# Top **URL:** https://discuss.elastic.co/top.md?page=1024&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1025 --- ## [Recover accidentally deleted index without snapshot](https://discuss.elastic.co/t/recover-accidentally-deleted-index-without-snapshot/47194)
**Author:** [@pauljeba](https://discuss.elastic.co/u/pauljeba)\ **Replies:** 1\ **Last updated:** [April 13, 2016, 6:52am UTC](https://discuss.elastic.co/t/recover-accidentally-deleted-index-without-snapshot/47194 "2016-04-13T06:52:42Z")
I was trying to delete a particular record, but I have accidentally deleted the entire index(rnd\_prod). Below is the code I used to delete. DELETE /rnd\_prod/ { "query": { "ids": { "type": "rnd\_prod",… --- ## [Split brain on 2 datacenters](https://discuss.elastic.co/t/split-brain-on-2-datacenters/11252)
**Author:** [@zxferxferz](https://discuss.elastic.co/u/zxferxferz)\ **Replies:** 7\ **Last updated:** [April 7, 2013, 2:13pm UTC](https://discuss.elastic.co/t/split-brain-on-2-datacenters/11252 "2013-04-07T14:13:54Z")
Hello, This is the first I write here, but I've read many messages, excuse my english Currently I have a two nodes cluster , one node in each datacenter. There is a global balancer that sends data connections … --- ## [Filebeat adding incorrect kubernetes metadata to events going to logstash](https://discuss.elastic.co/t/filebeat-adding-incorrect-kubernetes-metadata-to-events-going-to-logstash/354486)
**Author:** [@mmasseo](https://discuss.elastic.co/u/mmasseo)\ **Replies:** 4\ **Last updated:** [March 5, 2024, 6:26pm UTC](https://discuss.elastic.co/t/filebeat-adding-incorrect-kubernetes-metadata-to-events-going-to-logstash/354486 "2024-03-05T18:26:54Z")
Greetings, We have filebeat deployed to a kubernetes cluster (our QA instance). Filebeat is picking up logs for the containers and sending them to our logstash server, which ends up in our elasticsearch. However, the … --- ## [Jupyter -\> Vega -\> Kibana visualization (without disabling security). How?](https://discuss.elastic.co/t/jupyter-vega-kibana-visualization-without-disabling-security-how/301899)
**Author:** [@J\_Todd](https://discuss.elastic.co/u/J_Todd)\ **Replies:** 4\ **Last updated:** [April 8, 2022, 6:25am UTC](https://discuss.elastic.co/t/jupyter-vega-kibana-visualization-without-disabling-security-how/301899 "2022-04-08T06:25:02Z")
So we want to leverage the data-science and visualization strengths of Python on our ELK data and then use the Elastic API to send the resulting visualization to update a dashboard. Specifically, this refers to setting t… --- ## [Logstash Scheduler](https://discuss.elastic.co/t/logstash-scheduler/296431)
**Author:** [@shharukh](https://discuss.elastic.co/u/shharukh)\ **Replies:** 4\ **Last updated:** [February 8, 2022, 6:12am UTC](https://discuss.elastic.co/t/logstash-scheduler/296431 "2022-02-08T06:12:28Z")
Hey Elasticworld, I'm current Logstash version 7.9 ,I have a encounter a problem in Logstash, in which have a 4 pipeline which are using "JBDC" driver for inserting data into Elasticsearch. \*\*Now I have to add another … --- ## [Server fail over, suggested method](https://discuss.elastic.co/t/server-fail-over-suggested-method/211843)
**Author:** [@LordMathis](https://discuss.elastic.co/u/LordMathis)\ **Replies:** 1\ **Last updated:** [December 15, 2019, 10:25pm UTC](https://discuss.elastic.co/t/server-fail-over-suggested-method/211843 "2019-12-15T22:25:50Z")
Kibana version: 7.3 Elasticsearch version: 7.3 APM Server version: 7.3 APM Agent language and version: Intake API Our team was wondering what you all believe is the best method of fail over for the APM servers. We ar… --- ## [Issues during index where field is null after upgrade to 7.x](https://discuss.elastic.co/t/issues-during-index-where-field-is-null-after-upgrade-to-7-x/198262)
**Author:** [@Dallas\_Toth](https://discuss.elastic.co/u/Dallas_Toth)\ **Replies:** 4\ **Last updated:** [September 8, 2019, 9:26pm UTC](https://discuss.elastic.co/t/issues-during-index-where-field-is-null-after-upgrade-to-7-x/198262 "2019-09-08T21:26:58Z")
In previous versions of ES I have been able to send data in from SQL Server with fields that have null values. I know I needed to make some changes to the mapping to deal with the move from 5.x-6.x-7.x and I never had an… --- ## [Logstash not importing data even after showing absolutely fine logs](https://discuss.elastic.co/t/logstash-not-importing-data-even-after-showing-absolutely-fine-logs/168073)
**Author:** [@KashiPashoria\_Tonny](https://discuss.elastic.co/u/KashiPashoria_Tonny)\ **Replies:** 4\ **Last updated:** [February 13, 2019, 4:47pm UTC](https://discuss.elastic.co/t/logstash-not-importing-data-even-after-showing-absolutely-fine-logs/168073 "2019-02-13T16:47:45Z")
I'm using elasticsearch 6.6.0 and same version of logstash to import a csv file. I wrote a config file for logstash as it should be. It shows absolutely fine logs. Ending logs are as follows: \[2019-02-12T19:52:40,089\]\[… --- ## [Upsert - merge existing attributes/fields](https://discuss.elastic.co/t/upsert-merge-existing-attributes-fields/65181)
**Author:** [@amolbpatil](https://discuss.elastic.co/u/amolbpatil)\ **Replies:** 4\ **Last updated:** [November 8, 2016, 8:24am UTC](https://discuss.elastic.co/t/upsert-merge-existing-attributes-fields/65181 "2016-11-08T08:24:57Z")
I'm using ES 2.3.1 and I have a use case where there could be more than 1 documents with given ID and we want to merge those documents. Example: - document1 comes with "name:abc" - again document1 comes with "name: xyz… --- ## [Logging questions](https://discuss.elastic.co/t/logging-questions/50477)
**Author:** [@QD\_Wang](https://discuss.elastic.co/u/QD_Wang)\ **Replies:** 1\ **Last updated:** [May 20, 2016, 2:30am UTC](https://discuss.elastic.co/t/logging-questions/50477 "2016-05-20T02:30:43Z")
Hi There I have a question regarding how elasticsearch log works. 1) first step, i created a "test" collections with 5 shards and 1 replica , and i can see below message \[cluster.metadata \] \[ck-master\] \*\*\[… --- ## [How to double count events?](https://discuss.elastic.co/t/how-to-double-count-events/43125)
**Author:** [@sergeyb](https://discuss.elastic.co/u/sergeyb)\ **Replies:** 4\ **Last updated:** [March 2, 2016, 6:24am UTC](https://discuss.elastic.co/t/how-to-double-count-events/43125 "2016-03-02T06:24:02Z")
Not sure if this is possible, any help is greatly appreciated... I have time-based events with two date fields: start time and end time. I'd like to count amount of active events at any given time, i.e. how many events… --- ## [Replace Domain](https://discuss.elastic.co/t/replace-domain/42761)
**Author:** [@Juan\_Andres\_Ramirez](https://discuss.elastic.co/u/Juan_Andres_Ramirez)\ **Replies:** 4\ **Last updated:** [February 26, 2016, 2:56pm UTC](https://discuss.elastic.co/t/replace-domain/42761 "2016-02-26T14:56:04Z")
Hello Guys, In my config I have a filter to try replace domain1 by domain2, but I think it don't work. I recieved for example the server1.domain1.com and the same server with the domain2 and I don't want save t… --- ## [Welcome to the new mailing list](https://discuss.elastic.co/t/welcome-to-the-new-mailing-list/4973)
**Author:** [@kimchy](https://discuss.elastic.co/u/kimchy)\ **Replies:** 4\ **Last updated:** [July 27, 2011, 3:16pm UTC](https://discuss.elastic.co/t/welcome-to-the-new-mailing-list/4973 "2011-07-27T15:16:18Z")
Hi, This is the first post on the new mailing list. More info on the migration can be found here: http://www.elasticsearch.org/blog/2011/07/27/mailing-list-migration.html. -shay.banon --- ## [Want to disable Logstash http://localhost:9600/ URL JSON output](https://discuss.elastic.co/t/want-to-disable-logstash-http-localhost-9600-url-json-output/299352)
**Author:** [@shahidraza](https://discuss.elastic.co/u/shahidraza)\ **Replies:** 6\ **Last updated:** [March 11, 2022, 5:51am UTC](https://discuss.elastic.co/t/want-to-disable-logstash-http-localhost-9600-url-json-output/299352 "2022-03-11T05:51:51Z")
Hi Team, We don't want to see JSON output as it contains Hostname and other sensitive information and it's accessible without user id and password too. Please share details to disable this so that security vulnerabilit… --- ## [EnterpriseSearch : "Could not perform access check to Enterprise Search"](https://discuss.elastic.co/t/enterprisesearch-could-not-perform-access-check-to-enterprise-search/255548)
**Author:** [@flavienbwk](https://discuss.elastic.co/u/flavienbwk)\ **Replies:** 2\ **Last updated:** [November 17, 2020, 6:46pm UTC](https://discuss.elastic.co/t/enterprisesearch-could-not-perform-access-check-to-enterprise-search/255548 "2020-11-17T18:46:13Z")
Hi, I am trying to bind my Enterprise Search instance to my Kibana with SSL. My Enterprise Search instance works well alone, but Kibana refuses to connect to it : {"type":"log","@timestamp":"2020-11-16T13:44:55Z","ta… --- ## [Aggregating on highlight](https://discuss.elastic.co/t/aggregating-on-highlight/140175)
**Author:** [@Sofiane\_Chenna](https://discuss.elastic.co/u/Sofiane_Chenna)\ **Replies:** 2\ **Last updated:** [July 18, 2018, 7:59am UTC](https://discuss.elastic.co/t/aggregating-on-highlight/140175 "2018-07-18T07:59:13Z")
Hi , I have a query that returns a highlight fields , i wanna aggregate the fields returned by the query ( see code ) { "query" : { "query\_string" : { "query" : "\*… --- ## [Setting ES\_MIN\_MEM and ES\_MAX\_MEM](https://discuss.elastic.co/t/setting-es-min-mem-and-es-max-mem/15900)
**Author:** [@Pablo\_Musa](https://discuss.elastic.co/u/Pablo_Musa)\ **Replies:** 2\ **Last updated:** [February 20, 2014, 4:13pm UTC](https://discuss.elastic.co/t/setting-es-min-mem-and-es-max-mem/15900 "2014-02-20T16:13:12Z")
Hi guys, I am trying to set -Xmm and -Xms when starting elasticsearch. It should be very easy clean, however I am using debian and I am running my elasticsearch by "service" command. I could put it to work editing … --- ## [Access Elasticsearch with HTTPs and HTTP](https://discuss.elastic.co/t/access-elasticsearch-with-https-and-http/340661)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 1\ **Last updated:** [August 11, 2023, 7:53pm UTC](https://discuss.elastic.co/t/access-elasticsearch-with-https-and-http/340661 "2023-08-11T19:53:03Z")
I configured my Elasticsearch server to be secure, using a proprietary certificate. Similar to the configuration below: # security settings xpack.security.enabled: true xpack.security.autoconfiguration.enabled: false #… --- ## [Delete reports from reporting tab in Kibana](https://discuss.elastic.co/t/delete-reports-from-reporting-tab-in-kibana/233458)
**Author:** [@MaheshKumar](https://discuss.elastic.co/u/MaheshKumar)\ **Replies:** 1\ **Last updated:** [June 4, 2020, 8:52pm UTC](https://discuss.elastic.co/t/delete-reports-from-reporting-tab-in-kibana/233458 "2020-06-04T20:52:09Z")
I am aware of deleting the reports using POST /.reporting-\/\_delete\_by\_query { "query": { "match\_all": {} } } But this deletes all the reports under that index irrespective of creation date of the report. I… --- ## [Logstash metrics endpoint](https://discuss.elastic.co/t/logstash-metrics-endpoint/126749)
**Author:** [@pjh](https://discuss.elastic.co/u/pjh)\ **Replies:** 1\ **Last updated:** [April 4, 2018, 2:45pm UTC](https://discuss.elastic.co/t/logstash-metrics-endpoint/126749 "2018-04-04T14:45:33Z")
How can I use the logstash metrics endpoint? I can't see any detailed documentation on this. I have uncommented the following in the logstash.yml file but when I visit :9600/metrics there is just a 404 error. # -------… --- ## [Scale ingest node based on number of application](https://discuss.elastic.co/t/scale-ingest-node-based-on-number-of-application/286566)
**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\ **Replies:** 8\ **Last updated:** [October 13, 2021, 2:59pm UTC](https://discuss.elastic.co/t/scale-ingest-node-based-on-number-of-application/286566 "2021-10-13T14:59:16Z")
Hello, I have a plan to use ingest pipeline on my cluster, the plan is: 90 application will hit to elastic server, so I'll make around 200 pipeline on my cluster How can I scale the ingest node I need on my cluster to… --- ## [How to know the log comme from which file](https://discuss.elastic.co/t/how-to-know-the-log-comme-from-which-file/105211)
**Author:** [@seeva](https://discuss.elastic.co/u/seeva)\ **Replies:** 8\ **Last updated:** [October 30, 2017, 9:47am UTC](https://discuss.elastic.co/t/how-to-know-the-log-comme-from-which-file/105211 "2017-10-30T09:47:28Z")
Hi, I am using filebeat,logstash,ES and kibana 5.6.3. I want to be able to see the log source file name in kibana, but i am not being able to to. i have all information but do not have the file source name , the log are… --- ## [Master is not joiing cluster](https://discuss.elastic.co/t/master-is-not-joiing-cluster/102387)
**Author:** [@ghanshyam](https://discuss.elastic.co/u/ghanshyam)\ **Replies:** 8\ **Last updated:** [October 2, 2017, 4:53pm UTC](https://discuss.elastic.co/t/master-is-not-joiing-cluster/102387 "2017-10-02T16:53:19Z")
I have 3 master, 2 is up and but third one is not joining. Node1: c810wem.int.thomsonreuters.com node.name: ${HOSTNAME}-master-${ES\_HTTP\_PORT} http.cors.enabled: true tr.security.transport.ipfilter: "+n:c628agv.int.t… --- ## [Configure TLS production environment with own CA](https://discuss.elastic.co/t/configure-tls-production-environment-with-own-ca/310776)
**Author:** [@luca.derugeriis](https://discuss.elastic.co/u/luca.derugeriis)\ **Replies:** 3\ **Last updated:** [August 24, 2022, 3:50pm UTC](https://discuss.elastic.co/t/configure-tls-production-environment-with-own-ca/310776 "2022-08-24T15:50:48Z")
Hi everyone, I'm having a bit of an hard time configuring TLS in a production environment. I already have TLS running on a test environment (with autoconfiguration, using .deb package). At the end of the procedure it pr… --- ## [ElasticSearch : Unknown key for a VALUE\_STRING in \[index\]](https://discuss.elastic.co/t/elasticsearch-unknown-key-for-a-value-string-in-index/180380)
**Author:** [@Ankur\_Kumar1](https://discuss.elastic.co/u/Ankur_Kumar1)\ **Replies:** 0\ **Last updated:** [May 9, 2019, 2:03pm UTC](https://discuss.elastic.co/t/elasticsearch-unknown-key-for-a-value-string-in-index/180380 "2019-05-09T14:03:19Z")
My code written in nodejs import elasticsearch from 'elasticsearch'; const elasticClient = new elasticsearch.Client({ host: es\_host }) let body = let \_query = { "size": 1, "query": { "match": {"item\_id" : 1} … --- ## [Trouble enabling SSL on Kibana](https://discuss.elastic.co/t/trouble-enabling-ssl-on-kibana/179383)
**Author:** [@S\_Chase](https://discuss.elastic.co/u/S_Chase)\ **Replies:** 3\ **Last updated:** [May 2, 2019, 6:00pm UTC](https://discuss.elastic.co/t/trouble-enabling-ssl-on-kibana/179383 "2019-05-02T18:00:25Z")
RHEL7 Elastic Stack 6.7.1 Not using X-Pack. (following this guide) I'm having trouble configuring SSL on Kibana over 5601. First I generated a key and then I generated a CSR and sent it to the CA. I retrieved the cert a… --- ## [Logstash/syslog/CEF 1024 character limit](https://discuss.elastic.co/t/logstash-syslog-cef-1024-character-limit/155614)
**Author:** [@nich](https://discuss.elastic.co/u/nich)\ **Replies:** 3\ **Last updated:** [November 15, 2018, 12:09pm UTC](https://discuss.elastic.co/t/logstash-syslog-cef-1024-character-limit/155614 "2018-11-15T12:09:22Z")
I have an issue with some devices sending CEF encoded TCP syslog messages to Logstash, where long messages (greater than 1024 characters) are split at the 1024 character position, with each section then being processed s… --- ## [Graylog Spring Boot with Logback](https://discuss.elastic.co/t/graylog-spring-boot-with-logback/114721)
**Author:** [@anas90](https://discuss.elastic.co/u/anas90)\ **Replies:** 0\ **Last updated:** [January 9, 2018, 2:47pm UTC](https://discuss.elastic.co/t/graylog-spring-boot-with-logback/114721 "2018-01-09T14:47:15Z")
I create spring boot application i used logback implementation i want send the output logs to "graylog" so what i using the "logstash-gelf" as dependency , then i changes the logback.xml as below : test \ **Author:** [@mattweber](https://discuss.elastic.co/u/mattweber)\ **Replies:** 3\ **Last updated:** [May 6, 2015, 7:18pm UTC](https://discuss.elastic.co/t/development-category/237 "2015-05-06T19:18:38Z") It would be great to have a Development category where we can ask technical questions, get help writing plugins, PR's, or information on low level details most users won't care about. --- ## [Is it possible to configure ES to listen on 2 different http ports at the same time?](https://discuss.elastic.co/t/is-it-possible-to-configure-es-to-listen-on-2-different-http-ports-at-the-same-time/17744)
**Author:** [@Lance\_Lakey](https://discuss.elastic.co/u/Lance_Lakey)\ **Replies:** 3\ **Last updated:** [May 27, 2014, 9:41pm UTC](https://discuss.elastic.co/t/is-it-possible-to-configure-es-to-listen-on-2-different-http-ports-at-the-same-time/17744 "2014-05-27T21:41:27Z")
How do I configure ES to listen on http.port 9200 and 9500 ? I've tried a couple variations in the config but afaict ES always picks only one port -- You received this message because you are subscribed to th… --- ## [Generate PDF url broken in 5.4?](https://discuss.elastic.co/t/generate-pdf-url-broken-in-5-4/89815)
**Author:** [@initproto](https://discuss.elastic.co/u/initproto)\ **Replies:** 5\ **Last updated:** [June 20, 2017, 2:20pm UTC](https://discuss.elastic.co/t/generate-pdf-url-broken-in-5-4/89815 "2017-06-20T14:20:31Z")
Hi I made s chart and want to use the pdf url to download a pdf of the chart. But it gives an error. Says method not allowed. Is this broke? Also how come we cannot get url to image of the chart to embed elsewhere? S… --- ## [(Issue) Logstash JDBC Input Plugin seems to be changing datetime column value's at output](https://discuss.elastic.co/t/issue-logstash-jdbc-input-plugin-seems-to-be-changing-datetime-column-values-at-output/288353)
**Author:** [@GPartenza](https://discuss.elastic.co/u/GPartenza)\ **Replies:** 4\ **Last updated:** [November 4, 2021, 3:20am UTC](https://discuss.elastic.co/t/issue-logstash-jdbc-input-plugin-seems-to-be-changing-datetime-column-values-at-output/288353 "2021-11-04T03:20:48Z")
Hello, I have an SQLite database where new data is written every second. Currently, I am using Logstash and its JDBC plugin to read the data in real-time and ship it to Elasticsearch for visualization. Everything is wor… --- ## [Retrieving all the unique events](https://discuss.elastic.co/t/retrieving-all-the-unique-events/157758)
**Author:** [@23141](https://discuss.elastic.co/u/23141)\ **Replies:** 4\ **Last updated:** [November 22, 2018, 9:28pm UTC](https://discuss.elastic.co/t/retrieving-all-the-unique-events/157758 "2018-11-22T21:28:51Z")
Hey, I have an field in my documents called eventType and I want to get all the unique event types over a given time range. How can I achieve this? curl -X GET "http://server:9200/\_all/\_search" -H 'Content-Type: appli… --- ## [Watcher false alerts (query wrong? )](https://discuss.elastic.co/t/watcher-false-alerts-query-wrong/96207)
**Author:** [@lueneburger](https://discuss.elastic.co/u/lueneburger)\ **Replies:** 4\ **Last updated:** [August 8, 2017, 9:03am UTC](https://discuss.elastic.co/t/watcher-false-alerts-query-wrong/96207 "2017-08-08T09:03:18Z")
Hi Everyone, i got some watcher alerts to check if the separated indexes are getting new entries, if for example a SMTP server isn’t sending anything within 1 hours, then we will get an alert to check whats going on the… --- ## [Metricbeat memory watch - no conditions are met](https://discuss.elastic.co/t/metricbeat-memory-watch-no-conditions-are-met/92030)
**Author:** [@manankalra](https://discuss.elastic.co/u/manankalra)\ **Replies:** 4\ **Last updated:** [July 7, 2017, 12:09pm UTC](https://discuss.elastic.co/t/metricbeat-memory-watch-no-conditions-are-met/92030 "2017-07-07T12:09:39Z")
Hey, I'm having trouble with setting alerts for my memory usage. I'm using Metricbeat which is stashing only the memory metrics to Elasticsearch. This is the JSON for the watch that I've configured: { "trigger" : { … --- ## [Why does Logstash write into two indices? (default and custom ones)](https://discuss.elastic.co/t/why-does-logstash-write-into-two-indices-default-and-custom-ones/75233)
**Author:** [@Mr.King](https://discuss.elastic.co/u/Mr.King)\ **Replies:** 4\ **Last updated:** [February 15, 2017, 10:10pm UTC](https://discuss.elastic.co/t/why-does-logstash-write-into-two-indices-default-and-custom-ones/75233 "2017-02-15T22:10:11Z")
Hello, I am using Elasticsearch 5.2 and Logstash 5.2 . My problem is that Logstash is writing into the default index (format logstash-2017.02.15) and into my custom one. I just want it to write only into my "logstash… --- ## [SNMP uptime monitoring](https://discuss.elastic.co/t/snmp-uptime-monitoring/348827)
**Author:** [@Martin\_Hood](https://discuss.elastic.co/u/Martin_Hood)\ **Replies:** 3\ **Last updated:** [December 15, 2023, 3:59pm UTC](https://discuss.elastic.co/t/snmp-uptime-monitoring/348827 "2023-12-15T15:59:07Z")
Hi, I'm currently in the planning stage of an observability system. For a number of hosts snmp is the most effective way to check status but, as I understand, this isn't currently supported by Heartbeat. Is it possible… --- ## [Winlogbeat not sending logs via logstash on port 5044](https://discuss.elastic.co/t/winlogbeat-not-sending-logs-via-logstash-on-port-5044/237327)
**Author:** [@proxx](https://discuss.elastic.co/u/proxx)\ **Replies:** 1\ **Last updated:** [June 30, 2020, 11:46am UTC](https://discuss.elastic.co/t/winlogbeat-not-sending-logs-via-logstash-on-port-5044/237327 "2020-06-30T11:46:56Z")
My Logstash is running on port 5044, however when i started my Winlogbeat service on my windows server, which it show running, checking my Kibana i couldn't find the indices to index Here is my Logstash result \[root@o… --- ## [ElasticSearch not able to discover Master nodes](https://discuss.elastic.co/t/elasticsearch-not-able-to-discover-master-nodes/236516)
**Author:** [@taseer94](https://discuss.elastic.co/u/taseer94)\ **Replies:** 2\ **Last updated:** [June 10, 2020, 1:33pm UTC](https://discuss.elastic.co/t/elasticsearch-not-able-to-discover-master-nodes/236516 "2020-06-10T13:33:26Z")
Hi all, We were running an HA Elastic cluster. 3 nodes to be precise. However, this morning, without me being aware, Kubernetes was upgraded and that nodes were restarted, resulting in the cluster being in in-consistent… --- ## [Filebeat pipeline setup for system module ignores var.convert\_timezone: true?](https://discuss.elastic.co/t/filebeat-pipeline-setup-for-system-module-ignores-var-convert-timezone-true/181456)
**Author:** [@pdizz](https://discuss.elastic.co/u/pdizz)\ **Replies:** 2\ **Last updated:** [May 16, 2019, 9:29pm UTC](https://discuss.elastic.co/t/filebeat-pipeline-setup-for-system-module-ignores-var-convert-timezone-true/181456 "2019-05-16T21:29:46Z")
I'm trying to set up the filebeat system module to send logs to elastic through logstash. I'm following the filebeat "getting started" docs but the ingest pipeline that is created by the filebeat setup command is missing… --- ## [Many-to-many associations modeling - nested objects vs parent/child relationship](https://discuss.elastic.co/t/many-to-many-associations-modeling-nested-objects-vs-parent-child-relationship/110939)
**Author:** [@dikey94](https://discuss.elastic.co/u/dikey94)\ **Replies:** 2\ **Last updated:** [December 9, 2017, 6:00pm UTC](https://discuss.elastic.co/t/many-to-many-associations-modeling-nested-objects-vs-parent-child-relationship/110939 "2017-12-09T18:00:04Z")
Hello everyone, I wonder which association model is better in my case. I'm going to use ES to store information about customers and their cases. Each customer has 0-5 cases and each case is related to 0-5 customers (ma… --- ## [Kibana Error: Discover: Unable to parse/serialize body](https://discuss.elastic.co/t/kibana-error-discover-unable-to-parse-serialize-body/42600)
**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\ **Replies:** 2\ **Last updated:** [February 27, 2016, 11:20am UTC](https://discuss.elastic.co/t/kibana-error-discover-unable-to-parse-serialize-body/42600 "2016-02-27T11:20:05Z")
I am getting the following error. I haven't changed anything about my setup. What causes the error. I tried googling but nothing seems to solve the problem. rror: Unable to parse/serialize body at respond (http:… --- ## [Getting Error - ORA-00000: DPI-1047: Cannot locate a 64-bit Oracle Client library: "libclntsh.so: cannot open shared object file: No such file or directory elastc](https://discuss.elastic.co/t/getting-error-ora-00000-dpi-1047-cannot-locate-a-64-bit-oracle-client-library-libclntsh-so-cannot-open-shared-object-file-no-such-file-or-directory-elastc/273754)
**Author:** [@mrunalini](https://discuss.elastic.co/u/mrunalini)\ **Replies:** 0\ **Last updated:** [May 23, 2021, 7:58am UTC](https://discuss.elastic.co/t/getting-error-ora-00000-dpi-1047-cannot-locate-a-64-bit-oracle-client-library-libclntsh-so-cannot-open-shared-object-file-no-such-file-or-directory-elastc/273754 "2021-05-23T07:58:59Z")
HI Everyone, I am trying to connect Oracle DB via Metricbeat ,but getting error- ORA-00000: DPI-1047: Cannot locate a 64-bit Oracle Client library: "libclntsh.so: cannot open shared object file: No such file or directo… --- ## [Node going out of disk space. In what scenarios is this possible?](https://discuss.elastic.co/t/node-going-out-of-disk-space-in-what-scenarios-is-this-possible/132692)
**Author:** [@akshaymaniyar](https://discuss.elastic.co/u/akshaymaniyar)\ **Replies:** 7\ **Last updated:** [May 22, 2018, 7:05am UTC](https://discuss.elastic.co/t/node-going-out-of-disk-space-in-what-scenarios-is-this-possible/132692 "2018-05-22T07:05:49Z")
Hi, I am using es 5.5.1. We have set disk based thresholds as follows: "disk": { "threshold\_enabled": "true", "watermark": { "low": "0.85", "high": "0.88" } } Even after setting disk based thresholds, the node … --- ## [\[bool\] failed to parse field \[filter\]"](https://discuss.elastic.co/t/bool-failed-to-parse-field-filter/325131)
**Author:** [@Test\_Acc](https://discuss.elastic.co/u/Test_Acc)\ **Replies:** 1\ **Last updated:** [February 9, 2023, 3:42pm UTC](https://discuss.elastic.co/t/bool-failed-to-parse-field-filter/325131 "2023-02-09T15:42:37Z")
Hi i am pretty new to kibana and elastisearch, we upgraded from kibana/elastisearch 7.16.3 to 8.5.2 and since then the dashboard has been less than friendly here is a error that has stumped us ///////////////////////… --- ## [Logstash - ruby script to create array of nested fields](https://discuss.elastic.co/t/logstash-ruby-script-to-create-array-of-nested-fields/200312)
**Author:** [@Adithyaram](https://discuss.elastic.co/u/Adithyaram)\ **Replies:** 1\ **Last updated:** [September 19, 2019, 10:50pm UTC](https://discuss.elastic.co/t/logstash-ruby-script-to-create-array-of-nested-fields/200312 "2019-09-19T22:50:08Z")
Hello, I currently have the below JSON structure "Unit": { "Unit": \["QA", "FA"\], "QTY": \["2", "5"\], "ID": \["1", "2"\], "Item": \["Shirt", "Trousers"\], "Price": \["10", "50"\] } and want … --- ## [Using metricbeat and jolokia trying to fetch G1Gc information](https://discuss.elastic.co/t/using-metricbeat-and-jolokia-trying-to-fetch-g1gc-information/102787)
**Author:** [@abirami](https://discuss.elastic.co/u/abirami)\ **Replies:** 1\ **Last updated:** [October 6, 2017, 4:41am UTC](https://discuss.elastic.co/t/using-metricbeat-and-jolokia-trying-to-fetch-g1gc-information/102787 "2017-10-06T04:41:54Z")
Hi All , Currently I am using metricbeat 5.5.2 and Jolokia 1.3.7 .I am able collect HeapUsage details butt not Garbage Collector details.Please help me how to fetch this metric --- ## [Logstash, MongoDB and JDBC/UnityJDBC](https://discuss.elastic.co/t/logstash-mongodb-and-jdbc-unityjdbc/62082)
**Author:** [@DooGZ](https://discuss.elastic.co/u/DooGZ)\ **Replies:** 1\ **Last updated:** [October 3, 2016, 9:09pm UTC](https://discuss.elastic.co/t/logstash-mongodb-and-jdbc-unityjdbc/62082 "2016-10-03T21:09:14Z")
Hi, Any tips on how to use JDBC to import MongoDB to ES? MongoDB: test Tried using mongo-java-driver from http://mongodb.github.io/mongo-java-driver/3.3/driver/getting-started/installation-guide/ Downloaded these fil… --- ## [Match query not returning results](https://discuss.elastic.co/t/match-query-not-returning-results/337815)
**Author:** [@senadk](https://discuss.elastic.co/u/senadk)\ **Replies:** 6\ **Last updated:** [July 24, 2023, 5:14pm UTC](https://discuss.elastic.co/t/match-query-not-returning-results/337815 "2023-07-24T17:14:06Z")
Hi everyone, I started today with Elastic Search and have been working on some endpoints to get and post data. I do get a problem when trying to get results back on a match query. This is my document: { exception: \[… --- ## [Fleet server - debug logs](https://discuss.elastic.co/t/fleet-server-debug-logs/290441)
**Author:** [@FALEN](https://discuss.elastic.co/u/FALEN)\ **Replies:** 3\ **Last updated:** [November 30, 2021, 2:00pm UTC](https://discuss.elastic.co/t/fleet-server-debug-logs/290441 "2021-11-30T14:00:23Z")
Hi all, Just updated to 7.15.1, and trying to configure fleet. Having some problems, but cannot find logs and spesific errors to trace. So i need to learn how to enable debug logging for Fleet Server Just found debug … [Previous page](https://discuss.elastic.co/top.md?page=1023&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1025&per_page=50&period=all)