# Top

**URL:** https://discuss.elastic.co/top.md?page=124&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 125

---

## [Oracle to Elasticsearch](https://discuss.elastic.co/t/oracle-to-elasticsearch/21319)

<div class="topic-metadata">

**Author:** [@Marian\_Valero](https://discuss.elastic.co/u/Marian_Valero)\
**Replies:** 9\
**Last updated:** [December 19, 2014, 2:30pm UTC](https://discuss.elastic.co/t/oracle-to-elasticsearch/21319 "2014-12-19T14:30:06Z")

</div>

I want to migrate from oracle to elasticsearch data for analize that. I have using logstash to read a csv file but when input this data I have much logs that I have inserting, for example I have 100000 lines and this…

---

## [Continuous async replication](https://discuss.elastic.co/t/continuous-async-replication/17088)

<div class="topic-metadata">

**Author:** [@Mohit\_Anchlia](https://discuss.elastic.co/u/Mohit_Anchlia)\
**Replies:** 9\
**Last updated:** [April 21, 2014, 9:51pm UTC](https://discuss.elastic.co/t/continuous-async-replication/17088 "2014-04-21T21:51:38Z")

</div>

As I understand there is currently no feature that does async replication between 2 clusters or even within the same cluster, but we have a need to write one. What would be the best way to do it in elasticsearch? I was…

---

## [Remove a node From a cluster](https://discuss.elastic.co/t/remove-a-node-from-a-cluster/133668)

<div class="topic-metadata">

**Author:** [@Hanen](https://discuss.elastic.co/u/Hanen)\
**Replies:** 15\
**Last updated:** [May 31, 2018, 11:08am UTC](https://discuss.elastic.co/t/remove-a-node-from-a-cluster/133668 "2018-05-31T11:08:12Z")

</div>

Hi, I would like to remove a node from my cluster without losing data. How can I achieve this. Many Thanks.

---

## [Error logstash "requires the configuration of \`certificate\_authorities "](https://discuss.elastic.co/t/error-logstash-requires-the-configuration-of-certificate-authorities/125218)

<div class="topic-metadata">

**Author:** [@Darwin\_Taco](https://discuss.elastic.co/u/Darwin_Taco)\
**Replies:** 13\
**Last updated:** [March 23, 2018, 5:13pm UTC](https://discuss.elastic.co/t/error-logstash-requires-the-configuration-of-certificate-authorities/125218 "2018-03-23T17:13:50Z")

</div>

Buenas, Actualice todo el entorno ELK de la versión 5 a 6.2.2. Envío los logs de mi servidor de correo mediante filebeat hacia mi servidor ELK, antes de la actualización recibía los logs y los podía visualizar en Kibana…

---

## [\_msearch capability](https://discuss.elastic.co/t/msearch-capability/110702)

<div class="topic-metadata">

**Author:** [@AndyDev2017](https://discuss.elastic.co/u/AndyDev2017)\
**Replies:** 13\
**Last updated:** [January 18, 2018, 2:20pm UTC](https://discuss.elastic.co/t/msearch-capability/110702 "2018-01-18T14:20:29Z")

</div>

I would like to know if /\_msearch operation will be supported in the near future or is available in the latest release? I have already implemented a custom parameter source using random terms from a file for queries usi…

---

## [Error -\> MapperParsingException-No handler for type \[attachment\] declared on field](https://discuss.elastic.co/t/error-mapperparsingexception-no-handler-for-type-attachment-declared-on-field/21503)

<div class="topic-metadata">

**Author:** [@Shashi\_2](https://discuss.elastic.co/u/Shashi_2)\
**Replies:** 10\
**Last updated:** [March 2, 2015, 8:32pm UTC](https://discuss.elastic.co/t/error-mapperparsingexception-no-handler-for-type-attachment-declared-on-field/21503 "2015-03-02T20:32:51Z")

</div>

Im new in elasticsearch,i installed elasticsearch version - elasticsearch-1.4.2 and mapper-attachment-plugin -2.4.1 . Im refering this site https://github.com/elasticsearch/elasticsearch-mapper-attachments but there…

---

## [OutOfMemoryError OOM while indexing Documents](https://discuss.elastic.co/t/outofmemoryerror-oom-while-indexing-documents/16373)

<div class="topic-metadata">

**Author:** [@Alexander\_Ott](https://discuss.elastic.co/u/Alexander_Ott)\
**Replies:** 10\
**Last updated:** [April 17, 2017, 8:55pm UTC](https://discuss.elastic.co/t/outofmemoryerror-oom-while-indexing-documents/16373 "2017-04-17T20:55:20Z")

</div>

Hi, we always run in an OutOfMemoryError while indexing documents or shortly afterwards. We only have one instance of elasticsearch version 1.0.1 (no cluster) Index informations: size: 203G (203G) docs: 237.35…

---

## [Can we use SQL Join in elastic query?](https://discuss.elastic.co/t/can-we-use-sql-join-in-elastic-query/196378)

<div class="topic-metadata">

**Author:** [@Sajal](https://discuss.elastic.co/u/Sajal)\
**Replies:** 28\
**Last updated:** [August 30, 2019, 4:14pm UTC](https://discuss.elastic.co/t/can-we-use-sql-join-in-elastic-query/196378 "2019-08-30T16:14:40Z")

</div>

Hi Can we use join function in elastic query ? I want to join two indexes with one common field . How to do that ? BR// Sajal

---

## [What's the solution of this error please?](https://discuss.elastic.co/t/whats-the-solution-of-this-error-please/317485)

<div class="topic-metadata">

**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\
**Replies:** 12\
**Last updated:** [October 30, 2022, 8:59pm UTC](https://discuss.elastic.co/t/whats-the-solution-of-this-error-please/317485 "2022-10-30T20:59:42Z")

</div>

I don't find a solution for this error anyone help me please when I try to start elasticsearch. \[ 2022-10-26T08:13:00,690\]\[WARN \]\[i.n.u.i.PlatformDependent\] \[elastic\] Failed to get the temporary directory; falling back…

---

## [Delete by query API invalid type name exception](https://discuss.elastic.co/t/delete-by-query-api-invalid-type-name-exception/169420)

<div class="topic-metadata">

**Author:** [@squash\_nut](https://discuss.elastic.co/u/squash_nut)\
**Replies:** 12\
**Last updated:** [February 28, 2019, 1:23pm UTC](https://discuss.elastic.co/t/delete-by-query-api-invalid-type-name-exception/169420 "2019-02-28T13:23:26Z")

</div>

I am using the high level rest client (6.6.0) and an embedded node (for system testing my code). I know the embedded node is not supported but this is not a "live" system. It is a node that is spun up in my system test…

---

## [Flatten json and create dynamic field](https://discuss.elastic.co/t/flatten-json-and-create-dynamic-field/240360)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 9\
**Last updated:** [July 8, 2020, 5:03pm UTC](https://discuss.elastic.co/t/flatten-json-and-create-dynamic-field/240360 "2020-07-08T17:03:23Z")

</div>

I know ruby will be involve I have try few code that I found on forum. but didn't work out here is my input message =\> '{"jobid":348332180, "runtime":{"cputime": 24, "totalelapsed": 105},"dataflow":\[{"gate": "v204.06",…

---

## [Logstash Module Netflow](https://discuss.elastic.co/t/logstash-module-netflow/175711)

<div class="topic-metadata">

**Author:** [@hispeed](https://discuss.elastic.co/u/hispeed)\
**Replies:** 10\
**Last updated:** [April 30, 2019, 8:30pm UTC](https://discuss.elastic.co/t/logstash-module-netflow/175711 "2019-04-30T20:30:05Z")

</div>

Hi, I want to load the netflow module on Centos 7 with Java 8 and ELK V.7.0 RC 2. All services are up and everything looks fine. I had a little bit trouble with Java because I wanted to use Java 11. Now when I want to…

---

## [Starting Fscrawler with SSL error](https://discuss.elastic.co/t/starting-fscrawler-with-ssl-error/375028)

<div class="topic-metadata">

**Author:** [@jimmorrison](https://discuss.elastic.co/u/jimmorrison)\
**Replies:** 52\
**Last updated:** [March 12, 2025, 10:52pm UTC](https://discuss.elastic.co/t/starting-fscrawler-with-ssl-error/375028 "2025-03-12T22:52:21Z")

</div>

Hi, Elasticsearch daemon is running and when I start Fscrawler I have this fatal error. Thanks 15:43:15,867 WARN \[f.p.e.c.f.c.ElasticsearchClient\] Failed to create elasticsearch client on Elasticsearch{nodes=\[https://1…

---

## [Topbeat from Windows not sending logs to ELK stack](https://discuss.elastic.co/t/topbeat-from-windows-not-sending-logs-to-elk-stack/53281)

<div class="topic-metadata">

**Author:** [@iqbal\_nazir](https://discuss.elastic.co/u/iqbal_nazir)\
**Replies:** 10\
**Last updated:** [June 21, 2016, 3:42pm UTC](https://discuss.elastic.co/t/topbeat-from-windows-not-sending-logs-to-elk-stack/53281 "2016-06-21T15:42:40Z")

</div>

Hello, I have a working ELK stack running on Ubuntu 16.04. Filebeat and Topbeat from another Ubuntu client are successfully shipping logs to that ELK server. Even Winlogbeat is shipping events from a Windows machine. …

---

## [Read timeout errors](https://discuss.elastic.co/t/read-timeout-errors/366820)

<div class="topic-metadata">

**Author:** [@dpitchford](https://discuss.elastic.co/u/dpitchford)\
**Replies:** 9\
**Last updated:** [October 16, 2024, 4:43pm UTC](https://discuss.elastic.co/t/read-timeout-errors/366820 "2024-10-16T16:43:55Z")

</div>

A single-threaded script I'm working on is experiencing repeated read timeout errors from Elasticsearch. This is happening when trying to bulk-index data to an index with 12 primary and 0 replicas shards across 4 nodes. …

---

## [Sending data to new Data Stream with Elastic Agent](https://discuss.elastic.co/t/sending-data-to-new-data-stream-with-elastic-agent/353926)

<div class="topic-metadata">

**Author:** [@wrender1](https://discuss.elastic.co/u/wrender1)\
**Replies:** 19\
**Last updated:** [February 27, 2024, 8:09pm UTC](https://discuss.elastic.co/t/sending-data-to-new-data-stream-with-elastic-agent/353926 "2024-02-27T20:09:54Z")

</div>

Hi, We are trying to use a Standalone Elastic Agent on Kubernetes. Right now it is creating indexes for us, and sending all container logs to it. The indexes end up looking like: logs-kubernetes.container\_logs-cluster-…

---

## [Logstash-elastic do not support array based columns?](https://discuss.elastic.co/t/logstash-elastic-do-not-support-array-based-columns/101433)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 14\
**Last updated:** [September 25, 2017, 5:58am UTC](https://discuss.elastic.co/t/logstash-elastic-do-not-support-array-based-columns/101433 "2017-09-25T05:58:37Z")

</div>

Hi All I have a json file like this { "name":"John", "age":30, "cars": \[ { "name":"Ford", "models":\[ "Fiesta", "Focus", "Mustang" \] }, { "name":"BMW", "models":\[ "320", "X3", "X5" \] }, …

---

## [Ansible Automation for an upgrade (5.611 to 6.5.4) of elasticsearch](https://discuss.elastic.co/t/ansible-automation-for-an-upgrade-5-611-to-6-5-4-of-elasticsearch/164789)

<div class="topic-metadata">

**Author:** [@smm](https://discuss.elastic.co/u/smm)\
**Replies:** 9\
**Last updated:** [February 5, 2019, 5:51am UTC](https://discuss.elastic.co/t/ansible-automation-for-an-upgrade-5-611-to-6-5-4-of-elasticsearch/164789 "2019-02-05T05:51:26Z")

</div>

Hi there, quick question to the community. If you make an elasticsearch upgrade manually you are prompted if you want to keep the defaults. Does somenone has a solution for this step when using Ansible? So, how can I em…

---

## [ES at 100% CPU, millions of CLUSTER\_RECOVERED errors](https://discuss.elastic.co/t/es-at-100-cpu-millions-of-cluster-recovered-errors/61982)

<div class="topic-metadata">

**Author:** [@scherma](https://discuss.elastic.co/u/scherma)\
**Replies:** 13\
**Last updated:** [October 4, 2016, 7:26pm UTC](https://discuss.elastic.co/t/es-at-100-cpu-millions-of-cluster-recovered-errors/61982 "2016-10-04T19:26:01Z")

</div>

Hi, I've had ES running in my home lab for a while. It had been running happily for months, and I left it alone for a bit to work on some other things; when I came back to it I find that it's munching 100% CPU in the VM …

---

## [Centralized Kibana to fetch logstash data from multiple DC](https://discuss.elastic.co/t/centralized-kibana-to-fetch-logstash-data-from-multiple-dc/343571)

<div class="topic-metadata">

**Author:** [@Kvoyce2023](https://discuss.elastic.co/u/Kvoyce2023)\
**Replies:** 39\
**Last updated:** [October 7, 2023, 9:46pm UTC](https://discuss.elastic.co/t/centralized-kibana-to-fetch-logstash-data-from-multiple-dc/343571 "2023-10-07T21:46:49Z")

</div>

Hi everyone : I got 3 data centers where each one got its own kibana, logstash, and ES cluster with 3 ES nodes.Each DC got its own CA and certiticates which are distributed to all ES nodes. So ourl goal is to get centr…

---

## [Elasticsearch/Kibana query\_string with special characters](https://discuss.elastic.co/t/elasticsearch-kibana-query-string-with-special-characters/123766)

<div class="topic-metadata">

**Author:** [@Rougui](https://discuss.elastic.co/u/Rougui)\
**Replies:** 13\
**Last updated:** [March 16, 2018, 1:27pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-query-string-with-special-characters/123766 "2018-03-16T13:27:37Z")

</div>

Hello, i configured Elasticsearch cloud VM machine, i created index, simples types and mapping. By using Kibana Dev-Tools console: I am able to build index data by using POST and PUT requests. Now i have to search te…

---

## [Filebeat new module - how to complete](https://discuss.elastic.co/t/filebeat-new-module-how-to-complete/123104)

<div class="topic-metadata">

**Author:** [@Asher\_Shoshan](https://discuss.elastic.co/u/Asher_Shoshan)\
**Replies:** 9\
**Last updated:** [March 16, 2018, 6:01pm UTC](https://discuss.elastic.co/t/filebeat-new-module-how-to-complete/123104 "2018-03-16T18:01:46Z")

</div>

Trying to create additional module to filebeat (some application log); followed the manual, but not sure how to complete the task after creating the fields.. How do I move it into a filebeat docker container?

---

## [ESIntegTestCase 5.0 issues](https://discuss.elastic.co/t/esintegtestcase-5-0-issues/64091)

<div class="topic-metadata">

**Author:** [@trisport88](https://discuss.elastic.co/u/trisport88)\
**Replies:** 9\
**Last updated:** [March 25, 2017, 7:01pm UTC](https://discuss.elastic.co/t/esintegtestcase-5-0-issues/64091 "2017-03-25T19:01:03Z")

</div>

Hi, I'm using gradle to test a small program to index and search documents. The program works fine but I wanted to add some unit tests using ESIntegTestCase (Before 5.0 I was creating a Node with the NodeBuilder which w…

---

## [Master goes down, even after re-election, cluster is unresponsive](https://discuss.elastic.co/t/master-goes-down-even-after-re-election-cluster-is-unresponsive/101421)

<div class="topic-metadata">

**Author:** [@Abhilash\_Bolla](https://discuss.elastic.co/u/Abhilash_Bolla)\
**Replies:** 11\
**Last updated:** [September 22, 2017, 7:31am UTC](https://discuss.elastic.co/t/master-goes-down-even-after-re-election-cluster-is-unresponsive/101421 "2017-09-22T07:31:21Z")

</div>

I have a 5 node cluster with 3 master eligible nodes and 2 dedicated data nodes. In the current cluster state, the current master node left owing to long GC's. After re-election, master was assigned to some other maste…

---

## [Logstash parsing Nginx logs failed](https://discuss.elastic.co/t/logstash-parsing-nginx-logs-failed/192864)

<div class="topic-metadata">

**Author:** [@Orest\_Gulman](https://discuss.elastic.co/u/Orest_Gulman)\
**Replies:** 9\
**Last updated:** [July 31, 2019, 3:58pm UTC](https://discuss.elastic.co/t/logstash-parsing-nginx-logs-failed/192864 "2019-07-31T15:58:28Z")

</div>

I'm running Logstash-oss 7.2.0 (docker) and Filebeat 7.2.0 (rpm). Filebeat collecting Nginx access/error logs using Nginx module and sending to Logstash. My Logstash pipeline was taken from the official documentation: …

---

## [Possible Faulty CDN Node?](https://discuss.elastic.co/t/possible-faulty-cdn-node/67627)

<div class="topic-metadata">

**Author:** [@tylerjl](https://discuss.elastic.co/u/tylerjl)\
**Replies:** 10\
**Last updated:** [December 15, 2016, 11:35pm UTC](https://discuss.elastic.co/t/possible-faulty-cdn-node/67627 "2016-12-15T23:35:46Z")

</div>

We've been hearing some reports that certain images aren't being served to some users over the CDN Discourse uses. For example: Some initial investigation led to finding this image being served over p-uswd00.kxcdn.com …

---

## [Why is a trigram search on firstName so much faster than a trigram search on lastName?](https://discuss.elastic.co/t/why-is-a-trigram-search-on-firstname-so-much-faster-than-a-trigram-search-on-lastname/173910)

<div class="topic-metadata">

**Author:** [@mkoehler](https://discuss.elastic.co/u/mkoehler)\
**Replies:** 11\
**Last updated:** [April 18, 2019, 10:43am UTC](https://discuss.elastic.co/t/why-is-a-trigram-search-on-firstname-so-much-faster-than-a-trigram-search-on-lastname/173910 "2019-04-18T10:43:55Z")

</div>

We use ElasticSearch to index customer records (name + address) and in our queries we use trigram searches. When i profiled some of the queries i noticed something peculiar that i don't understand, and i was hoping to g…

---

## [Jdbc plugin ships Repeated data from mongodb](https://discuss.elastic.co/t/jdbc-plugin-ships-repeated-data-from-mongodb/189914)

<div class="topic-metadata">

**Author:** [@chandu5565](https://discuss.elastic.co/u/chandu5565)\
**Replies:** 15\
**Last updated:** [August 22, 2019, 7:16am UTC](https://discuss.elastic.co/t/jdbc-plugin-ships-repeated-data-from-mongodb/189914 "2019-08-22T07:16:43Z")

</div>

Hi, I am using logstash JDBC plugin to ship data from Mongo DB to elasticsearch. The data stored in the Mongo DB is in JSON documents. When logstash try to fetch the data every 1 min its getting repeated data. Total doc…

---

## [Snapshot Deletion Takes a very long time](https://discuss.elastic.co/t/snapshot-deletion-takes-a-very-long-time/242222)

<div class="topic-metadata">

**Author:** [@proton](https://discuss.elastic.co/u/proton)\
**Replies:** 10\
**Last updated:** [August 2, 2020, 6:35am UTC](https://discuss.elastic.co/t/snapshot-deletion-takes-a-very-long-time/242222 "2020-08-02T06:35:05Z")

</div>

Hello, We have snapshots for ES 7.5.2 cluster in Google Cloud Storage(GCS). We have a lot of snapshots going almost a year back and now we are trying to delete the snapshots and keep only last 90 days of data. In the pr…

---

## [Kibana Canvas が Windows版 で動きません。](https://discuss.elastic.co/t/kibana-canvas-windows/142885)

<div class="topic-metadata">

**Author:** [@Hideki\_Kimura](https://discuss.elastic.co/u/Hideki_Kimura)\
**Replies:** 10\
**Last updated:** [August 20, 2018, 3:43am UTC](https://discuss.elastic.co/t/kibana-canvas-windows/142885 "2018-08-20T03:43:51Z")

</div>

Elastic Stack : 6.3.2 X-Pack : Basic Kibana Plugin : 未導入 OS: Windows 10 Browser : IE11, Chrome 67.0.3396.99 Installation Instructions に従って Kibana Canvas プラグインをインストールしましたが、 Kibana を起動するとエラー画面が出て何もできません。 とりあえず Wind…

---

## [Filter by event.code and divide message field](https://discuss.elastic.co/t/filter-by-event-code-and-divide-message-field/211473)

<div class="topic-metadata">

**Author:** [@KOTOXJle6](https://discuss.elastic.co/u/KOTOXJle6)\
**Replies:** 11\
**Last updated:** [December 19, 2019, 9:21am UTC](https://discuss.elastic.co/t/filter-by-event-code-and-divide-message-field/211473 "2019-12-19T09:21:36Z")

</div>

Hello! I have logstash 7.1 and winlogbeat 7.1. Im trying to get events 4624 from domain controllers, divide message filed into multiple field and then remove everything i don't need. I have 2 problems there: I've st…

---

## [ECK Elasticsearch is unavailable and stuck during upgrade process](https://discuss.elastic.co/t/eck-elasticsearch-is-unavailable-and-stuck-during-upgrade-process/247314)

<div class="topic-metadata">

**Author:** [@amanjain](https://discuss.elastic.co/u/amanjain)\
**Replies:** 11\
**Last updated:** [September 8, 2020, 7:23am UTC](https://discuss.elastic.co/t/eck-elasticsearch-is-unavailable-and-stuck-during-upgrade-process/247314 "2020-09-08T07:23:56Z")

</div>

Hello I have installed the elasticsearch cluster using ECK with (master = 3, client=2, data=40) config: indices.queries.cache.size: 20% the cluster was in Ready and Green state. Then I changed cache size to 21…

---

## [Heap usage issue](https://discuss.elastic.co/t/heap-usage-issue/224554)

<div class="topic-metadata">

**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\
**Replies:** 17\
**Last updated:** [April 17, 2020, 4:23pm UTC](https://discuss.elastic.co/t/heap-usage-issue/224554 "2020-04-17T16:23:01Z")

</div>

Hi! I've got an issue with one visualization. There's a high cardinality field (HCF) I need to check once in a while. My visualization (line chart) shows the TOP 10 instances by unique count. When I run it on the past h…

---

## [How to write into multiple data node via PHP API](https://discuss.elastic.co/t/how-to-write-into-multiple-data-node-via-php-api/87106)

<div class="topic-metadata">

**Author:** [@pjayramkumar](https://discuss.elastic.co/u/pjayramkumar)\
**Replies:** 15\
**Last updated:** [May 26, 2017, 4:49am UTC](https://discuss.elastic.co/t/how-to-write-into-multiple-data-node-via-php-api/87106 "2017-05-26T04:49:11Z")

</div>

Hello i am using PHP API to write data into 2 nodes of the master node in single cluster how i can save the specific data into specific node via PHP REST API is there any setting to define in the REST API that Da…

---

## [No indexes, no error logs](https://discuss.elastic.co/t/no-indexes-no-error-logs/113015)

<div class="topic-metadata">

**Author:** [@subin](https://discuss.elastic.co/u/subin)\
**Replies:** 10\
**Last updated:** [December 26, 2017, 9:25am UTC](https://discuss.elastic.co/t/no-indexes-no-error-logs/113015 "2017-12-26T09:25:04Z")

</div>

I've been trying to push logs with Logstash into 3-node elasticsearch cluster. I start logstash, logstash logs all fine, but no logs appear in ES. I've 3 nodes, both data and master-eligible nodes, and one among them is …

---

## [Add two value from two record](https://discuss.elastic.co/t/add-two-value-from-two-record/243126)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 24\
**Last updated:** [August 3, 2020, 4:02pm UTC](https://discuss.elastic.co/t/add-two-value-from-two-record/243126 "2020-08-03T16:02:47Z")

</div>

I am gone a receive two line of record every few min. example name : total code1 : 100 code2: 101 I would like to create a record { name: code1 total: 100 combine\_total: 201 } { name:code2 total: …

---

## [Log correlation does not match trace.id from active span/transaction?](https://discuss.elastic.co/t/log-correlation-does-not-match-trace-id-from-active-span-transaction/298967)

<div class="topic-metadata">

**Author:** [@efdknittlfrank](https://discuss.elastic.co/u/efdknittlfrank)\
**Replies:** 12\
**Last updated:** [March 13, 2022, 6:22am UTC](https://discuss.elastic.co/t/log-correlation-does-not-match-trace-id-from-active-span-transaction/298967 "2022-03-13T06:22:04Z")

</div>

I have a use-case where tasks (Java Function\<T, R\> or Supplier) are potentially queued. If no task is currently running, the current thread directly executes the task. If another task is pending, the new task will be que…

---

## [Not able to create index using logstash for my ES cluster](https://discuss.elastic.co/t/not-able-to-create-index-using-logstash-for-my-es-cluster/216654)

<div class="topic-metadata">

**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\
**Replies:** 17\
**Last updated:** [January 29, 2020, 1:24pm UTC](https://discuss.elastic.co/t/not-able-to-create-index-using-logstash-for-my-es-cluster/216654 "2020-01-29T13:24:39Z")

</div>

Hello, I am using jdbc input plugin with logstash to fetch data from database and create index in ES. But when i am trying to run config file it is not getting started. I am having 3 node cluster with one master node …

---

## [Logstash service stopped without any specific error](https://discuss.elastic.co/t/logstash-service-stopped-without-any-specific-error/290504)

<div class="topic-metadata">

**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\
**Replies:** 15\
**Last updated:** [December 7, 2021, 9:03am UTC](https://discuss.elastic.co/t/logstash-service-stopped-without-any-specific-error/290504 "2021-12-07T09:03:23Z")

</div>

Hello, I've been handling logstash this week, and the service always turned off at night (around 8pm-10pm), so I enabled the debug log, and I can't find any error log that lead to the stopped service here's the last log…

---

## [Cluster Docker "not enough master nodes discovered during pinging"](https://discuss.elastic.co/t/cluster-docker-not-enough-master-nodes-discovered-during-pinging/155955)

<div class="topic-metadata">

**Author:** [@mcosta29](https://discuss.elastic.co/u/mcosta29)\
**Replies:** 9\
**Last updated:** [November 9, 2018, 5:21pm UTC](https://discuss.elastic.co/t/cluster-docker-not-enough-master-nodes-discovered-during-pinging/155955 "2018-11-09T17:21:02Z")

</div>

I'm trying up 1 cluster of elastic (with 3 nodes) in docker on 3 hosts differents, I up 2 nodes and return the error when i access IP:9200/\_cluster/health?pretty : { "error" : { "root\_cause" : \[ { "type" : "master\_…

---

## [Increase number of shards for system indices](https://discuss.elastic.co/t/increase-number-of-shards-for-system-indices/138388)

<div class="topic-metadata">

**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\
**Replies:** 9\
**Last updated:** [July 4, 2018, 1:38pm UTC](https://discuss.elastic.co/t/increase-number-of-shards-for-system-indices/138388 "2018-07-04T13:38:15Z")

</div>

Hi We have 3 data nodes where 1 is in datacenter A and 2 are in datacenter B. We tried testing the failover resiliency of our cluster which resulted in kibana completely unable to do anything and a red cluster. I notice…

---

## [Backup and restore elasticsearch](https://discuss.elastic.co/t/backup-and-restore-elasticsearch/226637)

<div class="topic-metadata">

**Author:** [@Madhu\_Cherukuri](https://discuss.elastic.co/u/Madhu_Cherukuri)\
**Replies:** 17\
**Last updated:** [April 8, 2020, 8:06am UTC](https://discuss.elastic.co/t/backup-and-restore-elasticsearch/226637 "2020-04-08T08:06:30Z")

</div>

Hello, in-order to take backup while creating path.repo in /etc/elaticsearch/elasticsearch.yml, the elasticsearch is failing to start its beeing in stoped state dont know what is the issue below config file ==========…

---

## [DNS Filter](https://discuss.elastic.co/t/dns-filter/124379)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 9\
**Last updated:** [March 19, 2018, 3:38am UTC](https://discuss.elastic.co/t/dns-filter/124379 "2018-03-19T03:38:22Z")

</div>

I setup a filter to do some internal DNS resolution but it seems that when I give it a proper DNS server, it stops processing events. If I give it a bogus DNS server I, obviously, get non-stop resolution failures in the…

---

## [TTY logging decoding](https://discuss.elastic.co/t/tty-logging-decoding/150548)

<div class="topic-metadata">

**Author:** [@bluiks](https://discuss.elastic.co/u/bluiks)\
**Replies:** 12\
**Last updated:** [October 2, 2018, 4:31pm UTC](https://discuss.elastic.co/t/tty-logging-decoding/150548 "2018-10-02T16:31:26Z")

</div>

I did not try Auditbeat yet, but based on what I read so far it does not support decoding type=USER\_TTY or type=TTY audit records. Is this correct? If it is correct, then this would be extremely disappointing. It would …

---

## [Adding a new search feature in a plugin](https://discuss.elastic.co/t/adding-a-new-search-feature-in-a-plugin/110984)

<div class="topic-metadata">

**Author:** [@Shai\_Erera](https://discuss.elastic.co/u/Shai_Erera)\
**Replies:** 16\
**Last updated:** [December 19, 2017, 7:43pm UTC](https://discuss.elastic.co/t/adding-a-new-search-feature-in-a-plugin/110984 "2017-12-19T19:43:11Z")

</div>

Hi. I am trying to add a search feature in a plugin. The feature is not e.g. a FetchSubPhase, but rather something similar to suggest/aggregation -- that is, in addition to performing the regular search request, I would …

---

## [How to handle LOGS and METRICS for an ElectronJs app using Elastic APM](https://discuss.elastic.co/t/how-to-handle-logs-and-metrics-for-an-electronjs-app-using-elastic-apm/180341)

<div class="topic-metadata">

**Author:** [@michaelsogos](https://discuss.elastic.co/u/michaelsogos)\
**Replies:** 9\
**Last updated:** [May 12, 2019, 7:56am UTC](https://discuss.elastic.co/t/how-to-handle-logs-and-metrics-for-an-electronjs-app-using-elastic-apm/180341 "2019-05-12T07:56:55Z")

</div>

Dear All, How do we can handle collecting logs and metrics thanks to APM for NodeJs for an ElectronJs project? Can you add module to support Electron framework?

---

## [\[logstash\]what does "\\1" mean in gsub?](https://discuss.elastic.co/t/logstash-what-does-1-mean-in-gsub/199946)

<div class="topic-metadata">

**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\
**Replies:** 11\
**Last updated:** [September 26, 2019, 5:41am UTC](https://discuss.elastic.co/t/logstash-what-does-1-mean-in-gsub/199946 "2019-09-26T05:41:40Z")

</div>

Hi team, what does "\\1" mean in below configuration and how to use it? I can;t find the official documentation which can explain it. mutate { gsub =\> \["message","(?\<=SERVICEPERFDATA::)procs=(\\d+);\\S+", "\\1"\] } Is be…

---

## [Kibana4 not working with documents send via python into ElasticSearch](https://discuss.elastic.co/t/kibana4-not-working-with-documents-send-via-python-into-elasticsearch/38918)

<div class="topic-metadata">

**Author:** [@nicolas\_merle](https://discuss.elastic.co/u/nicolas_merle)\
**Replies:** 11\
**Last updated:** [January 13, 2016, 3:12pm UTC](https://discuss.elastic.co/t/kibana4-not-working-with-documents-send-via-python-into-elasticsearch/38918 "2016-01-13T15:12:25Z")

</div>

Hello, I am trying to implement an ElasticSearch server to store and display analysis of https answer. What I'm doing is that I send all the documents via python with the following code : i = 0 for answer in answers…

---

## [Loading 500 GB of data / 3500000000 documents to ES cluster](https://discuss.elastic.co/t/loading-500-gb-of-data-3500000000-documents-to-es-cluster/137935)

<div class="topic-metadata">

**Author:** [@pastechecker](https://discuss.elastic.co/u/pastechecker)\
**Replies:** 10\
**Last updated:** [August 30, 2018, 7:54am UTC](https://discuss.elastic.co/t/loading-500-gb-of-data-3500000000-documents-to-es-cluster/137935 "2018-08-30T07:54:54Z")

</div>

Greetings! I have a small cluster with following setup: Hardware: 2x 64 GB RAM, 16 cores CPU, 4x2TB HDD configured in RAID10. There is 1 Gbps connection between the nodes. Configuration: elasticsearch.yml node1.tes…

---

## [Netflow Logstash V9 not working not getting any logs](https://discuss.elastic.co/t/netflow-logstash-v9-not-working-not-getting-any-logs/91228)

<div class="topic-metadata">

**Author:** [@philippkahr](https://discuss.elastic.co/u/philippkahr)\
**Replies:** 10\
**Last updated:** [June 30, 2017, 7:20pm UTC](https://discuss.elastic.co/t/netflow-logstash-v9-not-working-not-getting-any-logs/91228 "2017-06-30T19:20:58Z")

</div>

Hallo Guys, i face a really weird issue. I cannot get any netflow logs into logstash. They even dont show up on stdout. i can see with tcpdump dst port 1535 that there are logs incoming. With tcpdump dst port 1535 -A i…

[Previous page](https://discuss.elastic.co/top.md?page=123&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=125&per_page=50&period=all)
