# Top **URL:** https://discuss.elastic.co/top.md?page=1027&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1028 --- ## [Discuss: Security Vulnerabilities: ESA-2023-14 - CVE-2023-31419](https://discuss.elastic.co/t/discuss-security-vulnerabilities-esa-2023-14-cve-2023-31419/348769)
**Author:** [@devkgk](https://discuss.elastic.co/u/devkgk)\ **Replies:** 2\ **Last updated:** [December 7, 2023, 8:32am UTC](https://discuss.elastic.co/t/discuss-security-vulnerabilities-esa-2023-14-cve-2023-31419/348769 "2023-12-07T08:32:44Z")
Hello, everybody. According to the community's safety announcement: " Elasticsearch StackOverflow vulnerability (ESA-2023-14) A flaw was discovered in Elasticsearch, affecting the \_search API that allowed a specially … --- ## [Login in Kibana is failed](https://discuss.elastic.co/t/login-in-kibana-is-failed/213254)
**Author:** [@emilio](https://discuss.elastic.co/u/emilio)\ **Replies:** 2\ **Last updated:** [December 30, 2019, 4:52am UTC](https://discuss.elastic.co/t/login-in-kibana-is-failed/213254 "2019-12-30T04:52:17Z")
Dear all, Can not login kibana using built in users with changed passwords Every time i try to login receive such an exception: {"type":"log","@timestamp":"2019-12-28T11:04:23Z","tags":\["plugin","debug"\],"pid":28206,"… --- ## [Rotate elastic indices based on size](https://discuss.elastic.co/t/rotate-elastic-indices-based-on-size/94933)
**Author:** [@abhiroyg](https://discuss.elastic.co/u/abhiroyg)\ **Replies:** 2\ **Last updated:** [July 28, 2017, 11:24am UTC](https://discuss.elastic.co/t/rotate-elastic-indices-based-on-size/94933 "2017-07-28T11:24:09Z")
Hi, How to achieve rotation of elastic indices based on its size using elasticsearch-output plugin ? If I use an external program like Rollover API, will I lose data ? Do I have to bring logstash down, do the rollover, … --- ## [How kibana ui modules work?](https://discuss.elastic.co/t/how-kibana-ui-modules-work/69042)
**Author:** [@zhengjie](https://discuss.elastic.co/u/zhengjie)\ **Replies:** 2\ **Last updated:** [December 14, 2016, 5:04pm UTC](https://discuss.elastic.co/t/how-kibana-ui-modules-work/69042 "2016-12-14T17:04:15Z")
Hi, I read some kibana 4.3 source code. I think 'discover' controller is in 'apps/discover' module, how 'ui/routes' find it? which seems in 'kibana' module. thanks! var app = require('ui/modules').get('apps/discover',… --- ## [Jolokia Module No key error](https://discuss.elastic.co/t/jolokia-module-no-key-error/87979)
**Author:** [@joshuaclark](https://discuss.elastic.co/u/joshuaclark)\ **Replies:** 6\ **Last updated:** [June 2, 2017, 6:08pm UTC](https://discuss.elastic.co/t/jolokia-module-no-key-error/87979 "2017-06-02T18:08:18Z")
Hi I'm trying to grab JVM metrics from -mbean: 'mbean:type=FormatStatus,client=Client,format=Format,ftp=FtpId,FtpProtocol=sftp,FtpServer=server,FtpPort=22,dir=directory,filename=file.txt' attributes: -… --- ## [How to turn current string field into non-analyzed?](https://discuss.elastic.co/t/how-to-turn-current-string-field-into-non-analyzed/55563)
**Author:** [@zoplex](https://discuss.elastic.co/u/zoplex)\ **Replies:** 6\ **Last updated:** [July 17, 2016, 7:28pm UTC](https://discuss.elastic.co/t/how-to-turn-current-string-field-into-non-analyzed/55563 "2016-07-17T19:28:43Z")
Is there a way to take string field (that is added with 'add\_field' in the mutate section of the logstash filter) and change it into non-analyzed, so it does not break string into words? Either in the logstash filter or … --- ## [Fleet server does not start properly](https://discuss.elastic.co/t/fleet-server-does-not-start-properly/282380)
**Author:** [@Servando\_Dominguez](https://discuss.elastic.co/u/Servando_Dominguez)\ **Replies:** 5\ **Last updated:** [August 30, 2021, 7:17am UTC](https://discuss.elastic.co/t/fleet-server-does-not-start-properly/282380 "2021-08-30T07:17:11Z")
Hi there! I'm running an ELK stack on prem version 7.14 with all the services in diferent VMs, running properly from 2 months ago and shipping the logs with filebeat, etc. Kibana/logstash uses production certs for the ht… --- ## [Find time difference between series of events with uniqueid](https://discuss.elastic.co/t/find-time-difference-between-series-of-events-with-uniqueid/257911)
**Author:** [@GokulD](https://discuss.elastic.co/u/GokulD)\ **Replies:** 5\ **Last updated:** [December 10, 2020, 8:45pm UTC](https://discuss.elastic.co/t/find-time-difference-between-series-of-events-with-uniqueid/257911 "2020-12-10T20:45:09Z")
Hi , I have requirement where I have series of events that has a unique trace id. I want to find and take the timestamp from the first and last event of this id and find the difference. Since I dont have any start and … --- ## [Filebeat dies after trying to harvest 3 times (max\_retries)](https://discuss.elastic.co/t/filebeat-dies-after-trying-to-harvest-3-times-max-retries/178086)
**Author:** [@Arthur19](https://discuss.elastic.co/u/Arthur19)\ **Replies:** 5\ **Last updated:** [April 24, 2019, 3:05pm UTC](https://discuss.elastic.co/t/filebeat-dies-after-trying-to-harvest-3-times-max-retries/178086 "2019-04-24T15:05:58Z")
Hi, I have some problems when getting logs after log file haven't changed after 3 retries of harvesting, filebeat dies after this retries and I have to start manually to start harvesting. This is the log in Filebeat be… --- ## [Multiline codec with http input](https://discuss.elastic.co/t/multiline-codec-with-http-input/129188)
**Author:** [@caljess599](https://discuss.elastic.co/u/caljess599)\ **Replies:** 5\ **Last updated:** [April 24, 2018, 2:50pm UTC](https://discuss.elastic.co/t/multiline-codec-with-http-input/129188 "2018-04-24T14:50:48Z")
Greetings. I'm stumped trying to use a multiline filter (Logstash 5.1) on my data that is coming in via HTTPS POST. I see that the plugin is being registered in the config... \[2018-04-23T21:26:07,256\]\[DEBUG\]\[logstash.p… --- ## [Data delay writing to ES](https://discuss.elastic.co/t/data-delay-writing-to-es/118139)
**Author:** [@antony.y](https://discuss.elastic.co/u/antony.y)\ **Replies:** 5\ **Last updated:** [February 3, 2018, 9:59am UTC](https://discuss.elastic.co/t/data-delay-writing-to-es/118139 "2018-02-03T09:59:17Z")
We are currently using logstash collect the netflow from our routers, we expected a real-time data,but now we found that we can only see the data of yesterday, that means the data delayed for one day, and we check our … --- ## [How to use ES & es-hadoop 5.0 under java 1.7](https://discuss.elastic.co/t/how-to-use-es-es-hadoop-5-0-under-java-1-7/65327)
**Author:** [@Brad\_Jungsu\_Heo](https://discuss.elastic.co/u/Brad_Jungsu_Heo)\ **Replies:** 5\ **Last updated:** [November 13, 2016, 12:38am UTC](https://discuss.elastic.co/t/how-to-use-es-es-hadoop-5-0-under-java-1-7/65327 "2016-11-13T00:38:51Z")
Hi. I'm running my cluster with CDH 5.8 which provides jdk 1.7.0\_67 (I can't upgrade at this moment) I tried to use ES 5.0 & es-hadoop but I'm getting an error java.lang.UnsupportedClassVersionError: org/elasticsearch… --- ## [Timelion query with hypen in string](https://discuss.elastic.co/t/timelion-query-with-hypen-in-string/248301)
**Author:** [@8wlgns](https://discuss.elastic.co/u/8wlgns)\ **Replies:** 3\ **Last updated:** [September 14, 2020, 4:19pm UTC](https://discuss.elastic.co/t/timelion-query-with-hypen-in-string/248301 "2020-09-14T16:19:51Z")
Hello? Can I use query with hypen in string on timelion expression ? Here is query sample. .es( index=test\*, timefield=@timestamp, q='elasticsearch.index.name:test-01\_a-\*', metric='avg:elasticsearch.index.total.do… --- ## [Exclude records by an existing value in a group](https://discuss.elastic.co/t/exclude-records-by-an-existing-value-in-a-group/217849)
**Author:** [@Carlos\_Arturo\_Bernal](https://discuss.elastic.co/u/Carlos_Arturo_Bernal)\ **Replies:** 3\ **Last updated:** [February 4, 2020, 11:04pm UTC](https://discuss.elastic.co/t/exclude-records-by-an-existing-value-in-a-group/217849 "2020-02-04T23:04:42Z")
Hello, I'm currently storing in ElasticSearch build data from Jenkins, related to the success of client deployments. If we see such data as a table, this is what I have: client\_id build\_url result 123456 http:/… --- ## [Handle filter exception in Logstash](https://discuss.elastic.co/t/handle-filter-exception-in-logstash/151623)
**Author:** [@adrianolimit](https://discuss.elastic.co/u/adrianolimit)\ **Replies:** 3\ **Last updated:** [October 9, 2018, 2:59pm UTC](https://discuss.elastic.co/t/handle-filter-exception-in-logstash/151623 "2018-10-09T14:59:39Z")
Hello elasticusers, I have a question about exceptions in the filter part of Logstash. This is my config file (I don't describe the "intput" and "output" parts) : input { file{} } filter { csv { ...} grok… --- ## [Leaflet: Unhandled promise rejection](https://discuss.elastic.co/t/leaflet-unhandled-promise-rejection/116752)
**Author:** [@michimau](https://discuss.elastic.co/u/michimau)\ **Replies:** 3\ **Last updated:** [February 5, 2018, 7:38am UTC](https://discuss.elastic.co/t/leaflet-unhandled-promise-rejection/116752 "2018-02-05T07:38:33Z")
I have a plugin which make use of leaflet, it used to work fine under 5.5. Under 6.1.x i bump into: Unhandled promise rejection Error: Map container not found. in my controller.js have: "var map = null; map = L.map(… --- ## [Sample Dashboards broken with ES 5.2](https://discuss.elastic.co/t/sample-dashboards-broken-with-es-5-2/73854)
**Author:** [@jochen\_st](https://discuss.elastic.co/u/jochen_st)\ **Replies:** 3\ **Last updated:** [February 6, 2017, 8:54am UTC](https://discuss.elastic.co/t/sample-dashboards-broken-with-es-5-2/73854 "2017-02-06T08:54:50Z")
After upgradeing KIbana and Elasticsearch 5.2 from 5.1.2, the sample winlogbeat dashboards / visualizations provided from https://artifacts.elastic.co/downloads/beats/beats-dashboards/beats-dashboards-5.1.2.zip do not wo… --- ## [Flatten nested fields in a json object](https://discuss.elastic.co/t/flatten-nested-fields-in-a-json-object/46238)
**Author:** [@Benyamin\_Dvoskin](https://discuss.elastic.co/u/Benyamin_Dvoskin)\ **Replies:** 0\ **Last updated:** [April 4, 2016, 12:37pm UTC](https://discuss.elastic.co/t/flatten-nested-fields-in-a-json-object/46238 "2016-04-04T12:37:59Z")
Hi, we are having this issue with Kibana not displaying fields from nested objects correctly. I've opened a topic in the Kibana discuss board, but eventually got to the understanding that this is a known and pending is… --- ## [Beats input: The circuit breaker has detected a slowdown or stall in the pipeline](https://discuss.elastic.co/t/beats-input-the-circuit-breaker-has-detected-a-slowdown-or-stall-in-the-pipeline/52062)
**Author:** [@Sumantha\_Kannantha](https://discuss.elastic.co/u/Sumantha_Kannantha)\ **Replies:** 1\ **Last updated:** [June 8, 2016, 1:54am UTC](https://discuss.elastic.co/t/beats-input-the-circuit-breaker-has-detected-a-slowdown-or-stall-in-the-pipeline/52062 "2016-06-08T01:54:50Z")
we are getting below error in logstash log log: Beats input: The circuit breaker has detected a slowdown or stall in the pipeline, the input is closing the current connection and rejecting new connection until the pi… --- ## [Does ElasticSearch support Java 10?](https://discuss.elastic.co/t/does-elasticsearch-support-java-10/134763)
**Author:** [@Denis\_Lamanov](https://discuss.elastic.co/u/Denis_Lamanov)\ **Replies:** 1\ **Last updated:** [June 6, 2018, 9:23am UTC](https://discuss.elastic.co/t/does-elasticsearch-support-java-10/134763 "2018-06-06T09:23:07Z")
Hi guys, Since Oracle already closed Java 9 and recommend instead use Java 10 can you please update Matrix page? https://www.elastic.co/support/matrix#matrix\_jvm Thanks --- ## [Vega Tooltip Question](https://discuss.elastic.co/t/vega-tooltip-question/131827)
**Author:** [@Alumino](https://discuss.elastic.co/u/Alumino)\ **Replies:** 2\ **Last updated:** [May 15, 2018, 11:41pm UTC](https://discuss.elastic.co/t/vega-tooltip-question/131827 "2018-05-15T23:41:07Z")
Hi I am working on some visualizations using Vega-lite syntax. At the moment everything is working with graphic elements, like bars, lines, etc. The only problem is that tooltips are not working. Here is an example vis… --- ## [Failed to extract detail information from Windows Event log](https://discuss.elastic.co/t/failed-to-extract-detail-information-from-windows-event-log/38933)
**Author:** [@DerekTzeng](https://discuss.elastic.co/u/DerekTzeng)\ **Replies:** 2\ **Last updated:** [January 16, 2016, 1:52pm UTC](https://discuss.elastic.co/t/failed-to-extract-detail-information-from-windows-event-log/38933 "2016-01-16T13:52:16Z")
I was studying to retrieve some detailed information from Windows Event to find out logon failure records. Those detailed information is located in field "message" or "InsertionStirng".i.e. Account Domain, Account Name a… --- ## [Logstash undefined method \`bson\_type' for #\ **Author:** [@dabing](https://discuss.elastic.co/u/dabing)\ **Replies:** 2\ **Last updated:** [December 18, 2015, 6:56am UTC](https://discuss.elastic.co/t/logstash-undefined-method-bson-type-for-bigdecimal/37531 "2015-12-18T06:56:46Z") when i use logstash-mongodb-output plugin, my log data include floating number,then have this problem?who can help me? --- ## [\[1.5.0\] elasticsearch output error](https://discuss.elastic.co/t/1-5-0-elasticsearch-output-error/2105)
**Author:** [@Bezalel\_Lim](https://discuss.elastic.co/u/Bezalel_Lim)\ **Replies:** 2\ **Last updated:** [August 10, 2015, 6:44pm UTC](https://discuss.elastic.co/t/1-5-0-elasticsearch-output-error/2105 "2015-08-10T18:44:23Z")
I've got such error messages and cannot send log data to elasticsearch server maybe after updating java from Java 7 to Java 8.. {:timestamp=\>"2015-06-05T10:18:17.134000+0000", :message=\>"Got error to send bulk of act… --- ## [Kibana email connector "unable to verify the first certificate"](https://discuss.elastic.co/t/kibana-email-connector-unable-to-verify-the-first-certificate/304892)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 4\ **Last updated:** [May 29, 2022, 3:26pm UTC](https://discuss.elastic.co/t/kibana-email-connector-unable-to-verify-the-first-certificate/304892 "2022-05-29T15:26:47Z")
Dears, ELK in version: 7.16 I want to test and deploy email notification in Kibana. During configuration of email connector I've got error message like this: {"type":"log","@timestamp":"2022-05-17T08:51:18+02:00","tag… --- ## [CPU affinity when running multiple nodes on a single host](https://discuss.elastic.co/t/cpu-affinity-when-running-multiple-nodes-on-a-single-host/231611)
**Author:** [@lechuck](https://discuss.elastic.co/u/lechuck)\ **Replies:** 4\ **Last updated:** [May 8, 2020, 9:25am UTC](https://discuss.elastic.co/t/cpu-affinity-when-running-multiple-nodes-on-a-single-host/231611 "2020-05-08T09:25:40Z")
Hi folks, If running multiple Elasticsearch instances on a well resourced server (256GB RAM, 48 cores) , assuming the 'processors' count in elasticsearch.yml is set to a sensible value (max cores / number ES instances )… --- ## [Logstash filter user\_agent or geoip very slow](https://discuss.elastic.co/t/logstash-filter-user-agent-or-geoip-very-slow/43283)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 4\ **Last updated:** [March 3, 2016, 12:58pm UTC](https://discuss.elastic.co/t/logstash-filter-user-agent-or-geoip-very-slow/43283 "2016-03-03T12:58:59Z")
I am using logstash with RabbitMQ as input, elasticsearch as output, and user\_agent/geoip filter. Configuration is pretty simple: input { rabbitmq { host =\> "queue" exchange =\> "bench" queue… --- ## [Running Kibana 4 on index](https://discuss.elastic.co/t/running-kibana-4-on-index/22691)
**Author:** [@moshere](https://discuss.elastic.co/u/moshere)\ **Replies:** 4\ **Last updated:** [March 16, 2015, 5:21pm UTC](https://discuss.elastic.co/t/running-kibana-4-on-index/22691 "2015-03-16T17:21:54Z")
Hi, I've Elastic with 2 simple indexes (chatmessages and sessions). I tried to run Kibana but although it can see the indexes I get the following message: Indices and aliases that were found, but did not match t… --- ## [Error in Discovery and vizualize when creating a script field](https://discuss.elastic.co/t/error-in-discovery-and-vizualize-when-creating-a-script-field/254818)
**Author:** [@JinLauter](https://discuss.elastic.co/u/JinLauter)\ **Replies:** 8\ **Last updated:** [December 4, 2020, 5:40pm UTC](https://discuss.elastic.co/t/error-in-discovery-and-vizualize-when-creating-a-script-field/254818 "2020-12-04T17:40:08Z")
Hi, We created a simple string script field, and we are getting a error in discovery and when we try to use that script field in any vizualization. I belive the images will explain it better: The script field: Usin… --- ## [Role based authorization(with PKI auth)](https://discuss.elastic.co/t/role-based-authorization-with-pki-auth/186777)
**Author:** [@P\_Gong](https://discuss.elastic.co/u/P_Gong)\ **Replies:** 8\ **Last updated:** [June 25, 2019, 1:48am UTC](https://discuss.elastic.co/t/role-based-authorization-with-pki-auth/186777 "2019-06-25T01:48:15Z")
I'm trying to enable role based authorization with PKI auth. I created a test user: curl -k -u elastic:changeme "https://localhost:9200/\_xpack/security/user/testuser" {"elasticsearch.kibana.social.ea.com":{"username":… --- ## [Error: You must build the project with Gradle or download a pre-built package](https://discuss.elastic.co/t/error-you-must-build-the-project-with-gradle-or-download-a-pre-built-package/102820)
**Author:** [@m.francia](https://discuss.elastic.co/u/m.francia)\ **Replies:** 8\ **Last updated:** [October 6, 2017, 1:08pm UTC](https://discuss.elastic.co/t/error-you-must-build-the-project-with-gradle-or-download-a-pre-built-package/102820 "2017-10-06T13:08:06Z")
Hi! I have installed ES in a Debian 8 using dpkg -i and after install when I try to run ES appears this message. elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; dis… --- ## [ILM shards to be allocated to nodes matching the given filters](https://discuss.elastic.co/t/ilm-shards-to-be-allocated-to-nodes-matching-the-given-filters/286699)
**Author:** [@lisiyu](https://discuss.elastic.co/u/lisiyu)\ **Replies:** 3\ **Last updated:** [October 18, 2021, 9:55am UTC](https://discuss.elastic.co/t/ilm-shards-to-be-allocated-to-nodes-matching-the-given-filters/286699 "2021-10-18T09:55:18Z")
I setting 3 data nodes: one hot;one warm;one cold. The elasticsearch.yaml ： node.master: false node.data: true node.ingest: true node.attr.box\_type: hot The ILM is : PUT \_ilm/policy/k8s-logs { "policy":{ "… --- ## [I want to restict my Time range as per user](https://discuss.elastic.co/t/i-want-to-restict-my-time-range-as-per-user/261424)
**Author:** [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\ **Replies:** 3\ **Last updated:** [January 19, 2021, 5:34am UTC](https://discuss.elastic.co/t/i-want-to-restict-my-time-range-as-per-user/261424 "2021-01-19T05:34:56Z")
Hi, I want to restrict my Kibana Dashboard Time-Range feature to specific dates as per User or Space. In brief, If A user Logs in he should be able to see data till 30 days, where B user can only search data for only … --- ## [String field in Discover is not sortable, and .keyword field and alias field are both empty](https://discuss.elastic.co/t/string-field-in-discover-is-not-sortable-and-keyword-field-and-alias-field-are-both-empty/258892)
**Author:** [@qub123](https://discuss.elastic.co/u/qub123)\ **Replies:** 3\ **Last updated:** [December 16, 2020, 7:31pm UTC](https://discuss.elastic.co/t/string-field-in-discover-is-not-sortable-and-keyword-field-and-alias-field-are-both-empty/258892 "2020-12-16T19:31:58Z")
We noticed that only keyword and date field are sort-able in "Discover" , not string and numeric field. I found a post that mentioned we need to use .keyword field in order to make it sortable, to enable it, we need to d… --- ## [Logstash starts only with sudo using sudo /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/postgresql.conf](https://discuss.elastic.co/t/logstash-starts-only-with-sudo-using-sudo-usr-share-logstash-bin-logstash-f-etc-logstash-conf-d-postgresql-conf/231994)
**Author:** [@Amine\_Aloui](https://discuss.elastic.co/u/Amine_Aloui)\ **Replies:** 3\ **Last updated:** [May 11, 2020, 4:58pm UTC](https://discuss.elastic.co/t/logstash-starts-only-with-sudo-using-sudo-usr-share-logstash-bin-logstash-f-etc-logstash-conf-d-postgresql-conf/231994 "2020-05-11T16:58:57Z")
with sudo , it works without any issue sudo /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/postgresql.conf but if i run /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/postgresql.conf OpenJDK 64-Bi… --- ## [Kibana 7.2.0 Index Patterns are visible to all users](https://discuss.elastic.co/t/kibana-7-2-0-index-patterns-are-visible-to-all-users/228323)
**Author:** [@Piotr\_Kacperczyk](https://discuss.elastic.co/u/Piotr_Kacperczyk)\ **Replies:** 3\ **Last updated:** [April 16, 2020, 2:00pm UTC](https://discuss.elastic.co/t/kibana-7-2-0-index-patterns-are-visible-to-all-users/228323 "2020-04-16T14:00:19Z")
Hi, I have installed Kibana 7.2.0 with X-Pack. I created 2 indexes, e.g logging-a-16.04.2020, logging-b-16.04.2020 with index patterns logging-a\*, logging-b\* I created role 'a' which can access index pattern logging-a\*… --- ## [How to fix setting "indices.recovery.max\_bytes\_per\_sec" in splitted cluster?](https://discuss.elastic.co/t/how-to-fix-setting-indices-recovery-max-bytes-per-sec-in-splitted-cluster/176455)
**Author:** [@rmsys](https://discuss.elastic.co/u/rmsys)\ **Replies:** 3\ **Last updated:** [April 17, 2019, 1:45am UTC](https://discuss.elastic.co/t/how-to-fix-setting-indices-recovery-max-bytes-per-sec-in-splitted-cluster/176455 "2019-04-17T01:45:40Z")
Hi guys! I have a cluster (v5.6.4) with nodes in most default settings, and this settings works in cluster 9 nodes \[all master eligible, ingest: (default=true), client: (default=true) and data: (default=true) \] and w… --- ## [Sharding of geo\_points](https://discuss.elastic.co/t/sharding-of-geo-points/27284)
**Author:** [@belaboros](https://discuss.elastic.co/u/belaboros)\ **Replies:** 3\ **Last updated:** [August 13, 2015, 8:24am UTC](https://discuss.elastic.co/t/sharding-of-geo-points/27284 "2015-08-13T08:24:46Z")
Please help me, I cannot make sharding on geo\_point work. I would like to store one value and a geo location (latitude and longitude) in a document. I would like to populate shards (route) based on location. Then I wo… --- ## [Yellow heath, Unassigned shards after restart](https://discuss.elastic.co/t/yellow-heath-unassigned-shards-after-restart/249775)
**Author:** [@Graham\_Smart](https://discuss.elastic.co/u/Graham_Smart)\ **Replies:** 6\ **Last updated:** [September 24, 2020, 9:22am UTC](https://discuss.elastic.co/t/yellow-heath-unassigned-shards-after-restart/249775 "2020-09-24T09:22:13Z")
Hi Guys, Im sure this is a simple one, but i cant seem to resolve. My ES node ran our of JVM space. So i modified its upper limit and restarted ES as ive done many times. This time round, it refuses to go Green. Its be… --- ## [UnknownHostException while installing license plugin windows](https://discuss.elastic.co/t/unknownhostexception-while-installing-license-plugin-windows/159303)
**Author:** [@Dhiral\_Kaniya](https://discuss.elastic.co/u/Dhiral_Kaniya)\ **Replies:** 6\ **Last updated:** [December 4, 2018, 9:11am UTC](https://discuss.elastic.co/t/unknownhostexception-while-installing-license-plugin-windows/159303 "2018-12-04T09:11:57Z")
Hi Team, I have installed ELK stack on windows server 2016 with metricbeats. Now I want to install watcher for configuring some alert on a specific scenario. I have gone through with watcher link. I came to know that … --- ## [Elasticsearch & hadoop](https://discuss.elastic.co/t/elasticsearch-hadoop/90202)
**Author:** [@JIELOGAN](https://discuss.elastic.co/u/JIELOGAN)\ **Replies:** 6\ **Last updated:** [August 14, 2017, 11:26am UTC](https://discuss.elastic.co/t/elasticsearch-hadoop/90202 "2017-08-14T11:26:44Z")
Hi,recently I need to integrate ES and hadoop via elasticsearch-hadoop, What about the performance of reading data from ES to hadoop, and the performance of reading data from hadoop to ES？Let‘s say that I have 100G da… --- ## [How to Make Incremental Snapshot](https://discuss.elastic.co/t/how-to-make-incremental-snapshot/36627)
**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\ **Replies:** 6\ **Last updated:** [December 9, 2015, 6:37am UTC](https://discuss.elastic.co/t/how-to-make-incremental-snapshot/36627 "2015-12-09T06:37:06Z")
Hii guyz,, I am trying out the snapshot/restore feature in ES.Can Anyone provide the details that how can i make my snapshot incremental??Without Using Crone job. Please Help Me Out. --- ## [Watcher is not returning any hit and returns Null](https://discuss.elastic.co/t/watcher-is-not-returning-any-hit-and-returns-null/278676)
**Author:** [@Mojahid\_Ahmad](https://discuss.elastic.co/u/Mojahid_Ahmad)\ **Replies:** 7\ **Last updated:** [July 20, 2021, 7:25pm UTC](https://discuss.elastic.co/t/watcher-is-not-returning-any-hit-and-returns-null/278676 "2021-07-20T19:25:45Z")
Hi, I created one watcher but the condition is not getting successful and returning hit =0, and finally, it is returning a null value. When I built the dashboard using the same condition value is getting displayed there,… --- ## [Regex and Scripted fields help](https://discuss.elastic.co/t/regex-and-scripted-fields-help/162007)
**Author:** [@camay123](https://discuss.elastic.co/u/camay123)\ **Replies:** 7\ **Last updated:** [December 25, 2018, 7:19pm UTC](https://discuss.elastic.co/t/regex-and-scripted-fields-help/162007 "2018-12-25T19:19:31Z")
I am trying to extract bitcoin address from eml body that are indexed into elasticsearch. I am trying to use a scripted field for it with the following script: if (!doc\["emlBody.keyword"\].empty) { def m = /(: )(\[1,3\]{… --- ## [Logstash 6.2.3 convert json values to GeoPoint Issue](https://discuss.elastic.co/t/logstash-6-2-3-convert-json-values-to-geopoint-issue/150418)
**Author:** [@Sajith\_Vijesekara](https://discuss.elastic.co/u/Sajith_Vijesekara)\ **Replies:** 5\ **Last updated:** [October 3, 2018, 6:44pm UTC](https://discuss.elastic.co/t/logstash-6-2-3-convert-json-values-to-geopoint-issue/150418 "2018-10-03T18:44:35Z")
Hi I am new to ELK so first I want to setup custom json file read using logstash. I want to show the customer locations in kibana map . This is the json format I want to convert. {"id":1,"first\_name":"Freeman","last\_nam… --- ## ["No current connection" from jdbc\_static](https://discuss.elastic.co/t/no-current-connection-from-jdbc-static/136108)
**Author:** [@cbarton](https://discuss.elastic.co/u/cbarton)\ **Replies:** 5\ **Last updated:** [June 18, 2018, 5:03pm UTC](https://discuss.elastic.co/t/no-current-connection-from-jdbc-static/136108 "2018-06-18T17:03:47Z")
Hello, I'm trying to set up a logstash pipeline that does an enrichment lookup via the jdbc\_static plugin, calling a MariaDB database via the MySQL jdbc connector. Aside - I tried doing it initially with the MariaDB con… --- ## [Bulk request how to?](https://discuss.elastic.co/t/bulk-request-how-to/305096)
**Author:** [@frankmontyne](https://discuss.elastic.co/u/frankmontyne)\ **Replies:** 2\ **Last updated:** [May 18, 2022, 6:20pm UTC](https://discuss.elastic.co/t/bulk-request-how-to/305096 "2022-05-18T18:20:50Z")
Hi I'm a bit confused on how to perform a bulk request with the new Java API client. To index one document I use the following code that works without problems. Since we are using GSON I pass the json string representat… --- ## [Filebeat logstash module not working with json processor](https://discuss.elastic.co/t/filebeat-logstash-module-not-working-with-json-processor/213728)
**Author:** [@lorenzopolidori](https://discuss.elastic.co/u/lorenzopolidori)\ **Replies:** 2\ **Last updated:** [January 8, 2020, 9:54pm UTC](https://discuss.elastic.co/t/filebeat-logstash-module-not-working-with-json-processor/213728 "2020-01-08T21:54:39Z")
Hi, I am trying to send logs with Filebeat 7.5.1 from an EC2 Ubuntu instance to cloud Elasticsearch. The log file is /var/log/logback/oauth-service.log, in the following logstash format: {"@timestamp":"2020-01-02T16:… --- ## [Logstash not sending data to elasticsearch when run as daemon](https://discuss.elastic.co/t/logstash-not-sending-data-to-elasticsearch-when-run-as-daemon/52245)
**Author:** [@djerkin](https://discuss.elastic.co/u/djerkin)\ **Replies:** 2\ **Last updated:** [June 8, 2016, 9:12pm UTC](https://discuss.elastic.co/t/logstash-not-sending-data-to-elasticsearch-when-run-as-daemon/52245 "2016-06-08T21:12:27Z")
Hi! Running into an issue where if I run ./logstash -f manually everything is fine. Reads a log file, logs show up in ES. When starting the service, however, it starts normally and no errors are seen, but no data is p… --- ## [How to merge two indices in different ES instance into one?](https://discuss.elastic.co/t/how-to-merge-two-indices-in-different-es-instance-into-one/34217)
**Author:** [@Enniu\_51](https://discuss.elastic.co/u/Enniu_51)\ **Replies:** 2\ **Last updated:** [November 10, 2015, 6:16am UTC](https://discuss.elastic.co/t/how-to-merge-two-indices-in-different-es-instance-into-one/34217 "2015-11-10T06:16:43Z")
We have a elasticsearch cluster and just one node. But this day, one guy shutdown this cluster and copy ES dir to another place. Then he run a new elastic instance. We found it and shut down the new instance. Then star… [Previous page](https://discuss.elastic.co/top.md?page=1026&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1028&per_page=50&period=all)