# Top

**URL:** https://discuss.elastic.co/top.md?page=1195&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1196

---

## [Master node heap cost](https://discuss.elastic.co/t/master-node-heap-cost/69981)

<div class="topic-metadata">

**Author:** [@laywin](https://discuss.elastic.co/u/laywin)\
**Replies:** 4\
**Last updated:** [December 27, 2016, 6:47am UTC](https://discuss.elastic.co/t/master-node-heap-cost/69981 "2016-12-27T06:47:51Z")

</div>

Hello,I have a problem about my cluster's master node heap cost! after some days ,the heap of master node cost chart is this: after i restart master node,heap used chart is this: every day ,i have job to remove ,c…

---

## [Copy data from old index/indice over to new one](https://discuss.elastic.co/t/copy-data-from-old-index-indice-over-to-new-one/49995)

<div class="topic-metadata">

**Author:** [@brayndasilva](https://discuss.elastic.co/u/brayndasilva)\
**Replies:** 4\
**Last updated:** [May 13, 2016, 12:52pm UTC](https://discuss.elastic.co/t/copy-data-from-old-index-indice-over-to-new-one/49995 "2016-05-13T12:52:26Z")

</div>

Hi, I implemented an ELK Stack in our environment a few days ago and originally created two indexes that I specified in both Logstash configuration files; "logstash\_syslogs" and "logstash\_netflow". A few days later I…

---

## [.NET Framework Full agent not sending data](https://discuss.elastic.co/t/net-framework-full-agent-not-sending-data/218327)

<div class="topic-metadata">

**Author:** [@basv](https://discuss.elastic.co/u/basv)\
**Replies:** 3\
**Last updated:** [February 12, 2020, 6:21pm UTC](https://discuss.elastic.co/t/net-framework-full-agent-not-sending-data/218327 "2020-02-12T18:21:54Z")

</div>

Kibana version: 7.5.2 Elasticsearch version: 7.5.2 APM Server version: 7.5.2 APM Agent language and version: .Net Framework Full Fresh install or upgraded from other version?: Fresh install Description of the proble…

---

## [Elasticsearch Shards/Indices planning](https://discuss.elastic.co/t/elasticsearch-shards-indices-planning/157728)

<div class="topic-metadata">

**Author:** [@skat80](https://discuss.elastic.co/u/skat80)\
**Replies:** 3\
**Last updated:** [November 22, 2018, 5:29am UTC](https://discuss.elastic.co/t/elasticsearch-shards-indices-planning/157728 "2018-11-22T05:29:55Z")

</div>

Hello, While planning how to allocate shards in 3-nodes Elasticsearch cluster , I was totally overwhelmed. Should anybody please check the following points and shed some light ? What is indices ? I've read that do…

---

## [Very poor search and aggregation performance](https://discuss.elastic.co/t/very-poor-search-and-aggregation-performance/99117)

<div class="topic-metadata">

**Author:** [@Jul](https://discuss.elastic.co/u/Jul)\
**Replies:** 3\
**Last updated:** [September 1, 2017, 2:35pm UTC](https://discuss.elastic.co/t/very-poor-search-and-aggregation-performance/99117 "2017-09-01T14:35:39Z")

</div>

Hey there, we are experiencing really bad performance of our search and agreggation queries and would appreciate any kind of help and advice how to improve our ElasticSearch setup. System: 26GB RAM (from 70GB on the …

---

## [Can't see consulbeat import any data](https://discuss.elastic.co/t/cant-see-consulbeat-import-any-data/83365)

<div class="topic-metadata">

**Author:** [@mathias](https://discuss.elastic.co/u/mathias)\
**Replies:** 3\
**Last updated:** [April 26, 2017, 10:02am UTC](https://discuss.elastic.co/t/cant-see-consulbeat-import-any-data/83365 "2017-04-26T10:02:36Z")

</div>

Hi, I use consul in my project so I was happy when I found the consulbeat. I tried to us it together with ES 5.3.1. Unfortunately i can't see that it is doing anything. No index is created and no error in the log. …

---

## [Does the size of a separate marvel cluster affect performance of the original cluster?](https://discuss.elastic.co/t/does-the-size-of-a-separate-marvel-cluster-affect-performance-of-the-original-cluster/81169)

<div class="topic-metadata">

**Author:** [@Brian\_G](https://discuss.elastic.co/u/Brian_G)\
**Replies:** 3\
**Last updated:** [April 6, 2017, 5:45am UTC](https://discuss.elastic.co/t/does-the-size-of-a-separate-marvel-cluster-affect-performance-of-the-original-cluster/81169 "2017-04-06T05:45:28Z")

</div>

If I have a very heavily used cluster, let's say it's a 128gb cluster and I point the monitoring to a separate cluster, and the separate monitoring cluster is very small, say 2gb. If that starts slowing down and cpu is w…

---

## [Efficient query with a big input filter set?](https://discuss.elastic.co/t/efficient-query-with-a-big-input-filter-set/25114)

<div class="topic-metadata">

**Author:** [@linlma](https://discuss.elastic.co/u/linlma)\
**Replies:** 3\
**Last updated:** [July 11, 2015, 7:30am UTC](https://discuss.elastic.co/t/efficient-query-with-a-big-input-filter-set/25114 "2015-07-11T07:30:18Z")

</div>

Hello Elastic experts, I have a simple index with 100M books and each book has an unique book ID (string). I have another 1M book IDs (the 1M book ID belongs to 100M book IDs), and my query is simple, I just want to re…

---

## [Date format error from elasticsearch](https://discuss.elastic.co/t/date-format-error-from-elasticsearch/263307)

<div class="topic-metadata">

**Author:** [@earlsanchez](https://discuss.elastic.co/u/earlsanchez)\
**Replies:** 2\
**Last updated:** [February 4, 2021, 11:32pm UTC](https://discuss.elastic.co/t/date-format-error-from-elasticsearch/263307 "2021-02-04T23:32:11Z")

</div>

Hello, I originally posted this in the Logstash forum but it was suggested that I should post in Elasticsearch instead. I'm getting a date format error from elasticsearch but the format seems to match the posted date o…

---

## [Dynamic range in Goal or Gauge visualization in 7.4 or above](https://discuss.elastic.co/t/dynamic-range-in-goal-or-gauge-visualization-in-7-4-or-above/256566)

<div class="topic-metadata">

**Author:** [@hellitonwoo](https://discuss.elastic.co/u/hellitonwoo)\
**Replies:** 2\
**Last updated:** [November 24, 2020, 8:30pm UTC](https://discuss.elastic.co/t/dynamic-range-in-goal-or-gauge-visualization-in-7-4-or-above/256566 "2020-11-24T20:30:13Z")

</div>

Hi, I'm new to Kibana. Looking for some help here. Anyone knows how to use "Gauge" or "Goal" as a "meter". For instance, to present a success rate which is a on-going thing. I defined a field like "Performance", and …

---

## [Error while enrolling: empty access\_token](https://discuss.elastic.co/t/error-while-enrolling-empty-access-token/175626)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 2\
**Last updated:** [April 12, 2019, 4:31am UTC](https://discuss.elastic.co/t/error-while-enrolling-empty-access-token/175626 "2019-04-12T04:31:59Z")

</div>

Hello World! I'm using Elastic stack 6.7.1 and trying to follow Enroll Beats in central management, yet running into following issue: # filebeat enroll --force https://X.X.X:443 --username elastic --password stdin Ente…

---

## [ElasticSearch Cluster do not work with Shield plugin](https://discuss.elastic.co/t/elasticsearch-cluster-do-not-work-with-shield-plugin/46967)

<div class="topic-metadata">

**Author:** [@chtj2k001](https://discuss.elastic.co/u/chtj2k001)\
**Replies:** 2\
**Last updated:** [April 12, 2016, 3:59am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-do-not-work-with-shield-plugin/46967 "2016-04-12T03:59:15Z")

</div>

I am using the ES 2.1.1. I have created a cluster with name "wisesearch", which included two node "wisesearch-node1" and "wisesearch-node2", it had worked fine until I installed Shield plugin. After start node1, the …

---

## [Unable to Curl my Elastic search from other machines](https://discuss.elastic.co/t/unable-to-curl-my-elastic-search-from-other-machines/43489)

<div class="topic-metadata">

**Author:** [@Sudharsankotti](https://discuss.elastic.co/u/Sudharsankotti)\
**Replies:** 2\
**Last updated:** [March 7, 2016, 7:31am UTC](https://discuss.elastic.co/t/unable-to-curl-my-elastic-search-from-other-machines/43489 "2016-03-07T07:31:26Z")

</div>

Hi, I'm Unable to "curl http://myhostname:9200/\_nodes/process?pretty" ? But curl with localhost works . curl http://localhost:9200/\_nodes/process?pretty { "cluster\_name" : "elasticsearch", "nodes" : { "teY…

---

## [Issue with pki elastic search hadoop](https://discuss.elastic.co/t/issue-with-pki-elastic-search-hadoop/38202)

<div class="topic-metadata">

**Author:** [@srikrishna.alla](https://discuss.elastic.co/u/srikrishna.alla)\
**Replies:** 2\
**Last updated:** [December 31, 2015, 4:39pm UTC](https://discuss.elastic.co/t/issue-with-pki-elastic-search-hadoop/38202 "2015-12-31T16:39:47Z")

</div>

Hi, I am having an issue accessing hive table when pki is turned on. These are the steps I have followed for setting up pki- 1. Created a CA a. Generate a self-signed CA certificate to establish your CA as an authorit…

---

## [Geo point distance with multiple locations in array](https://discuss.elastic.co/t/geo-point-distance-with-multiple-locations-in-array/4897)

<div class="topic-metadata">

**Author:** [@sakaraut](https://discuss.elastic.co/u/sakaraut)\
**Replies:** 2\
**Last updated:** [July 19, 2011, 9:14pm UTC](https://discuss.elastic.co/t/geo-point-distance-with-multiple-locations-in-array/4897 "2011-07-19T21:14:33Z")

</div>

I am trying to sort items which have location array. Each item can have more than one location and I am using the following sorting query: { "sort" : \[ { "\_geo\_distance" : { …

---

## [Aggregate filter bug with java execution engine](https://discuss.elastic.co/t/aggregate-filter-bug-with-java-execution-engine/187445)

<div class="topic-metadata">

**Author:** [@kibit86](https://discuss.elastic.co/u/kibit86)\
**Replies:** 3\
**Last updated:** [July 24, 2019, 5:19pm UTC](https://discuss.elastic.co/t/aggregate-filter-bug-with-java-execution-engine/187445 "2019-07-24T17:19:55Z")

</div>

Hi all, I was getting crazy trying to debug the same aggregate filter that on other logstash instances worked smoothly. In my new elk cluster, v 7.1.1, this filter faced some kind of syncronization error because someti…

---

## [How Create a machine learning job depends a particular value in a field?](https://discuss.elastic.co/t/how-create-a-machine-learning-job-depends-a-particular-value-in-a-field/142185)

<div class="topic-metadata">

**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Replies:** 3\
**Last updated:** [August 9, 2018, 11:20am UTC](https://discuss.elastic.co/t/how-create-a-machine-learning-job-depends-a-particular-value-in-a-field/142185 "2018-08-09T11:20:08Z")

</div>

Hi All , In my log there is a filed named "Log\_Type" . This field had multiple values. It may be consist INFORMATION , ERROR or DEBUG etc. I want create a ML job with respect to the distinct count of ERROR in filed "L…

---

## [Logstash RabbitMQ input with lazy queue](https://discuss.elastic.co/t/logstash-rabbitmq-input-with-lazy-queue/185221)

<div class="topic-metadata">

**Author:** [@pszemesy](https://discuss.elastic.co/u/pszemesy)\
**Replies:** 1\
**Last updated:** [June 12, 2019, 11:49am UTC](https://discuss.elastic.co/t/logstash-rabbitmq-input-with-lazy-queue/185221 "2019-06-12T11:49:21Z")

</div>

Hi, I would like to load data from RabbitMQ with Logstash with the following pipeline: input { rabbitmq { host =\> "xxx.xxx.xxx.xxx" port =\> 5672 user =\> "guest" password =\> "guest" queue =\> "test\_queue" durable …

---

## [Search inner\_hits using a script](https://discuss.elastic.co/t/search-inner-hits-using-a-script/164321)

<div class="topic-metadata">

**Author:** [@randel](https://discuss.elastic.co/u/randel)\
**Replies:** 1\
**Last updated:** [January 15, 2019, 4:15pm UTC](https://discuss.elastic.co/t/search-inner-hits-using-a-script/164321 "2019-01-15T16:15:34Z")

</div>

According to the documentation of inner\_hits it should be possible to use a script to sort the nested inner\_hits of a document. But I can't get it to work - the \_score turns NULL as soon as I use it in an script. An ex…

---

## [Elasticsearch process is too low, increase to at least \[65536\]](https://discuss.elastic.co/t/elasticsearch-process-is-too-low-increase-to-at-least-65536/124030)

<div class="topic-metadata">

**Author:** [@madurad](https://discuss.elastic.co/u/madurad)\
**Replies:** 1\
**Last updated:** [March 15, 2018, 8:18am UTC](https://discuss.elastic.co/t/elasticsearch-process-is-too-low-increase-to-at-least-65536/124030 "2018-03-15T08:18:15Z")

</div>

Hi Guys, I installed elastic search using the below link with docker image. https://elk-docker.readthedocs.io/#installation But when I start elastic search docker file using following command, sudo docker run -p 5601…

---

## [Data Masking in elasticsearch](https://discuss.elastic.co/t/data-masking-in-elasticsearch/109965)

<div class="topic-metadata">

**Author:** [@jsbonline2006](https://discuss.elastic.co/u/jsbonline2006)\
**Replies:** 1\
**Last updated:** [December 3, 2017, 3:03pm UTC](https://discuss.elastic.co/t/data-masking-in-elasticsearch/109965 "2017-12-03T15:03:43Z")

</div>

I wanted to know is there any way we can achieve the below usecase from elasticsearch inbuild feature. I have employee data indexed in elasticsearch search EMP ID FNAME LNAME COUNTRY Organization Other 50 Attributes as…

---

## [Query performance degradation between 7.9.2 & 7.17.2](https://discuss.elastic.co/t/query-performance-degradation-between-7-9-2-7-17-2/307889)

<div class="topic-metadata">

**Author:** [@BobH](https://discuss.elastic.co/u/BobH)\
**Replies:** 6\
**Last updated:** [June 30, 2022, 8:22pm UTC](https://discuss.elastic.co/t/query-performance-degradation-between-7-9-2-7-17-2/307889 "2022-06-30T20:22:56Z")

</div>

I recently upgraded one of my Elasticsearch clusters from 7.9.2 to 7.17.2. Immediately, I noticed that performance of my application (a Java app using the REST API) was degraded. So, I've been doing some side-by-side tes…

---

## [Add link for logo by 'ui/chrome'](https://discuss.elastic.co/t/add-link-for-logo-by-ui-chrome/77135)

<div class="topic-metadata">

**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\
**Replies:** 6\
**Last updated:** [March 8, 2017, 5:06am UTC](https://discuss.elastic.co/t/add-link-for-logo-by-ui-chrome/77135 "2017-03-08T05:06:07Z")

</div>

how can I add add a link for brand logo by 'ui/chrome'

---

## [Configuration for ELK+filebeat with docker-compose](https://discuss.elastic.co/t/configuration-for-elk-filebeat-with-docker-compose/239239)

<div class="topic-metadata">

**Author:** [@Govinda8594](https://discuss.elastic.co/u/Govinda8594)\
**Replies:** 0\
**Last updated:** [June 30, 2020, 7:28am UTC](https://discuss.elastic.co/t/configuration-for-elk-filebeat-with-docker-compose/239239 "2020-06-30T07:28:24Z")

</div>

Hello Team, i am new to ELK and i have problem with setting this configuration ,My filebeat.yml is taking input from docker log (with respective file path) and send this log to logstash for indexing based on log file but…

---

## [Lookup in elasticsearch](https://discuss.elastic.co/t/lookup-in-elasticsearch/355229)

<div class="topic-metadata">

**Author:** [@hans\_hupe](https://discuss.elastic.co/u/hans_hupe)\
**Replies:** 5\
**Last updated:** [March 12, 2024, 2:48pm UTC](https://discuss.elastic.co/t/lookup-in-elasticsearch/355229 "2024-03-12T14:48:17Z")

</div>

In relational databases I am used to refer to descriptive fields by a key, and then make a lookup in order to retrieve the description. So updating the description doesn't have an impact on the query logic. How is this …

---

## [Simple JWT authentication example with Docker](https://discuss.elastic.co/t/simple-jwt-authentication-example-with-docker/352786)

<div class="topic-metadata">

**Author:** [@Lasra\_Bilaj](https://discuss.elastic.co/u/Lasra_Bilaj)\
**Replies:** 5\
**Last updated:** [March 6, 2024, 8:19am UTC](https://discuss.elastic.co/t/simple-jwt-authentication-example-with-docker/352786 "2024-03-06T08:19:23Z")

</div>

I want to find a simple example of JWT based authentication for Elasticsearch with docker. I am using the the docker-compose.yml file provided by Elastic here at: Is there a resource where I can set that up with the …

---

## [Create button with filters in dashboards](https://discuss.elastic.co/t/create-button-with-filters-in-dashboards/336243)

<div class="topic-metadata">

**Author:** [@SYGH](https://discuss.elastic.co/u/SYGH)\
**Replies:** 5\
**Last updated:** [June 19, 2023, 12:39pm UTC](https://discuss.elastic.co/t/create-button-with-filters-in-dashboards/336243 "2023-06-19T12:39:35Z")

</div>

Hello, I need to create a button on the dashboard to enable a filter based on the value of X. At the same time, when you click it again, the filter is removed. Please tell me how to create this button.

---

## [Synthetics push command issues](https://discuss.elastic.co/t/synthetics-push-command-issues/325650)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 5\
**Last updated:** [February 22, 2023, 11:53am UTC](https://discuss.elastic.co/t/synthetics-push-command-issues/325650 "2023-02-22T11:53:21Z")

</div>

Hi All, I'm testing out the npx @elastic/synthetics push command, but I'm running into a few issues, and was wondering if anyone has any ideas on how to fix them. Push command doesn't respect NodeJS TLS settings. I h…

---

## [Unable to access Kibana with 500 Internal Server Error](https://discuss.elastic.co/t/unable-to-access-kibana-with-500-internal-server-error/313842)

<div class="topic-metadata">

**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\
**Replies:** 5\
**Last updated:** [September 8, 2022, 9:04pm UTC](https://discuss.elastic.co/t/unable-to-access-kibana-with-500-internal-server-error/313842 "2022-09-08T21:04:45Z")

</div>

Elastic Cloud version 7.17.6. After I deleted these indices, I could not access to Kibana or Elasticsearch in Elastic Cloud. .apm-agent-configuration .apm-custom-link .async-search .fleet-enrollment-api-keys-7 .fleet-p…

---

## [Elasticsearch ip type in ranges?](https://discuss.elastic.co/t/elasticsearch-ip-type-in-ranges/157379)

<div class="topic-metadata">

**Author:** [@jahlives](https://discuss.elastic.co/u/jahlives)\
**Replies:** 5\
**Last updated:** [November 28, 2018, 1:26pm UTC](https://discuss.elastic.co/t/elasticsearch-ip-type-in-ranges/157379 "2018-11-28T13:26:18Z")

</div>

using elasticsearch 6.4 on a Centos7 with latest patches I currently see a very weird behaviour on my ELK. It's related to a search query on a field which is of type ip. The strange this is that I get results based on …

---

## [Help jump from logstash to beats](https://discuss.elastic.co/t/help-jump-from-logstash-to-beats/104349)

<div class="topic-metadata">

**Author:** [@alexolivan](https://discuss.elastic.co/u/alexolivan)\
**Replies:** 5\
**Last updated:** [November 13, 2017, 6:31pm UTC](https://discuss.elastic.co/t/help-jump-from-logstash-to-beats/104349 "2017-11-13T18:31:12Z")

</div>

Hi again here! I'm going to try replacing logstash to beats as a ship mechanism (as part of a migration from 1.5 to 5.x) , but I need some help to understand what are the pieces roles. Currently, I'm reading and parsin…

---

## [Call kbnUrl.change() and pass a query value as $routeParams](https://discuss.elastic.co/t/call-kbnurl-change-and-pass-a-query-value-as-routeparams/74530)

<div class="topic-metadata">

**Author:** [@valereds](https://discuss.elastic.co/u/valereds)\
**Replies:** 5\
**Last updated:** [February 13, 2017, 4:43pm UTC](https://discuss.elastic.co/t/call-kbnurl-change-and-pass-a-query-value-as-routeparams/74530 "2017-02-13T16:43:12Z")

</div>

Hi all, can I use .change() method of kbnUrl service to navigate to a saved dashboard and pass a parameter to query on state enter? I can navigate to the dashboard passing the url but can't figure out how paramObj works…

---

## [Export of Users & Roles in Kibana as CSV](https://discuss.elastic.co/t/export-of-users-roles-in-kibana-as-csv/324196)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 2\
**Last updated:** [February 1, 2023, 3:25am UTC](https://discuss.elastic.co/t/export-of-users-roles-in-kibana-as-csv/324196 "2023-02-01T03:25:29Z")

</div>

Hi all, For my internal purposes, I want to export a CSV of all users , roles and their permissions. I know I can see them in Roles & Users, but want an export of CSV. I believe every user is created as seperate inde…

---

## [Canvas Group By Month with Chronological order](https://discuss.elastic.co/t/canvas-group-by-month-with-chronological-order/259066)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 2\
**Last updated:** [December 18, 2020, 9:35pm UTC](https://discuss.elastic.co/t/canvas-group-by-month-with-chronological-order/259066 "2020-12-18T21:35:12Z")

</div>

Hello, I'm trying for some time to create a graph in canvas of unique users per month, ordered chronologically (oldest month of last year first). Whatever ESSQL query I'm trying, it seems to always order alphabetically. …

---

## [Java High Level REST Client: result casting](https://discuss.elastic.co/t/java-high-level-rest-client-result-casting/98960)

<div class="topic-metadata">

**Author:** [@sqshq](https://discuss.elastic.co/u/sqshq)\
**Replies:** 2\
**Last updated:** [October 4, 2017, 2:29pm UTC](https://discuss.elastic.co/t/java-high-level-rest-client-result-casting/98960 "2017-10-04T14:29:17Z")

</div>

Hi, I’m looking into Java High Level REST Client API and as far as I can see, there is to convinent ways to retrieve search result entity As json string: getSourceAsString() As map: getSourceAsMap() However in Jest…

---

## [Bulk crash Caused by: java.lang.OutOfMemoryError: Java heap space](https://discuss.elastic.co/t/bulk-crash-caused-by-java-lang-outofmemoryerror-java-heap-space/84461)

<div class="topic-metadata">

**Author:** [@haruanm](https://discuss.elastic.co/u/haruanm)\
**Replies:** 2\
**Last updated:** [May 3, 2017, 8:56pm UTC](https://discuss.elastic.co/t/bulk-crash-caused-by-java-lang-outofmemoryerror-java-heap-space/84461 "2017-05-03T20:56:05Z")

</div>

My Elastic is crashing when I perform some bulks, the server has 15GB RAM, and the memory is set to 8000m the object is a bit large ( 80.000 characteres ) sometimes, like this one the insert happens like 1 time each 3 …

---

## [Exclude data before multiline?](https://discuss.elastic.co/t/exclude-data-before-multiline/60978)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 2\
**Last updated:** [September 22, 2016, 7:13am UTC](https://discuss.elastic.co/t/exclude-data-before-multiline/60978 "2016-09-22T07:13:32Z")

</div>

I use ELK stack + filebeat to collect logs. Log flows in below order. filebeat(1.3.0) -\> logstash(5.0.0 alpha5) -\> elasticsearch(5.0.0alpha5) I also use multiline in filebeat to group certain lines. Problem I am ha…

---

## [Reload if modification time changes in config files](https://discuss.elastic.co/t/reload-if-modification-time-changes-in-config-files/55556)

<div class="topic-metadata">

**Author:** [@lightkz](https://discuss.elastic.co/u/lightkz)\
**Replies:** 2\
**Last updated:** [July 15, 2016, 11:16am UTC](https://discuss.elastic.co/t/reload-if-modification-time-changes-in-config-files/55556 "2016-07-15T11:16:23Z")

</div>

Does filebeat process would be able to see changes in config files and reload with new settings without restarting process?

---

## [New fields resolve as expected in stdout output but not in elasticsearch output](https://discuss.elastic.co/t/new-fields-resolve-as-expected-in-stdout-output-but-not-in-elasticsearch-output/35206)

<div class="topic-metadata">

**Author:** [@vtst2412](https://discuss.elastic.co/u/vtst2412)\
**Replies:** 2\
**Last updated:** [November 24, 2015, 9:35pm UTC](https://discuss.elastic.co/t/new-fields-resolve-as-expected-in-stdout-output-but-not-in-elasticsearch-output/35206 "2015-11-24T21:35:04Z")

</div>

input { file { type =\> "json" path =\> "/home/user/json/test.json" #codec =\> json start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } } filter { json { source =\> "message"…

---

## [Does Packetbeat / Filebeat / Topbeat do store and forward?](https://discuss.elastic.co/t/does-packetbeat-filebeat-topbeat-do-store-and-forward/34821)

<div class="topic-metadata">

**Author:** [@xamox](https://discuss.elastic.co/u/xamox)\
**Replies:** 2\
**Last updated:** [November 19, 2015, 5:41pm UTC](https://discuss.elastic.co/t/does-packetbeat-filebeat-topbeat-do-store-and-forward/34821 "2015-11-19T17:41:32Z")

</div>

I've setup a local lab for testing and killed my elasticsearch cluster for a few days and restarted it and noticed all that data seems to be gone after restarting it. I wasn't sure if that data just get's dropped if ela…

---

## [Logstash twitter output to mysql database](https://discuss.elastic.co/t/logstash-twitter-output-to-mysql-database/29213)

<div class="topic-metadata">

**Author:** [@Dan](https://discuss.elastic.co/u/Dan)\
**Replies:** 2\
**Last updated:** [September 14, 2015, 6:28am UTC](https://discuss.elastic.co/t/logstash-twitter-output-to-mysql-database/29213 "2015-09-14T06:28:16Z")

</div>

Hi All, i want to store twitter data into mysql database. Here can we able to use logstash output plugin. If we are not able to use that please give me if we have any alternate. Thanks & Regards, Dinesh.

---

## [Starting kibana fails](https://discuss.elastic.co/t/starting-kibana-fails/254613)

<div class="topic-metadata">

**Author:** [@flamant](https://discuss.elastic.co/u/flamant)\
**Replies:** 1\
**Last updated:** [November 8, 2020, 8:12am UTC](https://discuss.elastic.co/t/starting-kibana-fails/254613 "2020-11-08T08:12:27Z")

</div>

Hello, I try to setup elasticsearch plus kibana. I use version 7.9.3 for both. I have no problem with elasticsearch, but get problems with kibana start. Before launching kibana, I run curl -XDELETE http://localhost:920…

---

## [ELK - indexes blocked : SERVICE\_UNAVAILABLE/1/state not recovered](https://discuss.elastic.co/t/elk-indexes-blocked-service-unavailable-1-state-not-recovered/179527)

<div class="topic-metadata">

**Author:** [@rodrigue](https://discuss.elastic.co/u/rodrigue)\
**Replies:** 7\
**Last updated:** [May 3, 2019, 2:37pm UTC](https://discuss.elastic.co/t/elk-indexes-blocked-service-unavailable-1-state-not-recovered/179527 "2019-05-03T14:37:13Z")

</div>

Hello, Lately, I upgraded to elastic 6.7.1 (previously 6.2.4) I also upgraded kibana. Suddently I had an exception about monitoring. I searched on the internet and found that solution : PUT /\_cluster/settings { "pe…

---

## [Why null\_value parameter has been removed for text field type?](https://discuss.elastic.co/t/why-null-value-parameter-has-been-removed-for-text-field-type/79882)

<div class="topic-metadata">

**Author:** [@avr](https://discuss.elastic.co/u/avr)\
**Replies:** 1\
**Last updated:** [March 31, 2017, 6:45am UTC](https://discuss.elastic.co/t/why-null-value-parameter-has-been-removed-for-text-field-type/79882 "2017-03-31T06:45:04Z")

</div>

I was searching for reasons behind removing null\_value parameter for text field mapping. But I didn't find any resources or some change log online. Can somebody help me out regarding this? Thanks in advance!

---

## [Bulk API via S3](https://discuss.elastic.co/t/bulk-api-via-s3/42926)

<div class="topic-metadata">

**Author:** [@Jonathan\_Spooner](https://discuss.elastic.co/u/Jonathan_Spooner)\
**Replies:** 1\
**Last updated:** [February 28, 2016, 3:21am UTC](https://discuss.elastic.co/t/bulk-api-via-s3/42926 "2016-02-28T03:21:31Z")

</div>

I'm using Spark to build text files for the Bulk API and I staged all 80GB of them in S3. I have 45gb of data and I just realized I can't use curl to POST a file that is on S3! A) I can write a bash script to downloa…

---

## [Console shutdown event signaled](https://discuss.elastic.co/t/console-shutdown-event-signaled/36936)

<div class="topic-metadata">

**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\
**Replies:** 1\
**Last updated:** [December 14, 2015, 3:04am UTC](https://discuss.elastic.co/t/console-shutdown-event-signaled/36936 "2015-12-14T03:04:17Z")

</div>

I installed ES on windows server, and run it as a windows service. Yesterday, my ES cluster down due to master node down. I following log at the time master node down: \[2015-12-10 08:35:31\] \[info\] \[ 3428\] Console SHUT…

---

## [Parsing the Windows Message Field (Postprocessing after eventlog filter)](https://discuss.elastic.co/t/parsing-the-windows-message-field-postprocessing-after-eventlog-filter/29857)

<div class="topic-metadata">

**Author:** [@h2k](https://discuss.elastic.co/u/h2k)\
**Replies:** 1\
**Last updated:** [September 23, 2015, 6:59pm UTC](https://discuss.elastic.co/t/parsing-the-windows-message-field-postprocessing-after-eventlog-filter/29857 "2015-09-23T18:59:21Z")

</div>

I have used the eventlog filter to pull down Windows Event Logs via Logstash. This has worked handsomely, except for the Message (not message) field, which looks like this: Key file operation. Subject: Security ID: …

---

## [Problem setting up Logstash-1.5.0](https://discuss.elastic.co/t/problem-setting-up-logstash-1-5-0/23767)

<div class="topic-metadata">

**Author:** [@jigar](https://discuss.elastic.co/u/jigar)\
**Replies:** 7\
**Last updated:** [June 19, 2015, 9:57am UTC](https://discuss.elastic.co/t/problem-setting-up-logstash-1-5-0/23767 "2015-06-19T09:57:15Z")

</div>

Hi Guys, I am new to logstash. I am struggling to make it working on my windows 8.1 machine. I am trying to use logstash-1.5.0. I am following below url to get going: https://www.elastic.co/guide/en/logstash/current/g…

---

## [Increase shard count in elastic search kubernetes](https://discuss.elastic.co/t/increase-shard-count-in-elastic-search-kubernetes/258269)

<div class="topic-metadata">

**Author:** [@rajkumar\_25](https://discuss.elastic.co/u/rajkumar_25)\
**Replies:** 4\
**Last updated:** [December 29, 2020, 6:17am UTC](https://discuss.elastic.co/t/increase-shard-count-in-elastic-search-kubernetes/258269 "2020-12-29T06:17:34Z")

</div>

I have deployed an Elastic search in GKE. ECK has 3 master and 2 data nodes. When creating an index with 1 shard and 1 replica getting 400 error response when the shard count reached 1000. Is it possible to increase the…

---

## [Kibana is not loading](https://discuss.elastic.co/t/kibana-is-not-loading/144628)

<div class="topic-metadata">

**Author:** [@Suresh\_Pal](https://discuss.elastic.co/u/Suresh_Pal)\
**Replies:** 4\
**Last updated:** [August 17, 2018, 7:06am UTC](https://discuss.elastic.co/t/kibana-is-not-loading/144628 "2018-08-17T07:06:10Z")

</div>

Hi Team, A very good morning. While accessing my kibana it give below message most of the time. "Kibana did not load properly. Check the server output for more information." Please help

[Previous page](https://discuss.elastic.co/top.md?page=1194&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1196&per_page=50&period=all)
