# Top **URL:** https://discuss.elastic.co/top.md?page=1208&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1209 --- ## [Filebeat fails to process kibana json logs “failed to format message from \*json-.log “in a docker enviroment with logstash](https://discuss.elastic.co/t/filebeat-fails-to-process-kibana-json-logs-failed-to-format-message-from-json-log-in-a-docker-enviroment-with-logstash/278295)
**Author:** [@Annette1](https://discuss.elastic.co/u/Annette1)\ **Replies:** 7\ **Last updated:** [July 14, 2021, 11:40am UTC](https://discuss.elastic.co/t/filebeat-fails-to-process-kibana-json-logs-failed-to-format-message-from-json-log-in-a-docker-enviroment-with-logstash/278295 "2021-07-14T11:40:32Z")
Problem description - since I have installed logstash I am seeing the following in kibana logs - failed to format message from /var/lib/docker/.containers/xxx-json.log If I remove logstash and send directly through ela… --- ## [Percentage Calculation in kibana](https://discuss.elastic.co/t/percentage-calculation-in-kibana/245090)
**Author:** [@Ramadevi](https://discuss.elastic.co/u/Ramadevi)\ **Replies:** 7\ **Last updated:** [August 18, 2020, 3:52pm UTC](https://discuss.elastic.co/t/percentage-calculation-in-kibana/245090 "2020-08-18T15:52:31Z")
Hi Team, Our goal is to build table in the below format Marketing Operating Count Total AF FL Total(%) AF(%) FL(%) UA UA 9415 24 17 7 0.25 0.18 0.07 UA LH 47 6 6 0 12.77 12.77 0 We are able to create below… --- ## [Logstash whitelist nestet json objects, filter only specific fields](https://discuss.elastic.co/t/logstash-whitelist-nestet-json-objects-filter-only-specific-fields/151216)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 1\ **Last updated:** [October 23, 2018, 4:37am UTC](https://discuss.elastic.co/t/logstash-whitelist-nestet-json-objects-filter-only-specific-fields/151216 "2018-10-23T04:37:42Z")
I cant filter out nestet json objects I tried to implement network packets analysis. The result has too-many fields and I want to filter out only messages having content "http\_http\_file\_data" and import only specific f… --- ## [Upgrade 5.2 \> 6.x](https://discuss.elastic.co/t/upgrade-5-2-6-x/112653)
**Author:** [@Olfax](https://discuss.elastic.co/u/Olfax)\ **Replies:** 1\ **Last updated:** [December 21, 2017, 1:02am UTC](https://discuss.elastic.co/t/upgrade-5-2-6-x/112653 "2017-12-21T01:02:01Z")
Hi, When I try to update my project in ELS 1.6. I am encountering a problem : IllegalArgumentException("mapping source must be pairs of fieldnames and properties definition."); I try something easy as describe on http… --- ## [Magnitude scaling on yaxis without specific unit](https://discuss.elastic.co/t/magnitude-scaling-on-yaxis-without-specific-unit/111869)
**Author:** [@mtherreault](https://discuss.elastic.co/u/mtherreault)\ **Replies:** 1\ **Last updated:** [December 15, 2017, 8:37am UTC](https://discuss.elastic.co/t/magnitude-scaling-on-yaxis-without-specific-unit/111869 "2017-12-15T08:37:21Z")
To avoid having too big unreadable numbers, is it possible with a timelion graph with the numbers on the yaxis to scale with an order of magnitude unit but without any specific unit qualifier? For example, when using ya… --- ## [Index name prefix/suffix](https://discuss.elastic.co/t/index-name-prefix-suffix/71348)
**Author:** [@olee](https://discuss.elastic.co/u/olee)\ **Replies:** 1\ **Last updated:** [January 13, 2017, 10:06am UTC](https://discuss.elastic.co/t/index-name-prefix-suffix/71348 "2017-01-13T10:06:16Z")
Hi, I would like to use NEST and have my index names automatically prefixed with something like "dev\_" for handling different environments. Is there a way to do this directly in NEST through some kind of hook or connecti… --- ## [Unable to resolve class Number from Groovy script](https://discuss.elastic.co/t/unable-to-resolve-class-number-from-groovy-script/69307)
**Author:** [@ivank](https://discuss.elastic.co/u/ivank)\ **Replies:** 1\ **Last updated:** [December 16, 2016, 7:16pm UTC](https://discuss.elastic.co/t/unable-to-resolve-class-number-from-groovy-script/69307 "2016-12-16T19:16:49Z")
Hi, guys! I'm developing plugin for Elasticsearch 2.3 which does simple conversion of found documents for search client. This plugin uses Groovy scripts which does this conversion. I'm faced with curious problem: for e… --- ## [Elasticsearch-curator - Deleting indices which are older than an hour](https://discuss.elastic.co/t/elasticsearch-curator-deleting-indices-which-are-older-than-an-hour/48163)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 1\ **Last updated:** [May 13, 2016, 7:29pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-deleting-indices-which-are-older-than-an-hour/48163 "2016-05-13T19:29:18Z")
I am having some indices in elasticsearch whose naming format is elk-console-YYYY-MM-DDtHH. For example:- elk-console-2016-03-30t14 elk-console-2016-03-30t16 I want to delete all indices which are more than 1 hour old… --- ## [Invalid transaction names in APM UI with Java Agent](https://discuss.elastic.co/t/invalid-transaction-names-in-apm-ui-with-java-agent/170536)
**Author:** [@remmeier](https://discuss.elastic.co/u/remmeier)\ **Replies:** 3\ **Last updated:** [March 5, 2019, 3:57pm UTC](https://discuss.elastic.co/t/invalid-transaction-names-in-apm-ui-with-java-agent/170536 "2019-03-05T15:57:25Z")
Kibana version: 6.6.1 Elasticsearch version: 6.6.1 APM Server version: 6.6.1 APM Agent language and version: Java, 1.4.0 Browser version: firefox, chrome Original install method (e.g. download page, yum, deb, f… --- ## [Setting \`congestion\_threshold\` in plugin \`beats\` --getting below error any solution to fix this](https://discuss.elastic.co/t/setting-congestion-threshold-in-plugin-beats-getting-below-error-any-solution-to-fix-this/166853)
**Author:** [@rajesh123vit](https://discuss.elastic.co/u/rajesh123vit)\ **Replies:** 3\ **Last updated:** [February 3, 2019, 5:29pm UTC](https://discuss.elastic.co/t/setting-congestion-threshold-in-plugin-beats-getting-below-error-any-solution-to-fix-this/166853 "2019-02-03T17:29:41Z")
sudo -u logstash /usr/share/logstash/bin/logstash --path.settings /etc/logstash -t Sending Logstash logs to /var/log/logstash which is now configured via log4j2.properties \[2019-02-03T11:55:15,766\]\[FATAL\]\[logstash.runn… --- ## [Clustered bar charts](https://discuss.elastic.co/t/clustered-bar-charts/119899)
**Author:** [@GShetty](https://discuss.elastic.co/u/GShetty)\ **Replies:** 3\ **Last updated:** [March 7, 2018, 12:18am UTC](https://discuss.elastic.co/t/clustered-bar-charts/119899 "2018-03-07T00:18:36Z")
I am trying to create a clustered bar chart to analyse the memory usage as below but unable to build it - \[image\]! Here is the input file - {"index":{"\_index":"DD\_9","\_id":0}} {"MEM": {"total":4056828, "used":3097068… --- ## [Want to run multiple logstash instances in single machine](https://discuss.elastic.co/t/want-to-run-multiple-logstash-instances-in-single-machine/82805)
**Author:** [@Raja1](https://discuss.elastic.co/u/Raja1)\ **Replies:** 3\ **Last updated:** [April 20, 2017, 8:51am UTC](https://discuss.elastic.co/t/want-to-run-multiple-logstash-instances-in-single-machine/82805 "2017-04-20T08:51:38Z")
Hi, I am able to integrate kafka with logstash and then able to see the logs in kafka.Now i want to parse the logs from kafka to elasticsearch thru logstash by using same machine. Can someone please guide me how to u… --- ## [Please help with Grok pattern splitting out a filename](https://discuss.elastic.co/t/please-help-with-grok-pattern-splitting-out-a-filename/82591)
**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\ **Replies:** 3\ **Last updated:** [April 18, 2017, 7:34am UTC](https://discuss.elastic.co/t/please-help-with-grok-pattern-splitting-out-a-filename/82591 "2017-04-18T07:34:37Z")
One of these days I'll learn regex. I have the following filename PE-run1000hbgmm3f1-job1000hbgmm3dt-Output-Workflow-1000hbgmm3fb-22.07.17.log I'm able to get this to work so... (?\\[^-\]+)-(?\\[^-\]+)… --- ## [Tile Map highlighting the entire country](https://discuss.elastic.co/t/tile-map-highlighting-the-entire-country/66732)
**Author:** [@Hans](https://discuss.elastic.co/u/Hans)\ **Replies:** 3\ **Last updated:** [November 25, 2016, 6:41pm UTC](https://discuss.elastic.co/t/tile-map-highlighting-the-entire-country/66732 "2016-11-25T18:41:07Z")
Hi, I would like to find out how to highlight an entire country as Heatmap. I would like to have one detailed map with exact geo information from the IP address however then I would like to have an overview of which coun… --- ## [Error: org.codehaus.groovy.reflection.CachedMethod can not access a member of class groovy.lang.Closure](https://discuss.elastic.co/t/error-org-codehaus-groovy-reflection-cachedmethod-can-not-access-a-member-of-class-groovy-lang-closure/60544)
**Author:** [@srikanthjeeva](https://discuss.elastic.co/u/srikanthjeeva)\ **Replies:** 3\ **Last updated:** [September 14, 2016, 11:09pm UTC](https://discuss.elastic.co/t/error-org-codehaus-groovy-reflection-cachedmethod-can-not-access-a-member-of-class-groovy-lang-closure/60544 "2016-09-14T23:09:12Z")
I'm trying to execute this groovy script: Working script in Groovy Console: def m1 = \[ a:\[1, 1, 1\], b:\[1, 1, 1\], d:\[1,1,1\] \] def m2 = \[ b:\[1, 1, 1\], c:\[1, 1, 1\] \] def newMap = \[m1,m2\]\*.keySet().flatten().unique().c… --- ## [Number Format Exception when parsing mac address from Netflow](https://discuss.elastic.co/t/number-format-exception-when-parsing-mac-address-from-netflow/54192)
**Author:** [@Fidel\_Netflow](https://discuss.elastic.co/u/Fidel_Netflow)\ **Replies:** 3\ **Last updated:** [June 29, 2016, 4:52pm UTC](https://discuss.elastic.co/t/number-format-exception-when-parsing-mac-address-from-netflow/54192 "2016-06-29T16:52:29Z")
Hi, I am receiving the following error when trying to index netflow records: "error"=\>{"type"=\>"mapper\_parsing\_exception", "reason"=\>"failed to parse \[netflow.staMacAddress\]", "caused\_by"=\>{"type"=\>"number\_format\_excep… --- ## [Elasticsearch in a dedicated server](https://discuss.elastic.co/t/elasticsearch-in-a-dedicated-server/12189)
**Author:** [@Ernesto\_Reig](https://discuss.elastic.co/u/Ernesto_Reig)\ **Replies:** 3\ **Last updated:** [May 31, 2013, 8:16am UTC](https://discuss.elastic.co/t/elasticsearch-in-a-dedicated-server/12189 "2013-05-31T08:16:34Z")
Hello, We have decided to put elasticsearch in a dedicated server (one machine), and we are wondering what the best (or a good) configuration should be: - Does it make sense to create a cluster if we have only one m… --- ## [Possible Feature Request: Redis Authentication with Username/Password](https://discuss.elastic.co/t/possible-feature-request-redis-authentication-with-username-password/340349)
**Author:** [@alces](https://discuss.elastic.co/u/alces)\ **Replies:** 0\ **Last updated:** [August 8, 2023, 9:25am UTC](https://discuss.elastic.co/t/possible-feature-request-redis-authentication-with-username-password/340349 "2023-08-08T09:25:01Z")
Hi everyone. We are planing to use redis between beats and logstash as a buffer for high utilization timespots. In this setup currently there is only a "password" option for the redis output/input plugin, so every part… --- ## [How to filter data despite the spelling mistake and according to the max gap between passed words](https://discuss.elastic.co/t/how-to-filter-data-despite-the-spelling-mistake-and-according-to-the-max-gap-between-passed-words/208092)
**Author:** [@akhut13](https://discuss.elastic.co/u/akhut13)\ **Replies:** 0\ **Last updated:** [November 15, 2019, 2:33pm UTC](https://discuss.elastic.co/t/how-to-filter-data-despite-the-spelling-mistake-and-according-to-the-max-gap-between-passed-words/208092 "2019-11-15T14:33:16Z")
If I have these two strings: George Orwell is my favorite writer My favorite writers name is George, who was born in 1903 and whose last name is Orwell Here's the criteria that i would like to apply to my search when … --- ## [Strange authentication error](https://discuss.elastic.co/t/strange-authentication-error/328385)
**Author:** [@PTLyon](https://discuss.elastic.co/u/PTLyon)\ **Replies:** 2\ **Last updated:** [March 23, 2023, 7:59pm UTC](https://discuss.elastic.co/t/strange-authentication-error/328385 "2023-03-23T19:59:12Z")
Hello, I have been running the ELK stack 8.6.2 for a month now with no problems, but I had security disabled. Today I attempted to enable security following this documentation: https://www.elastic.co/guide/en/elasticse… --- ## [How to calculate read/write throughput at cluster level?](https://discuss.elastic.co/t/how-to-calculate-read-write-throughput-at-cluster-level/278775)
**Author:** [@Bhagwati\_Malav](https://discuss.elastic.co/u/Bhagwati_Malav)\ **Replies:** 2\ **Last updated:** [July 15, 2021, 12:35pm UTC](https://discuss.elastic.co/t/how-to-calculate-read-write-throughput-at-cluster-level/278775 "2021-07-15T12:35:44Z")
I am working on designing es cluster with below given setup master nodes 3 (m5.a large) 2vcpu, 8gb data nodes 2 (m5.ax large) 4vcpu, 16 gb Keeping default elastic configuration currently. read thread pool - 7 write … --- ## [Pin filter in a specific dashboard](https://discuss.elastic.co/t/pin-filter-in-a-specific-dashboard/257199)
**Author:** [@yaelg](https://discuss.elastic.co/u/yaelg)\ **Replies:** 2\ **Last updated:** [December 9, 2020, 8:29am UTC](https://discuss.elastic.co/t/pin-filter-in-a-specific-dashboard/257199 "2020-12-09T08:29:55Z")
Hey everyone, I'm quite new to ELK so my question might be trivial. I am working with multiple dashboards. Is there a way to pin a filter only in one dashboards? whenever I pin a filter, it applies it to all dashboards… --- ## [See full log file in ELK?](https://discuss.elastic.co/t/see-full-log-file-in-elk/188139)
**Author:** [@Shay\_Berman](https://discuss.elastic.co/u/Shay_Berman)\ **Replies:** 2\ **Last updated:** [June 29, 2019, 3:46pm UTC](https://discuss.elastic.co/t/see-full-log-file-in-elk/188139 "2019-06-29T15:46:21Z")
I setup ELK and it works great. you can see all the logs of the containers that running in the k8s cluster. But how can I see in kubana or with logstash query all the record that related to specific container? and i wan… --- ## [What's COUNT in Kibana Discovery tab?](https://discuss.elastic.co/t/whats-count-in-kibana-discovery-tab/175376)
**Author:** [@Prabhav](https://discuss.elastic.co/u/Prabhav)\ **Replies:** 2\ **Last updated:** [April 5, 2019, 2:58pm UTC](https://discuss.elastic.co/t/whats-count-in-kibana-discovery-tab/175376 "2019-04-05T14:58:48Z")
Hi! I am pretty new to ELK stack and was exploring the application for my project. I uploaded a CSV file using logstash and went straight to the discovery tab in Kibana, where a Histogram was already plotted, can someo… --- ## [How to multiply two columns and then sum the result in ElasticSQL?](https://discuss.elastic.co/t/how-to-multiply-two-columns-and-then-sum-the-result-in-elasticsql/167201)
**Author:** [@Miguel\_Plazas](https://discuss.elastic.co/u/Miguel_Plazas)\ **Replies:** 2\ **Last updated:** [February 7, 2019, 9:26pm UTC](https://discuss.elastic.co/t/how-to-multiply-two-columns-and-then-sum-the-result-in-elasticsql/167201 "2019-02-07T21:26:06Z")
Hi I would like to subtrac one value to one column, then multiply two columns, and finally sum the result: SELECT SUM(column\_a\*(column\_b-1)) AS result FROM table\_1 WHERE column\_c='G' AND column\_d='H' AND column\_b\>1.00 b… --- ## [Registering S3 Repo with AWS ElasticSearch Service](https://discuss.elastic.co/t/registering-s3-repo-with-aws-elasticsearch-service/138297)
**Author:** [@ninjada](https://discuss.elastic.co/u/ninjada)\ **Replies:** 2\ **Last updated:** [July 3, 2018, 3:21am UTC](https://discuss.elastic.co/t/registering-s3-repo-with-aws-elasticsearch-service/138297 "2018-07-03T03:21:14Z")
Not sure this is the right place, but i've migrated the elasticsearch portion of my existing ELK stack from individual EC2 nodes, onto AWS Elasticsearch Service. My previous Elasticsearch cluster had automated backups w… --- ## [How do the influencers work or do they impact on the anomaly score?](https://discuss.elastic.co/t/how-do-the-influencers-work-or-do-they-impact-on-the-anomaly-score/101876)
**Author:** [@rockybean](https://discuss.elastic.co/u/rockybean)\ **Replies:** 2\ **Last updated:** [October 2, 2017, 1:35pm UTC](https://discuss.elastic.co/t/how-do-the-influencers-work-or-do-they-impact-on-the-anomaly-score/101876 "2017-10-02T13:35:55Z")
According to Machine Learning Lab2 Section 15, the key field can impact on the final anomaly score like partition field. I'm confused about this. If key field works like partition field, then why does it exist? Can an… --- ## [Unable to set index.merge.scheduler.max\_thread\_count](https://discuss.elastic.co/t/unable-to-set-index-merge-scheduler-max-thread-count/101161)
**Author:** [@itplayer](https://discuss.elastic.co/u/itplayer)\ **Replies:** 2\ **Last updated:** [September 21, 2017, 9:43am UTC](https://discuss.elastic.co/t/unable-to-set-index-merge-scheduler-max-thread-count/101161 "2017-09-21T09:43:38Z")
According to official document said, if we unfortunately still use spin disk, we should set this value to 1. I used to be set this in elasticsearch.yml but not luck in v5.4 I know this setting has been move to index le… --- ## [Tuning merge policy for large number of updates](https://discuss.elastic.co/t/tuning-merge-policy-for-large-number-of-updates/53715)
**Author:** [@mkelkar](https://discuss.elastic.co/u/mkelkar)\ **Replies:** 2\ **Last updated:** [June 23, 2016, 3:02pm UTC](https://discuss.elastic.co/t/tuning-merge-policy-for-large-number-of-updates/53715 "2016-06-23T15:02:41Z")
Hi All, I am using ES 1.7.3. In my cluster I have a large number of updates daily. Ever since we switched from ES 1.3.9 to ES 1.7.3, we are starting to notice about 150% more disk usage as these updates happen. I l… --- ## [Multiple Webhook](https://discuss.elastic.co/t/multiple-webhook/267178)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 4\ **Last updated:** [March 14, 2021, 2:37pm UTC](https://discuss.elastic.co/t/multiple-webhook/267178 "2021-03-14T14:37:58Z")
Hi I want to make an alert(watcher) with multiple action. For example, I need to call more than two hosts(with different path and port) so I need to use my\_webhook according to the bellow page: "actions" : { "my\_we… --- ## [Kibana Fleet shows Self Signed Certificate in Certificate Chain](https://discuss.elastic.co/t/kibana-fleet-shows-self-signed-certificate-in-certificate-chain/297947)
**Author:** [@SwampyFox](https://discuss.elastic.co/u/SwampyFox)\ **Replies:** 1\ **Last updated:** [March 1, 2022, 4:13pm UTC](https://discuss.elastic.co/t/kibana-fleet-shows-self-signed-certificate-in-certificate-chain/297947 "2022-03-01T16:13:17Z")
I have just run through the Elasticstack 8 instructions on Docker and have been able to get Elastic and Kibana up. However, when I click on Fleet in kibana, I get a message: "Error connecting to package registry...Reaso… --- ## [Csv response from Dev tool search query](https://discuss.elastic.co/t/csv-response-from-dev-tool-search-query/254744)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 1\ **Last updated:** [November 9, 2020, 12:30pm UTC](https://discuss.elastic.co/t/csv-response-from-dev-tool-search-query/254744 "2020-11-09T12:30:45Z")
Hi All, Is there a way to get csv response from Get Search call. We are able to get json response, However our requirement is to get response in csv format. --- ## [Unable to decode gzip compressed http response from Packetbeat file output](https://discuss.elastic.co/t/unable-to-decode-gzip-compressed-http-response-from-packetbeat-file-output/187382)
**Author:** [@Mark\_Ryder](https://discuss.elastic.co/u/Mark_Ryder)\ **Replies:** 1\ **Last updated:** [June 26, 2019, 7:15pm UTC](https://discuss.elastic.co/t/unable-to-decode-gzip-compressed-http-response-from-packetbeat-file-output/187382 "2019-06-26T19:15:27Z")
We are currently trying to capture SOAP request and response body content using Packetbeat 7.1.1 (As shown in in screenshot - PacketbeatOutputConfig). Packetbeat is configured to output to file (as shown in screenshot up… --- ## [Elasticsearch-Monitor multiple clusters from single kibana](https://discuss.elastic.co/t/elasticsearch-monitor-multiple-clusters-from-single-kibana/155997)
**Author:** [@muthucse](https://discuss.elastic.co/u/muthucse)\ **Replies:** 1\ **Last updated:** [November 9, 2018, 8:30am UTC](https://discuss.elastic.co/t/elasticsearch-monitor-multiple-clusters-from-single-kibana/155997 "2018-11-09T08:30:42Z")
With 6.2 Elastic version how to have single kibana instance to monitor multiple elastic clusters. Cluster-1: Production Application cluster. Cluster-2: Log cluster Need to monitor both the cluster's using single kiban… --- ## [Filebeat include\_lines performance v.s. grep](https://discuss.elastic.co/t/filebeat-include-lines-performance-v-s-grep/151751)
**Author:** [@dontscrambleme](https://discuss.elastic.co/u/dontscrambleme)\ **Replies:** 1\ **Last updated:** [October 12, 2018, 5:36pm UTC](https://discuss.elastic.co/t/filebeat-include-lines-performance-v-s-grep/151751 "2018-10-12T17:36:28Z")
I use filebeat to harvest lines including keywords and send it to logstash for post processing. But the time filebeat searching for the string is much longer than running grep in Ubuntu shell I don't have number to sh… --- ## [Merge 2 dashboards into 1 Common Dashboard](https://discuss.elastic.co/t/merge-2-dashboards-into-1-common-dashboard/90848)
**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\ **Replies:** 1\ **Last updated:** [June 26, 2017, 9:26pm UTC](https://discuss.elastic.co/t/merge-2-dashboards-into-1-common-dashboard/90848 "2017-06-26T21:26:53Z")
Is there a way to display 2 different dashboards under a single screen as a common dashboard. There are 2 different dashboards created for 2 different project collection. From my business stand point both comes under the… --- ## [Jdbc add field](https://discuss.elastic.co/t/jdbc-add-field/76899)
**Author:** [@Greentea](https://discuss.elastic.co/u/Greentea)\ **Replies:** 1\ **Last updated:** [March 1, 2017, 2:52am UTC](https://discuss.elastic.co/t/jdbc-add-field/76899 "2017-03-01T02:52:19Z")
Hi! I am trying to add field in to a type by using if statement. But logstash report error \[LogStash::Runner\] ERROR logstash.agent - fetched an invalid config Here is my filter part filter { if \[type\]=product{ mutat… --- ## [ElasticSearch always gets stuck at particular shard recovery](https://discuss.elastic.co/t/elasticsearch-always-gets-stuck-at-particular-shard-recovery/38431)
**Author:** [@Omar\_Al\_Zabir](https://discuss.elastic.co/u/Omar_Al_Zabir)\ **Replies:** 1\ **Last updated:** [January 6, 2016, 1:25am UTC](https://discuss.elastic.co/t/elasticsearch-always-gets-stuck-at-particular-shard-recovery/38431 "2016-01-06T01:25:39Z")
I was trying to perform an expensive query. During the query run I saw heap was getting to 100% and I received "Gateway timeout" error messages from Kibana. After that the cluster became unresponsive to any query for qui… --- ## [How to set client.transport to TRACE](https://discuss.elastic.co/t/how-to-set-client-transport-to-trace/28264)
**Author:** [@gmu3](https://discuss.elastic.co/u/gmu3)\ **Replies:** 1\ **Last updated:** [September 22, 2015, 5:45pm UTC](https://discuss.elastic.co/t/how-to-set-client-transport-to-trace/28264 "2015-09-22T17:45:21Z")
How do I set the logging level for client.transport to TRACE in the java api? I've tried passing in the immutable settings with .put("client.transport", "TRACE") and it doesn't seem to have an effect. It doesn't see… --- ## [File output plugin add some additional field in output file](https://discuss.elastic.co/t/file-output-plugin-add-some-additional-field-in-output-file/130965)
**Author:** [@adg](https://discuss.elastic.co/u/adg)\ **Replies:** 6\ **Last updated:** [May 8, 2018, 12:13pm UTC](https://discuss.elastic.co/t/file-output-plugin-add-some-additional-field-in-output-file/130965 "2018-05-08T12:13:19Z")
i m having a issue with logstash i m getting logs from multiple remote server via filebeat (INPUT) use csv filter (FILTER) and put it in elasticsearch & file the issue is logs which is stored in file having two ex… --- ## [Aggregation: find time-window with the maximum documents](https://discuss.elastic.co/t/aggregation-find-time-window-with-the-maximum-documents/126742)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 6\ **Last updated:** [April 9, 2018, 6:07pm UTC](https://discuss.elastic.co/t/aggregation-find-time-window-with-the-maximum-documents/126742 "2018-04-09T18:07:38Z")
Given a time-serie of events, by day, I want to know the "hour:minute" which has the maximum of documents. Ex. document: { "date" : "...", "event" : "search" } I have tried to follow https://www.elastic.co/blog/impleme… --- ## [ElasticSearch - docs deleted count reduced](https://discuss.elastic.co/t/elasticsearch-docs-deleted-count-reduced/196729)
**Author:** [@moni15moni](https://discuss.elastic.co/u/moni15moni)\ **Replies:** 4\ **Last updated:** [August 28, 2019, 11:08am UTC](https://discuss.elastic.co/t/elasticsearch-docs-deleted-count-reduced/196729 "2019-08-28T11:08:03Z")
Hi For debugging I have checked one of currently writing indices shows the following results 4 days before the following response i got health status index … --- ## [SearchError](https://discuss.elastic.co/t/searcherror/174153)
**Author:** [@hzarrabi](https://discuss.elastic.co/u/hzarrabi)\ **Replies:** 4\ **Last updated:** [April 9, 2019, 2:24pm UTC](https://discuss.elastic.co/t/searcherror/174153 "2019-04-09T14:24:03Z")
Hi, I'm using ELK "6.6.1", everything seems fine but sometimes I've the following error on top of Kibana interface. Any help is appreciated. Best Regard SearchError: unknown error at http://xxx.xxx.xxx.xxx:5601/b… --- ## [Need program variables from config file](https://discuss.elastic.co/t/need-program-variables-from-config-file/51300)
**Author:** [@billzy](https://discuss.elastic.co/u/billzy)\ **Replies:** 4\ **Last updated:** [May 31, 2016, 7:47am UTC](https://discuss.elastic.co/t/need-program-variables-from-config-file/51300 "2016-05-31T07:47:35Z")
I'm using logstash as output method for packetbeat and I want to filter transactions in logstash, for example, I received 3 packets described as below packet A is from 192.168.0.3 to 192.168.0.4 packet B is from 192.16… --- ## [Problem with "long" type field](https://discuss.elastic.co/t/problem-with-long-type-field/23458)
**Author:** [@Stabaoc](https://discuss.elastic.co/u/Stabaoc)\ **Replies:** 4\ **Last updated:** [April 29, 2015, 1:56pm UTC](https://discuss.elastic.co/t/problem-with-long-type-field/23458 "2015-04-29T13:56:35Z")
I meet a problem . When I index an value , for example {"id": -8848340816900692111}, then i search it ,it shows that "id": -8848340816900692000. Anyone can help? I want know why does elasticsearch do this and how ca… --- ## [(2021) Can't cURL 9200 from some hosts in network](https://discuss.elastic.co/t/2021-cant-curl-9200-from-some-hosts-in-network/260388)
**Author:** [@brett.b](https://discuss.elastic.co/u/brett.b)\ **Replies:** 8\ **Last updated:** [January 18, 2021, 3:54pm UTC](https://discuss.elastic.co/t/2021-cant-curl-9200-from-some-hosts-in-network/260388 "2021-01-18T15:54:35Z")
Hello everyone, I have seen this question posted in other ways, but a lot of them were about Elasticsearch inside of a docker container. I hope this question is not truly a duplicate. My situation is that I have a DMZ … --- ## [Troubles Displaying Geo Points on a Map](https://discuss.elastic.co/t/troubles-displaying-geo-points-on-a-map/227195)
**Author:** [@nfsouzaj](https://discuss.elastic.co/u/nfsouzaj)\ **Replies:** 8\ **Last updated:** [April 9, 2020, 4:20pm UTC](https://discuss.elastic.co/t/troubles-displaying-geo-points-on-a-map/227195 "2020-04-09T16:20:04Z")
Hello, I am trying to use maps initially to show geo points correlated to airports which is now static data but that in future I want somehow connect to my application health endpoints. To create my map the following s… --- ## [New Elasticsearch installation and initial index pattern - what is it related to?](https://discuss.elastic.co/t/new-elasticsearch-installation-and-initial-index-pattern-what-is-it-related-to/108357)
**Author:** [@przemolb](https://discuss.elastic.co/u/przemolb)\ **Replies:** 8\ **Last updated:** [November 22, 2017, 8:21am UTC](https://discuss.elastic.co/t/new-elasticsearch-installation-and-initial-index-pattern-what-is-it-related-to/108357 "2017-11-22T08:21:08Z")
Hello, I am new in Elasticsearch world so please forgive my ignorance. I have just finished new ELK installation and after logging in to Kibana it is asking me for "index pattern". If I have 10 hosts shipping their logs… --- ## [Best approch to collect log files to elasticsearch in AIX OS](https://discuss.elastic.co/t/best-approch-to-collect-log-files-to-elasticsearch-in-aix-os/245859)
**Author:** [@renu\_jessi](https://discuss.elastic.co/u/renu_jessi)\ **Replies:** 3\ **Last updated:** [August 22, 2020, 5:40am UTC](https://discuss.elastic.co/t/best-approch-to-collect-log-files-to-elasticsearch-in-aix-os/245859 "2020-08-22T05:40:41Z")
Hi all, Iam working on elastic stack.I need to collect logs from files to create index in elasticsearch.as i can see beats and jdk dont have support in aix os.so filebeat and logstash isn't workout it seems. can u pls … --- ## [Heartbeat is crashing due to High Availability Cluster Communication](https://discuss.elastic.co/t/heartbeat-is-crashing-due-to-high-availability-cluster-communication/181588)
**Author:** [@iamyogesh](https://discuss.elastic.co/u/iamyogesh)\ **Replies:** 3\ **Last updated:** [May 20, 2019, 7:33am UTC](https://discuss.elastic.co/t/heartbeat-is-crashing-due-to-high-availability-cluster-communication/181588 "2019-05-20T07:33:40Z")
For confirmed bugs, please report: Version: heartbeat 5.4.3, elasticsearch 4 node cluster with version 6.3.2 Operating System: heartbeat installed on ubuntu 18.04, elasticsearch cluster centos 7 Discuss Forum URL: hea… [Previous page](https://discuss.elastic.co/top.md?page=1207&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1209&per_page=50&period=all)