# Top **URL:** https://discuss.elastic.co/top.md?page=1133&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1134 --- ## [Writing events to different indexes through a variable](https://discuss.elastic.co/t/writing-events-to-different-indexes-through-a-variable/316814)
**Author:** [@Aleksei](https://discuss.elastic.co/u/Aleksei)\ **Replies:** 7\ **Last updated:** [October 18, 2022, 10:19am UTC](https://discuss.elastic.co/t/writing-events-to-different-indexes-through-a-variable/316814 "2022-10-18T10:19:22Z")
Hi everyone I did not find a suitable topic in the community, I decided to create a topic. Has anyone tried this configuration ? output { \*\* \*\* elasticsearch { \*\* \*\* index =\> "%{\[some\_field\]\[sub\_field\]}-… --- ## [Grokparsefailure! wtf?](https://discuss.elastic.co/t/grokparsefailure-wtf/232938)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 7\ **Last updated:** [May 17, 2020, 10:30pm UTC](https://discuss.elastic.co/t/grokparsefailure-wtf/232938 "2020-05-17T22:30:18Z")
Hi there, After using grokdebug and make sure the grok filter as working, just find out that was not enough to avoid the tag \_grokparsefailure!! arggggggg!!! Follow my conf: ###################################### INPU… --- ## [About CCR](https://discuss.elastic.co/t/about-ccr/162311)
**Author:** [@zhutong](https://discuss.elastic.co/u/zhutong)\ **Replies:** 7\ **Last updated:** [January 4, 2019, 7:19am UTC](https://discuss.elastic.co/t/about-ccr/162311 "2019-01-04T07:19:42Z")
I am currently upgrading cluster from 6.2.2 to 6.5.4 and mainly want to use Cross Cluster Replication, but how do I support Cross Cluster Replication with my old index in 6.2.2. --- ## [Cannot evaluate org.elasticsearch.action.index.IndexResponse.toString()](https://discuss.elastic.co/t/cannot-evaluate-org-elasticsearch-action-index-indexresponse-tostring/150445)
**Author:** [@Dav](https://discuss.elastic.co/u/Dav)\ **Replies:** 1\ **Last updated:** [October 2, 2018, 1:16pm UTC](https://discuss.elastic.co/t/cannot-evaluate-org-elasticsearch-action-index-indexresponse-tostring/150445 "2018-10-02T13:16:51Z")
When using elasticsearch 6.4.1, I got the error: Method threw 'java.lang.NoClassDefFoundError' exception. Cannot evaluate org.elasticsearch.action.index.IndexResponse.toString() in the IndexResponse. And I used RestHig… --- ## [Change color in a table?](https://discuss.elastic.co/t/change-color-in-a-table/132144)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [May 16, 2018, 4:02pm UTC](https://discuss.elastic.co/t/change-color-in-a-table/132144 "2018-05-16T16:02:13Z")
Hi, I am on kibana 6.2.4. I would like to visualize the last status of different events. For example, my table should look like this: \[image\] Based on the status I would like to change the color of a cell or row. Ho… --- ## [Override Image 's default not working in Docker](https://discuss.elastic.co/t/override-image-s-default-not-working-in-docker/111830)
**Author:** [@YeeP](https://discuss.elastic.co/u/YeeP)\ **Replies:** 1\ **Last updated:** [December 14, 2017, 7:36pm UTC](https://discuss.elastic.co/t/override-image-s-default-not-working-in-docker/111830 "2017-12-14T19:36:53Z")
I am setting up a test cluster to prepare for the upgrade to Elasticsearch 6.0.x. Here is a simplified version of the run command (the one I am currently using for 5.5 has several -E commands). The container runs just f… --- ## [Join two documents](https://discuss.elastic.co/t/join-two-documents/53015)
**Author:** [@Chartreuse](https://discuss.elastic.co/u/Chartreuse)\ **Replies:** 1\ **Last updated:** [June 17, 2016, 5:55am UTC](https://discuss.elastic.co/t/join-two-documents/53015 "2016-06-17T05:55:23Z")
Hi, I have two .csv files. I have a column in each document that is key for me ElasticSearch. When logstash indexes data overwrites the oldest values. Is it possible to keep these values in a table? For example : Cs… --- ## [Multiline postfix grok filter](https://discuss.elastic.co/t/multiline-postfix-grok-filter/31435)
**Author:** [@etfeet](https://discuss.elastic.co/u/etfeet)\ **Replies:** 1\ **Last updated:** [October 1, 2015, 6:27am UTC](https://discuss.elastic.co/t/multiline-postfix-grok-filter/31435 "2015-10-01T06:27:17Z")
I'm trying to create a multi-line postfix grok pattern to have messageid, userid, username, queueid, from,to,size,etc. in the same document for graphing in kibana. is there a way to match elements in the middle of mess… --- ## [Rename fields inside Kibana in order to filter them in Dashboard](https://discuss.elastic.co/t/rename-fields-inside-kibana-in-order-to-filter-them-in-dashboard/286278)
**Author:** [@qttv](https://discuss.elastic.co/u/qttv)\ **Replies:** 1\ **Last updated:** [October 12, 2021, 9:22am UTC](https://discuss.elastic.co/t/rename-fields-inside-kibana-in-order-to-filter-them-in-dashboard/286278 "2021-10-12T09:22:49Z")
Good evening, I'm facing with the following issue, working on Kibana version 7.0. I'm creating a Dashboard, where some visualization takes data from an Index and other visualizations takes data from other indexes... Th… --- ## [Is it possible to format Logstash output in a way that it shows in Uptime?](https://discuss.elastic.co/t/is-it-possible-to-format-logstash-output-in-a-way-that-it-shows-in-uptime/314883)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 3\ **Last updated:** [September 21, 2022, 8:50pm UTC](https://discuss.elastic.co/t/is-it-possible-to-format-logstash-output-in-a-way-that-it-shows-in-uptime/314883 "2022-09-21T20:50:25Z")
I was thinking if, by using mutate in the output of my pipeline on logstash in a way that "mimics" the heartbeat output, I could have an uptime application to see the return of my pseudo-heartbeat (generated by the logst… --- ## [How to configure SSL connection between Logstash and Filebeat](https://discuss.elastic.co/t/how-to-configure-ssl-connection-between-logstash-and-filebeat/119252)
**Author:** [@itspecialistsimon](https://discuss.elastic.co/u/itspecialistsimon)\ **Replies:** 2\ **Last updated:** [February 9, 2018, 2:46pm UTC](https://discuss.elastic.co/t/how-to-configure-ssl-connection-between-logstash-and-filebeat/119252 "2018-02-09T14:46:57Z")
Hi everyone, I'm trying to configure the SSL connection between Logstash and Filebeat. Filebeat is working fine, but Logstash is not starting. Logstash.conf input { beats { port =\> 5044 ssl =\> true ssl\_… --- ## [The auto\_generate\_phrase\_queries parameter of query\_string query was renamed to auto\_generated\_phrase\_queries](https://discuss.elastic.co/t/the-auto-generate-phrase-queries-parameter-of-query-string-query-was-renamed-to-auto-generated-phrase-queries/55934)
**Author:** [@fumin133](https://discuss.elastic.co/u/fumin133)\ **Replies:** 2\ **Last updated:** [July 20, 2016, 10:44am UTC](https://discuss.elastic.co/t/the-auto-generate-phrase-queries-parameter-of-query-string-query-was-renamed-to-auto-generated-phrase-queries/55934 "2016-07-20T10:44:32Z")
Version: Elasticsearch 5.0.0-alpha4 When I use query\_string query with 'auto\_generate\_phrase\_queries' parameter, i got an error as follow. \[query\_string\] query does not support \[auto\_generate\_phrase\_query\] I found … --- ## [High CPU usage periodically](https://discuss.elastic.co/t/high-cpu-usage-periodically/343250)
**Author:** [@xCeLfr](https://discuss.elastic.co/u/xCeLfr)\ **Replies:** 8\ **Last updated:** [September 28, 2023, 7:47am UTC](https://discuss.elastic.co/t/high-cpu-usage-periodically/343250 "2023-09-28T07:47:33Z")
Hi, there are many topics about CPU load but I can't find an answer. Our standalone Elasticsearch 7.12.0 node runs on a 16 GB RAM Linux server. Every 10 minutes or so elasticsearch consumes 100% CPU and queries are ver… --- ## [How to get only the ‘\_source’ part of the hits. of the result](https://discuss.elastic.co/t/how-to-get-only-the-source-part-of-the-hits-of-the-result/233663)
**Author:** [@Muna](https://discuss.elastic.co/u/Muna)\ **Replies:** 3\ **Last updated:** [May 22, 2020, 10:19am UTC](https://discuss.elastic.co/t/how-to-get-only-the-source-part-of-the-hits-of-the-result/233663 "2020-05-22T10:19:02Z")
is there any way to get only the '\_source' part of the result of the query . Like from below result i want only the source part from the hits. { "took" : 0, "timed\_out" : false, "\_shards" : { "total" : 5, "success… --- ## [Kibana TSVB performance](https://discuss.elastic.co/t/kibana-tsvb-performance/222774)
**Author:** [@akrzos](https://discuss.elastic.co/u/akrzos)\ **Replies:** 8\ **Last updated:** [March 13, 2020, 3:24pm UTC](https://discuss.elastic.co/t/kibana-tsvb-performance/222774 "2020-03-13T15:24:21Z")
I am creating some visualizations with Kibana using the TSVB visualizations and find that the load time for the create page is very slow. During this time period it seems that the kibana instance handling the request i… --- ## [Invalid Initial heap size - Always](https://discuss.elastic.co/t/invalid-initial-heap-size-always/155725)
**Author:** [@Power\_Star](https://discuss.elastic.co/u/Power_Star)\ **Replies:** 3\ **Last updated:** [November 7, 2018, 1:59pm UTC](https://discuss.elastic.co/t/invalid-initial-heap-size-always/155725 "2018-11-07T13:59:03Z")
Anybody help me to get out from this issue. ES version - 5.5.3 OS - Centos 7 Machine Memory - 8GB Node - masternode Java Version - 1.8.1\_191 64bit Unable to start elasticsearch. JournalCtl Log: Nov 07 06:12:00 tus3el… --- ## [Joining two documents into one single document in Elastic 6.3?](https://discuss.elastic.co/t/joining-two-documents-into-one-single-document-in-elastic-6-3/136568)
**Author:** [@Suryatejreddy](https://discuss.elastic.co/u/Suryatejreddy)\ **Replies:** 3\ **Last updated:** [June 21, 2018, 2:31pm UTC](https://discuss.elastic.co/t/joining-two-documents-into-one-single-document-in-elastic-6-3/136568 "2018-06-21T14:31:50Z")
Can we join two documents into one single document(nested) in Elastic 6.3? Like.. I have student and department as two documents. Can I add department document as a nested array in student document into some other inde… --- ## [Send data to multiple destinations - store data in multiple kafka topics?](https://discuss.elastic.co/t/send-data-to-multiple-destinations-store-data-in-multiple-kafka-topics/134300)
**Author:** [@vb4t](https://discuss.elastic.co/u/vb4t)\ **Replies:** 3\ **Last updated:** [June 4, 2018, 5:48pm UTC](https://discuss.elastic.co/t/send-data-to-multiple-destinations-store-data-in-multiple-kafka-topics/134300 "2018-06-04T17:48:15Z")
Hello, I would like to send some events to more than one ES cluster. I have following architecture: LOG SOURCE -\> LOGSTASH -\> KAFKA -\> LOGSTASH -\> ES The first logstash process logs and sends it into kafka. The second… --- ## [Running 2 instances of Logstash on Windows machine](https://discuss.elastic.co/t/running-2-instances-of-logstash-on-windows-machine/112884)
**Author:** [@Jay1](https://discuss.elastic.co/u/Jay1)\ **Replies:** 3\ **Last updated:** [December 21, 2017, 9:40pm UTC](https://discuss.elastic.co/t/running-2-instances-of-logstash-on-windows-machine/112884 "2017-12-21T21:40:06Z")
I am trying to create a local setup with 2 instances of logstash running on windows 7 to do some validations ( this is a part of a bigger work of creating a clustered prod environment) . I tried creating a copy of logst… --- ## [Dynatrace module for metricbeat](https://discuss.elastic.co/t/dynatrace-module-for-metricbeat/80183)
**Author:** [@owulff](https://discuss.elastic.co/u/owulff)\ **Replies:** 3\ **Last updated:** [March 30, 2017, 12:40pm UTC](https://discuss.elastic.co/t/dynatrace-module-for-metricbeat/80183 "2017-03-30T12:40:33Z")
Hi there I saw recently the module prometheus for metricbeat. Is the a module for dynatrace already on the roadmap? Thanks Oli --- ## [Querying to Elasticsearch from Hadoop](https://discuss.elastic.co/t/querying-to-elasticsearch-from-hadoop/38572)
**Author:** [@Sanjay\_Bhosale](https://discuss.elastic.co/u/Sanjay_Bhosale)\ **Replies:** 3\ **Last updated:** [January 12, 2016, 3:35pm UTC](https://discuss.elastic.co/t/querying-to-elasticsearch-from-hadoop/38572 "2016-01-12T15:35:44Z")
Hi, I am able to query Elasticsearch DB from main function of Hadoop MapReduce program. But when i perform same operation in MapReduce part it shows below error to me. 16/01/07 02:00:35 INFO mapred.JobClient:… --- ## [Transforming data WHILE indexing](https://discuss.elastic.co/t/transforming-data-while-indexing/35292)
**Author:** [@KavyaS](https://discuss.elastic.co/u/KavyaS)\ **Replies:** 8\ **Last updated:** [November 23, 2015, 7:10pm UTC](https://discuss.elastic.co/t/transforming-data-while-indexing/35292 "2015-11-23T19:10:42Z")
How can we transform data while it gets indexed? Some examples please. --- ## [Failed to perform indices/index/shard/index on replica Index Shard](https://discuss.elastic.co/t/failed-to-perform-indices-index-shard-index-on-replica-index-shard/4210)
**Author:** [@unoxinu](https://discuss.elastic.co/u/unoxinu)\ **Replies:** 3\ **Last updated:** [April 15, 2011, 10:12pm UTC](https://discuss.elastic.co/t/failed-to-perform-indices-index-shard-index-on-replica-index-shard/4210 "2011-04-15T22:12:51Z")
Hi all, I looked around and couldn't find an answer for this weird exception I've been getting half-way through the indexing of about 1M documents(each one has an ID field and a phonenumbers field): Failed to p… --- ## [OpenID Connect stand-alone Elastic with Keycloak](https://discuss.elastic.co/t/openid-connect-stand-alone-elastic-with-keycloak/322287)
**Author:** [@devbot](https://discuss.elastic.co/u/devbot)\ **Replies:** 1\ **Last updated:** [January 3, 2023, 3:36am UTC](https://discuss.elastic.co/t/openid-connect-stand-alone-elastic-with-keycloak/322287 "2023-01-03T03:36:52Z")
I would like to have a single node ES (no Kibana involved) authenticate against Keycloak for all requests. I've followed the OpenID Connect without Kibana documentation to the best of my knowledge. However, this and the… --- ## [Mustache variable in email alert](https://discuss.elastic.co/t/mustache-variable-in-email-alert/289917)
**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\ **Replies:** 1\ **Last updated:** [November 23, 2021, 10:45am UTC](https://discuss.elastic.co/t/mustache-variable-in-email-alert/289917 "2021-11-23T10:45:50Z")
I feel like I'm missing a simple step, but is there a simple way to access Mustache variables within an email alert? Everything I try comes up blank. Do I need to query for these values elsewhere? --- ## [How to add field to every element from an array with variable length](https://discuss.elastic.co/t/how-to-add-field-to-every-element-from-an-array-with-variable-length/126003)
**Author:** [@terrymu](https://discuss.elastic.co/u/terrymu)\ **Replies:** 1\ **Last updated:** [March 30, 2018, 5:12pm UTC](https://discuss.elastic.co/t/how-to-add-field-to-every-element-from-an-array-with-variable-length/126003 "2018-03-30T17:12:21Z")
Hi experts, I have an array such like this: "NODE" : \["node1", "node2", "node3"\] And my first requirement is add field to every element from this array. I have used a hard code to add three fields for these three elem… --- ## [Logstash date 파싱 중](https://discuss.elastic.co/t/logstash-date/78631)
**Author:** [@TaeSung\_Kim](https://discuss.elastic.co/u/TaeSung_Kim)\ **Replies:** 1\ **Last updated:** [March 23, 2017, 8:36am UTC](https://discuss.elastic.co/t/logstash-date/78631 "2017-03-23T08:36:58Z")
2017-03-15 오전 1:28:05 이런 형태의 date 라면 어떻게 파싱을 해야 할까요? 일반적으로 2017-03-15 1:28:05 AM 이렇게 들어오는데 특정 디바이스에서 올려준 데이터를 보니 저렇게 되어있던데.. 파싱 에러가 발생하네요.. 경험 있으신 분들이 계시면 조언 부탁드립니다. 감사합니다. --- ## [Minimal example of connection from Java and search for every document on index](https://discuss.elastic.co/t/minimal-example-of-connection-from-java-and-search-for-every-document-on-index/301334)
**Author:** [@Malo\_Maisonneuve](https://discuss.elastic.co/u/Malo_Maisonneuve)\ **Replies:** 5\ **Last updated:** [April 28, 2022, 9:55pm UTC](https://discuss.elastic.co/t/minimal-example-of-connection-from-java-and-search-for-every-document-on-index/301334 "2022-04-28T21:55:06Z")
Hello, I want to use Java to do basic queries in a remote elastic cluster. It seems I successfully am connected to it, but querying does not return any result, whereas I have documents on my elastic cluster, on the req… --- ## [SSO test using OpenID Connect in elasticsearch](https://discuss.elastic.co/t/sso-test-using-openid-connect-in-elasticsearch/222429)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 5\ **Last updated:** [March 10, 2020, 12:59pm UTC](https://discuss.elastic.co/t/sso-test-using-openid-connect-in-elasticsearch/222429 "2020-03-10T12:59:44Z")
I am currently conducting the sso test. User authentication has all been successful. However 403 error occurs. What settings should I add? ERROR: {"statusCode":403,"error":"Forbidden","message":"Forbidden"} ES LOG: … --- ## [IndexOutOfBoundsException after update from 6.2 to 6.4](https://discuss.elastic.co/t/indexoutofboundsexception-after-update-from-6-2-to-6-4/152670)
**Author:** [@daci](https://discuss.elastic.co/u/daci)\ **Replies:** 5\ **Last updated:** [October 17, 2018, 12:58pm UTC](https://discuss.elastic.co/t/indexoutofboundsexception-after-update-from-6-2-to-6-4/152670 "2018-10-17T12:58:31Z")
Hi, I have a big multi search query which contains pretty complicated aggregations. Recently I updated the Elasticsearch version from 6.2 to 6.4 and when this query is executed using the official PHP package, I am getti… --- ## [Installed X-Pack but can't access Machine Learning or Watch](https://discuss.elastic.co/t/installed-x-pack-but-cant-access-machine-learning-or-watch/105448)
**Author:** [@Ricigliano](https://discuss.elastic.co/u/Ricigliano)\ **Replies:** 5\ **Last updated:** [November 2, 2017, 6:25pm UTC](https://discuss.elastic.co/t/installed-x-pack-but-cant-access-machine-learning-or-watch/105448 "2017-11-02T18:25:49Z")
Installed X-Pack but can't access Machine Learning or Watch on MAC 6.x version. However when I try to access these via the Kibana UI I get an error indicating I don't have access to this component contact your administ… --- ## [Raw field disappear](https://discuss.elastic.co/t/raw-field-disappear/51805)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 5\ **Last updated:** [June 10, 2016, 1:44am UTC](https://discuss.elastic.co/t/raw-field-disappear/51805 "2016-06-10T01:44:34Z")
I have my ELK installed and use a logstash file to configure the log txt files. However, when I open kibana, I could not see the .raw field data. How can I see that? --- ## [Dropping / Mutating first part of log event](https://discuss.elastic.co/t/dropping-mutating-first-part-of-log-event/46063)
**Author:** [@joserose](https://discuss.elastic.co/u/joserose)\ **Replies:** 5\ **Last updated:** [April 5, 2016, 4:38pm UTC](https://discuss.elastic.co/t/dropping-mutating-first-part-of-log-event/46063 "2016-04-05T16:38:40Z")
Hi there I'm attempting to parse the following log entry: A, \[2016-01-27T11:49:29.702997 #90\] ANY -- : 2016-01-27 11:49:29 +0000 severity=INFO, {"method":"GET","path":"/404","format":"/","controller":"errors","acti… --- ## [Is there any way of restricting access to Kibana based on IP address/subnets?](https://discuss.elastic.co/t/is-there-any-way-of-restricting-access-to-kibana-based-on-ip-address-subnets/279810)
**Author:** [@neil6323](https://discuss.elastic.co/u/neil6323)\ **Replies:** 4\ **Last updated:** [July 29, 2021, 4:45am UTC](https://discuss.elastic.co/t/is-there-any-way-of-restricting-access-to-kibana-based-on-ip-address-subnets/279810 "2021-07-29T04:45:34Z")
Hi all, I know you can restrict access to Elasticsearch nodes using IP filtering. But I believe this does not restrict access to Kibana. Is there a similar mechanism to IP filters for Kibana? The end result we are look… --- ## [Table in Kibana with ratios](https://discuss.elastic.co/t/table-in-kibana-with-ratios/225450)
**Author:** [@stefano\_guerrieri](https://discuss.elastic.co/u/stefano_guerrieri)\ **Replies:** 4\ **Last updated:** [April 9, 2020, 4:29pm UTC](https://discuss.elastic.co/t/table-in-kibana-with-ratios/225450 "2020-04-09T16:29:20Z")
Dears, I have this raw data in Elastic: I need first to create in Kibana a table like that one: but the most important is that I have to create a table based on the aggregation above like the following (i'm highli… --- ## [Kibana only working over local](https://discuss.elastic.co/t/kibana-only-working-over-local/182421)
**Author:** [@Junx](https://discuss.elastic.co/u/Junx)\ **Replies:** 4\ **Last updated:** [May 24, 2019, 11:11am UTC](https://discuss.elastic.co/t/kibana-only-working-over-local/182421 "2019-05-24T11:11:19Z")
Content Security Policy: The page's settings blocked the loading of a resource at inline ("script-src"). Constantly get this error and cannot solve it, this happens whenever i try to access from a reverse proxy --- ## [Can we add syntax color to Logs module?](https://discuss.elastic.co/t/can-we-add-syntax-color-to-logs-module/163753)
**Author:** [@Gael\_RICHIER](https://discuss.elastic.co/u/Gael_RICHIER)\ **Replies:** 4\ **Last updated:** [January 31, 2019, 6:16am UTC](https://discuss.elastic.co/t/can-we-add-syntax-color-to-logs-module/163753 "2019-01-31T06:16:43Z")
Hello everybody ! I'll like to know if we can set color syntax for log through logs module ? Example for syslog or auth log. (Error =\> RED / WARNING =\> ORANGE ....) Thanks --- ## [Can custom created logs from Logstash be shipped to ES using Filebeat?](https://discuss.elastic.co/t/can-custom-created-logs-from-logstash-be-shipped-to-es-using-filebeat/100117)
**Author:** [@NandhaKrishna](https://discuss.elastic.co/u/NandhaKrishna)\ **Replies:** 4\ **Last updated:** [September 11, 2017, 8:06pm UTC](https://discuss.elastic.co/t/can-custom-created-logs-from-logstash-be-shipped-to-es-using-filebeat/100117 "2017-09-11T20:06:36Z")
I'm not able to GROK a custom log from logstash to ES using FIlebeat. Everytime i create a grok im only able to see the fields that are default in Filebeat. The fields that I grok from the message are not seen. --- ## [Four node ElasticSearch cluster across AWS Availability Zones](https://discuss.elastic.co/t/four-node-elasticsearch-cluster-across-aws-availability-zones/63677)
**Author:** [@mvz00](https://discuss.elastic.co/u/mvz00)\ **Replies:** 4\ **Last updated:** [October 25, 2016, 9:00pm UTC](https://discuss.elastic.co/t/four-node-elasticsearch-cluster-across-aws-availability-zones/63677 "2016-10-25T21:00:02Z")
Hi, I have a four node elasticsearch cluster with two nodes in each availability zone in AWS. The "discovery.zen.minimum\_master\_nodes" is set to 3 which means that three nodes have to be available for the cluster to be e… --- ## [Peridiocally Java APM Agent experiences errors with connection to APM server](https://discuss.elastic.co/t/peridiocally-java-apm-agent-experiences-errors-with-connection-to-apm-server/335888)
**Author:** [@Savva\_Morozov](https://discuss.elastic.co/u/Savva_Morozov)\ **Replies:** 6\ **Last updated:** [July 13, 2023, 6:55pm UTC](https://discuss.elastic.co/t/peridiocally-java-apm-agent-experiences-errors-with-connection-to-apm-server/335888 "2023-07-13T18:55:49Z")
Kibana version: v8.6.2 Elasticsearch version: v8.6.2 APM Server version: v8.6.2 APM Agent language and version: Java APM Agent 1.34.1 Description of the problem including expected versus actual behavior. Please inc… --- ## [Logstash cloud.id and proxies/LB](https://discuss.elastic.co/t/logstash-cloud-id-and-proxies-lb/294223)
**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\ **Replies:** 6\ **Last updated:** [January 31, 2022, 8:44am UTC](https://discuss.elastic.co/t/logstash-cloud-id-and-proxies-lb/294223 "2022-01-31T08:44:22Z")
Hello, I'm trying to understand the use of cloud.id in Logstash. Based on this typical diagram if I configure Logstash to use the cloud.id will hit the LB layer , the prox… --- ## [\[Kibana\] Changement des couleurs, Pie](https://discuss.elastic.co/t/kibana-changement-des-couleurs-pie/207738)
**Author:** [@YoubaYT](https://discuss.elastic.co/u/YoubaYT)\ **Replies:** 6\ **Last updated:** [November 15, 2019, 1:34pm UTC](https://discuss.elastic.co/t/kibana-changement-des-couleurs-pie/207738 "2019-11-15T13:34:30Z")
Bonjour à tous, Quand je réalise une visualisation de type "Pie" je souhaite définir les couleurs des deux catégories, mais impossible. Quand je les définis ils redeviennent automatiquement aléatoire, j'ai essayé de déf… --- ## [Getting error while processing Nested Document :org.elasticsearch.hadoop.mr.WritableArrayWritable cannot be cast to org.apache.hadoop.io.MapWritable](https://discuss.elastic.co/t/getting-error-while-processing-nested-document-org-elasticsearch-hadoop-mr-writablearraywritable-cannot-be-cast-to-org-apache-hadoop-io-mapwritable/196359)
**Author:** [@Srinivas2](https://discuss.elastic.co/u/Srinivas2)\ **Replies:** 6\ **Last updated:** [August 27, 2019, 1:20pm UTC](https://discuss.elastic.co/t/getting-error-while-processing-nested-document-org-elasticsearch-hadoop-mr-writablearraywritable-cannot-be-cast-to-org-apache-hadoop-io-mapwritable/196359 "2019-08-27T13:20:31Z")
Hi Team, I am creating an external table on a nested JSON document looks like below. { "rootcol1": "val1", "rootcol2": "vla2", "rootcol3": "val2", "rootcol4": "val3", "rootcol5": \[ { "childcol1": "v… --- ## [6.1.1 - Default Index-Pattern not set, and existing patterns are not visible](https://discuss.elastic.co/t/6-1-1-default-index-pattern-not-set-and-existing-patterns-are-not-visible/118953)
**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\ **Replies:** 6\ **Last updated:** [February 16, 2018, 8:24pm UTC](https://discuss.elastic.co/t/6-1-1-default-index-pattern-not-set-and-existing-patterns-are-not-visible/118953 "2018-02-16T20:24:47Z")
Background: Installed Kibana, and able to browse the UI Created Index-Pattern from Management area (UI), and ensure that it is persisted in ".kibana" indice Made the index-pattern default (by clicking icon on top righ… --- ## [\_analyze on multiple documents](https://discuss.elastic.co/t/analyze-on-multiple-documents/108487)
**Author:** [@seanlyu](https://discuss.elastic.co/u/seanlyu)\ **Replies:** 6\ **Last updated:** [November 26, 2017, 12:34pm UTC](https://discuss.elastic.co/t/analyze-on-multiple-documents/108487 "2017-11-26T12:34:14Z")
Sorry for the Korean values that could confuse you. But it wouldn't be that hard to understand when you are reading this. I am using the index named sliced\_data and it his milions of documents in it. I am using Kibana … --- ## [Will logging in DEBUG level cause performance issues in Logstash?](https://discuss.elastic.co/t/will-logging-in-debug-level-cause-performance-issues-in-logstash/98799)
**Author:** [@NandhaKrishna](https://discuss.elastic.co/u/NandhaKrishna)\ **Replies:** 6\ **Last updated:** [September 1, 2017, 6:53am UTC](https://discuss.elastic.co/t/will-logging-in-debug-level-cause-performance-issues-in-logstash/98799 "2017-09-01T06:53:58Z")
Just wanted to know whether there will be any performance issues when the logging level is changed to DEBUG in logstash. --- ## [Changing UTC to local time zone in a machine learning watcher](https://discuss.elastic.co/t/changing-utc-to-local-time-zone-in-a-machine-learning-watcher/258911)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 1:52pm UTC](https://discuss.elastic.co/t/changing-utc-to-local-time-zone-in-a-machine-learning-watcher/258911 "2020-12-17T13:52:40Z")
Im trying to get the time of the alert to local time, but when I add the transform to the watcher I get the mail and the date, but the results are gone, it seems that the transform alters the entire result, what can I do… --- ## [How properly rollover indices](https://discuss.elastic.co/t/how-properly-rollover-indices/237309)
**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\ **Replies:** 2\ **Last updated:** [June 17, 2020, 11:16am UTC](https://discuss.elastic.co/t/how-properly-rollover-indices/237309 "2020-06-17T11:16:40Z")
I harvest logs with filebeat from all docker containers, sending them to logstash and from logstash are forwarded to elasticsearch. I would like to rollover my indices, that are automatically created, if they are too big… --- ## [Trouble getting Logstash to pick up an environment variable](https://discuss.elastic.co/t/trouble-getting-logstash-to-pick-up-an-environment-variable/118871)
**Author:** [@jclose](https://discuss.elastic.co/u/jclose)\ **Replies:** 2\ **Last updated:** [February 7, 2018, 3:59pm UTC](https://discuss.elastic.co/t/trouble-getting-logstash-to-pick-up-an-environment-variable/118871 "2018-02-07T15:59:10Z")
I am consistently getting an error with trying to pick up the environment variable within my input config file. Here is what I have: input { redis { data\_type =\> "list" key =\> "syslog" host … --- ## [Installing alongside Cassandra](https://discuss.elastic.co/t/installing-alongside-cassandra/5619)
**Author:** [@Anthony\_Ikeda](https://discuss.elastic.co/u/Anthony_Ikeda)\ **Replies:** 7\ **Last updated:** [October 18, 2011, 9:32pm UTC](https://discuss.elastic.co/t/installing-alongside-cassandra/5619 "2011-10-18T21:32:06Z")
We are looking at using elastic search to index our data that we currently store to Cassandra. I was wondering if there are any concerns running elastic search on the same nodes that we use for Cassandra? Also whic… [Previous page](https://discuss.elastic.co/top.md?page=1132&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1134&per_page=50&period=all)