# Top

**URL:** https://discuss.elastic.co/top.md?page=106&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 107

---

## [Logstash stop to output when one kafka node is down](https://discuss.elastic.co/t/logstash-stop-to-output-when-one-kafka-node-is-down/271412)

<div class="topic-metadata">

**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\
**Replies:** 11\
**Last updated:** [April 28, 2021, 4:08pm UTC](https://discuss.elastic.co/t/logstash-stop-to-output-when-one-kafka-node-is-down/271412 "2021-04-28T16:08:22Z")

</div>

Hello everybody, I have a 3 kafka nodes cluster Logstash has a kafka input and output to elasticsearch and syslog (I'm using logstash output isolator pattern). When one kafka node is down (kafka3 in this case), logstas…

---

## [Garbage collection pauses causing cluster to get unresponsive](https://discuss.elastic.co/t/garbage-collection-pauses-causing-cluster-to-get-unresponsive/18638)

<div class="topic-metadata">

**Author:** [@Srinath\_C](https://discuss.elastic.co/u/Srinath_C)\
**Replies:** 19\
**Last updated:** [July 18, 2014, 2:24pm UTC](https://discuss.elastic.co/t/garbage-collection-pauses-causing-cluster-to-get-unresponsive/18638 "2014-07-18T14:24:13Z")

</div>

Hi, I'm having a tough time to keep ElasticSearch running healthily for even 20-30 mins in my setup. At an indexing rate of 28-36K per second, the CPU utilization soon drops to 100% and never recovers. All client r…

---

## [How does elastic search move shards from hot to warm/warm to hot nodes?](https://discuss.elastic.co/t/how-does-elastic-search-move-shards-from-hot-to-warm-warm-to-hot-nodes/183005)

<div class="topic-metadata">

**Author:** [@haps\_01](https://discuss.elastic.co/u/haps_01)\
**Replies:** 9\
**Last updated:** [June 3, 2019, 4:43pm UTC](https://discuss.elastic.co/t/how-does-elastic-search-move-shards-from-hot-to-warm-warm-to-hot-nodes/183005 "2019-06-03T16:43:11Z")

</div>

Hi, I wonder, how does shard relocation happens from hot to warm nodes. I have test cluster with 2 hot, 4 warm, 2 master,1 client node. I am using multiple indices with different shard combinations(1,2,4,8,16 shards) t…

---

## [Replace @timestamp value with SQL DB datetime value](https://discuss.elastic.co/t/replace-timestamp-value-with-sql-db-datetime-value/123748)

<div class="topic-metadata">

**Author:** [@zakkhan](https://discuss.elastic.co/u/zakkhan)\
**Replies:** 13\
**Last updated:** [March 15, 2018, 8:17am UTC](https://discuss.elastic.co/t/replace-timestamp-value-with-sql-db-datetime-value/123748 "2018-03-15T08:17:15Z")

</div>

I have tried everything but nothing worked. I need to replace @timestamp with my Datetime column value. Format of both values Datetime: 2017-08-23T13:20:09.000Z @timesatmp: 2018-03-13T12:11:38.080Z input { jdbc { …

---

## [Elastic search daemon die](https://discuss.elastic.co/t/elastic-search-daemon-die/25566)

<div class="topic-metadata">

**Author:** [@Wilson\_A\_Galafassi\_J](https://discuss.elastic.co/u/Wilson_A_Galafassi_J)\
**Replies:** 10\
**Last updated:** [April 9, 2016, 1:33am UTC](https://discuss.elastic.co/t/elastic-search-daemon-die/25566 "2016-04-09T01:33:16Z")

</div>

I have a problem with elasticseach: the daemon is dying. i have received a crash report from abrt daeon: http://pastebin.com/caQVRzPs the server is running centos 6 + cpanel + cloudlinux. Some idea to debug this? T…

---

## [Strange bad certificate](https://discuss.elastic.co/t/strange-bad-certificate/300552)

<div class="topic-metadata">

**Author:** [@labate](https://discuss.elastic.co/u/labate)\
**Replies:** 13\
**Last updated:** [March 24, 2022, 4:55pm UTC](https://discuss.elastic.co/t/strange-bad-certificate/300552 "2022-03-24T16:55:01Z")

</div>

Dear all, I'm facing to a serious problem. I get this following message: filebeat\[29206\]: 2022-03-24T10:30:37.927+0100 ERROR \[publisher\_pipeline\_output\] pipeline/output.go:154 Failed to conn…

---

## [Optimizing queries for a 5 node cluster with 250 M documents (causes OutOfMemory exceptions and GC pauses)](https://discuss.elastic.co/t/optimizing-queries-for-a-5-node-cluster-with-250-m-documents-causes-outofmemory-exceptions-and-gc-pauses/19404)

<div class="topic-metadata">

**Author:** [@Narendra\_Yadala](https://discuss.elastic.co/u/Narendra_Yadala)\
**Replies:** 9\
**Last updated:** [August 24, 2014, 3:02pm UTC](https://discuss.elastic.co/t/optimizing-queries-for-a-5-node-cluster-with-250-m-documents-causes-outofmemory-exceptions-and-gc-pauses/19404 "2014-08-24T15:02:32Z")

</div>

I have a cluster of size 240 GB including replica and it has 5 nodes in it. I allocated 5 GB RAM (total 5\*5 GB) to each node and started the cluster. When I start continuously firing queries on the cluster the GC sta…

---

## [Elasticsearch Died on me](https://discuss.elastic.co/t/elasticsearch-died-on-me/134093)

<div class="topic-metadata">

**Author:** [@kurtiskurtis](https://discuss.elastic.co/u/kurtiskurtis)\
**Replies:** 21\
**Last updated:** [June 3, 2018, 8:45am UTC](https://discuss.elastic.co/t/elasticsearch-died-on-me/134093 "2018-06-03T08:45:49Z")

</div>

Last night during some document processing, a MASSIVE query was run that would have returned something like 30GB worth of data. As a result, the nodes started to die. Each machine has 30GB of JVM and 60GB total of RAM. …

---

## [Multiline vs aggregate](https://discuss.elastic.co/t/multiline-vs-aggregate/162300)

<div class="topic-metadata">

**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\
**Replies:** 12\
**Last updated:** [February 14, 2019, 11:08am UTC](https://discuss.elastic.co/t/multiline-vs-aggregate/162300 "2019-02-14T11:08:17Z")

</div>

I have log file with this structure: ID,Tag,Value 10179265,37,21 10179265,2001001,15020737 10179265,2003001,0 10179265,2005000,ARM\_OPERATOR 10179265,2005002,Int\_OPERATOR 10160893,37,21 10160893,2001001,15054905 …

---

## [Fatal Error after Creating Kibana Plugin](https://discuss.elastic.co/t/fatal-error-after-creating-kibana-plugin/97434)

<div class="topic-metadata">

**Author:** [@FareehaNaaz](https://discuss.elastic.co/u/FareehaNaaz)\
**Replies:** 9\
**Last updated:** [September 13, 2017, 8:38am UTC](https://discuss.elastic.co/t/fatal-error-after-creating-kibana-plugin/97434 "2017-09-13T08:38:15Z")

</div>

Hi, i was Creating my own plugin using "yo kibana-plugin", after ruuning this command i get app.js in "plugin/public/app.js" location and index.html in "plugin/public/templates/index.html" here i did replace my index.h…

---

## [Updating Kibana Visualization from WebPage](https://discuss.elastic.co/t/updating-kibana-visualization-from-webpage/73462)

<div class="topic-metadata">

**Author:** [@Varun\_Patel](https://discuss.elastic.co/u/Varun_Patel)\
**Replies:** 9\
**Last updated:** [February 9, 2017, 8:42pm UTC](https://discuss.elastic.co/t/updating-kibana-visualization-from-webpage/73462 "2017-02-09T20:42:11Z")

</div>

Hi, I have been using Kibana 5.1.1, Elasticsearch 5.1.1 and Logstash 5.1.1. I am able to visualize my data to my webpage. This visualization have been made from Kibana and i am passing iframe to my HTML page. No…

---

## [Winlogbeat error to connecting to kinaba](https://discuss.elastic.co/t/winlogbeat-error-to-connecting-to-kinaba/239219)

<div class="topic-metadata">

**Author:** [@ali.rauf](https://discuss.elastic.co/u/ali.rauf)\
**Replies:** 10\
**Last updated:** [July 4, 2020, 9:44am UTC](https://discuss.elastic.co/t/winlogbeat-error-to-connecting-to-kinaba/239219 "2020-07-04T09:44:51Z")

</div>

Hello to all. I use a package of ELK that use this address (http://x.x.x.x/app/kibana) to open home page and don't using 5601 port for connecting to the kibana in the URL. now my problem is that how the winlogbeat can c…

---

## [Faceted search with aggregations](https://discuss.elastic.co/t/faceted-search-with-aggregations/205135)

<div class="topic-metadata">

**Author:** [@decodeit](https://discuss.elastic.co/u/decodeit)\
**Replies:** 20\
**Last updated:** [November 14, 2019, 6:42pm UTC](https://discuss.elastic.co/t/faceted-search-with-aggregations/205135 "2019-11-14T18:42:47Z")

</div>

I am trying to do faceted search with aggregation (which I think is the way to do, suggestions are welcome). so the query below is sending the search term with the aggs. POST events/event/\_search { "query": { "multi\_ma…

---

## [ERR SSL client failed to connect with:](https://discuss.elastic.co/t/err-ssl-client-failed-to-connect-with/49320)

<div class="topic-metadata">

**Author:** [@dickepa](https://discuss.elastic.co/u/dickepa)\
**Replies:** 11\
**Last updated:** [May 11, 2016, 10:50am UTC](https://discuss.elastic.co/t/err-ssl-client-failed-to-connect-with/49320 "2016-05-11T10:50:25Z")

</div>

I think this is a Logstash config issue hence posting in this category since I have multiple nodes reporting same message. When starting filebeat on a node I get the above message ending with ":5044: getsockopt: connec…

---

## [Multiple input for Logstash from filebeat](https://discuss.elastic.co/t/multiple-input-for-logstash-from-filebeat/54835)

<div class="topic-metadata">

**Author:** [@Kevin\_Csuka](https://discuss.elastic.co/u/Kevin_Csuka)\
**Replies:** 10\
**Last updated:** [January 16, 2017, 2:39pm UTC](https://discuss.elastic.co/t/multiple-input-for-logstash-from-filebeat/54835 "2017-01-16T14:39:05Z")

</div>

Hi, I'm sending CSV files from two servers 2012's with FIlebeat. Sending it to Logstash with Elasticsearch as output. This is my setup: click me Test1.csv contains this info: "(PDH-CSV 4.0) (W. Europe Daylight Ti…

---

## [Sanpshot by Type:URL](https://discuss.elastic.co/t/sanpshot-by-type-url/32334)

<div class="topic-metadata">

**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\
**Replies:** 13\
**Last updated:** [October 24, 2015, 9:51pm UTC](https://discuss.elastic.co/t/sanpshot-by-type-url/32334 "2015-10-24T21:51:53Z")

</div>

{"error":"UnsupportedOperationException\[URL repository doesn't support this operation\]","status":500} While Taking Backup type:URL it is showing this error on selecting these option.... ignore\_unavailable True Fals…

---

## [Filebeat 6.1.1 multiline is not working](https://discuss.elastic.co/t/filebeat-6-1-1-multiline-is-not-working/114259)

<div class="topic-metadata">

**Author:** [@tamoraes](https://discuss.elastic.co/u/tamoraes)\
**Replies:** 12\
**Last updated:** [January 24, 2018, 1:23pm UTC](https://discuss.elastic.co/t/filebeat-6-1-1-multiline-is-not-working/114259 "2018-01-24T13:23:37Z")

</div>

As mentioned, I'm not being capable of making multiline work on filebeat. The message is getting received on logstash without considering the multiline. I've made it work on debbugers, but not on the real deal. What am i…

---

## [Yum command to install Elasticsearch 5.2.2 now that 5.3.0 is out](https://discuss.elastic.co/t/yum-command-to-install-elasticsearch-5-2-2-now-that-5-3-0-is-out/81479)

<div class="topic-metadata">

**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Replies:** 10\
**Last updated:** [April 19, 2017, 1:18am UTC](https://discuss.elastic.co/t/yum-command-to-install-elasticsearch-5-2-2-now-that-5-3-0-is-out/81479 "2017-04-19T01:18:56Z")

</div>

Now that Elasticsearch 5.3.0 is out, sudo yum install Elasticsearch will install 5.3.0 version. I have to install version 5.2.2 I used this to query what is available. yum --showduplicates list elasticsearch | expan…

---

## [Highlight text search by elasticsearch](https://discuss.elastic.co/t/highlight-text-search-by-elasticsearch/16180)

<div class="topic-metadata">

**Author:** [@robin\_thakur](https://discuss.elastic.co/u/robin_thakur)\
**Replies:** 13\
**Last updated:** [March 6, 2014, 10:07am UTC](https://discuss.elastic.co/t/highlight-text-search-by-elasticsearch/16180 "2014-03-06T10:07:16Z")

</div>

Hi, I want to highlight the text in my response which I am enter in my elastic search. e.g.- i am writing this http://localhost:9200/productindex/\_search?q=armani in URL and in response i got the json …

---

## [Best practices for fine tuning performance when it comes to Elasticsearch, Logstash and Kibana?](https://discuss.elastic.co/t/best-practices-for-fine-tuning-performance-when-it-comes-to-elasticsearch-logstash-and-kibana/273913)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 21\
**Last updated:** [June 17, 2021, 8:22am UTC](https://discuss.elastic.co/t/best-practices-for-fine-tuning-performance-when-it-comes-to-elasticsearch-logstash-and-kibana/273913 "2021-06-17T08:22:01Z")

</div>

Hello We have a Elastic Stack setup. Our basic architecture is based on this: Beats/source/etc -\> Logstash -\> Elasticsearch. Meaning, all incoming data always passes thru Logstash first. We have created various Logst…

---

## [Jolokia jmx Mbean collection](https://discuss.elastic.co/t/jolokia-jmx-mbean-collection/91442)

<div class="topic-metadata">

**Author:** [@flowe](https://discuss.elastic.co/u/flowe)\
**Replies:** 10\
**Last updated:** [July 17, 2017, 2:45pm UTC](https://discuss.elastic.co/t/jolokia-jmx-mbean-collection/91442 "2017-07-17T14:45:00Z")

</div>

Hi there, I'm trying to parse jmx mbean properties using jolokia module with metricbeat but have problems when having multiple datasource mbean entries (no problem when having one unique entry). metricbeat 5.4.3 logst…

---

## [Routing to a specific shard](https://discuss.elastic.co/t/routing-to-a-specific-shard/143688)

<div class="topic-metadata">

**Author:** [@Andrea\_Ranieri](https://discuss.elastic.co/u/Andrea_Ranieri)\
**Replies:** 12\
**Last updated:** [August 11, 2018, 9:33am UTC](https://discuss.elastic.co/t/routing-to-a-specific-shard/143688 "2018-08-11T09:33:31Z")

</div>

Hi, i have an index with 10 shards. My application has 10 users. I'd like to assign each shard to a specific user, avoiding the possible collisions in the hash function used in the formula that computes the shard numbe…

---

## [\[ERROR\]\[logstash.javapipeline](https://discuss.elastic.co/t/error-logstash-javapipeline/314746)

<div class="topic-metadata">

**Author:** [@wxhgwh](https://discuss.elastic.co/u/wxhgwh)\
**Replies:** 18\
**Last updated:** [September 26, 2022, 3:44am UTC](https://discuss.elastic.co/t/error-logstash-javapipeline/314746 "2022-09-26T03:44:05Z")

</div>

\`\`\` \[ERROR\]\[logstash.licensechecker.licensereader\] Unable to retrieve license information fromlicense server {:message=\>"Unsupported or unrecognized SSL message"}Preformatted text \[ERROR\]\[logstash.javapipeline \]\[mai…

---

## [Final mapping would have more than 1 type After Ugrade 5.x -\> 6.x](https://discuss.elastic.co/t/final-mapping-would-have-more-than-1-type-after-ugrade-5-x-6-x/217833)

<div class="topic-metadata">

**Author:** [@Fin4l](https://discuss.elastic.co/u/Fin4l)\
**Replies:** 10\
**Last updated:** [February 5, 2020, 10:10am UTC](https://discuss.elastic.co/t/final-mapping-would-have-more-than-1-type-after-ugrade-5-x-6-x/217833 "2020-02-05T10:10:31Z")

</div>

Hi, i have problem with mappings after upgrade 5.6 to 6.8. Actually priority is how i can set new template for 6.8 version with multiple types Error "reason"=\>"Rejecting mapping update to \[logstash-2020.02.04\] as the…

---

## [Beginner here; how do I](https://discuss.elastic.co/t/beginner-here-how-do-i/292514)

<div class="topic-metadata">

**Author:** [@end-user](https://discuss.elastic.co/u/end-user)\
**Replies:** 26\
**Last updated:** [February 7, 2022, 12:34am UTC](https://discuss.elastic.co/t/beginner-here-how-do-i/292514 "2022-02-07T00:34:43Z")

</div>

I'm new to this stack ecosystem and I was hoping someone could point me to the elements that might fit my project. I have a command that I'd like to run on a schedule (like every 10 minutes) that generates some good met…

---

## [Kibana5 data table and message term](https://discuss.elastic.co/t/kibana5-data-table-and-message-term/109712)

<div class="topic-metadata">

**Author:** [@MonGMZ](https://discuss.elastic.co/u/MonGMZ)\
**Replies:** 10\
**Last updated:** [November 30, 2017, 11:02am UTC](https://discuss.elastic.co/t/kibana5-data-table-and-message-term/109712 "2017-11-30T11:02:21Z")

</div>

Hi all, I'm using kibana 5 and I want to use a data table visualization but it seems that I cannot add the message as a term to it. Anyone know why is that? Thanks.

---

## [Parse XML nessus config to logstash](https://discuss.elastic.co/t/parse-xml-nessus-config-to-logstash/290887)

<div class="topic-metadata">

**Author:** [@k1mson13](https://discuss.elastic.co/u/k1mson13)\
**Replies:** 12\
**Last updated:** [December 15, 2021, 3:21pm UTC](https://discuss.elastic.co/t/parse-xml-nessus-config-to-logstash/290887 "2021-12-15T15:21:20Z")

</div>

I have a nessus file that looks like this : \<ReportHost name="192.168.2.65"\>\<HostProperties\> \<tag name="traceroute-hop-1"\>192.168.2.65\</tag\> \<tag name="HOST\_START"\>Wed Nov 10 12:48:53 2021\</tag\> \<tag name="HOST\_START\_TI…

---

## [No indexes created in Elasticsearch](https://discuss.elastic.co/t/no-indexes-created-in-elasticsearch/161046)

<div class="topic-metadata">

**Author:** [@chaire](https://discuss.elastic.co/u/chaire)\
**Replies:** 13\
**Last updated:** [January 14, 2019, 9:29am UTC](https://discuss.elastic.co/t/no-indexes-created-in-elasticsearch/161046 "2019-01-14T09:29:00Z")

</div>

Hello. I'm using Elastic Stack 6.5 on my Windows 7. My workaround is Filebeat -\> Logstash -\> Elasticsearch -\> Kibana. I run them and they look like working just fine as there's no error occurred. But there's no indexes/i…

---

## [Unable to change the default index in Winlogbeat.yaml](https://discuss.elastic.co/t/unable-to-change-the-default-index-in-winlogbeat-yaml/109528)

<div class="topic-metadata">

**Author:** [@AnithaLingam](https://discuss.elastic.co/u/AnithaLingam)\
**Replies:** 14\
**Last updated:** [December 5, 2017, 2:54pm UTC](https://discuss.elastic.co/t/unable-to-change-the-default-index-in-winlogbeat-yaml/109528 "2017-12-05T14:54:42Z")

</div>

I need to push the event logs to the existing index that we already has, but the logs are flowing to new index WInlogbeat. I tried to modify the WInlogbeat.yaml file by entering the index name but it is not working and a…

---

## [Unauthorized logstash role for bulk writes](https://discuss.elastic.co/t/unauthorized-logstash-role-for-bulk-writes/79318)

<div class="topic-metadata">

**Author:** [@addyk](https://discuss.elastic.co/u/addyk)\
**Replies:** 10\
**Last updated:** [April 10, 2017, 8:10pm UTC](https://discuss.elastic.co/t/unauthorized-logstash-role-for-bulk-writes/79318 "2017-04-10T20:10:15Z")

</div>

Here are my current role that is attached to the user logstash I know create\_index and create aren't necessary but I figured I would give that at try. I had originally followed this guide https://www.elastic.co/guid…

---

## [Correct configuration file for XML input](https://discuss.elastic.co/t/correct-configuration-file-for-xml-input/97415)

<div class="topic-metadata">

**Author:** [@abhisek](https://discuss.elastic.co/u/abhisek)\
**Replies:** 9\
**Last updated:** [August 31, 2017, 4:52am UTC](https://discuss.elastic.co/t/correct-configuration-file-for-xml-input/97415 "2017-08-31T04:52:14Z")

</div>

My log look like this which is “|” separated. The log consist of id, status, request, response fields. The request and response are present in XML data which are “|” separated. 110000|read|\<soapenv:Envelope xmlns:soap…

---

## [X-pack-5.5.0.jar download location](https://discuss.elastic.co/t/x-pack-5-5-0-jar-download-location/92460)

<div class="topic-metadata">

**Author:** [@pts0](https://discuss.elastic.co/u/pts0)\
**Replies:** 10\
**Last updated:** [July 12, 2017, 5:12am UTC](https://discuss.elastic.co/t/x-pack-5-5-0-jar-download-location/92460 "2017-07-12T05:12:02Z")

</div>

Hi, I'm trying to upgrade my application to version 5.5.0. I have a dependency to x-pack.jar, somebody know where to download the newest jar, x-pack.jar ? maybe a litte bit more context. I need following imports to te…

---

## [Unbalanced shards within index](https://discuss.elastic.co/t/unbalanced-shards-within-index/135042)

<div class="topic-metadata">

**Author:** [@Jonathan\_Mendenhall](https://discuss.elastic.co/u/Jonathan_Mendenhall)\
**Replies:** 14\
**Last updated:** [June 25, 2018, 6:42pm UTC](https://discuss.elastic.co/t/unbalanced-shards-within-index/135042 "2018-06-25T18:42:04Z")

</div>

I have an index that was written to in the past, but is now only being used for searches (this has actually happened with multiple indices). At one point I noticed that this index in particular was acting sluggish; not j…

---

## [Grok pattern failing domain.com vs http://domain.com/](https://discuss.elastic.co/t/grok-pattern-failing-domain-com-vs-http-domain-com/103268)

<div class="topic-metadata">

**Author:** [@prophoto](https://discuss.elastic.co/u/prophoto)\
**Replies:** 14\
**Last updated:** [October 12, 2017, 5:20am UTC](https://discuss.elastic.co/t/grok-pattern-failing-domain-com-vs-http-domain-com/103268 "2017-10-12T05:20:49Z")

</div>

I am relatively new to ELK and have gotten pretty far setting up my custom grok pattern for apache logs. I have them slightly customized. I have it 90% of the way there but I'm seeing a failure when the log line has "dom…

---

## [Why heap used of a new elasticsearch cluster with no document can be 26% ? What memory is Used for?](https://discuss.elastic.co/t/why-heap-used-of-a-new-elasticsearch-cluster-with-no-document-can-be-26-what-memory-is-used-for/205455)

<div class="topic-metadata">

**Author:** [@panxuelin](https://discuss.elastic.co/u/panxuelin)\
**Replies:** 18\
**Last updated:** [October 29, 2019, 11:35am UTC](https://discuss.elastic.co/t/why-heap-used-of-a-new-elasticsearch-cluster-with-no-document-can-be-26-what-memory-is-used-for/205455 "2019-10-29T11:35:47Z")

</div>

unit is M and I use \_nodes/stats API heap\_used\_in\_bytes = 4298.34 heap\_used\_percent = 26 heap\_max\_in\_bytes = 16067.875

---

## [Logstash-forwarder not connecting with the server](https://discuss.elastic.co/t/logstash-forwarder-not-connecting-with-the-server/45688)

<div class="topic-metadata">

**Author:** [@Roshan\_r](https://discuss.elastic.co/u/Roshan_r)\
**Replies:** 9\
**Last updated:** [March 30, 2016, 7:57am UTC](https://discuss.elastic.co/t/logstash-forwarder-not-connecting-with-the-server/45688 "2016-03-30T07:57:23Z")

</div>

Hi All, I am trying to use the logstash and logstash-forwarder fir the first time. My logstash-forwarder and logstash are installed on 2 separate VMs. Consider forwarder on server A and Logstash on Server B. I generat…

---

## [External IPs - Kibana Dashboard - Version 7.9.1](https://discuss.elastic.co/t/external-ips-kibana-dashboard-version-7-9-1/255337)

<div class="topic-metadata">

**Author:** [@krinfra](https://discuss.elastic.co/u/krinfra)\
**Replies:** 25\
**Last updated:** [November 19, 2020, 6:45pm UTC](https://discuss.elastic.co/t/external-ips-kibana-dashboard-version-7-9-1/255337 "2020-11-19T18:45:55Z")

</div>

Good Morning. I have a problem with Kibana. I need my Kibana to be able to bring the external IPs, it can only show internal IPs on my dashboards. A friend said that I have to log the External IP into my index for this …

---

## [Logstash uses 80GB of memory with pipelines and 10 configurations](https://discuss.elastic.co/t/logstash-uses-80gb-of-memory-with-pipelines-and-10-configurations/341474)

<div class="topic-metadata">

**Author:** [@nilsen](https://discuss.elastic.co/u/nilsen)\
**Replies:** 11\
**Last updated:** [August 24, 2023, 1:20pm UTC](https://discuss.elastic.co/t/logstash-uses-80gb-of-memory-with-pipelines-and-10-configurations/341474 "2023-08-24T13:20:06Z")

</div>

A while back we had issues when we ran multiple Logstash instances, each using around 1GB of memory. We got advised to use pipelines instead. Keep in mind we are still in the POC stages, so very new to the ELK stack. We …

---

## [Heapdump - out of memory java heap space](https://discuss.elastic.co/t/heapdump-out-of-memory-java-heap-space/130416)

<div class="topic-metadata">

**Author:** [@TaskDead](https://discuss.elastic.co/u/TaskDead)\
**Replies:** 21\
**Last updated:** [May 6, 2018, 8:11am UTC](https://discuss.elastic.co/t/heapdump-out-of-memory-java-heap-space/130416 "2018-05-06T08:11:15Z")

</div>

Greetings We are running a 3 node cluster(version-1.4.4) (all masters) with 30G heap with JRE 1.7.80 and replication as 1. Data: 2.5TB(live) Total: 25TB shard per index is 3 daily data is around 70-80GB indexes are…

---

## [Elasticsearch REST API layer is not available. Forcefully terminated cluster](https://discuss.elastic.co/t/elasticsearch-rest-api-layer-is-not-available-forcefully-terminated-cluster/209239)

<div class="topic-metadata">

**Author:** [@vishal\_viswanathan](https://discuss.elastic.co/u/vishal_viswanathan)\
**Replies:** 16\
**Last updated:** [December 11, 2019, 3:43pm UTC](https://discuss.elastic.co/t/elasticsearch-rest-api-layer-is-not-available-forcefully-terminated-cluster/209239 "2019-12-11T15:43:24Z")

</div>

Hello Getting the below error while running rally If they are absent, running this track will fail or lead to unexpected results. \[ERROR\] Cannot race. Could not launch cluster Elasticsearch REST API layer is not avail…

---

## [Indexing error "Index -1 out of bounds for length 0"](https://discuss.elastic.co/t/indexing-error-index-1-out-of-bounds-for-length-0/257379)

<div class="topic-metadata">

**Author:** [@hKerma](https://discuss.elastic.co/u/hKerma)\
**Replies:** 9\
**Last updated:** [December 3, 2020, 5:51pm UTC](https://discuss.elastic.co/t/indexing-error-index-1-out-of-bounds-for-length-0/257379 "2020-12-03T17:51:55Z")

</div>

Hi everyone, I want to use ELK stack to analyze some Kubernetes audit logs. They're sent to the Logstash webhook as JSON. Here's my config file : input{ http { port =\> 8888 codec =\> "json" type =\> "json" } }…

---

## [JDBC Driver From Maven](https://discuss.elastic.co/t/jdbc-driver-from-maven/136736)

<div class="topic-metadata">

**Author:** [@gboro54](https://discuss.elastic.co/u/gboro54)\
**Replies:** 9\
**Last updated:** [June 25, 2018, 9:49am UTC](https://discuss.elastic.co/t/jdbc-driver-from-maven/136736 "2018-06-25T09:49:36Z")

</div>

I have tried following the directions provided in the documentation and yet still can't seem to get the MVN dependency for the new JDBC jar to work. AM I potentially missing something? \<dependency\> \<gro…

---

## [Elastic APM @CaptureTransaction](https://discuss.elastic.co/t/elastic-apm-capturetransaction/225991)

<div class="topic-metadata">

**Author:** [@Sumukh\_H](https://discuss.elastic.co/u/Sumukh_H)\
**Replies:** 12\
**Last updated:** [April 2, 2020, 12:12pm UTC](https://discuss.elastic.co/t/elastic-apm-capturetransaction/225991 "2020-04-02T12:12:01Z")

</div>

Kibana version: 7.5.2 Elasticsearch version: 7.5.2 APM Server version: APM Agent language and version: 1.11.0 java While using the @CaptureTransaction(value = 'Task') it was supposed to create a new tab with all the …

---

## [Kibana6.7.0 ssl client connection error](https://discuss.elastic.co/t/kibana6-7-0-ssl-client-connection-error/175500)

<div class="topic-metadata">

**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\
**Replies:** 16\
**Last updated:** [May 7, 2019, 5:47am UTC](https://discuss.elastic.co/t/kibana6-7-0-ssl-client-connection-error/175500 "2019-05-07T05:47:21Z")

</div>

kibana.yml server.host: "IPADDRESS" server.name: "IPADDRESS" xpack.security.enabled: true elasticsearch.username: "kibana" elasticsearch.password: "password" server.ssl.enabled: true server.ssl.certificate: /pat…

---

## [Adding a second node to cluster](https://discuss.elastic.co/t/adding-a-second-node-to-cluster/129511)

<div class="topic-metadata">

**Author:** [@L33T](https://discuss.elastic.co/u/L33T)\
**Replies:** 10\
**Last updated:** [April 26, 2018, 10:04am UTC](https://discuss.elastic.co/t/adding-a-second-node-to-cluster/129511 "2018-04-26T10:04:28Z")

</div>

Hi, Recently setup elastic on a windows host but performance is being hampered as its only a single node. I have setup a second node but cannot get it to see the cluster. both elasticsearch.yml configs below: Node 1: b…

---

## [Unique Index names using elastic rest client](https://discuss.elastic.co/t/unique-index-names-using-elastic-rest-client/120344)

<div class="topic-metadata">

**Author:** [@Akib\_Ali](https://discuss.elastic.co/u/Akib_Ali)\
**Replies:** 10\
**Last updated:** [February 19, 2018, 7:40pm UTC](https://discuss.elastic.co/t/unique-index-names-using-elastic-rest-client/120344 "2018-02-19T19:40:32Z")

</div>

Using ES rest client, How to get List of all unique index based on some search criterion. Below code gives my all index names but duplicate ones too. Please help. SearchSourceBuilder sourceBuilder = new SearchSou…

---

## [Improve query time](https://discuss.elastic.co/t/improve-query-time/6891)

<div class="topic-metadata">

**Author:** [@haarts](https://discuss.elastic.co/u/haarts)\
**Replies:** 15\
**Last updated:** [March 8, 2012, 8:37am UTC](https://discuss.elastic.co/t/improve-query-time/6891 "2012-03-08T08:37:58Z")

</div>

Hi! We currently have 150 million document in an index, 10 shards, 3 replicas and 3 machines (8 core, 24GB RAM). Search works but rather slow. Query time measures in seconds, often more than 5. I've been playing w…

---

## [Logstash Shipper to Redis](https://discuss.elastic.co/t/logstash-shipper-to-redis/29948)

<div class="topic-metadata">

**Author:** [@ariceELK](https://discuss.elastic.co/u/ariceELK)\
**Replies:** 15\
**Last updated:** [January 2, 2016, 7:31pm UTC](https://discuss.elastic.co/t/logstash-shipper-to-redis/29948 "2016-01-02T19:31:52Z")

</div>

Hi, Im using LS Shipper to send to Redis queue. The conf input is reading from different log files but I only see logs from type syslog being sent. Application and Web logs are not getting sent. I've run LS shipper…

---

## [Metricbeat aws cpu total pct missing](https://discuss.elastic.co/t/metricbeat-aws-cpu-total-pct-missing/209723)

<div class="topic-metadata">

**Author:** [@Vinicios\_Grein](https://discuss.elastic.co/u/Vinicios_Grein)\
**Replies:** 20\
**Last updated:** [December 4, 2019, 9:28pm UTC](https://discuss.elastic.co/t/metricbeat-aws-cpu-total-pct-missing/209723 "2019-12-04T21:28:50Z")

</div>

Hi, I've configurated aws metricbeat on kibana and have some machines on there, about 20. Only 3 of them don't register the field aws.ec2.cpu.total.pct, all the others yes. Are there some configuration on aws or on a …

---

## [Sync Elasticsearch with MySQL Database](https://discuss.elastic.co/t/sync-elasticsearch-with-mysql-database/234032)

<div class="topic-metadata">

**Author:** [@Punj\_Shah](https://discuss.elastic.co/u/Punj_Shah)\
**Replies:** 14\
**Last updated:** [May 26, 2020, 7:54am UTC](https://discuss.elastic.co/t/sync-elasticsearch-with-mysql-database/234032 "2020-05-26T07:54:33Z")

</div>

Hello! As per our application requirement, we need to sync Elasticsearch with MySQL. We will apply the best optimal way according to your advice. Below is the DB EER Diagram just for the reference Now we need to app…

[Previous page](https://discuss.elastic.co/top.md?page=105&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=107&per_page=50&period=all)
