# Top

**URL:** https://discuss.elastic.co/top.md?page=1126&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1127

---

## [ES snapshot of a specific shard](https://discuss.elastic.co/t/es-snapshot-of-a-specific-shard/44151)

<div class="topic-metadata">

**Author:** [@Ashish\_Belokar](https://discuss.elastic.co/u/Ashish_Belokar)\
**Replies:** 4\
**Last updated:** [March 14, 2016, 10:27am UTC](https://discuss.elastic.co/t/es-snapshot-of-a-specific-shard/44151 "2016-03-14T10:27:31Z")

</div>

Can we take a snapshot of a particular shard of an index in ES ?

---

## [Show incremental data in Kibana \[ Like Incremental Bytes value \]](https://discuss.elastic.co/t/show-incremental-data-in-kibana-like-incremental-bytes-value/35248)

<div class="topic-metadata">

**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\
**Replies:** 4\
**Last updated:** [November 23, 2015, 4:36am UTC](https://discuss.elastic.co/t/show-incremental-data-in-kibana-like-incremental-bytes-value/35248 "2015-11-23T04:36:56Z")

</div>

In my setup, IN/OUT bytes value is an Incremental one. For example, 1st 60mins --\> 120KB 2nd 60mins --\> 134KB 3rd 60mins --\> 160KB How do I graph it ?. Since, this bytes value is incremental one. Either any option …

---

## [org.springframework.beans.factory.BeanCreationException: Error creating bean](https://discuss.elastic.co/t/org-springframework-beans-factory-beancreationexception-error-creating-bean/77988)

<div class="topic-metadata">

**Author:** [@zegdene](https://discuss.elastic.co/u/zegdene)\
**Replies:** 0\
**Last updated:** [March 9, 2017, 1:31pm UTC](https://discuss.elastic.co/t/org-springframework-beans-factory-beancreationexception-error-creating-bean/77988 "2017-03-09T13:31:20Z")

</div>

Hi, i'm new in elasticsearch and i need to creating mappings and/or settings using the ElasticsearchTransportClientFactoryBean instead of ElasticsearchClientFactoryBean fails, but I receive the following error: Error …

---

## [Null Values Ignred by Elasticsearch](https://discuss.elastic.co/t/null-values-ignred-by-elasticsearch/298456)

<div class="topic-metadata">

**Author:** [@xef](https://discuss.elastic.co/u/xef)\
**Replies:** 2\
**Last updated:** [March 1, 2022, 11:44am UTC](https://discuss.elastic.co/t/null-values-ignred-by-elasticsearch/298456 "2022-03-01T11:44:43Z")

</div>

We are using the NEST library with Elasticsearch versions 7.14. Lets say we have assigned a field a value of "hello World". The filed is mapped as a Keyword type and Not Indexed. If you update that document using the …

---

## [Graph visualization - network packet tracing](https://discuss.elastic.co/t/graph-visualization-network-packet-tracing/154165)

<div class="topic-metadata">

**Author:** [@Petr\_Stepan](https://discuss.elastic.co/u/Petr_Stepan)\
**Replies:** 2\
**Last updated:** [October 31, 2018, 4:40pm UTC](https://discuss.elastic.co/t/graph-visualization-network-packet-tracing/154165 "2018-10-31T16:40:11Z")

</div>

HI, I'm starting with graph visualization in Kibana and I would like to known if it is possible to visualize following task. I Have a network consisted of 10 servers, for example and one client which receives messages…

---

## [SearchDoubt in research with compound terms, but part of the term is equal to other searches](https://discuss.elastic.co/t/searchdoubt-in-research-with-compound-terms-but-part-of-the-term-is-equal-to-other-searches/109352)

<div class="topic-metadata">

**Author:** [@RafaelPosthaus](https://discuss.elastic.co/u/RafaelPosthaus)\
**Replies:** 2\
**Last updated:** [November 28, 2017, 1:01pm UTC](https://discuss.elastic.co/t/searchdoubt-in-research-with-compound-terms-but-part-of-the-term-is-equal-to-other-searches/109352 "2017-11-28T13:01:25Z")

</div>

Good morning, how are you? I own an application where my e-commerce products search directly into my ElasticSearch database. As our segment is Clothing, I have a situation, I wonder if you can help me. Before the doubt…

---

## [How to use 'Esbolt' in Storm Trident](https://discuss.elastic.co/t/how-to-use-esbolt-in-storm-trident/27941)

<div class="topic-metadata">

**Author:** [@Maisy](https://discuss.elastic.co/u/Maisy)\
**Replies:** 2\
**Last updated:** [August 24, 2015, 12:30pm UTC](https://discuss.elastic.co/t/how-to-use-esbolt-in-storm-trident/27941 "2015-08-24T12:30:06Z")

</div>

I used EsBolt at storm topology like this: builder.setBolt(topic + "WriteEsbolt", new EsBolt("{index}/{type}") but I cannot use that at storm Trident.. Trident use not bolt but operator.. How can I insert tuple data i…

---

## [PHP agent compilation error](https://discuss.elastic.co/t/php-agent-compilation-error/245732)

<div class="topic-metadata">

**Author:** [@tumenzul](https://discuss.elastic.co/u/tumenzul)\
**Replies:** 2\
**Last updated:** [August 20, 2020, 9:12am UTC](https://discuss.elastic.co/t/php-agent-compilation-error/245732 "2020-08-20T09:12:47Z")

</div>

Hello, I am trying install PHP agent for APM and doing steps following documentation. https://github.com/elastic/apm-agent-php/blob/master/docs/setup.asciidoc But it gives error when executing 'make' command. \[root@we…

---

## [NEST 2.4.6: Type Fields - cannot access internal constructor](https://discuss.elastic.co/t/nest-2-4-6-type-fields-cannot-access-internal-constructor/61870)

<div class="topic-metadata">

**Author:** [@Denis\_Lamanov](https://discuss.elastic.co/u/Denis_Lamanov)\
**Replies:** 2\
**Last updated:** [November 24, 2016, 9:01am UTC](https://discuss.elastic.co/t/nest-2-4-6-type-fields-cannot-access-internal-constructor/61870 "2016-11-24T09:01:49Z")

</div>

Hi guys, Hi @forloop How should we initialize Fields in SourceFilter? Using the latest version of NEST we can't specify source fields since can't use type Fields: var source = new SourceFilter { …

---

## [Perforce server log module for Filebeat](https://discuss.elastic.co/t/perforce-server-log-module-for-filebeat/147168)

<div class="topic-metadata">

**Author:** [@robaato](https://discuss.elastic.co/u/robaato)\
**Replies:** 6\
**Last updated:** [September 6, 2018, 7:53am UTC](https://discuss.elastic.co/t/perforce-server-log-module-for-filebeat/147168 "2018-09-06T07:53:02Z")

</div>

Hi Am looking at developing this - wrapping up a log parsing library to integrate into Filebeat. The issue is around matching up start/end log entries, together with various intervening log entries for some commands (l…

---

## [Help with grok filter](https://discuss.elastic.co/t/help-with-grok-filter/109637)

<div class="topic-metadata">

**Author:** [@Rafael\_Pereira\_Silva](https://discuss.elastic.co/u/Rafael_Pereira_Silva)\
**Replies:** 6\
**Last updated:** [December 6, 2017, 10:30am UTC](https://discuss.elastic.co/t/help-with-grok-filter/109637 "2017-12-06T10:30:07Z")

</div>

Hello, I am dificult with Grok Filter this message: loc=45671|time=2017-11-27 18:35:02|action=HTTPS Inspect|orig=10.212.12.31|i/f\_dir=inbound|i/f\_name=eth1.315|has\_accounting=0|uuid=\<00000000,00000000,00000000,0000000…

---

## [Snapshot creation error in s3 repo](https://discuss.elastic.co/t/snapshot-creation-error-in-s3-repo/74834)

<div class="topic-metadata">

**Author:** [@Balamurali](https://discuss.elastic.co/u/Balamurali)\
**Replies:** 6\
**Last updated:** [February 13, 2017, 11:36am UTC](https://discuss.elastic.co/t/snapshot-creation-error-in-s3-repo/74834 "2017-02-13T11:36:41Z")

</div>

Hi all, while taking snapshot in s3 repo, getting below expections {"error":"RemoteTransportException\[\[nodename\]\[inet\[/ip:port\]\]\[cluster/snapshot/create\]\]; nested: SnapshotCreationException\[\[my\_s3\_repository:snapshot…

---

## [Unrecognized VM option 'UseConcMarkSweepGC'](https://discuss.elastic.co/t/unrecognized-vm-option-useconcmarksweepgc/251109)

<div class="topic-metadata">

**Author:** [@dewell](https://discuss.elastic.co/u/dewell)\
**Replies:** 1\
**Last updated:** [October 6, 2020, 2:30pm UTC](https://discuss.elastic.co/t/unrecognized-vm-option-useconcmarksweepgc/251109 "2020-10-06T14:30:07Z")

</div>

Hello, in my work I got access to a virtual machine with elasticsearch. It used to be running so I didn't have to change something myself. For some reason it stopped and when I try to restart it I get the following erro…

---

## [Elasticsearch downgrade 7.1-\>6.7.2 fails](https://discuss.elastic.co/t/elasticsearch-downgrade-7-1-6-7-2-fails/185853)

<div class="topic-metadata">

**Author:** [@Kamil\_Stars](https://discuss.elastic.co/u/Kamil_Stars)\
**Replies:** 1\
**Last updated:** [June 14, 2019, 10:22pm UTC](https://discuss.elastic.co/t/elasticsearch-downgrade-7-1-6-7-2-fails/185853 "2019-06-14T22:22:46Z")

</div>

I stopped ES service, then used: sudo yum remove elasticsearch To get it out of here. I changed repos files to use 6.x versions. Then i tried installing it with sudo yum install elasticsearch-6.7.2 But i get this er…

---

## [Connect filebeat to elasticsearch](https://discuss.elastic.co/t/connect-filebeat-to-elasticsearch/150240)

<div class="topic-metadata">

**Author:** [@mcoa](https://discuss.elastic.co/u/mcoa)\
**Replies:** 1\
**Last updated:** [September 28, 2018, 1:09pm UTC](https://discuss.elastic.co/t/connect-filebeat-to-elasticsearch/150240 "2018-09-28T13:09:25Z")

</div>

Hello, i've a filebeat-6.4.1-1 and try connect to ELK (elasticsearch-5.6 and kibana-5.6.12) but not connect and not index create in to Kibana. My filebeat.yml is: filebeat.inputs: - type: log enabled: true paths: …

---

## [Reindex and status 409](https://discuss.elastic.co/t/reindex-and-status-409/94843)

<div class="topic-metadata">

**Author:** [@MarkTierney](https://discuss.elastic.co/u/MarkTierney)\
**Replies:** 1\
**Last updated:** [July 28, 2017, 1:07pm UTC](https://discuss.elastic.co/t/reindex-and-status-409/94843 "2017-07-28T13:07:02Z")

</div>

Hi Folks, When we do a reindex on our indexes we are doing the following: create the destination index run reindex with version\_type internal run reindex with version\_type external switch our index alias to point to…

---

## [Can't post in the X-pack forum. Post elsewhere?](https://discuss.elastic.co/t/cant-post-in-the-x-pack-forum-post-elsewhere/156499)

<div class="topic-metadata">

**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\
**Replies:** 2\
**Last updated:** [November 13, 2018, 3:57pm UTC](https://discuss.elastic.co/t/cant-post-in-the-x-pack-forum-post-elsewhere/156499 "2018-11-13T15:57:10Z")

</div>

I've got an x-pack related question that I would like to post but the New Topic button is grayed out when I go into the x-pack forums. Are xpack questions supposed to be asked elsewhere and I'm just missing it?

---

## [Esrally gets stuck on check-cluster-health](https://discuss.elastic.co/t/esrally-gets-stuck-on-check-cluster-health/291264)

<div class="topic-metadata">

**Author:** [@vtex](https://discuss.elastic.co/u/vtex)\
**Replies:** 3\
**Last updated:** [December 14, 2021, 6:32am UTC](https://discuss.elastic.co/t/esrally-gets-stuck-on-check-cluster-health/291264 "2021-12-14T06:32:58Z")

</div>

Hi, I'm running a local/single-node esrally. My esrally version is 2.30. When I run the below command the execution hangs while checking the status of the cluster -- i.e. in check-cluster-health. $ esrally race --distr…

---

## [Elastic Cloud Export Control Number (ECCN)](https://discuss.elastic.co/t/elastic-cloud-export-control-number-eccn/254037)

<div class="topic-metadata">

**Author:** [@Masok](https://discuss.elastic.co/u/Masok)\
**Replies:** 3\
**Last updated:** [November 3, 2020, 4:59pm UTC](https://discuss.elastic.co/t/elastic-cloud-export-control-number-eccn/254037 "2020-11-03T16:59:15Z")

</div>

Hi We are about to embark on a project which will initially make use of the Elastic Cloud Managed Service. However the compliance department in my organisation require the Export Control Classification Number before the…

---

## [Input text or control for canvas](https://discuss.elastic.co/t/input-text-or-control-for-canvas/160936)

<div class="topic-metadata">

**Author:** [@theflyingcarpet](https://discuss.elastic.co/u/theflyingcarpet)\
**Replies:** 3\
**Last updated:** [December 20, 2018, 9:00am UTC](https://discuss.elastic.co/t/input-text-or-control-for-canvas/160936 "2018-12-20T09:00:50Z")

</div>

Is there a way of having an input text field that I could pass to the sql where clause? So what I type in the field narrows the results returned by the query. I'd then want to display the result rows in a markdown list.

---

## [Aggregate filter plugin throwing undefined method error](https://discuss.elastic.co/t/aggregate-filter-plugin-throwing-undefined-method-error/136027)

<div class="topic-metadata">

**Author:** [@elasticuser1](https://discuss.elastic.co/u/elasticuser1)\
**Replies:** 3\
**Last updated:** [June 15, 2018, 6:07pm UTC](https://discuss.elastic.co/t/aggregate-filter-plugin-throwing-undefined-method-error/136027 "2018-06-15T18:07:46Z")

</div>

Hi, I am trying to get the difference between startDt and endDt but I am getting the below error - Aggregate exception occurred {:error=\>#\<NoMethodError: undefined method \`-' for "2018-06-15T03:50:26.109":String Both …

---

## [Netflow module error](https://discuss.elastic.co/t/netflow-module-error/126593)

<div class="topic-metadata">

**Author:** [@Richard\_Ashman](https://discuss.elastic.co/u/Richard_Ashman)\
**Replies:** 3\
**Last updated:** [April 19, 2018, 9:55am UTC](https://discuss.elastic.co/t/netflow-module-error/126593 "2018-04-19T09:55:03Z")

</div>

(Sorry for any formatting issues, my first post here and didn't want to put in too much data.) I have ELK 6.2 up and running (single host) and processing data from a variety of sources and can see the data in Kibana. Al…

---

## [How can I send logs to logstash without using any beat/agent](https://discuss.elastic.co/t/how-can-i-send-logs-to-logstash-without-using-any-beat-agent/122310)

<div class="topic-metadata">

**Author:** [@rajkumar.m](https://discuss.elastic.co/u/rajkumar.m)\
**Replies:** 3\
**Last updated:** [March 3, 2018, 12:01am UTC](https://discuss.elastic.co/t/how-can-i-send-logs-to-logstash-without-using-any-beat-agent/122310 "2018-03-03T00:01:34Z")

</div>

I would like to know How can I send logs from a client to logstash without using any beat/agent, is it possible to use API and how. please help me

---

## [How does Logstash handle multiple pipeline files?](https://discuss.elastic.co/t/how-does-logstash-handle-multiple-pipeline-files/111645)

<div class="topic-metadata">

**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\
**Replies:** 3\
**Last updated:** [December 19, 2017, 7:47am UTC](https://discuss.elastic.co/t/how-does-logstash-handle-multiple-pipeline-files/111645 "2017-12-19T07:47:37Z")

</div>

I've tried looking in the documentation and Googling for this, but I couldn't find any answer. I'm unclear about how Logstash handles these. I know there is a /etc/logstash/conf.d/ directory which you can put your pipeli…

---

## [Connection error when selecting from ES table in Hive](https://discuss.elastic.co/t/connection-error-when-selecting-from-es-table-in-hive/86636)

<div class="topic-metadata">

**Author:** [@bkard](https://discuss.elastic.co/u/bkard)\
**Replies:** 3\
**Last updated:** [June 13, 2017, 7:54am UTC](https://discuss.elastic.co/t/connection-error-when-selecting-from-es-table-in-hive/86636 "2017-06-13T07:54:00Z")

</div>

Hi all, I've a problem with connecting ES to Hive. I have created an external table in Hive on ES index like this: CREATE EXTERNAL TABLE es\_hive\_test( logger STRING, level STRING, streamer STRING) ST…

---

## [Integration of ELK in TheHive](https://discuss.elastic.co/t/integration-of-elk-in-thehive/320455)

<div class="topic-metadata">

**Author:** [@Midiou\_00](https://discuss.elastic.co/u/Midiou_00)\
**Replies:** 0\
**Last updated:** [December 5, 2022, 9:50am UTC](https://discuss.elastic.co/t/integration-of-elk-in-thehive/320455 "2022-12-05T09:50:29Z")

</div>

Hi everyone, I want to integrate ELK in Thehive SOAR. This is an open source SOAR. May somebody help me for the processus please ?

---

## [Logstash and kafka and order of messages](https://discuss.elastic.co/t/logstash-and-kafka-and-order-of-messages/227651)

<div class="topic-metadata">

**Author:** [@arp220](https://discuss.elastic.co/u/arp220)\
**Replies:** 0\
**Last updated:** [April 12, 2020, 8:32am UTC](https://discuss.elastic.co/t/logstash-and-kafka-and-order-of-messages/227651 "2020-04-12T08:32:29Z")

</div>

Hi. We have an application with the event log, our application send event log to Kafka with JSON format. our topic in Kafka has one partition because we need to read order message, also we use Logstash for consuming even…

---

## [Usage of the Metrics filter - Adding a field from the original event](https://discuss.elastic.co/t/usage-of-the-metrics-filter-adding-a-field-from-the-original-event/41518)

<div class="topic-metadata">

**Author:** [@Rumbles](https://discuss.elastic.co/u/Rumbles)\
**Replies:** 0\
**Last updated:** [February 11, 2016, 4:35pm UTC](https://discuss.elastic.co/t/usage-of-the-metrics-filter-adding-a-field-from-the-original-event/41518 "2016-02-11T16:35:23Z")

</div>

I have created a mongodb filter, which gets me a number of fields, since the only logs that go through are slow logs I want to know how many slow queries and commands are running through my cluster, so I created a metric…

---

## [Support for automatic JMS monitoring in APM 6.7.1](https://discuss.elastic.co/t/support-for-automatic-jms-monitoring-in-apm-6-7-1/221040)

<div class="topic-metadata">

**Author:** [@murat3](https://discuss.elastic.co/u/murat3)\
**Replies:** 5\
**Last updated:** [March 4, 2020, 6:51am UTC](https://discuss.elastic.co/t/support-for-automatic-jms-monitoring-in-apm-6-7-1/221040 "2020-03-04T06:51:46Z")

</div>

Hi, We are evaluating ELK stack v6.7.1 (this is our companies current production version). We have an application which uses JMS (topics and queues). But I dont see any transactions of type "messaging". Does v6.7.1. su…

---

## [Recreating an index re-associate the data?](https://discuss.elastic.co/t/recreating-an-index-re-associate-the-data/78740)

<div class="topic-metadata">

**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\
**Replies:** 5\
**Last updated:** [March 15, 2017, 4:50pm UTC](https://discuss.elastic.co/t/recreating-an-index-re-associate-the-data/78740 "2017-03-15T16:50:04Z")

</div>

ES v2.4.x I've read posts in the forum discouraging users from opening currently closed indices, and to delete and recreate the index as the preferred way. If I recreate an index, will it be associated with the data it…

---

## [Aggregation Filter Sort - InternalFilter cannot be cast to class InternalMultiBucketAggregation](https://discuss.elastic.co/t/aggregation-filter-sort-internalfilter-cannot-be-cast-to-class-internalmultibucketaggregation/302050)

<div class="topic-metadata">

**Author:** [@Sridatta19](https://discuss.elastic.co/u/Sridatta19)\
**Replies:** 4\
**Last updated:** [April 11, 2022, 5:02am UTC](https://discuss.elastic.co/t/aggregation-filter-sort-internalfilter-cannot-be-cast-to-class-internalmultibucketaggregation/302050 "2022-04-11T05:02:05Z")

</div>

I'm try to sort the results generated after performing terms, filter and sum aggregation. But I keep facing an error. GET stats/\_search { "size": 0, "aggs": { "group\_by\_names": { "terms": { "field"…

---

## [Hyperlink or drilldown for a metric in Table Visualisation](https://discuss.elastic.co/t/hyperlink-or-drilldown-for-a-metric-in-table-visualisation/285001)

<div class="topic-metadata">

**Author:** [@Anuj\_Zope](https://discuss.elastic.co/u/Anuj_Zope)\
**Replies:** 4\
**Last updated:** [September 28, 2021, 6:45am UTC](https://discuss.elastic.co/t/hyperlink-or-drilldown-for-a-metric-in-table-visualisation/285001 "2021-09-28T06:45:12Z")

</div>

Hi! I am using Kibana 7.10.2. So I am making a dashboard with tickets data. For certain tables, the last column is the 'Count of Tickets'. What I need it that for every table I make with this column, I want to make the…

---

## [How to create an update request with multiple fields with Java HIGH API](https://discuss.elastic.co/t/how-to-create-an-update-request-with-multiple-fields-with-java-high-api/189552)

<div class="topic-metadata">

**Author:** [@matheusribeirogarcia](https://discuss.elastic.co/u/matheusribeirogarcia)\
**Replies:** 4\
**Last updated:** [July 9, 2019, 3:09pm UTC](https://discuss.elastic.co/t/how-to-create-an-update-request-with-multiple-fields-with-java-high-api/189552 "2019-07-09T15:09:15Z")

</div>

Hello, I'm trying to update some fields of a document based on a query, but I am having problems to push its changes in the UpdateRequest, I am probably doing the script in a wrong way. I am using that client: \<depen…

---

## [Field Values from Pattern Directory](https://discuss.elastic.co/t/field-values-from-pattern-directory/100377)

<div class="topic-metadata">

**Author:** [@robscott27](https://discuss.elastic.co/u/robscott27)\
**Replies:** 4\
**Last updated:** [September 13, 2017, 5:28pm UTC](https://discuss.elastic.co/t/field-values-from-pattern-directory/100377 "2017-09-13T17:28:28Z")

</div>

Hello! I'm looking to pull field values from a pattern defined in /etc/logstash/conf.d/patterns Background: I'm pulling pfsense firewall logs into Kibana via Logstash. And for the most part, it works. But it's missing …

---

## [Do we need to have the Elasticsearch and the web application installed on same server?](https://discuss.elastic.co/t/do-we-need-to-have-the-elasticsearch-and-the-web-application-installed-on-same-server/43482)

<div class="topic-metadata">

**Author:** [@prashanthrd](https://discuss.elastic.co/u/prashanthrd)\
**Replies:** 4\
**Last updated:** [March 4, 2016, 6:27pm UTC](https://discuss.elastic.co/t/do-we-need-to-have-the-elasticsearch-and-the-web-application-installed-on-same-server/43482 "2016-03-04T18:27:37Z")

</div>

Hi Friends, Currently we are testing to use elasticsearch with our web application. The web application is installed on one server, while ealsticsearch is installed on another server. Is it possible to use elasticsear…

---

## [Auto-authenticate Kibana 5.0 dashboard embedded in iframe](https://discuss.elastic.co/t/auto-authenticate-kibana-5-0-dashboard-embedded-in-iframe/68457)

<div class="topic-metadata">

**Author:** [@Tom\_Lancaster](https://discuss.elastic.co/u/Tom_Lancaster)\
**Replies:** 2\
**Last updated:** [December 9, 2016, 3:35pm UTC](https://discuss.elastic.co/t/auto-authenticate-kibana-5-0-dashboard-embedded-in-iframe/68457 "2016-12-09T15:35:28Z")

</div>

Hi, I'm taking the iframe embed from Kibana and I want to plug it into a web app. When it displays, however, it presents a login view. I've tried embedding the auth info in the url a la Basic Auth (http://username:passwo…

---

## [New installed Logstash not work as service](https://discuss.elastic.co/t/new-installed-logstash-not-work-as-service/67352)

<div class="topic-metadata">

**Author:** [@breezzz](https://discuss.elastic.co/u/breezzz)\
**Replies:** 2\
**Last updated:** [November 28, 2016, 1:51pm UTC](https://discuss.elastic.co/t/new-installed-logstash-not-work-as-service/67352 "2016-11-28T13:51:21Z")

</div>

Hello! I have installed Logstash 5 "yum install logstash" to same machine with elastic client node. Then create simple config: cat /etc/logstash/conf.d/nginx\_input.conf input { file { path =\> "/var/log/…

---

## [Logstash 2.3.3 on windows "=1.0 was unexpected at this time" error](https://discuss.elastic.co/t/logstash-2-3-3-on-windows-1-0-was-unexpected-at-this-time-error/53135)

<div class="topic-metadata">

**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\
**Replies:** 2\
**Last updated:** [June 20, 2016, 6:21am UTC](https://discuss.elastic.co/t/logstash-2-3-3-on-windows-1-0-was-unexpected-at-this-time-error/53135 "2016-06-20T06:21:41Z")

</div>

I have logstash 2.3.3 on windows server 2008 R2. When i go try to excute any command getting into bin folder of logsatsh., I get "=1.0 was unexpected at this time" as the error I have java 1.8\_0.92 set as java\_home

---

## [Need help to create a Python script to create Index on Cluster helath API](https://discuss.elastic.co/t/need-help-to-create-a-python-script-to-create-index-on-cluster-helath-api/28834)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 2\
**Last updated:** [September 10, 2015, 3:19pm UTC](https://discuss.elastic.co/t/need-help-to-create-a-python-script-to-create-index-on-cluster-helath-api/28834 "2015-09-10T15:19:50Z")

</div>

Hi Experts , I am new to python , I want to create an index in ES on cluster health API . I got the following code but it's not providing me output the way I want . import json import requests stats = requests.get('…

---

## [Elastic has a large number os rejections search](https://discuss.elastic.co/t/elastic-has-a-large-number-os-rejections-search/277097)

<div class="topic-metadata">

**Author:** [@guimap](https://discuss.elastic.co/u/guimap)\
**Replies:** 8\
**Last updated:** [July 1, 2021, 6:31pm UTC](https://discuss.elastic.co/t/elastic-has-a-large-number-os-rejections-search/277097 "2021-07-01T18:31:10Z")

</div>

Hi guys Recently my elasticsearch are returning 429 HTTP code for all \_search requests, after few search, i noticed that has a large number of rejected search in my threads node\_name name active rejected …

---

## [Multiple nodes docker-compose](https://discuss.elastic.co/t/multiple-nodes-docker-compose/260127)

<div class="topic-metadata">

**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\
**Replies:** 8\
**Last updated:** [January 5, 2021, 6:32am UTC](https://discuss.elastic.co/t/multiple-nodes-docker-compose/260127 "2021-01-05T06:32:38Z")

</div>

Hi, I currently manage a docker ELK stack with 3 nodes (1 master/no-data, 2 master/data) on the same machine. If I add 2 mode data node containers to this(still on the same machine) will i experience significant perform…

---

## [Search performance loss in Elasticsearch 7](https://discuss.elastic.co/t/search-performance-loss-in-elasticsearch-7/248871)

<div class="topic-metadata">

**Author:** [@agutierrezrodriguez](https://discuss.elastic.co/u/agutierrezrodriguez)\
**Replies:** 8\
**Last updated:** [September 18, 2020, 7:33am UTC](https://discuss.elastic.co/t/search-performance-loss-in-elasticsearch-7/248871 "2020-09-18T07:33:08Z")

</div>

Hi! We are upgrading our Elasticsearch 5.6 clusters to Elasticsearch 7.6. We're detecting that the search performance is worst in Elasticsearch 7.6 than 5.6. We are testing empty clusters with the same installation pr…

---

## [After ML node accidentally restart, Datafeed not working properly](https://discuss.elastic.co/t/after-ml-node-accidentally-restart-datafeed-not-working-properly/213025)

<div class="topic-metadata">

**Author:** [@EunBae\_Park](https://discuss.elastic.co/u/EunBae_Park)\
**Replies:** 8\
**Last updated:** [January 6, 2020, 3:29pm UTC](https://discuss.elastic.co/t/after-ml-node-accidentally-restart-datafeed-not-working-properly/213025 "2020-01-06T15:29:11Z")

</div>

Hi, This is Jason. I'm using ELK 6.8 with ML. Yesterday, One of our ELK nodes, which is for ML, was incidentally restarted, then Some of ML Jobs not working. I mean "Not Working" is Job is still "Open" and datafeed is…

---

## [Geoip in logstash returns coordinates correctly for simple grok filter but not from more complex filter](https://discuss.elastic.co/t/geoip-in-logstash-returns-coordinates-correctly-for-simple-grok-filter-but-not-from-more-complex-filter/123674)

<div class="topic-metadata">

**Author:** [@studiorecordings](https://discuss.elastic.co/u/studiorecordings)\
**Replies:** 8\
**Last updated:** [March 13, 2018, 11:09pm UTC](https://discuss.elastic.co/t/geoip-in-logstash-returns-coordinates-correctly-for-simple-grok-filter-but-not-from-more-complex-filter/123674 "2018-03-13T23:09:30Z")

</div>

Hi, I am trying to extract an IP address from a syslog message in log stash. When I run log stash in debugging mode to stdout using only this simple filter it maps to geoip correctly and the geoip plugin processes and o…

---

## [How to convert "Selection Fields" to code?](https://discuss.elastic.co/t/how-to-convert-selection-fields-to-code/98087)

<div class="topic-metadata">

**Author:** [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\
**Replies:** 8\
**Last updated:** [September 6, 2017, 5:52am UTC](https://discuss.elastic.co/t/how-to-convert-selection-fields-to-code/98087 "2017-09-06T05:52:50Z")

</div>

Hello. I forward my windows Event Log via "Winlogbeat" to my Linux box that I installed "Elasticsearch" and "Kibana" on it. I can customize my Event logs via "Selection Fields" but I must create it each time that I open…

---

## [Observability logs - Alert log stoppage](https://discuss.elastic.co/t/observability-logs-alert-log-stoppage/281414)

<div class="topic-metadata">

**Author:** [@jancodenew](https://discuss.elastic.co/u/jancodenew)\
**Replies:** 7\
**Last updated:** [August 18, 2021, 9:09am UTC](https://discuss.elastic.co/t/observability-logs-alert-log-stoppage/281414 "2021-08-18T09:09:33Z")

</div>

Hello, I am able to create log stoppage alert using threshold alert type in logs-ovservability. Is there any way to add multiple index names in this observalibilty-logs settings?, so that I can create multiple alerts f…

---

## [Exception while searching from Java](https://discuss.elastic.co/t/exception-while-searching-from-java/13281)

<div class="topic-metadata">

**Author:** [@Joost\_Cassee](https://discuss.elastic.co/u/Joost_Cassee)\
**Replies:** 7\
**Last updated:** [August 22, 2013, 12:59pm UTC](https://discuss.elastic.co/t/exception-while-searching-from-java/13281 "2013-08-22T12:59:25Z")

</div>

Hi all, After an upgrade from 0.20 to 0.90.3 (both server and Java client, both were restarted) I get the following exception when I do a search. Has something changed that I have not considered? Regards, Joost …

---

## [Functionbeat throwing the error add\_cloud\_metadata: hosting provider type not detected](https://discuss.elastic.co/t/functionbeat-throwing-the-error-add-cloud-metadata-hosting-provider-type-not-detected/288675)

<div class="topic-metadata">

**Author:** [@Jijo\_Johny](https://discuss.elastic.co/u/Jijo_Johny)\
**Replies:** 1\
**Last updated:** [November 9, 2021, 9:38am UTC](https://discuss.elastic.co/t/functionbeat-throwing-the-error-add-cloud-metadata-hosting-provider-type-not-detected/288675 "2021-11-09T09:38:21Z")

</div>

I am trying to connect to the Elasticsearch and Kibana 7.10.2, launched from AWS under open source licence. I am trying to stream the logs from AWS CLoudwatch log group to Kibana, I have finished the set up of functionbe…

---

## [Como guardan logstash y elasticsearch](https://discuss.elastic.co/t/como-guardan-logstash-y-elasticsearch/52116)

<div class="topic-metadata">

**Author:** [@CValor](https://discuss.elastic.co/u/CValor)\
**Replies:** 1\
**Last updated:** [June 8, 2016, 8:57pm UTC](https://discuss.elastic.co/t/como-guardan-logstash-y-elasticsearch/52116 "2016-06-08T20:57:33Z")

</div>

Buenas tardes. Como dice el asunto tengo mis dudas de como y donde guardan tanto logstash como elasticsearch. Mi caso en particular es que quiero volver a procesar logs que no quedaron parseados correctamente. Gracias…

---

## [Access Kibana Remotely](https://discuss.elastic.co/t/access-kibana-remotely/334678)

<div class="topic-metadata">

**Author:** [@Rakhshunda\_Noorein\_J](https://discuss.elastic.co/u/Rakhshunda_Noorein_J)\
**Replies:** 3\
**Last updated:** [May 31, 2023, 6:26am UTC](https://discuss.elastic.co/t/access-kibana-remotely/334678 "2023-05-31T06:26:25Z")

</div>

Hello, I want to access kibana remotely. I have changed my Network.Host to my private ip in elasticsearch.yml file then I have changed server.host: 0.0.0.0 in kibana.yml file. I am able to access elasticsearch port 920…

[Previous page](https://discuss.elastic.co/top.md?page=1125&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1127&per_page=50&period=all)
