# Top **URL:** https://discuss.elastic.co/top.md?page=1206&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1207 --- ## [Elastic Search, not able to modify the settings](https://discuss.elastic.co/t/elastic-search-not-able-to-modify-the-settings/265129)
**Author:** [@cool\_aarti2](https://discuss.elastic.co/u/cool_aarti2)\ **Replies:** 4\ **Last updated:** [February 25, 2021, 7:48am UTC](https://discuss.elastic.co/t/elastic-search-not-able-to-modify-the-settings/265129 "2021-02-25T07:48:16Z")
We have created an Elastic Search ECK instance in a Kubernetes cluster. We modified the volume from 1Ti to 2Ti. Now we want to make additional configurations. But, the elastic-operator instance is not recognizing the new… --- ## [No able to access Kibana in Azure](https://discuss.elastic.co/t/no-able-to-access-kibana-in-azure/241410)
**Author:** [@nilbak](https://discuss.elastic.co/u/nilbak)\ **Replies:** 4\ **Last updated:** [July 16, 2020, 9:52am UTC](https://discuss.elastic.co/t/no-able-to-access-kibana-in-azure/241410 "2020-07-16T09:52:34Z")
Hi , I have installed elasticsearch and kibana on linux in cloud. Both services are up and running. Output of curl for elastic search root@vm4:~# curl -XGET http://localhost:9200/\_cluster/health?pretty { "cluster\_n… --- ## [Elasticsearch fails shortly after starting (CentOS 7, ES 5.6.\*, installed using RPM)](https://discuss.elastic.co/t/elasticsearch-fails-shortly-after-starting-centos-7-es-5-6-installed-using-rpm/161934)
**Author:** [@keddy](https://discuss.elastic.co/u/keddy)\ **Replies:** 4\ **Last updated:** [December 28, 2018, 3:39am UTC](https://discuss.elastic.co/t/elasticsearch-fails-shortly-after-starting-centos-7-es-5-6-installed-using-rpm/161934 "2018-12-28T03:39:49Z")
Getting the following systemd log entries when attempting to start ElasticSearch: Dec 22 21:57:42 mydomain.com systemd\[1\]: Starting Elasticsearch... Dec 22 21:57:42 mydomain.com systemd\[1\]: Started Elasticsearch. Dec 22… --- ## [Get ClusterHealthResponse using RestHighLevelClient in 6.3.2](https://discuss.elastic.co/t/get-clusterhealthresponse-using-resthighlevelclient-in-6-3-2/145092)
**Author:** [@madhan3396](https://discuss.elastic.co/u/madhan3396)\ **Replies:** 4\ **Last updated:** [August 29, 2018, 11:04am UTC](https://discuss.elastic.co/t/get-clusterhealthresponse-using-resthighlevelclient-in-6-3-2/145092 "2018-08-29T11:04:52Z")
In the documentation of master version the Cluster Health API is available under RestHighLevelClient. How to achieve the same in version 6.3.2 using RestHighLevelClient? I'm looking for ClusterHealthResponse. Thanks i… --- ## [How to close the Loading of data by logstash programmatically](https://discuss.elastic.co/t/how-to-close-the-loading-of-data-by-logstash-programmatically/43522)
**Author:** [@Rajeev\_Gaurav](https://discuss.elastic.co/u/Rajeev_Gaurav)\ **Replies:** 4\ **Last updated:** [March 7, 2016, 5:07am UTC](https://discuss.elastic.co/t/how-to-close-the-loading-of-data-by-logstash-programmatically/43522 "2016-03-07T05:07:35Z")
Hi, I am loading the data in ES using Logstash pro grammatically by starting the process cmd.exe.But I am not able to close this loading of data . can you help me that How can i shutdown logsatsh programmatically. --- ## [Kibana index .kibana\_task\_manager goes unassigned after few days and cause Red cluster health](https://discuss.elastic.co/t/kibana-index-kibana-task-manager-goes-unassigned-after-few-days-and-cause-red-cluster-health/309028)
**Author:** [@AaronSarkissian](https://discuss.elastic.co/u/AaronSarkissian)\ **Replies:** 2\ **Last updated:** [July 7, 2022, 8:37am UTC](https://discuss.elastic.co/t/kibana-index-kibana-task-manager-goes-unassigned-after-few-days-and-cause-red-cluster-health/309028 "2022-07-07T08:37:44Z")
I'm setting up a cluster on Azure using ECK. The specifications are following: ECK version: 2.2, 2.3 (tried both) Elastic version: 8.0, 8.1.0, 8.2.0, 8.3.1 (tried all versions) K8s version: 1.23.5 Node size: Standard… --- ## [Bulk API Failing](https://discuss.elastic.co/t/bulk-api-failing/308184)
**Author:** [@chandramouli\_ravi](https://discuss.elastic.co/u/chandramouli_ravi)\ **Replies:** 2\ **Last updated:** [June 26, 2022, 2:45pm UTC](https://discuss.elastic.co/t/bulk-api-failing/308184 "2022-06-26T14:45:55Z")
Hi, I am using ElasticSearch 8.2.3 version in Windows 10 I have tried modifying in multiple ways.. but its still failing Could you please help. curl --insecure -H "Content-Type: application/x-ndjson" -XPUT "https://… --- ## [\[metricbeat\]Error fetching data for metricset logstash.node: Could not find field 'id' in Logstash API response](https://discuss.elastic.co/t/metricbeat-error-fetching-data-for-metricset-logstash-node-could-not-find-field-id-in-logstash-api-response/299418)
**Author:** [@Yos](https://discuss.elastic.co/u/Yos)\ **Replies:** 2\ **Last updated:** [March 17, 2022, 1:10am UTC](https://discuss.elastic.co/t/metricbeat-error-fetching-data-for-metricset-logstash-node-could-not-find-field-id-in-logstash-api-response/299418 "2022-03-17T01:10:33Z")
metricbeatでelastic stack監視をしようと logstash-xpackを有効化し、metricbeatを起動したところ、 以下のエラーが出力されます。 Kibana上ではLogstashのMonitoringはできているようですが、 /var/log/messagesにエラーが出続けます。 このエラーの原因で思い当たること等ございましたら、ご教授ください。 ■/etc/metricbeat/module… --- ## [When running Curator action.yml, getting error](https://discuss.elastic.co/t/when-running-curator-action-yml-getting-error/156201)
**Author:** [@aleksei.saiko](https://discuss.elastic.co/u/aleksei.saiko)\ **Replies:** 2\ **Last updated:** [November 11, 2018, 4:15pm UTC](https://discuss.elastic.co/t/when-running-curator-action-yml-getting-error/156201 "2018-11-11T16:15:48Z")
Hi there! Can you please help with the following - When I'm running the following command - curator action.yml I receive the following error - Traceback (most recent call last): File "/usr/local/bin/curator", line… --- ## [Custom patterns using patterns\_dir is not working](https://discuss.elastic.co/t/custom-patterns-using-patterns-dir-is-not-working/118572)
**Author:** [@ranganath\_nangineni](https://discuss.elastic.co/u/ranganath_nangineni)\ **Replies:** 2\ **Last updated:** [February 6, 2018, 8:52am UTC](https://discuss.elastic.co/t/custom-patterns-using-patterns-dir-is-not-working/118572 "2018-02-06T08:52:42Z")
I have the below custom patterns under /usr/share/logstash/patterns and /etc/logstash/patterns directories. These were created to accept HTTPDUSER in the COMBINEDPATCHELOG pattern. The pattern is as below USERNAME \[a-z… --- ## [File input plugin is not working](https://discuss.elastic.co/t/file-input-plugin-is-not-working/95084)
**Author:** [@ibrahimsharaf](https://discuss.elastic.co/u/ibrahimsharaf)\ **Replies:** 2\ **Last updated:** [August 2, 2017, 1:12pm UTC](https://discuss.elastic.co/t/file-input-plugin-is-not-working/95084 "2017-08-02T13:12:09Z")
Hello everyone, I am trying to use file input plugin instead of tcp, but it doesn’t work (there are no injected files in elasticsearch), here’s a minimal configuration for logstash: input { file { path =\> \["… --- ## [How to correctly determine the weight of a node](https://discuss.elastic.co/t/how-to-correctly-determine-the-weight-of-a-node/224871)
**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Replies:** 1\ **Last updated:** [March 2, 2023, 9:59am UTC](https://discuss.elastic.co/t/how-to-correctly-determine-the-weight-of-a-node/224871 "2023-03-02T09:59:41Z")
Hey Team, I'm trying to calculate the weights of each node based on the below two settings taken from shard balancing heuristics: cluster.routing.allocation.balance.shard cluster.routing.allocation.balance.index Let's… --- ## [Fleet Custom Logs Ingest Pipeline](https://discuss.elastic.co/t/fleet-custom-logs-ingest-pipeline/262999)
**Author:** [@beerygaz](https://discuss.elastic.co/u/beerygaz)\ **Replies:** 1\ **Last updated:** [February 4, 2021, 8:34am UTC](https://discuss.elastic.co/t/fleet-custom-logs-ingest-pipeline/262999 "2021-02-04T08:34:21Z")
We're trying to ingest a custom log using the custom log integration in Fleet. Is there a way to push thins custom log through an ingest pipeline so that we can parse out the custom fields in the message field using gro… --- ## [Error: TypeError: Cannot read property 'startTime' of undefined](https://discuss.elastic.co/t/error-typeerror-cannot-read-property-starttime-of-undefined/222725)
**Author:** [@akosanovic](https://discuss.elastic.co/u/akosanovic)\ **Replies:** 1\ **Last updated:** [March 9, 2020, 2:30pm UTC](https://discuss.elastic.co/t/error-typeerror-cannot-read-property-starttime-of-undefined/222725 "2020-03-09T14:30:46Z")
I need help with the error I'm getting: TypeError: Cannot read property 'startTime' of undefined. I'm not able to reproduce it in local dev but it occurs often for live env. Do you have any suggestion how to debug this?… --- ## [No living connections in elasticsearch connection pool](https://discuss.elastic.co/t/no-living-connections-in-elasticsearch-connection-pool/150591)
**Author:** [@jgrevich](https://discuss.elastic.co/u/jgrevich)\ **Replies:** 1\ **Last updated:** [October 22, 2018, 5:29pm UTC](https://discuss.elastic.co/t/no-living-connections-in-elasticsearch-connection-pool/150591 "2018-10-22T17:29:59Z")
We use a AWS NLB in front of our ES cluster and are receiving errors in the logstash logs stating that Elasticsearch is unreachable. The full error is below: 2018-09-18\_19:00:10.19502 \[ERROR\] 2018-09-18 19:00:10.194 \[\[m… --- ## [Reindexing error es\_rejected\_execution\_exception](https://discuss.elastic.co/t/reindexing-error-es-rejected-execution-exception/305099)
**Author:** [@luciana](https://discuss.elastic.co/u/luciana)\ **Replies:** 3\ **Last updated:** [May 18, 2022, 5:28pm UTC](https://discuss.elastic.co/t/reindexing-error-es-rejected-execution-exception/305099 "2022-05-18T17:28:54Z")
Both my indices are on the same node. The source has about 200k documents, I'm using AWS and the instance type is "t3.small.search" so 2 vCPUs. I tried slicing already but it just gives me the same error. Any ideas on wh… --- ## [Logstash unable to decode Cisco protobuf](https://discuss.elastic.co/t/logstash-unable-to-decode-cisco-protobuf/247955)
**Author:** [@Scottsdash](https://discuss.elastic.co/u/Scottsdash)\ **Replies:** 3\ **Last updated:** [September 11, 2020, 5:01am UTC](https://discuss.elastic.co/t/logstash-unable-to-decode-cisco-protobuf/247955 "2020-09-11T05:01:11Z")
Hoping someone has configured logstash to receive Cisco telemetry before, I'm able to receive the events but can't decode the telemetry. I'm getting the folowing error from logstash: \[WARN \] 2020-09-09 05:18:01.074 \[ni… --- ## [Error installing attachment plugin offline - missing x-pack-core\\plugin-descriptor.properties file](https://discuss.elastic.co/t/error-installing-attachment-plugin-offline-missing-x-pack-core-plugin-descriptor-properties-file/231903)
**Author:** [@ImaMacCan](https://discuss.elastic.co/u/ImaMacCan)\ **Replies:** 3\ **Last updated:** [May 11, 2020, 2:18pm UTC](https://discuss.elastic.co/t/error-installing-attachment-plugin-offline-missing-x-pack-core-plugin-descriptor-properties-file/231903 "2020-05-11T14:18:49Z")
Command is: C:\\APPS\\elasticsearch-7.6.2\>bin\\elasticsearch-plugin install file:///C:/install/ingest-attachment-7.6.2.zip Error is: Exception in thread "main" java.lang.IllegalStateException: Could not load plugin descr… --- ## [Best way to learn Elasticsearch internal](https://discuss.elastic.co/t/best-way-to-learn-elasticsearch-internal/227748)
**Author:** [@amitkg](https://discuss.elastic.co/u/amitkg)\ **Replies:** 8\ **Last updated:** [April 15, 2020, 5:07pm UTC](https://discuss.elastic.co/t/best-way-to-learn-elasticsearch-internal/227748 "2020-04-15T17:07:47Z")
Hi, I am new to Elasticsearch and fond of this system. I would like to learn more about internal design and motivation behind such design. I did follow some of youtube videos or blogs which covers the bottom up design.… --- ## [Reindex in progress, not able to access data by then](https://discuss.elastic.co/t/reindex-in-progress-not-able-to-access-data-by-then/206669)
**Author:** [@dhruv2204](https://discuss.elastic.co/u/dhruv2204)\ **Replies:** 3\ **Last updated:** [November 10, 2019, 6:58pm UTC](https://discuss.elastic.co/t/reindex-in-progress-not-able-to-access-data-by-then/206669 "2019-11-10T18:58:29Z")
Hi Team I am reindexing from a remote cluster a dataset of around 180GB. The complete source index is rather bigger (around 1.5tb) but i am using time query while reindexing data of 3 months only. The task is still in … --- ## [Logstash require 'sqlite3'](https://discuss.elastic.co/t/logstash-require-sqlite3/163309)
**Author:** [@pohsun.teh](https://discuss.elastic.co/u/pohsun.teh)\ **Replies:** 8\ **Last updated:** [January 8, 2019, 10:38pm UTC](https://discuss.elastic.co/t/logstash-require-sqlite3/163309 "2019-01-08T22:38:45Z")
When I run my logstash, error shown no such file to load -- sqlite3 Is it because sqlite3 is not pre-installed with Logstash? Is it possible to install sqlite3 for logstash? gem install sqlite3 Reason being is t… --- ## [Elastic mapping not working](https://discuss.elastic.co/t/elastic-mapping-not-working/108513)
**Author:** [@Shekhar\_Pandey](https://discuss.elastic.co/u/Shekhar_Pandey)\ **Replies:** 3\ **Last updated:** [November 22, 2017, 4:54am UTC](https://discuss.elastic.co/t/elastic-mapping-not-working/108513 "2017-11-22T04:54:28Z")
I have one mapping which details are given below: PUT my\_index { "mappings": { "product": { "properties": { "search\_data": { "type": "nested", "properties":{ "string\_f… --- ## [Action \[indices:data/write/bulk\] is unauthorized for user \[logstash\_system\]\\](https://discuss.elastic.co/t/action-indices-data-write-bulk-is-unauthorized-for-user-logstash-system/95532)
**Author:** [@dencowboy](https://discuss.elastic.co/u/dencowboy)\ **Replies:** 0\ **Last updated:** [August 2, 2017, 1:12pm UTC](https://discuss.elastic.co/t/action-indices-data-write-bulk-is-unauthorized-for-user-logstash-system/95532 "2017-08-02T13:12:39Z")
I’ve created the ELK stack in docker. I started ES. I’ve changed the password of the existing logstash\_system user: curl -u elastic -XPUT 'localhost:9200/\_xpack/security/user/logstash\_system/\_password?pretty' -H 'Conte… --- ## [Logstash service stop working](https://discuss.elastic.co/t/logstash-service-stop-working/54051)
**Author:** [@William\_Leclerc](https://discuss.elastic.co/u/William_Leclerc)\ **Replies:** 3\ **Last updated:** [June 29, 2016, 2:45pm UTC](https://discuss.elastic.co/t/logstash-service-stop-working/54051 "2016-06-29T14:45:06Z")
Here is my configuration that works for us at the moment ( Filebeat -\> Logstash -\> Elasticsearch) input { beats { port =\> 5044 ssl =\> true ssl\_certificate =\> "/etc/pki/tls/certs/logstash-forwarder.crt" … --- ## [Elasticsearch Search Qurery Taking Time](https://discuss.elastic.co/t/elasticsearch-search-qurery-taking-time/48930)
**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\ **Replies:** 8\ **Last updated:** [May 3, 2016, 11:59am UTC](https://discuss.elastic.co/t/elasticsearch-search-qurery-taking-time/48930 "2016-05-03T11:59:23Z")
Hi, I am facing problem in my Elasticsearch in production envoirnment.We currently have 3 Elasticsearch nodes in production with 27GB of memory for each instance for a total of 81GB of memory for the entire cluster. Of… --- ## [Migrating fields with dots for ES 2.0 upgrade](https://discuss.elastic.co/t/migrating-fields-with-dots-for-es-2-0-upgrade/33452)
**Author:** [@delfuego](https://discuss.elastic.co/u/delfuego)\ **Replies:** 3\ **Last updated:** [November 1, 2015, 5:06am UTC](https://discuss.elastic.co/t/migrating-fields-with-dots-for-es-2-0-upgrade/33452 "2015-11-01T05:06:38Z")
Is there a way to migrate a bunch of fields in our indices from names that have dots in them (e.g., "http.responseCode") to nested objects? I'd like to upgrade our ES 1.6 cluster to ES 2.0, but in letting the Migration… --- ## [Corrupted shard after optimize](https://discuss.elastic.co/t/corrupted-shard-after-optimize/22840)
**Author:** [@mjdude5](https://discuss.elastic.co/u/mjdude5)\ **Replies:** 3\ **Last updated:** [March 24, 2015, 3:10pm UTC](https://discuss.elastic.co/t/corrupted-shard-after-optimize/22840 "2015-03-24T15:10:30Z")
I did an optimize on this index and it looks like it caused a shard to become corrupted. Or maybe the optimize just brought the shard corruption to light? On the node that reported the corrupted shard I tried shu… --- ## [Web Crawler](https://discuss.elastic.co/t/web-crawler/13526)
**Author:** [@dhturner14](https://discuss.elastic.co/u/dhturner14)\ **Replies:** 3\ **Last updated:** [September 10, 2013, 11:07am UTC](https://discuss.elastic.co/t/web-crawler/13526 "2013-09-10T11:07:19Z")
Does anyone actually use Nutch with ElasticSearch? It appears that the integration between the two products does not work. Is there something better to use than Nutch for crawling intranet sites that use ElasticSearc… --- ## [Distinct count for field and High Cardinality Facets](https://discuss.elastic.co/t/distinct-count-for-field-and-high-cardinality-facets/9600)
**Author:** [@Jerome\_Gagnon](https://discuss.elastic.co/u/Jerome_Gagnon)\ **Replies:** 8\ **Last updated:** [November 9, 2012, 9:49pm UTC](https://discuss.elastic.co/t/distinct-count-for-field-and-high-cardinality-facets/9600 "2012-11-09T21:49:13Z")
Good morning people, I actually have 2 issues with ElasticSearch queries that I haven't found a way to solve yet. Let's says that what I'm indexing is "sharings" of documents, and I have a field that is the do… --- ## [Difference on sorting between query\_and\_fetch and query\_then\_fetch](https://discuss.elastic.co/t/difference-on-sorting-between-query-and-fetch-and-query-then-fetch/5527)
**Author:** [@alheim](https://discuss.elastic.co/u/alheim)\ **Replies:** 3\ **Last updated:** [October 10, 2011, 9:51am UTC](https://discuss.elastic.co/t/difference-on-sorting-between-query-and-fetch-and-query-then-fetch/5527 "2011-10-10T09:51:32Z")
Hi, I try to get a list of documents ordered by a field. No specific limit or offset used. Just a search with a sort. The returned documents are just sorted "by shards". In other words, the first 3 documents ar… --- ## [Error with Cisco module for filebeat](https://discuss.elastic.co/t/error-with-cisco-module-for-filebeat/233920)
**Author:** [@Nazarenko](https://discuss.elastic.co/u/Nazarenko)\ **Replies:** 1\ **Last updated:** [May 29, 2020, 12:12am UTC](https://discuss.elastic.co/t/error-with-cisco-module-for-filebeat/233920 "2020-05-29T00:12:38Z")
Hello everyone, i have problem with module cisco for filebeat. I get message from cisco devices, but in kibana i see this message: error.message GoError: could not find delimiter: : in remaining: User 'user1' authenti… --- ## [How do I avoid split brain in dual zone on 7.5?](https://discuss.elastic.co/t/how-do-i-avoid-split-brain-in-dual-zone-on-7-5/244297)
**Author:** [@Mill](https://discuss.elastic.co/u/Mill)\ **Replies:** 6\ **Last updated:** [August 10, 2020, 4:01pm UTC](https://discuss.elastic.co/t/how-do-i-avoid-split-brain-in-dual-zone-on-7-5/244297 "2020-08-10T16:01:51Z")
I have five servers in zone A and zone B each. So I can configure 3 master nodes in zone A and 2 master nodes in zone B a cluster. Or I can use a cluster of 3 master nodes in zone A and zone B, and set up a tribe node… --- ## [How to improve query speed](https://discuss.elastic.co/t/how-to-improve-query-speed/98118)
**Author:** [@adyjayex](https://discuss.elastic.co/u/adyjayex)\ **Replies:** 6\ **Last updated:** [August 24, 2017, 2:37pm UTC](https://discuss.elastic.co/t/how-to-improve-query-speed/98118 "2017-08-24T14:37:24Z")
Greetings, Any advice into how to improve query speed for a specific use case would be greatly appreciated! We currently have a cluster of 2 nodes (1 master and data, 1 data only), both running on AWS machines with the… --- ## [Logstash as windows service not reading log files](https://discuss.elastic.co/t/logstash-as-windows-service-not-reading-log-files/85455)
**Author:** [@lgopalakrishnan](https://discuss.elastic.co/u/lgopalakrishnan)\ **Replies:** 6\ **Last updated:** [May 12, 2017, 5:32pm UTC](https://discuss.elastic.co/t/logstash-as-windows-service-not-reading-log-files/85455 "2017-05-12T17:32:29Z")
Hello, I have logstash installed as a windows service and it is not reading the log files. When I run logstash from command prompt it works fine. Any help would be appreciated.. Thanks -Leelakrishnan --- ## [Access for specific user to specific APM service](https://discuss.elastic.co/t/access-for-specific-user-to-specific-apm-service/188883)
**Author:** [@kohanchik](https://discuss.elastic.co/u/kohanchik)\ **Replies:** 3\ **Last updated:** [July 12, 2019, 10:45am UTC](https://discuss.elastic.co/t/access-for-specific-user-to-specific-apm-service/188883 "2019-07-12T10:45:21Z")
Hello! I am using kibana-7.2.0 and I am wondering is there a way to grant access for specific Kibana user to view only one or several APM service? I managed to configure through the custom space so that in the user vie… --- ## [Is it possible to create two index for the same day using logstash templete](https://discuss.elastic.co/t/is-it-possible-to-create-two-index-for-the-same-day-using-logstash-templete/197022)
**Author:** [@RITZ\_VERMA](https://discuss.elastic.co/u/RITZ_VERMA)\ **Replies:** 7\ **Last updated:** [August 28, 2019, 6:14pm UTC](https://discuss.elastic.co/t/is-it-possible-to-create-two-index-for-the-same-day-using-logstash-templete/197022 "2019-08-28T18:14:49Z")
I am using logstash to send data elasticsearch on daily basis but the size of the indexes created is too large .that is why i want ot create two index for the same day.is it possible using logstash --- ## [How to populate body.html with multiple lines in watcher](https://discuss.elastic.co/t/how-to-populate-body-html-with-multiple-lines-in-watcher/159392)
**Author:** [@chaita30](https://discuss.elastic.co/u/chaita30)\ **Replies:** 1\ **Last updated:** [December 7, 2018, 9:05am UTC](https://discuss.elastic.co/t/how-to-populate-body-html-with-multiple-lines-in-watcher/159392 "2018-12-07T09:05:43Z")
Hi, I am trying to populate an email with embedded CSS and is spread across multiple lines. Watcher allows html body to be populated in one line. e.g. \"body": { "html": " Email Text" }\ I cannot present actual … --- ## [Centos 7.5 with rsyslog 8.24 / logstash 6.3.0 - on logstash output always severity code 5 and facility code 1 - Other post found on but still not solved](https://discuss.elastic.co/t/centos-7-5-with-rsyslog-8-24-logstash-6-3-0-on-logstash-output-always-severity-code-5-and-facility-code-1-other-post-found-on-but-still-not-solved/137206)
**Author:** [@pge](https://discuss.elastic.co/u/pge)\ **Replies:** 1\ **Last updated:** [July 17, 2018, 7:29am UTC](https://discuss.elastic.co/t/centos-7-5-with-rsyslog-8-24-logstash-6-3-0-on-logstash-output-always-severity-code-5-and-facility-code-1-other-post-found-on-but-still-not-solved/137206 "2018-07-17T07:29:31Z")
Hello, I´m a ELK beginner and from one week I'm working on strange problem. I installed one ELK test infrastructure based on Centos 7 (7.5.1804) and we have to send data to logstash (logstash-6.3.0-1) usysing rsyslog (… --- ## [Logstash - Report line Number on error](https://discuss.elastic.co/t/logstash-report-line-number-on-error/34866)
**Author:** [@Raggyman](https://discuss.elastic.co/u/Raggyman)\ **Replies:** 7\ **Last updated:** [November 18, 2015, 2:08am UTC](https://discuss.elastic.co/t/logstash-report-line-number-on-error/34866 "2015-11-18T02:08:31Z")
Becoming increasingly frustrated using Logstash for the simple need of a line number when there is an error occurs when reading the configuration. The move from 1.6 to 2.0 has been anything but painless. Error meanin… --- ## [Combine query string query and nested query](https://discuss.elastic.co/t/combine-query-string-query-and-nested-query/1465)
**Author:** [@frobfoo](https://discuss.elastic.co/u/frobfoo)\ **Replies:** 1\ **Last updated:** [May 29, 2015, 1:36pm UTC](https://discuss.elastic.co/t/combine-query-string-query-and-nested-query/1465 "2015-05-29T13:36:36Z")
Hello, I have the following (simplified) document/mapping: "mappings" : { "hotel" : { "properties" : { "name" : "string", "city" : "string", "tags" : { "type": "nested", "prope… --- ## [Error handling for HTTP search API](https://discuss.elastic.co/t/error-handling-for-http-search-api/23583)
**Author:** [@Snixtor](https://discuss.elastic.co/u/Snixtor)\ **Replies:** 7\ **Last updated:** [May 12, 2015, 1:14am UTC](https://discuss.elastic.co/t/error-handling-for-http-search-api/23583 "2015-05-12T01:14:18Z")
I have an application allowing users to specify the "query" value of a "query\_string" query. If the user inputs invalid search syntax, e.g. their search is only "AND" (an operator without any values), Elasticsearch … --- ## [MongoDb & ES: Where can I store timestamp for last updated document in ES?](https://discuss.elastic.co/t/mongodb-es-where-can-i-store-timestamp-for-last-updated-document-in-es/7407)
**Author:** [@bcoder](https://discuss.elastic.co/u/bcoder)\ **Replies:** 1\ **Last updated:** [April 20, 2012, 6:21am UTC](https://discuss.elastic.co/t/mongodb-es-where-can-i-store-timestamp-for-last-updated-document-in-es/7407 "2012-04-20T06:21:59Z")
Let me describe my scenario: I am using MongoDB as my primary db (we will host everything on AWS, and our database will be sharded), and want to use Elasticsearch to provide full-text support. I have various "types"… --- ## ["\[term\] query malformed, no start\_object after query name"](https://discuss.elastic.co/t/term-query-malformed-no-start-object-after-query-name/275275)
**Author:** [@SeanO95](https://discuss.elastic.co/u/SeanO95)\ **Replies:** 0\ **Last updated:** [June 8, 2021, 9:38am UTC](https://discuss.elastic.co/t/term-query-malformed-no-start-object-after-query-name/275275 "2021-06-08T09:38:44Z")
Hey guys, seeing 'query malformed' no matter what field I try to use. I am trying to use postman to input data for my GET to pull back but seeing this issue. If I use postman to input data into my POST using the same m… --- ## [Logstash & VirusTotal lookup](https://discuss.elastic.co/t/logstash-virustotal-lookup/212858)
**Author:** [@gamarue](https://discuss.elastic.co/u/gamarue)\ **Replies:** 0\ **Last updated:** [December 23, 2019, 3:05pm UTC](https://discuss.elastic.co/t/logstash-virustotal-lookup/212858 "2019-12-23T15:05:09Z")
Hi, We're currently building an ELK instance which has the purpose to nicely show forensic level data by reading data from a file and outputting to an elasticsearch instance. In that data which we have, there's a subse… --- ## [Elasticsearch v8 Java API client search with filter (not postFilter)](https://discuss.elastic.co/t/elasticsearch-v8-java-api-client-search-with-filter-not-postfilter/315823)
**Author:** [@ijaxahmed](https://discuss.elastic.co/u/ijaxahmed)\ **Replies:** 2\ **Last updated:** [October 5, 2022, 10:02am UTC](https://discuss.elastic.co/t/elasticsearch-v8-java-api-client-search-with-filter-not-postfilter/315823 "2022-10-05T10:02:25Z")
I wanted to replace postFilter with filter in the search, but not sure how to because Query has "query.postFilter(postFilters) " method but nothing as ".filter(filters) " . Current implementations is like , Creating Que… --- ## [Can max document size for Json plugin be increased? Seems to be 32768 now](https://discuss.elastic.co/t/can-max-document-size-for-json-plugin-be-increased-seems-to-be-32768-now/300227)
**Author:** [@paulov](https://discuss.elastic.co/u/paulov)\ **Replies:** 2\ **Last updated:** [March 23, 2022, 8:44pm UTC](https://discuss.elastic.co/t/can-max-document-size-for-json-plugin-be-increased-seems-to-be-32768-now/300227 "2022-03-23T20:44:26Z")
When using a Json filter in a logstash pipeline, I run into a size problem. I get an error indicating a max size of 32769 (2^15): :exception=\>#\ **Author:** [@Ubeta](https://discuss.elastic.co/u/Ubeta)\ **Replies:** 2\ **Last updated:** [June 25, 2020, 1:13am UTC](https://discuss.elastic.co/t/unable-to-connect-my-java-application-to-the-elastic-stack-instance/238430 "2020-06-25T01:13:03Z") Hi! I have set up my Elastic Cloud Service through Google Cloud and have set up an Elastic Search Instance. I can upload my data to Elastic search and query my data just fine. However, when I try to connect to the Elas… --- ## [Can the ES client wait until the ES server hostname resolves?](https://discuss.elastic.co/t/can-the-es-client-wait-until-the-es-server-hostname-resolves/54068)
**Author:** [@KajMagnus](https://discuss.elastic.co/u/KajMagnus)\ **Replies:** 2\ **Last updated:** [June 27, 2016, 9:15pm UTC](https://discuss.elastic.co/t/can-the-es-client-wait-until-the-es-server-hostname-resolves/54068 "2016-06-27T21:15:38Z")
Hi, I'm using Elasticsearch (ES) and Docker-Compose. Sometimes the ES Docker Container hasn't yet started, when my main container (the one that runs my code and connects to ES) starts. Then InetAddress.getByName("search"… --- ## [Filebeat Elasticsearch output data stream?](https://discuss.elastic.co/t/filebeat-elasticsearch-output-data-stream/371562)
**Author:** [@Kosmodrom](https://discuss.elastic.co/u/Kosmodrom)\ **Replies:** 4\ **Last updated:** [December 6, 2024, 2:54pm UTC](https://discuss.elastic.co/t/filebeat-elasticsearch-output-data-stream/371562 "2024-12-06T14:54:18Z")
Hi folks, do I understand right? For filebeat there is still no option to define data stream in the elasticsearch output like so: output.elasticsearch: hosts: \["https://elastic-cloud-endpoint.com:9243"\] user… --- ## [Check if substring exist in array of strings](https://discuss.elastic.co/t/check-if-substring-exist-in-array-of-strings/196296)
**Author:** [@mattia\_conversano](https://discuss.elastic.co/u/mattia_conversano)\ **Replies:** 4\ **Last updated:** [August 22, 2019, 12:54pm UTC](https://discuss.elastic.co/t/check-if-substring-exist-in-array-of-strings/196296 "2019-08-22T12:54:41Z")
Hi Team, I have a problem with an array of strings, my goal is to detect if this string: attack-sqli exist in array like this: "audit\_data":{ "messages":\[ "Warning. detected XSS using libinjection. \[fi… [Previous page](https://discuss.elastic.co/top.md?page=1205&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1207&per_page=50&period=all)