# Top

**URL:** https://discuss.elastic.co/top.md?page=1106&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1107

---

## [Subset in an array](https://discuss.elastic.co/t/subset-in-an-array/237459)

<div class="topic-metadata">

**Author:** [@surendra\_gandham](https://discuss.elastic.co/u/surendra_gandham)\
**Replies:** 2\
**Last updated:** [June 18, 2020, 6:54am UTC](https://discuss.elastic.co/t/subset-in-an-array/237459 "2020-06-18T06:54:40Z")

</div>

Hi everyone, Thanks for reading. Here's my problem. I have an array with numbers on each document as such: Document 1: \[1, 2, 3\] Document 2: \[1, 4\] Document 3: \[6,12,2\] I want to query my documents and find those d…

---

## [Не работает elastic после перезапуска сервера](https://discuss.elastic.co/t/elastic/204357)

<div class="topic-metadata">

**Author:** [@Vivaldy](https://discuss.elastic.co/u/Vivaldy)\
**Replies:** 2\
**Last updated:** [October 20, 2019, 8:44pm UTC](https://discuss.elastic.co/t/elastic/204357 "2019-10-20T20:44:34Z")

</div>

Подскажите в какую сторону искать и в чем может быть дело? Если перезагрузить сервер - то именно elasticsearch лежит После команды service elasticsearch restart - начинает нормально работать, но хочется привезти к норм…

---

## [Kibana keep restarting](https://discuss.elastic.co/t/kibana-keep-restarting/150102)

<div class="topic-metadata">

**Author:** [@Nikhilpawar1985](https://discuss.elastic.co/u/Nikhilpawar1985)\
**Replies:** 2\
**Last updated:** [September 28, 2018, 2:03am UTC](https://discuss.elastic.co/t/kibana-keep-restarting/150102 "2018-09-28T02:03:45Z")

</div>

Hi , i am building ELK stack on Cloud as per our requirements. I was successfully able to stand up ES on cloud but having issues connecting Kibana to ES and loading Kibana as it keeps restarting . Can someone help on th…

---

## [Logstash Shield index\_not\_found\_exception](https://discuss.elastic.co/t/logstash-shield-index-not-found-exception/53952)

<div class="topic-metadata">

**Author:** [@Nww\_Pot\_Fung\_Nng](https://discuss.elastic.co/u/Nww_Pot_Fung_Nng)\
**Replies:** 2\
**Last updated:** [June 28, 2016, 8:08am UTC](https://discuss.elastic.co/t/logstash-shield-index-not-found-exception/53952 "2016-06-28T08:08:58Z")

</div>

Hi All, I've setup shield on elasticsearch, kibana and logstash. elasticseach and kibana are fine. But, I got the following error for logstash receiving events. "error"=\>{"type"=\>"index\_not\_found\_exception", "reas…

---

## [How to use custom ISP database in geoip?](https://discuss.elastic.co/t/how-to-use-custom-isp-database-in-geoip/51548)

<div class="topic-metadata">

**Author:** [@Morriaty](https://discuss.elastic.co/u/Morriaty)\
**Replies:** 2\
**Last updated:** [June 2, 2016, 1:54am UTC](https://discuss.elastic.co/t/how-to-use-custom-isp-database-in-geoip/51548 "2016-06-02T01:54:05Z")

</div>

The ISP database from MAXMIND is only suitable for USA ISP, and not correct out of USA The ISP name is about 95% accurate in the US. Outside the US, accuracy ranges from 50% to 80%, depending on the country. The data i…

---

## [Create Repository access denied](https://discuss.elastic.co/t/create-repository-access-denied/38300)

<div class="topic-metadata">

**Author:** [@Hilal](https://discuss.elastic.co/u/Hilal)\
**Replies:** 2\
**Last updated:** [January 5, 2016, 9:39am UTC](https://discuss.elastic.co/t/create-repository-access-denied/38300 "2016-01-05T09:39:30Z")

</div>

hİ, I am trying create repository for snapshot but I have a error. I am using elasticsearch 2.0.0 on windosws 10. my error is : access denied (\\"java.io.FilePermission\\" \\"C:\\Users\\hilal\\Desktop\\" \\"read\\ What c…

---

## [Shield Custom realm example - Login not working without Native realm](https://discuss.elastic.co/t/shield-custom-realm-example-login-not-working-without-native-realm/70135)

<div class="topic-metadata">

**Author:** [@Yasho](https://discuss.elastic.co/u/Yasho)\
**Replies:** 4\
**Last updated:** [January 3, 2017, 11:41am UTC](https://discuss.elastic.co/t/shield-custom-realm-example-login-not-working-without-native-realm/70135 "2017-01-03T11:41:22Z")

</div>

I am trying to setup Shield Custom realm example which is in the GIT to test out, I build the code and deployed with exact configuration as mentioned in Read.Me note that is shield: authc: realms: custom: …

---

## [Timestamp in DSL query](https://discuss.elastic.co/t/timestamp-in-dsl-query/319058)

<div class="topic-metadata">

**Author:** [@oalimerko](https://discuss.elastic.co/u/oalimerko)\
**Replies:** 3\
**Last updated:** [November 17, 2022, 11:39am UTC](https://discuss.elastic.co/t/timestamp-in-dsl-query/319058 "2022-11-17T11:39:08Z")

</div>

Dear all, i have the query below for monitoring the logs of my application in case any issue with database connection occurs in the last 6min: GET \_search { "query": { "query\_string": { "query"…

---

## [Logstashでログメッセージが欠損している可能性について](https://discuss.elastic.co/t/logstash/255795)

<div class="topic-metadata">

**Author:** [@Tasu](https://discuss.elastic.co/u/Tasu)\
**Replies:** 3\
**Last updated:** [November 26, 2020, 4:55am UTC](https://discuss.elastic.co/t/logstash/255795 "2020-11-26T04:55:08Z")

</div>

Filebeat,Logstash,Elasticserchを使用してAPサーバで発行するログをログ管理サーバで取得しているのですが、APサーバで発行したログ数と、ElasticSearchに取り込まれたログ数が一致しないという事象が発生しています。ElasticSearchのメモリを増強しましたが事象が解決せず、Logstashが問題なのではないかと考えているのですが、原因が特定できていません。どなたかアドバイス頂けないでしょうか？ …

---

## [Elasticsearch 7.5 Won't Start with Security Set](https://discuss.elastic.co/t/elasticsearch-7-5-wont-start-with-security-set/212045)

<div class="topic-metadata">

**Author:** [@ljacobs7211](https://discuss.elastic.co/u/ljacobs7211)\
**Replies:** 3\
**Last updated:** [December 26, 2019, 9:07am UTC](https://discuss.elastic.co/t/elasticsearch-7-5-wont-start-with-security-set/212045 "2019-12-26T09:07:16Z")

</div>

Configured x-pack security settings on Basic license two node cluster but Elasticsearch service won't start. What helpful tips can help solve this issue?

---

## [Add two fields in kibana within same Index](https://discuss.elastic.co/t/add-two-fields-in-kibana-within-same-index/107225)

<div class="topic-metadata">

**Author:** [@pathakhcst](https://discuss.elastic.co/u/pathakhcst)\
**Replies:** 3\
**Last updated:** [November 27, 2017, 3:48pm UTC](https://discuss.elastic.co/t/add-two-fields-in-kibana-within-same-index/107225 "2017-11-27T15:48:36Z")

</div>

I get the multiple records from different nodes as follows:-1: {"name":"AAA","price":"100"} {"name":"BBB","price":"200"} {"name":"CCC","price":"400"} {"name":"AAA","price":"100"} I want to add the price of all 3 rea…

---

## [Persistent queues statistics](https://discuss.elastic.co/t/persistent-queues-statistics/90724)

<div class="topic-metadata">

**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\
**Replies:** 3\
**Last updated:** [October 6, 2017, 9:05pm UTC](https://discuss.elastic.co/t/persistent-queues-statistics/90724 "2017-10-06T21:05:24Z")

</div>

hi All! just a quick question regarding the statistics with persistent queues enabled: the pipeline stats command localhost:9600/\_node/stats/pipeline?pretty shows an empty queue: "queue" : { "events" : 0,…

---

## [Winlogbeat many shards](https://discuss.elastic.co/t/winlogbeat-many-shards/78294)

<div class="topic-metadata">

**Author:** [@brascon01](https://discuss.elastic.co/u/brascon01)\
**Replies:** 3\
**Last updated:** [March 18, 2017, 12:57pm UTC](https://discuss.elastic.co/t/winlogbeat-many-shards/78294 "2017-03-18T12:57:19Z")

</div>

Hi All, i am new with ELK, i have a test cluster with single data node, i have configured one server to use winlogbeat now i am receiving a lots of small shards, i encountered similar issues as the below thread, i a…

---

## [Listing the content of an Index](https://discuss.elastic.co/t/listing-the-content-of-an-index/41288)

<div class="topic-metadata">

**Author:** [@vinod\_rao](https://discuss.elastic.co/u/vinod_rao)\
**Replies:** 3\
**Last updated:** [February 9, 2016, 3:21pm UTC](https://discuss.elastic.co/t/listing-the-content-of-an-index/41288 "2016-02-09T15:21:57Z")

</div>

Hi Team, I need to list the first field of each document of an index. How can we achieve this. Do we have any possibility to do this?

---

## [Runtime field issue creating a date/time field](https://discuss.elastic.co/t/runtime-field-issue-creating-a-date-time-field/317551)

<div class="topic-metadata">

**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\
**Replies:** 5\
**Last updated:** [November 2, 2022, 11:24am UTC](https://discuss.elastic.co/t/runtime-field-issue-creating-a-date-time-field/317551 "2022-11-02T11:24:12Z")

</div>

I am creating a new date field through Lens. The original field is coming through as text in the format '2022-10-25T16:04:35.320' In the Set Value field i have... if (doc.containsKey('sql.metrics.string.starttime')) { …

---

## [Logstash Keystore No java.exe executable found on PATH](https://discuss.elastic.co/t/logstash-keystore-no-java-exe-executable-found-on-path/304008)

<div class="topic-metadata">

**Author:** [@Bavaria](https://discuss.elastic.co/u/Bavaria)\
**Replies:** 5\
**Last updated:** [May 25, 2022, 11:31am UTC](https://discuss.elastic.co/t/logstash-keystore-no-java-exe-executable-found-on-path/304008 "2022-05-25T11:31:16Z")

</div>

Hello, I am trying to use the keystore, that the passwords in the pipeline are not in plain text. I did not download any JDK. I used the bundled jdk which is included in the logstash download. I am getting these messag…

---

## [Setting up logstash with mongodb not starting](https://discuss.elastic.co/t/setting-up-logstash-with-mongodb-not-starting/280998)

<div class="topic-metadata">

**Author:** [@Bugsbee](https://discuss.elastic.co/u/Bugsbee)\
**Replies:** 5\
**Last updated:** [August 12, 2021, 10:12am UTC](https://discuss.elastic.co/t/setting-up-logstash-with-mongodb-not-starting/280998 "2021-08-12T10:12:05Z")

</div>

hi community, need your expertise / advise in this issue im facing when starting logstash which im trying to connect wth mongodb. input { uri =\> 'mongodb://userhere:passwordhere@1234.234.123.12:8081' p…

---

## [Logstash event- Failed to Parse field](https://discuss.elastic.co/t/logstash-event-failed-to-parse-field/230351)

<div class="topic-metadata">

**Author:** [@Miguel\_Alvarez](https://discuss.elastic.co/u/Miguel_Alvarez)\
**Replies:** 5\
**Last updated:** [April 30, 2020, 3:05pm UTC](https://discuss.elastic.co/t/logstash-event-failed-to-parse-field/230351 "2020-04-30T15:05:16Z")

</div>

Hi. I have this error in my logstash: \[2020-04-28T14:58:13,744\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"nonfood\_pro-2020.04…

---

## [How to avoid ��� chars when using FS Crawler?](https://discuss.elastic.co/t/how-to-avoid-chars-when-using-fs-crawler/206996)

<div class="topic-metadata">

**Author:** [@Danilo\_Felix](https://discuss.elastic.co/u/Danilo_Felix)\
**Replies:** 5\
**Last updated:** [November 10, 2019, 1:12pm UTC](https://discuss.elastic.co/t/how-to-avoid-chars-when-using-fs-crawler/206996 "2019-11-10T13:12:02Z")

</div>

Hello, I'm trying to use FS Crawler 2.6 in a Windows Server machine to index a huge number of files in my company. It's a very large Windows folders tree in a network drive: 14,92 Tb size, 7,2M files in 2,3M folders. Da…

---

## [APM Java Agent creating Deadlock in Web logic](https://discuss.elastic.co/t/apm-java-agent-creating-deadlock-in-web-logic/173744)

<div class="topic-metadata">

**Author:** [@Lakshmi\_Narayan](https://discuss.elastic.co/u/Lakshmi_Narayan)\
**Replies:** 5\
**Last updated:** [April 3, 2019, 3:31pm UTC](https://discuss.elastic.co/t/apm-java-agent-creating-deadlock-in-web-logic/173744 "2019-04-03T15:31:19Z")

</div>

Kibana version: 6.6.0 Elasticsearch version: 6.6.0 APM Server version: 6.6.0 APM Agent language and version: elastic-apm-agent-1.3.0.jar Fresh install or upgraded from other version? Freash Is there anything special…

---

## [How constract graph for showing network statistic?](https://discuss.elastic.co/t/how-constract-graph-for-showing-network-statistic/119970)

<div class="topic-metadata">

**Author:** [@Nikita\_Krasnov](https://discuss.elastic.co/u/Nikita_Krasnov)\
**Replies:** 5\
**Last updated:** [February 19, 2018, 10:28am UTC](https://discuss.elastic.co/t/how-constract-graph-for-showing-network-statistic/119970 "2018-02-19T10:28:33Z")

</div>

Hello, I am trying with Grafana, DataSource Elastic with MetricBeat, do a panel that gives me the current network statistic (received and send bytes per second). May somebody give me a hint or example how to do it? In…

---

## [Data enrichment Huge CPU consumption](https://discuss.elastic.co/t/data-enrichment-huge-cpu-consumption/43453)

<div class="topic-metadata">

**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\
**Replies:** 5\
**Last updated:** [March 4, 2016, 5:58pm UTC](https://discuss.elastic.co/t/data-enrichment-huge-cpu-consumption/43453 "2016-03-04T17:58:06Z")

</div>

I am trying to use logstash translate plugin to enrich data before putting to elasticsearch. There are 4 tables I used to join, which I already exported as yml file. The yml files are in the following format: id: file…

---

## [Kibana - IIS 7.5](https://discuss.elastic.co/t/kibana-iis-7-5/21832)

<div class="topic-metadata">

**Author:** [@Garrett\_Johnson](https://discuss.elastic.co/u/Garrett_Johnson)\
**Replies:** 5\
**Last updated:** [January 27, 2015, 6:17pm UTC](https://discuss.elastic.co/t/kibana-iis-7-5/21832 "2015-01-27T18:17:07Z")

</div>

I was able to get Kibana setup on my localhost and did a generic entry to allow everything into the elasticsearch.yml http.cors.allow-origin: "/.\*/" Now I'm trying to getting it to run on my remote server runnin…

---

## [Very slow performance of must\_not with exists in filter](https://discuss.elastic.co/t/very-slow-performance-of-must-not-with-exists-in-filter/144281)

<div class="topic-metadata">

**Author:** [@ShilpiRachna](https://discuss.elastic.co/u/ShilpiRachna)\
**Replies:** 1\
**Last updated:** [September 9, 2018, 9:22pm UTC](https://discuss.elastic.co/t/very-slow-performance-of-must-not-with-exists-in-filter/144281 "2018-09-09T21:22:49Z")

</div>

Hi, We are investigating some slow queries in our Prod environment. We saw that the following filter is much slower than other term queries in query / filter section. "query": { "bool": { "must": {…}, "filter" : { …

---

## [Kibana docker image does not start correctly](https://discuss.elastic.co/t/kibana-docker-image-does-not-start-correctly/141064)

<div class="topic-metadata">

**Author:** [@Bo\_Qiang](https://discuss.elastic.co/u/Bo_Qiang)\
**Replies:** 1\
**Last updated:** [July 23, 2018, 2:58pm UTC](https://discuss.elastic.co/t/kibana-docker-image-does-not-start-correctly/141064 "2018-07-23T14:58:15Z")

</div>

Hi, When I run kibana docker image, the container cannot recognize the elastic search running in a separate container. Here are the steps I followed. pulled the docker images for both elasticsearch and kibana though: …

---

## [Moving multiple MySQL tables to ElasticSearch in the same index](https://discuss.elastic.co/t/moving-multiple-mysql-tables-to-elasticsearch-in-the-same-index/124450)

<div class="topic-metadata">

**Author:** [@limafoxtrottango](https://discuss.elastic.co/u/limafoxtrottango)\
**Replies:** 1\
**Last updated:** [March 18, 2018, 8:56pm UTC](https://discuss.elastic.co/t/moving-multiple-mysql-tables-to-elasticsearch-in-the-same-index/124450 "2018-03-18T20:56:18Z")

</div>

I am migrating my database to ElasticSearch. Its current size is less than 3G, and since many fields are common across tables, I have decided to use a single index to store them. Here's my Logstash configuration: input…

---

## [Setting up alerts on KIbana](https://discuss.elastic.co/t/setting-up-alerts-on-kibana/119968)

<div class="topic-metadata">

**Author:** [@liammcc](https://discuss.elastic.co/u/liammcc)\
**Replies:** 1\
**Last updated:** [February 15, 2018, 1:02pm UTC](https://discuss.elastic.co/t/setting-up-alerts-on-kibana/119968 "2018-02-15T13:02:23Z")

</div>

So we wanted a way to centralise our logs. We have used elastic search and kibana on aws cloudwatch to do this. We have then created metrics related to queries for example errors in a particular service. So we have a das…

---

## [Shard allocation fails during rebalancing](https://discuss.elastic.co/t/shard-allocation-fails-during-rebalancing/286706)

<div class="topic-metadata">

**Author:** [@bunste](https://discuss.elastic.co/u/bunste)\
**Replies:** 8\
**Last updated:** [October 14, 2021, 3:40pm UTC](https://discuss.elastic.co/t/shard-allocation-fails-during-rebalancing/286706 "2021-10-14T15:40:27Z")

</div>

We recently ran into a problem with our Elasticseach Cluster. We took a Data Node out of the cluster and completely reinstalled it with Debian 11. When the node was done and rejoined the cluster, Elasticsearch started r…

---

## [ElasticSearch NEST: Bulk-indexing operation does not make use of specified document IDs](https://discuss.elastic.co/t/elasticsearch-nest-bulk-indexing-operation-does-not-make-use-of-specified-document-ids/201003)

<div class="topic-metadata">

**Author:** [@Miao](https://discuss.elastic.co/u/Miao)\
**Replies:** 2\
**Last updated:** [September 26, 2019, 7:28am UTC](https://discuss.elastic.co/t/elasticsearch-nest-bulk-indexing-operation-does-not-make-use-of-specified-document-ids/201003 "2019-09-26T07:28:15Z")

</div>

I currently use the ElasticSearch NEST 7.x library. On the VM that hosts my ElasticSearch master node, I am running a web server which receives JSON data via REST. These JSON data are then to be saved inside ElasticSear…

---

## [Watcher email html body passed as a stored script](https://discuss.elastic.co/t/watcher-email-html-body-passed-as-a-stored-script/183449)

<div class="topic-metadata">

**Author:** [@NidOf3lp](https://discuss.elastic.co/u/NidOf3lp)\
**Replies:** 2\
**Last updated:** [June 5, 2019, 3:47am UTC](https://discuss.elastic.co/t/watcher-email-html-body-passed-as-a-stored-script/183449 "2019-06-05T03:47:46Z")

</div>

Hi, I'd like to have my email action to retrieve the email body stored as a mustache script. Currently the email get sent with "mem-watch-warning" as a text instead of the html content stored in \_scripts/mem-watch-warni…

---

## [Getting Request failed with status code 302](https://discuss.elastic.co/t/getting-request-failed-with-status-code-302/157273)

<div class="topic-metadata">

**Author:** [@sundarcse1216](https://discuss.elastic.co/u/sundarcse1216)\
**Replies:** 2\
**Last updated:** [November 19, 2018, 7:57pm UTC](https://discuss.elastic.co/t/getting-request-failed-with-status-code-302/157273 "2018-11-19T19:57:57Z")

</div>

Hi, I am installed kibana-6.4.3 and created dashboard. Trying to load dashboard in Iframe but i am getting status code as 302.

---

## [Can't get GeoIp data in Elasticsearch/Fluentd](https://discuss.elastic.co/t/cant-get-geoip-data-in-elasticsearch-fluentd/140500)

<div class="topic-metadata">

**Author:** [@mprzygrodzki](https://discuss.elastic.co/u/mprzygrodzki)\
**Replies:** 2\
**Last updated:** [July 20, 2018, 9:32am UTC](https://discuss.elastic.co/t/cant-get-geoip-data-in-elasticsearch-fluentd/140500 "2018-07-20T09:32:26Z")

</div>

Hello, i'm using Fluentd to push logs into Elasticsearch. The main goal is to have nginx-ingress logs published into Elasticsearch with geoip location so I can visualize metrics on dashboard with map based on IP's. I'm u…

---

## [Calculations on Bucket's doc\_count](https://discuss.elastic.co/t/calculations-on-buckets-doc-count/127518)

<div class="topic-metadata">

**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\
**Replies:** 2\
**Last updated:** [April 11, 2018, 8:00am UTC](https://discuss.elastic.co/t/calculations-on-buckets-doc-count/127518 "2018-04-11T08:00:35Z")

</div>

Hi all, I'm trying to get some statistics about certain events by time interval. Is it possible to use a Pipeline aggregation that uses the doc\_count of the parent aggregation? Something like this... Thank you! Ana …

---

## [Filebeat, Logstash connection reset by peer](https://discuss.elastic.co/t/filebeat-logstash-connection-reset-by-peer/114479)

<div class="topic-metadata">

**Author:** [@DavidDebray](https://discuss.elastic.co/u/DavidDebray)\
**Replies:** 2\
**Last updated:** [January 9, 2018, 8:56am UTC](https://discuss.elastic.co/t/filebeat-logstash-connection-reset-by-peer/114479 "2018-01-09T08:56:31Z")

</div>

Hi everyone! I'm new to ELK stack and have encountered a problem I can't seem to figure out... I currently have three machines in my ELK environment : syslog server (Logstash, ElasticSearch, Kibana) WAPT server (sofw…

---

## [Will increasing the number of shards to utilize more CPU and improve performance?](https://discuss.elastic.co/t/will-increasing-the-number-of-shards-to-utilize-more-cpu-and-improve-performance/84868)

<div class="topic-metadata">

**Author:** [@red888](https://discuss.elastic.co/u/red888)\
**Replies:** 2\
**Last updated:** [May 8, 2017, 6:44pm UTC](https://discuss.elastic.co/t/will-increasing-the-number-of-shards-to-utilize-more-cpu-and-improve-performance/84868 "2017-05-08T18:44:09Z")

</div>

Previously I asked a question about optimizing my ES searches: https://discuss.elastic.co/t/i-think-my-heap-is-sized-right-but-searches-are-still-super-slow/83914/7 This is just one index. I have 5 nodes and set it to …

---

## [How to format numbers in Timelion](https://discuss.elastic.co/t/how-to-format-numbers-in-timelion/68490)

<div class="topic-metadata">

**Author:** [@sjivan](https://discuss.elastic.co/u/sjivan)\
**Replies:** 2\
**Last updated:** [December 9, 2016, 2:14am UTC](https://discuss.elastic.co/t/how-to-format-numbers-in-timelion/68490 "2016-12-09T02:14:26Z")

</div>

I realize that doesn't use Kibana field formatting but is there a way to format numbers (currency) to have commas? Using Kibana 4.6.1 Thanks, Sanjiv

---

## [Can i set vm.max\_map\_count at creation?](https://discuss.elastic.co/t/can-i-set-vm-max-map-count-at-creation/105456)

<div class="topic-metadata">

**Author:** [@DStorck](https://discuss.elastic.co/u/DStorck)\
**Replies:** 1\
**Last updated:** [November 3, 2017, 1:38am UTC](https://discuss.elastic.co/t/can-i-set-vm-max-map-count-at-creation/105456 "2017-11-03T01:38:15Z")

</div>

I am getting this error: max virtual memory areas vm.max\_map\_count \[65530\] is too low, increase to at least \[262144\] The research I've done shows that once elasticsearch is running, I could go in and raise the limit by u…

---

## [Logstash error during configuration](https://discuss.elastic.co/t/logstash-error-during-configuration/295911)

<div class="topic-metadata">

**Author:** [@harsh19](https://discuss.elastic.co/u/harsh19)\
**Replies:** 4\
**Last updated:** [February 1, 2022, 9:22am UTC](https://discuss.elastic.co/t/logstash-error-during-configuration/295911 "2022-02-01T09:22:19Z")

</div>

When i Run ./logstash -f logstash-simple.conf then it's give me an error like this, Using bundled JDK: /usr/share/logstash/jdk OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 a…

---

## [AEM trace not showing outgoing HTTP requests - Java apm-agent](https://discuss.elastic.co/t/aem-trace-not-showing-outgoing-http-requests-java-apm-agent/283182)

<div class="topic-metadata">

**Author:** [@sanju\_techie](https://discuss.elastic.co/u/sanju_techie)\
**Replies:** 4\
**Last updated:** [September 12, 2021, 7:59am UTC](https://discuss.elastic.co/t/aem-trace-not-showing-outgoing-http-requests-java-apm-agent/283182 "2021-09-12T07:59:22Z")

</div>

We have currently setup the java apm-agent for one of the aem publisher service . In APM transactions ( in KIbana) we are seeing #Dispatcherservlet#doGet but we are not able to see any trace ( like outgoing HTTP call it …

---

## [Ruby Code to split key value pair in Logstash 6.8.0](https://discuss.elastic.co/t/ruby-code-to-split-key-value-pair-in-logstash-6-8-0/275933)

<div class="topic-metadata">

**Author:** [@Santy](https://discuss.elastic.co/u/Santy)\
**Replies:** 4\
**Last updated:** [June 18, 2021, 5:13am UTC](https://discuss.elastic.co/t/ruby-code-to-split-key-value-pair-in-logstash-6-8-0/275933 "2021-06-18T05:13:16Z")

</div>

json { source =\> "message" } split { field =\> "data" } date { match =\> \["\[data\]\[currentDate\]", "yyyy-MM-dd HH:mm:ss"\] target =\> "@timestamp" } ruby { code =\> " event\['data'\].each {|k, v| …

---

## [Logstash syntax error in configuration file](https://discuss.elastic.co/t/logstash-syntax-error-in-configuration-file/150326)

<div class="topic-metadata">

**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\
**Replies:** 4\
**Last updated:** [October 2, 2018, 6:09am UTC](https://discuss.elastic.co/t/logstash-syntax-error-in-configuration-file/150326 "2018-10-02T06:09:50Z")

</div>

Hello Team, I am using ELK 6.4.0 and Beats (Filebeat, Metricbeat) 6.4.0. My architecture is Beat-\>logstash-\>elasticserach-\>kibana. I am getting syntax error in logstash file. I have troubleshooted it a lot but no succe…

---

## [Setting "dead\_letter\_queue.enable" hasn't been registered](https://discuss.elastic.co/t/setting-dead-letter-queue-enable-hasnt-been-registered/94934)

<div class="topic-metadata">

**Author:** [@mitabrev](https://discuss.elastic.co/u/mitabrev)\
**Replies:** 4\
**Last updated:** [July 28, 2017, 11:10am UTC](https://discuss.elastic.co/t/setting-dead-letter-queue-enable-hasnt-been-registered/94934 "2017-07-28T11:10:38Z")

</div>

I’m reading a little the docs, want to optimize my indexing and I think the setting dead\_letter\_queue.enable: true would be useful. So I added this line to my logstash.yml, started the service but got the error: \`\[2017…

---

## [How to work with 2 Client only nodes?](https://discuss.elastic.co/t/how-to-work-with-2-client-only-nodes/27371)

<div class="topic-metadata">

**Author:** [@N\_M\_10](https://discuss.elastic.co/u/N_M_10)\
**Replies:** 4\
**Last updated:** [August 14, 2015, 10:33am UTC](https://discuss.elastic.co/t/how-to-work-with-2-client-only-nodes/27371 "2015-08-14T10:33:03Z")

</div>

Hi, We are using elasticsearch for only searching purpose, our topology is 3 Master+Data nodes and 2 Client only nodes (Load Balancer) say now my 1st client node has IP x.x.x.x and my 2nd client node has IP y.y.…

---

## [Cannot increase buffer: current=512000 requested=544768 max=512000](https://discuss.elastic.co/t/cannot-increase-buffer-current-512000-requested-544768-max-512000/338020)

<div class="topic-metadata">

**Author:** [@premkumarmuddeneni](https://discuss.elastic.co/u/premkumarmuddeneni)\
**Replies:** 1\
**Last updated:** [July 12, 2023, 5:06pm UTC](https://discuss.elastic.co/t/cannot-increase-buffer-current-512000-requested-544768-max-512000/338020 "2023-07-12T17:06:36Z")

</div>

We are using Elastic search of V8.7.0 and fluent bit v2.0.10 and kubernetes is v1.24. We had deployed the Fluent bit as a daemon set in kubernetes and collecting the logs from pods and pushing to Elasticsearch We are f…

---

## [No mapping found for \[filedname\] in order to sort on](https://discuss.elastic.co/t/no-mapping-found-for-filedname-in-order-to-sort-on/227730)

<div class="topic-metadata">

**Author:** [@monica23334](https://discuss.elastic.co/u/monica23334)\
**Replies:** 1\
**Last updated:** [April 13, 2020, 6:27am UTC](https://discuss.elastic.co/t/no-mapping-found-for-filedname-in-order-to-sort-on/227730 "2020-04-13T06:27:59Z")

</div>

Hi,I am a new learner of Elastisearch.I use this api GET /logstash-kafka-2020.04.12/\_mapping/ in Kibana to search my index mapping ,and it returns contain: { "logstash-kafka-2020.04.12" : { "mappings" : { …

---

## [Running APM for standalone celery](https://discuss.elastic.co/t/running-apm-for-standalone-celery/158693)

<div class="topic-metadata">

**Author:** [@mashhoodr](https://discuss.elastic.co/u/mashhoodr)\
**Replies:** 1\
**Last updated:** [December 11, 2018, 1:10pm UTC](https://discuss.elastic.co/t/running-apm-for-standalone-celery/158693 "2018-12-11T13:10:15Z")

</div>

I would like to run the APM integration with a standalone Celery setup, is it currently possible to do that?

---

## [Elasticsearch Java API for Index Templates](https://discuss.elastic.co/t/elasticsearch-java-api-for-index-templates/33563)

<div class="topic-metadata">

**Author:** [@Curtis\_Ruck](https://discuss.elastic.co/u/Curtis_Ruck)\
**Replies:** 1\
**Last updated:** [November 2, 2015, 8:40pm UTC](https://discuss.elastic.co/t/elasticsearch-java-api-for-index-templates/33563 "2015-11-02T20:40:46Z")

</div>

Is there a Java API for creating Index Templates? I'm looking at how to create/check index templates to ensure they are correct. I've always used default-mappings, and now that 2.0 has removed support for default-mapp…

---

## [FsCrawler does not do anything, does not index pfd's](https://discuss.elastic.co/t/fscrawler-does-not-do-anything-does-not-index-pfds/296747)

<div class="topic-metadata">

**Author:** [@jank12](https://discuss.elastic.co/u/jank12)\
**Replies:** 3\
**Last updated:** [February 10, 2022, 11:21pm UTC](https://discuss.elastic.co/t/fscrawler-does-not-do-anything-does-not-index-pfds/296747 "2022-02-10T23:21:16Z")

</div>

This n00b is thoroughly confused. I have severa quite large pdf files I want to be able to full text search. They comrpise of raw text and images contaning text. So I want to index the text in the pdf, OCR the images a…

---

## [Unable to start FileBeat "sends log files to Logstash or directly to Elasticsearch"](https://discuss.elastic.co/t/unable-to-start-filebeat-sends-log-files-to-logstash-or-directly-to-elasticsearch/220297)

<div class="topic-metadata">

**Author:** [@DavidSanchezGracia](https://discuss.elastic.co/u/DavidSanchezGracia)\
**Replies:** 0\
**Last updated:** [February 21, 2020, 6:44am UTC](https://discuss.elastic.co/t/unable-to-start-filebeat-sends-log-files-to-logstash-or-directly-to-elasticsearch/220297 "2020-02-21T06:44:04Z")

</div>

Hi, and thanks in advance for your help, I am having the following issue when starting FIleBeat on mi Ubuntu18.04 machine: \`filebeat.service - Filebeat sends log files to Logstash or directly to Elasticsearch. Lo…

---

## [Version conflict engine exception when elasticsearch is upgraded to 7.5.0](https://discuss.elastic.co/t/version-conflict-engine-exception-when-elasticsearch-is-upgraded-to-7-5-0/211327)

<div class="topic-metadata">

**Author:** [@sharmila.dev](https://discuss.elastic.co/u/sharmila.dev)\
**Replies:** 0\
**Last updated:** [December 10, 2019, 3:50pm UTC](https://discuss.elastic.co/t/version-conflict-engine-exception-when-elasticsearch-is-upgraded-to-7-5-0/211327 "2019-12-10T15:50:15Z")

</div>

Hi, Im seeing the following error only in the master node when upgrading elastcisearch from 7.4.0 to 7.5.0. FAILED! =\> {"changed": false, "content": "{\\"error\\":{\\"root\_cause\\":\[{\\"type\\":\\"version\_conflict\_engine\_exce…

[Previous page](https://discuss.elastic.co/top.md?page=1105&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1107&per_page=50&period=all)
