# Top **URL:** https://discuss.elastic.co/top.md?page=1132&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1133 --- ## [Elasticsearch-6.5.4 protocol http not supported or disabled in libcurl](https://discuss.elastic.co/t/elasticsearch-6-5-4-protocol-http-not-supported-or-disabled-in-libcurl/182668)
**Author:** [@dgm01](https://discuss.elastic.co/u/dgm01)\ **Replies:** 3\ **Last updated:** [May 24, 2019, 2:50pm UTC](https://discuss.elastic.co/t/elasticsearch-6-5-4-protocol-http-not-supported-or-disabled-in-libcurl/182668 "2019-05-24T14:50:08Z")
Hello I just downloaded the elastic : elasticsearch-6.5.4.zip I unzip the files and launch elastic with the command : bin\\elasticsearch.bat I'm on Windows 10 64bits When I launch the following command for my first in… --- ## [Beats 6.5 error while setting up](https://discuss.elastic.co/t/beats-6-5-error-while-setting-up/173607)
**Author:** [@sharon92](https://discuss.elastic.co/u/sharon92)\ **Replies:** 3\ **Last updated:** [March 25, 2019, 5:37pm UTC](https://discuss.elastic.co/t/beats-6-5-error-while-setting-up/173607 "2019-03-25T17:37:57Z")
my filebeat version is 6.5.4 and setting up I tried to execute below command, sudo filebeat setup and got below error Exiting: 2 errors: Error checking if xpack is available: 500 Internal Server Error: {"error":{"root… --- ## [Filebeat performance issue](https://discuss.elastic.co/t/filebeat-performance-issue/86558)
**Author:** [@kalman](https://discuss.elastic.co/u/kalman)\ **Replies:** 3\ **Last updated:** [May 23, 2017, 1:57pm UTC](https://discuss.elastic.co/t/filebeat-performance-issue/86558 "2017-05-23T13:57:58Z")
I'm using filebeat 5.4.4 on windows to harvest from log file directly to elastic stack, the requirement is that the logs come in to elastic as soon as possible (near real-time). for some reson the logs only show up in ki… --- ## [Spark + Kerberos + SearchGuard + ElasticSearch 1.7.3](https://discuss.elastic.co/t/spark-kerberos-searchguard-elasticsearch-1-7-3/41014)
**Author:** [@Mohamed\_Zouaoui](https://discuss.elastic.co/u/Mohamed_Zouaoui)\ **Replies:** 3\ **Last updated:** [February 22, 2016, 6:49pm UTC](https://discuss.elastic.co/t/spark-kerberos-searchguard-elasticsearch-1-7-3/41014 "2016-02-22T18:49:11Z")
I am trying to get some Spark Job working runing on ES configured with SearchGuarg ( SPNEGO/Kerberos) . I Dont figure out how to pass Security/Kerberos in Spark Conf Is there any one who did the test Thanks --- ## [Using Java API to map, load and index](https://discuss.elastic.co/t/using-java-api-to-map-load-and-index/19901)
**Author:** [@arkerpay](https://discuss.elastic.co/u/arkerpay)\ **Replies:** 3\ **Last updated:** [September 21, 2014, 9:14pm UTC](https://discuss.elastic.co/t/using-java-api-to-map-load-and-index/19901 "2014-09-21T21:14:40Z")
Very new to elasticsearch, so please be kind. Would like to find working code example in Java that: (1) creates an index (2) creates a mapping (3) specifies an analyzer (4) converts text files to json (5) loads… --- ## [Problem with \_id path setting and fields with periods](https://discuss.elastic.co/t/problem-with--id-path-setting-and-fields-with-periods/10451)
**Author:** [@hanafy\_ash](https://discuss.elastic.co/u/hanafy_ash)\ **Replies:** 3\ **Last updated:** [January 23, 2013, 1:50pm UTC](https://discuss.elastic.co/t/problem-with--id-path-setting-and-fields-with-periods/10451 "2013-01-23T13:50:49Z")
Hello everyone! Searched the group for an answer to this question but couldn't find anything. My apologies if something similar was posted. We've created a mapping according to this documentation to try to tell E… --- ## [Kibana : Unable to authenticate user \[\] for REST request after deleting logs](https://discuss.elastic.co/t/kibana-unable-to-authenticate-user-for-rest-request-after-deleting-logs/287781)
**Author:** [@Leviath](https://discuss.elastic.co/u/Leviath)\ **Replies:** 1\ **Last updated:** [October 27, 2021, 4:37pm UTC](https://discuss.elastic.co/t/kibana-unable-to-authenticate-user-for-rest-request-after-deleting-logs/287781 "2021-10-27T16:37:42Z")
Hello everyone, I'm new to elastic and I can't connect Kibana to Elasticsearch anymore. Whenever I try to connect, i get "kibana is not ready yet" and : {"type":"log","@timestamp":"2021-10-27T11:06:16+02:00","tags":\["… --- ## [Getting 500 error on documents API](https://discuss.elastic.co/t/getting-500-error-on-documents-api/229901)
**Author:** [@varunharidas](https://discuss.elastic.co/u/varunharidas)\ **Replies:** 7\ **Last updated:** [April 28, 2020, 1:55pm UTC](https://discuss.elastic.co/t/getting-500-error-on-documents-api/229901 "2020-04-28T13:55:57Z")
This error started randomly, when we strated updating docs via api {"errors":\["The service is in read-only mode. Actions that create, update, or delete information are temporarily disabled."\]} Search is working fine th… --- ## [Elasticsearch Unreachable error](https://discuss.elastic.co/t/elasticsearch-unreachable-error/205216)
**Author:** [@Leks](https://discuss.elastic.co/u/Leks)\ **Replies:** 1\ **Last updated:** [November 15, 2019, 7:54am UTC](https://discuss.elastic.co/t/elasticsearch-unreachable-error/205216 "2019-11-15T07:54:41Z")
Hi all! I spent the whole night yesterday and the night before yesterday to solve this problem but I couldn't find any solution. What's important I configured all environment on the docker container. I want to send some… --- ## [Index performance does not increase linearly](https://discuss.elastic.co/t/index-performance-does-not-increase-linearly/150107)
**Author:** [@zyx\_0312](https://discuss.elastic.co/u/zyx_0312)\ **Replies:** 7\ **Last updated:** [September 29, 2018, 6:44am UTC](https://discuss.elastic.co/t/index-performance-does-not-increase-linearly/150107 "2018-09-29T06:44:19Z")
Hi, all, I want to know if the speed of index docs will increase linearly with the number of nodes increases. Such as inputing 100 docs/s with only one node in the cluster, and 400 docs/s when there are 4 nodes in the c… --- ## [IN equivalent operator in painless inline scripts](https://discuss.elastic.co/t/in-equivalent-operator-in-painless-inline-scripts/149634)
**Author:** [@shobhana](https://discuss.elastic.co/u/shobhana)\ **Replies:** 7\ **Last updated:** [September 25, 2018, 6:24am UTC](https://discuss.elastic.co/t/in-equivalent-operator-in-painless-inline-scripts/149634 "2018-09-25T06:24:10Z")
I want to achieve the equivalent of the following SQL query using inline scripts of ES (painless language) : where userId in (1, 2, 3) ----\> Here userId is a long field I tried with the following : POST ride/ride/\_… --- ## [Limit exceeded message needs some analysis](https://discuss.elastic.co/t/limit-exceeded-message-needs-some-analysis/94798)
**Author:** [@sentinel](https://discuss.elastic.co/u/sentinel)\ **Replies:** 7\ **Last updated:** [July 27, 2017, 3:01pm UTC](https://discuss.elastic.co/t/limit-exceeded-message-needs-some-analysis/94798 "2017-07-27T15:01:21Z")
Hello I am getting a lot of these debug messages in Elastic 5.4 setup. Surely this is not up to a 1000. Is there anything I can do to limit this? curl -s -XGET http://1localhost:8089/logstash-2017.07.24/\_mapping?… --- ## [Trying to install elasticsearch as a service on Centos 6 with cPanel](https://discuss.elastic.co/t/trying-to-install-elasticsearch-as-a-service-on-centos-6-with-cpanel/19678)
**Author:** [@Ali\_Samii](https://discuss.elastic.co/u/Ali_Samii)\ **Replies:** 1\ **Last updated:** [September 9, 2014, 2:08pm UTC](https://discuss.elastic.co/t/trying-to-install-elasticsearch-as-a-service-on-centos-6-with-cpanel/19678 "2014-09-09T14:08:17Z")
I am trying to install elasticsearch on a cPanel server with the following specs: \*OS:\* CENTOS 6.5 x86\_64 \*Virtual Machine:\* virtuoso \*WHM Version:\* 11.44.1 (build 18) I have used yum to install elasticsearch u… --- ## [Investigating a "stuck" node](https://discuss.elastic.co/t/investigating-a-stuck-node/248864)
**Author:** [@JnBrymn](https://discuss.elastic.co/u/JnBrymn)\ **Replies:** 6\ **Last updated:** [September 17, 2020, 10:44pm UTC](https://discuss.elastic.co/t/investigating-a-stuck-node/248864 "2020-09-17T22:44:01Z")
I'm setting up a new search application on ES 7.3.1 and I am seeing some unusual behavior. I have 16 storage nodes and 5 coordinator nodes (no storage). All queries go though the coordinators. We have 400K docs, 4TB tota… --- ## [Contribute on Windows](https://discuss.elastic.co/t/contribute-on-windows/64251)
**Author:** [@maddin2016](https://discuss.elastic.co/u/maddin2016)\ **Replies:** 6\ **Last updated:** [November 4, 2016, 3:29pm UTC](https://discuss.elastic.co/t/contribute-on-windows/64251 "2016-11-04T15:29:53Z")
Hi there, i would like to contribute to beats, especially for winlogbeats on my windows machine (WIN 10). Is there something special i have to note. Steps i have yet created install golang -\> fork your repo -\> cloned i… --- ## [Elasticsearch 8.8: Master not discovered or elected yet, an election requires at least 2 nodes with ids from \[..\]](https://discuss.elastic.co/t/elasticsearch-8-8-master-not-discovered-or-elected-yet-an-election-requires-at-least-2-nodes-with-ids-from/338034)
**Author:** [@bhavya](https://discuss.elastic.co/u/bhavya)\ **Replies:** 2\ **Last updated:** [July 13, 2023, 5:17am UTC](https://discuss.elastic.co/t/elasticsearch-8-8-master-not-discovered-or-elected-yet-an-election-requires-at-least-2-nodes-with-ids-from/338034 "2023-07-13T05:17:48Z")
I am creating a multinode cluster (3 Master Nodes), having the configuration like xpack.ml.enabled: false xpack.security.enabled: false network.host: \[\_local\_, \_site\_\] path.data: /data/esdata path.logs: /data/logs xpack… --- ## [Managed Elastic search for billion scale dense vector index and performance](https://discuss.elastic.co/t/managed-elastic-search-for-billion-scale-dense-vector-index-and-performance/316312)
**Author:** [@cvgoudar](https://discuss.elastic.co/u/cvgoudar)\ **Replies:** 2\ **Last updated:** [November 25, 2022, 6:51am UTC](https://discuss.elastic.co/t/managed-elastic-search-for-billion-scale-dense-vector-index-and-performance/316312 "2022-11-25T06:51:05Z")
We want to understand on the requirements and expected response time for vector based search with close to 1 Billion semantic vector index. The dense vector is 768 dimensional. What would be the appropriate configuratio… --- ## [Initial JDBC input for a tracking column type of timestamp](https://discuss.elastic.co/t/initial-jdbc-input-for-a-tracking-column-type-of-timestamp/269163)
**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 12:25pm UTC](https://discuss.elastic.co/t/initial-jdbc-input-for-a-tracking-column-type-of-timestamp/269163 "2021-04-06T12:25:11Z")
I am trying to pull data from an MS SQL Server database. The data is refreshed on the hour and I want to pull at 15 minutes after the top of the hour. The input looks like this: input { jdbc { jdbc\_driver\_library … --- ## [Dissect Processorのエラーについて](https://discuss.elastic.co/t/dissect-processor/201175)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 2\ **Last updated:** [September 30, 2019, 4:29am UTC](https://discuss.elastic.co/t/dissect-processor/201175 "2019-09-30T04:29:04Z")
FileBeatからIngest node Dissect Processorへの連携を行っております。 Input log 1286536308.779 180 192.168.0.224 TCP\_MISS/200 411 GET http://liveupdate.symantecliveupdate.com/minitri.flg - DIRECT/125.23.216.203 text/plain Dissect Proc… --- ## [Mixing up field types](https://discuss.elastic.co/t/mixing-up-field-types/164868)
**Author:** [@exocore123](https://discuss.elastic.co/u/exocore123)\ **Replies:** 2\ **Last updated:** [January 18, 2019, 11:22pm UTC](https://discuss.elastic.co/t/mixing-up-field-types/164868 "2019-01-18T23:22:11Z")
Hello, I am new to ElasticSearch and I've read a few of the threads that track back to '17 but I cant seem to find a working solution as I've attempted some of the solutions so I was wondering if anyone could give some p… --- ## [Unable to get min\_doc\_count bucket for histogram aggs](https://discuss.elastic.co/t/unable-to-get-min-doc-count-bucket-for-histogram-aggs/132369)
**Author:** [@vleango](https://discuss.elastic.co/u/vleango)\ **Replies:** 2\ **Last updated:** [May 31, 2018, 4:15pm UTC](https://discuss.elastic.co/t/unable-to-get-min-doc-count-bucket-for-histogram-aggs/132369 "2018-05-31T16:15:35Z")
Expected: When performing a range query, I expect the histogram buckets to show all docs. Actual: Only the bucket that matches the range query is returned. When performing this "match\_all" query: GET /article/\_search … --- ## [Predefined Shield audit log Kibana Dashboards?](https://discuss.elastic.co/t/predefined-shield-audit-log-kibana-dashboards/46843)
**Author:** [@Jakauppila](https://discuss.elastic.co/u/Jakauppila)\ **Replies:** 2\ **Last updated:** [January 16, 2017, 9:48am UTC](https://discuss.elastic.co/t/predefined-shield-audit-log-kibana-dashboards/46843 "2017-01-16T09:48:42Z")
I was curious if anyone had any pre-defined Kibana visualizations/dashboards for the Shield audit logs? --- ## [Monitor Open TCP Connections](https://discuss.elastic.co/t/monitor-open-tcp-connections/154830)
**Author:** [@rani](https://discuss.elastic.co/u/rani)\ **Replies:** 4\ **Last updated:** [November 1, 2018, 1:05pm UTC](https://discuss.elastic.co/t/monitor-open-tcp-connections/154830 "2018-11-01T13:05:22Z")
Hi all I'm currently trying to find a way to monitor all open TCP connections via Kibana. I can't find a way to get this data via beats. Is there a way I'm missing? Thanks in advance for your help. --- ## [Start filebeat using a java code?](https://discuss.elastic.co/t/start-filebeat-using-a-java-code/83963)
**Author:** [@Nisal\_Thiwanka](https://discuss.elastic.co/u/Nisal_Thiwanka)\ **Replies:** 4\ **Last updated:** [April 28, 2017, 9:44am UTC](https://discuss.elastic.co/t/start-filebeat-using-a-java-code/83963 "2017-04-28T09:44:58Z")
I'm using filebeat to read some log files and I need to start filebeat using a java program. And the filebeat commands are executed using the windows powerShell. I used the following code but it didn't work. try { … --- ## [Remove mapping of no existing fields](https://discuss.elastic.co/t/remove-mapping-of-no-existing-fields/59021)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 4\ **Last updated:** [September 19, 2016, 8:29pm UTC](https://discuss.elastic.co/t/remove-mapping-of-no-existing-fields/59021 "2016-09-19T20:29:51Z")
Why is not possible to remove completly a mapping field ? (I would like to change a field type to boolean to string, I have removed this field, but I cannot change the mapping field type despite there is no data for this… --- ## [Using Python/Java code for preprocessing documents](https://discuss.elastic.co/t/using-python-java-code-for-preprocessing-documents/14759)
**Author:** [@Amit\_Gupta](https://discuss.elastic.co/u/Amit_Gupta)\ **Replies:** 4\ **Last updated:** [February 6, 2015, 12:02am UTC](https://discuss.elastic.co/t/using-python-java-code-for-preprocessing-documents/14759 "2015-02-06T00:02:40Z")
It seems like a pretty easy question, but for some reason I still can't understand how to solve the same. I have an elastic search cluster which is using twitter river to download tweets. I would like to implement… --- ## [Is there some wrong usage of my query json?](https://discuss.elastic.co/t/is-there-some-wrong-usage-of-my-query-json/67736)
**Author:** [@beenoisy](https://discuss.elastic.co/u/beenoisy)\ **Replies:** 8\ **Last updated:** [December 5, 2016, 9:57am UTC](https://discuss.elastic.co/t/is-there-some-wrong-usage-of-my-query-json/67736 "2016-12-05T09:57:34Z")
Here is my es settings: // http://10.94.107.21:9200/ugc { "ugc": { "aliases": { }, "mappings": { "article": { "\_all": { "store": true, "analyzer": "ik\_smart" … --- ## [Systemctl reload elasticsearch.service or systemctl restart elasticsearch.service](https://discuss.elastic.co/t/systemctl-reload-elasticsearch-service-or-systemctl-restart-elasticsearch-service/325703)
**Author:** [@firdaussaad](https://discuss.elastic.co/u/firdaussaad)\ **Replies:** 1\ **Last updated:** [February 19, 2023, 8:59pm UTC](https://discuss.elastic.co/t/systemctl-reload-elasticsearch-service-or-systemctl-restart-elasticsearch-service/325703 "2023-02-19T20:59:33Z")
Hi all, I am currently working on a bash script. Whenever i make changes to elasticsearch.yml file, should i perform systemctl reload elascticsearch.service or systemctl restart elasticsearch.service? Any difference be… --- ## [Data Table show all Terms as Missing when term length is too big](https://discuss.elastic.co/t/data-table-show-all-terms-as-missing-when-term-length-is-too-big/190925)
**Author:** [@Gregory\_leguenec](https://discuss.elastic.co/u/Gregory_leguenec)\ **Replies:** 1\ **Last updated:** [July 18, 2019, 5:21am UTC](https://discuss.elastic.co/t/data-table-show-all-terms-as-missing-when-term-length-is-too-big/190925 "2019-07-18T05:21:16Z")
Hi Everyone, I have String fields from 200 char to 2000 char, however, when i try to simply display them in a data table, the short ones seems to appear, but 99% of the rest, it's just display missing. Is there is an… --- ## [Restore data from data folder](https://discuss.elastic.co/t/restore-data-from-data-folder/312448)
**Author:** [@meternich](https://discuss.elastic.co/u/meternich)\ **Replies:** 3\ **Last updated:** [August 19, 2022, 1:31pm UTC](https://discuss.elastic.co/t/restore-data-from-data-folder/312448 "2022-08-19T13:31:00Z")
I've messed up something with my backups an I accidently deleted few indexes. I have a file system copy of an index (from elastic data folder), but I have deleted index in elastic. When I copy the files into elastic data… --- ## [Elastic v8.3 Install Errors MacOS](https://discuss.elastic.co/t/elastic-v8-3-install-errors-macos/308690)
**Author:** [@Sameer\_Malik](https://discuss.elastic.co/u/Sameer_Malik)\ **Replies:** 3\ **Last updated:** [July 18, 2022, 11:59am UTC](https://discuss.elastic.co/t/elastic-v8-3-install-errors-macos/308690 "2022-07-18T11:59:24Z")
Elasticsearch Version 8.3.1 OS Version macOS 12.3.1 Problem Description I'm very new to Elasticsearch. I'm trying to install ES v8.3.1 on my Mac by following the instructions on the download website. However, once I ru… --- ## [Error initializing beat: error loading config file: stat filebeat.yml: no such file or directory](https://discuss.elastic.co/t/error-initializing-beat-error-loading-config-file-stat-filebeat-yml-no-such-file-or-directory/273415)
**Author:** [@Marc\_Aurnold](https://discuss.elastic.co/u/Marc_Aurnold)\ **Replies:** 3\ **Last updated:** [May 20, 2021, 2:28pm UTC](https://discuss.elastic.co/t/error-initializing-beat-error-loading-config-file-stat-filebeat-yml-no-such-file-or-directory/273415 "2021-05-20T14:28:31Z")
Hey Teams Elasticsearch, When I am running this command: ./filebeat -e -c filebeat.yml output: -bash: ./filebeat: cannot execute binary file: Exec format error I would like to know which advise can help me to solve … --- ## [Beats, ECK, and Openshift 3.11](https://discuss.elastic.co/t/beats-eck-and-openshift-3-11/243627)
**Author:** [@SeanPlacchetti](https://discuss.elastic.co/u/SeanPlacchetti)\ **Replies:** 3\ **Last updated:** [August 4, 2020, 3:55pm UTC](https://discuss.elastic.co/t/beats-eck-and-openshift-3-11/243627 "2020-08-04T15:55:05Z")
Hi, I started looking into deploying out the various beats based on the examples in the documentation to our OpenShift 3.11 cluster and have run into some issues. I wonder if there are quickstart examples for OpenShift … --- ## [Kibana Space Role Configuration, please help!](https://discuss.elastic.co/t/kibana-space-role-configuration-please-help/200273)
**Author:** [@iainardo](https://discuss.elastic.co/u/iainardo)\ **Replies:** 3\ **Last updated:** [September 23, 2019, 1:38pm UTC](https://discuss.elastic.co/t/kibana-space-role-configuration-please-help/200273 "2019-09-23T13:38:24Z")
Hi folks, I'm using ELK 7.3, I am trying to setup Kibana, in particular setup native Kibana realm so different users have different permission/privileges for a particular Kibana space, for purposes of illustration let's… --- ## [Content encoding issues](https://discuss.elastic.co/t/content-encoding-issues/4854)
**Author:** [@jp\_lorandi](https://discuss.elastic.co/u/jp_lorandi)\ **Replies:** 3\ **Last updated:** [July 14, 2011, 4:35am UTC](https://discuss.elastic.co/t/content-encoding-issues/4854 "2011-07-14T04:35:33Z")
I'm currently attempting to index documents encoded with UTF-8 and I'm getting strange garbage out of \_source when retrieving data. Has anybody had the same problem? Which encoding does ES use out of the box? TIA,… --- ## [Filebeat can't keep up with the logs](https://discuss.elastic.co/t/filebeat-cant-keep-up-with-the-logs/269621)
**Author:** [@grazia0912](https://discuss.elastic.co/u/grazia0912)\ **Replies:** 2\ **Last updated:** [April 14, 2021, 3:25am UTC](https://discuss.elastic.co/t/filebeat-cant-keep-up-with-the-logs/269621 "2021-04-14T03:25:51Z")
I'm using Filebeat 7.4.2 and it seems to not get all events on my log file. The log file is updating at a high speed cause of huge messages being logged and Filebeat couldn't seem to keep up and send all messages to Logs… --- ## [\_idやfieldに使える文字の制限](https://discuss.elastic.co/t/id-field/121789)
**Author:** [@tsukahara](https://discuss.elastic.co/u/tsukahara)\ **Replies:** 2\ **Last updated:** [February 28, 2018, 8:11am UTC](https://discuss.elastic.co/t/id-field/121789 "2018-02-28T08:11:56Z")
Elasticsearch6.2.2を使わせていただいております。 \_idやfieldに使える文字の制限についてどこかに情報ありますでしょうか。 ●\_id 試したところ、登録に使った文字が置き換わって登録されるケースがありました。 以下のデータを登録したところ、 PUT ttt/default/あいう { "あいう":"あいう" } GET ttt/\_search をすると以下が得られました。 { "\_in… --- ## [Logstash Plugins: input-webhdfs](https://discuss.elastic.co/t/logstash-plugins-input-webhdfs/80656)
**Author:** [@ohk](https://discuss.elastic.co/u/ohk)\ **Replies:** 2\ **Last updated:** [April 3, 2017, 3:04pm UTC](https://discuss.elastic.co/t/logstash-plugins-input-webhdfs/80656 "2017-04-03T15:04:33Z")
Hi, I need a plugin able to read logs files from HDFS. I took the output-webhdfs plugin and changed to download files from HDFS using its REST API then parsing this temporary files with adequate codec. For now I can co… --- ## [Routing allocation shard doesn't work](https://discuss.elastic.co/t/routing-allocation-shard-doesnt-work/357540)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 5\ **Last updated:** [April 16, 2024, 9:43pm UTC](https://discuss.elastic.co/t/routing-allocation-shard-doesnt-work/357540 "2024-04-16T21:43:46Z")
Hi I'm struggling the case why even it was enabled the routing rebalance on that index. shards are still placed on one node, how to force automatically rerouting shards on the other nodes? some of the index(with shard… --- ## [Logstash missing from monitoring after 5.6.2 upgrade](https://discuss.elastic.co/t/logstash-missing-from-monitoring-after-5-6-2-upgrade/102030)
**Author:** [@flalar](https://discuss.elastic.co/u/flalar)\ **Replies:** 5\ **Last updated:** [October 9, 2017, 9:07pm UTC](https://discuss.elastic.co/t/logstash-missing-from-monitoring-after-5-6-2-upgrade/102030 "2017-10-09T21:07:17Z")
After upgrading elasticsearch, kibana, logstash and corresponding x-pack plugins, Logstash monitoring is missing from Kibana. When looking at the monitoring indexes it seems the .monitoring-logstash-6-2017.09.27 index … --- ## [To listen for amqp events packetbeat](https://discuss.elastic.co/t/to-listen-for-amqp-events-packetbeat/47869)
**Author:** [@Rachit\_Puri](https://discuss.elastic.co/u/Rachit_Puri)\ **Replies:** 5\ **Last updated:** [April 20, 2016, 2:35pm UTC](https://discuss.elastic.co/t/to-listen-for-amqp-events-packetbeat/47869 "2016-04-20T14:35:17Z")
Hi, Is it possible to use amqp protocol and dump the logs to elasticsearch using packetbeat --- ## [Why can't I see the Customer Filter icon?!](https://discuss.elastic.co/t/why-cant-i-see-the-customer-filter-icon/37013)
**Author:** [@jjdepaul](https://discuss.elastic.co/u/jjdepaul)\ **Replies:** 5\ **Last updated:** [December 15, 2015, 1:39pm UTC](https://discuss.elastic.co/t/why-cant-i-see-the-customer-filter-icon/37013 "2015-12-15T13:39:22Z")
Kibana 4.2.0 with ES 2.0 and LS 2.0 and Shield2.0 I have setup a +filter and would like to customize the filter criteria in it. The documentation talks about a custom filter but when I hover over that filter definition… --- ## [Elasticsearch huge CPU utilisation](https://discuss.elastic.co/t/elasticsearch-huge-cpu-utilisation/286707)
**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\ **Replies:** 6\ **Last updated:** [October 15, 2021, 11:10am UTC](https://discuss.elastic.co/t/elasticsearch-huge-cpu-utilisation/286707 "2021-10-15T11:10:02Z")
Hello, We have ELK Stack in our Company. Last time I had stability issues with Elasticsearch - meaning Elasticsearch was running after restart and after 3 hours was hung. Right now I see java process in Elasticsearch … --- ## [How to add a button in kibana 7.8.1 dashboard](https://discuss.elastic.co/t/how-to-add-a-button-in-kibana-7-8-1-dashboard/253402)
**Author:** [@Abhi6](https://discuss.elastic.co/u/Abhi6)\ **Replies:** 6\ **Last updated:** [October 28, 2020, 9:06am UTC](https://discuss.elastic.co/t/how-to-add-a-button-in-kibana-7-8-1-dashboard/253402 "2020-10-28T09:06:04Z")
Is there any way to add a button to kibana dashboard --- ## [Parsing JSON input with multiple arrays as events](https://discuss.elastic.co/t/parsing-json-input-with-multiple-arrays-as-events/246040)
**Author:** [@InnerJoin](https://discuss.elastic.co/u/InnerJoin)\ **Replies:** 6\ **Last updated:** [August 24, 2020, 5:30pm UTC](https://discuss.elastic.co/t/parsing-json-input-with-multiple-arrays-as-events/246040 "2020-08-24T17:30:25Z")
Hi, I am currently using the http\_poller input to pull from an API which is giving me 4 arrays which hold 4 different kinds of events. I am trying to move them all into another array and tag each event so that I know wh… --- ## [Filebeat TCP input with Nginx Module](https://discuss.elastic.co/t/filebeat-tcp-input-with-nginx-module/225618)
**Author:** [@karnamonkster](https://discuss.elastic.co/u/karnamonkster)\ **Replies:** 6\ **Last updated:** [April 1, 2020, 5:16am UTC](https://discuss.elastic.co/t/filebeat-tcp-input-with-nginx-module/225618 "2020-04-01T05:16:18Z")
Hi , My setup: Elasticsearch & Kibana - 7.5.2 Filebeat - 7.5.x I have a Filebeat(NGINX-1) listen on TCP input to recieve Proxy logs from a remote NGINX server(NGINX-2) sending logs through Logstash TCP output. My qu… --- ## [Auditbeat file integrity monitoring does not show user who made changes to file](https://discuss.elastic.co/t/auditbeat-file-integrity-monitoring-does-not-show-user-who-made-changes-to-file/188568)
**Author:** [@EMMANUEL\_CHIBUOGWU](https://discuss.elastic.co/u/EMMANUEL_CHIBUOGWU)\ **Replies:** 4\ **Last updated:** [July 16, 2019, 8:20am UTC](https://discuss.elastic.co/t/auditbeat-file-integrity-monitoring-does-not-show-user-who-made-changes-to-file/188568 "2019-07-16T08:20:29Z")
How can i see the user who made changes, created or deleted a file. The user who --- ## [How to return NA in watcher alert email if field is not available](https://discuss.elastic.co/t/how-to-return-na-in-watcher-alert-email-if-field-is-not-available/118719)
**Author:** [@saranyav](https://discuss.elastic.co/u/saranyav)\ **Replies:** 4\ **Last updated:** [February 7, 2018, 8:36pm UTC](https://discuss.elastic.co/t/how-to-return-na-in-watcher-alert-email-if-field-is-not-available/118719 "2018-02-07T20:36:31Z")
Hello, I am trying to return a field as NA in watcher alert email if that field is not available in \_source. I am using a transform script to see if the field is available in the \_source, if not I am returning NA. Ple… --- ## [Elasticsearch 2 with Kibana3](https://discuss.elastic.co/t/elasticsearch-2-with-kibana3/42198)
**Author:** [@Jeferson\_Martins](https://discuss.elastic.co/u/Jeferson_Martins)\ **Replies:** 4\ **Last updated:** [February 19, 2016, 1:41am UTC](https://discuss.elastic.co/t/elasticsearch-2-with-kibana3/42198 "2016-02-19T01:41:28Z")
I tried conect with this fork but not works. https://github.com/gigya/kibana/tree/3.0 Someone tried this? --- ## [Huge segments (should I worry?)](https://discuss.elastic.co/t/huge-segments-should-i-worry/373879)
**Author:** [@teodor.zvezdov](https://discuss.elastic.co/u/teodor.zvezdov)\ **Replies:** 7\ **Last updated:** [February 2, 2025, 7:28pm UTC](https://discuss.elastic.co/t/huge-segments-should-i-worry/373879 "2025-02-02T19:28:45Z")
Hi, recently I have been tasked to maintain an existing ES cluster consisting of 3 nodes (3 data nodes). 12 GB heap per node. After observing the segments of the index "beneficiary2" I saw the following : 2 very big se… [Previous page](https://discuss.elastic.co/top.md?page=1131&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1133&per_page=50&period=all)