# Top

**URL:** https://discuss.elastic.co/top.md?page=1083&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1084

---

## [Filebeat and Modules when ES Down](https://discuss.elastic.co/t/filebeat-and-modules-when-es-down/98410)

<div class="topic-metadata">

**Author:** [@ElasticChris](https://discuss.elastic.co/u/ElasticChris)\
**Replies:** 0\
**Last updated:** [August 25, 2017, 7:31pm UTC](https://discuss.elastic.co/t/filebeat-and-modules-when-es-down/98410 "2017-08-25T19:31:40Z")

</div>

Whenever I use modules like syslog or nginx, I can’t get filebeat to start, if elasticsearch isn’t up and running. I get: " CRIT Exiting: Error creating ES client: Couldn’t connect to any of the configured Elasticsearch…

---

## [Logstash to Logstash communication issue with domain based SSL signed certification](https://discuss.elastic.co/t/logstash-to-logstash-communication-issue-with-domain-based-ssl-signed-certification/260796)

<div class="topic-metadata">

**Author:** [@alexbennet](https://discuss.elastic.co/u/alexbennet)\
**Replies:** 1\
**Last updated:** [January 25, 2021, 3:09pm UTC](https://discuss.elastic.co/t/logstash-to-logstash-communication-issue-with-domain-based-ssl-signed-certification/260796 "2021-01-25T15:09:16Z")

</div>

We are implementing application log monitoring on ELK flow from filebeat (logstash output) -\> on-prem logstash server(beats input & lumberjack output) -\> aws logstash server (beats input & elastic output) -\> elasticear…

---

## [How to delete all Docs count or remove the Storage Size and bring it to "Zero" for created index patterns in Kibana?](https://discuss.elastic.co/t/how-to-delete-all-docs-count-or-remove-the-storage-size-and-bring-it-to-zero-for-created-index-patterns-in-kibana/299598)

<div class="topic-metadata">

**Author:** [@hitnalli\_praveen](https://discuss.elastic.co/u/hitnalli_praveen)\
**Replies:** 4\
**Last updated:** [March 15, 2022, 12:31pm UTC](https://discuss.elastic.co/t/how-to-delete-all-docs-count-or-remove-the-storage-size-and-bring-it-to-zero-for-created-index-patterns-in-kibana/299598 "2022-03-15T12:31:04Z")

</div>

I've created an Index Pattern in Kibana - "cscsv212previousbuild-perfdata" and currently it has some content of Documents (seems to be total count of Docs 177193) and has the Storage Space - 661.9MB. I would like to del…

---

## [Help With Validating This Filebeat Config](https://discuss.elastic.co/t/help-with-validating-this-filebeat-config/269164)

<div class="topic-metadata">

**Author:** [@LongBeachHXC](https://discuss.elastic.co/u/LongBeachHXC)\
**Replies:** 4\
**Last updated:** [April 8, 2021, 3:20am UTC](https://discuss.elastic.co/t/help-with-validating-this-filebeat-config/269164 "2021-04-08T03:20:40Z")

</div>

I am having the toughest time getting filebeat to send logs to my elastic stack. Am I missing something? I have heartbeat and metricbeat working. Filebeat is being fussy with me. filebeat.config: modules: path: ${…

---

## [Filebeat "decode\_json\_fields" and nested fields](https://discuss.elastic.co/t/filebeat-decode-json-fields-and-nested-fields/205316)

<div class="topic-metadata">

**Author:** [@delphi](https://discuss.elastic.co/u/delphi)\
**Replies:** 4\
**Last updated:** [October 29, 2019, 8:38pm UTC](https://discuss.elastic.co/t/filebeat-decode-json-fields-and-nested-fields/205316 "2019-10-29T20:38:05Z")

</div>

Hi. I'm using Filebeat 7.4.0 and Google Pub/Sub as an input for reading Google App Engine exported logs. Although the processor "decode\_json\_fields" is working fine, I'm getting an issue with nested fields not mapped c…

---

## [Java High Level REST Client - GetRequest sequence number and primary term](https://discuss.elastic.co/t/java-high-level-rest-client-getrequest-sequence-number-and-primary-term/193083)

<div class="topic-metadata">

**Author:** [@edovac](https://discuss.elastic.co/u/edovac)\
**Replies:** 4\
**Last updated:** [August 1, 2019, 7:44am UTC](https://discuss.elastic.co/t/java-high-level-rest-client-getrequest-sequence-number-and-primary-term/193083 "2019-08-01T07:44:34Z")

</div>

Hi, I'm using elasticsearch version 7.2.0 and implementing in my application the optimistic concurrency control with sequence number and primary term parameters. As I understand, before these two parameters were introd…

---

## [Cant pass the name of my cluster using docker](https://discuss.elastic.co/t/cant-pass-the-name-of-my-cluster-using-docker/86024)

<div class="topic-metadata">

**Author:** [@Tadeu\_Bernacchi](https://discuss.elastic.co/u/Tadeu_Bernacchi)\
**Replies:** 4\
**Last updated:** [May 21, 2017, 9:26pm UTC](https://discuss.elastic.co/t/cant-pass-the-name-of-my-cluster-using-docker/86024 "2017-05-21T21:26:00Z")

</div>

Hello guys, I'm new with elastic and i'm trying to bring up an environment using Elastic and Docker to set up a Graylog Server, but when i try to pass the name of my cluster i got stuck: \[root@notebook docker\]# docke…

---

## [100% CPU with Logstash 1.5.x](https://discuss.elastic.co/t/100-cpu-with-logstash-1-5-x/27864)

<div class="topic-metadata">

**Author:** [@Stephen\_Meier](https://discuss.elastic.co/u/Stephen_Meier)\
**Replies:** 4\
**Last updated:** [November 14, 2015, 12:39am UTC](https://discuss.elastic.co/t/100-cpu-with-logstash-1-5-x/27864 "2015-11-14T00:39:55Z")

</div>

good afternoon all. I am running the RPM version of logstash on Centos 7. It was working great untill I started having errors. I upgraded to the 1.5.3 package. It relieved the other issue, but it is now running at 10…

---

## [Integrate Content-Based Image Retrieval in Elasticsearch](https://discuss.elastic.co/t/integrate-content-based-image-retrieval-in-elasticsearch/3825)

<div class="topic-metadata">

**Author:** [@Aecio](https://discuss.elastic.co/u/Aecio)\
**Replies:** 4\
**Last updated:** [May 9, 2013, 11:19am UTC](https://discuss.elastic.co/t/integrate-content-based-image-retrieval-in-elasticsearch/3825 "2013-05-09T11:19:47Z")

</div>

Hi, I am wondering how dificult would be to integrate an API like LIRE ( http://www.semanticmetadata.net/lire/) into ElasticSearch. LIRe is an Content-Based Image Retrieval Library based on Lucene. It relies on luce…

---

## [Failed to send cluster state](https://discuss.elastic.co/t/failed-to-send-cluster-state/4489)

<div class="topic-metadata">

**Author:** [@davrob](https://discuss.elastic.co/u/davrob)\
**Replies:** 4\
**Last updated:** [June 10, 2011, 3:42am UTC](https://discuss.elastic.co/t/failed-to-send-cluster-state/4489 "2011-06-10T03:42:58Z")

</div>

Hi, On version 16.1, I'm haveing this error: \[2011-05-27 07:03:02,624\]\[DEBUG\]\[discovery.zen.publish \] \[Lila Cheney\] failed to send cluster state to \[\[Colossus\] \[YIQOzlTzTwidgSoaOteHXQ\]\[inet\[/169.49.110.161:930…

---

## [Primary shard is not active Timeout: \[1m\] (reindex api)](https://discuss.elastic.co/t/primary-shard-is-not-active-timeout-1m-reindex-api/147931)

<div class="topic-metadata">

**Author:** [@rkparkar](https://discuss.elastic.co/u/rkparkar)\
**Replies:** 1\
**Last updated:** [September 10, 2018, 4:11pm UTC](https://discuss.elastic.co/t/primary-shard-is-not-active-timeout-1m-reindex-api/147931 "2018-09-10T16:11:00Z")

</div>

Hi , i am trying to use the reindex api to copy data from one ES to another (both on 6.2.4). but i get the following error. "primary shard is not active Timeout: \[1m\] " detailed error : "cause":{"type":"unavailable\_sh…

---

## [Ignore\_older](https://discuss.elastic.co/t/ignore-older/40526)

<div class="topic-metadata">

**Author:** [@sd\_karthik](https://discuss.elastic.co/u/sd_karthik)\
**Replies:** 1\
**Last updated:** [February 1, 2016, 8:11am UTC](https://discuss.elastic.co/t/ignore-older/40526 "2016-02-01T08:11:37Z")

</div>

HI Folks, What is exactly ignore\_older. I have hourly log files on my server where filebeat is running and streaming logs to logstash. I have ignore\_older set to 30m. I stopped logstash process on destination at 12 10P…

---

## [Finding missing logs against specific index](https://discuss.elastic.co/t/finding-missing-logs-against-specific-index/280153)

<div class="topic-metadata">

**Author:** [@Bilal\_Malik](https://discuss.elastic.co/u/Bilal_Malik)\
**Replies:** 2\
**Last updated:** [August 1, 2021, 6:57pm UTC](https://discuss.elastic.co/t/finding-missing-logs-against-specific-index/280153 "2021-08-01T18:57:57Z")

</div>

Hi All, i have different services, sending logs to elastic search and showing in Kibana. Is there any way to find which service is not sending logs to elastic search? from the existing logs, how i can put filter it show…

---

## [Integrate Search part of kibana with PHP](https://discuss.elastic.co/t/integrate-search-part-of-kibana-with-php/90604)

<div class="topic-metadata">

**Author:** [@vandana\_sethi](https://discuss.elastic.co/u/vandana_sethi)\
**Replies:** 2\
**Last updated:** [June 28, 2017, 6:35am UTC](https://discuss.elastic.co/t/integrate-search-part-of-kibana-with-php/90604 "2017-06-28T06:35:18Z")

</div>

is there any way I can integrate kibana with PHP ? example I have different terms in logs and end user only understand their terms like end user say it radio and I have music instruments in my logs. So I want that user…

---

## [Logstash with multiple input plugins](https://discuss.elastic.co/t/logstash-with-multiple-input-plugins/51173)

<div class="topic-metadata">

**Author:** [@naga1](https://discuss.elastic.co/u/naga1)\
**Replies:** 2\
**Last updated:** [May 27, 2016, 5:47pm UTC](https://discuss.elastic.co/t/logstash-with-multiple-input-plugins/51173 "2016-05-27T17:47:52Z")

</div>

Hi, I am trying to have multiple input plugins one is tcp and other is filebeat on the same logstash instance, but I see logs are only coming from the tcp port not from beats servers, logs . Below is the input configur…

---

## [ArrayIndexOutOfBoundsException while searching index, the number of return documents shoud be very large](https://discuss.elastic.co/t/arrayindexoutofboundsexception-while-searching-index-the-number-of-return-documents-shoud-be-very-large/63160)

<div class="topic-metadata">

**Author:** [@Maomao\_Di](https://discuss.elastic.co/u/Maomao_Di)\
**Replies:** 3\
**Last updated:** [October 17, 2016, 8:36am UTC](https://discuss.elastic.co/t/arrayindexoutofboundsexception-while-searching-index-the-number-of-return-documents-shoud-be-very-large/63160 "2016-10-17T08:36:09Z")

</div>

I am using latest version of elasticsearch to search a index. The number of returned document should be around 4000000. I don't want to use scroll cause I would like to record the time to return the result without co…

---

## [No progress in index restore](https://discuss.elastic.co/t/no-progress-in-index-restore/36035)

<div class="topic-metadata">

**Author:** [@Anatoly\_Petkevich](https://discuss.elastic.co/u/Anatoly_Petkevich)\
**Replies:** 3\
**Last updated:** [December 1, 2015, 3:23pm UTC](https://discuss.elastic.co/t/no-progress-in-index-restore/36035 "2015-12-01T15:23:33Z")

</div>

We have a snapshot of 1TB index on S3 and need to restore in on another cluster. The version of Elasticsearch is 1.7.2, version of AWS Cloud Plugin is 2.7.1, and number of primary shards is 19. For the day no shard has b…

---

## [Elastic search is not using data path setting](https://discuss.elastic.co/t/elastic-search-is-not-using-data-path-setting/269796)

<div class="topic-metadata">

**Author:** [@Selva\_kumar2](https://discuss.elastic.co/u/Selva_kumar2)\
**Replies:** 5\
**Last updated:** [April 11, 2021, 10:45am UTC](https://discuss.elastic.co/t/elastic-search-is-not-using-data-path-setting/269796 "2021-04-11T10:45:57Z")

</div>

I am trying to run 2 elastic search instances in single VM machine with the below configuration. Both are started successfully. But both are using same data store I have given the different path in data store but its n…

---

## [Cannot insert a geopoint](https://discuss.elastic.co/t/cannot-insert-a-geopoint/107234)

<div class="topic-metadata">

**Author:** [@Marek](https://discuss.elastic.co/u/Marek)\
**Replies:** 5\
**Last updated:** [November 22, 2017, 9:37pm UTC](https://discuss.elastic.co/t/cannot-insert-a-geopoint/107234 "2017-11-22T21:37:21Z")

</div>

I try to insert a document with body: { "user\_uuid":"234", "description":"", "category":"art", "location":{ "lat":52.582014799999996, "lon":13.4913122 }, "url":"http://172.19.0.4:9000/arbotti/r1RgVuQJMS1xRg4\_Xkz"…

---

## [Problems running Kibana 5 as a web service with IIS](https://discuss.elastic.co/t/problems-running-kibana-5-as-a-web-service-with-iis/70764)

<div class="topic-metadata">

**Author:** [@Annie178](https://discuss.elastic.co/u/Annie178)\
**Replies:** 5\
**Last updated:** [January 23, 2017, 4:35pm UTC](https://discuss.elastic.co/t/problems-running-kibana-5-as-a-web-service-with-iis/70764 "2017-01-23T16:35:45Z")

</div>

Hi all, I've been trying to set up kibana 5 running as a web service using Microsoft IIS. I have set up a reverse proxy and I can access the kibana site through the IIS default web browser. However, when I access kib…

---

## [Registering a Custom Query Builder](https://discuss.elastic.co/t/registering-a-custom-query-builder/3045)

<div class="topic-metadata">

**Author:** [@Samuel\_Doyle](https://discuss.elastic.co/u/Samuel_Doyle)\
**Replies:** 5\
**Last updated:** [June 30, 2010, 7:07pm UTC](https://discuss.elastic.co/t/registering-a-custom-query-builder/3045 "2010-06-30T19:07:16Z")

</div>

I created a custom query builder but it looks like I somehow need to register it with ElasticSearch since I encounter a SearchParseException which says "No query parser registered for ... " How do I go about doing …

---

## [Shards for three node cluster](https://discuss.elastic.co/t/shards-for-three-node-cluster/316386)

<div class="topic-metadata">

**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\
**Replies:** 6\
**Last updated:** [October 14, 2022, 6:50am UTC](https://discuss.elastic.co/t/shards-for-three-node-cluster/316386 "2022-10-14T06:50:35Z")

</div>

Hi Team, I have three node cluster and my current shard setting is 2 primary and 1 replica so in total, 4 shards for three node cluster. In this case, a single node is having one extra shard everytime? Can i have 1 pr…

---

## [If the intended value itself contains the 'field split', can we use kv processor?](https://discuss.elastic.co/t/if-the-intended-value-itself-contains-the-field-split-can-we-use-kv-processor/288540)

<div class="topic-metadata">

**Author:** [@shi](https://discuss.elastic.co/u/shi)\
**Replies:** 6\
**Last updated:** [November 6, 2021, 7:51pm UTC](https://discuss.elastic.co/t/if-the-intended-value-itself-contains-the-field-split-can-we-use-kv-processor/288540 "2021-11-06T19:51:29Z")

</div>

The following sample log entry , is in the form of key=value pairs action="blocked" direction="outgoing" msg="from ip is in blocklist" proto=6 I have tried the following kv processor in ingest pipeline for the log e…

---

## [One ES Data node's CPU jumps to 90%+ suddenly while in production](https://discuss.elastic.co/t/one-es-data-nodes-cpu-jumps-to-90-suddenly-while-in-production/267610)

<div class="topic-metadata">

**Author:** [@zxx\_bd](https://discuss.elastic.co/u/zxx_bd)\
**Replies:** 6\
**Last updated:** [April 8, 2021, 6:13am UTC](https://discuss.elastic.co/t/one-es-data-nodes-cpu-jumps-to-90-suddenly-while-in-production/267610 "2021-04-08T06:13:20Z")

</div>

Hi, guys, we are running an ES cluster with 7.1.1 in production, and everything looks good while one day, a data node's CPU jumps to 90%+ suddenly, and all of the queries related to the index on that nodes were time out…

---

## [Is webhook validation possible for eck running in single namespace](https://discuss.elastic.co/t/is-webhook-validation-possible-for-eck-running-in-single-namespace/233383)

<div class="topic-metadata">

**Author:** [@data\_smith](https://discuss.elastic.co/u/data_smith)\
**Replies:** 6\
**Last updated:** [May 20, 2020, 3:03pm UTC](https://discuss.elastic.co/t/is-webhook-validation-possible-for-eck-running-in-single-namespace/233383 "2020-05-20T15:03:59Z")

</div>

If you install ECK in a Kubernetes namespace (not cluster wide) can you use the webhook validator? I installed everything (eck 1.1) in a single namespace and it seems to run fine but when I attempt to enable webhook val…

---

## [Ruby date](https://discuss.elastic.co/t/ruby-date/36283)

<div class="topic-metadata">

**Author:** [@vikas.saini](https://discuss.elastic.co/u/vikas.saini)\
**Replies:** 6\
**Last updated:** [December 3, 2015, 12:21pm UTC](https://discuss.elastic.co/t/ruby-date/36283 "2015-12-03T12:21:35Z")

</div>

I searched a lot but confused . how can i check if a string is date or not in ruby filter ?

---

## [How can change the data node to master node?](https://discuss.elastic.co/t/how-can-change-the-data-node-to-master-node/336770)

<div class="topic-metadata">

**Author:** [@merson](https://discuss.elastic.co/u/merson)\
**Replies:** 7\
**Last updated:** [June 23, 2023, 1:46pm UTC](https://discuss.elastic.co/t/how-can-change-the-data-node-to-master-node/336770 "2023-06-23T13:46:29Z")

</div>

I have 3 data node, so I want to change the one node for master and another two nodes for data nodes.

---

## [Some transaction names are incorrect/falsely reported](https://discuss.elastic.co/t/some-transaction-names-are-incorrect-falsely-reported/302475)

<div class="topic-metadata">

**Author:** [@schang](https://discuss.elastic.co/u/schang)\
**Replies:** 7\
**Last updated:** [April 24, 2022, 5:08am UTC](https://discuss.elastic.co/t/some-transaction-names-are-incorrect-falsely-reported/302475 "2022-04-24T05:08:54Z")

</div>

Kibana version: 7.15.2 Elasticsearch version: 7.15.2 APM Server version: 7.15.2 APM Agent language and version: Java 1.28.4 Browser version: Chrome 100.0.4896.75 Original install method (e.g. download page, yum…

---

## [Convert from dynamodb json to regular json on ingest](https://discuss.elastic.co/t/convert-from-dynamodb-json-to-regular-json-on-ingest/263298)

<div class="topic-metadata">

**Author:** [@ryantomaselli](https://discuss.elastic.co/u/ryantomaselli)\
**Replies:** 1\
**Last updated:** [February 9, 2021, 3:48pm UTC](https://discuss.elastic.co/t/convert-from-dynamodb-json-to-regular-json-on-ingest/263298 "2021-02-09T15:48:52Z")

</div>

Hey guys; I'm ingesting DynamoDB stream data into Elastic using a function beat. Thing is the data ingested is all DynamoDB JSON rather than regular JSON. The AWS SDK has a method to do the conversion (see https://doc…

---

## [Where to find examples of bulk indexing for ES6?](https://discuss.elastic.co/t/where-to-find-examples-of-bulk-indexing-for-es6/127212)

<div class="topic-metadata">

**Author:** [@timogoosen](https://discuss.elastic.co/u/timogoosen)\
**Replies:** 7\
**Last updated:** [May 7, 2018, 8:31am UTC](https://discuss.elastic.co/t/where-to-find-examples-of-bulk-indexing-for-es6/127212 "2018-05-07T08:31:34Z")

</div>

I have a bunch of notes on bulk indexing with examples and code that I used to use to use for indexing data into Elasticsearch via the bulk index API. None of the examples seem to work and I run into all kinds of errors.…

---

## [What's the best way to append objects to field of nested type by es-spark?](https://discuss.elastic.co/t/whats-the-best-way-to-append-objects-to-field-of-nested-type-by-es-spark/45122)

<div class="topic-metadata">

**Author:** [@mint](https://discuss.elastic.co/u/mint)\
**Replies:** 1\
**Last updated:** [April 26, 2016, 8:39am UTC](https://discuss.elastic.co/t/whats-the-best-way-to-append-objects-to-field-of-nested-type-by-es-spark/45122 "2016-04-26T08:39:42Z")

</div>

I'm using spark streaming and update ES by append objects to some nested type fields. Currently I'm query a doc from Es, then construct some map objects and update the doc by append the objects to array of nested type …

---

## [Elasticsearch takes a very long time to stop](https://discuss.elastic.co/t/elasticsearch-takes-a-very-long-time-to-stop/23599)

<div class="topic-metadata">

**Author:** [@bsarkar](https://discuss.elastic.co/u/bsarkar)\
**Replies:** 1\
**Last updated:** [May 10, 2015, 9:39pm UTC](https://discuss.elastic.co/t/elasticsearch-takes-a-very-long-time-to-stop/23599 "2015-05-10T21:39:55Z")

</div>

We perform rolling upgrades on Elasticsearch cluster in our production environment. Current version of Elasticsearch is 1.3.4 and we're running it on Windows Server 2012 machines. Rolling upgrade needs each node to b…

---

## [Creating watcher script if particular value ina field occurs more than five times in five minutes interval of time](https://discuss.elastic.co/t/creating-watcher-script-if-particular-value-ina-field-occurs-more-than-five-times-in-five-minutes-interval-of-time/259340)

<div class="topic-metadata">

**Author:** [@lokeshbabloo](https://discuss.elastic.co/u/lokeshbabloo)\
**Replies:** 8\
**Last updated:** [December 24, 2020, 10:06am UTC](https://discuss.elastic.co/t/creating-watcher-script-if-particular-value-ina-field-occurs-more-than-five-times-in-five-minutes-interval-of-time/259340 "2020-12-24T10:06:24Z")

</div>

Hi can anyone help how can we create a watcher script for the below requirement I having a field called "log\_message" contaning the below message Failed to load TermRecord for TermID= here the terminal id can be any …

---

## [Total documents count in a certain engine](https://discuss.elastic.co/t/total-documents-count-in-a-certain-engine/222310)

<div class="topic-metadata">

**Author:** [@JyL](https://discuss.elastic.co/u/JyL)\
**Replies:** 8\
**Last updated:** [March 27, 2020, 2:33pm UTC](https://discuss.elastic.co/t/total-documents-count-in-a-certain-engine/222310 "2020-03-27T14:33:12Z")

</div>

Hi, I am working on pushing data to app-search in a certain engine, i could see documents get created in the API Logs but the total number of the documents doesn't get increased. Is there a API that I could create a RES…

---

## [Install Cluster of Elasticsearch on EC2 AWS](https://discuss.elastic.co/t/install-cluster-of-elasticsearch-on-ec2-aws/220494)

<div class="topic-metadata">

**Author:** [@Miguel\_Plazas](https://discuss.elastic.co/u/Miguel_Plazas)\
**Replies:** 8\
**Last updated:** [February 24, 2020, 2:45pm UTC](https://discuss.elastic.co/t/install-cluster-of-elasticsearch-on-ec2-aws/220494 "2020-02-24T14:45:02Z")

</div>

Hi, currently I'm trying to deploy a cluster with 3 nodes on EC2 AWS. The configuration is the following: #master node cluster.name: woombat node.name: node1 node.master: true bootstrap.memory\_lock: true discovery.zen.h…

---

## [Kibana 8.18.8, 8.19.5, 9.0.8, 9.1.5 Security Update (ESA-2025-17)](https://discuss.elastic.co/t/kibana-8-18-8-8-19-5-9-0-8-9-1-5-security-update-esa-2025-17/382451)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [October 6, 2025, 4:29pm UTC](https://discuss.elastic.co/t/kibana-8-18-8-8-19-5-9-0-8-9-1-5-security-update-esa-2025-17/382451 "2025-10-06T16:29:00Z")

</div>

Kibana Stored Cross-Site-Scripting(XSS) (ESA-2025-17) Improper Validation of Specified Type of Input in Kibana can lead to stored Cross-Site-Scripting (XSS) Affected Versions: 7.x: All versions from 7.0.0 and up to a…

---

## [Should I increase my threadpool size if I get rejected executions or HTTP 429 responses?](https://discuss.elastic.co/t/should-i-increase-my-threadpool-size-if-i-get-rejected-executions-or-http-429-responses/241044)

<div class="topic-metadata">

**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Replies:** 0\
**Last updated:** [July 14, 2020, 2:23am UTC](https://discuss.elastic.co/t/should-i-increase-my-threadpool-size-if-i-get-rejected-executions-or-http-429-responses/241044 "2020-07-14T02:23:13Z")

</div>

Threadpools are described in the documentation as; A node uses several thread pools to manage memory consumption. Queues associated with many of the thread pools enable pending requests to be held instead of discarded. …

---

## [Apply ILM on multiple different index](https://discuss.elastic.co/t/apply-ilm-on-multiple-different-index/227525)

<div class="topic-metadata">

**Author:** [@kamfart](https://discuss.elastic.co/u/kamfart)\
**Replies:** 2\
**Last updated:** [April 14, 2020, 8:46am UTC](https://discuss.elastic.co/t/apply-ilm-on-multiple-different-index/227525 "2020-04-14T08:46:58Z")

</div>

Hi everyone. I try to figure it out something which annoying me about ILM. I should miss something. Here is my understanding of Logstash and Elasticsearch philosophy : document, objects which will contains our data …

---

## [ES indexing cost on updates](https://discuss.elastic.co/t/es-indexing-cost-on-updates/182296)

<div class="topic-metadata">

**Author:** [@Anand\_Swaminathan](https://discuss.elastic.co/u/Anand_Swaminathan)\
**Replies:** 2\
**Last updated:** [May 28, 2019, 2:18pm UTC](https://discuss.elastic.co/t/es-indexing-cost-on-updates/182296 "2019-05-28T14:18:22Z")

</div>

Hi, I would like to understand the numbers around how costly indexing is when there are updates. Are there any numbers that can be shared, based on your experiences ? Specifically, lets say I have a blog posts index c…

---

## [How can i do, for this problem? this normal befor installed IK , who knew?](https://discuss.elastic.co/t/how-can-i-do-for-this-problem-this-normal-befor-installed-ik-who-knew/117328)

<div class="topic-metadata">

**Author:** [@harisuperman](https://discuss.elastic.co/u/harisuperman)\
**Replies:** 2\
**Last updated:** [January 28, 2018, 4:55am UTC](https://discuss.elastic.co/t/how-can-i-do-for-this-problem-this-normal-befor-installed-ik-who-knew/117328 "2018-01-28T04:55:05Z")

</div>

\[2018-01-28T03:34:58,083\]\[INFO \]\[o.e.g.GatewayService \] \[4HMM42y\] recovered \[4\] indices into cluster\_state \[2018-01-28T03:35:03,182\]\[ERROR\]\[o.e.x.m.AgentService \] \[4HMM42y\] exception when exporting documents org.…

---

## [Show every customer in a separate charts in Kibana](https://discuss.elastic.co/t/show-every-customer-in-a-separate-charts-in-kibana/35219)

<div class="topic-metadata">

**Author:** [@sonia](https://discuss.elastic.co/u/sonia)\
**Replies:** 2\
**Last updated:** [December 27, 2015, 7:02am UTC](https://discuss.elastic.co/t/show-every-customer-in-a-separate-charts-in-kibana/35219 "2015-12-27T07:02:47Z")

</div>

Hi, I have a visualize that show dishonest customers in my index (every customer have a Unique account\_number). i want to show history of these customer behavior in separate charts in kibana using visualize tab (using Da…

---

## [Facing problems while configuring elasticsearch on Windows7](https://discuss.elastic.co/t/facing-problems-while-configuring-elasticsearch-on-windows7/8296)

<div class="topic-metadata">

**Author:** [@Amir\_Shaheen](https://discuss.elastic.co/u/Amir_Shaheen)\
**Replies:** 2\
**Last updated:** [February 27, 2013, 7:44pm UTC](https://discuss.elastic.co/t/facing-problems-while-configuring-elasticsearch-on-windows7/8296 "2013-02-27T19:44:35Z")

</div>

Steps: 1- Put elasticsearch directory in a drive 2- Add its path to environment variables 3- Set JAVE\_HOME path 4- But when i execute bin/elasticsearch.bat from command line it does not do anything D:\\elasticse…

---

## [Installing ELSER Model on Docker Instance Fails](https://discuss.elastic.co/t/installing-elser-model-on-docker-instance-fails/354988)

<div class="topic-metadata">

**Author:** [@Steve\_Stefanovich](https://discuss.elastic.co/u/Steve_Stefanovich)\
**Replies:** 8\
**Last updated:** [March 11, 2024, 5:00pm UTC](https://discuss.elastic.co/t/installing-elser-model-on-docker-instance-fails/354988 "2024-03-11T17:00:26Z")

</div>

I followed the official documentation to create a single-node 8.12.2 cluster. Trial license is activated. When I attempt to deploy the elser\_model\_2\_linux-x86\_64 model, I receive the following 429 error: Could not start …

---

## [Mise en oeuvre d'Elastic Common Schema](https://discuss.elastic.co/t/mise-en-oeuvre-delastic-common-schema/180759)

<div class="topic-metadata">

**Author:** [@r.thery](https://discuss.elastic.co/u/r.thery)\
**Replies:** 2\
**Last updated:** [May 15, 2019, 7:49am UTC](https://discuss.elastic.co/t/mise-en-oeuvre-delastic-common-schema/180759 "2019-05-15T07:49:21Z")

</div>

Bonjour, j'ai parcouru l'article Lancement d'Elastic Common Schema ainsi que les liens vers les Modules des metricbeats. je trouve l'idée très interessante mais je ne vois pas bien comment integrer cela avec des flux …

---

## [Retrieving Japanese characters as junk](https://discuss.elastic.co/t/retrieving-japanese-characters-as-junk/29949)

<div class="topic-metadata">

**Author:** [@ksams](https://discuss.elastic.co/u/ksams)\
**Replies:** 2\
**Last updated:** [September 25, 2015, 3:44pm UTC](https://discuss.elastic.co/t/retrieving-japanese-characters-as-junk/29949 "2015-09-25T15:44:23Z")

</div>

I am storing both English and Japanese in the same field. Data getting stored correctly. But while Retrieving the data, japanese characters coming as junk. URI request is working fine. Only Query Request is having this i…

---

## [UDP Listener died, address already in use](https://discuss.elastic.co/t/udp-listener-died-address-already-in-use/314281)

<div class="topic-metadata">

**Author:** [@sirineb](https://discuss.elastic.co/u/sirineb)\
**Replies:** 4\
**Last updated:** [September 16, 2022, 2:24pm UTC](https://discuss.elastic.co/t/udp-listener-died-address-already-in-use/314281 "2022-09-16T14:24:49Z")

</div>

Hi, I have two pipeline configurations located in /etc/logstash/conf.d. I can make work both seperately by running /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/\*\*.conf -r, and it sends data to elasticsearch …

---

## [FSCrawler 7.2.7, Windows service, debug and trace logs](https://discuss.elastic.co/t/fscrawler-7-2-7-windows-service-debug-and-trace-logs/263092)

<div class="topic-metadata">

**Author:** [@newschapmj1](https://discuss.elastic.co/u/newschapmj1)\
**Replies:** 4\
**Last updated:** [February 11, 2021, 12:01pm UTC](https://discuss.elastic.co/t/fscrawler-7-2-7-windows-service-debug-and-trace-logs/263092 "2021-02-11T12:01:12Z")

</div>

When running fscrawler 7.2.7 as a service (Windows server 2016) should it be possible to see debug or trace logs by adding the --debug or --trace flag? We are using nssm v2.24 to generate the service. I successfully ad…

---

## [Can I run elasticsearch completely in memory?](https://discuss.elastic.co/t/can-i-run-elasticsearch-completely-in-memory/251063)

<div class="topic-metadata">

**Author:** [@kagrahar](https://discuss.elastic.co/u/kagrahar)\
**Replies:** 4\
**Last updated:** [October 8, 2020, 2:38pm UTC](https://discuss.elastic.co/t/can-i-run-elasticsearch-completely-in-memory/251063 "2020-10-08T14:38:17Z")

</div>

I have about 15TB of DRAM. Can I create RAMdisk of 1TB size and completely run elastic search in memory? My data is about 300GB. Thanks in advance

---

## [Up to date way to ingest logs from Java application using log4j2](https://discuss.elastic.co/t/up-to-date-way-to-ingest-logs-from-java-application-using-log4j2/241300)

<div class="topic-metadata">

**Author:** [@Daniele\_Renda](https://discuss.elastic.co/u/Daniele_Renda)\
**Replies:** 4\
**Last updated:** [September 2, 2020, 11:07pm UTC](https://discuss.elastic.co/t/up-to-date-way-to-ingest-logs-from-java-application-using-log4j2/241300 "2020-09-02T23:07:02Z")

</div>

Hi, I've a Spring Boot 2.3.1 application that produces some logs. I'd like to ingest them into my ElasticSearch stack (I'm hosted on Elastic cloud). What's the better way to do that? I saw the logstash log4j plugin is d…

---

## [Powershell DSC Deploy and MSI](https://discuss.elastic.co/t/powershell-dsc-deploy-and-msi/139776)

<div class="topic-metadata">

**Author:** [@OffColour](https://discuss.elastic.co/u/OffColour)\
**Replies:** 4\
**Last updated:** [July 18, 2018, 9:48am UTC](https://discuss.elastic.co/t/powershell-dsc-deploy-and-msi/139776 "2018-07-18T09:48:37Z")

</div>

Hi all, Before I attempt this from scratch, has anyone created a Powershell DSC file that they've used for deploying Filebeat?

[Previous page](https://discuss.elastic.co/top.md?page=1082&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1084&per_page=50&period=all)
