# Top

**URL:** https://discuss.elastic.co/top.md?page=1148&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1149

---

## [Rally 2.8.0](https://discuss.elastic.co/t/rally-2-8-0/335769)

<div class="topic-metadata">

**Author:** [@gbanasiak](https://discuss.elastic.co/u/gbanasiak)\
**Replies:** 0\
**Last updated:** [June 12, 2023, 12:11pm UTC](https://discuss.elastic.co/t/rally-2-8-0/335769 "2023-06-12T12:11:32Z")

</div>

Rally 2.8.0 has just been released. The new release brings support for Python 3.11. Highlights #1683: Upgrade Elasticsearch client to 8.6.1 #1669: Upgrade ES Client to 8.x Enhancements #1727: Allow configuring…

---

## [Use rank feature query as multiplier to the relevance score](https://discuss.elastic.co/t/use-rank-feature-query-as-multiplier-to-the-relevance-score/257388)

<div class="topic-metadata">

**Author:** [@praveshjain1991](https://discuss.elastic.co/u/praveshjain1991)\
**Replies:** 0\
**Last updated:** [December 2, 2020, 4:32pm UTC](https://discuss.elastic.co/t/use-rank-feature-query-as-multiplier-to-the-relevance-score/257388 "2020-12-02T16:32:51Z")

</div>

As per the documentation, the rank feature query score is added to the overall query score. Since the relevance score itself is not bounded - the actual store depends on the data in your indices - how do I make the rank…

---

## [Fd pings start timing out, causing multiple nodes to be kicked out and cluster going red](https://discuss.elastic.co/t/fd-pings-start-timing-out-causing-multiple-nodes-to-be-kicked-out-and-cluster-going-red/233293)

<div class="topic-metadata">

**Author:** [@shwetathareja](https://discuss.elastic.co/u/shwetathareja)\
**Replies:** 0\
**Last updated:** [May 19, 2020, 10:18am UTC](https://discuss.elastic.co/t/fd-pings-start-timing-out-causing-multiple-nodes-to-be-kicked-out-and-cluster-going-red/233293 "2020-05-19T10:18:07Z")

</div>

Hi Team, ES version: 6.8 No. of nodes: 103 No. of shards: ~10K We are observing an issue in this cluster where fd pings will start failing (due to timeout) with 3 retries on both master and data node. This would resu…

---

## [Indexation of many documents in Appsearch](https://discuss.elastic.co/t/indexation-of-many-documents-in-appsearch/200039)

<div class="topic-metadata">

**Author:** [@misnard](https://discuss.elastic.co/u/misnard)\
**Replies:** 0\
**Last updated:** [September 18, 2019, 2:51pm UTC](https://discuss.elastic.co/t/indexation-of-many-documents-in-appsearch/200039 "2019-09-18T14:51:05Z")

</div>

Hello, I currently encounter problems when indexing documents in self hosted AppSearch, I have 30 million entries in my source and as the documentation indicates we can only insert documents in packets of 100, for each …

---

## [How to aggregate data across multiple fields?](https://discuss.elastic.co/t/how-to-aggregate-data-across-multiple-fields/318943)

<div class="topic-metadata">

**Author:** [@tinrik](https://discuss.elastic.co/u/tinrik)\
**Replies:** 4\
**Last updated:** [November 16, 2022, 3:14pm UTC](https://discuss.elastic.co/t/how-to-aggregate-data-across-multiple-fields/318943 "2022-11-16T15:14:59Z")

</div>

Hi! I'm fairly new to Kibana. I'm trying to perform data aggregation across multiple fields, but don't seem to be approaching the problem the right way. Example use case: I have data about house prices. E.g. house "a" …

---

## [Kibana create script field : concatenated strings with IF conditions](https://discuss.elastic.co/t/kibana-create-script-field-concatenated-strings-with-if-conditions/304955)

<div class="topic-metadata">

**Author:** [@Arthur\_Parkopoly](https://discuss.elastic.co/u/Arthur_Parkopoly)\
**Replies:** 4\
**Last updated:** [May 24, 2022, 2:58pm UTC](https://discuss.elastic.co/t/kibana-create-script-field-concatenated-strings-with-if-conditions/304955 "2022-05-24T14:58:35Z")

</div>

Hello to the community, I try to combine 2 date fields into a more meaning ful STRING scripted field based on conditions on the date to add "0" before 1 digit numbers ( May 2nd =\> 05-02). This script is refused and I d…

---

## [Fleet 0.0.0.0 address after Elastic Agent install](https://discuss.elastic.co/t/fleet-0-0-0-0-address-after-elastic-agent-install/265698)

<div class="topic-metadata">

**Author:** [@Cosmin\_Ciobanu1](https://discuss.elastic.co/u/Cosmin_Ciobanu1)\
**Replies:** 4\
**Last updated:** [March 3, 2021, 7:46pm UTC](https://discuss.elastic.co/t/fleet-0-0-0-0-address-after-elastic-agent-install/265698 "2021-03-03T19:46:22Z")

</div>

Hi! I've installed Elastci Agent with 10.10.10.19 address for both Kibana and Elasticsearch. However, after is starts I get this error "fail to checkin to fleet: Post "https://0.0.0.0:5601/api/fleet/agents/ID/checkin?"…

---

## [Journalbeat 6.7 repeats old log records after rotation](https://discuss.elastic.co/t/journalbeat-6-7-repeats-old-log-records-after-rotation/174940)

<div class="topic-metadata">

**Author:** [@John\_Lemsky](https://discuss.elastic.co/u/John_Lemsky)\
**Replies:** 4\
**Last updated:** [August 26, 2019, 2:02pm UTC](https://discuss.elastic.co/t/journalbeat-6-7-repeats-old-log-records-after-rotation/174940 "2019-08-26T14:02:15Z")

</div>

Hello, Currently, I have the following setup. One machine with installed systemd-journal-upload and another one with systemd-journal-remote. systemd-journal-remote write all received logs into the dedicated directory. J…

---

## [No location field Geoip plugin](https://discuss.elastic.co/t/no-location-field-geoip-plugin/94644)

<div class="topic-metadata">

**Author:** [@xiguazhi](https://discuss.elastic.co/u/xiguazhi)\
**Replies:** 4\
**Last updated:** [July 28, 2017, 12:32am UTC](https://discuss.elastic.co/t/no-location-field-geoip-plugin/94644 "2017-07-28T00:32:04Z")

</div>

After using Geoip plugin in a filter specifying the ip address field I am getting Location.lat and Location.lon fields but I am not getting a location field defined as geopoint, or anything for that matter I have inst…

---

## [Memory usage unaccounted for?](https://discuss.elastic.co/t/memory-usage-unaccounted-for/56022)

<div class="topic-metadata">

**Author:** [@tjholowaychuk](https://discuss.elastic.co/u/tjholowaychuk)\
**Replies:** 4\
**Last updated:** [July 21, 2016, 12:13am UTC](https://discuss.elastic.co/t/memory-usage-unaccounted-for/56022 "2016-07-21T00:13:00Z")

</div>

Hello, ES has been great so far (version 1.5 on AWS), however unless I'm missing some stats some of the JVM memory usage seems unaccounted for. I started a small CLI tool to summarize the results: https://github.com/tj…

---

## [Java.lang.NoSuchMethodError: org.elasticsearch.client.IndicesAdminClient.prepareExists](https://discuss.elastic.co/t/java-lang-nosuchmethoderror-org-elasticsearch-client-indicesadminclient-prepareexists/13889)

<div class="topic-metadata">

**Author:** [@Dennis](https://discuss.elastic.co/u/Dennis)\
**Replies:** 4\
**Last updated:** [October 22, 2013, 11:52pm UTC](https://discuss.elastic.co/t/java-lang-nosuchmethoderror-org-elasticsearch-client-indicesadminclient-prepareexists/13889 "2013-10-22T23:52:30Z")

</div>

I'm getting the following error: java.lang.NoSuchMethodError: org.elasticsearch.client.IndicesAdminClient. prepareExists(\[Ljava/lang/String;)Lorg/elasticsearch/action/admin/indices/ exists/IndicesExistsRequestBuilde…

---

## [How to setup Three Machines with different IP Address?](https://discuss.elastic.co/t/how-to-setup-three-machines-with-different-ip-address/123008)

<div class="topic-metadata">

**Author:** [@Karthik\_Saravanan](https://discuss.elastic.co/u/Karthik_Saravanan)\
**Replies:** 3\
**Last updated:** [March 12, 2018, 8:08am UTC](https://discuss.elastic.co/t/how-to-setup-three-machines-with-different-ip-address/123008 "2018-03-12T08:08:37Z")

</div>

I have three machines, installed same ELK(6.2.2) version in all machine Now, I have to connect all node, One is master and another two's are client node, \*\* Each machine is the different IP address I have tried like t…

---

## [ES Transport client 5.4 in java 1.7](https://discuss.elastic.co/t/es-transport-client-5-4-in-java-1-7/88318)

<div class="topic-metadata">

**Author:** [@Yogesh\_BG](https://discuss.elastic.co/u/Yogesh_BG)\
**Replies:** 3\
**Last updated:** [June 6, 2017, 3:22am UTC](https://discuss.elastic.co/t/es-transport-client-5-4-in-java-1-7/88318 "2017-06-06T03:22:36Z")

</div>

Hi I am running ES master and data nodes in 1.8. And i have project where i use java client i.e., transport client. But it runs on the java 1.7. I am getting the exception 2017-06-03 00:38:09.151 o.a.s.d.worker \[ERRO…

---

## [How to create indexes for each tenants?](https://discuss.elastic.co/t/how-to-create-indexes-for-each-tenants/45972)

<div class="topic-metadata">

**Author:** [@rajkumar3v](https://discuss.elastic.co/u/rajkumar3v)\
**Replies:** 3\
**Last updated:** [April 4, 2016, 9:04am UTC](https://discuss.elastic.co/t/how-to-create-indexes-for-each-tenants/45972 "2016-04-04T09:04:54Z")

</div>

Hi Guys, Right now i have 1 index with 5 shards which is storing the multiple tenant logs. now I want to create indexes in elastic cluster for each tenant and I need to keep the docs for 1 year or 6 month time period …

---

## [\[KBN-ES Development\] yarn es snapshot doesn't work](https://discuss.elastic.co/t/kbn-es-development-yarn-es-snapshot-doesnt-work/276798)

<div class="topic-metadata">

**Author:** [@Flavio1](https://discuss.elastic.co/u/Flavio1)\
**Replies:** 6\
**Last updated:** [June 23, 2021, 3:54pm UTC](https://discuss.elastic.co/t/kbn-es-development-yarn-es-snapshot-doesnt-work/276798 "2021-06-23T15:54:41Z")

</div>

Hi all, i'm trying to start kbn development enviroment to create my first plugin. I follow the guide in this link: getting started fork from kibana repo clone the repo on my local bootstrap kibana I can bootstrap pr…

---

## [Logstash 7.9.1 file input plugin is not able to read json file](https://discuss.elastic.co/t/logstash-7-9-1-file-input-plugin-is-not-able-to-read-json-file/264548)

<div class="topic-metadata">

**Author:** [@sagarpatel](https://discuss.elastic.co/u/sagarpatel)\
**Replies:** 6\
**Last updated:** [February 19, 2021, 3:25pm UTC](https://discuss.elastic.co/t/logstash-7-9-1-file-input-plugin-is-not-able-to-read-json-file/264548 "2021-02-19T15:25:40Z")

</div>

I have created sample.conf file for reading json file but it is not showing any output. below is my sample.cong file input { file { path =\> "C:\\Users\\Sagar\\sample.json" start\_position =\> "beginning" codec =\> "js…

---

## [Elasticsearch 7.5 erros?](https://discuss.elastic.co/t/elasticsearch-7-5-erros/260105)

<div class="topic-metadata">

**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\
**Replies:** 6\
**Last updated:** [January 5, 2021, 5:54pm UTC](https://discuss.elastic.co/t/elasticsearch-7-5-erros/260105 "2021-01-05T17:54:05Z")

</div>

Hello, Happy new year. It seems Spark Streaming job was slow into Elasticsearch. I check master and find this erros in log ? \[...\] only morning : \[2021-01-04T01:59:56,349\]\[WARN \]\[o.e.x.m.e.l.LocalExporter\] \[opu309\_m…

---

## [Filtered queries in vega sankey visualization](https://discuss.elastic.co/t/filtered-queries-in-vega-sankey-visualization/224254)

<div class="topic-metadata">

**Author:** [@g\_k\_b](https://discuss.elastic.co/u/g_k_b)\
**Replies:** 6\
**Last updated:** [March 20, 2020, 8:05am UTC](https://discuss.elastic.co/t/filtered-queries-in-vega-sankey-visualization/224254 "2020-03-20T08:05:28Z")

</div>

Hi everyone! I "built" a vega sankey visualzation showing a flow between 2 fields. I have a source field and a destination field whose terms are correctly linked with lines. It works perfectly! :slight\_smile: Now I woul…

---

## [Liblog4cxx.so.10 change to liblog4cxx.so.10.gz after started a time](https://discuss.elastic.co/t/liblog4cxx-so-10-change-to-liblog4cxx-so-10-gz-after-started-a-time/182169)

<div class="topic-metadata">

**Author:** [@chenchuangc](https://discuss.elastic.co/u/chenchuangc)\
**Replies:** 6\
**Last updated:** [May 27, 2019, 2:47am UTC](https://discuss.elastic.co/t/liblog4cxx-so-10-change-to-liblog4cxx-so-10-gz-after-started-a-time/182169 "2019-05-27T02:47:09Z")

</div>

Elasticsearch version bin/elasticsearch --version 7.0.0 Plugins installed bin/elasticsearch-plugin list analysis-ik JVM version java -version java version "1.8.0\_91" Java(TM) SE Runtime Environment (build 1.8.0\_91-…

---

## [Kibana 4.3.1 discovery across multiple monthly indices - sets size=0 / search\_type='count'](https://discuss.elastic.co/t/kibana-4-3-1-discovery-across-multiple-monthly-indices-sets-size-0-search-type-count/45584)

<div class="topic-metadata">

**Author:** [@Phil\_Scala](https://discuss.elastic.co/u/Phil_Scala)\
**Replies:** 6\
**Last updated:** [March 29, 2016, 8:36pm UTC](https://discuss.elastic.co/t/kibana-4-3-1-discovery-across-multiple-monthly-indices-sets-size-0-search-type-count/45584 "2016-03-29T20:36:28Z")

</div>

Hi, Running, ES 2.1.1 and Kibana 4.3.1 I have a set of monthly going back a couple of years. When using Kibana in discovery, searching back a few months, I am seeing the histogram is showing the proper hits, but in t…

---

## [Problem with Logstash date parse](https://discuss.elastic.co/t/problem-with-logstash-date-parse/193311)

<div class="topic-metadata">

**Author:** [@shagun](https://discuss.elastic.co/u/shagun)\
**Replies:** 2\
**Last updated:** [August 2, 2019, 11:29am UTC](https://discuss.elastic.co/t/problem-with-logstash-date-parse/193311 "2019-08-02T11:29:36Z")

</div>

I have a date in this format "event\_time" : "2019-07-02 19:23:59+0000" and need to parse it in the format of @timestamp that is "@timestamp" : "2019-08-01T11:18:34.890Z" This is my filter : date { match =\> \[ "event\_…

---

## [Logstashのクライアント認証について](https://discuss.elastic.co/t/logstash/184283)

<div class="topic-metadata">

**Author:** [@devdevdev](https://discuss.elastic.co/u/devdevdev)\
**Replies:** 2\
**Last updated:** [June 11, 2019, 7:38am UTC](https://discuss.elastic.co/t/logstash/184283 "2019-06-11T07:38:59Z")

</div>

logstashからlogstashへのhttpプロトコルを利用したデータ送信を模索しています。 output.http -\> input.httpによるデータ送信は確認できました。 あとはhttpsとクライアント認証でデータ送信を実現したいと考えています。 公式docを見るとSSL(https)とクライアント認証が可能なようにみえます。 検証した結果、SSLは出来たのですがクライアント認証がうまくいきません。 よろしくお…

---

## [Kibana white screen](https://discuss.elastic.co/t/kibana-white-screen/178682)

<div class="topic-metadata">

**Author:** [@thev0yager](https://discuss.elastic.co/u/thev0yager)\
**Replies:** 2\
**Last updated:** [April 26, 2019, 5:16pm UTC](https://discuss.elastic.co/t/kibana-white-screen/178682 "2019-04-26T17:16:48Z")

</div>

Hi I am a new user to Elastic Stack 7.0.0. When I booted everything up to run all of my instances worked just fine the only problem I am facing is the localhost:5601 portal gives me a completely white screen. I have no I…

---

## [Scripted Fields - Not Working with String because of "Set fielddata=true"](https://discuss.elastic.co/t/scripted-fields-not-working-with-string-because-of-set-fielddata-true/167864)

<div class="topic-metadata">

**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\
**Replies:** 2\
**Last updated:** [February 12, 2019, 5:58pm UTC](https://discuss.elastic.co/t/scripted-fields-not-working-with-string-because-of-set-fielddata-true/167864 "2019-02-12T17:58:57Z")

</div>

Hi @ all, I tried following: Language: painless Type: String Using this fields in my index creates errors: if (doc\['PS\_Status'\].value == 'Failed') { return "Failed"; } else if (doc\['PS\_Status'\].value == 'OK') { re…

---

## [Not able to use "delete\_indices" for curator\_cli](https://discuss.elastic.co/t/not-able-to-use-delete-indices-for-curator-cli/151490)

<div class="topic-metadata">

**Author:** [@Vinay\_Karajagi](https://discuss.elastic.co/u/Vinay_Karajagi)\
**Replies:** 2\
**Last updated:** [October 8, 2018, 5:35pm UTC](https://discuss.elastic.co/t/not-able-to-use-delete-indices-for-curator-cli/151490 "2018-10-08T17:35:01Z")

</div>

The following line gives - Error: No such command "delete\_indices" curator\_cli --host --port delete\_indices --filter\_list '\[{"filtertype":"pattern","kind":"prefix","value":".watch\_history"}\]' As per curator\_cli --hel…

---

## [How to tune Logstash for ES indexing speed](https://discuss.elastic.co/t/how-to-tune-logstash-for-es-indexing-speed/147476)

<div class="topic-metadata">

**Author:** [@mrubin](https://discuss.elastic.co/u/mrubin)\
**Replies:** 2\
**Last updated:** [September 6, 2018, 6:05am UTC](https://discuss.elastic.co/t/how-to-tune-logstash-for-es-indexing-speed/147476 "2018-09-06T06:05:16Z")

</div>

I am using Logstash 6.2.x with Kafka as input and ES 6.4.0 (hosted in Elastic Cloud) as the output. I needed to stop Logstash for some time while by ES cluster was being upgraded. Once I restarted Logstash (and there wer…

---

## [Use multiple indexes for calculation](https://discuss.elastic.co/t/use-multiple-indexes-for-calculation/138513)

<div class="topic-metadata">

**Author:** [@someOne](https://discuss.elastic.co/u/someOne)\
**Replies:** 2\
**Last updated:** [July 8, 2018, 3:31pm UTC](https://discuss.elastic.co/t/use-multiple-indexes-for-calculation/138513 "2018-07-08T15:31:58Z")

</div>

Hello, I'm a new one. I have two indices from csv files, one index contains all information of the other index that contains live data. for example : index 1 ID flied 1 1 40 2 …

---

## [Italian language support and stemming](https://discuss.elastic.co/t/italian-language-support-and-stemming/14540)

<div class="topic-metadata">

**Author:** [@Stefano\_Masini](https://discuss.elastic.co/u/Stefano_Masini)\
**Replies:** 2\
**Last updated:** [November 25, 2013, 8:57am UTC](https://discuss.elastic.co/t/italian-language-support-and-stemming/14540 "2013-11-25T08:57:27Z")

</div>

Hi, I've been playing a bit with ElasticSearch and I'm wondering how good is the support for the Italian language. Here's what I've done: PUT myindex { "mappings": { "mytype": { "pr…

---

## [Insert to elasticsearch from logstash IF NOT EXISTS](https://discuss.elastic.co/t/insert-to-elasticsearch-from-logstash-if-not-exists/306368)

<div class="topic-metadata">

**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\
**Replies:** 7\
**Last updated:** [June 8, 2022, 6:09pm UTC](https://discuss.elastic.co/t/insert-to-elasticsearch-from-logstash-if-not-exists/306368 "2022-06-08T18:09:58Z")

</div>

Hi, I currently have an index that I set unique ids and sometimes there is replica data. In my use case, older data is often more accurate than newer data. So I would like to have logstash only insert if the \_id current…

---

## [Cluster stopped working but was working fine](https://discuss.elastic.co/t/cluster-stopped-working-but-was-working-fine/153635)

<div class="topic-metadata">

**Author:** [@grant\_donovan](https://discuss.elastic.co/u/grant_donovan)\
**Replies:** 7\
**Last updated:** [October 26, 2018, 10:50am UTC](https://discuss.elastic.co/t/cluster-stopped-working-but-was-working-fine/153635 "2018-10-26T10:50:43Z")

</div>

I have an Elasticsearch cluster. This was all working but now seems to have stopped working properly The head no longer works and gives the message: cluster health: not connected This command: http://localhost:9200/\_c…

---

## [Version control and backup of dashboard/visualization/query object](https://discuss.elastic.co/t/version-control-and-backup-of-dashboard-visualization-query-object/229148)

<div class="topic-metadata">

**Author:** [@dataplatform12345](https://discuss.elastic.co/u/dataplatform12345)\
**Replies:** 1\
**Last updated:** [April 22, 2020, 2:59am UTC](https://discuss.elastic.co/t/version-control-and-backup-of-dashboard-visualization-query-object/229148 "2020-04-22T02:59:30Z")

</div>

What's the best way to implement an automatic version control and backup system for all the objects created in Kibana for visualization and querying? Should we use export/import API to collect the latest content and push…

---

## [Kibana Visualization : Using a field as Custom Label for split table (Data Table)](https://discuss.elastic.co/t/kibana-visualization-using-a-field-as-custom-label-for-split-table-data-table/176155)

<div class="topic-metadata">

**Author:** [@coolboi567](https://discuss.elastic.co/u/coolboi567)\
**Replies:** 1\
**Last updated:** [April 10, 2019, 8:40am UTC](https://discuss.elastic.co/t/kibana-visualization-using-a-field-as-custom-label-for-split-table-data-table/176155 "2019-04-10T08:40:48Z")

</div>

Need help to use a field as Custom Label for split table in Data Table.

---

## [Watcher webhook custom json](https://discuss.elastic.co/t/watcher-webhook-custom-json/173541)

<div class="topic-metadata">

**Author:** [@forestnd](https://discuss.elastic.co/u/forestnd)\
**Replies:** 1\
**Last updated:** [March 25, 2019, 1:33pm UTC](https://discuss.elastic.co/t/watcher-webhook-custom-json/173541 "2019-03-25T13:33:48Z")

</div>

Hay all I am trying to get my head around customise the body of an webhook so instead of just ctx i like to out put for example { "name":"ctx.name", "date trigger":"ctx.date", "event level": "ctx.evlevel" } thanks…

---

## [Python + SQL](https://discuss.elastic.co/t/python-sql/144170)

<div class="topic-metadata">

**Author:** [@ll\_elastic](https://discuss.elastic.co/u/ll_elastic)\
**Replies:** 1\
**Last updated:** [August 20, 2018, 11:59am UTC](https://discuss.elastic.co/t/python-sql/144170 "2018-08-20T11:59:41Z")

</div>

Hi there! I was about to rewrite all the functions that I have in DSL to the new SQL functionality for testing and learning purposes. Once I got into it, I wasn't able to find any functionality to query using SQL and Py…

---

## [Detection threshold rule problem](https://discuss.elastic.co/t/detection-threshold-rule-problem/268079)

<div class="topic-metadata">

**Author:** [@Jorge7](https://discuss.elastic.co/u/Jorge7)\
**Replies:** 5\
**Last updated:** [March 25, 2021, 10:23am UTC](https://discuss.elastic.co/t/detection-threshold-rule-problem/268079 "2021-03-25T10:23:27Z")

</div>

Hi everyone, I'm try to create a personalize rule with the threshold parameter detection. I am using a handmade index with personal fields. This is the mapping: { "login-000001" : { "mappings" : { "properti…

---

## [Logstash doesn't communicate with Elasticsearch](https://discuss.elastic.co/t/logstash-doesnt-communicate-with-elasticsearch/118447)

<div class="topic-metadata">

**Author:** [@hzarrabi](https://discuss.elastic.co/u/hzarrabi)\
**Replies:** 5\
**Last updated:** [February 6, 2018, 9:30pm UTC](https://discuss.elastic.co/t/logstash-doesnt-communicate-with-elasticsearch/118447 "2018-02-06T21:30:19Z")

</div>

Hi, "I'm novice in Elastic Stack !!! " My Elasticsearch and Kibana on Linux Ubuntu working well. I receive log from beats but my logstash seems to do not communicate with elasticsearch. Logstash on my server shoud rea…

---

## [Why is my Logstash plugin PR being ignored](https://discuss.elastic.co/t/why-is-my-logstash-plugin-pr-being-ignored/24396)

<div class="topic-metadata">

**Author:** [@jrgns](https://discuss.elastic.co/u/jrgns)\
**Replies:** 5\
**Last updated:** [March 14, 2016, 7:10am UTC](https://discuss.elastic.co/t/why-is-my-logstash-plugin-pr-being-ignored/24396 "2016-03-14T07:10:53Z")

</div>

Hey I submitted a PR to the mutate filter in the beginning of the year. I've signed the CLA and GitHub shows that the PR can be merged. I've also asked for feedback on the PR on why it hasn't been merged yet, but I've …

---

## [Unassigned shards/indexes](https://discuss.elastic.co/t/unassigned-shards-indexes/305159)

<div class="topic-metadata">

**Author:** [@Jan\_Engelbrecht](https://discuss.elastic.co/u/Jan_Engelbrecht)\
**Replies:** 3\
**Last updated:** [May 20, 2022, 6:55am UTC](https://discuss.elastic.co/t/unassigned-shards-indexes/305159 "2022-05-20T06:55:43Z")

</div>

Hi, I'm quite new to Elastic, we're running 7.15.1 (Centos 7)on our production servers. We have 3 nodes currently and the following happened when I added a 4th one. After the 4th Node joined the cluster replication st…

---

## [Unable to create url using generated API Key](https://discuss.elastic.co/t/unable-to-create-url-using-generated-api-key/258844)

<div class="topic-metadata">

**Author:** [@Kfir\_Stri](https://discuss.elastic.co/u/Kfir_Stri)\
**Replies:** 3\
**Last updated:** [December 16, 2020, 3:00pm UTC](https://discuss.elastic.co/t/unable-to-create-url-using-generated-api-key/258844 "2020-12-16T15:00:43Z")

</div>

Hello :slight\_smile: I'm trying to generate a short url using the REST api, and trying to authenticate using an API key i've generated before, no matter which cluster roles or indices priviliges I specify in the API key…

---

## [Using ECK with custom certs, kibana is unable to connect to elasticsearch](https://discuss.elastic.co/t/using-eck-with-custom-certs-kibana-is-unable-to-connect-to-elasticsearch/241918)

<div class="topic-metadata">

**Author:** [@wfhartford](https://discuss.elastic.co/u/wfhartford)\
**Replies:** 3\
**Last updated:** [July 20, 2020, 8:02pm UTC](https://discuss.elastic.co/t/using-eck-with-custom-certs-kibana-is-unable-to-connect-to-elasticsearch/241918 "2020-07-20T20:02:01Z")

</div>

I'm using ECK 1.0 and have configured an elasticsearch, apm server, and kibana with custom certificates. The certificates are managed by cert-manager and issued by Vault. The APM server is able to connect to the elastics…

---

## [Bar chart from field value](https://discuss.elastic.co/t/bar-chart-from-field-value/89764)

<div class="topic-metadata">

**Author:** [@Makra](https://discuss.elastic.co/u/Makra)\
**Replies:** 3\
**Last updated:** [June 19, 2017, 6:59am UTC](https://discuss.elastic.co/t/bar-chart-from-field-value/89764 "2017-06-19T06:59:36Z")

</div>

Hi I have three fields in the JSON like "A": \[ "97.0" \], "B": \[ "95.0" \], "C": \[ "140.0" \], ............... ............... Want to draw a bar chart for the above with field name (A…

---

## [Kibana Shield Plugin Install Error: Plugin installation was unsuccessful due to error "unknown export types injectDefaultVars in plugin shield"](https://discuss.elastic.co/t/kibana-shield-plugin-install-error-plugin-installation-was-unsuccessful-due-to-error-unknown-export-types-injectdefaultvars-in-plugin-shield/63619)

<div class="topic-metadata">

**Author:** [@melong](https://discuss.elastic.co/u/melong)\
**Replies:** 3\
**Last updated:** [November 8, 2016, 2:54pm UTC](https://discuss.elastic.co/t/kibana-shield-plugin-install-error-plugin-installation-was-unsuccessful-due-to-error-unknown-export-types-injectdefaultvars-in-plugin-shield/63619 "2016-11-08T14:54:45Z")

</div>

Elasticsearch Version: 2.4.1 Kibana Version: 4.4.2 Shield Version: 2.4.1 I've read the following article: https://discuss.elastic.co/t/shield-2-2-0-plugin-for-kibana-fails-install-…

---

## [Deactivate \_source and doc\_values, but can still be queried](https://discuss.elastic.co/t/deactivate--source-and-doc-values-but-can-still-be-queried/60839)

<div class="topic-metadata">

**Author:** [@TWalter](https://discuss.elastic.co/u/TWalter)\
**Replies:** 8\
**Last updated:** [September 19, 2016, 1:35pm UTC](https://discuss.elastic.co/t/deactivate--source-and-doc-values-but-can-still-be-queried/60839 "2016-09-19T13:35:01Z")

</div>

Hello everyone, I am new in working with elasticsearch and found a behaviour which i didn't understand. If I create an index template with the type setting "\_source": { "enabled" : false} and the field mapping "doc\_…

---

## [Filebeat logstash output loadbalance not working properly (not random)](https://discuss.elastic.co/t/filebeat-logstash-output-loadbalance-not-working-properly-not-random/51541)

<div class="topic-metadata">

**Author:** [@XavierGattuso](https://discuss.elastic.co/u/XavierGattuso)\
**Replies:** 3\
**Last updated:** [June 6, 2016, 7:21am UTC](https://discuss.elastic.co/t/filebeat-logstash-output-loadbalance-not-working-properly-not-random/51541 "2016-06-06T07:21:55Z")

</div>

Hello, I'm currently using filebeat 1.2.3, on Debian Jessie and unless I do not understand properly the documentation about the use of a host list and loadbalance: false in the logstash output, it seems not working as…

---

## [Logstash output file has additional fields](https://discuss.elastic.co/t/logstash-output-file-has-additional-fields/49892)

<div class="topic-metadata">

**Author:** [@vijay\_dhaks](https://discuss.elastic.co/u/vijay_dhaks)\
**Replies:** 3\
**Last updated:** [May 12, 2016, 6:13pm UTC](https://discuss.elastic.co/t/logstash-output-file-has-additional-fields/49892 "2016-05-12T18:13:10Z")

</div>

Hi, My config is as below filter { grok { match =\> { "message" =\> "%{DATE\_EU:mydate}%{SPACE}%{HOUR:myhour}.%{MINUTE:myminute}.%{SECOND:mysecond}%{SPACE}%{GREEDYDATA:realdata}"} } and my input is as be…

---

## [Duplicates nodes on cluster restart](https://discuss.elastic.co/t/duplicates-nodes-on-cluster-restart/43524)

<div class="topic-metadata">

**Author:** [@Bruno\_Lavoie](https://discuss.elastic.co/u/Bruno_Lavoie)\
**Replies:** 3\
**Last updated:** [March 4, 2016, 4:26pm UTC](https://discuss.elastic.co/t/duplicates-nodes-on-cluster-restart/43524 "2016-03-04T16:26:10Z")

</div>

Hello, When we restart our cluster, the node list get duplicates. Is it normal? And as a bad thing, we lost complete node history. Thanks Bruno Lavoie

---

## [Elastic pod is not Ready: Readiness probe failed: nc: connect to 127.0.0.1 port 8080 (tcp) failed: Connection refused](https://discuss.elastic.co/t/elastic-pod-is-not-ready-readiness-probe-failed-nc-connect-to-127-0-0-1-port-8080-tcp-failed-connection-refused/368853)

<div class="topic-metadata">

**Author:** [@nnikushkin](https://discuss.elastic.co/u/nnikushkin)\
**Replies:** 4\
**Last updated:** [April 4, 2025, 8:15am UTC](https://discuss.elastic.co/t/elastic-pod-is-not-ready-readiness-probe-failed-nc-connect-to-127-0-0-1-port-8080-tcp-failed-connection-refused/368853 "2025-04-04T08:15:55Z")

</div>

Hello everyone, We had recently an upgrade of K8s nodes, during which one all pods were killed. Since the Elastic instances were deployed via ECK, the ECK operator automatically recreated the pods. However, the Elastic …

---

## [Field Aliases vs Copy](https://discuss.elastic.co/t/field-aliases-vs-copy/223102)

<div class="topic-metadata">

**Author:** [@NerdSec](https://discuss.elastic.co/u/NerdSec)\
**Replies:** 4\
**Last updated:** [March 13, 2020, 4:53am UTC](https://discuss.elastic.co/t/field-aliases-vs-copy/223102 "2020-03-13T04:53:47Z")

</div>

Hi Team, We are planning to use Wazuh for some of our monitoring needs. Wazuh does not support ECS. Now, I plan to make the Wazuh data ECS compliant for better monitoring! My question is, which of the following would b…

---

## [Rally and Httperf](https://discuss.elastic.co/t/rally-and-httperf/124457)

<div class="topic-metadata">

**Author:** [@jlwysf](https://discuss.elastic.co/u/jlwysf)\
**Replies:** 4\
**Last updated:** [April 3, 2018, 8:52am UTC](https://discuss.elastic.co/t/rally-and-httperf/124457 "2018-04-03T08:52:17Z")

</div>

I'm new to rally, I used to use httperf, I have some questions hope I can get an answer here. In httperf we can set concurrent connections, does Rally also support that? If yes,How many concurrent Connection by defa…

---

## [Limit to rawmessage length and search](https://discuss.elastic.co/t/limit-to-rawmessage-length-and-search/50219)

<div class="topic-metadata">

**Author:** [@himbeere](https://discuss.elastic.co/u/himbeere)\
**Replies:** 4\
**Last updated:** [May 20, 2016, 8:01am UTC](https://discuss.elastic.co/t/limit-to-rawmessage-length-and-search/50219 "2016-05-20T08:01:54Z")

</div>

Hello. I'm trying to search within a rawmessage field for a specific string but i get no results if the rawmessage is rather long. Is there a limit? Example: rawmessage: device\_id=bla \[Root\]system-notification-0…

[Previous page](https://discuss.elastic.co/top.md?page=1147&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1149&per_page=50&period=all)
