# Top **URL:** https://discuss.elastic.co/top.md?page=1136&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1137 --- ## [Split a string by commas but ignore commas within double-quotes？](https://discuss.elastic.co/t/split-a-string-by-commas-but-ignore-commas-within-double-quotes/136471)
**Author:** [@Huang\_Gyo](https://discuss.elastic.co/u/Huang_Gyo)\ **Replies:** 1\ **Last updated:** [June 19, 2018, 1:13pm UTC](https://discuss.elastic.co/t/split-a-string-by-commas-but-ignore-commas-within-double-quotes/136471 "2018-06-19T13:13:17Z")
For example, my log is like: 2018-06-12T10:58:19.617Z, , "test,test", BJSGEXMBX12, , , SMTP, HARECEIVE, 41661182775666 How to split it by "," but ignore the "," in "test,test"? Thanks! --- ## [Failed starting elasticsearch service](https://discuss.elastic.co/t/failed-starting-elasticsearch-service/73044)
**Author:** [@DanPou](https://discuss.elastic.co/u/DanPou)\ **Replies:** 1\ **Last updated:** [January 27, 2017, 6:24pm UTC](https://discuss.elastic.co/t/failed-starting-elasticsearch-service/73044 "2017-01-27T18:24:57Z")
Hello, I installed elasticsearch service on W2012 R2 but can't start it... in log I have : root cause : elasticsearchparseexception\[malformed, expected settings to start with 'object', instead was \[VALUE\_STRING\]\] any i… --- ## [File Beat Consuming very high CPU](https://discuss.elastic.co/t/file-beat-consuming-very-high-cpu/71618)
**Author:** [@userguy](https://discuss.elastic.co/u/userguy)\ **Replies:** 1\ **Last updated:** [January 16, 2017, 4:01pm UTC](https://discuss.elastic.co/t/file-beat-consuming-very-high-cpu/71618 "2017-01-16T16:01:21Z")
Hello Team , This is my configuration filebeat version 5.0.0-1 with centos 7 and also it directly inserts into kafka These are the events in filebeat INFO Non-zero metrics in the last 30s: registrar.states.updat… --- ## [How to compare numeric field in the watcher condition](https://discuss.elastic.co/t/how-to-compare-numeric-field-in-the-watcher-condition/49866)
**Author:** [@leopit](https://discuss.elastic.co/u/leopit)\ **Replies:** 1\ **Last updated:** [May 13, 2016, 6:51am UTC](https://discuss.elastic.co/t/how-to-compare-numeric-field-in-the-watcher-condition/49866 "2016-05-13T06:51:50Z")
I am collecting traffic information per every second. I'd like to compare the inoutbps field if the traffic(bpsinout field) value goes over than 5000000, I hope get a notification i tried to write watcher like below… --- ## [Reg. Pushing MongoDB data to Elasticsearch](https://discuss.elastic.co/t/reg-pushing-mongodb-data-to-elasticsearch/31613)
**Author:** [@itsmoipri](https://discuss.elastic.co/u/itsmoipri)\ **Replies:** 1\ **Last updated:** [October 5, 2015, 7:36am UTC](https://discuss.elastic.co/t/reg-pushing-mongodb-data-to-elasticsearch/31613 "2015-10-05T07:36:49Z")
Hi there, I have been trying to integrate my existing MongoDB with Elasticsearch for quite some time but with no luck. The goal is to add enhanced search and report generation( for which i am planning on using… --- ## [KAFKA server keeping too much TCP ESTABLISHED connections with Logstash Windows Client](https://discuss.elastic.co/t/kafka-server-keeping-too-much-tcp-established-connections-with-logstash-windows-client/63825)
**Author:** [@zhoufwind](https://discuss.elastic.co/u/zhoufwind)\ **Replies:** 0\ **Last updated:** [October 25, 2016, 6:04am UTC](https://discuss.elastic.co/t/kafka-server-keeping-too-much-tcp-established-connections-with-logstash-windows-client/63825 "2016-10-25T06:04:30Z")
Hi folks, My kafka server connect a bunch of logstash shippers, which running on Windows platform. We have detected Kafka TCP established connections over 30k alarms these days, it seems like Kafka server keeping too m… --- ## [Kibana and Tribe Nodes](https://discuss.elastic.co/t/kibana-and-tribe-nodes/49938)
**Author:** [@bmoss6](https://discuss.elastic.co/u/bmoss6)\ **Replies:** 1\ **Last updated:** [May 12, 2016, 9:25pm UTC](https://discuss.elastic.co/t/kibana-and-tribe-nodes/49938 "2016-05-12T21:25:38Z")
I have tribe node which is connected to two ES clusters. I would like to visualize both clusters as one in kibana so I assumed that running kibana on my tribe node would be the solution. However, there seems to be errors… --- ## [How to optimize memory and heap usage for Single node Elastic Search](https://discuss.elastic.co/t/how-to-optimize-memory-and-heap-usage-for-single-node-elastic-search/252492)
**Author:** [@avadhut](https://discuss.elastic.co/u/avadhut)\ **Replies:** 6\ **Last updated:** [October 23, 2020, 6:32am UTC](https://discuss.elastic.co/t/how-to-optimize-memory-and-heap-usage-for-single-node-elastic-search/252492 "2020-10-23T06:32:07Z")
Hi everyone, I have set up a single node latest version elasticsearch cluster with Xpack and Kibana UI on the same VM. The VM has 23 GB RAM. I have provided 12 GB of JAVA heap space. But still, elastic search uses all o… --- ## [Difficulty adding nodes](https://discuss.elastic.co/t/difficulty-adding-nodes/185303)
**Author:** [@Brett\_Blackham](https://discuss.elastic.co/u/Brett_Blackham)\ **Replies:** 6\ **Last updated:** [June 12, 2019, 9:50pm UTC](https://discuss.elastic.co/t/difficulty-adding-nodes/185303 "2019-06-12T21:50:29Z")
I've been following several tutorials/examples but I am not able to get elastic to see other nodes. I have 3 VMs running Ubuntu 18.04 LTS /etc/hosts 10.192.10.61 elastic1 10.192.10.62 elastic2 10.192.10.63 … --- ## [ES Data node global metadata not found](https://discuss.elastic.co/t/es-data-node-global-metadata-not-found/263452)
**Author:** [@Gratien](https://discuss.elastic.co/u/Gratien)\ **Replies:** 3\ **Last updated:** [February 5, 2021, 7:42pm UTC](https://discuss.elastic.co/t/es-data-node-global-metadata-not-found/263452 "2021-02-05T19:42:04Z")
Hello everyone, I'm working on a marathon hosted cluster (7.6.2) which is not very stable sometimes. Occasionnaly when there is a host failure, I end up with the following on a data node : java.lang.IllegalStateExcept… --- ## [Canvas - essql failed to fetch](https://discuss.elastic.co/t/canvas-essql-failed-to-fetch/197508)
**Author:** [@atamarnath](https://discuss.elastic.co/u/atamarnath)\ **Replies:** 3\ **Last updated:** [September 19, 2019, 2:05pm UTC](https://discuss.elastic.co/t/canvas-essql-failed-to-fetch/197508 "2019-09-19T14:05:50Z")
Hi, I am trying to change color of shape dynamically based on the RAG returned by my query. When the query does not return any record matching the where clause, I see an exclamation mark on the screen with error "essql f… --- ## [The string fields are not aggregatable in kibana 6.4](https://discuss.elastic.co/t/the-string-fields-are-not-aggregatable-in-kibana-6-4/150867)
**Author:** [@arun1](https://discuss.elastic.co/u/arun1)\ **Replies:** 3\ **Last updated:** [October 5, 2018, 2:39pm UTC](https://discuss.elastic.co/t/the-string-fields-are-not-aggregatable-in-kibana-6-4/150867 "2018-10-05T14:39:53Z")
The string/text fields in my index are shown as not aggregateble in kibana. Only the .keyword fields are shown as aggregatable. I would like to perform aggregation on the raw fields(not\_analyzed fields) as well. Please h… --- ## [Elastic -Spark Major Minor Version Issue :org/elasticsearch/spark/rdd/CompatUtils : Unsupported major.minor version 52.0](https://discuss.elastic.co/t/elastic-spark-major-minor-version-issue-org-elasticsearch-spark-rdd-compatutils-unsupported-major-minor-version-52-0/98343)
**Author:** [@Akshay\_60](https://discuss.elastic.co/u/Akshay_60)\ **Replies:** 3\ **Last updated:** [August 25, 2017, 8:21am UTC](https://discuss.elastic.co/t/elastic-spark-major-minor-version-issue-org-elasticsearch-spark-rdd-compatutils-unsupported-major-minor-version-52-0/98343 "2017-08-25T08:21:43Z")
Exception in thread “main” java.lang.UnsupportedClassVersionError: org/elasticsearch/spark/rdd/CompatUtils : Unsupported major.minor version 52.0 Hi , I am working on scala spark project .I am using these dependency bu… --- ## [Need splitting incoming data](https://discuss.elastic.co/t/need-splitting-incoming-data/35515)
**Author:** [@Ahmed\_Faik](https://discuss.elastic.co/u/Ahmed_Faik)\ **Replies:** 3\ **Last updated:** [November 25, 2015, 12:24pm UTC](https://discuss.elastic.co/t/need-splitting-incoming-data/35515 "2015-11-25T12:24:17Z")
Hi all, i try using split filter property to split incoming data from tcp port, this data has the line format of seven values plus time stamp separated by comma "," and terminated with "\\n" as following : \[ v1,v2,v3,v4… --- ## [Elapsed filter and logstash 1.5](https://discuss.elastic.co/t/elapsed-filter-and-logstash-1-5/2232)
**Author:** [@sanaya](https://discuss.elastic.co/u/sanaya)\ **Replies:** 3\ **Last updated:** [July 2, 2015, 9:52pm UTC](https://discuss.elastic.co/t/elapsed-filter-and-logstash-1-5/2232 "2015-07-02T21:52:51Z")
Hello, I'm just getting started with logstash, and I have been using the elapsed filter on version 1.4.2. However, upgrading to version 1.5 the elapsed filter doesn't seem to generate an expired event any more. Is ther… --- ## [Subtraction between current date and doc created date](https://discuss.elastic.co/t/subtraction-between-current-date-and-doc-created-date/326405)
**Author:** [@PappuSingh](https://discuss.elastic.co/u/PappuSingh)\ **Replies:** 4\ **Last updated:** [March 1, 2023, 10:54am UTC](https://discuss.elastic.co/t/subtraction-between-current-date-and-doc-created-date/326405 "2023-03-01T10:54:44Z")
Hi, Please see the below code sample. long l1=(new Date().getTime()); //emit(l1); long l= ChronoUnit.SECONDS.between(l1, doc\['timestamp'\].value); if(l\<=100000){ emit('New') } else{emit('Old')} I am getting the b… --- ## [Audit logs are not rotated correctly when the elasticsearch module is enabled](https://discuss.elastic.co/t/audit-logs-are-not-rotated-correctly-when-the-elasticsearch-module-is-enabled/193526)
**Author:** [@gerarddp](https://discuss.elastic.co/u/gerarddp)\ **Replies:** 4\ **Last updated:** [August 7, 2019, 1:56pm UTC](https://discuss.elastic.co/t/audit-logs-are-not-rotated-correctly-when-the-elasticsearch-module-is-enabled/193526 "2019-08-07T13:56:46Z")
When enabling the audit log parsing with the elasticsearch module for filbeat, the audit logs are not rotate correctly because filebeat keeps the files open. That also causes the disk to get full quickly because of the a… --- ## [Need to add the values for every second and display it in a bar chart](https://discuss.elastic.co/t/need-to-add-the-values-for-every-second-and-display-it-in-a-bar-chart/92515)
**Author:** [@Tejas\_Ghutukade](https://discuss.elastic.co/u/Tejas_Ghutukade)\ **Replies:** 4\ **Last updated:** [July 12, 2017, 10:49pm UTC](https://discuss.elastic.co/t/need-to-add-the-values-for-every-second-and-display-it-in-a-bar-chart/92515 "2017-07-12T22:49:41Z")
M trying to visualize a bar chart where on metric i have sum of a field and for bucket its date histogram for the timestamp field and second interval but the interval is auto set to hour cause of too many buckets. How … --- ## [Encountered mapper\_parsing\_exception when working through LogStash tutorial](https://discuss.elastic.co/t/encountered-mapper-parsing-exception-when-working-through-logstash-tutorial/173746)
**Author:** [@Miao](https://discuss.elastic.co/u/Miao)\ **Replies:** 2\ **Last updated:** [March 25, 2019, 12:35pm UTC](https://discuss.elastic.co/t/encountered-mapper-parsing-exception-when-working-through-logstash-tutorial/173746 "2019-03-25T12:35:55Z")
I recently downloaded LogStash 6.6.2, and I am currently working through the tutorial here. I created a first-pipeline.conf file inside my Logstash directory: input { beats { port =\> "5044" } } filter {… --- ## [Logstash unable to start pipeline:main (jvm.options issue?)](https://discuss.elastic.co/t/logstash-unable-to-start-pipeline-main-jvm-options-issue/153601)
**Author:** [@phoenix66](https://discuss.elastic.co/u/phoenix66)\ **Replies:** 2\ **Last updated:** [October 23, 2018, 9:09pm UTC](https://discuss.elastic.co/t/logstash-unable-to-start-pipeline-main-jvm-options-issue/153601 "2018-10-23T21:09:43Z")
Hi all, First post, so apologies if I miss any etiquette. I have recently installed Elastic Stack (6.4) and am having problems after configuring for Elastiflow. I get the following error in LS log: \[2018-10-23T13:31:1… --- ## [Sliced Scroll Search question, what's the minimum max slice?](https://discuss.elastic.co/t/sliced-scroll-search-question-whats-the-minimum-max-slice/97642)
**Author:** [@frzhang](https://discuss.elastic.co/u/frzhang)\ **Replies:** 2\ **Last updated:** [August 21, 2017, 6:36pm UTC](https://discuss.elastic.co/t/sliced-scroll-search-question-whats-the-minimum-max-slice/97642 "2017-08-21T18:36:10Z")
Hi, My current index shards setting is 5, and I am using sliced scroll search to increase parallelism. But I found out if max slice number is less than the number of shards, the result is incomplete. Since I have anothe… --- ## [Import winlogbeat dashboards to kibana](https://discuss.elastic.co/t/import-winlogbeat-dashboards-to-kibana/80644)
**Author:** [@alphram](https://discuss.elastic.co/u/alphram)\ **Replies:** 2\ **Last updated:** [March 30, 2017, 9:49am UTC](https://discuss.elastic.co/t/import-winlogbeat-dashboards-to-kibana/80644 "2017-03-30T09:49:02Z")
Hi, I am new to ELK. My ELK stack is running on a debian 8. Elasticsearch, kibana, and logstash are in version 5.2.2 Whenever I try to import winlogbeat dashboards from a windows server where I run the service to the … --- ## [Delete By Query in ES 5.0.1 Slower than Expected](https://discuss.elastic.co/t/delete-by-query-in-es-5-0-1-slower-than-expected/74554)
**Author:** [@ben-10](https://discuss.elastic.co/u/ben-10)\ **Replies:** 2\ **Last updated:** [February 9, 2017, 10:23pm UTC](https://discuss.elastic.co/t/delete-by-query-in-es-5-0-1-slower-than-expected/74554 "2017-02-09T22:23:02Z")
First time testing out this function and not quite sure what to expect in terms of performance. Can anyone comment if this seems right or can be further optimized to perform better? Single index: logstash\_asa\_2016.12.3… --- ## [500 error from elasticsearch](https://discuss.elastic.co/t/500-error-from-elasticsearch/12724)
**Author:** [@jxarms3](https://discuss.elastic.co/u/jxarms3)\ **Replies:** 2\ **Last updated:** [July 9, 2013, 10:20pm UTC](https://discuss.elastic.co/t/500-error-from-elasticsearch/12724 "2013-07-09T22:20:42Z")
ES version: ElasticSearch Version: 0.20.6, JVM: 20.0-b12 I get this error that I can not overcome and have to remove my nodes and start again as I don't know how to correct it: i get this on more complex queries; … --- ## [Free up disk space](https://discuss.elastic.co/t/free-up-disk-space/245799)
**Author:** [@Bruceclegg](https://discuss.elastic.co/u/Bruceclegg)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 5:03pm UTC](https://discuss.elastic.co/t/free-up-disk-space/245799 "2020-08-20T17:03:42Z")
We have an ELK server that periodically runs out of space. In the spring I worked out a method using curator to delete indices that were more than 30 days old. But I still don't know much about ELK - Because everyone i… --- ## [Ignore Global Filters in Custom Plugin - Kibana 5.5](https://discuss.elastic.co/t/ignore-global-filters-in-custom-plugin-kibana-5-5/123152)
**Author:** [@ronelfernandez](https://discuss.elastic.co/u/ronelfernandez)\ **Replies:** 7\ **Last updated:** [March 9, 2018, 7:23pm UTC](https://discuss.elastic.co/t/ignore-global-filters-in-custom-plugin-kibana-5-5/123152 "2018-03-09T19:23:00Z")
I see that some of the plugins, like Visual Builder, have an option to ignore global filters. How can a custom plugin (a plugin that I write myself) that uses search, say a modified version of Table Vis achieve the same… --- ## [Autodiscover with nomad doesn't work](https://discuss.elastic.co/t/autodiscover-with-nomad-doesnt-work/318690)
**Author:** [@Natanael\_Weslley](https://discuss.elastic.co/u/Natanael_Weslley)\ **Replies:** 5\ **Last updated:** [November 18, 2022, 8:11pm UTC](https://discuss.elastic.co/t/autodiscover-with-nomad-doesnt-work/318690 "2022-11-18T20:11:16Z")
Hi, guys! I'm having some trouble to configure autodiscover to run with nomad, to get allocation logs from the nomad agent and send to logstash. Everytime i got this message in filebeat logs. // "message":"Non-zero met… --- ## [How do I do Case Sensitive Match Query in Elastic Search?](https://discuss.elastic.co/t/how-do-i-do-case-sensitive-match-query-in-elastic-search/309348)
**Author:** [@DataStorageMuse](https://discuss.elastic.co/u/DataStorageMuse)\ **Replies:** 5\ **Last updated:** [July 12, 2022, 5:53am UTC](https://discuss.elastic.co/t/how-do-i-do-case-sensitive-match-query-in-elastic-search/309348 "2022-07-12T05:53:47Z")
I'm trying to do a match query that is case sensitive such that it only returns words where the html field contains the string. Here is the query I have so far: POST data/\_search { "track\_total\_hits": true, "query"… --- ## [ES container in Docker changes the "temp" directory every time the container runs!](https://discuss.elastic.co/t/es-container-in-docker-changes-the-temp-directory-every-time-the-container-runs/281371)
**Author:** [@aza-zil](https://discuss.elastic.co/u/aza-zil)\ **Replies:** 5\ **Last updated:** [August 20, 2021, 2:21pm UTC](https://discuss.elastic.co/t/es-container-in-docker-changes-the-temp-directory-every-time-the-container-runs/281371 "2021-08-20T14:21:06Z")
I am trying to develope a plugin, it must writes files on a click. After I searched, I found out that I can only write to "temp" folder, is that right? So, in windows, I was able to locate the "temp" folder and everythi… --- ## [Conccurency in data](https://discuss.elastic.co/t/conccurency-in-data/184328)
**Author:** [@makos63](https://discuss.elastic.co/u/makos63)\ **Replies:** 5\ **Last updated:** [June 13, 2019, 12:34pm UTC](https://discuss.elastic.co/t/conccurency-in-data/184328 "2019-06-13T12:34:06Z")
Hello, we want to see what was the maximum and the minimum of parallel event we had in given interval. I know that is possible in Splunk. I tried this already, but could not rewrite Groovy script in Painless successful… --- ## [Coordinating node](https://discuss.elastic.co/t/coordinating-node/174555)
**Author:** [@jast](https://discuss.elastic.co/u/jast)\ **Replies:** 5\ **Last updated:** [March 30, 2019, 8:00am UTC](https://discuss.elastic.co/t/coordinating-node/174555 "2019-03-30T08:00:12Z")
Hi, I need help/advise to build my elasticsearch cluster with a coordinating node, I have the following Server A - MasterData Node cluster.name: soc-stage node.name: es-serverA path.data: /var/lib/elasticsearch p… --- ## [RuntimeException while parsing doc file](https://discuss.elastic.co/t/runtimeexception-while-parsing-doc-file/168940)
**Author:** [@Kalpana\_Doraisamy](https://discuss.elastic.co/u/Kalpana_Doraisamy)\ **Replies:** 5\ **Last updated:** [February 20, 2019, 2:20pm UTC](https://discuss.elastic.co/t/runtimeexception-while-parsing-doc-file/168940 "2019-02-20T14:20:23Z")
Hi, I am getting the following exception when I try the PUT on kibana with ElasticSearch 6.6.0 with ingest-attachment-6.6.0 { "error": { "root\_cause": \[ { "type": "exception", "reason": "java.lang.IllegalArgument… --- ## [Ajouter un index](https://discuss.elastic.co/t/ajouter-un-index/149716)
**Author:** [@Newt](https://discuss.elastic.co/u/Newt)\ **Replies:** 5\ **Last updated:** [October 12, 2018, 3:23pm UTC](https://discuss.elastic.co/t/ajouter-un-index/149716 "2018-10-12T15:23:40Z")
Bonjour, Étant débutant et malgré de nombreuses recherches, je ne comprends toujours pas comment peut-on remonter un index via /etc/logstash/conf.d dans kibana. Quelqu'un serait m'expliquer svp ? --- ## [Cannot access the search results through the watch execution context - Ctx.payload.hits.total](https://discuss.elastic.co/t/cannot-access-the-search-results-through-the-watch-execution-context-ctx-payload-hits-total/125077)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 5\ **Last updated:** [March 22, 2018, 9:35am UTC](https://discuss.elastic.co/t/cannot-access-the-search-results-through-the-watch-execution-context-ctx-payload-hits-total/125077 "2018-03-22T09:35:45Z")
I'm trying to access value from {{ctx.payload.hits.total}}(Search Input | X-Pack for the Elastic Stack) and send message to Slack Action | X-Pack for the Elastic Stack), yet not getting any values( Get Watch@Pastebin P… --- ## [Fresh install of Kibana 5.6.2 running on default settings isn't working](https://discuss.elastic.co/t/fresh-install-of-kibana-5-6-2-running-on-default-settings-isnt-working/103087)
**Author:** [@leosco](https://discuss.elastic.co/u/leosco)\ **Replies:** 5\ **Last updated:** [October 7, 2017, 5:52pm UTC](https://discuss.elastic.co/t/fresh-install-of-kibana-5-6-2-running-on-default-settings-isnt-working/103087 "2017-10-07T17:52:18Z")
Hi there, I've installed both Elasticsearch and Kibana 5.6.2 on Windows 10 x64. Running elasticsearch seems to work just fine, I get the expected server output and the REST API is accessible at localhost:9200 curl loca… --- ## [I have created two instance of elasticsearch in two different machine, both instance have same cluster name but still no.of nodes is one, but i want two node](https://discuss.elastic.co/t/i-have-created-two-instance-of-elasticsearch-in-two-different-machine-both-instance-have-same-cluster-name-but-still-no-of-nodes-is-one-but-i-want-two-node/192231)
**Author:** [@Ayush\_Verma](https://discuss.elastic.co/u/Ayush_Verma)\ **Replies:** 2\ **Last updated:** [August 3, 2019, 11:23am UTC](https://discuss.elastic.co/t/i-have-created-two-instance-of-elasticsearch-in-two-different-machine-both-instance-have-same-cluster-name-but-still-no-of-nodes-is-one-but-i-want-two-node/192231 "2019-08-03T11:23:51Z")
this is the output i am getting after using curl -X GET "localhost:9200/\_nodes" {"\_nodes":{"total":1,"successful":1,"failed":0},"cluster\_name":"ElasticsearchStagging","nodes":{"eLSFczi5TFOotlGdB9kpsw":{"name":"node-1",… --- ## [Looking for a better method to import dashboards](https://discuss.elastic.co/t/looking-for-a-better-method-to-import-dashboards/119506)
**Author:** [@dorj1234](https://discuss.elastic.co/u/dorj1234)\ **Replies:** 2\ **Last updated:** [February 12, 2018, 9:56pm UTC](https://discuss.elastic.co/t/looking-for-a-better-method-to-import-dashboards/119506 "2018-02-12T21:56:44Z")
Hello, looking for advice on a set of visualizations and their dashboards, that I need to duplicate. I am hoping there is a better way than what I do below. I have index1 with existing dashboards. Same data from differ… --- ## [JournalBeat Stopped Shipping Logs](https://discuss.elastic.co/t/journalbeat-stopped-shipping-logs/259195)
**Author:** [@vamshisiddarth](https://discuss.elastic.co/u/vamshisiddarth)\ **Replies:** 2\ **Last updated:** [December 21, 2020, 10:22am UTC](https://discuss.elastic.co/t/journalbeat-stopped-shipping-logs/259195 "2020-12-21T10:22:22Z")
JournalBeat stopped shipping logs on all environments for us from 19th Dec, 2020. We configured our beats services to ship logs from aws instance to elasticsearch through logstash. Our filebeat and metricbeat logs are be… --- ## [Metricbeat conf.d?](https://discuss.elastic.co/t/metricbeat-conf-d/76885)
**Author:** [@ritchierich](https://discuss.elastic.co/u/ritchierich)\ **Replies:** 2\ **Last updated:** [March 1, 2017, 8:02pm UTC](https://discuss.elastic.co/t/metricbeat-conf-d/76885 "2017-03-01T20:02:47Z")
Is there a conf.d or equivalent to manage modules in separate files? I'd like to have a base system module for all my systems then add modules per system role. Ideally, I could create separate yml file for each modu… --- ## [Doc count match](https://discuss.elastic.co/t/doc-count-match/186838)
**Author:** [@Animesh\_singh](https://discuss.elastic.co/u/Animesh_singh)\ **Replies:** 3\ **Last updated:** [June 22, 2019, 1:15pm UTC](https://discuss.elastic.co/t/doc-count-match/186838 "2019-06-22T13:15:56Z")
Hey , Can anynone tell me why there is difference between result of doc count API for match all and document count displayed in cat/indices result for a particular index . Or these doc counts are totally different beca… --- ## [APM client node.js ResponseError](https://discuss.elastic.co/t/apm-client-node-js-responseerror/263885)
**Author:** [@mirko.spezie](https://discuss.elastic.co/u/mirko.spezie)\ **Replies:** 1\ **Last updated:** [February 10, 2021, 7:21pm UTC](https://discuss.elastic.co/t/apm-client-node-js-responseerror/263885 "2021-02-10T19:21:58Z")
Kibana version: 7.10.2 Elasticsearch version: 7.10.2 APM Server version: 7.10.2 APM Agent language and version: node.js 3.10.0 Original install method (e.g. download page, yum, deb, from source, etc.) and version: AP… --- ## [Filebeat output to multiple ElasticSearch](https://discuss.elastic.co/t/filebeat-output-to-multiple-elasticsearch/177131)
**Author:** [@algilber](https://discuss.elastic.co/u/algilber)\ **Replies:** 1\ **Last updated:** [April 16, 2019, 5:49pm UTC](https://discuss.elastic.co/t/filebeat-output-to-multiple-elasticsearch/177131 "2019-04-16T17:49:38Z")
Hi, I have a server RHEL7 with filebeat client installed. I want to send the syslog to a cluster of ElasticSearch (elk01) and the logs of Nginx to another one (elk02). What's the config for that. The first one wotk grea… --- ## [Bulk index cannot change type for index with more than one shard](https://discuss.elastic.co/t/bulk-index-cannot-change-type-for-index-with-more-than-one-shard/68560)
**Author:** [@enp](https://discuss.elastic.co/u/enp)\ **Replies:** 1\ **Last updated:** [December 9, 2016, 3:45pm UTC](https://discuss.elastic.co/t/bulk-index-cannot-change-type-for-index-with-more-than-one-shard/68560 "2016-12-09T15:45:13Z")
Hi, While bulk indexing I got error: Bulk error \[index\]: {"\_index":"one","status":400,"\_id":"00c98d00-d8c4-46ff-9178-d4b863bd8871","error":{"reason":"mapper \[meta.relevance\] cannot be changed from type \[long\] to \[floa… --- ## [Logstash filter plugin patterns-core](https://discuss.elastic.co/t/logstash-filter-plugin-patterns-core/23900)
**Author:** [@Penny\_Lee](https://discuss.elastic.co/u/Penny_Lee)\ **Replies:** 1\ **Last updated:** [June 24, 2015, 9:49am UTC](https://discuss.elastic.co/t/logstash-filter-plugin-patterns-core/23900 "2015-06-24T09:49:30Z")
Hi \[grin\] I installed the logstash-plugins/logstash-patterns-core to the /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-patterns-core-0.1.10/ The pattern I tested it work on the http://grokconstructor.appspot.com/… --- ## [Fscrawler and Elasticsearch compatibility](https://discuss.elastic.co/t/fscrawler-and-elasticsearch-compatibility/88922)
**Author:** [@sekerg](https://discuss.elastic.co/u/sekerg)\ **Replies:** 1\ **Last updated:** [June 10, 2017, 7:03pm UTC](https://discuss.elastic.co/t/fscrawler-and-elasticsearch-compatibility/88922 "2017-06-10T19:03:33Z")
Useful info concerning Fscrawler plans... What are the plans for Fscrawler plugin? Probably not part of Elastic main path (as emphasized in deliverables for deployment ) ? @dadoonet Indeed. That's a personal project … --- ## [Painless Script Caching](https://discuss.elastic.co/t/painless-script-caching/175257)
**Author:** [@cecoke](https://discuss.elastic.co/u/cecoke)\ **Replies:** 2\ **Last updated:** [April 8, 2019, 8:34pm UTC](https://discuss.elastic.co/t/painless-script-caching/175257 "2019-04-08T20:34:29Z")
Hi friends, I am looking for advice/best practice on caching painless scripts. For my case, the script itself is lightweight an simple, no more than one simple statement, and no script parameters. An example is "return … --- ## [Combine fields in query](https://discuss.elastic.co/t/combine-fields-in-query/167858)
**Author:** [@Josef\_Fritzer](https://discuss.elastic.co/u/Josef_Fritzer)\ **Replies:** 2\ **Last updated:** [February 12, 2019, 6:56am UTC](https://discuss.elastic.co/t/combine-fields-in-query/167858 "2019-02-12T06:56:26Z")
Hi, I have the following document in my index: { "\_id": "0012020310", "\_source": { "ConstructionProject": { "Candidates": \[ { "InterestIndicator": "NORMAL", "State": "CONTRACTO… --- ## [The request for this panel failed](https://discuss.elastic.co/t/the-request-for-this-panel-failed/155359)
**Author:** [@aabababba](https://discuss.elastic.co/u/aabababba)\ **Replies:** 2\ **Last updated:** [November 6, 2018, 2:50am UTC](https://discuss.elastic.co/t/the-request-for-this-panel-failed/155359 "2018-11-06T02:50:37Z")
The request for this panel failed. The aggregations key is missing from the response, check your permissions for this request. --- ## [ESRally - data.json.bz2](https://discuss.elastic.co/t/esrally-data-json-bz2/100553)
**Author:** [@sanketshinde](https://discuss.elastic.co/u/sanketshinde)\ **Replies:** 2\ **Last updated:** [September 15, 2017, 11:05am UTC](https://discuss.elastic.co/t/esrally-data-json-bz2/100553 "2017-09-15T11:05:04Z")
I am writing dummy data file- fakeDate.json using a python script docGen.py as a data file for a custom rally track. On trying to execute the rally I get the following error. \[ERROR\] Cannot race. ('Could not execute ben… --- ## [Getting onhandled courier request error: Request Timeout after 30000ms](https://discuss.elastic.co/t/getting-onhandled-courier-request-error-request-timeout-after-30000ms/63416)
**Author:** [@balubollam](https://discuss.elastic.co/u/balubollam)\ **Replies:** 2\ **Last updated:** [October 19, 2016, 5:56pm UTC](https://discuss.elastic.co/t/getting-onhandled-courier-request-error-request-timeout-after-30000ms/63416 "2016-10-19T17:56:12Z")
Hi Everyone, We have connected Our ES2.3 to kibana4.5.4 We are getting Courier Fetch Error: unhandled courier request error: Request Timeout after 30000ms Error: unhandled courier request error: Request Timeout afte… [Previous page](https://discuss.elastic.co/top.md?page=1135&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1137&per_page=50&period=all)