# Top

**URL:** https://discuss.elastic.co/top.md?page=110&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 111

---

## [Mistake on configuring watches](https://discuss.elastic.co/t/mistake-on-configuring-watches/70943)

<div class="topic-metadata">

**Author:** [@marcmga](https://discuss.elastic.co/u/marcmga)\
**Replies:** 18\
**Last updated:** [January 14, 2017, 10:44pm UTC](https://discuss.elastic.co/t/mistake-on-configuring-watches/70943 "2017-01-14T22:44:38Z")

</div>

Hi, I don't know the best way to do this, so i try to explain it the best i can. I want to set watches to search if there are errors in my logs. I.e. more than 50 error logs in hte last 5 minutes, and isolate it by hos…

---

## [Not Getting data from Index pattern using SQL](https://discuss.elastic.co/t/not-getting-data-from-index-pattern-using-sql/218031)

<div class="topic-metadata">

**Author:** [@emad101](https://discuss.elastic.co/u/emad101)\
**Replies:** 13\
**Last updated:** [February 19, 2020, 7:25pm UTC](https://discuss.elastic.co/t/not-getting-data-from-index-pattern-using-sql/218031 "2020-02-19T19:25:44Z")

</div>

Hello, I am trying to fetch all data in a field to a canvas in the elastic index, but for some reason I am receiving a weird error here is the sql query I send SELECT app\_code FROM "devops\_et\*" But I receive this err…

---

## [Elasticseach: Default Similairty Algorithm and BM25 giving same results](https://discuss.elastic.co/t/elasticseach-default-similairty-algorithm-and-bm25-giving-same-results/152470)

<div class="topic-metadata">

**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\
**Replies:** 11\
**Last updated:** [October 17, 2018, 6:31am UTC](https://discuss.elastic.co/t/elasticseach-default-similairty-algorithm-and-bm25-giving-same-results/152470 "2018-10-17T06:31:32Z")

</div>

Hi Team I'm trying to understand which similarity algorithm is best suited for our use-case: 1.TF-IDF(default) 2.BM25 I've created two indices with mappings of both algorithms, but when I query, two indices are givin…

---

## [Max between two fields in last X days Kibana(lens)](https://discuss.elastic.co/t/max-between-two-fields-in-last-x-days-kibana-lens/294765)

<div class="topic-metadata">

**Author:** [@dash5000](https://discuss.elastic.co/u/dash5000)\
**Replies:** 16\
**Last updated:** [January 20, 2022, 4:05am UTC](https://discuss.elastic.co/t/max-between-two-fields-in-last-x-days-kibana-lens/294765 "2022-01-20T04:05:03Z")

</div>

Hello, I am stuck at a problem, where i have to get the maximum between two fields in a document in last X days. I am using the table format with lens. For example document has: name=test description=test description …

---

## [Documents missing after indexing and refreshing](https://discuss.elastic.co/t/documents-missing-after-indexing-and-refreshing/5259)

<div class="topic-metadata">

**Author:** [@Wojciech\_Durczynski](https://discuss.elastic.co/u/Wojciech_Durczynski)\
**Replies:** 15\
**Last updated:** [September 28, 2011, 10:06am UTC](https://discuss.elastic.co/t/documents-missing-after-indexing-and-refreshing/5259 "2011-09-28T10:06:29Z")

</div>

Hello Shay. I noticed a problem with ES 0.17. I have automatic tests that: 1. creates two local ES nodes with different cluster names 2. create index without mappings in one of the nodes 3. add there a lot of docu…

---

## [Tracking\_column not found in dataset when using JDBC driver with mongodb (input)](https://discuss.elastic.co/t/tracking-column-not-found-in-dataset-when-using-jdbc-driver-with-mongodb-input/246706)

<div class="topic-metadata">

**Author:** [@timgau](https://discuss.elastic.co/u/timgau)\
**Replies:** 9\
**Last updated:** [September 3, 2020, 4:50am UTC](https://discuss.elastic.co/t/tracking-column-not-found-in-dataset-when-using-jdbc-driver-with-mongodb-input/246706 "2020-09-03T04:50:24Z")

</div>

I'm quite unclear of how to use :sql\_last\_value in my mongodb query statement like: statement =\> "var lastId = ':sql\_last\_value'; db.docs.find({ \_id: { $gte : lastId }})" my config is like this input { jdbc { jd…

---

## [Setting up logstash config file question](https://discuss.elastic.co/t/setting-up-logstash-config-file-question/123170)

<div class="topic-metadata">

**Author:** [@jason\_smith](https://discuss.elastic.co/u/jason_smith)\
**Replies:** 15\
**Last updated:** [March 9, 2018, 7:12pm UTC](https://discuss.elastic.co/t/setting-up-logstash-config-file-question/123170 "2018-03-09T19:12:59Z")

</div>

Hello Good folks, New to ELK stack. I have setup Elasticsearch and Kibanan on my windows 8 box and practice index data into elasticsearch from Kibana. Now I want to index data thru Logstash. I downloaded logstash (ZIP …

---

## [Terms aggregation doesn't return all hits](https://discuss.elastic.co/t/terms-aggregation-doesnt-return-all-hits/255353)

<div class="topic-metadata">

**Author:** [@Zining](https://discuss.elastic.co/u/Zining)\
**Replies:** 9\
**Last updated:** [November 17, 2020, 8:04am UTC](https://discuss.elastic.co/t/terms-aggregation-doesnt-return-all-hits/255353 "2020-11-17T08:04:39Z")

</div>

Hi, We are using Elasticsearch 5.6 to store track events. Recently we run Terms aggregation on one index to find out duplicated events which have same event type, device id, and event time. Then we remove the duplicated…

---

## [Filebeat beta1 resends random data upon every restart (registry file not updated properly?)](https://discuss.elastic.co/t/filebeat-beta1-resends-random-data-upon-every-restart-registry-file-not-updated-properly/61813)

<div class="topic-metadata">

**Author:** [@shog](https://discuss.elastic.co/u/shog)\
**Replies:** 13\
**Last updated:** [October 11, 2016, 1:42pm UTC](https://discuss.elastic.co/t/filebeat-beta1-resends-random-data-upon-every-restart-registry-file-not-updated-properly/61813 "2016-10-11T13:42:42Z")

</div>

Hi, Filebeat Version: beta1 Logstash Version: alpha2 System: CentOS6 In my test scenario filebeat's processing around 1k files that are something around 40GB a day in total. The problem is that upon every restart of…

---

## [Rubydebug is not displayed](https://discuss.elastic.co/t/rubydebug-is-not-displayed/101743)

<div class="topic-metadata">

**Author:** [@sam281](https://discuss.elastic.co/u/sam281)\
**Replies:** 12\
**Last updated:** [September 27, 2017, 7:23pm UTC](https://discuss.elastic.co/t/rubydebug-is-not-displayed/101743 "2017-09-27T19:23:30Z")

</div>

Hello, I am running logstash on a windows server and have enabled Rubydebug to see how the data is being processed, but I don't see anything being logged on to console or in the rubydebug file. I have tried both the op…

---

## [Kibana show error index pattern](https://discuss.elastic.co/t/kibana-show-error-index-pattern/141022)

<div class="topic-metadata">

**Author:** [@NIloufarVafaei](https://discuss.elastic.co/u/NIloufarVafaei)\
**Replies:** 10\
**Last updated:** [July 31, 2018, 3:15pm UTC](https://discuss.elastic.co/t/kibana-show-error-index-pattern/141022 "2018-07-31T15:15:22Z")

</div>

hi my problem with kibana is error line in top up the web page look like this: what is the problem? and in addition i am new in ELK , thanks;

---

## [Elasticsearch Cluster: How to ensure node communication](https://discuss.elastic.co/t/elasticsearch-cluster-how-to-ensure-node-communication/140448)

<div class="topic-metadata">

**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\
**Replies:** 14\
**Last updated:** [July 18, 2018, 8:45am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-how-to-ensure-node-communication/140448 "2018-07-18T08:45:48Z")

</div>

Hello Please have a look at ES configuration and let me know what's wrong Node:1 node.name: "es-node-1" node.master: true node.data: true network.host: 10.0.0.74 http.port: 9200 …

---

## [Module system.yml doesn't exist](https://discuss.elastic.co/t/module-system-yml-doesnt-exist/138338)

<div class="topic-metadata">

**Author:** [@hamish](https://discuss.elastic.co/u/hamish)\
**Replies:** 10\
**Last updated:** [July 9, 2018, 6:36am UTC](https://discuss.elastic.co/t/module-system-yml-doesnt-exist/138338 "2018-07-09T06:36:25Z")

</div>

I'm struggling... A lot of the setup and config just doesn't make sense, or looks completely wrong. I've installed metricbeat via 64-bit RPM on RHEL-7. There's a /etc/metricbeat config directory created and binaries are…

---

## [Records missing during ES updates with over 250 requests](https://discuss.elastic.co/t/records-missing-during-es-updates-with-over-250-requests/148029)

<div class="topic-metadata">

**Author:** [@mikesparr](https://discuss.elastic.co/u/mikesparr)\
**Replies:** 20\
**Last updated:** [September 11, 2018, 7:32pm UTC](https://discuss.elastic.co/t/records-missing-during-es-updates-with-over-250-requests/148029 "2018-09-11T19:32:25Z")

</div>

Building a small service to archive contact records from Hubspot into ES index and records are consistently not making it into the index, but varying counts each attempt. Using the latest ES Node SDK client and ES is hos…

---

## [Parsing sha-1 value in elk](https://discuss.elastic.co/t/parsing-sha-1-value-in-elk/165384)

<div class="topic-metadata">

**Author:** [@vinu89](https://discuss.elastic.co/u/vinu89)\
**Replies:** 20\
**Last updated:** [January 25, 2019, 10:00am UTC](https://discuss.elastic.co/t/parsing-sha-1-value-in-elk/165384 "2019-01-25T10:00:08Z")

</div>

Hi, I have a text file of 27 GB which includes sha-1 value and a count. Number of lines in the file is almost 55crore.I have one elastic node with one shard and zero replica.After indexing the total size of the index fi…

---

## [Http\_poller certificate error](https://discuss.elastic.co/t/http-poller-certificate-error/175232)

<div class="topic-metadata">

**Author:** [@HaranKumar](https://discuss.elastic.co/u/HaranKumar)\
**Replies:** 9\
**Last updated:** [April 8, 2019, 9:15am UTC](https://discuss.elastic.co/t/http-poller-certificate-error/175232 "2019-04-08T09:15:12Z")

</div>

Hello Team, I have a URL to be used as input of logstash and output to be saved as a file. I am getting no data in my output file if i use CSV and getting htto\_request failure message as data if i use json. kindly hel…

---

## [Стэк ELK для сбора системных сообщений](https://discuss.elastic.co/t/elk/129471)

<div class="topic-metadata">

**Author:** [@artem33region](https://discuss.elastic.co/u/artem33region)\
**Replies:** 11\
**Last updated:** [May 21, 2018, 5:06am UTC](https://discuss.elastic.co/t/elk/129471 "2018-05-21T05:06:42Z")

</div>

Всем привет! Подскажите, кто ни будь настраивал стэк на сбор системных логов? Какие компоненты нужны для осуществления данной цели? Насколько я понял, нужные компоненты - это ELK + filebeat на серверах где будут осущес…

---

## [Elasticsearch ODBC driver with SQL Linked Server](https://discuss.elastic.co/t/elasticsearch-odbc-driver-with-sql-linked-server/221144)

<div class="topic-metadata">

**Author:** [@hwtearsdigi](https://discuss.elastic.co/u/hwtearsdigi)\
**Replies:** 14\
**Last updated:** [May 19, 2020, 11:05am UTC](https://discuss.elastic.co/t/elasticsearch-odbc-driver-with-sql-linked-server/221144 "2020-05-19T11:05:29Z")

</div>

Hello, I am having trouble getting the ODBC driver to work with MS SQL Linked Server. I have added a System DSN under the ODBC Control Panel with the Elastic 7.6 ODBC driver connecting to an active trial of Elastic 7.6 …

---

## [Performance Issues with ElasticSearch](https://discuss.elastic.co/t/performance-issues-with-elasticsearch/27273)

<div class="topic-metadata">

**Author:** [@Igor\_Zeiger](https://discuss.elastic.co/u/Igor_Zeiger)\
**Replies:** 9\
**Last updated:** [August 18, 2015, 10:03pm UTC](https://discuss.elastic.co/t/performance-issues-with-elasticsearch/27273 "2015-08-18T22:03:16Z")

</div>

Hi, We're currently facing some performance issues with our ElastiSearch cluster and trying to find what is the issue and how we may solve it. We have system with Nxlog -\> Logstash Broker -\> Redis -\> 12 Logstash clien…

---

## [Logstash with Shield : Failed action with response of 404](https://discuss.elastic.co/t/logstash-with-shield-failed-action-with-response-of-404/24113)

<div class="topic-metadata">

**Author:** [@marjolaine](https://discuss.elastic.co/u/marjolaine)\
**Replies:** 9\
**Last updated:** [June 26, 2015, 7:14am UTC](https://discuss.elastic.co/t/logstash-with-shield-failed-action-with-response-of-404/24113 "2015-06-26T07:14:02Z")

</div>

Hello, I have installed Elasticsearsh 1.4.4, Shield 1.1.1, Logstash 1.5.1. I put this configuration for Logstash in /etc/logstash/conf.d/log.conf input { stdin {} } output { stdout { codec =\> rubydebug } …

---

## [Winlogbeat missing mapping fields](https://discuss.elastic.co/t/winlogbeat-missing-mapping-fields/252846)

<div class="topic-metadata">

**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Replies:** 18\
**Last updated:** [October 23, 2020, 9:03am UTC](https://discuss.elastic.co/t/winlogbeat-missing-mapping-fields/252846 "2020-10-23T09:03:44Z")

</div>

Hi, I have just installed Winlogbeat on one of my Windows 2019 terminal servers. After configurion the .yml file I have entered setup commands: winlogbeat.exe setup --index-management winlogbeat.exe setup --dahsboar…

---

## [Connecting to TLS/SSL secured elastic cluster through transport client](https://discuss.elastic.co/t/connecting-to-tls-ssl-secured-elastic-cluster-through-transport-client/184803)

<div class="topic-metadata">

**Author:** [@Meet](https://discuss.elastic.co/u/Meet)\
**Replies:** 10\
**Last updated:** [June 23, 2019, 2:46am UTC](https://discuss.elastic.co/t/connecting-to-tls-ssl-secured-elastic-cluster-through-transport-client/184803 "2019-06-23T02:46:22Z")

</div>

Hi, I configured each node in the cluster to identify itself using its signed certificate and enable TLS on the transport layer. Set up passwords for Elastic Stack. I was able to successfully, connect to cluster throu…

---

## [Is it normal for ES to clean up double spaces?](https://discuss.elastic.co/t/is-it-normal-for-es-to-clean-up-double-spaces/36675)

<div class="topic-metadata">

**Author:** [@Donny\_Velazquez](https://discuss.elastic.co/u/Donny_Velazquez)\
**Replies:** 10\
**Last updated:** [December 9, 2015, 4:59pm UTC](https://discuss.elastic.co/t/is-it-normal-for-es-to-clean-up-double-spaces/36675 "2015-12-09T16:59:43Z")

</div>

I noticed when inserting data that is a string with multiple words. ES will cleanup the spacing between them if there is more then 1 space. Is that normal and should ES really be doing that?

---

## [Elasticsearch plugin is red - possible master node problem?](https://discuss.elastic.co/t/elasticsearch-plugin-is-red-possible-master-node-problem/109617)

<div class="topic-metadata">

**Author:** [@zaddsters](https://discuss.elastic.co/u/zaddsters)\
**Replies:** 11\
**Last updated:** [November 30, 2017, 3:42pm UTC](https://discuss.elastic.co/t/elasticsearch-plugin-is-red-possible-master-node-problem/109617 "2017-11-30T15:42:04Z")

</div>

I have installed Elasticsearch 5.51 and Kibana 5.51 and I am now getting an Elasticsearch plugin is red error message screenshot from 2017-11-29 14-37-18 The Elasticsearch logs mention - not enough master nodes discove…

---

## [Slow Query performance on small data](https://discuss.elastic.co/t/slow-query-performance-on-small-data/88128)

<div class="topic-metadata">

**Author:** [@munotshubham](https://discuss.elastic.co/u/munotshubham)\
**Replies:** 12\
**Last updated:** [June 8, 2017, 7:28pm UTC](https://discuss.elastic.co/t/slow-query-performance-on-small-data/88128 "2017-06-08T19:28:45Z")

</div>

Hi, My data is only 700 MB, one index, 376824 documents. I'm querying 100 words linearly on python and it is taking over 2 seconds for all 100 words. My data has 92 fields and 330k rows. for word in var: respon…

---

## [Ingest attachmnet increase file content size to index](https://discuss.elastic.co/t/ingest-attachmnet-increase-file-content-size-to-index/127624)

<div class="topic-metadata">

**Author:** [@Vikentyi](https://discuss.elastic.co/u/Vikentyi)\
**Replies:** 15\
**Last updated:** [April 20, 2018, 4:59pm UTC](https://discuss.elastic.co/t/ingest-attachmnet-increase-file-content-size-to-index/127624 "2018-04-20T16:59:37Z")

</div>

Hello. I am using Elasticsearch 5.4 and ingest-attachment plugin. It works fine with index, search, analyzing with file content up to 32kb, but I have a requirement for indexing and searching big files. I found the solu…

---

## [Setup seems to be not configuring indexes correctly?](https://discuss.elastic.co/t/setup-seems-to-be-not-configuring-indexes-correctly/163602)

<div class="topic-metadata">

**Author:** [@krainboltgreene](https://discuss.elastic.co/u/krainboltgreene)\
**Replies:** 16\
**Last updated:** [February 20, 2019, 7:26pm UTC](https://discuss.elastic.co/t/setup-seems-to-be-not-configuring-indexes-correctly/163602 "2019-02-20T19:26:35Z")

</div>

So I have logstash, elasticsearch, kibana, an apm server, an apm client, and an apm RUM client all running with the correct settings however when I click the "Setup Kibana" and attempt to view transaction details: Fir…

---

## [About Doc Values feature and out of memory during term aggregation](https://discuss.elastic.co/t/about-doc-values-feature-and-out-of-memory-during-term-aggregation/26038)

<div class="topic-metadata">

**Author:** [@linlma](https://discuss.elastic.co/u/linlma)\
**Replies:** 12\
**Last updated:** [July 24, 2015, 4:15am UTC](https://discuss.elastic.co/t/about-doc-values-feature-and-out-of-memory-during-term-aggregation/26038 "2015-07-24T04:15:37Z")

</div>

Hello Elastic Experts, I am reading article about out of memory during aggregation, for example, below articles, I do not quite understand why there is out of memory issue if we do filter + term aggregation? My feeling…

---

## [No real time logs](https://discuss.elastic.co/t/no-real-time-logs/39428)

<div class="topic-metadata">

**Author:** [@novice](https://discuss.elastic.co/u/novice)\
**Replies:** 9\
**Last updated:** [January 19, 2016, 11:18am UTC](https://discuss.elastic.co/t/no-real-time-logs/39428 "2016-01-19T11:18:15Z")

</div>

So, we have around a huge number of servers approx. 70, whose logs are being forwarded by logstash-forwarder and stored in Elasticsearch. The problem we are facing is the logs are out of order. We are not getting any rea…

---

## [No indices match pattern "filebeat-\*"](https://discuss.elastic.co/t/no-indices-match-pattern-filebeat/142938)

<div class="topic-metadata">

**Author:** [@arrigonfr](https://discuss.elastic.co/u/arrigonfr)\
**Replies:** 21\
**Last updated:** [August 6, 2018, 1:56pm UTC](https://discuss.elastic.co/t/no-indices-match-pattern-filebeat/142938 "2018-08-06T13:56:49Z")

</div>

Hello, we have installed ElasticSearch, Filebeat and Kibana 6.3.2 (No Logstash). We have them on different machines because that's how the installation was required by our boss. When I run curl /\_cat/indices?v what I ge…

---

## [How to create two kv filter](https://discuss.elastic.co/t/how-to-create-two-kv-filter/129580)

<div class="topic-metadata">

**Author:** [@lcguy](https://discuss.elastic.co/u/lcguy)\
**Replies:** 21\
**Last updated:** [May 2, 2018, 8:24am UTC](https://discuss.elastic.co/t/how-to-create-two-kv-filter/129580 "2018-05-02T08:24:14Z")

</div>

Hi, I have two syslogs input feeds from two sources. One is coming with comma and another one is with space. So, if I configure only with udp 5514, how do I split these two inputs using two filters as below. filter { …

---

## [Please provide suggestions on this](https://discuss.elastic.co/t/please-provide-suggestions-on-this/61923)

<div class="topic-metadata">

**Author:** [@banu](https://discuss.elastic.co/u/banu)\
**Replies:** 22\
**Last updated:** [October 5, 2016, 9:05am UTC](https://discuss.elastic.co/t/please-provide-suggestions-on-this/61923 "2016-10-05T09:05:01Z")

</div>

how data will be distributed when we have single index(1 shard and 1 replica) stored into 2 nodes server. Primary will be stored into one node and replica will be stored in to another node. What will happen when di…

---

## [Shard allocation is not happening as expected after adding two more nodes to our ES cluster](https://discuss.elastic.co/t/shard-allocation-is-not-happening-as-expected-after-adding-two-more-nodes-to-our-es-cluster/176919)

<div class="topic-metadata">

**Author:** [@Arunlal\_A](https://discuss.elastic.co/u/Arunlal_A)\
**Replies:** 9\
**Last updated:** [April 16, 2019, 6:43pm UTC](https://discuss.elastic.co/t/shard-allocation-is-not-happening-as-expected-after-adding-two-more-nodes-to-our-es-cluster/176919 "2019-04-16T18:43:00Z")

</div>

Hi, We are facing some issues with shard allocation (both primary and replica) after upgrading the ES cluster size. We had a three node elasticsearch cluster and we recently added two more nodes into this cluster. The …

---

## [S3 Snapshot on S3 compatible servers](https://discuss.elastic.co/t/s3-snapshot-on-s3-compatible-servers/217750)

<div class="topic-metadata">

**Author:** [@SimonJ](https://discuss.elastic.co/u/SimonJ)\
**Replies:** 11\
**Last updated:** [February 20, 2020, 10:34am UTC](https://discuss.elastic.co/t/s3-snapshot-on-s3-compatible-servers/217750 "2020-02-20T10:34:18Z")

</div>

Hi, I've been trying to setup the snapshot plugin in order to be able to backup my cluster, but I'm running into some issues with setting up the repository in ElasticSearch 7.5. I'm using OVH OpenStack Swift with S3 co…

---

## [Indices stuck after recovery from backup](https://discuss.elastic.co/t/indices-stuck-after-recovery-from-backup/189843)

<div class="topic-metadata">

**Author:** [@penguinairlines](https://discuss.elastic.co/u/penguinairlines)\
**Replies:** 9\
**Last updated:** [July 11, 2019, 7:48pm UTC](https://discuss.elastic.co/t/indices-stuck-after-recovery-from-backup/189843 "2019-07-11T19:48:30Z")

</div>

Hi, I apologize for the large number of edits, I had some trouble using the code blocks since I didn't perceive that an extra carriage return needed to precede the preformatted text. I have a small elasticsearch cluste…

---

## [Create Pie Chart in Kibana based on query DSL](https://discuss.elastic.co/t/create-pie-chart-in-kibana-based-on-query-dsl/193162)

<div class="topic-metadata">

**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\
**Replies:** 13\
**Last updated:** [September 16, 2019, 7:43pm UTC](https://discuss.elastic.co/t/create-pie-chart-in-kibana-based-on-query-dsl/193162 "2019-09-16T19:43:35Z")

</div>

Hello everyone, I have this query which mi find all message numbers that have two suffix's GET /my\_index3/\_search { "size": 0, "aggs": { "num1": { "terms": { "field": "n…

---

## [\[elastic/elasticsearch\] Cannot bulk index a JSON file greater than 100MB in Elasticsearch. Tried changing HTTP content length but it doesn't work](https://discuss.elastic.co/t/elastic-elasticsearch-cannot-bulk-index-a-json-file-greater-than-100mb-in-elasticsearch-tried-changing-http-content-length-but-it-doesnt-work/144861)

<div class="topic-metadata">

**Author:** [@shwetha\_thakur](https://discuss.elastic.co/u/shwetha_thakur)\
**Replies:** 13\
**Last updated:** [August 21, 2018, 10:58am UTC](https://discuss.elastic.co/t/elastic-elasticsearch-cannot-bulk-index-a-json-file-greater-than-100mb-in-elasticsearch-tried-changing-http-content-length-but-it-doesnt-work/144861 "2018-08-21T10:58:51Z")

</div>

I am using Elasticsearch 6.3 latest version. I am not able to bulk index a JSON file with size greater than 100MB. when I run the below command to bulk index, there will be no error but the index will not be created. I t…

---

## [Kibana index pattern don't show data with time filter field name](https://discuss.elastic.co/t/kibana-index-pattern-dont-show-data-with-time-filter-field-name/256741)

<div class="topic-metadata">

**Author:** [@gyana\_nayak](https://discuss.elastic.co/u/gyana_nayak)\
**Replies:** 9\
**Last updated:** [November 27, 2020, 2:08pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-dont-show-data-with-time-filter-field-name/256741 "2020-11-27T14:08:13Z")

</div>

i am trying to create an index from Java code to index some data but if i am creating index pattern with time filter Kibana never shows any data. Following below order while creating index with some setting and adding an…

---

## [Elastic Search not update config (elasticsearch.yml)](https://discuss.elastic.co/t/elastic-search-not-update-config-elasticsearch-yml/208208)

<div class="topic-metadata">

**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\
**Replies:** 12\
**Last updated:** [November 27, 2019, 9:34am UTC](https://discuss.elastic.co/t/elastic-search-not-update-config-elasticsearch-yml/208208 "2019-11-27T09:34:43Z")

</div>

I changed the configuration to elasticsearch.yml Current part of the configuration: xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.verification\_mode: certificate …

---

## [Elasticsearch, apm with node.js, kibana and docker - No services found](https://discuss.elastic.co/t/elasticsearch-apm-with-node-js-kibana-and-docker-no-services-found/150708)

<div class="topic-metadata">

**Author:** [@Faros](https://discuss.elastic.co/u/Faros)\
**Replies:** 9\
**Last updated:** [October 3, 2018, 3:17pm UTC](https://discuss.elastic.co/t/elasticsearch-apm-with-node-js-kibana-and-docker-no-services-found/150708 "2018-10-03T15:17:18Z")

</div>

I am trying to monitor my express API with apm-agent-nodejs (version 1.12.0) Everything seems to works fine (no errors) but going to http://localhost:5601/app/apm show No services were found, I don't have any search fil…

---

## [Problem elastic "document\_parsing\_exception" type field](https://discuss.elastic.co/t/problem-elastic-document-parsing-exception-type-field/356690)

<div class="topic-metadata">

**Author:** [@San9](https://discuss.elastic.co/u/San9)\
**Replies:** 14\
**Last updated:** [April 9, 2024, 12:09pm UTC](https://discuss.elastic.co/t/problem-elastic-document-parsing-exception-type-field/356690 "2024-04-09T12:09:12Z")

</div>

Hello, I have encountered a common problem that many Elastic users face, but I have not yet found an answer to it and I do not understand how to solve it so that I do not lose messages that are sent by Elastic. I use fi…

---

## [How many records a shard can have?](https://discuss.elastic.co/t/how-many-records-a-shard-can-have/105034)

<div class="topic-metadata">

**Author:** [@PinkiMondal](https://discuss.elastic.co/u/PinkiMondal)\
**Replies:** 19\
**Last updated:** [October 25, 2017, 5:20am UTC](https://discuss.elastic.co/t/how-many-records-a-shard-can-have/105034 "2017-10-25T05:20:09Z")

</div>

What space or records a shard can have? How to reallocate shards when primary shard is full? How much data a index can have? Thanks in advance

---

## [Time Zone in CEF FB Module](https://discuss.elastic.co/t/time-zone-in-cef-fb-module/215188)

<div class="topic-metadata">

**Author:** [@culprit](https://discuss.elastic.co/u/culprit)\
**Replies:** 13\
**Last updated:** [January 21, 2020, 9:41am UTC](https://discuss.elastic.co/t/time-zone-in-cef-fb-module/215188 "2020-01-21T09:41:26Z")

</div>

I am new to all this, so bear with me if i use the wrong terminology. Working on getting Fortigate logs into ES. Currently the path the events take are: Fortgate -\> FortiAnalyzer (forwarded in CEF format) -\> FileBea…

---

## [Telnet Data Feed logstash into elastic](https://discuss.elastic.co/t/telnet-data-feed-logstash-into-elastic/40282)

<div class="topic-metadata">

**Author:** [@Joseph\_Schwartz](https://discuss.elastic.co/u/Joseph_Schwartz)\
**Replies:** 9\
**Last updated:** [February 8, 2016, 4:07pm UTC](https://discuss.elastic.co/t/telnet-data-feed-logstash-into-elastic/40282 "2016-02-08T16:07:36Z")

</div>

I'm a N00b to ELK and would like so assistance setting up a data collection from our pbx. it generates reports via socket in a CSV data format via TCP port 2001. How do I setup logstash to connect to the socket and par…

---

## [Unable to start logstash service error code in log](https://discuss.elastic.co/t/unable-to-start-logstash-service-error-code-in-log/126812)

<div class="topic-metadata">

**Author:** [@heskez](https://discuss.elastic.co/u/heskez)\
**Replies:** 9\
**Last updated:** [April 5, 2018, 10:29pm UTC](https://discuss.elastic.co/t/unable-to-start-logstash-service-error-code-in-log/126812 "2018-04-05T22:29:07Z")

</div>

Hi there, When I try to start logstash "systemctl start logstash" I see these error messages in the log: \[2018-04-04T21:46:39,189\]\[WARN \]\[logstash.outputs.elasticsearch\] Restored connection to ES instance {:url=\>"http:…

---

## [Missing Logs on Elasticsearch Using OTEL Collector](https://discuss.elastic.co/t/missing-logs-on-elasticsearch-using-otel-collector/373449)

<div class="topic-metadata">

**Author:** [@Fuad\_Arohunfara](https://discuss.elastic.co/u/Fuad_Arohunfara)\
**Replies:** 40\
**Last updated:** [February 2, 2025, 9:39pm UTC](https://discuss.elastic.co/t/missing-logs-on-elasticsearch-using-otel-collector/373449 "2025-02-02T21:39:04Z")

</div>

Logs are being shipped using otelcollector to Kibana from our kubernetes cluster but there appears to be some logs missing -- Find attached error any help will be appreciated. error elasticsearchexporter@v0.115.0/bulk…

---

## [Custom Timestamp in Kibana is 2 hours off](https://discuss.elastic.co/t/custom-timestamp-in-kibana-is-2-hours-off/309650)

<div class="topic-metadata">

**Author:** [@azeiner](https://discuss.elastic.co/u/azeiner)\
**Replies:** 12\
**Last updated:** [July 21, 2022, 11:51am UTC](https://discuss.elastic.co/t/custom-timestamp-in-kibana-is-2-hours-off/309650 "2022-07-21T11:51:25Z")

</div>

I'm importing and converting data from a textfile into elastic via the PHP API which is provided by elastic. Now i'm encountering that the data is 2 hours off (depending on summertime settings) in kibana, not when i'm s…

---

## [Logstash writing into wrong index](https://discuss.elastic.co/t/logstash-writing-into-wrong-index/180421)

<div class="topic-metadata">

**Author:** [@chandukreddi](https://discuss.elastic.co/u/chandukreddi)\
**Replies:** 11\
**Last updated:** [May 13, 2019, 5:55pm UTC](https://discuss.elastic.co/t/logstash-writing-into-wrong-index/180421 "2019-05-13T17:55:51Z")

</div>

Hello Team, I have 2 conf files you can see below 1st conf file using output index alias "stats\_write\_swift\_proxy\_alias" to process proxy-nodes-monitor-stats-.csv & proxy-nodes-latency-stats-.csv files but I see this a…

---

## [Custom logos for Kibana 7.8.1](https://discuss.elastic.co/t/custom-logos-for-kibana-7-8-1/244097)

<div class="topic-metadata">

**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\
**Replies:** 18\
**Last updated:** [August 13, 2020, 9:42pm UTC](https://discuss.elastic.co/t/custom-logos-for-kibana-7-8-1/244097 "2020-08-13T21:42:11Z")

</div>

Hi, I recently moved to ELK stack 7.8.1. It was hard for me to customize previous version 6.8.9, but after make a cocktail of workarounds, I was finally able to add own logo, colors and texts. There is an old thread to…

---

## [Kibana 4 and KOPF showing deleted documents deleted from Elasticsearch](https://discuss.elastic.co/t/kibana-4-and-kopf-showing-deleted-documents-deleted-from-elasticsearch/33928)

<div class="topic-metadata">

**Author:** [@inderjeet26](https://discuss.elastic.co/u/inderjeet26)\
**Replies:** 10\
**Last updated:** [November 12, 2015, 10:47pm UTC](https://discuss.elastic.co/t/kibana-4-and-kopf-showing-deleted-documents-deleted-from-elasticsearch/33928 "2015-11-12T22:47:11Z")

</div>

I am facing the same issue. I deleted some documents from elasticsearch indices for specific type, using the curl -XDELETE http://localhost:9200/logstash\*/xyztype When I query the elasticsearch for the same type it doe…

[Previous page](https://discuss.elastic.co/top.md?page=109&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=111&per_page=50&period=all)
