# Top

**URL:** https://discuss.elastic.co/top.md?page=1174&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1175

---

## [Bug : monitoring the "queue\_size" of thread pool is not working on ElasticSearch 5.0.0 (release)](https://discuss.elastic.co/t/bug-monitoring-the-queue-size-of-thread-pool-is-not-working-on-elasticsearch-5-0-0-release/63979)

<div class="topic-metadata">

**Author:** [@opendoc42](https://discuss.elastic.co/u/opendoc42)\
**Replies:** 4\
**Last updated:** [October 30, 2016, 12:28pm UTC](https://discuss.elastic.co/t/bug-monitoring-the-queue-size-of-thread-pool-is-not-working-on-elasticsearch-5-0-0-release/63979 "2016-10-30T12:28:28Z")

</div>

Hello everyone, I try to monitor the thread pool for ElasticSearch 5.0.0-rc1 . I followed the documentation : https://www.elastic.co/guide/en/elasticsearch/reference/5.0/cat-thread-pool.html curl -X GET "http://XXXXXX:…

---

## [Elasticsearch 6.1 Maven](https://discuss.elastic.co/t/elasticsearch-6-1-maven/111660)

<div class="topic-metadata">

**Author:** [@questar](https://discuss.elastic.co/u/questar)\
**Replies:** 8\
**Last updated:** [December 18, 2017, 4:19pm UTC](https://discuss.elastic.co/t/elasticsearch-6-1-maven/111660 "2017-12-18T16:19:40Z")

</div>

Hello, Can't retrieve the maven dependency to 6.1.0 as yet. Thanks

---

## [Failed to create filtered alias with terms lookup](https://discuss.elastic.co/t/failed-to-create-filtered-alias-with-terms-lookup/225531)

<div class="topic-metadata">

**Author:** [@Junjun\_Zhang](https://discuss.elastic.co/u/Junjun_Zhang)\
**Replies:** 3\
**Last updated:** [April 1, 2020, 1:16am UTC](https://discuss.elastic.co/t/failed-to-create-filtered-alias-with-terms-lookup/225531 "2020-04-01T01:16:02Z")

</div>

Hello, I have run into exactly the same problem reported in this closed topic: https://discuss.elastic.co/t/terms-lookup-in-a-filtered-alias/206838. Since it's not been answered, I am posting it again. Much appreciated…

---

## [Machine learning option disabled](https://discuss.elastic.co/t/machine-learning-option-disabled/124657)

<div class="topic-metadata">

**Author:** [@kanthimathi](https://discuss.elastic.co/u/kanthimathi)\
**Replies:** 3\
**Last updated:** [March 20, 2018, 2:46am UTC](https://discuss.elastic.co/t/machine-learning-option-disabled/124657 "2018-03-20T02:46:18Z")

</div>

I couldn't find the machine learning option in the Kibana console though I use the latest version! Any help is much appreciated. Thanks in advance \[14%20AM\]

---

## [Elasticsearch 5.2.2 : Memory keeps on increasing steadily untill ES gets killed by System OOM Killer](https://discuss.elastic.co/t/elasticsearch-5-2-2-memory-keeps-on-increasing-steadily-untill-es-gets-killed-by-system-oom-killer/85576)

<div class="topic-metadata">

**Author:** [@Jay\_Dihenkar](https://discuss.elastic.co/u/Jay_Dihenkar)\
**Replies:** 3\
**Last updated:** [May 15, 2017, 4:52pm UTC](https://discuss.elastic.co/t/elasticsearch-5-2-2-memory-keeps-on-increasing-steadily-untill-es-gets-killed-by-system-oom-killer/85576 "2017-05-15T16:52:39Z")

</div>

Our Environment is: 3 node ES Cluster with 3 data nodes. We have upgraded ES from 2.3.3 to 5.2.2. The data nodes are allocated 31gb heap ( as recommended by ES Community ). Node1 mostly serves the search requests while…

---

## [Correlate field](https://discuss.elastic.co/t/correlate-field/82992)

<div class="topic-metadata">

**Author:** [@John\_Marcou](https://discuss.elastic.co/u/John_Marcou)\
**Replies:** 3\
**Last updated:** [April 20, 2017, 8:42am UTC](https://discuss.elastic.co/t/correlate-field/82992 "2017-04-20T08:42:52Z")

</div>

Hello, Sorry if my question is a bit easy, but I didn't find any way to do this request, and I am getting to wonder if it's really possible ... Init PUT /test-index PUT /test-index/user/1 { "name": "John", "conn…

---

## [Stripping of links from post in Meta Elastic forum topic](https://discuss.elastic.co/t/stripping-of-links-from-post-in-meta-elastic-forum-topic/667)

<div class="topic-metadata">

**Author:** [@Leslie\_Hawthorn](https://discuss.elastic.co/u/Leslie_Hawthorn)\
**Replies:** 0\
**Last updated:** [May 14, 2015, 8:24am UTC](https://discuss.elastic.co/t/stripping-of-links-from-post-in-meta-elastic-forum-topic/667 "2015-05-14T08:24:11Z")

</div>

The links in this forum topic have been stripped out. This seems very odd to me. Have I uncovered a bug?

---

## [Not able to distribute trace using rum agent and java agent](https://discuss.elastic.co/t/not-able-to-distribute-trace-using-rum-agent-and-java-agent/187580)

<div class="topic-metadata">

**Author:** [@farisk](https://discuss.elastic.co/u/farisk)\
**Replies:** 2\
**Last updated:** [June 26, 2019, 2:17pm UTC](https://discuss.elastic.co/t/not-able-to-distribute-trace-using-rum-agent-and-java-agent/187580 "2019-06-26T14:17:31Z")

</div>

I want to use distribute tracing to link together the front end tracing and the backed java application to create a distributed tracing. i am using rum-js by injecting it to the page as well as java agent in the tomcat …

---

## [{"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred."}](https://discuss.elastic.co/t/statuscode-500-error-internal-server-error-message-an-internal-server-error-occurred/277013)

<div class="topic-metadata">

**Author:** [@Tirupathirao](https://discuss.elastic.co/u/Tirupathirao)\
**Replies:** 6\
**Last updated:** [June 26, 2021, 6:57am UTC](https://discuss.elastic.co/t/statuscode-500-error-internal-server-error-message-an-internal-server-error-occurred/277013 "2021-06-26T06:57:31Z")

</div>

{"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred."}

---

## [How to get diskio read and write counts for a particular process](https://discuss.elastic.co/t/how-to-get-diskio-read-and-write-counts-for-a-particular-process/157692)

<div class="topic-metadata">

**Author:** [@kunapaneni\_siddharth](https://discuss.elastic.co/u/kunapaneni_siddharth)\
**Replies:** 6\
**Last updated:** [November 27, 2018, 11:10am UTC](https://discuss.elastic.co/t/how-to-get-diskio-read-and-write-counts-for-a-particular-process/157692 "2018-11-27T11:10:19Z")

</div>

Can we get the read and write io counts (system.diskio.read.count and system.diskio.write.count) for a specific process(system.process.name)?

---

## [Node available](https://discuss.elastic.co/t/node-available/32554)

<div class="topic-metadata">

**Author:** [@kodermax](https://discuss.elastic.co/u/kodermax)\
**Replies:** 6\
**Last updated:** [October 20, 2015, 8:58am UTC](https://discuss.elastic.co/t/node-available/32554 "2015-10-20T08:58:54Z")

</div>

I use php client I have this error \[Elasticsearch\\Common\\Exceptions\\NoNodesAvailableException\] No alive nodes found in your cluster Why?

---

## [Custom UDP logs are only listening on ipv6](https://discuss.elastic.co/t/custom-udp-logs-are-only-listening-on-ipv6/350497)

<div class="topic-metadata">

**Author:** [@phirestalker](https://discuss.elastic.co/u/phirestalker)\
**Replies:** 7\
**Last updated:** [January 7, 2024, 7:06am UTC](https://discuss.elastic.co/t/custom-udp-logs-are-only-listening-on-ipv6/350497 "2024-01-07T07:06:00Z")

</div>

I set up some custom UDP port integrations. I noticed that a lot of logs were not coming in, so I did netstat on the host. It turns out that it is only listening on ipv6. How can I set it to listen on both or only ipv4?

---

## [LogStash with distributor pattern, relay pipelines problem](https://discuss.elastic.co/t/logstash-with-distributor-pattern-relay-pipelines-problem/290880)

<div class="topic-metadata">

**Author:** [@djehuty](https://discuss.elastic.co/u/djehuty)\
**Replies:** 7\
**Last updated:** [December 3, 2021, 4:12pm UTC](https://discuss.elastic.co/t/logstash-with-distributor-pattern-relay-pipelines-problem/290880 "2021-12-03T16:12:49Z")

</div>

Hi everyone, i recently changed my LogStash configuration from multiple pipelines input to 3 pipelines, relaying on another local pipelines with distributor. Now, i've tried to send and udp json to the udp pipeline, wi…

---

## [What could cause this error following enterprise-search restart?](https://discuss.elastic.co/t/what-could-cause-this-error-following-enterprise-search-restart/287966)

<div class="topic-metadata">

**Author:** [@neergttocsdivad](https://discuss.elastic.co/u/neergttocsdivad)\
**Replies:** 1\
**Last updated:** [October 29, 2021, 1:03am UTC](https://discuss.elastic.co/t/what-could-cause-this-error-following-enterprise-search-restart/287966 "2021-10-29T01:03:33Z")

</div>

I followed these steps for the installation. Copying and pasting these lines into Elasticsearch, kibana and enterprise-search yaml files Changed the permissions of var/log/enterprise-search folder and contents (see …

---

## [Condition in metricbeat](https://discuss.elastic.co/t/condition-in-metricbeat/279425)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 7\
**Last updated:** [July 23, 2021, 2:52pm UTC](https://discuss.elastic.co/t/condition-in-metricbeat/279425 "2021-07-23T14:52:33Z")

</div>

Trying to setup condition in system.yml file for dropping some event when condition meet what I want to do it if this conditions meet drop the event. ( cond1 OR cond2 OR cond3 ) AND ( cond4 OR cond5 ) for example her…

---

## [I want to configure threshold alert if totaltime exceeds 500 then mail should sent to the User](https://discuss.elastic.co/t/i-want-to-configure-threshold-alert-if-totaltime-exceeds-500-then-mail-should-sent-to-the-user/248136)

<div class="topic-metadata">

**Author:** [@AKumar123](https://discuss.elastic.co/u/AKumar123)\
**Replies:** 7\
**Last updated:** [September 11, 2020, 6:27pm UTC](https://discuss.elastic.co/t/i-want-to-configure-threshold-alert-if-totaltime-exceeds-500-then-mail-should-sent-to-the-user/248136 "2020-09-11T18:27:02Z")

</div>

I am able to send mail with some information but Particular data i want to fetch in table. Alert Configuration i pasted in this link:https://pastebin.com/A6fDZYKY Field Name and index name as follows:

---

## [Elasticsearch Search error](https://discuss.elastic.co/t/elasticsearch-search-error/232784)

<div class="topic-metadata">

**Author:** [@Yassine\_Nifa](https://discuss.elastic.co/u/Yassine_Nifa)\
**Replies:** 1\
**Last updated:** [May 21, 2020, 11:08am UTC](https://discuss.elastic.co/t/elasticsearch-search-error/232784 "2020-05-21T11:08:28Z")

</div>

Hello guys !! I am working on text similarity using text\_embedding and cosine similarity with elasticsearch I am getting this error : elasticsearch.exceptions.RequestError: RequestError(400, 'search\_phase\_execution\_ex…

---

## [\[ Frequent OOME on coordinator node \]](https://discuss.elastic.co/t/frequent-oome-on-coordinator-node/128539)

<div class="topic-metadata">

**Author:** [@jerome831361](https://discuss.elastic.co/u/jerome831361)\
**Replies:** 7\
**Last updated:** [April 20, 2018, 12:51pm UTC](https://discuss.elastic.co/t/frequent-oome-on-coordinator-node/128539 "2018-04-20T12:51:15Z")

</div>

Hi, Since some 5 days, my coordinating nodes are both crashing frequenty with a OOME. I have tried to gather some usefull information to help investigating the problem; but I can't figure out what is wrong. I'm not re…

---

## [How many indexes is too many indexes](https://discuss.elastic.co/t/how-many-indexes-is-too-many-indexes/98401)

<div class="topic-metadata">

**Author:** [@lauraerinmann](https://discuss.elastic.co/u/lauraerinmann)\
**Replies:** 1\
**Last updated:** [August 26, 2017, 9:57am UTC](https://discuss.elastic.co/t/how-many-indexes-is-too-many-indexes/98401 "2017-08-26T09:57:04Z")

</div>

I recently decided that it might be a good idea to change the structure of our elasticsearch indexes for performance. Right now we have a single index and two types and our corresponding graph has a database for each “p…

---

## [Can't connect to localhost:9200, cluster health yellow](https://discuss.elastic.co/t/cant-connect-to-localhost-9200-cluster-health-yellow/89367)

<div class="topic-metadata">

**Author:** [@Saurab\_Dahal](https://discuss.elastic.co/u/Saurab_Dahal)\
**Replies:** 1\
**Last updated:** [June 14, 2017, 12:03pm UTC](https://discuss.elastic.co/t/cant-connect-to-localhost-9200-cluster-health-yellow/89367 "2017-06-14T12:03:11Z")

</div>

I read from various that if I want to create single node my number of replicas should be 0, but when i try number\_of\_replicas: 0in elasticsearch.yml, it gives me error that I cannot set index level setting on node level…

---

## [Use ES for contextual chatbot](https://discuss.elastic.co/t/use-es-for-contextual-chatbot/86664)

<div class="topic-metadata">

**Author:** [@Karma](https://discuss.elastic.co/u/Karma)\
**Replies:** 1\
**Last updated:** [May 25, 2017, 10:08am UTC](https://discuss.elastic.co/t/use-es-for-contextual-chatbot/86664 "2017-05-25T10:08:54Z")

</div>

Is it practical to use ES tf-idf nature to predict user intent based on user query (text classification)?

---

## [Aggregations and special characters](https://discuss.elastic.co/t/aggregations-and-special-characters/18559)

<div class="topic-metadata">

**Author:** [@Lucas\_Rutledge](https://discuss.elastic.co/u/Lucas_Rutledge)\
**Replies:** 1\
**Last updated:** [July 9, 2014, 5:16pm UTC](https://discuss.elastic.co/t/aggregations-and-special-characters/18559 "2014-07-09T17:16:21Z")

</div>

I am performing an terms aggregation on a query to return the unique values of a field, in this case the field being emails in the format example@gmail.com or example@aaa.example.com. "aggregations": { "use…

---

## [Elasticsearch and kibana not accessible on the web browser](https://discuss.elastic.co/t/elasticsearch-and-kibana-not-accessible-on-the-web-browser/282169)

<div class="topic-metadata">

**Author:** [@123451](https://discuss.elastic.co/u/123451)\
**Replies:** 5\
**Last updated:** [August 23, 2021, 3:40pm UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-not-accessible-on-the-web-browser/282169 "2021-08-23T15:40:12Z")

</div>

Hi, I can not access Elasticsearch and kibana from the web browser. When I type in the Url: https://192.168.0.1:9200 on the web browser, I get this error. { "name" : "node-1", "cluster\_name" : "elasticsearch", "clus…

---

## [Logstash date field error](https://discuss.elastic.co/t/logstash-date-field-error/236463)

<div class="topic-metadata">

**Author:** [@bdn](https://discuss.elastic.co/u/bdn)\
**Replies:** 5\
**Last updated:** [June 18, 2020, 3:34pm UTC](https://discuss.elastic.co/t/logstash-date-field-error/236463 "2020-06-18T15:34:49Z")

</div>

I have log files from where I've to query documents through the date field. Here is the log date format. 2020-06-10 14:01:26 I've defined a grok pattern like below in Logstash for the log. filter { grok { …

---

## [A logstash input plugin to ingest RDF/graph data into elasticsearch?](https://discuss.elastic.co/t/a-logstash-input-plugin-to-ingest-rdf-graph-data-into-elasticsearch/166248)

<div class="topic-metadata">

**Author:** [@vnktsh](https://discuss.elastic.co/u/vnktsh)\
**Replies:** 5\
**Last updated:** [February 1, 2019, 2:04am UTC](https://discuss.elastic.co/t/a-logstash-input-plugin-to-ingest-rdf-graph-data-into-elasticsearch/166248 "2019-02-01T02:04:04Z")

</div>

Hello guys, Recently I integrated Postgres data into Elasticsearch through Logstash via JDBC plugin. I have a graph DB (Apache Jena) which stores rdf data in a triplestore. Is there a plugin which can connect to this gr…

---

## [Moving nodes not working as expected](https://discuss.elastic.co/t/moving-nodes-not-working-as-expected/95441)

<div class="topic-metadata">

**Author:** [@weibin.wu](https://discuss.elastic.co/u/weibin.wu)\
**Replies:** 5\
**Last updated:** [August 2, 2017, 8:00am UTC](https://discuss.elastic.co/t/moving-nodes-not-working-as-expected/95441 "2017-08-02T08:00:10Z")

</div>

Hi ECE: I want to move a cluster from some high allocated nodes to some not allocated nodes Screen Shot 2017-08-02 at 11.38.25 AM In this case want to move from \[10.0.2.191\] -\> \[10.0.1.119\]. So I click move nodes-\> a…

---

## [JVM \> 90% - Small indexes , High Shards](https://discuss.elastic.co/t/jvm-90-small-indexes-high-shards/30024)

<div class="topic-metadata">

**Author:** [@mileshigh](https://discuss.elastic.co/u/mileshigh)\
**Replies:** 5\
**Last updated:** [October 6, 2015, 5:46pm UTC](https://discuss.elastic.co/t/jvm-90-small-indexes-high-shards/30024 "2015-10-06T17:46:46Z")

</div>

Hello, My team is having some issues with our ElasticSearch cluster regarding the JVM and its need to consume more and more JVM heap. Our issue comes from the need to provide even more RAM for such a simple use case (w…

---

## [Where can I find detailed description of index.recovery.\* settings](https://discuss.elastic.co/t/where-can-i-find-detailed-description-of-index-recovery-settings/1549)

<div class="topic-metadata">

**Author:** [@Prakhar\_Mishra](https://discuss.elastic.co/u/Prakhar_Mishra)\
**Replies:** 5\
**Last updated:** [May 30, 2015, 12:54pm UTC](https://discuss.elastic.co/t/where-can-i-find-detailed-description-of-index-recovery-settings/1549 "2015-05-30T12:54:14Z")

</div>

Hello @All, Can anybody please point me to a link, where I can find detailed description of index.recovery.\* settings? Tried to google it, but found this: https://www.elastic.co/guide/en/elasticsearch/reference/curre…

---

## [Issues trying to enable FIPS 140-2 on Centos 8](https://discuss.elastic.co/t/issues-trying-to-enable-fips-140-2-on-centos-8/300505)

<div class="topic-metadata">

**Author:** [@ryann](https://discuss.elastic.co/u/ryann)\
**Replies:** 2\
**Last updated:** [March 24, 2022, 1:16pm UTC](https://discuss.elastic.co/t/issues-trying-to-enable-fips-140-2-on-centos-8/300505 "2022-03-24T13:16:27Z")

</div>

Trying to enable FIPS mode in Elasticsearch and running into issues. When using default bundled JVM with FIPS mode enabled configuration passes bootstrap checks. Enabled fips globally in Centos and pointed systemd file t…

---

## [Elasticsearch wont start with FIPS Mode Enabled](https://discuss.elastic.co/t/elasticsearch-wont-start-with-fips-mode-enabled/280758)

<div class="topic-metadata">

**Author:** [@Zoheb\_Khan](https://discuss.elastic.co/u/Zoheb_Khan)\
**Replies:** 2\
**Last updated:** [August 9, 2021, 2:44pm UTC](https://discuss.elastic.co/t/elasticsearch-wont-start-with-fips-mode-enabled/280758 "2021-08-09T14:44:37Z")

</div>

I am not able to bring-up elasticsearch service in FIPS mode 140-2. I keep getting exception : org.elasticsearch.bootstrap.StartupException: org.elasticsearch.common.ssl.SslConfigException: failed to find a X509Extende…

---

## [Embed kibana visulaization url on webpage](https://discuss.elastic.co/t/embed-kibana-visulaization-url-on-webpage/66483)

<div class="topic-metadata">

**Author:** [@anonymous4](https://discuss.elastic.co/u/anonymous4)\
**Replies:** 2\
**Last updated:** [November 19, 2016, 7:37am UTC](https://discuss.elastic.co/t/embed-kibana-visulaization-url-on-webpage/66483 "2016-11-19T07:37:59Z")

</div>

I am trying to embed url of kibana on my web page but whenever i made some changes in my kibana dashboard, the url also changed. I have to make changes in my webpage also. Is there any way to freeze the url for webpage…

---

## [Elasticsearch on yarn : Node affinity](https://discuss.elastic.co/t/elasticsearch-on-yarn-node-affinity/1863)

<div class="topic-metadata">

**Author:** [@Saibal\_Patra](https://discuss.elastic.co/u/Saibal_Patra)\
**Replies:** 2\
**Last updated:** [June 27, 2016, 1:54am UTC](https://discuss.elastic.co/t/elasticsearch-on-yarn-node-affinity/1863 "2016-06-27T01:54:49Z")

</div>

Current documentation states: Currently, Elasticsearch on YARN does not provide any option for tying Elasticsearch nodes to specify YARN nodes however this will be addressed in the future. In practice this means that u…

---

## [Not able to install elasticsearch using reporsitory](https://discuss.elastic.co/t/not-able-to-install-elasticsearch-using-reporsitory/19110)

<div class="topic-metadata">

**Author:** [@Ramkumar\_Nagaraj](https://discuss.elastic.co/u/Ramkumar_Nagaraj)\
**Replies:** 2\
**Last updated:** [August 6, 2014, 7:47am UTC](https://discuss.elastic.co/t/not-able-to-install-elasticsearch-using-reporsitory/19110 "2014-08-06T07:47:05Z")

</div>

Hi Team, Good Day. I am new to elasticsearch, i am trying to configure elasticsearch setup in our environment. For this i tried to install elasticsearch using repository. Its keep on trying for different mirror…

---

## [How to support AWS cloudwatch metric stream to Elasticsearch?](https://discuss.elastic.co/t/how-to-support-aws-cloudwatch-metric-stream-to-elasticsearch/279672)

<div class="topic-metadata">

**Author:** [@zhaoyi0113](https://discuss.elastic.co/u/zhaoyi0113)\
**Replies:** 4\
**Last updated:** [July 27, 2021, 2:04pm UTC](https://discuss.elastic.co/t/how-to-support-aws-cloudwatch-metric-stream-to-elasticsearch/279672 "2021-07-27T14:04:00Z")

</div>

I am deploying applications to AWS including various services. I am planning to use Kibana and Elasticsearch to view metrics from Cloudwatch. I know I can configure metricbeat by using AWS module which works as a crawler…

---

## [Could not index event to Elasticsearch Errror](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-errror/229740)

<div class="topic-metadata">

**Author:** [@bruno\_aleixo](https://discuss.elastic.co/u/bruno_aleixo)\
**Replies:** 4\
**Last updated:** [April 27, 2020, 5:09pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-errror/229740 "2020-04-27T17:09:09Z")

</div>

Hi, Please, help me with error \[2020-04-25T01:23:57,058\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"wl\_audit-2020.04.25", :\_ty…

---

## [How to transfer logs from different VM's (Digitalocen) to a single Logstash using Filebeat](https://discuss.elastic.co/t/how-to-transfer-logs-from-different-vms-digitalocen-to-a-single-logstash-using-filebeat/222847)

<div class="topic-metadata">

**Author:** [@Pathshala\_Gopi](https://discuss.elastic.co/u/Pathshala_Gopi)\
**Replies:** 4\
**Last updated:** [March 10, 2020, 5:40am UTC](https://discuss.elastic.co/t/how-to-transfer-logs-from-different-vms-digitalocen-to-a-single-logstash-using-filebeat/222847 "2020-03-10T05:40:28Z")

</div>

Hi all, From Last two days i got stuck in this task.Task is there are multiple Ubuntu machines are running on cloud (DigitalOcen), I have to take the logs of those machines and ship those logs to Logstash where complete…

---

## [Elasticsearch 2.1.2 after update , unexpected result](https://discuss.elastic.co/t/elasticsearch-2-1-2-after-update-unexpected-result/178853)

<div class="topic-metadata">

**Author:** [@sshling](https://discuss.elastic.co/u/sshling)\
**Replies:** 4\
**Last updated:** [April 29, 2019, 11:07am UTC](https://discuss.elastic.co/t/elasticsearch-2-1-2-after-update-unexpected-result/178853 "2019-04-29T11:07:06Z")

</div>

GET cross\_dms\_receive\_send\_diff/cross\_dms\_receive\_send\_diff/\_search { "query": { "bool": { "must": \[ { "term": { "waybill\_code": "VD52794532626" } …

---

## [Best Max size for storing files in ES](https://discuss.elastic.co/t/best-max-size-for-storing-files-in-es/116630)

<div class="topic-metadata">

**Author:** [@eunbok4](https://discuss.elastic.co/u/eunbok4)\
**Replies:** 4\
**Last updated:** [January 24, 2018, 9:36am UTC](https://discuss.elastic.co/t/best-max-size-for-storing-files-in-es/116630 "2018-01-24T09:36:02Z")

</div>

Hello, I using elasticsearch for my project. i have 1 question. if i have to store binary file only to elasticsearch, how much Best Max size for storing files in ES?

---

## [Trying to understand Filebeat, Kubernetes logrotation and missing logs](https://discuss.elastic.co/t/trying-to-understand-filebeat-kubernetes-logrotation-and-missing-logs/363165)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 1\
**Last updated:** [October 8, 2025, 10:40pm UTC](https://discuss.elastic.co/t/trying-to-understand-filebeat-kubernetes-logrotation-and-missing-logs/363165 "2025-10-08T22:40:03Z")

</div>

Hi we are running Filbeat 8.9.2 as a Daemonset in Kubernetes. Filebeat is configure to insert Kafka. Here is the config: filebeat.inputs: - type: container paths: - /var/log/containers/\*.log processors: - ad…

---

## [Matching a Dollar Sign with a Wildcard using KQL](https://discuss.elastic.co/t/matching-a-dollar-sign-with-a-wildcard-using-kql/258819)

<div class="topic-metadata">

**Author:** [@hpicass0](https://discuss.elastic.co/u/hpicass0)\
**Replies:** 1\
**Last updated:** [December 16, 2020, 12:43pm UTC](https://discuss.elastic.co/t/matching-a-dollar-sign-with-a-wildcard-using-kql/258819 "2020-12-16T12:43:18Z")

</div>

Hi, Hoping you guys are safe and well I'm trying to exclude any username that has $ at the end of it using Kibnana Query Language I've done a lot of testing with the following, but it doesn't seem to work and not us…

---

## [IndicesClient.create throwing exception](https://discuss.elastic.co/t/indicesclient-create-throwing-exception/135425)

<div class="topic-metadata">

**Author:** [@babu.subburathinam](https://discuss.elastic.co/u/babu.subburathinam)\
**Replies:** 1\
**Last updated:** [June 15, 2018, 9:59am UTC](https://discuss.elastic.co/t/indicesclient-create-throwing-exception/135425 "2018-06-15T09:59:28Z")

</div>

I am attempting to create an index as follows: public class CreateIndexTest { @Test public void testIndexCreationWithMapping() throws IOException { final RestClientBuilder restClientBuilder = …

---

## [Date processor - Pipeline](https://discuss.elastic.co/t/date-processor-pipeline/297566)

<div class="topic-metadata">

**Author:** [@p2w2](https://discuss.elastic.co/u/p2w2)\
**Replies:** 3\
**Last updated:** [February 19, 2022, 9:46pm UTC](https://discuss.elastic.co/t/date-processor-pipeline/297566 "2022-02-19T21:46:46Z")

</div>

Hi guys. I'm trying to add the date processor to my index and at first it seemed to be working but then I noticed very strange result that I don't understand and can't find anywhere explanation for this behavior. I hav…

---

## [Filebeat error](https://discuss.elastic.co/t/filebeat-error/243385)

<div class="topic-metadata">

**Author:** [@ishan.abhinit](https://discuss.elastic.co/u/ishan.abhinit)\
**Replies:** 3\
**Last updated:** [August 3, 2020, 6:42am UTC](https://discuss.elastic.co/t/filebeat-error/243385 "2020-08-03T06:42:44Z")

</div>

I am using nginx as a frontend for Kibana. I am trying to load the logs onto kibana using a Filebeat module. This is how Kibana portion of filebeat.yml file looks like # =================================== Kibana =====…

---

## [Kv filter plugin](https://discuss.elastic.co/t/kv-filter-plugin/119969)

<div class="topic-metadata">

**Author:** [@antwan](https://discuss.elastic.co/u/antwan)\
**Replies:** 3\
**Last updated:** [February 16, 2018, 11:58am UTC](https://discuss.elastic.co/t/kv-filter-plugin/119969 "2018-02-16T11:58:56Z")

</div>

Hello, I am playing around with logstash filters to parse logs from auditd. Its a challenge to write a filter to catch them all, without going crazy with conditional logics. What I am trying to accomplish is to send da…

---

## [Investigating high heap usage](https://discuss.elastic.co/t/investigating-high-heap-usage/62574)

<div class="topic-metadata">

**Author:** [@orweinberger](https://discuss.elastic.co/u/orweinberger)\
**Replies:** 3\
**Last updated:** [October 10, 2016, 11:12pm UTC](https://discuss.elastic.co/t/investigating-high-heap-usage/62574 "2016-10-10T23:12:17Z")

</div>

What is the best approach or way to investigate why heap usage is so high? I'm watching the node stats and I can see the fielddata and filter cache which I understand are a part of the heap, but if those two are low, no …

---

## [Bug - Elastic search service keeps a cached JAVA\_HOME value – updating java causes error Elasticsearch](https://discuss.elastic.co/t/bug-elastic-search-service-keeps-a-cached-java-home-value-updating-java-causes-error-elasticsearch/28962)

<div class="topic-metadata">

**Author:** [@Sam\_Shteinman](https://discuss.elastic.co/u/Sam_Shteinman)\
**Replies:** 3\
**Last updated:** [September 11, 2015, 6:08pm UTC](https://discuss.elastic.co/t/bug-elastic-search-service-keeps-a-cached-java-home-value-updating-java-causes-error-elasticsearch/28962 "2015-09-11T18:08:34Z")

</div>

Hey guys, There is an issue with elasticsearch-service if we update Java and we do not reinstall the elasticsearch-service. In this key: HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Wow6432Node\\Apache Software Foundation\\Procrun 2.0\\…

---

## [After update the 7.4.2 too 7.5.1 , don't work](https://discuss.elastic.co/t/after-update-the-7-4-2-too-7-5-1-dont-work/215685)

<div class="topic-metadata">

**Author:** [@econom](https://discuss.elastic.co/u/econom)\
**Replies:** 2\
**Last updated:** [January 27, 2020, 7:21am UTC](https://discuss.elastic.co/t/after-update-the-7-4-2-too-7-5-1-dont-work/215685 "2020-01-27T07:21:10Z")

</div>

\[2020-01-20T11:13:39,384\]\[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[c7.lan\] uncaught exception in thread \[main\] org.elasticsearch.bootstrap.StartupException: ElasticsearchException\[failed to bind service\]; nes…

---

## [Metricbeatで収集した端末情報の表示について](https://discuss.elastic.co/t/metricbeat/68953)

<div class="topic-metadata">

**Author:** [@takumi](https://discuss.elastic.co/u/takumi)\
**Replies:** 2\
**Last updated:** [December 19, 2016, 5:47am UTC](https://discuss.elastic.co/t/metricbeat/68953 "2016-12-19T05:47:31Z")

</div>

elasticsearch、kibanaを使い始めたばかりの初心者です。 metricbeatを使って複数端末の稼働状況の情報を収集し、Kibanaで可視化したいと考えています。 収集対象は複数端末あり、時間帯や運用状況によって各端末で実行するアプリが異なります(実行するアプリは同一時間に各端末で１つのみ動作)。 このとき、Kibanaのdashboradで端末毎やアプリの種類毎の情報を表示したいのですが、metricbeatとme…

---

## [SNMP Trap listener died - bind: name or service not known](https://discuss.elastic.co/t/snmp-trap-listener-died-bind-name-or-service-not-known/60936)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 2\
**Last updated:** [September 20, 2016, 1:40pm UTC](https://discuss.elastic.co/t/snmp-trap-listener-died-bind-name-or-service-not-known/60936 "2016-09-20T13:40:01Z")

</div>

This was working before and now getting this error. Any idea? {:timestamp=\>"2016-09-19T20:39:59.548000+0000", :message=\>"SNMP Trap listener died", :exception=\>#, :backtrace=\>\["org/jruby/ext/socket/RubyUDPSocket.java:16…

---

## [Packetbeatのinterfaces-deviceの設定について](https://discuss.elastic.co/t/packetbeat-interfaces-device/54158)

<div class="topic-metadata">

**Author:** [@aurantiacus](https://discuss.elastic.co/u/aurantiacus)\
**Replies:** 2\
**Last updated:** [July 1, 2016, 12:03pm UTC](https://discuss.elastic.co/t/packetbeat-interfaces-device/54158 "2016-07-01T12:03:29Z")

</div>

お世話になります。 packetbeatについて日本語で質問したいのですが、こちらでも大丈夫でしょうか？ packetbeatのinterfaces-deviceの設定について質問があります。 複数のWindowsパソコンにpacketbeatを入れて httpプロトコルのデータ収集を考えています。 yml設定ファイルにある interfaces: devices: への設定値が各パソコンによって0であったり5であっ…

[Previous page](https://discuss.elastic.co/top.md?page=1173&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1175&per_page=50&period=all)
