# Top

**URL:** https://discuss.elastic.co/top.md?page=1131&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1132

---

## [Elastic cluster recommendation for large data set](https://discuss.elastic.co/t/elastic-cluster-recommendation-for-large-data-set/232987)

<div class="topic-metadata">

**Author:** [@Virajsl](https://discuss.elastic.co/u/Virajsl)\
**Replies:** 2\
**Last updated:** [May 17, 2020, 3:05pm UTC](https://discuss.elastic.co/t/elastic-cluster-recommendation-for-large-data-set/232987 "2020-05-17T15:05:05Z")

</div>

I'm planing to use elasticsearch for my reporting purposes. I'm very new to elasticsearch therefore looking for some advises in below areas. Scenario For reporting purposes i'm using ES. My data set roughly estimated …

---

## [Adding multiple nested json fields to an array field](https://discuss.elastic.co/t/adding-multiple-nested-json-fields-to-an-array-field/204279)

<div class="topic-metadata">

**Author:** [@kylemain](https://discuss.elastic.co/u/kylemain)\
**Replies:** 2\
**Last updated:** [October 22, 2019, 7:29pm UTC](https://discuss.elastic.co/t/adding-multiple-nested-json-fields-to-an-array-field/204279 "2019-10-22T19:29:17Z")

</div>

Hello, I have a nested json field in my logs called "instanceId" : "responseElements": { "instancesSet": { "items": \[ { "instanceId": "i-02669ced00e8a3701", "currentState":{ "code": 32, "name": "shutting-down" }, "prev…

---

## [Yaxis scale on Canvas vs Timelion](https://discuss.elastic.co/t/yaxis-scale-on-canvas-vs-timelion/199281)

<div class="topic-metadata">

**Author:** [@cesarlino](https://discuss.elastic.co/u/cesarlino)\
**Replies:** 2\
**Last updated:** [September 20, 2019, 12:53pm UTC](https://discuss.elastic.co/t/yaxis-scale-on-canvas-vs-timelion/199281 "2019-09-20T12:53:07Z")

</div>

Hi, In Kibana 7.3.1, when creating a graph in Timelion I can specify the unit for yaxis through "yaxis(units=bytes)" in order to scale to kb, mb, gb etc.. However, if I use the same query in Canvas, the yaxis does not s…

---

## [Latest value as a metric](https://discuss.elastic.co/t/latest-value-as-a-metric/148954)

<div class="topic-metadata">

**Author:** [@gll.aspida](https://discuss.elastic.co/u/gll.aspida)\
**Replies:** 2\
**Last updated:** [September 21, 2018, 2:20pm UTC](https://discuss.elastic.co/t/latest-value-as-a-metric/148954 "2018-09-21T14:20:20Z")

</div>

Hello, I am trying to make a visualization which will have the values of a Term in the x axis and want to have the latest value of another field on the y axis. I searched and found some answers here and here but my main…

---

## [Why it tell me that \[0\] "\_dateparsefailure" when i change the @timestamp](https://discuss.elastic.co/t/why-it-tell-me-that-0-dateparsefailure-when-i-change-the-timestamp/127272)

<div class="topic-metadata">

**Author:** [@chenzilong444](https://discuss.elastic.co/u/chenzilong444)\
**Replies:** 2\
**Last updated:** [April 9, 2018, 8:55am UTC](https://discuss.elastic.co/t/why-it-tell-me-that-0-dateparsefailure-when-i-change-the-timestamp/127272 "2018-04-09T08:55:31Z")

</div>

{ "timestamp" =\> "2018-04-09 15:33:45.294", "@version" =\> "1", "@timestamp" =\> 2018-04-09T08:19:32.987Z, "tags" =\> \[ \[0\] "\_dateparsefailure" \], "message" =\> "\[2018-04-09 15:33:45.294\]\\r", "host" =\> "BIH-D-6331" …

---

## [ImmutableMap dependancy issue](https://discuss.elastic.co/t/immutablemap-dependancy-issue/42221)

<div class="topic-metadata">

**Author:** [@dinushan\_m](https://discuss.elastic.co/u/dinushan_m)\
**Replies:** 2\
**Last updated:** [February 19, 2016, 4:16pm UTC](https://discuss.elastic.co/t/immutablemap-dependancy-issue/42221 "2016-02-19T16:16:54Z")

</div>

I get this exception when running a jar on some machines (not on all machines). Is this related to elasticsearch or just a issue of creating the jar using maven ? Exception in thread "Thread-18" java.lang.NoClassDefFo…

---

## [Template rendering using mustache](https://discuss.elastic.co/t/template-rendering-using-mustache/51022)

<div class="topic-metadata">

**Author:** [@Martin\_Lund\_Askoe](https://discuss.elastic.co/u/Martin_Lund_Askoe)\
**Replies:** 0\
**Last updated:** [May 26, 2016, 6:50am UTC](https://discuss.elastic.co/t/template-rendering-using-mustache/51022 "2016-05-26T06:50:22Z")

</div>

I've been trying to create a template, but I am having some trouble with the mustache rendering. On the page: https://www.elastic.co/guide/en/elasticsearch/reference/current/search-template.html, you mention how to use…

---

## [How to run fleet server in insecure mode?](https://discuss.elastic.co/t/how-to-run-fleet-server-in-insecure-mode/296610)

<div class="topic-metadata">

**Author:** [@gabrielfsousa](https://discuss.elastic.co/u/gabrielfsousa)\
**Replies:** 1\
**Last updated:** [February 8, 2022, 4:48pm UTC](https://discuss.elastic.co/t/how-to-run-fleet-server-in-insecure-mode/296610 "2022-02-08T16:48:12Z")

</div>

Im running fleet server in docker with this env --env FLEET\_ENROLL=1\\ --env FLEET\_SERVER\_ENABLE=1\\ --env FLEET\_SERVER\_ELASTICSEARCH\_HOST=$(ELASTICSEARCHHOST)\\ --env FLEET\_SERVER\_SERVICE\_TOKEN=$(SERVICETOKEN)\\ --env FLEE…

---

## [Converting date to TIMESTAMP\_ISO8601 format](https://discuss.elastic.co/t/converting-date-to-timestamp-iso8601-format/262952)

<div class="topic-metadata">

**Author:** [@gloupe](https://discuss.elastic.co/u/gloupe)\
**Replies:** 1\
**Last updated:** [February 2, 2021, 3:24pm UTC](https://discuss.elastic.co/t/converting-date-to-timestamp-iso8601-format/262952 "2021-02-02T15:24:56Z")

</div>

Hi, I'm actually receiving logs with timestamp to this format : Mon Feb 1 13:29:48 2021 From Telegraf who's parsing the log with this Grok pattern : SOURCELOG %{DAY} %{MONTH} (?: %{POSINT:MONTHDAY}) %{TIME} %{YEAR} …

---

## [Elasticsearch output not respecting retry\_on\_conflict](https://discuss.elastic.co/t/elasticsearch-output-not-respecting-retry-on-conflict/118964)

<div class="topic-metadata">

**Author:** [@shnhrrsn](https://discuss.elastic.co/u/shnhrrsn)\
**Replies:** 1\
**Last updated:** [February 8, 2018, 4:26pm UTC](https://discuss.elastic.co/t/elasticsearch-output-not-respecting-retry-on-conflict/118964 "2018-02-08T16:26:05Z")

</div>

Unsure if I'm doing something wrong, but I have the following ES output setup: output { stdout { codec =\> json\_lines } elasticsearch { hosts =\> "search:9200" index =\> "posts" template =\> "/indexer/templates/post…

---

## [If conditional statement field source](https://discuss.elastic.co/t/if-conditional-statement-field-source/91043)

<div class="topic-metadata">

**Author:** [@elaair](https://discuss.elastic.co/u/elaair)\
**Replies:** 1\
**Last updated:** [June 28, 2017, 5:44am UTC](https://discuss.elastic.co/t/if-conditional-statement-field-source/91043 "2017-06-28T05:44:32Z")

</div>

I have defined a simple parser and would like to setup a if statement in log stash.conf to have a grok match on one of the fields. I am working towards having many log sources but am starting with only one. I have a fiel…

---

## [Date filter with nano seconds](https://discuss.elastic.co/t/date-filter-with-nano-seconds/80004)

<div class="topic-metadata">

**Author:** [@Toontje](https://discuss.elastic.co/u/Toontje)\
**Replies:** 1\
**Last updated:** [March 25, 2017, 7:23pm UTC](https://discuss.elastic.co/t/date-filter-with-nano-seconds/80004 "2017-03-25T19:23:52Z")

</div>

Hi all! I have a date filed in UNIX format, but not up to the microsecond, but up to the nano second. Example: 1448482607735645 For the date filter to get a decent date out of this i need to divide the content of the d…

---

## [Filebeat Processing /var/log/secure](https://discuss.elastic.co/t/filebeat-processing-var-log-secure/189758)

<div class="topic-metadata">

**Author:** [@aviator](https://discuss.elastic.co/u/aviator)\
**Replies:** 5\
**Last updated:** [July 10, 2019, 3:33pm UTC](https://discuss.elastic.co/t/filebeat-processing-var-log-secure/189758 "2019-07-10T15:33:58Z")

</div>

Hi ES 7.0.2 Am trying to view the Filebeat System New user and groups dashboard but the results are sporadic at best. Filebeat 7.2.0 installed locally on ES instance and on remote machine to confirm. Configured to har…

---

## [Elasticsearch after taking some logs passes the message "Attempted bulk request to the elasticsearch"](https://discuss.elastic.co/t/elasticsearch-after-taking-some-logs-passes-the-message-attempted-bulk-request-to-the-elasticsearch/114280)

<div class="topic-metadata">

**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Replies:** 5\
**Last updated:** [January 5, 2018, 1:36pm UTC](https://discuss.elastic.co/t/elasticsearch-after-taking-some-logs-passes-the-message-attempted-bulk-request-to-the-elasticsearch/114280 "2018-01-05T13:36:49Z")

</div>

As after passing certain logs logstash is displaying a message \[2018-01-05T12:57:50,735\]\[ERROR\]\[logstash.outputs.elasticsearch\] Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreacha…

---

## [Get CurrentSpan in .Net APM Agent](https://discuss.elastic.co/t/get-currentspan-in-net-apm-agent/211741)

<div class="topic-metadata">

**Author:** [@rainbowkid11](https://discuss.elastic.co/u/rainbowkid11)\
**Replies:** 6\
**Last updated:** [December 14, 2019, 12:37pm UTC](https://discuss.elastic.co/t/get-currentspan-in-net-apm-agent/211741 "2019-12-14T12:37:46Z")

</div>

I was looking to add labels to the CurrentSpan in an Asp.Net Core application. The basic is idea I had was to use an EF Core Interceptor to add the labels to the CurrentSpan. However, when I access the CurrentSpan it is …

---

## [Grok pattern for datadog to get everything between two curly braces {}](https://discuss.elastic.co/t/grok-pattern-for-datadog-to-get-everything-between-two-curly-braces/337665)

<div class="topic-metadata">

**Author:** [@shekhsadiq21](https://discuss.elastic.co/u/shekhsadiq21)\
**Replies:** 8\
**Last updated:** [July 6, 2023, 4:47pm UTC](https://discuss.elastic.co/t/grok-pattern-for-datadog-to-get-everything-between-two-curly-braces/337665 "2023-07-06T16:47:47Z")

</div>

Hi All, Can anyone help to get GROK pattern of logs everthing between two curly braces logsample: { CONNECTION: keep-alive X-ORIGINAL-URL: /Data/RetailItem.js?Log=1&Sync=0 X-FORWARDED-PROTO: https X-FORWARDED-PORT:…

---

## [Auditbeat, Filebeat error: system/socket dataset setup failed: unable to monitor probe p:inet6\_create inet6\_create proto={{.P3}}:s32: perf\_event\_open: too many open files](https://discuss.elastic.co/t/auditbeat-filebeat-error-system-socket-dataset-setup-failed-unable-to-monitor-probe-p-inet6-create-inet6-create-proto-p3-perf-event-open-too-many-open-files/251210)

<div class="topic-metadata">

**Author:** [@bilal\_abudan](https://discuss.elastic.co/u/bilal_abudan)\
**Replies:** 3\
**Last updated:** [October 8, 2020, 4:44am UTC](https://discuss.elastic.co/t/auditbeat-filebeat-error-system-socket-dataset-setup-failed-unable-to-monitor-probe-p-inet6-create-inet6-create-proto-p3-perf-event-open-too-many-open-files/251210 "2020-10-08T04:44:13Z")

</div>

Can someone help me please ... ??? i am using Filebeat and Auditbeat, Lets have Auditbeat one, This issue when i started the auditbeat service and theres error below : Exiting: 1 error: system/socket dataset setup fa…

---

## [How to get last N documents with ascending order](https://discuss.elastic.co/t/how-to-get-last-n-documents-with-ascending-order/232028)

<div class="topic-metadata">

**Author:** [@JavaDeveloper](https://discuss.elastic.co/u/JavaDeveloper)\
**Replies:** 0\
**Last updated:** [May 11, 2020, 1:29pm UTC](https://discuss.elastic.co/t/how-to-get-last-n-documents-with-ascending-order/232028 "2020-05-11T13:29:21Z")

</div>

Hi everyone. I know with the following command, we can get last N documents: POST index/\_search { "size": N, (N=10 for example) "sort": { "timestamp": "desc"}, "query": { "match\_all": {} } } But if …

---

## [RDS to Elasticsearch - Setting up Logstash in a highly available/redundant architecture](https://discuss.elastic.co/t/rds-to-elasticsearch-setting-up-logstash-in-a-highly-available-redundant-architecture/210070)

<div class="topic-metadata">

**Author:** [@dshenoy](https://discuss.elastic.co/u/dshenoy)\
**Replies:** 0\
**Last updated:** [December 1, 2019, 4:12pm UTC](https://discuss.elastic.co/t/rds-to-elasticsearch-setting-up-logstash-in-a-highly-available-redundant-architecture/210070 "2019-12-01T16:12:41Z")

</div>

I am looking into a highly available solution to feed in AWS RDS transactions into my Elasticsearch repository. There are some articles on this topic. For example: But this is not a flexible and agile in the long-t…

---

## [Watcher for missing log event](https://discuss.elastic.co/t/watcher-for-missing-log-event/184991)

<div class="topic-metadata">

**Author:** [@ghost3h](https://discuss.elastic.co/u/ghost3h)\
**Replies:** 3\
**Last updated:** [June 10, 2019, 2:10pm UTC](https://discuss.elastic.co/t/watcher-for-missing-log-event/184991 "2019-06-10T14:10:09Z")

</div>

Hi, I'm trying to write a watcher for two specific hosts, for when we do not receive a log entry for them. I found a previous post looking for similar, which linked to this example. I've been trying to modify this to loo…

---

## [Cannot connect to localhost:9200](https://discuss.elastic.co/t/cannot-connect-to-localhost-9200/181974)

<div class="topic-metadata">

**Author:** [@kingram](https://discuss.elastic.co/u/kingram)\
**Replies:** 8\
**Last updated:** [May 23, 2019, 8:24pm UTC](https://discuss.elastic.co/t/cannot-connect-to-localhost-9200/181974 "2019-05-23T20:24:42Z")

</div>

Installation: Raspberry Pi 3+ Raspbian GNU/Linux 9 (stretch)" ===================== Installation ===$ sudo apt-get install elasticsearch Reading package lists... Done Building dependency tree Reading state informat…

---

## [Elasticsearch upgrade from 6.7 to 7.0](https://discuss.elastic.co/t/elasticsearch-upgrade-from-6-7-to-7-0/179140)

<div class="topic-metadata">

**Author:** [@mep](https://discuss.elastic.co/u/mep)\
**Replies:** 8\
**Last updated:** [May 1, 2019, 9:17pm UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-from-6-7-to-7-0/179140 "2019-05-01T21:17:45Z")

</div>

Hello, I recently upgraded to verison 7.0 across my Elasticstack. The following is the errors coming from my elasticsearch.log file. I have tried changing many different aspects of my elasticsearch.yml file but haven't…

---

## [Array\_Compare working with Nested Aggregations](https://discuss.elastic.co/t/array-compare-working-with-nested-aggregations/143374)

<div class="topic-metadata">

**Author:** [@Micah\_Hunsberger](https://discuss.elastic.co/u/Micah_Hunsberger)\
**Replies:** 3\
**Last updated:** [August 8, 2018, 5:52pm UTC](https://discuss.elastic.co/t/array-compare-working-with-nested-aggregations/143374 "2018-08-08T17:52:47Z")

</div>

I have a watch that is looking for a threshold number of login failures for hosts and their usernames for within a certain interval. I am having trouble with the condition section of the watch to determine if a certain …

---

## [Drop logs from particular hostname](https://discuss.elastic.co/t/drop-logs-from-particular-hostname/137355)

<div class="topic-metadata">

**Author:** [@tag\_v](https://discuss.elastic.co/u/tag_v)\
**Replies:** 3\
**Last updated:** [June 26, 2018, 8:35am UTC](https://discuss.elastic.co/t/drop-logs-from-particular-hostname/137355 "2018-06-26T08:35:00Z")

</div>

How to drop/ disable parsing logs from particular hosts using logstash? I have disabled hostdetails in a db table. How to make config file to make this happen? please suggest

---

## [Logstash JDBC input plugin](https://discuss.elastic.co/t/logstash-jdbc-input-plugin/87994)

<div class="topic-metadata">

**Author:** [@asharma](https://discuss.elastic.co/u/asharma)\
**Replies:** 3\
**Last updated:** [June 2, 2017, 3:57pm UTC](https://discuss.elastic.co/t/logstash-jdbc-input-plugin/87994 "2017-06-02T15:57:45Z")

</div>

I am using the jdbc plugin to import data form AMAZON redshift to elasticsearch using logstash. I am processing incremental updates for a very big table which adds around 2 million rows every hour and has a timestamp a…

---

## [Json codec vs json filter in file input](https://discuss.elastic.co/t/json-codec-vs-json-filter-in-file-input/84976)

<div class="topic-metadata">

**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\
**Replies:** 3\
**Last updated:** [May 10, 2017, 5:37am UTC](https://discuss.elastic.co/t/json-codec-vs-json-filter-in-file-input/84976 "2017-05-10T05:37:30Z")

</div>

I have certain log format: \<....\> \[....\] - \[{...},{...},{...}\]. With multi line codec and grok patterns, I was able to extract above into \<a\> \[b\] - c Here c is \[{...},{...},{...}\] including the square brackets \[\] N…

---

## [Elasticsearch replication performance is slow](https://discuss.elastic.co/t/elasticsearch-replication-performance-is-slow/70410)

<div class="topic-metadata">

**Author:** [@Andreas\_Tschritter](https://discuss.elastic.co/u/Andreas_Tschritter)\
**Replies:** 3\
**Last updated:** [January 10, 2017, 12:32pm UTC](https://discuss.elastic.co/t/elasticsearch-replication-performance-is-slow/70410 "2017-01-10T12:32:19Z")

</div>

I have an elasticsearch setup that had until now one machine (16core 64GB RAM 4x800GB SSD Ubuntu 16.04 Xenial, containing 1.5TB of log data in 450 indexes, running ES 5.1.1. Now I added a second, identical server to th…

---

## [Beat to monitorize OpenStack](https://discuss.elastic.co/t/beat-to-monitorize-openstack/63387)

<div class="topic-metadata">

**Author:** [@zentolo](https://discuss.elastic.co/u/zentolo)\
**Replies:** 3\
**Last updated:** [October 20, 2016, 9:42am UTC](https://discuss.elastic.co/t/beat-to-monitorize-openstack/63387 "2016-10-20T09:42:28Z")

</div>

Hi, I'm just wondering how to monitorize OpenStack with beat (like metricbeat). I mean not the VMs status (CPU, RAM, etc), I want to monitorize OpenStack itself. Cluster status and so on. Any hint will be welcome. A…

---

## [How to troubleshoot logstash and es issues?](https://discuss.elastic.co/t/how-to-troubleshoot-logstash-and-es-issues/55626)

<div class="topic-metadata">

**Author:** [@JoeLi](https://discuss.elastic.co/u/JoeLi)\
**Replies:** 3\
**Last updated:** [July 17, 2016, 11:51pm UTC](https://discuss.elastic.co/t/how-to-troubleshoot-logstash-and-es-issues/55626 "2016-07-17T23:51:00Z")

</div>

My issue is that I cannot see the index log message from kibana. Here is version I am using: All of them are installed on the same virtual machine. CentOS 7 Oracle JDK 8 Kibana 4.5.2 Elaticsearch 2.3.4 logstash 2.3.…

---

## [Generate a pdf report from kibana](https://discuss.elastic.co/t/generate-a-pdf-report-from-kibana/261654)

<div class="topic-metadata">

**Author:** [@suibgui](https://discuss.elastic.co/u/suibgui)\
**Replies:** 1\
**Last updated:** [January 20, 2021, 6:47pm UTC](https://discuss.elastic.co/t/generate-a-pdf-report-from-kibana/261654 "2021-01-20T18:47:24Z")

</div>

Hello Team, when i want to genarate a pdf report from Kibana ,I have this issue message: {"type":"error","@timestamp":"2021-01-18T14:43:54Z","tags":\["reporting","printable\_pdf","execute","kk2oi8v30bb44cba349ldzfe","err…

---

## [Following steps for setting up Infrastructure monitoring app does not work](https://discuss.elastic.co/t/following-steps-for-setting-up-infrastructure-monitoring-app-does-not-work/202914)

<div class="topic-metadata">

**Author:** [@akalra](https://discuss.elastic.co/u/akalra)\
**Replies:** 4\
**Last updated:** [October 10, 2019, 7:07pm UTC](https://discuss.elastic.co/t/following-steps-for-setting-up-infrastructure-monitoring-app-does-not-work/202914 "2019-10-10T19:07:47Z")

</div>

I am setting up the infrastructure monitoring for a Kubernetes cluster on GCP. I am using a hosted Elastic cloud. I followed the steps for setting up Metricbeat on kubernetes as stated online but the Infrastructure app o…

---

## [Winlogbeat 7.2.0 index name not changing despite specifying setup.template.name, setup.template.pattern](https://discuss.elastic.co/t/winlogbeat-7-2-0-index-name-not-changing-despite-specifying-setup-template-name-setup-template-pattern/193613)

<div class="topic-metadata">

**Author:** [@jeetthakkar](https://discuss.elastic.co/u/jeetthakkar)\
**Replies:** 4\
**Last updated:** [August 6, 2019, 12:12pm UTC](https://discuss.elastic.co/t/winlogbeat-7-2-0-index-name-not-changing-despite-specifying-setup-template-name-setup-template-pattern/193613 "2019-08-06T12:12:35Z")

</div>

Hello, Everyone jhas asked this multiple times and I've tried the solutions but it doesn't seem to work. I have tried to specify the template.name and template.pattern to change the name of the index to which wingbeat i…

---

## [I run the logstash , it will getting error](https://discuss.elastic.co/t/i-run-the-logstash-it-will-getting-error/82242)

<div class="topic-metadata">

**Author:** [@bvnages](https://discuss.elastic.co/u/bvnages)\
**Replies:** 4\
**Last updated:** [April 14, 2017, 4:33am UTC](https://discuss.elastic.co/t/i-run-the-logstash-it-will-getting-error/82242 "2017-04-14T04:33:22Z")

</div>

Sending Logstash's logs to /elk/logstash-5.2.0/logs which is now configured via log4j2.properties \[2017-04-13T04:45:15,744\]\[INFO \]\[logstash.setting.writabledirectory\] Creating directory {:setting=\>"path.queue", :path=\>"/…

---

## [Java client - creating complex bool queries](https://discuss.elastic.co/t/java-client-creating-complex-bool-queries/41349)

<div class="topic-metadata">

**Author:** [@dinushan\_m](https://discuss.elastic.co/u/dinushan_m)\
**Replies:** 4\
**Last updated:** [February 10, 2016, 11:00am UTC](https://discuss.elastic.co/t/java-client-creating-complex-bool-queries/41349 "2016-02-10T11:00:22Z")

</div>

Let's say we want to match something like this , (name="Adam" OR name="Bob) OR (age=21 && email="email@gmail.com") How to "merge" the expressions in parenthesis with and OR operation BoolQueryBuilder queryBuilder1 =…

---

## [Filebeat Error decoding JSON: invalid character \\x00 looking for beginning value](https://discuss.elastic.co/t/filebeat-error-decoding-json-invalid-character-x00-looking-for-beginning-value/354529)

<div class="topic-metadata">

**Author:** [@yarden.kivity](https://discuss.elastic.co/u/yarden.kivity)\
**Replies:** 2\
**Last updated:** [March 1, 2024, 7:06pm UTC](https://discuss.elastic.co/t/filebeat-error-decoding-json-invalid-character-x00-looking-for-beginning-value/354529 "2024-03-01T19:06:24Z")

</div>

I have a python application that runs on k8s and I want to send its logs to Elasticsearch, each of my application pods writes its logs to different file on a shred PVC and my filebeat which run on a different pod read a…

---

## [Timeout Exception Restoring from s3 Snapshot](https://discuss.elastic.co/t/timeout-exception-restoring-from-s3-snapshot/91023)

<div class="topic-metadata">

**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\
**Replies:** 2\
**Last updated:** [June 27, 2017, 8:40pm UTC](https://discuss.elastic.co/t/timeout-exception-restoring-from-s3-snapshot/91023 "2017-06-27T20:40:48Z")

</div>

When I try to restore a snapshot into my elasticsearch cluster, I receive this error after exactly 3min22seconds: { "error" : { "root\_cause" : \[ { "type" : "amazon\_client\_exception", "reason…

---

## [Probleme Logstash with MYSQL](https://discuss.elastic.co/t/probleme-logstash-with-mysql/72949)

<div class="topic-metadata">

**Author:** [@wafim](https://discuss.elastic.co/u/wafim)\
**Replies:** 2\
**Last updated:** [January 26, 2017, 10:01pm UTC](https://discuss.elastic.co/t/probleme-logstash-with-mysql/72949 "2017-01-26T22:01:31Z")

</div>

Hello every body, I'm traying yo use Logstash with mysql confiration but i have an error . thanks o lot for your help my file configuration: input { jdbc { jdbc\_driver\_library =\> "C:/logstash/mysql-connector-…

---

## [No font in PDF Reports](https://discuss.elastic.co/t/no-font-in-pdf-reports/63747)

<div class="topic-metadata">

**Author:** [@anon80523324](https://discuss.elastic.co/u/anon80523324)\
**Replies:** 2\
**Last updated:** [October 24, 2016, 10:02pm UTC](https://discuss.elastic.co/t/no-font-in-pdf-reports/63747 "2016-10-24T22:02:59Z")

</div>

Hello, I'm trying out ES and stumbled over the reporting tool. So far without the watcher or so. I can successfully create a report but it wont't display any text. It looks like an encoding problem sicne every letter i…

---

## [Filebeat/Logstash/Elastic : éviter les doublons](https://discuss.elastic.co/t/filebeat-logstash-elastic-eviter-les-doublons/41281)

<div class="topic-metadata">

**Author:** [@C\_H](https://discuss.elastic.co/u/C_H)\
**Replies:** 2\
**Last updated:** [February 9, 2016, 5:43pm UTC](https://discuss.elastic.co/t/filebeat-logstash-elastic-eviter-les-doublons/41281 "2016-02-09T17:43:15Z")

</div>

Bonjour, comment éviter les doublons dans elastic lorsque l'on utilise logstash pour injecter dedans ? Je suis en train de charger de la données et il m'arrive d'avoir des fichiers en doublons, forcément leur timesta…

---

## [Has\_child query does not support post\_filter?](https://discuss.elastic.co/t/has-child-query-does-not-support-post-filter/16154)

<div class="topic-metadata">

**Author:** [@george\_monroe](https://discuss.elastic.co/u/george_monroe)\
**Replies:** 2\
**Last updated:** [March 6, 2014, 6:40pm UTC](https://discuss.elastic.co/t/has-child-query-does-not-support-post-filter/16154 "2014-03-06T18:40:28Z")

</div>

Guys, I'm running the following query to test out one of the use cases: curl -X GET '0:9200/segmentation/animal/\_search?pretty' -d '{ "query" : { "has\_child" : { "type" : "visit", "query" : { "bool"…

---

## [Kibana Canvas line chart with multiple indices](https://discuss.elastic.co/t/kibana-canvas-line-chart-with-multiple-indices/177455)

<div class="topic-metadata">

**Author:** [@Amitittech](https://discuss.elastic.co/u/Amitittech)\
**Replies:** 1\
**Last updated:** [April 24, 2019, 5:46pm UTC](https://discuss.elastic.co/t/kibana-canvas-line-chart-with-multiple-indices/177455 "2019-04-24T17:46:03Z")

</div>

Is it possible with kibana to display data with two indices. Suppose i have two indices one index is to save product selling records and second index is being used to save the users details who are purchasing the produ…

---

## [Logstash 2.1.3 - how to config retry on failure](https://discuss.elastic.co/t/logstash-2-1-3-how-to-config-retry-on-failure/129165)

<div class="topic-metadata">

**Author:** [@mt.michael](https://discuss.elastic.co/u/mt.michael)\
**Replies:** 1\
**Last updated:** [April 23, 2018, 7:25pm UTC](https://discuss.elastic.co/t/logstash-2-1-3-how-to-config-retry-on-failure/129165 "2018-04-23T19:25:20Z")

</div>

I'm using 2.1.3 and got an error on the log saying "Attempted to send a bulk request to Elasticsearch configured at host..... but an error occurred and it failed! Are you sure you can reach elasticsearch from this machi…

---

## [RecoveryFailedException after a node restart](https://discuss.elastic.co/t/recoveryfailedexception-after-a-node-restart/24923)

<div class="topic-metadata">

**Author:** [@Amol\_Sonawane](https://discuss.elastic.co/u/Amol_Sonawane)\
**Replies:** 1\
**Last updated:** [July 6, 2015, 8:10am UTC](https://discuss.elastic.co/t/recoveryfailedexception-after-a-node-restart/24923 "2015-07-06T08:10:11Z")

</div>

Hi, I have been testing a 5 node elastic search cluster. When I restarted one of the nodes, I started getting RecoveryFailedException, I also tried cleaning up its data directory as well as set replication factor to zero…

---

## [Highlighter - don't highlight stop words](https://discuss.elastic.co/t/highlighter-dont-highlight-stop-words/38665)

<div class="topic-metadata">

**Author:** [@Imran\_Azad](https://discuss.elastic.co/u/Imran_Azad)\
**Replies:** 1\
**Last updated:** [August 23, 2016, 5:32pm UTC](https://discuss.elastic.co/t/highlighter-dont-highlight-stop-words/38665 "2016-08-23T17:32:28Z")

</div>

I'm using a stop words filter and when making a query that contains a stop word the highlighter highlights the stop words, is it possible to stop this from happening but to allow the highlighter to continue to highlight …

---

## [Get only ids with no source Java API](https://discuss.elastic.co/t/get-only-ids-with-no-source-java-api/20281)

<div class="topic-metadata">

**Author:** [@Ilija\_Subasic](https://discuss.elastic.co/u/Ilija_Subasic)\
**Replies:** 1\
**Last updated:** [October 17, 2014, 8:18pm UTC](https://discuss.elastic.co/t/get-only-ids-with-no-source-java-api/20281 "2014-10-17T20:18:35Z")

</div>

Is there a way in elasticsearch using JAVA API to get only the ids of the documents returned for a give query. SearchResponse sr = esClient.prepareSearch(index).setSize(resultSize).setQuery(q).setScroll(new …

---

## [Additional java process in ES8.4](https://discuss.elastic.co/t/additional-java-process-in-es8-4/315619)

<div class="topic-metadata">

**Author:** [@frankshad](https://discuss.elastic.co/u/frankshad)\
**Replies:** 0\
**Last updated:** [October 1, 2022, 2:25pm UTC](https://discuss.elastic.co/t/additional-java-process-in-es8-4/315619 "2022-10-01T14:25:41Z")

</div>

I'm trying a fresh install of ES8.4 on Debian 11, starting using systemctl start elasticsearch. I notice that there are now two Java processes permanently running, where on all previous versions I have used (up to 8.2) t…

---

## [Elasticsearch and GDPR](https://discuss.elastic.co/t/elasticsearch-and-gdpr/149548)

<div class="topic-metadata">

**Author:** [@arvesen](https://discuss.elastic.co/u/arvesen)\
**Replies:** 0\
**Last updated:** [September 22, 2018, 1:40pm UTC](https://discuss.elastic.co/t/elasticsearch-and-gdpr/149548 "2018-09-22T13:40:02Z")

</div>

Hi! A little while ago, a potential issue of Elasticsearch (primarilty when used as a primary data store – which you shouldn't do) and the GDPR occured to me. I recently wrote a blog post about the subject, but the gis…

---

## [Fleet Server Settings Elasticsearch CA Fingerprint Rejected](https://discuss.elastic.co/t/fleet-server-settings-elasticsearch-ca-fingerprint-rejected/297218)

<div class="topic-metadata">

**Author:** [@ddth\_2022](https://discuss.elastic.co/u/ddth_2022)\
**Replies:** 3\
**Last updated:** [February 15, 2022, 1:46pm UTC](https://discuss.elastic.co/t/fleet-server-settings-elasticsearch-ca-fingerprint-rejected/297218 "2022-02-15T13:46:10Z")

</div>

I tried entering the base64 encoded Fingerprint of the CA certificate in the Output section of Fleet settings, but I get the error below - The string is most definitely base64 encoded. What can I do to get past this i…

---

## [Elasticsearch - recency boost error: 'Unknown key for a START\_OBJECT in \[boosts\].'](https://discuss.elastic.co/t/elasticsearch-recency-boost-error-unknown-key-for-a-start-object-in-boosts/283194)

<div class="topic-metadata">

**Author:** [@brutal\_logic](https://discuss.elastic.co/u/brutal_logic)\
**Replies:** 3\
**Last updated:** [September 3, 2021, 5:37am UTC](https://discuss.elastic.co/t/elasticsearch-recency-boost-error-unknown-key-for-a-start-object-in-boosts/283194 "2021-09-03T05:37:43Z")

</div>

I'm using the python elasticsearch api to hit a elasticsearch on some data that has the following fields: "id", "dateCreated", "title", "text\_body" The "dateCreated" is of the form '2021-09-01T23:09:54.79362+00:00' I'…

---

## [Create uptime alert when specific service is down](https://discuss.elastic.co/t/create-uptime-alert-when-specific-service-is-down/244844)

<div class="topic-metadata">

**Author:** [@devwinner](https://discuss.elastic.co/u/devwinner)\
**Replies:** 3\
**Last updated:** [August 14, 2020, 3:31pm UTC](https://discuss.elastic.co/t/create-uptime-alert-when-specific-service-is-down/244844 "2020-08-14T15:31:38Z")

</div>

Hello everybody. I have started using Heartbeat few time now to create monitors for managing our web sites. I have created two monitors : type: http id: prometheus\_monitor name: Prometheus monitor status urls: \["h…

[Previous page](https://discuss.elastic.co/top.md?page=1130&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1132&per_page=50&period=all)
