# Top

**URL:** https://discuss.elastic.co/top.md?page=1116&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1117

---

## [Kibana' Stack Monitoring is missing Logstash instance(s)](https://discuss.elastic.co/t/kibana-stack-monitoring-is-missing-logstash-instance-s/321046)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 4\
**Last updated:** [December 28, 2022, 3:41pm UTC](https://discuss.elastic.co/t/kibana-stack-monitoring-is-missing-logstash-instance-s/321046 "2022-12-28T15:41:11Z")

</div>

Hello World! I updated my Elastic stack from 7.17.7 release to 7.17.8, and now Kibana's monitoring app is missing the "Logstash" instance(s). I checked all the settings, and I didn't find any mistakes. I then double-ch…

---

## [How to convert the output into json in watcher body](https://discuss.elastic.co/t/how-to-convert-the-output-into-json-in-watcher-body/275293)

<div class="topic-metadata">

**Author:** [@Mojahid\_Ahmad](https://discuss.elastic.co/u/Mojahid_Ahmad)\
**Replies:** 0\
**Last updated:** [June 8, 2021, 11:44am UTC](https://discuss.elastic.co/t/how-to-convert-the-output-into-json-in-watcher-body/275293 "2021-06-08T11:44:23Z")

</div>

Hi, I want to convert the output into JSON format in the watcher body. I tried {{#toJson}}. But I couldn't get success. Please guide me through how to resolve this issue? "body": """{{#toJson}}{{#ctx.payload.hits.hits}}…

---

## [Unique values in data tables](https://discuss.elastic.co/t/unique-values-in-data-tables/253179)

<div class="topic-metadata">

**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 7:34pm UTC](https://discuss.elastic.co/t/unique-values-in-data-tables/253179 "2020-10-29T19:34:11Z")

</div>

I have a bunch of documents on business. One of their properties is customer\_id. The same customer\_id might now up in several documents, but I would only like to display unique customer\_id in data table. Ideally the da…

---

## [Kibana server is not ready yet and could not create APM agent configuration](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-and-could-not-create-apm-agent-configuration/222377)

<div class="topic-metadata">

**Author:** [@Mohamed\_Koubaa](https://discuss.elastic.co/u/Mohamed_Koubaa)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 1:23pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-and-could-not-create-apm-agent-configuration/222377 "2020-03-12T13:23:26Z")

</div>

Kibana used to work until I did user configuration by adding xpack.security.enabled: true discovery.type: single-node to the elasticsearch.yml which look this way now\` # ======================== Elasticse…

---

## [Maximum number of requests part of Bulk API and Mget API](https://discuss.elastic.co/t/maximum-number-of-requests-part-of-bulk-api-and-mget-api/168650)

<div class="topic-metadata">

**Author:** [@RahulD](https://discuss.elastic.co/u/RahulD)\
**Replies:** 1\
**Last updated:** [February 16, 2019, 6:26am UTC](https://discuss.elastic.co/t/maximum-number-of-requests-part-of-bulk-api-and-mget-api/168650 "2019-02-16T06:26:33Z")

</div>

Is there an upper limit on how many individual requests that can be bundled up together as part of the bulk and mget apis?

---

## [Error sending logs with filebeat](https://discuss.elastic.co/t/error-sending-logs-with-filebeat/45013)

<div class="topic-metadata">

**Author:** [@marcmga](https://discuss.elastic.co/u/marcmga)\
**Replies:** 1\
**Last updated:** [March 21, 2016, 6:21pm UTC](https://discuss.elastic.co/t/error-sending-logs-with-filebeat/45013 "2016-03-21T18:21:23Z")

</div>

Hello, Suddently my logstash server has stopped receiving logs from filebeat (whatever the server was, not just one but all). I think that the problem started when i had problems with my itnernet connection (where logs…

---

## [How to process logs from certain period of time? (I use elasticsearch input plugin)](https://discuss.elastic.co/t/how-to-process-logs-from-certain-period-of-time-i-use-elasticsearch-input-plugin/278702)

<div class="topic-metadata">

**Author:** [@John\_Smith1](https://discuss.elastic.co/u/John_Smith1)\
**Replies:** 4\
**Last updated:** [July 15, 2021, 7:28am UTC](https://discuss.elastic.co/t/how-to-process-logs-from-certain-period-of-time-i-use-elasticsearch-input-plugin/278702 "2021-07-15T07:28:32Z")

</div>

In pipeline I receive logs from server with elasticsearch input plugin and I want to process not all logs, but for example only last 2 months, or, preferably from certain date to certain date. When I receive logs there…

---

## [How to improve query using test data and expected result](https://discuss.elastic.co/t/how-to-improve-query-using-test-data-and-expected-result/158963)

<div class="topic-metadata">

**Author:** [@jmr317](https://discuss.elastic.co/u/jmr317)\
**Replies:** 1\
**Last updated:** [November 30, 2018, 9:00pm UTC](https://discuss.elastic.co/t/how-to-improve-query-using-test-data-and-expected-result/158963 "2018-11-30T21:00:03Z")

</div>

I have a test set of data that includes a search string and the document id of the document that would be of highest relevance for that search string. Is there a specific way I can go about improving my query (currently …

---

## [Jdbc plugin for postgresql issue](https://discuss.elastic.co/t/jdbc-plugin-for-postgresql-issue/141065)

<div class="topic-metadata">

**Author:** [@Harman\_Gurm](https://discuss.elastic.co/u/Harman_Gurm)\
**Replies:** 4\
**Last updated:** [July 23, 2018, 8:36pm UTC](https://discuss.elastic.co/t/jdbc-plugin-for-postgresql-issue/141065 "2018-07-23T20:36:55Z")

</div>

Hi, I am using jdbc plugin to fetch data from postgresql db, it seems to be work fine for first time and i am able to pull the data, but it is not working according to saved state, everytime all of data is queried and t…

---

## [Large zip content](https://discuss.elastic.co/t/large-zip-content/113143)

<div class="topic-metadata">

**Author:** [@Chelambarasan\_CR](https://discuss.elastic.co/u/Chelambarasan_CR)\
**Replies:** 4\
**Last updated:** [December 26, 2017, 1:17pm UTC](https://discuss.elastic.co/t/large-zip-content/113143 "2017-12-26T13:17:22Z")

</div>

Large zip file 2gb content read by tika was not indexing. Indexing is hanging at bulk request indexing. Smaller zip has no issues. Ingest attachment is used for indexing. Is there any limit in ES per document?

---

## [Caching in Elastic shield](https://discuss.elastic.co/t/caching-in-elastic-shield/72622)

<div class="topic-metadata">

**Author:** [@gsb](https://discuss.elastic.co/u/gsb)\
**Replies:** 4\
**Last updated:** [January 24, 2017, 1:22pm UTC](https://discuss.elastic.co/t/caching-in-elastic-shield/72622 "2017-01-24T13:22:18Z")

</div>

Elastic shield documentation mentions that it can cache users for authentication However there's no clear explanation or an example on how to achieve this. I have a native realm user and a file realm user (for file rea…

---

## [Effectuer un snapshot](https://discuss.elastic.co/t/effectuer-un-snapshot/71434)

<div class="topic-metadata">

**Author:** [@aldo](https://discuss.elastic.co/u/aldo)\
**Replies:** 4\
**Last updated:** [January 13, 2017, 6:09am UTC](https://discuss.elastic.co/t/effectuer-un-snapshot/71434 "2017-01-13T06:09:30Z")

</div>

Bonjour J'essaye de configurer un snapshot pour faire un backup mais cela ne fonctionne pas . Quand j'ajoute dans le fichier de configuration de elasticsearch la variable path.repo: \["\\\\MY\_SERVER\\Snapshots"\] la com…

---

## [Custom similarity in Elasticsearch 5.0](https://discuss.elastic.co/t/custom-similarity-in-elasticsearch-5-0/65103)

<div class="topic-metadata">

**Author:** [@Peter\_van\_der\_Weerd](https://discuss.elastic.co/u/Peter_van_der_Weerd)\
**Replies:** 4\
**Last updated:** [November 24, 2016, 10:15am UTC](https://discuss.elastic.co/t/custom-similarity-in-elasticsearch-5-0/65103 "2016-11-24T10:15:08Z")

</div>

Hi, I'm porting my custom similarity provider to 5.0. There seems to be no interface that I can implement on my plugin to return a similarity provider. Before diving too deep: is this functionality removed in 5.0 (no…

---

## [Combine data from multiple rows based on aggregation](https://discuss.elastic.co/t/combine-data-from-multiple-rows-based-on-aggregation/264608)

<div class="topic-metadata">

**Author:** [@hayo](https://discuss.elastic.co/u/hayo)\
**Replies:** 6\
**Last updated:** [February 19, 2021, 6:07pm UTC](https://discuss.elastic.co/t/combine-data-from-multiple-rows-based-on-aggregation/264608 "2021-02-19T18:07:02Z")

</div>

I have searched but was not able to find the answer or i just didnt see it! I have data like: BookTitle | Author | Category A | Writer1 | Thriller A | Writer1 | Action B | Writer1 | Science fiction B …

---

## [Scaling logstash nodes](https://discuss.elastic.co/t/scaling-logstash-nodes/259792)

<div class="topic-metadata">

**Author:** [@David\_Beradze](https://discuss.elastic.co/u/David_Beradze)\
**Replies:** 6\
**Last updated:** [December 30, 2020, 7:43pm UTC](https://discuss.elastic.co/t/scaling-logstash-nodes/259792 "2020-12-30T19:43:11Z")

</div>

Hello, We have oracle (single table) \>\> logstash \>\> elasticsearch. What is the way to scale horizontally logstash nodes to prevent the same data selection from the same source? (oracle table)

---

## [Metricbeat Oracle module](https://discuss.elastic.co/t/metricbeat-oracle-module/215097)

<div class="topic-metadata">

**Author:** [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\
**Replies:** 6\
**Last updated:** [January 22, 2020, 2:04pm UTC](https://discuss.elastic.co/t/metricbeat-oracle-module/215097 "2020-01-22T14:04:56Z")

</div>

Hi, I am trying to use the Metricbeat oracle module, but it seems that it requires the user to connect as a sysdba. Is there anyway for the sysdba requirement to be disabled? I executed all queries for the tablespaces …

---

## [Use the same connection for multiple Logstash configurations](https://discuss.elastic.co/t/use-the-same-connection-for-multiple-logstash-configurations/147736)

<div class="topic-metadata">

**Author:** [@Andre\_Silva](https://discuss.elastic.co/u/Andre_Silva)\
**Replies:** 6\
**Last updated:** [September 13, 2018, 9:10am UTC](https://discuss.elastic.co/t/use-the-same-connection-for-multiple-logstash-configurations/147736 "2018-09-13T09:10:19Z")

</div>

I'm using Logstash 2.4.1 to load data to Elasticsearch 2.4.6. I have the following Logstash config: input { jdbc { jdbc\_connection\_string =\> "jdbc:oracle:thin:@database:1521:db1" jdbc\_user =\> "user" jdbc\_p…

---

## [Creating Grok Pattern for logstash config](https://discuss.elastic.co/t/creating-grok-pattern-for-logstash-config/98305)

<div class="topic-metadata">

**Author:** [@sunny1](https://discuss.elastic.co/u/sunny1)\
**Replies:** 6\
**Last updated:** [August 29, 2017, 6:26pm UTC](https://discuss.elastic.co/t/creating-grok-pattern-for-logstash-config/98305 "2017-08-29T18:26:23Z")

</div>

Hello everyone out there! I recently started using ELK so sorry if my question silly. I need help with modifying my grok filter to achieve particular set of data. Tried lot but could not so looking for help. Log file …

---

## [\[Solved\] Question about a filter](https://discuss.elastic.co/t/solved-question-about-a-filter/50939)

<div class="topic-metadata">

**Author:** [@Uros\_Meglic](https://discuss.elastic.co/u/Uros_Meglic)\
**Replies:** 6\
**Last updated:** [May 31, 2016, 11:32am UTC](https://discuss.elastic.co/t/solved-question-about-a-filter/50939 "2016-05-31T11:32:42Z")

</div>

Hello, just a quick question. What is the best filter for this type of logs: I figured I would make a grok pattern, but I would just like to check if there is a better option, since the log is always formed as vari…

---

## [Elasticsearch OCI bucket](https://discuss.elastic.co/t/elasticsearch-oci-bucket/318006)

<div class="topic-metadata">

**Author:** [@Walter\_Hiranpat1](https://discuss.elastic.co/u/Walter_Hiranpat1)\
**Replies:** 3\
**Last updated:** [November 8, 2022, 9:02pm UTC](https://discuss.elastic.co/t/elasticsearch-oci-bucket/318006 "2022-11-08T21:02:22Z")

</div>

Has there been any support for using the oci (oracle cloud infrastructure) bucket to perform snapshot and restore? I thought oci bucket uses similar s3 configuration and would be compatible to use with the aws s3 plugin …

---

## [Elastic query is not fast and response time is high](https://discuss.elastic.co/t/elastic-query-is-not-fast-and-response-time-is-high/303982)

<div class="topic-metadata">

**Author:** [@alpine\_f1](https://discuss.elastic.co/u/alpine_f1)\
**Replies:** 8\
**Last updated:** [May 7, 2022, 5:01am UTC](https://discuss.elastic.co/t/elastic-query-is-not-fast-and-response-time-is-high/303982 "2022-05-07T05:01:48Z")

</div>

Cluster setup: I am running Elasticsearch cluster (2 master, 2 data and 1 voter) as docker containers. Kibana setup: I also have Kibana configured to connect to the elastic cluster. Frontend: I have an angular web a…

---

## [Documents and Reference UI sections not populated](https://discuss.elastic.co/t/documents-and-reference-ui-sections-not-populated/269910)

<div class="topic-metadata">

**Author:** [@mack](https://discuss.elastic.co/u/mack)\
**Replies:** 8\
**Last updated:** [April 16, 2021, 3:20pm UTC](https://discuss.elastic.co/t/documents-and-reference-ui-sections-not-populated/269910 "2021-04-16T15:20:10Z")

</div>

Hi all, I've recently set up a linux server running AppSearch with the aim of creating a mini search engine for a project I'm working on. I used the new web crawler to drawl a test set of 10 domains and the crawl went w…

---

## [Search query to search in a nested type object](https://discuss.elastic.co/t/search-query-to-search-in-a-nested-type-object/211721)

<div class="topic-metadata">

**Author:** [@afzal](https://discuss.elastic.co/u/afzal)\
**Replies:** 3\
**Last updated:** [December 16, 2019, 3:41am UTC](https://discuss.elastic.co/t/search-query-to-search-in-a-nested-type-object/211721 "2019-12-16T03:41:08Z")

</div>

I have a source document that looks like this. "\_id" : "1", "\_source" : { "Id" : "1", "details" : \[ { "propId" : "test8", "liked" : false, "updatedBy" : "userId", …

---

## [Reading from a file and immediately writing to another file](https://discuss.elastic.co/t/reading-from-a-file-and-immediately-writing-to-another-file/208068)

<div class="topic-metadata">

**Author:** [@user112233](https://discuss.elastic.co/u/user112233)\
**Replies:** 3\
**Last updated:** [November 18, 2019, 6:25am UTC](https://discuss.elastic.co/t/reading-from-a-file-and-immediately-writing-to-another-file/208068 "2019-11-18T06:25:30Z")

</div>

I'm trying to configure logstash to read data from one file, and write to another file. This simple task is for a test. It's simple (C:\\Bitnami\\elk\\logstash\\conf\\test1.conf): input { file { path =\> "C:\\Upload\\DN…

---

## [Plugin for Google analytics](https://discuss.elastic.co/t/plugin-for-google-analytics/86777)

<div class="topic-metadata">

**Author:** [@Kamal\_Samra](https://discuss.elastic.co/u/Kamal_Samra)\
**Replies:** 0\
**Last updated:** [May 23, 2017, 7:55am UTC](https://discuss.elastic.co/t/plugin-for-google-analytics/86777 "2017-05-23T07:55:05Z")

</div>

Is there any plugin exist for logstash which show google analytics data on kibana?

---

## [Why does resizing data node VM from 1 core to 2 cores add new node to the cluster?](https://discuss.elastic.co/t/why-does-resizing-data-node-vm-from-1-core-to-2-cores-add-new-node-to-the-cluster/63542)

<div class="topic-metadata">

**Author:** [@Al77056](https://discuss.elastic.co/u/Al77056)\
**Replies:** 8\
**Last updated:** [October 26, 2016, 12:23pm UTC](https://discuss.elastic.co/t/why-does-resizing-data-node-vm-from-1-core-to-2-cores-add-new-node-to-the-cluster/63542 "2016-10-26T12:23:00Z")

</div>

I created a 3-node cluster on Azure using Elastic's template. All three nodes are master eligible, and Marvel shows there are three nodes in the cluster, which is expected. I then resized one of the three VM from DS1 t…

---

## [MultiTenancy for OpenStack cloud with Keystone](https://discuss.elastic.co/t/multitenancy-for-openstack-cloud-with-keystone/60577)

<div class="topic-metadata">

**Author:** [@kornicameister](https://discuss.elastic.co/u/kornicameister)\
**Replies:** 3\
**Last updated:** [September 20, 2016, 8:03am UTC](https://discuss.elastic.co/t/multitenancy-for-openstack-cloud-with-keystone/60577 "2016-09-20T08:03:42Z")

</div>

Hi there, I am writing on behalf of monasca team. Wa are doing monitoring solution for OpenStack clouds and one part of that monitoring is collecting/indexing logs. Obviously we are using Kibana to display collected…

---

## [Broken after upgrade](https://discuss.elastic.co/t/broken-after-upgrade/37634)

<div class="topic-metadata">

**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\
**Replies:** 3\
**Last updated:** [December 22, 2015, 4:06pm UTC](https://discuss.elastic.co/t/broken-after-upgrade/37634 "2015-12-22T16:06:07Z")

</div>

Topic says it....I upgraded to the latest version in the 1.5.6 from the ppa and now I am seeing this: \`{:timestamp=\>"2015-12-19T17:28:27.323000-0700", :message=\>"Got error to send bulk of actions: Cannot find Serialize…

---

## [CustomQueryParser and customSimilarity to integrate payload](https://discuss.elastic.co/t/customqueryparser-and-customsimilarity-to-integrate-payload/13535)

<div class="topic-metadata">

**Author:** [@Aurelien\_3](https://discuss.elastic.co/u/Aurelien_3)\
**Replies:** 8\
**Last updated:** [September 16, 2013, 4:34pm UTC](https://discuss.elastic.co/t/customqueryparser-and-customsimilarity-to-integrate-payload/13535 "2013-09-16T16:34:23Z")

</div>

Hi, In the continuity of a development to integrate payloads into my elastic search application, I developped successfully custom analyzers, custom similarity and custom queyr parser. BTW, if someone is intereste…

---

## [timelionのTime-feild nameについて](https://discuss.elastic.co/t/timelion-time-feild-name/41975)

<div class="topic-metadata">

**Author:** [@kawai](https://discuss.elastic.co/u/kawai)\
**Replies:** 2\
**Last updated:** [February 17, 2016, 9:52am UTC](https://discuss.elastic.co/t/timelion-time-feild-name/41975 "2016-02-17T09:52:11Z")

</div>

はじめまして EmbulkよりElasticsearchにデータを投入しtimelionで表示するように考えておりますが Time-feild nameがlogstashの型式(@timestamp)でない場合にtimelionで表示できないようにみえます。 データ投入後kibana4のDiscoverで時間データとして扱われて時系列グラフで表示されていることは確認できています。 もしtimestamp以外を指定した場合、何か追加…

---

## [\[ANNOUNCE\] YCSB 0.3.0 Release](https://discuss.elastic.co/t/announce-ycsb-0-3-0-release/27231)

<div class="topic-metadata">

**Author:** [@gkamat](https://discuss.elastic.co/u/gkamat)\
**Replies:** 2\
**Last updated:** [August 12, 2015, 9:36pm UTC](https://discuss.elastic.co/t/announce-ycsb-0-3-0-release/27231 "2015-08-12T21:36:45Z")

</div>

On behalf of the development community, I'm pleased to announce the release of YCSB version 0.3.0. Highlights: Aerospike 3.5 support (new) Apache Accumulo 1.6 support Apache Cassandra 2.0 CQL support Apache HBase 1.…

---

## [Elasticsearch - Data loss while reindexing (scan and bulk insert)](https://discuss.elastic.co/t/elasticsearch-data-loss-while-reindexing-scan-and-bulk-insert/16634)

<div class="topic-metadata">

**Author:** [@rubyprince](https://discuss.elastic.co/u/rubyprince)\
**Replies:** 2\
**Last updated:** [March 27, 2014, 1:14pm UTC](https://discuss.elastic.co/t/elasticsearch-data-loss-while-reindexing-scan-and-bulk-insert/16634 "2014-03-27T13:14:03Z")

</div>

Hi, We were trying to reindex our index so that we could increase the number of shards in our index. The number of shards in our index is 20, and we wanted to make it 500. So, we used Tire gem, reindex method f…

---

## [Unable to parse the apache error logs](https://discuss.elastic.co/t/unable-to-parse-the-apache-error-logs/156339)

<div class="topic-metadata">

**Author:** [@Nithani25](https://discuss.elastic.co/u/Nithani25)\
**Replies:** 1\
**Last updated:** [November 15, 2018, 3:38pm UTC](https://discuss.elastic.co/t/unable-to-parse-the-apache-error-logs/156339 "2018-11-15T15:38:53Z")

</div>

Hi Team, I am try to parse some set of apache access and error logs via filebeat input logs, although i am successfull in getting the apache logs in kibana, i am not getting any apache error messages in the kibana. I am…

---

## [Winlogbeat @timestamp Field Problem](https://discuss.elastic.co/t/winlogbeat-timestamp-field-problem/65383)

<div class="topic-metadata">

**Author:** [@leantw1ce](https://discuss.elastic.co/u/leantw1ce)\
**Replies:** 1\
**Last updated:** [November 14, 2016, 2:09pm UTC](https://discuss.elastic.co/t/winlogbeat-timestamp-field-problem/65383 "2016-11-14T14:09:54Z")

</div>

Hi, first of all my english is not good enough so sorry about that. I have ELK on an Ubuntu server. Logstash version is 2.3.4, Elastichsearch 1.7.3, and Kibana 4.1.2. I could successfully obtain logs of another Ubuntu se…

---

## [lOGSTASH cONFIGURATION not working in 2.3.3](https://discuss.elastic.co/t/logstash-configuration-not-working-in-2-3-3/52522)

<div class="topic-metadata">

**Author:** [@Hassan\_Nashrah](https://discuss.elastic.co/u/Hassan_Nashrah)\
**Replies:** 1\
**Last updated:** [June 13, 2016, 1:41am UTC](https://discuss.elastic.co/t/logstash-configuration-not-working-in-2-3-3/52522 "2016-06-13T01:41:10Z")

</div>

My logstash configuration is not working in the latest update of logstash it works with logstash 1.4.4 ... The given configuration is invalid. Reason: The setting \`type\` in plugin \`grok\` is obsolete and is no longer a…

---

## [Filebeat CEF Checkpoint errors](https://discuss.elastic.co/t/filebeat-cef-checkpoint-errors/278040)

<div class="topic-metadata">

**Author:** [@rainierwolf](https://discuss.elastic.co/u/rainierwolf)\
**Replies:** 5\
**Last updated:** [July 8, 2021, 8:44am UTC](https://discuss.elastic.co/t/filebeat-cef-checkpoint-errors/278040 "2021-07-08T08:44:03Z")

</div>

Hello team, I have been testing this solution for a short time and it seems very powerful. I have enabled Filebeat with the CEF module for the logs of our Checkpoint platform. I have configured filebeat indicated in the…

---

## [Why do shards seem to get recreated when they already exist?](https://discuss.elastic.co/t/why-do-shards-seem-to-get-recreated-when-they-already-exist/219228)

<div class="topic-metadata">

**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\
**Replies:** 5\
**Last updated:** [February 14, 2020, 2:29pm UTC](https://discuss.elastic.co/t/why-do-shards-seem-to-get-recreated-when-they-already-exist/219228 "2020-02-14T14:29:24Z")

</div>

Elasticsearch 6.8.6. I'm wondering if someone can explain why after opening, unfreezing and freezing an index, some replica shards sometimes appear to be get recreated from primaries even though they already exist on di…

---

## [Defining a mapping for join datatype - Java API](https://discuss.elastic.co/t/defining-a-mapping-for-join-datatype-java-api/124304)

<div class="topic-metadata">

**Author:** [@kchrusciel](https://discuss.elastic.co/u/kchrusciel)\
**Replies:** 5\
**Last updated:** [March 16, 2018, 2:59pm UTC](https://discuss.elastic.co/t/defining-a-mapping-for-join-datatype-java-api/124304 "2018-03-16T14:59:13Z")

</div>

Hi, I migration from old ES version to newest 6.2.2. Right now I want to migrate from \_parent to join using Java API: XContentBuilder documentMapping = jsonBuilder() .startObject() …

---

## [ES5 vs ES2 index size increase](https://discuss.elastic.co/t/es5-vs-es2-index-size-increase/80749)

<div class="topic-metadata">

**Author:** [@Kazama](https://discuss.elastic.co/u/Kazama)\
**Replies:** 5\
**Last updated:** [March 31, 2017, 10:49am UTC](https://discuss.elastic.co/t/es5-vs-es2-index-size-increase/80749 "2017-03-31T10:49:57Z")

</div>

The only changes I've made to my indexes migrating from ES 2.4.4 to ES 5.3.0 are such mappings upgrade (rest of the fields are compatible with 5.x): { x: string, index: not\_analyzed } =\> { x: keyword } { x: string, ter…

---

## [Nginx logs without year and seconds information](https://discuss.elastic.co/t/nginx-logs-without-year-and-seconds-information/57780)

<div class="topic-metadata">

**Author:** [@vvs14](https://discuss.elastic.co/u/vvs14)\
**Replies:** 5\
**Last updated:** [August 18, 2016, 6:39am UTC](https://discuss.elastic.co/t/nginx-logs-without-year-and-seconds-information/57780 "2016-08-18T06:39:51Z")

</div>

I have Nginx as loadbalancer which is generating logs without year and second information in timestamp. One of those logs are 08-10 09:28 root ERROR Error connecting to CRS REST API : \[Errno 111\] Connection r…

---

## [Snapshots with a shard failure](https://discuss.elastic.co/t/snapshots-with-a-shard-failure/315838)

<div class="topic-metadata">

**Author:** [@Nicolaegis](https://discuss.elastic.co/u/Nicolaegis)\
**Replies:** 4\
**Last updated:** [October 6, 2022, 12:33pm UTC](https://discuss.elastic.co/t/snapshots-with-a-shard-failure/315838 "2022-10-06T12:33:15Z")

</div>

Hello, I would like to know if a snapshot with a failed shard can be retried without restarting the whole process. Thank you

---

## [An error occurred while enabling session management: Error: Failed when trying to obtain the endpoints from your IdP](https://discuss.elastic.co/t/an-error-occurred-while-enabling-session-management-error-failed-when-trying-to-obtain-the-endpoints-from-your-idp/242993)

<div class="topic-metadata">

**Author:** [@Kundan\_Singh](https://discuss.elastic.co/u/Kundan_Singh)\
**Replies:** 4\
**Last updated:** [July 29, 2020, 5:01am UTC](https://discuss.elastic.co/t/an-error-occurred-while-enabling-session-management-error-failed-when-trying-to-obtain-the-endpoints-from-your-idp/242993 "2020-07-29T05:01:34Z")

</div>

I am configuring kibana 7.2 with Single Sign-On with OpenID and Keycloak for https and its throwing error unable to obtain IDP endpoint. Kibana.yml # Kibana is served by a back end server. This setting specifies the po…

---

## [Error installing Watcher](https://discuss.elastic.co/t/error-installing-watcher/69084)

<div class="topic-metadata">

**Author:** [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\
**Replies:** 4\
**Last updated:** [December 14, 2016, 9:39pm UTC](https://discuss.elastic.co/t/error-installing-watcher/69084 "2016-12-14T21:39:03Z")

</div>

I'm using Elasticsearch 2.3.5 ,Shield, marvel. I installed watcher and while verifying that Watcher is set up, using curl -XGET 'http://localhost:9200/\_watcher/stats?pretty' I'm getting an error like: { "error": { …

---

## [Add timestamp to index created by Watcher action](https://discuss.elastic.co/t/add-timestamp-to-index-created-by-watcher-action/279682)

<div class="topic-metadata">

**Author:** [@twilight](https://discuss.elastic.co/u/twilight)\
**Replies:** 2\
**Last updated:** [August 1, 2021, 6:20pm UTC](https://discuss.elastic.co/t/add-timestamp-to-index-created-by-watcher-action/279682 "2021-08-01T18:20:05Z")

</div>

Hello, This is related to Watchers using 'index' action i.e. putting alert info (key, value) to the specified log. However I noticed that the index entries don't have any date/timestamp field, how can I add a new field…

---

## [No ingest node in the cluster](https://discuss.elastic.co/t/no-ingest-node-in-the-cluster/252952)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 2\
**Last updated:** [October 22, 2020, 1:41pm UTC](https://discuss.elastic.co/t/no-ingest-node-in-the-cluster/252952 "2020-10-22T13:41:54Z")

</div>

I am using elasticsearch cluster of 6 node 3 master 2 data node 1 coordinate node.The data nodes and coordinate node throwing the exception of no ingest node in this cluster and i am using logstash for processing the dat…

---

## [Filebeat 7.0.0 rename index](https://discuss.elastic.co/t/filebeat-7-0-0-rename-index/177435)

<div class="topic-metadata">

**Author:** [@nimda](https://discuss.elastic.co/u/nimda)\
**Replies:** 2\
**Last updated:** [April 23, 2019, 12:41pm UTC](https://discuss.elastic.co/t/filebeat-7-0-0-rename-index/177435 "2019-04-23T12:41:08Z")

</div>

Hello everyone, I've tested lately filebeat 7.0.0. but coudn't get it to work with my elasticsearch-cluster (also version 7.0.0). Whenever I used the appropiate way to change the index name: https://www.elastic.co/guid…

---

## [Marvel 2 is missing IOPs and Network traffic graphs](https://discuss.elastic.co/t/marvel-2-is-missing-iops-and-network-traffic-graphs/33670)

<div class="topic-metadata">

**Author:** [@ajay\_bh111](https://discuss.elastic.co/u/ajay_bh111)\
**Replies:** 2\
**Last updated:** [November 16, 2015, 3:37pm UTC](https://discuss.elastic.co/t/marvel-2-is-missing-iops-and-network-traffic-graphs/33670 "2015-11-16T15:37:49Z")

</div>

Key information trend in ES cluster nodes about network traffic, IOPs, storage used are missing and there does not appear to be any link to add additional dashboard with basic license.

---

## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/297938)

<div class="topic-metadata">

**Author:** [@Bhanuji\_paluri](https://discuss.elastic.co/u/Bhanuji_paluri)\
**Replies:** 7\
**Last updated:** [February 23, 2022, 6:05am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/297938 "2022-02-23T06:05:07Z")

</div>

we are getting "kibana server not ready yet " error in browser level, below are the kibana logs {"type":"log","@timestamp":"2022-02-22T17:41:26Z","tags":\["error","savedobjects-service"\],"pid":22996,"message":"Unable to…

---

## [Quelle architecture light mais efficace pour un stash ELK?](https://discuss.elastic.co/t/quelle-architecture-light-mais-efficace-pour-un-stash-elk/40947)

<div class="topic-metadata">

**Author:** [@C\_H](https://discuss.elastic.co/u/C_H)\
**Replies:** 1\
**Last updated:** [January 25, 2017, 10:01pm UTC](https://discuss.elastic.co/t/quelle-architecture-light-mais-efficace-pour-un-stash-elk/40947 "2017-01-25T22:01:32Z")

</div>

Bonjour, Je réfléchi à déployer en environnement de production un stask ELK + Filebeat sur un parc de serveurs Linux et Windows. Dans le cadre de mon POC j'ai monté une architecture assez simple comme suit : Kibana,…

---

## [Logstash mutate add field not showing the added field](https://discuss.elastic.co/t/logstash-mutate-add-field-not-showing-the-added-field/279385)

<div class="topic-metadata">

**Author:** [@Hamza\_El\_Aouane](https://discuss.elastic.co/u/Hamza_El_Aouane)\
**Replies:** 3\
**Last updated:** [July 22, 2021, 3:55pm UTC](https://discuss.elastic.co/t/logstash-mutate-add-field-not-showing-the-added-field/279385 "2021-07-22T15:55:51Z")

</div>

Hello guys. I am testing some functionalities of logstash but I am a bit confused about the process of implementing a filter mutate. Just for testing purpose I have a kiwi syslog generating random logs. Those logs have…

[Previous page](https://discuss.elastic.co/top.md?page=1115&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1117&per_page=50&period=all)
