:** 6\ **Last updated:** [May 25, 2018, 4:56am UTC](https://discuss.elastic.co/t/kibana-discover-json/133083 "2018-05-25T04:56:00Z")
Hi, On discover tab i have created columns using the toggle column in table functionality.Now on clicking on a specific row at the leftmost side i am getting a dropdown kind of thing which is giving me the entire data f… --- ## [I copy this picture from "https://www.elastic.co/guide/en/logstash/current/deploying-and-scaling.html", and I can't understand this architecture how to avoid message queue reveiving duplicate data](https://discuss.elastic.co/t/i-copy-this-picture-from-https-www-elastic-co-guide-en-logstash-current-deploying-and-scaling-html-and-i-cant-understand-this-architecture-how-to-avoid-message-queue-reveiving-duplicate-data/49362)
**Author:** [@parsons-smith](https://discuss.elastic.co/u/parsons-smith)\ **Replies:** 6\ **Last updated:** [May 10, 2016, 12:43pm UTC](https://discuss.elastic.co/t/i-copy-this-picture-from-https-www-elastic-co-guide-en-logstash-current-deploying-and-scaling-html-and-i-cant-understand-this-architecture-how-to-avoid-message-queue-reveiving-duplicate-data/49362 "2016-05-10T12:43:44Z")
--- ## [Field \[content\] not present as part of path \[content\] when update\_by\_query](https://discuss.elastic.co/t/field-content-not-present-as-part-of-path-content-when-update-by-query/313336)
**Author:** [@sherry\_cs](https://discuss.elastic.co/u/sherry_cs)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 9:01am UTC](https://discuss.elastic.co/t/field-content-not-present-as-part-of-path-content-when-update-by-query/313336 "2022-08-31T09:01:00Z")
Hi, guys. I created an index with a pipeline which extracted field from the file attachments. It works well except the partial update. I tried the request : POST test\_know/\_update/G3LH2oIBXGHwpDNidXe9 { "doc": { … --- ## [Ingest pipeline version control and deployment](https://discuss.elastic.co/t/ingest-pipeline-version-control-and-deployment/234493)
**Author:** [@whatgeorgemade](https://discuss.elastic.co/u/whatgeorgemade)\ **Replies:** 0\ **Last updated:** [May 27, 2020, 8:54am UTC](https://discuss.elastic.co/t/ingest-pipeline-version-control-and-deployment/234493 "2020-05-27T08:54:23Z")
I'm wondering how other people deal with managing their ingest pipelines in terms of version control and deployment to the cluster. I put pipeline definitions in Git so I can track the changes and, more importantly, the… --- ## [Multiline: flush downstream error -\> NPE](https://discuss.elastic.co/t/multiline-flush-downstream-error-npe/116761)
**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\ **Replies:** 0\ **Last updated:** [January 23, 2018, 10:06pm UTC](https://discuss.elastic.co/t/multiline-flush-downstream-error-npe/116761 "2018-01-23T22:06:52Z")
I have a setup of filebeats pushing data to LS which in turn pushes data to ES. I was harvesting on a few files to pump data. To test potential speedup, I started 2 filebeat processes each processing a half of the set of… --- ## [Index corruption and recovery loop](https://discuss.elastic.co/t/index-corruption-and-recovery-loop/19061)
**Author:** [@Vadim\_Molokovich](https://discuss.elastic.co/u/Vadim_Molokovich)\ **Replies:** 0\ **Last updated:** [August 4, 2014, 7:44am UTC](https://discuss.elastic.co/t/index-corruption-and-recovery-loop/19061 "2014-08-04T07:44:14Z")
Hi After network connectivity failure we have corrupted index recovery loop in cluster. Any help will be greatly appreciated! \*Cluster state: \* \*elasticsearch version 1.3.0\* "cluster\_name" : "segments", … --- ## [Searching Elastic Search with low level client](https://discuss.elastic.co/t/searching-elastic-search-with-low-level-client/187989)
**Author:** [@roma\_sodha](https://discuss.elastic.co/u/roma_sodha)\ **Replies:** 1\ **Last updated:** [July 1, 2019, 1:14am UTC](https://discuss.elastic.co/t/searching-elastic-search-with-low-level-client/187989 "2019-07-01T01:14:23Z")
Hi All, I have just started with elastic search. I am searching elasticsearch database, with low-level \[Elasticsearch.Net\] (https://github.com/elasticsearch/elasticsearch-net/tree/master/src/Elasticsearch.Net) client. … --- ## [Indexer cluster separate and Searcher cluster separate](https://discuss.elastic.co/t/indexer-cluster-separate-and-searcher-cluster-separate/175574)
**Author:** [@setprem](https://discuss.elastic.co/u/setprem)\ **Replies:** 8\ **Last updated:** [April 13, 2019, 11:05am UTC](https://discuss.elastic.co/t/indexer-cluster-separate-and-searcher-cluster-separate/175574 "2019-04-13T11:05:11Z")
Hi all, Want to try two different clusters sharing same data path (same index). The reason is, one cluster will keep on indexing streaming data. The other cluster will take care of all the searches and aggregations. So … --- ## [Filters vs Queries](https://discuss.elastic.co/t/filters-vs-queries/5032)
**Author:** [@davrob](https://discuss.elastic.co/u/davrob)\ **Replies:** 8\ **Last updated:** [August 4, 2011, 5:56pm UTC](https://discuss.elastic.co/t/filters-vs-queries/5032 "2011-08-04T17:56:55Z")
Hi, I keep hearing that I should be using filters rather than queries because they are much quicker but I'm not sure how I should be using them. Up to now I have been using QueryStringQueryBuilder to generate Luc… --- ## [Getting Error 502,{"ok":false,"message":"backend closed connection"} for enriching fields to another index](https://discuss.elastic.co/t/getting-error-502-ok-false-message-backend-closed-connection-for-enriching-fields-to-another-index/284637)
**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\ **Replies:** 2\ **Last updated:** [September 21, 2021, 5:31am UTC](https://discuss.elastic.co/t/getting-error-502-ok-false-message-backend-closed-connection-for-enriching-fields-to-another-index/284637 "2021-09-21T05:31:42Z")
Hi, I have two index 1.ther 2.part. "ther" index has 24 fields, ''part" index has 19 fields. I have to enrich "ther" index with "part" index fields. Field "user\_id" is common between two indexes. Using enrich process… --- ## [Elastic APM with Playframework](https://discuss.elastic.co/t/elastic-apm-with-playframework/172122)
**Author:** [@matpil](https://discuss.elastic.co/u/matpil)\ **Replies:** 2\ **Last updated:** [March 18, 2019, 8:44am UTC](https://discuss.elastic.co/t/elastic-apm-with-playframework/172122 "2019-03-18T08:44:24Z")
Hi all, I try to integrate Elastic APM with playframework. For this reason I wrote a simple filter: package filters; import akka.stream.Materializer; import co.elastic.apm.api.ElasticApm; import co.elastic.apm.api.Tr… --- ## [High IO Wait in Elasticsearch 5.3 Cluster](https://discuss.elastic.co/t/high-io-wait-in-elasticsearch-5-3-cluster/86469)
**Author:** [@Jeferson\_Martins](https://discuss.elastic.co/u/Jeferson_Martins)\ **Replies:** 2\ **Last updated:** [May 19, 2017, 6:58pm UTC](https://discuss.elastic.co/t/high-io-wait-in-elasticsearch-5-3-cluster/86469 "2017-05-19T18:58:20Z")
Hello, I have two Elasticsearch Clusters and one of them have 20 instances of Elasticsearch in Amazon AWS (EC2). We use EBS Volumes. The problem is in the EC2 Hosts the IO Wait still between 8 and 40 and this is the … --- ## [Disable logstash's binary log format](https://discuss.elastic.co/t/disable-logstashs-binary-log-format/27694)
**Author:** [@amaltson](https://discuss.elastic.co/u/amaltson)\ **Replies:** 2\ **Last updated:** [August 19, 2015, 6:04pm UTC](https://discuss.elastic.co/t/disable-logstashs-binary-log-format/27694 "2015-08-19T18:04:18Z")
Hello all, For some reason after a certain amount of time the logstash shipper's logs turn from text to binary. Is there any way to disable this or view the binary log format? I've found a hard time finding anything … --- ## [Missing filter on fields which are nested objects](https://discuss.elastic.co/t/missing-filter-on-fields-which-are-nested-objects/12293)
**Author:** [@Abhishek\_Sanoujam](https://discuss.elastic.co/u/Abhishek_Sanoujam)\ **Replies:** 2\ **Last updated:** [June 6, 2013, 8:59am UTC](https://discuss.elastic.co/t/missing-filter-on-fields-which-are-nested-objects/12293 "2013-06-06T08:59:00Z")
Hi The "missing" filter doesn't seem to work on fields which are nested objects. Its supposed to return documents which don't have the specified field, and it works for "flattened" attributes. But if the field its… --- ## [Is logstash working?!?!](https://discuss.elastic.co/t/is-logstash-working/133299)
**Author:** [@MrNerd](https://discuss.elastic.co/u/MrNerd)\ **Replies:** 5\ **Last updated:** [May 28, 2018, 7:45am UTC](https://discuss.elastic.co/t/is-logstash-working/133299 "2018-05-28T07:45:41Z")
Hy there I recently lost all my data, and im trying to reintall all the logstash sistem i had before, the problem here is that I don't know if logstash is tacking packets from this ipaddress: 192.168.128.51 Especificat… --- ## [Elastic Search 5.2.1: \[Error\]- max file descriptors and max virtual memory](https://discuss.elastic.co/t/elastic-search-5-2-1-error-max-file-descriptors-and-max-virtual-memory/77563)
**Author:** [@eramitsinha](https://discuss.elastic.co/u/eramitsinha)\ **Replies:** 5\ **Last updated:** [March 6, 2017, 11:54pm UTC](https://discuss.elastic.co/t/elastic-search-5-2-1-error-max-file-descriptors-and-max-virtual-memory/77563 "2017-03-06T23:54:39Z")
We are migrating to Elastic Search 5.2.1, and are in development phase. Elastic Search server is hosted on Unix environment. We were able to install server with plugin. But when server is started, its giving … --- ## [Problem Using Filebeat for logging ssh log in](https://discuss.elastic.co/t/problem-using-filebeat-for-logging-ssh-log-in/264412)
**Author:** [@Skriix](https://discuss.elastic.co/u/Skriix)\ **Replies:** 3\ **Last updated:** [February 16, 2021, 1:10pm UTC](https://discuss.elastic.co/t/problem-using-filebeat-for-logging-ssh-log-in/264412 "2021-02-16T13:10:11Z")
Hi, SSh logs are not being shown in the kibana, I am pushing my logs to the ES Only I am using the following configuration, OS - Ubuntu 20.04 ES - 7.11.0 LogStash - 7.11.0 Kibana - 7.11.0 FileBeat - 7.11.0 The en… --- ## [Where is the exception in “json\_parse\_exception”?](https://discuss.elastic.co/t/where-is-the-exception-in-json-parse-exception/175845)
**Author:** [@ronyarmon](https://discuss.elastic.co/u/ronyarmon)\ **Replies:** 3\ **Last updated:** [April 18, 2019, 12:00pm UTC](https://discuss.elastic.co/t/where-is-the-exception-in-json-parse-exception/175845 "2019-04-18T12:00:37Z")
I'm using Kibana/ES 6.5 to index around 470 documents crawled from a Hebrew website with: POST /index\_name/\_doc/\_bulk I can post/get few individual documents but some probably carry some illegal characters as when I'm … --- ## [How to split Grok Message](https://discuss.elastic.co/t/how-to-split-grok-message/156592)
**Author:** [@Sripal](https://discuss.elastic.co/u/Sripal)\ **Replies:** 3\ **Last updated:** [November 14, 2018, 10:08am UTC](https://discuss.elastic.co/t/how-to-split-grok-message/156592 "2018-11-14T10:08:55Z")
Hi All, I'm trying to read the access log using gork filter. but i am unable to split the message. can anybody help. Here is my config file and sample output Thanks in advance . Sripal --- ## [Slack with logstash and elastalert](https://discuss.elastic.co/t/slack-with-logstash-and-elastalert/109544)
**Author:** [@pir1981](https://discuss.elastic.co/u/pir1981)\ **Replies:** 3\ **Last updated:** [December 4, 2017, 10:48am UTC](https://discuss.elastic.co/t/slack-with-logstash-and-elastalert/109544 "2017-12-04T10:48:27Z")
Hi, I have an ELK stack with a hook to slack The logstash filter is the following if \[message\] =~ "Reallocated\_Sector\_Count" or \[message\] =~ "Reallocated\_Sector\_Ct" or \[message\] =~ "Reported\_Uncorrectable\_Errors… --- ## [Visualize the latest status of news articles using Kibana](https://discuss.elastic.co/t/visualize-the-latest-status-of-news-articles-using-kibana/92283)
**Author:** [@saifhitawala](https://discuss.elastic.co/u/saifhitawala)\ **Replies:** 3\ **Last updated:** [July 11, 2017, 9:09am UTC](https://discuss.elastic.co/t/visualize-the-latest-status-of-news-articles-using-kibana/92283 "2017-07-11T09:09:09Z")
I'm trying to visualize the latest status of a news articles using Kibana. Here's a brief example of what I'm trying to do: I have a database of news. Each piece of news contains a headline, a timestamp and a status … --- ## [Simple file uploading using Logstash](https://discuss.elastic.co/t/simple-file-uploading-using-logstash/724)
**Author:** [@hemanth](https://discuss.elastic.co/u/hemanth)\ **Replies:** 3\ **Last updated:** [May 15, 2015, 11:50am UTC](https://discuss.elastic.co/t/simple-file-uploading-using-logstash/724 "2015-05-15T11:50:42Z")
Hi, I have a requirement to upload files from Logstash machine to a remote machine, without any processing. Input is a file, no filtering required, output is upload entire file to remote machine. Can I do that ? --He… --- ## [Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: \[error connecting to Elasticsearch at http://172.31.33.170:9200: Get "http://172.31.33.170:9200": net/http: request canceled while waiting for connection (Client.Timeout excee](https://discuss.elastic.co/t/exiting-couldnt-connect-to-any-of-the-configured-elasticsearch-hosts-errors-error-connecting-to-elasticsearch-at-http-172-31-33-170-get-http-172-31-33-170-9200-net-http-request-canceled-while-waiting-for-connection-client-timeout-excee/287391)
**Author:** [@chandra\_mohan1](https://discuss.elastic.co/u/chandra_mohan1)\ **Replies:** 1\ **Last updated:** [October 25, 2021, 3:53am UTC](https://discuss.elastic.co/t/exiting-couldnt-connect-to-any-of-the-configured-elasticsearch-hosts-errors-error-connecting-to-elasticsearch-at-http-172-31-33-170-get-http-172-31-33-170-9200-net-http-request-canceled-while-waiting-for-connection-client-timeout-excee/287391 "2021-10-25T03:53:30Z")
I am trying to send apache logs but when setup filebeat getting this error: Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: \[error connecting to Elasticsearch at http://172.31.33.170:9200:… --- ## [Filebeat autodiscover doesn't pick-up inputs](https://discuss.elastic.co/t/filebeat-autodiscover-doesnt-pick-up-inputs/253341)
**Author:** [@CatalinM](https://discuss.elastic.co/u/CatalinM)\ **Replies:** 7\ **Last updated:** [October 29, 2020, 1:58pm UTC](https://discuss.elastic.co/t/filebeat-autodiscover-doesnt-pick-up-inputs/253341 "2020-10-29T13:58:10Z")
Hi there! I've deployed Filebeat in the "observability" namespace (with all roles, bindings being set to observability - not sure if this is ok). It starts without issues, but it doesn't discover any inputs. This is my… --- ## [Logstash sincedb file not getting updated in ELK 6.8.0](https://discuss.elastic.co/t/logstash-sincedb-file-not-getting-updated-in-elk-6-8-0/188524)
**Author:** [@sureshrupnar](https://discuss.elastic.co/u/sureshrupnar)\ **Replies:** 7\ **Last updated:** [July 10, 2019, 6:48am UTC](https://discuss.elastic.co/t/logstash-sincedb-file-not-getting-updated-in-elk-6-8-0/188524 "2019-07-10T06:48:18Z")
Hi, recently we have migrated to ELK 6.8.0 and while ingesting data via logstash we are using sincedb\_path =\> "/export/vendor.sincedb" in input plugin inside the file component. This file was updated regularly after … --- ## [Filebeat -\> Logstash: SSL error](https://discuss.elastic.co/t/filebeat-logstash-ssl-error/145207)
**Author:** [@decibel83](https://discuss.elastic.co/u/decibel83)\ **Replies:** 1\ **Last updated:** [August 20, 2018, 4:29pm UTC](https://discuss.elastic.co/t/filebeat-logstash-ssl-error/145207 "2018-08-20T16:29:42Z")
Hi, I am using the ELK stack. I installed Elasticsearch, Logstash and Kibana and all services are up and running. I created the SSL certificate and key for the Logstash forwarder and I configured the certificate into t… --- ## [Watch store not started](https://discuss.elastic.co/t/watch-store-not-started/118775)
**Author:** [@ajayrc](https://discuss.elastic.co/u/ajayrc)\ **Replies:** 1\ **Last updated:** [February 7, 2018, 9:24am UTC](https://discuss.elastic.co/t/watch-store-not-started/118775 "2018-02-07T09:24:11Z")
Am using dockerized version of elastic-search-5.6.1 and using volume to persist data am getting this error frequently ..... any ideas how to debug it? java.lang.IllegalStateException: watch store not started at org.ela… [Previous page](https://discuss.elastic.co/top.md?page=1022&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1024&per_page=50&period=all)