# Top **URL:** https://discuss.elastic.co/top.md?page=1103&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1104 --- ## [Issue with APM monitoring for docker containers](https://discuss.elastic.co/t/issue-with-apm-monitoring-for-docker-containers/130110)
**Author:** [@calshankar](https://discuss.elastic.co/u/calshankar)\ **Replies:** 4\ **Last updated:** [May 3, 2018, 6:50am UTC](https://discuss.elastic.co/t/issue-with-apm-monitoring-for-docker-containers/130110 "2018-05-03T06:50:41Z")
I was able to successfully setup the EFK stack for docker container on a single host but i'm unable to get the agent from the app to communicate with the APM. I looked into the documentation & added the npm module & init… --- ## [How to archive the messages from logstash](https://discuss.elastic.co/t/how-to-archive-the-messages-from-logstash/123719)
**Author:** [@Sunil\_Villuri](https://discuss.elastic.co/u/Sunil_Villuri)\ **Replies:** 4\ **Last updated:** [March 13, 2018, 2:38pm UTC](https://discuss.elastic.co/t/how-to-archive-the-messages-from-logstash/123719 "2018-03-13T14:38:40Z")
Hi All, i want to archive the old files for every month automatically.Could you please let us know the possibility and mechanism --- ## [Machine Learning: Could not create job](https://discuss.elastic.co/t/machine-learning-could-not-create-job/122037)
**Author:** [@NOUR](https://discuss.elastic.co/u/NOUR)\ **Replies:** 4\ **Last updated:** [March 6, 2018, 8:37am UTC](https://discuss.elastic.co/t/machine-learning-could-not-create-job/122037 "2018-03-06T08:37:01Z")
hello every one, In fact i use the X pack 6.2.2 and i can't create any type of job(simple,adv,multi...) Can someone help me? Thanks, \[1\] \[2\] NOUR --- ## [Scaling Elasticsearch for 40GB of data](https://discuss.elastic.co/t/scaling-elasticsearch-for-40gb-of-data/9107)
**Author:** [@Jason\_Yankus](https://discuss.elastic.co/u/Jason_Yankus)\ **Replies:** 4\ **Last updated:** [September 26, 2012, 4:58am UTC](https://discuss.elastic.co/t/scaling-elasticsearch-for-40gb-of-data/9107 "2012-09-26T04:58:25Z")
Greetings, I am migrating a 40GB volume of mixed metadata and unstructured text into Elasticsearch (~500,000 documents with metadata + extracted text) and need some recommendations about setting up a cluster for h… --- ## [Taming ElasticSearch Field Explosion](https://discuss.elastic.co/t/taming-elasticsearch-field-explosion/258433)
**Author:** [@tjohnell](https://discuss.elastic.co/u/tjohnell)\ **Replies:** 1\ **Last updated:** [December 11, 2020, 4:41pm UTC](https://discuss.elastic.co/t/taming-elasticsearch-field-explosion/258433 "2020-12-11T16:41:39Z")
Hello all, I recently created a post on how my company, Handy, reduced the number of fields within our main ES index, and I wanted to share with the ES community. Any feedback is appreciated! Best, Tom --- ## [Is ML mainly for tracking anomalies?](https://discuss.elastic.co/t/is-ml-mainly-for-tracking-anomalies/101896)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 4\ **Last updated:** [September 28, 2017, 6:27am UTC](https://discuss.elastic.co/t/is-ml-mainly-for-tracking-anomalies/101896 "2017-09-28T06:27:36Z")
I'm getting started with Machine Learning with x-pack and it seems like the main capacity of it is to see anomalies, which I'm not in dire need of. I'm not sure if ML can help me with my use case so I'd appreciate if any… --- ## [Crypto/rsa: verification error - using heartbeat](https://discuss.elastic.co/t/crypto-rsa-verification-error-using-heartbeat/239427)
**Author:** [@Peter\_Steenbergen](https://discuss.elastic.co/u/Peter_Steenbergen)\ **Replies:** 6\ **Last updated:** [July 3, 2020, 7:21am UTC](https://discuss.elastic.co/t/crypto-rsa-verification-error-using-heartbeat/239427 "2020-07-03T07:21:31Z")
Hi, I am getting a crypto/rsa error: verification error with heartbeat version 7.4.2. The website is using LetsEncrypt and the SSL was verified with ssllabs with a grade of A. What can be the issue here? - type: http… --- ## [Detecting whether elasticsearch has finished indexing after adding documents](https://discuss.elastic.co/t/detecting-whether-elasticsearch-has-finished-indexing-after-adding-documents/16422)
**Author:** [@Andrew\_Coulton](https://discuss.elastic.co/u/Andrew_Coulton)\ **Replies:** 6\ **Last updated:** [March 19, 2014, 9:07am UTC](https://discuss.elastic.co/t/detecting-whether-elasticsearch-has-finished-indexing-after-adding-documents/16422 "2014-03-19T09:07:03Z")
Hi, Is there a way to check whether the index (and couchdb river) are up to date with changes after we add a batch of documents? We have a workflow that involves adding new content to the index and then running so… --- ## [Kibana visualize using unique count by latest records](https://discuss.elastic.co/t/kibana-visualize-using-unique-count-by-latest-records/316236)
**Author:** [@Ibrahim\_Z\_HIDIR](https://discuss.elastic.co/u/Ibrahim_Z_HIDIR)\ **Replies:** 2\ **Last updated:** [October 24, 2022, 5:29pm UTC](https://discuss.elastic.co/t/kibana-visualize-using-unique-count-by-latest-records/316236 "2022-10-24T17:29:55Z")
Hi all After some search and try, I could't find a way to solve my problem. I just want to display the counts of records depending of latest records of some repeating columns. For Example, the latest status of "A" i… --- ## [ELK Docker: Prebuild X-Pack not working](https://discuss.elastic.co/t/elk-docker-prebuild-x-pack-not-working/107640)
**Author:** [@n0wis](https://discuss.elastic.co/u/n0wis)\ **Replies:** 2\ **Last updated:** [November 18, 2017, 9:37am UTC](https://discuss.elastic.co/t/elk-docker-prebuild-x-pack-not-working/107640 "2017-11-18T09:37:06Z")
Hello ! i'm trying to build an Elastic Stack (alias ELK) with Docker and Docker-compose, but I'm blocking on issue with X-Pack, who's prebuild into Docker's images. i'm using officials images: docker/elk/elasticsearch… --- ## [Specific mount point monitoring using Metricbeat](https://discuss.elastic.co/t/specific-mount-point-monitoring-using-metricbeat/87548)
**Author:** [@raazeev64](https://discuss.elastic.co/u/raazeev64)\ **Replies:** 2\ **Last updated:** [June 1, 2017, 7:01pm UTC](https://discuss.elastic.co/t/specific-mount-point-monitoring-using-metricbeat/87548 "2017-06-01T19:01:32Z")
I want to monitor only limited number of mount points using metric beat. How do I filter out the rest? I did come across a filter - filters: - drop\_event.when.regexp.mount\_point: '^/(sys|cgroup|proc|dev|etc|host)($|… --- ## [Understanding cpu metrics](https://discuss.elastic.co/t/understanding-cpu-metrics/87544)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [May 31, 2017, 7:41am UTC](https://discuss.elastic.co/t/understanding-cpu-metrics/87544 "2017-05-31T07:41:10Z")
Hi all, I am running ELK 5.1.2 as single instance on RHEL7.x. I also installed basic license to activate monitoring. We made some loadtest of a new application which should be monitored in ELK, which contained a new lo… --- ## [Very high CPU usage of ES in idle state](https://discuss.elastic.co/t/very-high-cpu-usage-of-es-in-idle-state/11499)
**Author:** [@Talha\_Khan](https://discuss.elastic.co/u/Talha_Khan)\ **Replies:** 2\ **Last updated:** [April 9, 2013, 6:44pm UTC](https://discuss.elastic.co/t/very-high-cpu-usage-of-es-in-idle-state/11499 "2013-04-09T18:44:22Z")
I have set up a 1 node cluster of ES using ES version 0.19.11 for storing some logs. After inserting about 5000 logs I now see that my CPU usage is rocketing above 100% constanltly even when no/very few search querie… --- ## [Cannot create a Transport Client in Java API](https://discuss.elastic.co/t/cannot-create-a-transport-client-in-java-api/1072)
**Author:** [@Aymen\_Zaghouani](https://discuss.elastic.co/u/Aymen_Zaghouani)\ **Replies:** 1\ **Last updated:** [May 21, 2015, 1:13pm UTC](https://discuss.elastic.co/t/cannot-create-a-transport-client-in-java-api/1072 "2015-05-21T13:13:23Z")
I've recently started exploring the world of search, and am trying to use ES as the index for my MongoDB. I've managed to integrate them successfully, but I find the search API rather complex and confusing. The Java API … --- ## [Logstash 'file\_chunk\_size'](https://discuss.elastic.co/t/logstash-file-chunk-size/308659)
**Author:** [@ChinigamiHunter](https://discuss.elastic.co/u/ChinigamiHunter)\ **Replies:** 3\ **Last updated:** [July 5, 2022, 2:23pm UTC](https://discuss.elastic.co/t/logstash-file-chunk-size/308659 "2022-07-05T14:23:06Z")
hi all, i have some files in a folder and i want to index them in Elasticsearch using logstash. some of the files are indexed, but i get a lot of this error i don't know why : \[2022-06-30T16:15:24,966\]\[INFO \]\[filewatc… --- ## [Log stash pipeline not connecting to Elasticsearch](https://discuss.elastic.co/t/log-stash-pipeline-not-connecting-to-elasticsearch/307259)
**Author:** [@harijld](https://discuss.elastic.co/u/harijld)\ **Replies:** 3\ **Last updated:** [June 16, 2022, 7:07am UTC](https://discuss.elastic.co/t/log-stash-pipeline-not-connecting-to-elasticsearch/307259 "2022-06-16T07:07:49Z")
HI, I am getting below error while establishing connection from logstash pipeline to Elasticsearch. I am able to do the telnet from logstash server to Elasticsearch server but not able to establish the connection. logs… --- ## [Elasticsearch index error](https://discuss.elastic.co/t/elasticsearch-index-error/260634)
**Author:** [@abu.sayeed](https://discuss.elastic.co/u/abu.sayeed)\ **Replies:** 4\ **Last updated:** [January 11, 2021, 6:06am UTC](https://discuss.elastic.co/t/elasticsearch-index-error/260634 "2021-01-11T06:06:30Z")
elasticsearch.yml network.host: localhost http.port: 9200 transport.host: localhost transport.tcp.port: 9300 discovery.seed\_hosts: localhost:9300 cluster.initial\_master\_nodes: ${HOSTNAME} action.auto\_create\_inde… --- ## [Local + cross-cluster search as described in docs is not working](https://discuss.elastic.co/t/local-cross-cluster-search-as-described-in-docs-is-not-working/217271)
**Author:** [@matoro](https://discuss.elastic.co/u/matoro)\ **Replies:** 4\ **Last updated:** [February 5, 2020, 9:54am UTC](https://discuss.elastic.co/t/local-cross-cluster-search-as-described-in-docs-is-not-working/217271 "2020-02-05T09:54:20Z")
Hi, I am trying to create an index pattern in Kibana that will search both local and remote clusters, but I can only ever get it to do one or the other. The approach mentioned in the documentation and in the below forum… --- ## [Azure Marketplace Elasticsearch template failing to deploy](https://discuss.elastic.co/t/azure-marketplace-elasticsearch-template-failing-to-deploy/171964)
**Author:** [@Jonathan\_Relf](https://discuss.elastic.co/u/Jonathan_Relf)\ **Replies:** 4\ **Last updated:** [March 19, 2019, 9:45am UTC](https://discuss.elastic.co/t/azure-marketplace-elasticsearch-template-failing-to-deploy/171964 "2019-03-19T09:45:29Z")
I'm trying to deploy the Elasticsearch marketplace template ( https://azuremarketplace.microsoft.com/en-us/marketplace/apps/elastic.elasticsearch?tab=Overview ) and it's failed during the deployment. The kibana and logs… --- ## [Can you force primary shards to only be on certain nodes, and replica shards on other nodes?](https://discuss.elastic.co/t/can-you-force-primary-shards-to-only-be-on-certain-nodes-and-replica-shards-on-other-nodes/115465)
**Author:** [@ankh](https://discuss.elastic.co/u/ankh)\ **Replies:** 4\ **Last updated:** [January 16, 2018, 4:30am UTC](https://discuss.elastic.co/t/can-you-force-primary-shards-to-only-be-on-certain-nodes-and-replica-shards-on-other-nodes/115465 "2018-01-16T04:30:38Z")
We have a cluster that will contain a mix of hosts, some with spinning disks and some with SSDs. We would like to index only to the hosts with spinning disks, and serve queries only from the hosts with SSDs. How can we… --- ## [Winlogbeat 6.0.0 Registry File](https://discuss.elastic.co/t/winlogbeat-6-0-0-registry-file/110384)
**Author:** [@KRasekhi](https://discuss.elastic.co/u/KRasekhi)\ **Replies:** 4\ **Last updated:** [December 5, 2017, 9:47pm UTC](https://discuss.elastic.co/t/winlogbeat-6-0-0-registry-file/110384 "2017-12-05T21:47:19Z")
Hi, I noticed that in 6.0 the registry file in c:\\ProgramData\\winlogbeat.winlogbeat.yml isn't populating the same - am i missing something or is this intentional? 6.0.0 update\_time: 2017-12-05T15:16:38.2530588Z event\_… --- ## [Ids query is faster very much than ids filter ,why?](https://discuss.elastic.co/t/ids-query-is-faster-very-much-than-ids-filter-why/45421)
**Author:** [@whybangbang](https://discuss.elastic.co/u/whybangbang)\ **Replies:** 4\ **Last updated:** [April 8, 2016, 4:45am UTC](https://discuss.elastic.co/t/ids-query-is-faster-very-much-than-ids-filter-why/45421 "2016-04-08T04:45:15Z")
i send a ids filter to es ,the took in response is average of 30,but when replace by ids query,the took is 1 or 2. why? --- ## [Monitoring whether the index is merging at a moment](https://discuss.elastic.co/t/monitoring-whether-the-index-is-merging-at-a-moment/25206)
**Author:** [@Ilija\_Subasic1](https://discuss.elastic.co/u/Ilija_Subasic1)\ **Replies:** 4\ **Last updated:** [July 10, 2015, 8:26am UTC](https://discuss.elastic.co/t/monitoring-whether-the-index-is-merging-at-a-moment/25206 "2015-07-10T08:26:12Z")
Is the changes in number of segments per shard a good indication that merging happened (is happening)? Is there a way to monitor when merging happens. I am running some online indexing, and it looks like merging happens… --- ## [Deleted index shows up after cluster restart](https://discuss.elastic.co/t/deleted-index-shows-up-after-cluster-restart/12801)
**Author:** [@Jaguar](https://discuss.elastic.co/u/Jaguar)\ **Replies:** 4\ **Last updated:** [July 16, 2013, 4:20pm UTC](https://discuss.elastic.co/t/deleted-index-shows-up-after-cluster-restart/12801 "2013-07-16T16:20:44Z")
Hi, We are maintaining some daily indexes in multi-nodes cluster. The old indexes will be deleted by schedule. Recently the cluster was restarted, and a different master node was elected. Quite a few \*delet… --- ## [Fielddata is disabled on \[host.hostname\] in \[filebeat-8.10.4-2023.10.17\]](https://discuss.elastic.co/t/fielddata-is-disabled-on-host-hostname-in-filebeat-8-10-4-2023-10-17/345246)
**Author:** [@whanklee](https://discuss.elastic.co/u/whanklee)\ **Replies:** 5\ **Last updated:** [October 18, 2023, 8:07am UTC](https://discuss.elastic.co/t/fielddata-is-disabled-on-host-hostname-in-filebeat-8-10-4-2023-10-17/345246 "2023-10-18T08:07:28Z")
Hi there, I got the following error code: Index: filebeat-8.10.4-2023.10.17 Type: illegal\_argument\_exception Node: rQ6bZR\_YQ3Ken74LUR-Oaw Reason: Fielddata is disabled on \[host.hostname\] in \[filebeat-8.10.4-2023.10.… --- ## [\[HELP\] Cannot receive data from winlogbeat on Windows Server 2012 R2](https://discuss.elastic.co/t/help-cannot-receive-data-from-winlogbeat-on-windows-server-2012-r2/260092)
**Author:** [@lachezar.uzunov](https://discuss.elastic.co/u/lachezar.uzunov)\ **Replies:** 5\ **Last updated:** [January 7, 2021, 6:59am UTC](https://discuss.elastic.co/t/help-cannot-receive-data-from-winlogbeat-on-windows-server-2012-r2/260092 "2021-01-07T06:59:00Z")
Hello everyone, I am struggling at receiving logs from winlogbeat on Windows Server 2012 R2. Things to mention: On Windows Server 2016+ its working completely fine. On Windows 10 PC (Pro/Home) is working completely fi… --- ## [Logstash can not output to elasticsearch?](https://discuss.elastic.co/t/logstash-can-not-output-to-elasticsearch/101119)
**Author:** [@bejjm](https://discuss.elastic.co/u/bejjm)\ **Replies:** 5\ **Last updated:** [September 20, 2017, 11:24am UTC](https://discuss.elastic.co/t/logstash-can-not-output-to-elasticsearch/101119 "2017-09-20T11:24:11Z")
version : logstash 5.0.2 \\elasticsearch 5.0.2 1.My configuration file in /etc/logstash/config.d/test.conf： input { file{ path =\> "/home/installer/test//logs/test\_client.log" } } filter { grok { match =\> {"messag… --- ## [Is it possible to use kibana 4 with tomcat?](https://discuss.elastic.co/t/is-it-possible-to-use-kibana-4-with-tomcat/502)
**Author:** [@paul\_nibin](https://discuss.elastic.co/u/paul_nibin)\ **Replies:** 1\ **Last updated:** [May 11, 2015, 3:45pm UTC](https://discuss.elastic.co/t/is-it-possible-to-use-kibana-4-with-tomcat/502 "2015-05-11T15:45:25Z")
I already saw a thread, https://github.com/elastic/kibana/issues/1628. where this is already discussed. In a comment, https://github.com/elastic/kibana/issues/1628#issuecomment-58611294, it was written like "I suggest … --- ## [Kibana service not running](https://discuss.elastic.co/t/kibana-service-not-running/263470)
**Author:** [@srcarter](https://discuss.elastic.co/u/srcarter)\ **Replies:** 2\ **Last updated:** [February 9, 2021, 5:18pm UTC](https://discuss.elastic.co/t/kibana-service-not-running/263470 "2021-02-09T17:18:19Z")
Hi there, I recently had our IT build me a new computer that I am dedicating for a simple elasticsearch/kibana machine. I had previously built my own machine for the same purpose and was successful, that machine was ru… --- ## [Processing a json file in filebeat](https://discuss.elastic.co/t/processing-a-json-file-in-filebeat/251438)
**Author:** [@humartinez](https://discuss.elastic.co/u/humartinez)\ **Replies:** 2\ **Last updated:** [October 12, 2020, 8:30am UTC](https://discuss.elastic.co/t/processing-a-json-file-in-filebeat/251438 "2020-10-12T08:30:29Z")
Hi there!, I got a filebeat config (see further below) that is currently working, and Its supposed to read a log file written in JSON and then send it, in this case to a kafka topic. The the log message is stored in un… --- ## [There's no "OUT\_BYTES" field when I parse netflow through logstash](https://discuss.elastic.co/t/theres-no-out-bytes-field-when-i-parse-netflow-through-logstash/117777)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 2\ **Last updated:** [January 31, 2018, 5:15pm UTC](https://discuss.elastic.co/t/theres-no-out-bytes-field-when-i-parse-netflow-through-logstash/117777 "2018-01-31T17:15:18Z")
As title, when I use logstash to parse netflow and ingest flow data into elasticsearch, I found the data in ES is lack of "OUT\_BYTES" field. this is the data in ES: { "\_index": "netflow-%{year}-%{month}-%{day}", "\_… --- ## [Scrolling using the Scala API to ES](https://discuss.elastic.co/t/scrolling-using-the-scala-api-to-es/20697)
**Author:** [@Ramdev\_Wudali](https://discuss.elastic.co/u/Ramdev_Wudali)\ **Replies:** 2\ **Last updated:** [February 16, 2015, 5:54am UTC](https://discuss.elastic.co/t/scrolling-using-the-scala-api-to-es/20697 "2015-02-16T05:54:33Z")
Hi: What is the syntax for using the scroll API for searches using the scala interface (elastic4s) ? I am not able to find suitable documentation for this and any help is appreciated. Thanks Ramdev -- … --- ## [Why does ES 7.3.1 come with JDK 12.0.2, which is not LTS?](https://discuss.elastic.co/t/why-does-es-7-3-1-come-with-jdk-12-0-2-which-is-not-lts/199716)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 6\ **Last updated:** [September 25, 2019, 12:29am UTC](https://discuss.elastic.co/t/why-does-es-7-3-1-come-with-jdk-12-0-2-which-is-not-lts/199716 "2019-09-25T00:29:19Z")
The online guide recommends using LTS version of JDK. But the one it bundles with (12.0.2) is not LTS. Should I just use that version or downgrade? I got the bundled version from the official docker image for 7.3.1 … --- ## [Unable to retreive data from index using elasticsearch input plugin in logstash](https://discuss.elastic.co/t/unable-to-retreive-data-from-index-using-elasticsearch-input-plugin-in-logstash/181375)
**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\ **Replies:** 6\ **Last updated:** [May 16, 2019, 5:11pm UTC](https://discuss.elastic.co/t/unable-to-retreive-data-from-index-using-elasticsearch-input-plugin-in-logstash/181375 "2019-05-16T17:11:51Z")
input { elasticsearch { hosts =\> \["172.25.8.45:9200"\] index =\> \["heartbeat-\*"\] # query =\> '{ "query": { "match\_all": {} } }' # query =\> '{ "query": { "bool": {"must" : { "term" : { "monitor.status" : … --- ## [Snapshot failed, all data cannot be restored](https://discuss.elastic.co/t/snapshot-failed-all-data-cannot-be-restored/159286)
**Author:** [@Richardms](https://discuss.elastic.co/u/Richardms)\ **Replies:** 6\ **Last updated:** [December 4, 2018, 10:09am UTC](https://discuss.elastic.co/t/snapshot-failed-all-data-cannot-be-restored/159286 "2018-12-04T10:09:35Z")
I have 3 nodes, lets say node1, node1, and node3 i have succesfully restored the data from my nodes, but the data decrease fro, 380k data to 77k data. this is what i get from backup data "hits": { "total": 76908, "… --- ## [Maintenance Mode enabled after upgrade](https://discuss.elastic.co/t/maintenance-mode-enabled-after-upgrade/108125)
**Author:** [@Lafunamor](https://discuss.elastic.co/u/Lafunamor)\ **Replies:** 3\ **Last updated:** [November 20, 2017, 4:53pm UTC](https://discuss.elastic.co/t/maintenance-mode-enabled-after-upgrade/108125 "2017-11-20T16:53:00Z")
Hi there After upgrading my ECE installation from version 1.0.2 to 1.1.0 all allocator nodes which have clusters on them are in maintenance mode. Allocator nodes without any elasticsearch deployments aren't. Is this be… --- ## [Installation of logstash-input-kafka without internet connection](https://discuss.elastic.co/t/installation-of-logstash-input-kafka-without-internet-connection/92625)
**Author:** [@zeenon](https://discuss.elastic.co/u/zeenon)\ **Replies:** 3\ **Last updated:** [July 13, 2017, 6:48am UTC](https://discuss.elastic.co/t/installation-of-logstash-input-kafka-without-internet-connection/92625 "2017-07-13T06:48:41Z")
Hi, I want to install logstash-input-kafka without internet connection on the server. After a lot of search, I have downloaded a gem file: logstash-input-kafka-4.2.0.gem Now, I am running the command # /opt/logstash… --- ## [Wrong Timestamp](https://discuss.elastic.co/t/wrong-timestamp/44930)
**Author:** [@Libfy](https://discuss.elastic.co/u/Libfy)\ **Replies:** 3\ **Last updated:** [March 20, 2016, 2:58pm UTC](https://discuss.elastic.co/t/wrong-timestamp/44930 "2016-03-20T14:58:59Z")
Hi, I have an issue with logstash. all logs are prefixed with a wrong timestamp: the year is 2000. The rest of the date is good. here is my output section from logstash.conf: output { elasticsearch { … --- ## [Failed to load plugin class \[org.elasticsearch.xpack.core.XPackPlugin](https://discuss.elastic.co/t/failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/248169)
**Author:** [@JB06](https://discuss.elastic.co/u/JB06)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 4:44pm UTC](https://discuss.elastic.co/t/failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/248169 "2020-09-10T16:44:13Z")
Hello, Version "7.8.0" I use this command /usr/share/elasticsearch/bin/elasticsearch-certutil cert ca --pem --silent -in /var/tmp/instance.yml --out /var/tmp/certs.zip --pass $PASSWORD I copy result in /etc/elasticse… --- ## [\ When trying send data to Redis from Logstash](https://discuss.elastic.co/t/redis-timeouterror-connection-timed-out-when-trying-send-data-to-redis-from-logstash/81995)
**Author:** [@ash007](https://discuss.elastic.co/u/ash007)\ **Replies:** 1\ **Last updated:** [April 11, 2017, 9:44pm UTC](https://discuss.elastic.co/t/redis-timeouterror-connection-timed-out-when-trying-send-data-to-redis-from-logstash/81995 "2017-04-11T21:44:30Z")
Hello, We are facing the following error when trying to send data to redis. \[2017-04-11T13:36:02,010\]\[WARN \]\[logstash.outputs.redis \] Failed to flush outgoing items {:outgoing\_count=\>50, :exception=\>"Redis::TimeoutE… --- ## [Hive cannot read @timestamp from ES which format is unix time](https://discuss.elastic.co/t/hive-cannot-read-timestamp-from-es-which-format-is-unix-time/806)
**Author:** [@stoneling](https://discuss.elastic.co/u/stoneling)\ **Replies:** 1\ **Last updated:** [May 20, 2015, 8:57am UTC](https://discuss.elastic.co/t/hive-cannot-read-timestamp-from-es-which-format-is-unix-time/806 "2015-05-20T08:57:22Z")
Hive cannot read @timestamp from ES which format is unix time hive require timestamp format must be yyyy-mm-dd hh:mm:ss,how to read unix time . I have an apache Hadoop instance 2.5.2 and Hive 0.13.1 I have install… --- ## [Regex pattern to search in kibana](https://discuss.elastic.co/t/regex-pattern-to-search-in-kibana/227089)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 2\ **Last updated:** [April 8, 2020, 2:43pm UTC](https://discuss.elastic.co/t/regex-pattern-to-search-in-kibana/227089 "2020-04-08T14:43:00Z")
HI, I want to search using regex pattern in kibana. i have message and i want to search specific keyword and how could i achieve it. i tried below and its gets match everything message:.\*User\_id/\[0-9\]+/ --- ## [Logstash not receiving remote tcp data](https://discuss.elastic.co/t/logstash-not-receiving-remote-tcp-data/182783)
**Author:** [@Barry\_C](https://discuss.elastic.co/u/Barry_C)\ **Replies:** 2\ **Last updated:** [May 26, 2019, 9:32am UTC](https://discuss.elastic.co/t/logstash-not-receiving-remote-tcp-data/182783 "2019-05-26T09:32:52Z")
I am new to ELK and I spent days to troubleshoot and still not able to find out what's wrong with my configuration. The following is my problem and what I have done to troubleshoot I setup a basic ELK 7.1 on a single… --- ## [Setting \[cluster\] must not be empty](https://discuss.elastic.co/t/setting-cluster-must-not-be-empty/178739)
**Author:** [@Kiran\_Kumar\_Mohanty](https://discuss.elastic.co/u/Kiran_Kumar_Mohanty)\ **Replies:** 2\ **Last updated:** [May 2, 2019, 1:14am UTC](https://discuss.elastic.co/t/setting-cluster-must-not-be-empty/178739 "2019-05-02T01:14:45Z")
Version - 7.0.0 While I am trying to start elasticsearch from the command line using below command getting an error "setting \[cluster\] must not be empty" Command ./bin/elasticsearch -Ecluster.name=my\_cluster -Enode.na… --- ## [Replicating "\_all" functionality in v6 via "copy\_to" mapping parameter?](https://discuss.elastic.co/t/replicating-all-functionality-in-v6-via-copy-to-mapping-parameter/147787)
**Author:** [@alexu](https://discuss.elastic.co/u/alexu)\ **Replies:** 2\ **Last updated:** [September 10, 2018, 5:35pm UTC](https://discuss.elastic.co/t/replicating-all-functionality-in-v6-via-copy-to-mapping-parameter/147787 "2018-09-10T17:35:00Z")
For some reason we always assumed that removal of the "\_all" field in v6 is not a big deal and we can always create a custom "\_all" field via "copy\_to" mapping option. But it appears that "copy\_to" cannot copy fields fr… --- ## [Logstash input error](https://discuss.elastic.co/t/logstash-input-error/113847)
**Author:** [@agonex](https://discuss.elastic.co/u/agonex)\ **Replies:** 2\ **Last updated:** [January 4, 2018, 3:43pm UTC](https://discuss.elastic.co/t/logstash-input-error/113847 "2018-01-04T15:43:10Z")
Hi I need help with a issue in logstash... I am testing a version 6 ELK and i have problems with inputs, i triying add another input type multiline and logs say me that: 2018-01-02T21:09:28.628326533Z \[2018-01-02T21:09… --- ## [Is KEYWORD data type analyzed as well?](https://discuss.elastic.co/t/is-keyword-data-type-analyzed-as-well/71847)
**Author:** [@kasia](https://discuss.elastic.co/u/kasia)\ **Replies:** 2\ **Last updated:** [January 17, 2017, 11:40am UTC](https://discuss.elastic.co/t/is-keyword-data-type-analyzed-as-well/71847 "2017-01-17T11:40:27Z")
Hi, I thought inverted indexes are being created for all the fields, independently on their data types, but only TEXT fields are being analyzed before indexing... but now, after reading the documentation (Reference 5.1)… --- ## [OverlappingFileLockException](https://discuss.elastic.co/t/overlappingfilelockexception/4643)
**Author:** [@James\_Cook](https://discuss.elastic.co/u/James_Cook)\ **Replies:** 2\ **Last updated:** [June 16, 2011, 11:10pm UTC](https://discuss.elastic.co/t/overlappingfilelockexception/4643 "2011-06-16T23:10:38Z")
I am seeing this new exception while recovering from S3 on EC2 with 0.16.2. 1) Error injecting constructor, java.nio.channels.OverlappingFileLockException at org.elasticsearch.env.NodeEnvironment.(NodeEnvironment.… --- ## [Net Client NEST 8 download?](https://discuss.elastic.co/t/net-client-nest-8-download/298558)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 3\ **Last updated:** [March 14, 2022, 10:07am UTC](https://discuss.elastic.co/t/net-client-nest-8-download/298558 "2022-03-14T10:07:49Z")
Elastic 8 was released few weeks ago and NEST 8 documentation is online but I cant find NEST 8 nuget package. When it is going to be published or where I can download final release or a beta? --- ## [コンテナ再起動させると、Filebeatのログ収集が止まる](https://discuss.elastic.co/t/filebeat/236437)
**Author:** [@Negi700](https://discuss.elastic.co/u/Negi700)\ **Replies:** 4\ **Last updated:** [June 22, 2020, 12:45am UTC](https://discuss.elastic.co/t/filebeat/236437 "2020-06-22T00:45:50Z")
Kubernetes上のTomcatのコンテナのログを、Filebeatのコンテナで収集しています。 Tomcatのコンテナ再起動後、収集対象のログは更新されているのに、ログ収集のインスタンスが、 ログ更新を検知していないようで、Filebeatのログ収集が開始されません。。 ほかのアプリのログ収集も、同様に、コンテナの再起動をかけるとログ収集が止まります。 暫定対処として、アプリのコンテナ再起動後、Filebeatのコンテナ再… [Previous page](https://discuss.elastic.co/top.md?page=1102&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1104&per_page=50&period=all)