# Top **URL:** https://discuss.elastic.co/top.md?page=107&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 108 --- ## [Query performance drop while doing a snapshot](https://discuss.elastic.co/t/query-performance-drop-while-doing-a-snapshot/117052)
**Author:** [@Alexander\_Iliev](https://discuss.elastic.co/u/Alexander_Iliev)\ **Replies:** 12\ **Last updated:** [January 26, 2018, 5:48pm UTC](https://discuss.elastic.co/t/query-performance-drop-while-doing-a-snapshot/117052 "2018-01-26T17:48:17Z")
We are running a 6-node Elasticsearch cluster with a single (not really single, but the only one that is actively used) index which is 3.5TB in size (51 shards, 25 primary). We have a NFS share mounted on all nodes and … --- ## [Ldap authorization in kibana via x-pack](https://discuss.elastic.co/t/ldap-authorization-in-kibana-via-x-pack/87110)
**Author:** [@Ihsan\_Kocak](https://discuss.elastic.co/u/Ihsan_Kocak)\ **Replies:** 9\ **Last updated:** [May 29, 2017, 11:21am UTC](https://discuss.elastic.co/t/ldap-authorization-in-kibana-via-x-pack/87110 "2017-05-29T11:21:23Z")
i configured elasticsearch and kibana to login with ldap username, i can login succesfully but after i login kibana gives authorization errors like: Config: Error 403 Forbidden: \[security\_exception\] action \[indices:d… --- ## [Filebeat Docker Autodiscovery stopped working when I upgraded to 8.12.0](https://discuss.elastic.co/t/filebeat-docker-autodiscovery-stopped-working-when-i-upgraded-to-8-12-0/353103)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 19\ **Last updated:** [February 23, 2024, 9:00am UTC](https://discuss.elastic.co/t/filebeat-docker-autodiscovery-stopped-working-when-i-upgraded-to-8-12-0/353103 "2024-02-23T09:00:20Z")
Hey, Last week I was trying to use the logs from my Docker Swarm containers that were supposed to be in my test elasticsearch stack, when I found that said logs were not present. A bit of digging later and I can see tha… --- ## [Visualization doesnt show float numbers](https://discuss.elastic.co/t/visualization-doesnt-show-float-numbers/176350)
**Author:** [@Gidi\_Kalef](https://discuss.elastic.co/u/Gidi_Kalef)\ **Replies:** 18\ **Last updated:** [April 23, 2019, 8:37am UTC](https://discuss.elastic.co/t/visualization-doesnt-show-float-numbers/176350 "2019-04-23T08:37:37Z")
Hi Guys , I have the following field which mapped to float in my mapping , im trying to create line chart with max value (for Y-axis) and @timestamp for (X-axis) and it show me nothing , attaching picture: do yo… --- ## [How to make ES cluster resilient to FileSystemException](https://discuss.elastic.co/t/how-to-make-es-cluster-resilient-to-filesystemexception/44882)
**Author:** [@Jae](https://discuss.elastic.co/u/Jae)\ **Replies:** 9\ **Last updated:** [March 20, 2016, 7:58am UTC](https://discuss.elastic.co/t/how-to-make-es-cluster-resilient-to-filesystemexception/44882 "2016-03-20T07:58:15Z")
Hi I am using Elasticsearch 1.5.2 and ingesting the data through elasticsearch-hadoop connector using REST api from Samza. I set up replication factor as 1 (total two copies). Somehow, one machine got file system err… --- ## [JSON Result with 'columns' and 'rows' values - help parsing](https://discuss.elastic.co/t/json-result-with-columns-and-rows-values-help-parsing/163815)
**Author:** [@mseto](https://discuss.elastic.co/u/mseto)\ **Replies:** 12\ **Last updated:** [January 13, 2019, 1:30am UTC](https://discuss.elastic.co/t/json-result-with-columns-and-rows-values-help-parsing/163815 "2019-01-13T01:30:41Z")
I've got a JSON document like so :: { "tables": \[{ "name": "PrimaryResult", "columns": \[{ "name": "test", "type": "string" }, { "name": "test2, "type": "string" }\], "rows": \[ \["testdatarow1", "test2datarow1"\]… --- ## [Logstash configuration to delete input files once processed](https://discuss.elastic.co/t/logstash-configuration-to-delete-input-files-once-processed/322029)
**Author:** [@BhawanaSharma](https://discuss.elastic.co/u/BhawanaSharma)\ **Replies:** 11\ **Last updated:** [January 11, 2023, 6:27am UTC](https://discuss.elastic.co/t/logstash-configuration-to-delete-input-files-once-processed/322029 "2023-01-11T06:27:43Z")
I am trying to delete input files from directory once it was processed by Filebeat. Also wanted to confirm from filebeat that particular file is already processed so it is safe to delete. For that I tried few things on m… --- ## [Store Indexes on multiple drives](https://discuss.elastic.co/t/store-indexes-on-multiple-drives/178568)
**Author:** [@dheeraj\_kumar](https://discuss.elastic.co/u/dheeraj_kumar)\ **Replies:** 10\ **Last updated:** [April 26, 2019, 10:18am UTC](https://discuss.elastic.co/t/store-indexes-on-multiple-drives/178568 "2019-04-26T10:18:26Z")
I am new to ES ,I have single node ES instance on a Windows machine, i was trying to find a way to where i can point my new index on a new drive but i could not find any way of handling that. Even adding multiple path i… --- ## [How to filter based on log\_stream](https://discuss.elastic.co/t/how-to-filter-based-on-log-stream/95780)
**Author:** [@bhedayatian](https://discuss.elastic.co/u/bhedayatian)\ **Replies:** 14\ **Last updated:** [August 10, 2017, 3:17pm UTC](https://discuss.elastic.co/t/how-to-filter-based-on-log-stream/95780 "2017-08-10T15:17:41Z")
hello. in aws cloud watch, i have group 1 that has 4 streams, how can i get logs from just one of the streams in logstash? i am using cloudwatch\_logs plugin in logstash. i have this cloudwatch\_logs { log\_group =\> \[“Gr… --- ## [Is Kibana supported on GKE through default google ingress ? doesn't seem so](https://discuss.elastic.co/t/is-kibana-supported-on-gke-through-default-google-ingress-doesnt-seem-so/264067)
**Author:** [@rubans](https://discuss.elastic.co/u/rubans)\ **Replies:** 14\ **Last updated:** [March 1, 2021, 7:21pm UTC](https://discuss.elastic.co/t/is-kibana-supported-on-gke-through-default-google-ingress-doesnt-seem-so/264067 "2021-03-01T19:21:45Z")
I have deployed Elastic Search and Kibana on GKE. However unable to get ingress working as it seems to report Kibana service as unhealthy. I assume this is due to the root url redirecting with http 302 and GKE LB L7 ex… --- ## [Remote cluster monitoring creating alerts with percentage values](https://discuss.elastic.co/t/remote-cluster-monitoring-creating-alerts-with-percentage-values/269477)
**Author:** [@jugonzalezv](https://discuss.elastic.co/u/jugonzalezv)\ **Replies:** 13\ **Last updated:** [April 21, 2021, 8:46pm UTC](https://discuss.elastic.co/t/remote-cluster-monitoring-creating-alerts-with-percentage-values/269477 "2021-04-21T20:46:57Z")
Good day everyone, lately I've been trying to create alarms on remotely connected clusters using the following command on the clusters i connect: the connection part has been succesful so far, but I'm posting it to c… --- ## [Unable to give condition to watcher for elasticsearch (groovy disabled)?](https://discuss.elastic.co/t/unable-to-give-condition-to-watcher-for-elasticsearch-groovy-disabled/24426)
**Author:** [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\ **Replies:** 10\ **Last updated:** [July 4, 2015, 5:39pm UTC](https://discuss.elastic.co/t/unable-to-give-condition-to-watcher-for-elasticsearch-groovy-disabled/24426 "2015-07-04T17:39:49Z")
I installed watcher and giving the condition. While giving the condition its giving me error that... {"error":"WatcherException\[failed to put watch \[log\_error\_watch\]\]; nested: ScriptConditionValidationException\[failed … --- ## [GSOC| Elasticsearch: Speed Up Some Highlighting](https://discuss.elastic.co/t/gsoc-elasticsearch-speed-up-some-highlighting/122069)
**Author:** [@sohaib](https://discuss.elastic.co/u/sohaib)\ **Replies:** 13\ **Last updated:** [March 25, 2018, 1:27pm UTC](https://discuss.elastic.co/t/gsoc-elasticsearch-speed-up-some-highlighting/122069 "2018-03-25T13:27:50Z")
Hi, I am interested in contributing to Elastic Search and GSOC provides a nice platform to start. I am somewhat late in pursuing this as I have been fiddling with a variety of products. I hope that it is not already too… --- ## [String Query for java API dosen't find some documents by name](https://discuss.elastic.co/t/string-query-for-java-api-dosent-find-some-documents-by-name/55119)
**Author:** [@EngErik](https://discuss.elastic.co/u/EngErik)\ **Replies:** 12\ **Last updated:** [July 14, 2016, 11:05pm UTC](https://discuss.elastic.co/t/string-query-for-java-api-dosent-find-some-documents-by-name/55119 "2016-07-14T23:05:11Z")
Hello! First, sorry for my poor english, but let me try to explain my problem. I'm working in an application using elasticsearch java api for managed my documents. Everything works fine, i'm able to search in DB and… --- ## [Display dynamic data in columns](https://discuss.elastic.co/t/display-dynamic-data-in-columns/294812)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 13\ **Last updated:** [January 28, 2022, 5:22am UTC](https://discuss.elastic.co/t/display-dynamic-data-in-columns/294812 "2022-01-28T05:22:18Z")
Hi all, In my project, the field names are dynamic as new indices keep getting pushed with different columns names. I cannot select a column name as they are not constant for all indices except time field and name fiel… --- ## [Need help on logstash.conf for Wildfly logs](https://discuss.elastic.co/t/need-help-on-logstash-conf-for-wildfly-logs/137549)
**Author:** [@Chandana](https://discuss.elastic.co/u/Chandana)\ **Replies:** 12\ **Last updated:** [June 28, 2018, 9:55am UTC](https://discuss.elastic.co/t/need-help-on-logstash-conf-for-wildfly-logs/137549 "2018-06-28T09:55:22Z")
I converted the wildfly logs to logstash readable format (Json). Here is how my log looks like {"@timestamp":"2018-06-22T18:36:55.138+0530","@message":"2018-06-22 18:36:55,138 INFO \[com.vcl.util.LogTracer\] (default t… --- ## [Logstash - event id to name](https://discuss.elastic.co/t/logstash-event-id-to-name/126348)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 11\ **Last updated:** [April 3, 2018, 7:42am UTC](https://discuss.elastic.co/t/logstash-event-id-to-name/126348 "2018-04-03T07:42:22Z")
Hi All, Am trying to add another field in elasticsearch from the winlogbeat the event id to tier corresponding names but I couldn't execute it filter { if "Security" in \[log\_name\] { translate { dictionary =\> … --- ## [Config file not getting read by logstash](https://discuss.elastic.co/t/config-file-not-getting-read-by-logstash/62630)
**Author:** [@adhikz](https://discuss.elastic.co/u/adhikz)\ **Replies:** 11\ **Last updated:** [October 14, 2016, 8:30am UTC](https://discuss.elastic.co/t/config-file-not-getting-read-by-logstash/62630 "2016-10-14T08:30:24Z")
Hi, I have set up Elk stack on my windows machine with the following : Elasticserach Logstash Kibana My logstash.conf' input { file { path =\> "\\bin\\MylogFile.log" start\_position =\> "beginning" } } output { elastic… --- ## [Filebeat can't connect to Elastic search](https://discuss.elastic.co/t/filebeat-cant-connect-to-elastic-search/358873)
**Author:** [@ddiabe](https://discuss.elastic.co/u/ddiabe)\ **Replies:** 25\ **Last updated:** [May 10, 2024, 4:41pm UTC](https://discuss.elastic.co/t/filebeat-cant-connect-to-elastic-search/358873 "2024-05-10T16:41:58Z")
Downloaded a filebeat to my host (which is a domain controller ), trying to use filebeat to ship identity logs from DC to ELK (logstash and Elasticsearch). having the following error everytime i run ./filebeat setup - e… --- ## [Highlight doesn't work if not in first position](https://discuss.elastic.co/t/highlight-doesnt-work-if-not-in-first-position/110865)
**Author:** [@Sylvain\_Attoumani](https://discuss.elastic.co/u/Sylvain_Attoumani)\ **Replies:** 9\ **Last updated:** [December 19, 2017, 10:13am UTC](https://discuss.elastic.co/t/highlight-doesnt-work-if-not-in-first-position/110865 "2017-12-19T10:13:35Z")
I'm working with elasticsearch and my highlight doesn't give me what I expect .My mappings looks like that : PUT my\_index { "settings": { "analysis": { "analyzer": { … --- ## [Query checking difference of two terms in a log](https://discuss.elastic.co/t/query-checking-difference-of-two-terms-in-a-log/99381)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 9\ **Last updated:** [September 5, 2017, 10:29am UTC](https://discuss.elastic.co/t/query-checking-difference-of-two-terms-in-a-log/99381 "2017-09-05T10:29:03Z")
Hi, I have two terms in a log that we will call X and Y from date format. I want to send a query that will show me all logs that the value of (X-Y) is greater than 3 (seconds). How can I do this? --- ## [Logstash 1.5.3 does not read from file](https://discuss.elastic.co/t/logstash-1-5-3-does-not-read-from-file/27135)
**Author:** [@nabbaraju](https://discuss.elastic.co/u/nabbaraju)\ **Replies:** 9\ **Last updated:** [September 10, 2015, 4:31am UTC](https://discuss.elastic.co/t/logstash-1-5-3-does-not-read-from-file/27135 "2015-09-10T04:31:52Z")
I have logstash 1.5.3 installed. I want to read from an input log and write to stdout. Here are the details: 1. sample.conf input { file { path =\> "/nfs/private/user/nabbaraj/app\_logs/ohs/aaruvmtp09/test.log" … --- ## [Error Querying Windows System using Osquery Manager on Kibana](https://discuss.elastic.co/t/error-querying-windows-system-using-osquery-manager-on-kibana/296354)
**Author:** [@mibeyki](https://discuss.elastic.co/u/mibeyki)\ **Replies:** 13\ **Last updated:** [February 15, 2022, 5:01pm UTC](https://discuss.elastic.co/t/error-querying-windows-system-using-osquery-manager-on-kibana/296354 "2022-02-15T17:01:17Z")
Hello there, I have successfully setup and ELK stack v7.17.0 fully integrated with Fleet and Osquery manager. When I try to query the remote windows agent using osquery live queries, i get the error below; TypeError: … --- ## [Setting up Minimal Security with ElasticSearch Docker Image fails](https://discuss.elastic.co/t/setting-up-minimal-security-with-elasticsearch-docker-image-fails/356562)
**Author:** [@tryin2stupelk](https://discuss.elastic.co/u/tryin2stupelk)\ **Replies:** 12\ **Last updated:** [April 5, 2024, 2:46pm UTC](https://discuss.elastic.co/t/setting-up-minimal-security-with-elasticsearch-docker-image-fails/356562 "2024-04-05T14:46:04Z")
Hello everyone, I was wondering if I could get some assistance with setting up Minimal Security (Username + Password to access the console as outlined here: Set up minimal security for Elasticsearch | Elasticsearch Guid… --- ## [Noobish Elasticsearch Python question](https://discuss.elastic.co/t/noobish-elasticsearch-python-question/224444)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 12\ **Last updated:** [March 23, 2020, 1:58pm UTC](https://discuss.elastic.co/t/noobish-elasticsearch-python-question/224444 "2020-03-23T13:58:13Z")
Hello, Since corona-wise, we got to stay at home nowadays, I was thinking it's a good time to learn a bit about the Elastic Python client library. First of all, apologies for the noobish question.. I seem to have diffi… --- ## [Warn which crashes server](https://discuss.elastic.co/t/warn-which-crashes-server/2945)
**Author:** [@Szymon\_Gwozdz](https://discuss.elastic.co/u/Szymon_Gwozdz)\ **Replies:** 15\ **Last updated:** [May 13, 2010, 5:10pm UTC](https://discuss.elastic.co/t/warn-which-crashes-server/2945 "2010-05-13T17:10:25Z")
Hi! I've launched 4-machines ES cluster. 2 machines are data nodes, 2 other machines are non-data nodes. I've started putting data (via prepared script) from 5 other machines. A lot of data (about 40 documents (~20… --- ## [Filebeat memory leak on Kubernetes?](https://discuss.elastic.co/t/filebeat-memory-leak-on-kubernetes/137208)
**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\ **Replies:** 10\ **Last updated:** [July 9, 2018, 10:35am UTC](https://discuss.elastic.co/t/filebeat-memory-leak-on-kubernetes/137208 "2018-07-09T10:35:47Z")
I have been running Filebeat in a DaemonSet using the "autodiscover" feature for a couple of weeks, and all worked fine. But at some point on Friday the Filebeat instances started eating memory until they got killed by t… --- ## [Trouble with Logstash JSON parsing](https://discuss.elastic.co/t/trouble-with-logstash-json-parsing/107426)
**Author:** [@tuxnader](https://discuss.elastic.co/u/tuxnader)\ **Replies:** 9\ **Last updated:** [November 22, 2017, 6:17am UTC](https://discuss.elastic.co/t/trouble-with-logstash-json-parsing/107426 "2017-11-22T06:17:42Z")
I'm calling an API from a script. The script then runs the results through "jq" to rearrange the fields properly which then outputs to a .json file. In Logstash I'm using File input to read the file and trying to output … --- ## ["No Living Connection" in Kibana 7.1.0 while using Default security provided in 7.1](https://discuss.elastic.co/t/no-living-connection-in-kibana-7-1-0-while-using-default-security-provided-in-7-1/182215)
**Author:** [@Prashant\_Agrawal](https://discuss.elastic.co/u/Prashant_Agrawal)\ **Replies:** 15\ **Last updated:** [June 4, 2019, 12:30pm UTC](https://discuss.elastic.co/t/no-living-connection-in-kibana-7-1-0-while-using-default-security-provided-in-7-1/182215 "2019-06-04T12:30:11Z")
Hi Team, I was going through with this training on "Fundamentals of Securing Elastic" So, in this I have done the setup of inter-node SSL communication using: /usr/share/elasticsearch/bin/elasticsearch-certutil ca /us… --- ## [How to improve AutoComplete performance?](https://discuss.elastic.co/t/how-to-improve-autocomplete-performance/10009)
**Author:** [@zkidkid](https://discuss.elastic.co/u/zkidkid)\ **Replies:** 12\ **Last updated:** [December 12, 2012, 4:21am UTC](https://discuss.elastic.co/t/how-to-improve-autocomplete-performance/10009 "2012-12-12T04:21:04Z")
Hi, Currently I am making a autocomplete with ElasticSearch. My Config: index: analysis: filter: my\_gram\_filter: type: edgeNGram side: front min\_gram: 1 max\_g… --- ## [Restore the sequence of the events](https://discuss.elastic.co/t/restore-the-sequence-of-the-events/67766)
**Author:** [@ginger](https://discuss.elastic.co/u/ginger)\ **Replies:** 9\ **Last updated:** [December 12, 2016, 11:45am UTC](https://discuss.elastic.co/t/restore-the-sequence-of-the-events/67766 "2016-12-12T11:45:29Z")
Hi, I use EKB to process log data, and FileBeat sends data to ElasticSearch directly. The objective is to have some way to render the sequence of events in the same order they were read out of the log file. With t… --- ## [Private ip geoip JSON object / structure and some questions](https://discuss.elastic.co/t/private-ip-geoip-json-object-structure-and-some-questions/156555)
**Author:** [@ppafford](https://discuss.elastic.co/u/ppafford)\ **Replies:** 14\ **Last updated:** [December 4, 2018, 3:32am UTC](https://discuss.elastic.co/t/private-ip-geoip-json-object-structure-and-some-questions/156555 "2018-12-04T03:32:30Z")
I've seen a bunch of topics on how to map your private ip address to a geoip json object but I have a question on the fields and the structure. I'm following this thread Creating geoip data for internal networks but migh… --- ## [Problem with filters and facets](https://discuss.elastic.co/t/problem-with-filters-and-facets/135508)
**Author:** [@mohammedEssabri](https://discuss.elastic.co/u/mohammedEssabri)\ **Replies:** 17\ **Last updated:** [June 19, 2018, 8:02am UTC](https://discuss.elastic.co/t/problem-with-filters-and-facets/135508 "2018-06-19T08:02:54Z")
Hi everyone, I'm using ES 1.7, and i'm experiencing some issues with filters. each doc in our index has a language (PRL), Board of Appeal(BOA), and many other filter. Our application is developed in JAVA and deployed … --- ## [Dockerized Logstash and netflow module install issue](https://discuss.elastic.co/t/dockerized-logstash-and-netflow-module-install-issue/193651)
**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\ **Replies:** 11\ **Last updated:** [August 7, 2019, 2:54pm UTC](https://discuss.elastic.co/t/dockerized-logstash-and-netflow-module-install-issue/193651 "2019-08-07T14:54:40Z")
Hello, I am currently having issues with installing the Netflow module inside of dockerized logstash Docker file FROM docker.elastic.co/logstash/logstash:7.3.0 ADD modules.yml /usr/share/logstash/config/ RUN bin/logs… --- ## [I need to concatenate two fields one from date and the other from time and send to Elasticsearc 4.6.4](https://discuss.elastic.co/t/i-need-to-concatenate-two-fields-one-from-date-and-the-other-from-time-and-send-to-elasticsearc-4-6-4/158165)
**Author:** [@Eduardo\_Bertolucci1](https://discuss.elastic.co/u/Eduardo_Bertolucci1)\ **Replies:** 9\ **Last updated:** [November 26, 2018, 4:33pm UTC](https://discuss.elastic.co/t/i-need-to-concatenate-two-fields-one-from-date-and-the-other-from-time-and-send-to-elasticsearc-4-6-4/158165 "2018-11-26T16:33:09Z")
Dear, I need to concatenate two fields to send to Elasticsearc 4.6.4, one field is of date and the other field is time and that field is mapped automatically. Example of a txt file: 0;0;0;0;0;ENTRADA;;;;;;09/06/2014;0… --- ## [I got much more sizes than base index after reindexation!](https://discuss.elastic.co/t/i-got-much-more-sizes-than-base-index-after-reindexation/1816)
**Author:** [@Mehmet\_Ozer](https://discuss.elastic.co/u/Mehmet_Ozer)\ **Replies:** 12\ **Last updated:** [June 10, 2015, 6:37am UTC](https://discuss.elastic.co/t/i-got-much-more-sizes-than-base-index-after-reindexation/1816 "2015-06-10T06:37:36Z")
Hello, I wrote an application who does the reindexation. It reads from one index with scan and scroll and send it to another index. Here I got two things on the new index: I have exactly the same size of the document… --- ## [Error talk to server](https://discuss.elastic.co/t/error-talk-to-server/328160)
**Author:** [@rachit](https://discuss.elastic.co/u/rachit)\ **Replies:** 11\ **Last updated:** [March 22, 2023, 1:00pm UTC](https://discuss.elastic.co/t/error-talk-to-server/328160 "2023-03-22T13:00:09Z")
Hi Team, I'm facing error while connecting apm to Elasticsearch. apm-server test output elasticsearch: http://localhost:9200... parse url... OK connection... parse host... OK dns lookup... OK addresses: 127.0.0.1… --- ## [How many numbers of record maximum get in ES 1.7.2](https://discuss.elastic.co/t/how-many-numbers-of-record-maximum-get-in-es-1-7-2/105733)
**Author:** [@Rahul\_Saxena](https://discuss.elastic.co/u/Rahul_Saxena)\ **Replies:** 10\ **Last updated:** [October 31, 2017, 5:14am UTC](https://discuss.elastic.co/t/how-many-numbers-of-record-maximum-get-in-es-1-7-2/105733 "2017-10-31T05:14:37Z")
Hello there, I am new in Elastic Search and install and configured 1.7.2 last month using Rest in .net C#. Now I upgrade in 5.6.3. But while fetching records it shows some error of record limit. If I change query in s… --- ## [Logstash encoding (previously in Kibana encoding)](https://discuss.elastic.co/t/logstash-encoding-previously-in-kibana-encoding/90141)
**Author:** [@CDR](https://discuss.elastic.co/u/CDR)\ **Replies:** 9\ **Last updated:** [June 21, 2017, 6:43pm UTC](https://discuss.elastic.co/t/logstash-encoding-previously-in-kibana-encoding/90141 "2017-06-21T18:43:34Z")
Is it possible to change the charset that Kibana reports in? I am having issues where Kibana reports the replacement character when it is supposed to be an oslash. I have changed the encoding charset in both the input fi… --- ## [Log stack freezing After starting API end point](https://discuss.elastic.co/t/log-stack-freezing-after-starting-api-end-point/253618)
**Author:** [@Srini12](https://discuss.elastic.co/u/Srini12)\ **Replies:** 23\ **Last updated:** [November 10, 2020, 8:24pm UTC](https://discuss.elastic.co/t/log-stack-freezing-after-starting-api-end-point/253618 "2020-11-10T20:24:44Z")
Hi Guys I am new to Logstash. I am trying to write small json file to Logstash. It is reading my config etc and freezing after Starting API End Point. No errors showing. Below is my config file; input { file { path… --- ## [Logstash Instance Missing from Kibana Monitoring](https://discuss.elastic.co/t/logstash-instance-missing-from-kibana-monitoring/186734)
**Author:** [@jakecramer17](https://discuss.elastic.co/u/jakecramer17)\ **Replies:** 15\ **Last updated:** [June 24, 2019, 8:35pm UTC](https://discuss.elastic.co/t/logstash-instance-missing-from-kibana-monitoring/186734 "2019-06-24T20:35:06Z")
I've configured Filebeat to output sample logs to Logstash. Through Logstash, I've set my \*.conf file to output the data to Elasticsearch. My end goal is to get my log information to appear in Kibana's Discover tab. The… --- ## [\_id is consuming a lot of the fielddata memory](https://discuss.elastic.co/t/id-is-consuming-a-lot-of-the-fielddata-memory/205933)
**Author:** [@aryon](https://discuss.elastic.co/u/aryon)\ **Replies:** 11\ **Last updated:** [November 5, 2019, 12:28pm UTC](https://discuss.elastic.co/t/id-is-consuming-a-lot-of-the-fielddata-memory/205933 "2019-11-05T12:28:05Z")
Hello, I have a 3 node cluster (16 vCPU, 64 GB of RAM, 3 Tb of data per node, JVM Heap at 30GB) with 450 indices (1 primary shard and 1 replica per indice). Following an upgrade from 6.7 to 6.8, the activation of TLS o… --- ## [Error While Running Elasticsearch On Windows 10 ( After Windows Crashed )](https://discuss.elastic.co/t/error-while-running-elasticsearch-on-windows-10-after-windows-crashed/69765)
**Author:** [@Mansour\_Ahmadi](https://discuss.elastic.co/u/Mansour_Ahmadi)\ **Replies:** 10\ **Last updated:** [December 24, 2016, 7:16am UTC](https://discuss.elastic.co/t/error-while-running-elasticsearch-on-windows-10-after-windows-crashed/69765 "2016-12-24T07:16:52Z")
After My Windows Crashed My Elasticsearch Wont Start The Error Is : Error: Could not find or load main class Active And The Log Say\`s : \[2016-12-22 09:21:19\] \[error\] \[ 8036\] Commons Daemon procrun failed with ex… --- ## [Curator -- Getting AttributeError: 'str' object has no attribute 'items'](https://discuss.elastic.co/t/curator-getting-attributeerror-str-object-has-no-attribute-items/171569)
**Author:** [@Vikas1](https://discuss.elastic.co/u/Vikas1)\ **Replies:** 13\ **Last updated:** [March 20, 2019, 10:11pm UTC](https://discuss.elastic.co/t/curator-getting-attributeerror-str-object-has-no-attribute-items/171569 "2019-03-20T22:11:08Z")
Attached is my config file client: hosts: use\_ssl:True certificate:'' ssl\_no\_validate:False timeout:90 master\_only:False logging: loglevel:DEBUG logfile:'/elasticsearch/logs/curator.log' logformat:default bla… --- ## [Problems creating a single node cluster](https://discuss.elastic.co/t/problems-creating-a-single-node-cluster/219984)
**Author:** [@waynesmallman](https://discuss.elastic.co/u/waynesmallman)\ **Replies:** 10\ **Last updated:** [February 19, 2020, 9:36pm UTC](https://discuss.elastic.co/t/problems-creating-a-single-node-cluster/219984 "2020-02-19T21:36:22Z")
Hi! I've managed to get Elastic 7.6 running on Ubuntu 18.04 LTS in AWS, I have access to it via a REST client using port tunnelling in a SSH connection, and while it is accessible (returning the standard "status" messag… --- ## [Problem with .docx and the mapper-attachments plugin](https://discuss.elastic.co/t/problem-with-docx-and-the-mapper-attachments-plugin/44804)
**Author:** [@Markus\_Ziegler](https://discuss.elastic.co/u/Markus_Ziegler)\ **Replies:** 15\ **Last updated:** [July 1, 2016, 5:44am UTC](https://discuss.elastic.co/t/problem-with-docx-and-the-mapper-attachments-plugin/44804 "2016-07-01T05:44:03Z")
Hi guys. I'm currently evaluating elastic search for one of my little private software projects \[:slight\_smile:\] I'm trying to index attachments with the mapper-attachments plugin and the indexing of .txt and .pdf fi… --- ## [Logstash filter and output use only one CPU core](https://discuss.elastic.co/t/logstash-filter-and-output-use-only-one-cpu-core/155575)
**Author:** [@saisimo02](https://discuss.elastic.co/u/saisimo02)\ **Replies:** 11\ **Last updated:** [November 15, 2018, 9:04am UTC](https://discuss.elastic.co/t/logstash-filter-and-output-use-only-one-cpu-core/155575 "2018-11-15T09:04:28Z")
Hello, I am using losgtash to parse my xml files, however I can't increase the number of workers, when I use top -h only one worker is used ~98%. I am using 8 Go for jvm and 4 workers in the file logstash.yml logstash.… --- ## [Elasticsearch on a wide scale around Globe](https://discuss.elastic.co/t/elasticsearch-on-a-wide-scale-around-globe/27513)
**Author:** [@Michel\_Laporte](https://discuss.elastic.co/u/Michel_Laporte)\ **Replies:** 12\ **Last updated:** [August 21, 2015, 10:33pm UTC](https://discuss.elastic.co/t/elasticsearch-on-a-wide-scale-around-globe/27513 "2015-08-21T22:33:30Z")
Hi, We are due to deploy Elasticsearch (Along with Graylog) to our Office in London , New York, Seattle & San Francisco We have a a server in each remote office (Graylog & Elasticsearch). However i have a small quest… --- ## [Windows NPS Logs](https://discuss.elastic.co/t/windows-nps-logs/289115)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 10\ **Last updated:** [November 17, 2021, 7:18am UTC](https://discuss.elastic.co/t/windows-nps-logs/289115 "2021-11-17T07:18:57Z")
Hello everyone, I've been looking for a filebeat module for NPS Logs but there doesn't appear to be one available. What are my options here? I have winlogbeat which can get stuff from event log but in C:\\Windows\\Logs … --- ## [Check if restore operation is still running](https://discuss.elastic.co/t/check-if-restore-operation-is-still-running/239764)
**Author:** [@JacFal](https://discuss.elastic.co/u/JacFal)\ **Replies:** 13\ **Last updated:** [July 9, 2020, 11:40am UTC](https://discuss.elastic.co/t/check-if-restore-operation-is-still-running/239764 "2020-07-09T11:40:05Z")
Hello, Is there any way to monitor restore if wait\_for\_completion flag is set to false? For now I use the GET \_recovery API. I have few conditions for each shard in indices to check if restore operation is still runnin… [Previous page](https://discuss.elastic.co/top.md?page=106&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=108&per_page=50&period=all)