# Top

**URL:** https://discuss.elastic.co/top.md?page=1093&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1094

---

## [Beginner: Basic Problem -\> Localhost:9200 failed](https://discuss.elastic.co/t/beginner-basic-problem-localhost-9200-failed/153487)

<div class="topic-metadata">

**Author:** [@Prisilla\_Ade\_Haryant](https://discuss.elastic.co/u/Prisilla_Ade_Haryant)\
**Replies:** 5\
**Last updated:** [November 19, 2018, 4:47am UTC](https://discuss.elastic.co/t/beginner-basic-problem-localhost-9200-failed/153487 "2018-11-19T04:47:51Z")

</div>

Hi, I'm newbie here. I just installed the elasticsearch in windows, i use java too, and need to run the localhost:9200, but it was failed and it brought me to the bing or a normal google pages with the keywords "localho…

---

## [Virtual bytes wrong counter in metricbeat](https://discuss.elastic.co/t/virtual-bytes-wrong-counter-in-metricbeat/148636)

<div class="topic-metadata">

**Author:** [@noskills](https://discuss.elastic.co/u/noskills)\
**Replies:** 5\
**Last updated:** [September 18, 2018, 1:20pm UTC](https://discuss.elastic.co/t/virtual-bytes-wrong-counter-in-metricbeat/148636 "2018-09-18T13:20:52Z")

</div>

I use perfmon to check Virtual Bytes for a process currently but we are trying to metricbeat to push the information elsewhere. The Virtual Bytes in metricbeat never matches even close to what is shown by perfmon or PS …

---

## [Shard Recovery takes long due to engine is closed](https://discuss.elastic.co/t/shard-recovery-takes-long-due-to-engine-is-closed/78107)

<div class="topic-metadata">

**Author:** [@german23](https://discuss.elastic.co/u/german23)\
**Replies:** 5\
**Last updated:** [March 23, 2017, 8:05am UTC](https://discuss.elastic.co/t/shard-recovery-takes-long-due-to-engine-is-closed/78107 "2017-03-23T08:05:03Z")

</div>

Hey guys, First off, we are running ES 2.4.2. The last few weeks we encountered a nasty behaviour of ES in regards to share recovery. When i restart a data node and the shard recovery process beginns i see the foll…

---

## [Metricbeat: upload output file to elasticsearch manually](https://discuss.elastic.co/t/metricbeat-upload-output-file-to-elasticsearch-manually/76825)

<div class="topic-metadata">

**Author:** [@WiemDW](https://discuss.elastic.co/u/WiemDW)\
**Replies:** 5\
**Last updated:** [March 6, 2017, 3:34pm UTC](https://discuss.elastic.co/t/metricbeat-upload-output-file-to-elasticsearch-manually/76825 "2017-03-06T15:34:13Z")

</div>

Hi, I'd like to post-process the metricbeat output, so I am using the "File output" module. However, when uploading the data to elasticsearch, I am getting an "illegal\_argument\_exception": A single example message ta…

---

## [Couldn't find any Elasticsearch data on kibana?](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data-on-kibana/171671)

<div class="topic-metadata">

**Author:** [@pramodchoudhari](https://discuss.elastic.co/u/pramodchoudhari)\
**Replies:** 3\
**Last updated:** [March 11, 2019, 1:56pm UTC](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data-on-kibana/171671 "2019-03-11T13:56:30Z")

</div>

this is my logstash.conf input { beats { port =\> 5044 } } filter { if \[fields\]\[log\_type\] == "syslog" { grok { match =\> { "message" =\> "{WORD:name},%{GREEDYDATA:date},%{NUMBER:CLNo},%{WORD:status}" }…

---

## [\[Timelion\] Integer Divides int does not result in decimal value](https://discuss.elastic.co/t/timelion-integer-divides-int-does-not-result-in-decimal-value/165929)

<div class="topic-metadata">

**Author:** [@michaelcheung](https://discuss.elastic.co/u/michaelcheung)\
**Replies:** 3\
**Last updated:** [January 30, 2019, 11:24am UTC](https://discuss.elastic.co/t/timelion-integer-divides-int-does-not-result-in-decimal-value/165929 "2019-01-30T11:24:03Z")

</div>

This is my expression displaying average user actions. .es("user:\*", metric=cardinality:user).color(#FF0000).label(user), .es("action:\*", metric=sum:actionCount).divide(.es("user:\*", metric=cardinality:user)).color(#333…

---

## [Logstash not creating indexes for csv file input](https://discuss.elastic.co/t/logstash-not-creating-indexes-for-csv-file-input/157820)

<div class="topic-metadata">

**Author:** [@emile1](https://discuss.elastic.co/u/emile1)\
**Replies:** 3\
**Last updated:** [November 26, 2018, 7:51am UTC](https://discuss.elastic.co/t/logstash-not-creating-indexes-for-csv-file-input/157820 "2018-11-26T07:51:55Z")

</div>

Hi All I'm at a loss I'm trying to process a csv file via logstash. My Config below is not creating any indexes in ES. Looking at the logstash logs it does not look like their is an error in my config. Im adding my conf…

---

## [Dynamic mapping - Nested objects](https://discuss.elastic.co/t/dynamic-mapping-nested-objects/106390)

<div class="topic-metadata">

**Author:** [@nmalinip](https://discuss.elastic.co/u/nmalinip)\
**Replies:** 0\
**Last updated:** [November 4, 2017, 9:10pm UTC](https://discuss.elastic.co/t/dynamic-mapping-nested-objects/106390 "2017-11-04T21:10:59Z")

</div>

Hi All, We have a requirement to store nested json objects ( depth can be upto 5 levels) in elastic search. I have the current mapping "dynamic\_templates": \[ { "nested\_feature": { "match": "payload", …

---

## [Packetbeat not working in Linux (requires sudo)](https://discuss.elastic.co/t/packetbeat-not-working-in-linux-requires-sudo/42888)

<div class="topic-metadata">

**Author:** [@rbkumar88](https://discuss.elastic.co/u/rbkumar88)\
**Replies:** 3\
**Last updated:** [February 26, 2016, 7:13pm UTC](https://discuss.elastic.co/t/packetbeat-not-working-in-linux-requires-sudo/42888 "2016-02-26T19:13:35Z")

</div>

bash-4.1$ ./packetbeat devices -v -debug bash-4.1$ uname -a Linux xxxxxx 2.6.32-573.3.1.el6.x86\_64 #1 SMP Mon Aug 10 09:44:54 EDT 2015 x86\_64 x86\_64 x86\_64 GNU/Linux Packetbeat coming out immediately without executing/…

---

## [Unable to get results using date as string field](https://discuss.elastic.co/t/unable-to-get-results-using-date-as-string-field/41247)

<div class="topic-metadata">

**Author:** [@rraghuvittal](https://discuss.elastic.co/u/rraghuvittal)\
**Replies:** 3\
**Last updated:** [February 9, 2016, 11:15am UTC](https://discuss.elastic.co/t/unable-to-get-results-using-date-as-string-field/41247 "2016-02-09T11:15:09Z")

</div>

Hi All, I have created a string field and inserting the date value in \[yyyy-mm-dd\] format. As per my requirement i can't change the field type to date.When i try to search data using the range query it is not giving th…

---

## [Showing nested properties as individual fields in Discover UI](https://discuss.elastic.co/t/showing-nested-properties-as-individual-fields-in-discover-ui/158776)

<div class="topic-metadata">

**Author:** [@mariusoe](https://discuss.elastic.co/u/mariusoe)\
**Replies:** 2\
**Last updated:** [November 30, 2018, 8:31am UTC](https://discuss.elastic.co/t/showing-nested-properties-as-individual-fields-in-discover-ui/158776 "2018-11-30T08:31:06Z")

</div>

Hi, recently I upgrade my ELK stack from version 5 to version 6(.4). My documents contains a field which is a JSON object and until now, the JSON's attributes were shown in Kibana's discovery UI as seperate fields (as …

---

## [Snapshot to S3 fails with parse exception](https://discuss.elastic.co/t/snapshot-to-s3-fails-with-parse-exception/82790)

<div class="topic-metadata">

**Author:** [@ChronosWS](https://discuss.elastic.co/u/ChronosWS)\
**Replies:** 2\
**Last updated:** [April 20, 2017, 2:07am UTC](https://discuss.elastic.co/t/snapshot-to-s3-fails-with-parse-exception/82790 "2017-04-20T02:07:52Z")

</div>

Cluster 1bfe9344 After setting up S3 credentials and a bucket, I run a snapshot command as follows through the dev tools console: PUT \_snapshot/snapshots { "type": "s3", "settings": { "bucket": "\<redacted\>/ba…

---

## [Downsampling Time Series](https://discuss.elastic.co/t/downsampling-time-series/77551)

<div class="topic-metadata">

**Author:** [@Nastooh](https://discuss.elastic.co/u/Nastooh)\
**Replies:** 2\
**Last updated:** [March 8, 2017, 11:50pm UTC](https://discuss.elastic.co/t/downsampling-time-series/77551 "2017-03-08T23:50:27Z")

</div>

Hi Have a visualisation plot, where x axis is the event occurrence time. Currently, I am able to set the time window of interest via number of points in x-axis, e.g., in the case shown below ,1e6 points corresponds to 1…

---

## [Logstash TCP Client configuration](https://discuss.elastic.co/t/logstash-tcp-client-configuration/45716)

<div class="topic-metadata">

**Author:** [@Joseph\_Schwartz](https://discuss.elastic.co/u/Joseph_Schwartz)\
**Replies:** 2\
**Last updated:** [April 29, 2016, 8:32pm UTC](https://discuss.elastic.co/t/logstash-tcp-client-configuration/45716 "2016-04-29T20:32:23Z")

</div>

I'm looking for an better example to connect to a TCP server and save the results of a CSV stream to a file or directly into elastic. Does anyone have good example to work with? Sample of CSV Data: 1ADLAA1,GSM,14582…

---

## [Search for parts of a string field](https://discuss.elastic.co/t/search-for-parts-of-a-string-field/219670)

<div class="topic-metadata">

**Author:** [@fabriciofs](https://discuss.elastic.co/u/fabriciofs)\
**Replies:** 6\
**Last updated:** [February 18, 2020, 1:42pm UTC](https://discuss.elastic.co/t/search-for-parts-of-a-string-field/219670 "2020-02-18T13:42:16Z")

</div>

Hello guys, I'm new to the Elasticsearch world and I'm sorry if my doubt is very basic. I need to create an index on there will be a type that will store a product catalog. In this there will be several fields but what …

---

## [Export visualisation data to JSON by API (with filters)](https://discuss.elastic.co/t/export-visualisation-data-to-json-by-api-with-filters/164610)

<div class="topic-metadata">

**Author:** [@Arthur\_Parkopoly](https://discuss.elastic.co/u/Arthur_Parkopoly)\
**Replies:** 1\
**Last updated:** [January 24, 2019, 8:23pm UTC](https://discuss.elastic.co/t/export-visualisation-data-to-json-by-api-with-filters/164610 "2019-01-24T20:23:27Z")

</div>

Hi there, First post, but I've read tens of them to find an answer, without results. I need to display visualisations to users based on their own 2 attributes : "brandList" and "concessionList". Both lists may contain …

---

## [Shards allocation unbalanced on nodes](https://discuss.elastic.co/t/shards-allocation-unbalanced-on-nodes/135713)

<div class="topic-metadata">

**Author:** [@Fei\_Yao](https://discuss.elastic.co/u/Fei_Yao)\
**Replies:** 1\
**Last updated:** [June 13, 2018, 12:20pm UTC](https://discuss.elastic.co/t/shards-allocation-unbalanced-on-nodes/135713 "2018-06-13T12:20:31Z")

</div>

I'm using ES v5.6.3, with 3 data nodes. All indices have default 5:1 (primary:replica) setting. After it runs for awhile (from logstash to ES) I noticed one data node has 50% disk.used\_percent where all other 2 nodes hav…

---

## [Logstash for Facebook Post Searches](https://discuss.elastic.co/t/logstash-for-facebook-post-searches/24504)

<div class="topic-metadata">

**Author:** [@abaykal](https://discuss.elastic.co/u/abaykal)\
**Replies:** 1\
**Last updated:** [June 28, 2015, 2:15pm UTC](https://discuss.elastic.co/t/logstash-for-facebook-post-searches/24504 "2015-06-28T14:15:06Z")

</div>

Has anyone figured out how to search and pull in facebook posts into ES using logstash? any examples? Thanks

---

## [Elastic metric count to percentage](https://discuss.elastic.co/t/elastic-metric-count-to-percentage/330806)

<div class="topic-metadata">

**Author:** [@Prathamesh\_S\_Pai](https://discuss.elastic.co/u/Prathamesh_S_Pai)\
**Replies:** 3\
**Last updated:** [April 27, 2023, 5:01pm UTC](https://discuss.elastic.co/t/elastic-metric-count-to-percentage/330806 "2023-04-27T17:01:04Z")

</div>

I am using metric visualization type in kibana. In Metric section, I have used 'count' aggregation and in bucket section, i have used 'terms' aggregation with field 'executionStatus.keyword' and clicked on 'update' butt…

---

## [json insert](https://discuss.elastic.co/t/json-insert/271891)

<div class="topic-metadata">

**Author:** [@pyeonzzang123](https://discuss.elastic.co/u/pyeonzzang123)\
**Replies:** 8\
**Last updated:** [May 3, 2021, 1:45am UTC](https://discuss.elastic.co/t/json-insert/271891 "2021-05-03T01:45:26Z")

</div>

I want to write the same c# code as the Python code below. But there was an error. I don’t' know the reason. python // import json import sys from elasticsearch import Elasticsearch from elasticsearch.helpers impor…

---

## [CPU at 100% with XPACK security Enabled - ES 7.3](https://discuss.elastic.co/t/cpu-at-100-with-xpack-security-enabled-es-7-3/214544)

<div class="topic-metadata">

**Author:** [@nsoni](https://discuss.elastic.co/u/nsoni)\
**Replies:** 3\
**Last updated:** [February 10, 2020, 2:20pm UTC](https://discuss.elastic.co/t/cpu-at-100-with-xpack-security-enabled-es-7-3/214544 "2020-02-10T14:20:32Z")

</div>

I am using elasticsearch 7.3 cluster which consists of 3 Master, 10 Data nodes The cluster contains almost 100 active index and 10,000 aliases to write on the index. Cluster load is almost 15-20k bulk ingestion per m…

---

## [Elasticsearch 7.1.1 cluster not forming using discovery-ec2](https://discuss.elastic.co/t/elasticsearch-7-1-1-cluster-not-forming-using-discovery-ec2/186427)

<div class="topic-metadata">

**Author:** [@haktoggle](https://discuss.elastic.co/u/haktoggle)\
**Replies:** 3\
**Last updated:** [June 19, 2019, 11:14am UTC](https://discuss.elastic.co/t/elasticsearch-7-1-1-cluster-not-forming-using-discovery-ec2/186427 "2019-06-19T11:14:32Z")

</div>

I have setup 3 nodes in AWS using discovery-ec2 plugin but they are not forming cluster. They just formed as its own cluster. elasticsearch.yml config on all three nodes bootstrap.memory\_lock: true discovery.seed\_prov…

---

## [Generate PDF Report from an external app](https://discuss.elastic.co/t/generate-pdf-report-from-an-external-app/126010)

<div class="topic-metadata">

**Author:** [@kenneth](https://discuss.elastic.co/u/kenneth)\
**Replies:** 3\
**Last updated:** [April 4, 2018, 4:04am UTC](https://discuss.elastic.co/t/generate-pdf-report-from-an-external-app/126010 "2018-04-04T04:04:27Z")

</div>

Hi, I would like to execute/call the Generation URL (PDF) from my web app (outside Kibana), is that possible? Please note that security features (i.e. using x-pack) are enabled in Kibana. Regards, Kenneth

---

## [The processors only filter part of message](https://discuss.elastic.co/t/the-processors-only-filter-part-of-message/110055)

<div class="topic-metadata">

**Author:** [@Augustus1995](https://discuss.elastic.co/u/Augustus1995)\
**Replies:** 3\
**Last updated:** [December 4, 2017, 1:31pm UTC](https://discuss.elastic.co/t/the-processors-only-filter-part-of-message/110055 "2017-12-04T13:31:27Z")

</div>

Hi, i want to use filebeat send message to elasticsearch directly. And i use processors as a filter to drop some useless fields. But when i check message from kibana only half messages drop fields. And i only run one fil…

---

## [Elasticsearch in dead state](https://discuss.elastic.co/t/elasticsearch-in-dead-state/93848)

<div class="topic-metadata">

**Author:** [@MacFan4000](https://discuss.elastic.co/u/MacFan4000)\
**Replies:** 3\
**Last updated:** [July 20, 2017, 8:57pm UTC](https://discuss.elastic.co/t/elasticsearch-in-dead-state/93848 "2017-07-20T20:57:29Z")

</div>

I am using Elasticsearch 5 and when I restart it it works fine. But it eventually goes into a dead state. How can this be fixed?

---

## [Configure ES on aws linux to allow connection from public ip](https://discuss.elastic.co/t/configure-es-on-aws-linux-to-allow-connection-from-public-ip/84031)

<div class="topic-metadata">

**Author:** [@Ashwin\_PATIL](https://discuss.elastic.co/u/Ashwin_PATIL)\
**Replies:** 3\
**Last updated:** [April 28, 2017, 4:05pm UTC](https://discuss.elastic.co/t/configure-es-on-aws-linux-to-allow-connection-from-public-ip/84031 "2017-04-28T16:05:25Z")

</div>

Hello, I am trying to run elasticsearch instance version 2.4.5 and here is my config file network.host: XX.XX.XX.XX Trying for single node on aws server I have provided my aws public ip here... When I start elasticse…

---

## [Logstash 2.3.2 hung with no useful logging](https://discuss.elastic.co/t/logstash-2-3-2-hung-with-no-useful-logging/50924)

<div class="topic-metadata">

**Author:** [@danygor](https://discuss.elastic.co/u/danygor)\
**Replies:** 3\
**Last updated:** [May 25, 2016, 10:23am UTC](https://discuss.elastic.co/t/logstash-2-3-2-hung-with-no-useful-logging/50924 "2016-05-25T10:23:37Z")

</div>

Hi all, I was tuning my logstash instance working on pipeline-workers, pipeline-batch-size, elasticsearch output workers. I run logstash several times over the days, every time killing -9 it when I collected eno…

---

## [TermsFIlter performance as index grows](https://discuss.elastic.co/t/termsfilter-performance-as-index-grows/1089)

<div class="topic-metadata">

**Author:** [@andreaiacono](https://discuss.elastic.co/u/andreaiacono)\
**Replies:** 8\
**Last updated:** [May 23, 2015, 6:15pm UTC](https://discuss.elastic.co/t/termsfilter-performance-as-index-grows/1089 "2015-05-23T18:15:15Z")

</div>

Hi, we're dealing with a performance issue with elastic 1.5.2 (but we also had it on 1.5.1 and preceding versions). Our ES is formed by a single node instance on a Xeon with 12 HT cores and 64Gb of RAM; we plan to setu…

---

## [Problem stop indexing data when I restart Elasticsearch?](https://discuss.elastic.co/t/problem-stop-indexing-data-when-i-restart-elasticsearch/17533)

<div class="topic-metadata">

**Author:** [@Tanguy\_Bernard](https://discuss.elastic.co/u/Tanguy_Bernard)\
**Replies:** 3\
**Last updated:** [May 15, 2014, 1:27pm UTC](https://discuss.elastic.co/t/problem-stop-indexing-data-when-i-restart-elasticsearch/17533 "2014-05-15T13:27:54Z")

</div>

Hello, I indexing my data : everything fine, but when I restart Elasticsearch, he reindex me my data, My problem is that I have twice the same data. Can you help me to solve this problem ? Thanks in advance. My…

---

## [How to scroll aggregation results using Java API](https://discuss.elastic.co/t/how-to-scroll-aggregation-results-using-java-api/56836)

<div class="topic-metadata">

**Author:** [@Shashi-GS](https://discuss.elastic.co/u/Shashi-GS)\
**Replies:** 2\
**Last updated:** [August 2, 2016, 9:57am UTC](https://discuss.elastic.co/t/how-to-scroll-aggregation-results-using-java-api/56836 "2016-08-02T09:57:58Z")

</div>

Could you please suggest me, Is there any way I can scroll aggregation results from JAVA APIs?

---

## [How to upgrade Vega version 4.3.0 to 5.13.0?](https://discuss.elastic.co/t/how-to-upgrade-vega-version-4-3-0-to-5-13-0/237429)

<div class="topic-metadata">

**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\
**Replies:** 5\
**Last updated:** [June 23, 2020, 1:56am UTC](https://discuss.elastic.co/t/how-to-upgrade-vega-version-4-3-0-to-5-13-0/237429 "2020-06-23T01:56:32Z")

</div>

I'm using Elasticsearch and Kibana version 7.6.1 which we just upgraded from v.7.6.0 last month. At that time, Vega version was still v.4.3.0 but v.5.13.0 has been released earlier this month. So I want to use the lates…

---

## [Index size for files much bigger with ES5 compared to ES2](https://discuss.elastic.co/t/index-size-for-files-much-bigger-with-es5-compared-to-es2/73838)

<div class="topic-metadata">

**Author:** [@David\_Pocivalnik](https://discuss.elastic.co/u/David_Pocivalnik)\
**Replies:** 5\
**Last updated:** [February 8, 2017, 9:13am UTC](https://discuss.elastic.co/t/index-size-for-files-much-bigger-with-es5-compared-to-es2/73838 "2017-02-08T09:13:15Z")

</div>

I used mapper-attachments in order to index files. created the request to add it to field "file" and it's copied to the other fields. The following mapping definition was used with ES2 { "files": { "propert…

---

## [Data distribution over shards and replicas](https://discuss.elastic.co/t/data-distribution-over-shards-and-replicas/16725)

<div class="topic-metadata">

**Author:** [@bagui](https://discuss.elastic.co/u/bagui)\
**Replies:** 5\
**Last updated:** [April 3, 2014, 9:46am UTC](https://discuss.elastic.co/t/data-distribution-over-shards-and-replicas/16725 "2014-04-03T09:46:09Z")

</div>

Hi, I've started working on elasticsearch and having some doubts about shards and replicas and how they handle data. I don't have any prior knowledge on Lucene. As I know lucene will split data in segments and st…

---

## [Get the "request" that a dashboard or a visualization have](https://discuss.elastic.co/t/get-the-request-that-a-dashboard-or-a-visualization-have/279769)

<div class="topic-metadata">

**Author:** [@aza-zil](https://discuss.elastic.co/u/aza-zil)\
**Replies:** 1\
**Last updated:** [July 30, 2021, 10:44am UTC](https://discuss.elastic.co/t/get-the-request-that-a-dashboard-or-a-visualization-have/279769 "2021-07-30T10:44:27Z")

</div>

Hey, is there anyway to get the request that a dashboard or a visualization uses to get the data programmatically? Or is there any api that I can use to get the data of a dashboard? thanks

---

## [Ealsticsearch two nodes with the same cluster name having two different cluster uuid](https://discuss.elastic.co/t/ealsticsearch-two-nodes-with-the-same-cluster-name-having-two-different-cluster-uuid/97805)

<div class="topic-metadata">

**Author:** [@Mehdi\_Mouslih](https://discuss.elastic.co/u/Mehdi_Mouslih)\
**Replies:** 1\
**Last updated:** [August 21, 2017, 7:12pm UTC](https://discuss.elastic.co/t/ealsticsearch-two-nodes-with-the-same-cluster-name-having-two-different-cluster-uuid/97805 "2017-08-21T19:12:02Z")

</div>

I configured two node with the cluster name (production), but when I installed head plugin I didn’t see the two nodes. I saw the node which it’s address is used to open head plugin For instance : 9200/\_plugin/head will …

---

## [Sum by hour over several days](https://discuss.elastic.co/t/sum-by-hour-over-several-days/41947)

<div class="topic-metadata">

**Author:** [@Gautam\_S\_Thakur](https://discuss.elastic.co/u/Gautam_S_Thakur)\
**Replies:** 1\
**Last updated:** [February 19, 2016, 7:22am UTC](https://discuss.elastic.co/t/sum-by-hour-over-several-days/41947 "2016-02-19T07:22:28Z")

</div>

It looks like with kibana, this is not possible. It cannot perform summation of value over the same hour for multiple days. I would like to sum a numeric field by hour, over an arbitrary time period say (last 10 days). …

---

## [Need to configure message timestamp as timestamp in elastic stack](https://discuss.elastic.co/t/need-to-configure-message-timestamp-as-timestamp-in-elastic-stack/288191)

<div class="topic-metadata">

**Author:** [@Mobin](https://discuss.elastic.co/u/Mobin)\
**Replies:** 6\
**Last updated:** [November 5, 2021, 5:06am UTC](https://discuss.elastic.co/t/need-to-configure-message-timestamp-as-timestamp-in-elastic-stack/288191 "2021-11-05T05:06:26Z")

</div>

We have created an elastic stack to monitor logs from the Linux clients. On Linux clients, filebeat is configured to ship the logs to the elastic stack. When we are searching for the logs using elastic discover option @…

---

## [Created script field successfully but error occurred in discover](https://discuss.elastic.co/t/created-script-field-successfully-but-error-occurred-in-discover/228813)

<div class="topic-metadata">

**Author:** [@Echo\_yu](https://discuss.elastic.co/u/Echo_yu)\
**Replies:** 4\
**Last updated:** [April 21, 2020, 8:14am UTC](https://discuss.elastic.co/t/created-script-field-successfully-but-error-occurred-in-discover/228813 "2020-04-21T08:14:53Z")

</div>

Hi, I created a script field with the type of date successfully but when I search data in discover something went wrong . And I cannot use my script field in aggregation either. My script field create by if(doc\['finished…

---

## [One shard getting more load](https://discuss.elastic.co/t/one-shard-getting-more-load/36954)

<div class="topic-metadata">

**Author:** [@ruben](https://discuss.elastic.co/u/ruben)\
**Replies:** 4\
**Last updated:** [December 21, 2015, 9:11am UTC](https://discuss.elastic.co/t/one-shard-getting-more-load/36954 "2015-12-21T09:11:16Z")

</div>

Hi We are seeing a strange behaviour were all servers with shard 1 is getting more load than the others. We are running a cluster of 18 machines (on AWS) it only one index with 5 shards in the cluster. There is no sp…

---

## [Severe: http connection errors](https://discuss.elastic.co/t/severe-http-connection-errors/6108)

<div class="topic-metadata">

**Author:** [@Niranjan](https://discuss.elastic.co/u/Niranjan)\
**Replies:** 4\
**Last updated:** [December 12, 2011, 1:16pm UTC](https://discuss.elastic.co/t/severe-http-connection-errors/6108 "2011-12-12T13:16:01Z")

</div>

I am having a frequently occurring problem that is affecting the stability of search feature on my website. I have elasticsearch 0.14.3 installed and running on my website. Many times, the http communication fails- I …

---

## [Create Multiple Indexes from filebeat](https://discuss.elastic.co/t/create-multiple-indexes-from-filebeat/283163)

<div class="topic-metadata">

**Author:** [@rahul\_sirugudi](https://discuss.elastic.co/u/rahul_sirugudi)\
**Replies:** 2\
**Last updated:** [September 2, 2021, 1:54pm UTC](https://discuss.elastic.co/t/create-multiple-indexes-from-filebeat/283163 "2021-09-02T13:54:57Z")

</div>

Hi, I am new to ELK stack. I am trying to set up logs for applications. In total we have 29 applications (deb). running in both (autoscaling and spot-fleet in aws). My idea is to use one filebeat configuration on all the…

---

## [Logstash\_7.5.2\_ Encountered a retryable error. Will Retry with exponential backoff {:code=\>400, :url=\>"https://host:9200/\_bulk"}](https://discuss.elastic.co/t/logstash-7-5-2-encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400-url-https-host-9200-bulk/276635)

<div class="topic-metadata">

**Author:** [@anburethy](https://discuss.elastic.co/u/anburethy)\
**Replies:** 2\
**Last updated:** [June 22, 2021, 1:16pm UTC](https://discuss.elastic.co/t/logstash-7-5-2-encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400-url-https-host-9200-bulk/276635 "2021-06-22T13:16:25Z")

</div>

Hi Team, We use an ELK stack and I actually ran into login issue for which I deleted some existing indexes which are old and the login issue sorted but I ran into another issue. I wasnt able to reindex not the new index…

---

## [Не запускается elasticsearch](https://discuss.elastic.co/t/elasticsearch/183078)

<div class="topic-metadata">

**Author:** [@Darkness](https://discuss.elastic.co/u/Darkness)\
**Replies:** 2\
**Last updated:** [May 28, 2019, 11:50am UTC](https://discuss.elastic.co/t/elasticsearch/183078 "2019-05-28T11:50:18Z")

</div>

Версия elasticsearch 6.8 JDK 8 u211

---

## [Search for JSON array elements based on order](https://discuss.elastic.co/t/search-for-json-array-elements-based-on-order/129545)

<div class="topic-metadata">

**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\
**Replies:** 2\
**Last updated:** [April 27, 2018, 7:59pm UTC](https://discuss.elastic.co/t/search-for-json-array-elements-based-on-order/129545 "2018-04-27T19:59:58Z")

</div>

Hi, I have a usecase , where I have to search inside a JSON array based on field order. Examples: Doc1: { "FIELD1":"VALUE1", ARR: \[ {"CUR":"ABC","NEXT":"PQR","ACTION":"CLICK"}, {"CUR":"PQR","NEXT"…

---

## [Unusually high load in node, never high load on master. 2 node setup](https://discuss.elastic.co/t/unusually-high-load-in-node-never-high-load-on-master-2-node-setup/91667)

<div class="topic-metadata">

**Author:** [@amercado](https://discuss.elastic.co/u/amercado)\
**Replies:** 2\
**Last updated:** [July 28, 2017, 2:32pm UTC](https://discuss.elastic.co/t/unusually-high-load-in-node-never-high-load-on-master-2-node-setup/91667 "2017-07-28T14:32:19Z")

</div>

I have a 2 node setup with a master and a node both running in docker containers which volume mount the config and data directories. As far as the docker specific configuration, I have a ulimit set on both master and …

---

## [Testers wanted: Lumberjack integration with Hortonworks](https://discuss.elastic.co/t/testers-wanted-lumberjack-integration-with-hortonworks/44880)

<div class="topic-metadata">

**Author:** [@trixpan](https://discuss.elastic.co/u/trixpan)\
**Replies:** 2\
**Last updated:** [March 19, 2016, 5:06am UTC](https://discuss.elastic.co/t/testers-wanted-lumberjack-integration-with-hortonworks/44880 "2016-03-19T05:06:12Z")

</div>

Hi there, For those using logstash-forwarder but also using Hortonworks stack (HDP and HDF) I have baked an experimental listener that allows Hortonworks Dataflow (a.k.a. Apache NiFi) to accept connections from logst…

---

## [Unable to find valid certification path to requested target](https://discuss.elastic.co/t/unable-to-find-valid-certification-path-to-requested-target/272692)

<div class="topic-metadata">

**Author:** [@osher.l](https://discuss.elastic.co/u/osher.l)\
**Replies:** 0\
**Last updated:** [May 11, 2021, 12:06pm UTC](https://discuss.elastic.co/t/unable-to-find-valid-certification-path-to-requested-target/272692 "2021-05-11T12:06:38Z")

</div>

We have ELK stack on Kubernetes(version 7.0.0), Logstash is failing to interact with elasticsearch with the following warning and errors, all other components like filebeat and kibana are well functioning. \[2021-05-11T1…

---

## [NEST suddenly starting to create incorrect requests](https://discuss.elastic.co/t/nest-suddenly-starting-to-create-incorrect-requests/105272)

<div class="topic-metadata">

**Author:** [@hmanner](https://discuss.elastic.co/u/hmanner)\
**Replies:** 3\
**Last updated:** [October 26, 2017, 8:16pm UTC](https://discuss.elastic.co/t/nest-suddenly-starting-to-create-incorrect-requests/105272 "2017-10-26T20:16:15Z")

</div>

We have a .NET application using NEST version 2.3.1 against Elasticsearch 2.2.0. The application is a backend server application running on multiple hosts under IIS, all performing the same queries against an Elasticsear…

---

## [Is it possible to embed a single chart from a dashboard?](https://discuss.elastic.co/t/is-it-possible-to-embed-a-single-chart-from-a-dashboard/87471)

<div class="topic-metadata">

**Author:** [@WoJ](https://discuss.elastic.co/u/WoJ)\
**Replies:** 3\
**Last updated:** [May 30, 2017, 9:31am UTC](https://discuss.elastic.co/t/is-it-possible-to-embed-a-single-chart-from-a-dashboard/87471 "2017-05-30T09:31:22Z")

</div>

Hello I would like to embed a single chart from a dashboard into an external web page (Kibana 5.3). The share link which I get is for the whole dashboard and I did not find a way to share individual graphs (exactly …

---

## [Agrregation on multiple input in elasticsearch](https://discuss.elastic.co/t/agrregation-on-multiple-input-in-elasticsearch/62825)

<div class="topic-metadata">

**Author:** [@SravanTurbo](https://discuss.elastic.co/u/SravanTurbo)\
**Replies:** 3\
**Last updated:** [October 14, 2016, 7:22am UTC](https://discuss.elastic.co/t/agrregation-on-multiple-input-in-elasticsearch/62825 "2016-10-14T07:22:41Z")

</div>

Elasticsearch version: 2.4.1 Plugins installed: watcher Description of the problem: I am monitoring the input sources and trying to output the sources which are active. I have 3 input sources \["192.168.48.8", "1…

[Previous page](https://discuss.elastic.co/top.md?page=1092&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1094&per_page=50&period=all)
