# Top **URL:** https://discuss.elastic.co/top.md?page=1211&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1212 --- ## [Elasticsearch appears to be unreachable or down!](https://discuss.elastic.co/t/elasticsearch-appears-to-be-unreachable-or-down/131986)
**Author:** [@akml\_kk](https://discuss.elastic.co/u/akml_kk)\ **Replies:** 1\ **Last updated:** [May 15, 2018, 8:44pm UTC](https://discuss.elastic.co/t/elasticsearch-appears-to-be-unreachable-or-down/131986 "2018-05-15T20:44:55Z")
Hello , I need x-pack so i have installed it in : 1)Elasticsearch 2)Kibana then and finally i have installed it for logstash as descriped here : bin/logstash-plugin install x-pack and then i added in logstash… --- ## [Use ruby filter decode base64 field cannot replace oldfields](https://discuss.elastic.co/t/use-ruby-filter-decode-base64-field-cannot-replace-oldfields/113315)
**Author:** [@yuki\_Tsao](https://discuss.elastic.co/u/yuki_Tsao)\ **Replies:** 1\ **Last updated:** [December 29, 2017, 3:35am UTC](https://discuss.elastic.co/t/use-ruby-filter-decode-base64-field-cannot-replace-oldfields/113315 "2017-12-29T03:35:37Z")
I have a k,v pairs, some of them was base64 encoded. like this "requestMsg" =\> { "userInfo" =\> "eyJ1c2VySWQiOiIxNTIyMjY3NTY5NCIsInR5cGUiOiIxIn0=", "random" =\> "462091", "original… --- ## ["You must set the ES\_CLASSPATH var"](https://discuss.elastic.co/t/you-must-set-the-es-classpath-var/64323)
**Author:** [@MichaelW](https://discuss.elastic.co/u/MichaelW)\ **Replies:** 1\ **Last updated:** [October 29, 2016, 1:52am UTC](https://discuss.elastic.co/t/you-must-set-the-es-classpath-var/64323 "2016-10-29T01:52:52Z")
Hello. I've got ES running locally just fine. I'm trying to get it running on a server now, however, and I'm stymied by "You must set the ES\_CLASSPATH var" when trying to start elasticsearch. I'm currently using 5.0, but… --- ## [Kibana 3.1: Wildcard Lucene query not handling @ symbol](https://discuss.elastic.co/t/kibana-3-1-wildcard-lucene-query-not-handling-symbol/27586)
**Author:** [@Alex\_6](https://discuss.elastic.co/u/Alex_6)\ **Replies:** 1\ **Last updated:** [August 20, 2015, 4:32am UTC](https://discuss.elastic.co/t/kibana-3-1-wildcard-lucene-query-not-handling-symbol/27586 "2015-08-20T04:32:38Z")
Kibana 3.1, Lucene query. So I'm doing wildcard queries in the form of entName:treeb\* Which will return documents with treebeard and treebark as values for entName. I also have a field treeMail, which is set to be… --- ## [ElasticSearch not seen in JPS](https://discuss.elastic.co/t/elasticsearch-not-seen-in-jps/17539)
**Author:** [@Greg\_Bui](https://discuss.elastic.co/u/Greg_Bui)\ **Replies:** 1\ **Last updated:** [May 16, 2014, 10:00am UTC](https://discuss.elastic.co/t/elasticsearch-not-seen-in-jps/17539 "2014-05-16T10:00:11Z")
Hello, I encounter a weird problem, jps is not returning elasticsearch whereas it is running and (seems) working fine. I remember that was the case before. jstat is not working as well... # jps 243157 jruby-co… --- ## [Setting Up SSL/TLS on a Cluster](https://discuss.elastic.co/t/setting-up-ssl-tls-on-a-cluster/126136)
**Author:** [@eramitsinha](https://discuss.elastic.co/u/eramitsinha)\ **Replies:** 6\ **Last updated:** [April 11, 2018, 1:58am UTC](https://discuss.elastic.co/t/setting-up-ssl-tls-on-a-cluster/126136 "2018-04-11T01:58:07Z")
Hi, I am using Elastic Search 5.2.2, Kibana 5.2.2 and X-Pack 5.2.2. I am planning for Data Encryption. I use both Http and TCP call from my Java Code. Will there be performance over head after SSL/T… --- ## [Aggregate across doctype?](https://discuss.elastic.co/t/aggregate-across-doctype/1104)
**Author:** [@cching](https://discuss.elastic.co/u/cching)\ **Replies:** 6\ **Last updated:** [May 21, 2015, 7:46pm UTC](https://discuss.elastic.co/t/aggregate-across-doctype/1104 "2015-05-21T19:46:39Z")
Is it possible to aggregate across doctype? What I'm wanting to do is given doctypes of 'people', 'bears', 'lions, a search for 'leo' would find, say, the top 10 hits in each doctype of 'people', 'bears', 'lions'. Alte… --- ## [Kibana Donut chart with small inner circle](https://discuss.elastic.co/t/kibana-donut-chart-with-small-inner-circle/300977)
**Author:** [@santy1](https://discuss.elastic.co/u/santy1)\ **Replies:** 5\ **Last updated:** [March 31, 2022, 8:39am UTC](https://discuss.elastic.co/t/kibana-donut-chart-with-small-inner-circle/300977 "2022-03-31T08:39:36Z")
Hello Team, I am on ELK v7.17. I have created donut chart to represent some data, using Lens. However, I see that the inner circle is quite small. I read somewhere, that there is an options tab that can be used to chan… --- ## [High cardinality aggregation questions](https://discuss.elastic.co/t/high-cardinality-aggregation-questions/287169)
**Author:** [@galambo](https://discuss.elastic.co/u/galambo)\ **Replies:** 5\ **Last updated:** [November 10, 2021, 12:15pm UTC](https://discuss.elastic.co/t/high-cardinality-aggregation-questions/287169 "2021-11-10T12:15:55Z")
Hello, I'm currently working on a use case with an extremely high cardinality (couple of million combinations) and I'm having trouble understanding how ES behaves with aggregations. Here are sample documents: { … --- ## [Must be a git repository](https://discuss.elastic.co/t/must-be-a-git-repository/143773)
**Author:** [@username123](https://discuss.elastic.co/u/username123)\ **Replies:** 5\ **Last updated:** [August 20, 2018, 10:53am UTC](https://discuss.elastic.co/t/must-be-a-git-repository/143773 "2018-08-20T10:53:32Z")
When I run esrally /root/.rally/benchmarks/tracks/custom\] must be a git repository But ~/.rally/benchmarks/tracks/custom# git status On branch master Changes not staged for commit: Log is: return race(cfg, exte… --- ## [How to troubleshoot memory problems](https://discuss.elastic.co/t/how-to-troubleshoot-memory-problems/89724)
**Author:** [@ygokirmak](https://discuss.elastic.co/u/ygokirmak)\ **Replies:** 5\ **Last updated:** [July 12, 2017, 6:53am UTC](https://discuss.elastic.co/t/how-to-troubleshoot-memory-problems/89724 "2017-07-12T06:53:59Z")
Hi, I have elasticsearch cluster with 2 nodes. We are persisting e-commerce customer behavior events like product\_view, add\_to\_basket etc in an index named events. Daily we have 30gb of data we are doing hourly indexi… --- ## [Logstash Deprecation log JSON Format](https://discuss.elastic.co/t/logstash-deprecation-log-json-format/303155)
**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\ **Replies:** 2\ **Last updated:** [April 27, 2022, 4:14pm UTC](https://discuss.elastic.co/t/logstash-deprecation-log-json-format/303155 "2022-04-27T16:14:08Z")
Is it possible to configure the deprecation logs of Logstash as JSON entries? log.format: json works fine for the 'normal' logs, but not for deprecation ones. I've checked log4j2.properties and it seems that some kind … --- ## [Matching multiple patterns in grok for a filebeat ingestion pipeline](https://discuss.elastic.co/t/matching-multiple-patterns-in-grok-for-a-filebeat-ingestion-pipeline/217059)
**Author:** [@Jim\_Ivey](https://discuss.elastic.co/u/Jim_Ivey)\ **Replies:** 2\ **Last updated:** [January 29, 2020, 11:12pm UTC](https://discuss.elastic.co/t/matching-multiple-patterns-in-grok-for-a-filebeat-ingestion-pipeline/217059 "2020-01-29T23:12:09Z")
In logstash's grok, there's a break\_on\_match field that allows grok to match multiple patterns. Am I correct in believing that no such thing exists for grok in filebeat module ingestion pipelines (e.g., .../filebeat/mod… --- ## [Duplicate field](https://discuss.elastic.co/t/duplicate-field/42311)
**Author:** [@Amos\_Shahar](https://discuss.elastic.co/u/Amos_Shahar)\ **Replies:** 2\ **Last updated:** [February 21, 2016, 8:07pm UTC](https://discuss.elastic.co/t/duplicate-field/42311 "2016-02-21T20:07:37Z")
hi, I am trying to parse the file name from the source field without the path, I trid to do the following: grok { match =\> \["source", "%{GREEDYDATA}/%{GREEDYDATA}/%{GREEDYDATA:filename9}"\] #add\_field =\> … --- ## [Mapping via java api and storing values in index](https://discuss.elastic.co/t/mapping-via-java-api-and-storing-values-in-index/3665)
**Author:** [@cstrzadala](https://discuss.elastic.co/u/cstrzadala)\ **Replies:** 2\ **Last updated:** [January 14, 2011, 5:37am UTC](https://discuss.elastic.co/t/mapping-via-java-api-and-storing-values-in-index/3665 "2011-01-14T05:37:24Z")
Hi all, New to Elastic Search and just having some issues getting my head around mapping via the Java API. I've got the following unit test below in which I'm trying to map a simple media object with 2 fields (titl… --- ## [What's different between reindexing an exist document and updating some field of document?](https://discuss.elastic.co/t/whats-different-between-reindexing-an-exist-document-and-updating-some-field-of-document/254152)
**Author:** [@DumpCat](https://discuss.elastic.co/u/DumpCat)\ **Replies:** 3\ **Last updated:** [November 3, 2020, 2:33pm UTC](https://discuss.elastic.co/t/whats-different-between-reindexing-an-exist-document-and-updating-some-field-of-document/254152 "2020-11-03T14:33:06Z")
If I have an exist document，is reindexing whole new document better than updating some field of document? --- ## [Logstash initialize variables before input](https://discuss.elastic.co/t/logstash-initialize-variables-before-input/227684)
**Author:** [@Mario\_Morelli](https://discuss.elastic.co/u/Mario_Morelli)\ **Replies:** 3\ **Last updated:** [May 2, 2020, 12:19am UTC](https://discuss.elastic.co/t/logstash-initialize-variables-before-input/227684 "2020-05-02T00:19:48Z")
Hi Guys I use Logstash for the random projects at work and I just cant seem to figure out the following, seems like it should be easy enough My input uses the http poller plugin, that posts to a REST API There are 2 v… --- ## [Selectively dedot some fields](https://discuss.elastic.co/t/selectively-dedot-some-fields/218489)
**Author:** [@Todd\_Lyons](https://discuss.elastic.co/u/Todd_Lyons)\ **Replies:** 3\ **Last updated:** [March 5, 2020, 5:55pm UTC](https://discuss.elastic.co/t/selectively-dedot-some-fields/218489 "2020-03-05T17:55:30Z")
TL;DR: How to detect subfields with dots, converting those dots to underscores, but ONLY in fields under that subfield. Detail: We use filebeats, logstash, and feed messages to an Elastic Stack, of which all pieces are… --- ## [Available fields in kibana](https://discuss.elastic.co/t/available-fields-in-kibana/214864)
**Author:** [@volcano](https://discuss.elastic.co/u/volcano)\ **Replies:** 3\ **Last updated:** [January 14, 2020, 11:16pm UTC](https://discuss.elastic.co/t/available-fields-in-kibana/214864 "2020-01-14T23:16:25Z")
Here is this entry in logstash.conf mutate { split =\> \["message","Employee"\] add\_field =\> {"part1" =\>"%{\[message\]\[0\]}"} add\_field =\> {"part2" =\>"%{\[message\]\[1\]}"} } mutate { split =\> … --- ## [シノニムで類語を呼び出した後、再び形態素解析される](https://discuss.elastic.co/t/topic/198591)
**Author:** [@choris](https://discuss.elastic.co/u/choris)\ **Replies:** 3\ **Last updated:** [September 19, 2019, 3:03am UTC](https://discuss.elastic.co/t/topic/198591 "2019-09-19T03:03:12Z")
お世話になります。 検索エンジンとして、ElasticsSearchの活用を検討しています。 検索ワードに対して、形態素解析を使用したのち、synonymで類語を検索ワードとして呼び出したいと考えています。しかし、現状ですとシノニムで呼び出された類語が再び形態素解析されるため、予期せぬ形に品詞分解されることがあります。 類語に対してのみ形態素解析をなしにすることは可能でしょうか。 具体例としては以下のようになります。 検索ワー… --- ## [Cannot bootstrap a new cluster: master not discovered or elected yet](https://discuss.elastic.co/t/cannot-bootstrap-a-new-cluster-master-not-discovered-or-elected-yet/199861)
**Author:** [@decibel83](https://discuss.elastic.co/u/decibel83)\ **Replies:** 3\ **Last updated:** [September 18, 2019, 7:07am UTC](https://discuss.elastic.co/t/cannot-bootstrap-a-new-cluster-master-not-discovered-or-elected-yet/199861 "2019-09-18T07:07:12Z")
Hi, after having some problems on another test cluster (I asked help on this post) I'm trying to setup a new cluster from scratch to understand what's happening. I'm stuck because this it the third time I'm trying to r… --- ## [Curator Error | Elasticsearch version 6.4.1 incompatible with this version of Curator (5.3.0.dev1)](https://discuss.elastic.co/t/curator-error-elasticsearch-version-6-4-1-incompatible-with-this-version-of-curator-5-3-0-dev1/160696)
**Author:** [@Shashikanth](https://discuss.elastic.co/u/Shashikanth)\ **Replies:** 3\ **Last updated:** [December 14, 2018, 12:49pm UTC](https://discuss.elastic.co/t/curator-error-elasticsearch-version-6-4-1-incompatible-with-this-version-of-curator-5-3-0-dev1/160696 "2018-12-14T12:49:29Z")
When trying to purge the indices through curator, i'm getting the following error. Elasticsearch version 6.4.1 incompatible with this version of Curator (5.3.0.dev1) --- ## [Invalid Config File Error for Logstash](https://discuss.elastic.co/t/invalid-config-file-error-for-logstash/80592)
**Author:** [@ganesh3](https://discuss.elastic.co/u/ganesh3)\ **Replies:** 3\ **Last updated:** [March 30, 2017, 7:07am UTC](https://discuss.elastic.co/t/invalid-config-file-error-for-logstash/80592 "2017-03-30T07:07:46Z")
Hi, I am trying to run salesforce integration with logstash. I am using the steps mentioned at https://logz.io/blog/analyze-salesforce-elk-stack/ to setup. I am on Ubuntu 16.04 and have only installed logstack. On… --- ## [Add "type" to my custom input plugin](https://discuss.elastic.co/t/add-type-to-my-custom-input-plugin/73358)
**Author:** [@itzikHan](https://discuss.elastic.co/u/itzikHan)\ **Replies:** 3\ **Last updated:** [February 2, 2017, 10:16am UTC](https://discuss.elastic.co/t/add-type-to-my-custom-input-plugin/73358 "2017-02-02T10:16:58Z")
Hi, I'm trying to add "type" field that i would be able to use as tag when filtering to my input plugin. For example, I can add "type" in the 'file' input plugin, and filter it later. Code: input { file { path =\> … --- ## [Is dynamic template allowed in nested fields?](https://discuss.elastic.co/t/is-dynamic-template-allowed-in-nested-fields/56289)
**Author:** [@SwethaS](https://discuss.elastic.co/u/SwethaS)\ **Replies:** 3\ **Last updated:** [July 27, 2016, 2:22pm UTC](https://discuss.elastic.co/t/is-dynamic-template-allowed-in-nested-fields/56289 "2016-07-27T14:22:19Z")
I see limitation on number of nested fields starting ES 2.3 - https://www.elastic.co/guide/en/elasticsearch/reference/current/breaking-changes-2.3.html I have defined a mapping with dynamic template in nested field and g… --- ## [Time filter not getting persisted across dashboard navigation](https://discuss.elastic.co/t/time-filter-not-getting-persisted-across-dashboard-navigation/261220)
**Author:** [@Bhavya\_Bansal](https://discuss.elastic.co/u/Bhavya_Bansal)\ **Replies:** 7\ **Last updated:** [January 15, 2021, 9:49am UTC](https://discuss.elastic.co/t/time-filter-not-getting-persisted-across-dashboard-navigation/261220 "2021-01-15T09:49:01Z")
Hi, I am using markdown viz in Kibana to link my dashboards. I would expect that the time range selected in the first dashboard will get passed down to the next one. But this isn't happening. Everytime I click on a link… --- ## [Master not discovered/elected after making changes to docker-compose.yml](https://discuss.elastic.co/t/master-not-discovered-elected-after-making-changes-to-docker-compose-yml/241495)
**Author:** [@matt-m](https://discuss.elastic.co/u/matt-m)\ **Replies:** 7\ **Last updated:** [July 18, 2020, 10:07pm UTC](https://discuss.elastic.co/t/master-not-discovered-elected-after-making-changes-to-docker-compose-yml/241495 "2020-07-18T22:07:57Z")
Hello, I've got a 3 node ES cluster running alongside Kibana as part of a docker-compose file. My compose file is below: version: '2.2' services: es01: image: docker.elastic.co/elasticsearch/elast… --- ## [Using Canvas with essql timestamp of YYYY-MM-DDTHH:MM:SS](https://discuss.elastic.co/t/using-canvas-with-essql-timestamp-of-yyyy-mm-ddthhss/189006)
**Author:** [@TsuWeiQuan](https://discuss.elastic.co/u/TsuWeiQuan)\ **Replies:** 1\ **Last updated:** [July 5, 2019, 6:59am UTC](https://discuss.elastic.co/t/using-canvas-with-essql-timestamp-of-yyyy-mm-ddthhss/189006 "2019-07-05T06:59:03Z")
Hello, I am following this guide to learn how to plot in canvas and i realized that the time used in canvas is in this format: 2019-05-01 00:00:00. However, when I queried the timestamp from elasticsearch, it is in th… --- ## [External Filebeat plus Logstash best approach](https://discuss.elastic.co/t/external-filebeat-plus-logstash-best-approach/130721)
**Author:** [@facumanjj](https://discuss.elastic.co/u/facumanjj)\ **Replies:** 7\ **Last updated:** [May 8, 2018, 1:32pm UTC](https://discuss.elastic.co/t/external-filebeat-plus-logstash-best-approach/130721 "2018-05-08T13:32:33Z")
Hi everyone, our system takes data from thousand of clients. Basically, we develop a client software which each of our clients install and run. That SW connects to our system (in our network). Our idea is to install Fil… --- ## [Filebeat file modified timestamp](https://discuss.elastic.co/t/filebeat-file-modified-timestamp/85984)
**Author:** [@anshul\_pandey](https://discuss.elastic.co/u/anshul_pandey)\ **Replies:** 1\ **Last updated:** [May 17, 2017, 10:11am UTC](https://discuss.elastic.co/t/filebeat-file-modified-timestamp/85984 "2017-05-17T10:11:44Z")
Hi, We have an log intensive application which writes several log files (sometimes 50-100 files of \<3kB) to disk each minute. There are couple of things, which i need guidance on. a) the timestamp associated with b… --- ## [\[SOLVED\] Auto\_flush\_interval not flushing on UDP input](https://discuss.elastic.co/t/solved-auto-flush-interval-not-flushing-on-udp-input/60387)
**Author:** [@Raul\_Uria](https://discuss.elastic.co/u/Raul_Uria)\ **Replies:** 1\ **Last updated:** [September 19, 2016, 9:27am UTC](https://discuss.elastic.co/t/solved-auto-flush-interval-not-flushing-on-udp-input/60387 "2016-09-19T09:27:37Z")
Hi, I´m having problem with multiline codec, my last event is not processed until new one came along. I know it sounds like I need to configure auto\_flush\_interval to get rid of the last event, but I set auto\_flush\_int… --- ## [No output to Elasticsearch](https://discuss.elastic.co/t/no-output-to-elasticsearch/47498)
**Author:** [@johnslippers](https://discuss.elastic.co/u/johnslippers)\ **Replies:** 1\ **Last updated:** [April 16, 2016, 4:56am UTC](https://discuss.elastic.co/t/no-output-to-elasticsearch/47498 "2016-04-16T04:56:44Z")
Hi, I hope somebody can assist? I have setup Elasticsearch, Kibana, Logstash and Filebeat but can't get Logstash to write to Elasticsearch. Filebeat logs to Logstash. I know that because in my Filebeat log file I g… --- ## [Is it possible to specify the search term in the request to Kibana for a saved search?](https://discuss.elastic.co/t/is-it-possible-to-specify-the-search-term-in-the-request-to-kibana-for-a-saved-search/25788)
**Author:** [@russellseymour](https://discuss.elastic.co/u/russellseymour)\ **Replies:** 1\ **Last updated:** [July 18, 2015, 2:26pm UTC](https://discuss.elastic.co/t/is-it-possible-to-specify-the-search-term-in-the-request-to-kibana-for-a-saved-search/25788 "2015-07-18T14:26:51Z")
Hello, I would like to be able to give users a URL to Kibana that links to a saved search and passes the value for a parameterised object in the query. For example, the following URL: http://kibana/#/discover/MySear… --- ## [Unable start elasticsearch 0.20.3 - java.lang.VerifyError: class org.apache.lucene.analysis.ReusableAnalyzerBase](https://discuss.elastic.co/t/unable-start-elasticsearch-0-20-3-java-lang-verifyerror-class-org-apache-lucene-analysis-reusableanalyzerbase/10514)
**Author:** [@Artur\_Konczak](https://discuss.elastic.co/u/Artur_Konczak)\ **Replies:** 7\ **Last updated:** [February 20, 2014, 8:27am UTC](https://discuss.elastic.co/t/unable-start-elasticsearch-0-20-3-java-lang-verifyerror-class-org-apache-lucene-analysis-reusableanalyzerbase/10514 "2014-02-20T08:27:37Z")
I'm getting this error on start of elasticsearch as a daemon(installed from deb package). It seems that the problem is only with that version, I can run 0.20.1 without any problems. My configuration: OS: Xubun… --- ## [Elastic and language stem (polish)](https://discuss.elastic.co/t/elastic-and-language-stem-polish/15074)
**Author:** [@Rafath\_Khan](https://discuss.elastic.co/u/Rafath_Khan)\ **Replies:** 1\ **Last updated:** [January 2, 2014, 6:20pm UTC](https://discuss.elastic.co/t/elastic-and-language-stem-polish/15074 "2014-01-02T18:20:29Z")
Hello everybody I'm struggling with polish stem, I've indexed my documents with polish stemm @@elastic.index index: index, type: type, id: data\[:id\], body: { setting… --- ## [Endpoints not showing up in Security Administration](https://discuss.elastic.co/t/endpoints-not-showing-up-in-security-administration/276878)
**Author:** [@Jukocross](https://discuss.elastic.co/u/Jukocross)\ **Replies:** 4\ **Last updated:** [June 29, 2021, 2:10am UTC](https://discuss.elastic.co/t/endpoints-not-showing-up-in-security-administration/276878 "2021-06-29T02:10:35Z")
Security administration unable to detect any host despite able to enroll the host with elastic agent (Status: Healthy). Installed version 7.13.2 ELK stack with self signed certificates. Setup fleet server and able to… --- ## [Copy index from production to development instance](https://discuss.elastic.co/t/copy-index-from-production-to-development-instance/17960)
**Author:** [@Brian\_Lamb](https://discuss.elastic.co/u/Brian_Lamb)\ **Replies:** 4\ **Last updated:** [June 26, 2014, 8:15pm UTC](https://discuss.elastic.co/t/copy-index-from-production-to-development-instance/17960 "2014-06-26T20:15:59Z")
Hi all, I want to do a one time copy of the data on my production elastic search instance to my development elastic search instance. Both are managed by AWS if that makes this easier. Here is what I tried: On p… --- ## [Mapping created using Template does not work](https://discuss.elastic.co/t/mapping-created-using-template-does-not-work/17295)
**Author:** [@dkjhanitt](https://discuss.elastic.co/u/dkjhanitt)\ **Replies:** 4\ **Last updated:** [May 12, 2014, 8:07pm UTC](https://discuss.elastic.co/t/mapping-created-using-template-does-not-work/17295 "2014-05-12T20:07:08Z")
Hi, I have setup ELK stack and I am going by default index name, which is logstash-YYYY.MM.DD . Since this is the only index format I have, I decided to create a template file, so that whenever new index gets create… --- ## [Logstash as service restarts every 30sec, also doesnt log](https://discuss.elastic.co/t/logstash-as-service-restarts-every-30sec-also-doesnt-log/117185)
**Author:** [@c4alexc4](https://discuss.elastic.co/u/c4alexc4)\ **Replies:** 4\ **Last updated:** [January 26, 2018, 2:41pm UTC](https://discuss.elastic.co/t/logstash-as-service-restarts-every-30sec-also-doesnt-log/117185 "2018-01-26T14:41:01Z")
Hey, I was trying out different things with logstash while starting it from command line using sudo /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/config.conf Everything worked fine there. I would like to us… --- ## [Expose Kibana behind a subpath using GCE ingress](https://discuss.elastic.co/t/expose-kibana-behind-a-subpath-using-gce-ingress/267987)
**Author:** [@lmes3oud](https://discuss.elastic.co/u/lmes3oud)\ **Replies:** 0\ **Last updated:** [March 22, 2021, 3:55pm UTC](https://discuss.elastic.co/t/expose-kibana-behind-a-subpath-using-gce-ingress/267987 "2021-03-22T15:55:40Z")
Trying to expose kibana behind GCE Ingress under a subpath. Say you want to expose Kibana under the subpath /kibana . You first need to configure Kibana to be aware of this by setting server.basePath , server.rewriteBase… --- ## [Elastic Node.processors configuration](https://discuss.elastic.co/t/elastic-node-processors-configuration/328593)
**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\ **Replies:** 2\ **Last updated:** [March 28, 2023, 6:07am UTC](https://discuss.elastic.co/t/elastic-node-processors-configuration/328593 "2023-03-28T06:07:58Z")
Hi, I am running multiple instances (4 data nodes) on the same machine. When running load tests, I see the each node CPU is ~20-30% and Host CPU is ~92%. Elastic recommend to configure Node.processors in such case an… --- ## [To convert the Integers into a String](https://discuss.elastic.co/t/to-convert-the-integers-into-a-string/311936)
**Author:** [@Maruthappan\_Muthu](https://discuss.elastic.co/u/Maruthappan_Muthu)\ **Replies:** 2\ **Last updated:** [August 11, 2022, 7:14pm UTC](https://discuss.elastic.co/t/to-convert-the-integers-into-a-string/311936 "2022-08-11T19:14:42Z")
I have collected the metrics from a device through snmp input plugin and the field value is 0 & 1. How can I convert these values into strings (like 0 as Open, 1 as Close) in Kibana dashboards. --- ## [Scroll in top hits aggregation](https://discuss.elastic.co/t/scroll-in-top-hits-aggregation/171468)
**Author:** [@bard0x](https://discuss.elastic.co/u/bard0x)\ **Replies:** 2\ **Last updated:** [March 8, 2019, 12:10pm UTC](https://discuss.elastic.co/t/scroll-in-top-hits-aggregation/171468 "2019-03-08T12:10:07Z")
Hi everyone, I have a question: it's possible to use the scroll feature in a top hits aggregation? I have many documents and I would to load its with a pagination. Thank's in advance for the replies --- ## [No active\_primary\_shards](https://discuss.elastic.co/t/no-active-primary-shards/138598)
**Author:** [@eric\_Igbinosun](https://discuss.elastic.co/u/eric_Igbinosun)\ **Replies:** 2\ **Last updated:** [July 5, 2018, 5:03pm UTC](https://discuss.elastic.co/t/no-active-primary-shards/138598 "2018-07-05T17:03:31Z")
hello guys i have set up an elasticsearch cluster with 1 master and 2 data nodes. the master run elasticsearch, logstash and filebeat, now when i run the cmd " curl localhost:9200/\_cluster/health?pretty=true" i do no… --- ## [Cluster.routing.allocation.exclude.\_name stops working \[ES6.1.2\]](https://discuss.elastic.co/t/cluster-routing-allocation-exclude-name-stops-working-es6-1-2/117705)
**Author:** [@loren](https://discuss.elastic.co/u/loren)\ **Replies:** 2\ **Last updated:** [February 2, 2018, 5:58am UTC](https://discuss.elastic.co/t/cluster-routing-allocation-exclude-name-stops-working-es6-1-2/117705 "2018-02-02T05:58:41Z")
I'm migrating shards from some old nodes to some new nodes. I excluded the old nodes as follows: PUT /\_cluster/settings?pretty { "transient": { "cluster.routing.allocation.exclude.\_name": "node-1,node-2,node-3,nod… --- ## [How to setup ElasticSearch-Hadoop to work thru HTTPS?](https://discuss.elastic.co/t/how-to-setup-elasticsearch-hadoop-to-work-thru-https/43187)
**Author:** [@Galeyev](https://discuss.elastic.co/u/Galeyev)\ **Replies:** 2\ **Last updated:** [March 22, 2016, 7:38pm UTC](https://discuss.elastic.co/t/how-to-setup-elasticsearch-hadoop-to-work-thru-https/43187 "2016-03-22T19:38:01Z")
Hello, I'm setting up a elasticsearch-hadoop connector to pull data to hadoop. I wrote a mapper/reducer job for it and tested on my dev box, where elasticsearch set up on a default 9200 port at http://localhost:9200. Ho… --- ## [Changing ownership of filebeat installtion from root](https://discuss.elastic.co/t/changing-ownership-of-filebeat-installtion-from-root/307521)
**Author:** [@navin1093](https://discuss.elastic.co/u/navin1093)\ **Replies:** 5\ **Last updated:** [July 7, 2022, 4:19pm UTC](https://discuss.elastic.co/t/changing-ownership-of-filebeat-installtion-from-root/307521 "2022-07-07T16:19:34Z")
Hi experts, I installed filebeat as root in my RedHat. We did using yum install filebeat-version.rpm. Now what happened is, when install, we did it as root user. I believe there is security risk by installing as root u… --- ## [Accessing log files on a remote Unix server from a Windows server](https://discuss.elastic.co/t/accessing-log-files-on-a-remote-unix-server-from-a-windows-server/145623)
**Author:** [@cbril](https://discuss.elastic.co/u/cbril)\ **Replies:** 5\ **Last updated:** [August 27, 2018, 7:56pm UTC](https://discuss.elastic.co/t/accessing-log-files-on-a-remote-unix-server-from-a-windows-server/145623 "2018-08-27T19:56:16Z")
\---------- BACKGROUND ---------- I am setting up a production cluster that has a mix of Windows and Unix servers. The cluster will involve dozens of servers. I have one master Windows server that is running a single in… --- ## [Link Field in Kibana?](https://discuss.elastic.co/t/link-field-in-kibana/116248)
**Author:** [@clannadqs](https://discuss.elastic.co/u/clannadqs)\ **Replies:** 5\ **Last updated:** [January 19, 2018, 10:07pm UTC](https://discuss.elastic.co/t/link-field-in-kibana/116248 "2018-01-19T22:07:31Z")
Hey guys, A few months ago I worked on something using the ELK stack. I never got extremely close to what was happening on Kibana, but I specifically remember there being a link field for Kibana visualisations. We were … --- ## [Providing field mapping, analysis, etc on the fly](https://discuss.elastic.co/t/providing-field-mapping-analysis-etc-on-the-fly/75108)
**Author:** [@lukes](https://discuss.elastic.co/u/lukes)\ **Replies:** 5\ **Last updated:** [February 22, 2017, 7:47pm UTC](https://discuss.elastic.co/t/providing-field-mapping-analysis-etc-on-the-fly/75108 "2017-02-22T19:47:27Z")
Hi all, Is it possible to provide the fields mapping, analysis, etc in the payload itself ? What i mean is, assuming i have the JSON payload with fields in it { "account\_number": 0, "balance": 16623, "f… [Previous page](https://discuss.elastic.co/top.md?page=1210&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1212&per_page=50&period=all)