# Top

**URL:** https://discuss.elastic.co/top.md?page=1255&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1256

---

## [Filter Editor do not suggest new value](https://discuss.elastic.co/t/filter-editor-do-not-suggest-new-value/136711)

<div class="topic-metadata">

**Author:** [@florentmair](https://discuss.elastic.co/u/florentmair)\
**Replies:** 6\
**Last updated:** [July 13, 2018, 11:44am UTC](https://discuss.elastic.co/t/filter-editor-do-not-suggest-new-value/136711 "2018-07-13T11:44:52Z")

</div>

Hi all, the filter editor doesn't suggest a new value. and it's not working with several fields like beat.hostname.keyword or fields.instance.keyword. when i search with this command, it's OK, i have the 3 value expec…

---

## [Logstash service crash 5.6.1](https://discuss.elastic.co/t/logstash-service-crash-5-6-1/127118)

<div class="topic-metadata">

**Author:** [@slava1](https://discuss.elastic.co/u/slava1)\
**Replies:** 6\
**Last updated:** [April 12, 2018, 7:28am UTC](https://discuss.elastic.co/t/logstash-service-crash-5-6-1/127118 "2018-04-12T07:28:29Z")

</div>

Hi, I used Centos 7 with elk stack 5.6.1 Logstash service crash when restarted. I notice that from logstash configuration only input with tcp do not work: input { tcp { port =\> "5759" type =\> "iis" co…

---

## [Logstash s3 output plugin folder structure](https://discuss.elastic.co/t/logstash-s3-output-plugin-folder-structure/261152)

<div class="topic-metadata">

**Author:** [@Ohad\_Elias](https://discuss.elastic.co/u/Ohad_Elias)\
**Replies:** 2\
**Last updated:** [January 14, 2021, 4:43pm UTC](https://discuss.elastic.co/t/logstash-s3-output-plugin-folder-structure/261152 "2021-01-14T16:43:47Z")

</div>

Our DevOps engineers have been using Logstash S3 plugin which simply puts all data in a S3 bucket location. Since we have configured files to be created in every hour on S3, the number of files in the S3 location touched…

---

## [Multi-factor auth for Kibana users on Elastic Cloud?](https://discuss.elastic.co/t/multi-factor-auth-for-kibana-users-on-elastic-cloud/160880)

<div class="topic-metadata">

**Author:** [@\_Alex](https://discuss.elastic.co/u/_Alex)\
**Replies:** 2\
**Last updated:** [December 19, 2018, 4:05pm UTC](https://discuss.elastic.co/t/multi-factor-auth-for-kibana-users-on-elastic-cloud/160880 "2018-12-19T16:05:27Z")

</div>

Is it possible to enable multi-factor authentication for users of Kibana running on Elastic Cloud? I am able to set up 2FA with Google Authenticator on the account level, but haven't found anything suggesting this is po…

---

## [Error installing licence](https://discuss.elastic.co/t/error-installing-licence/109949)

<div class="topic-metadata">

**Author:** [@Peter\_Boer](https://discuss.elastic.co/u/Peter_Boer)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 9:22pm UTC](https://discuss.elastic.co/t/error-installing-licence/109949 "2017-12-01T21:22:38Z")

</div>

When installing the licence using: curl -XPUT -u elastic 'http://:/\_xpack/license' -H "Content-Type: application/json" -d @license.json I get this error: {"error":"Incorrect HTTP method for uri \[/\_xpack/license\] and m…

---

## [Sorting on custom field](https://discuss.elastic.co/t/sorting-on-custom-field/102269)

<div class="topic-metadata">

**Author:** [@mberger1](https://discuss.elastic.co/u/mberger1)\
**Replies:** 2\
**Last updated:** [October 2, 2017, 6:44am UTC](https://discuss.elastic.co/t/sorting-on-custom-field/102269 "2017-10-02T06:44:56Z")

</div>

Hey there, I know, that this topic has been discussed many many times, but unfortunately, no solution was proposed. Correct me when I am wrong, this is all just my personal knowledge build by reading countless threads …

---

## [Grouping based on multiple properties](https://discuss.elastic.co/t/grouping-based-on-multiple-properties/67818)

<div class="topic-metadata">

**Author:** [@Dennis\_Jakobsen](https://discuss.elastic.co/u/Dennis_Jakobsen)\
**Replies:** 2\
**Last updated:** [December 2, 2016, 4:48pm UTC](https://discuss.elastic.co/t/grouping-based-on-multiple-properties/67818 "2016-12-02T16:48:46Z")

</div>

I have an index of movies. The movies are sourced from different web sites and there are overlaps - for example Superman III is both sources from imdb and hulu. For each movie I have the title, and the name of the site…

---

## [Error received from logstash-rss-input \[\`Error: tag \<link\> is too much in tag \<channel\>\`\]](https://discuss.elastic.co/t/error-received-from-logstash-rss-input-error-tag-link-is-too-much-in-tag-channel/28559)

<div class="topic-metadata">

**Author:** [@bryankaraffa](https://discuss.elastic.co/u/bryankaraffa)\
**Replies:** 2\
**Last updated:** [September 3, 2015, 6:18am UTC](https://discuss.elastic.co/t/error-received-from-logstash-rss-input-error-tag-link-is-too-much-in-tag-channel/28559 "2015-09-03T06:18:03Z")

</div>

Receiving an error \[Error: tag \<link\> is too much in tag \<channel\>\] when adding my simple rss input configuration: /etc/logstash/conf.d/02-rss-input.conf input { rss { url =\> "http://status.aws.amazon.com/rss/…

---

## [How to multiline large messages?](https://discuss.elastic.co/t/how-to-multiline-large-messages/27971)

<div class="topic-metadata">

**Author:** [@michaellizhou](https://discuss.elastic.co/u/michaellizhou)\
**Replies:** 2\
**Last updated:** [August 24, 2015, 8:15pm UTC](https://discuss.elastic.co/t/how-to-multiline-large-messages/27971 "2015-08-24T20:15:21Z")

</div>

After taking a step back I notice a lot of messages are useless. And I want to add a tag on them to easily filter while on Kibana. The message is actually logs that span about 70 lines that when put together describe a h…

---

## [CSV file with different record types](https://discuss.elastic.co/t/csv-file-with-different-record-types/24882)

<div class="topic-metadata">

**Author:** [@Khoa\_Nguyen1](https://discuss.elastic.co/u/Khoa_Nguyen1)\
**Replies:** 2\
**Last updated:** [July 3, 2015, 8:27pm UTC](https://discuss.elastic.co/t/csv-file-with-different-record-types/24882 "2015-07-03T20:27:21Z")

</div>

Our files are in CSV format but each line can be of a different record type. For example: f1,f2,f3 g1,g2,g3,g4,g5 h1,h2,h3,h4 Record type can be determined by examining the value of the first field. How do I write a …

---

## [No signature of method: java.util.ArrayList.get() is applicable for argument types: (org.codehaus.groovy.runtime.GStringImpl)](https://discuss.elastic.co/t/no-signature-of-method-java-util-arraylist-get-is-applicable-for-argument-types-org-codehaus-groovy-runtime-gstringimpl/292554)

<div class="topic-metadata">

**Author:** [@dishant](https://discuss.elastic.co/u/dishant)\
**Replies:** 0\
**Last updated:** [December 21, 2021, 11:51am UTC](https://discuss.elastic.co/t/no-signature-of-method-java-util-arraylist-get-is-applicable-for-argument-types-org-codehaus-groovy-runtime-gstringimpl/292554 "2021-12-21T11:51:53Z")

</div>

I am trying to make an Elasticsearch plugin for Elasticsearch version 5.6.16 and using the gradle version 4.7. I am using oracle jdk9. Whenever, I'm trying to create the project build, it is giving me an error. I have su…

---

## [Deprecation warning re. granting alias permissions to a role](https://discuss.elastic.co/t/deprecation-warning-re-granting-alias-permissions-to-a-role/281896)

<div class="topic-metadata">

**Author:** [@ceekay](https://discuss.elastic.co/u/ceekay)\
**Replies:** 3\
**Last updated:** [August 24, 2021, 1:45am UTC](https://discuss.elastic.co/t/deprecation-warning-re-granting-alias-permissions-to-a-role/281896 "2021-08-24T01:45:11Z")

</div>

Hi there. I've noticed a bunch of messages in my deprecation logs that go like this: Role \[some-dept\] contains index privileges covering the \[some-dept-alias\] alias but which do not cover some of the indices that it po…

---

## [Circuit breaker problem](https://discuss.elastic.co/t/circuit-breaker-problem/253828)

<div class="topic-metadata">

**Author:** [@gborg](https://discuss.elastic.co/u/gborg)\
**Replies:** 3\
**Last updated:** [November 2, 2020, 12:16pm UTC](https://discuss.elastic.co/t/circuit-breaker-problem/253828 "2020-11-02T12:16:47Z")

</div>

So, my situation is: I have a pretty big cluster (10TB) of real time log data, today is a high-load day and I am getting circuit breaker errors ## circuit\_breaking\_exception at \`shard\` 0 \`index\` open--2020.09.30 \`no…

---

## [Netflow and Syslog router data point to Logstash or to an intermediate Syslog-NG server?](https://discuss.elastic.co/t/netflow-and-syslog-router-data-point-to-logstash-or-to-an-intermediate-syslog-ng-server/237640)

<div class="topic-metadata">

**Author:** [@jelocabral](https://discuss.elastic.co/u/jelocabral)\
**Replies:** 3\
**Last updated:** [June 19, 2020, 7:34am UTC](https://discuss.elastic.co/t/netflow-and-syslog-router-data-point-to-logstash-or-to-an-intermediate-syslog-ng-server/237640 "2020-06-19T07:34:55Z")

</div>

Hi people, please I need to know this: If I want to view in Kibana the Netflow and Syslog data from a Cisco router, I need to know which of the following choices are correct: I have to send the Netflow and Syslog dat…

---

## [Space\_selector on Kibana always loading and cannot be accessed](https://discuss.elastic.co/t/space-selector-on-kibana-always-loading-and-cannot-be-accessed/231472)

<div class="topic-metadata">

**Author:** [@Joseph-Gan-wk](https://discuss.elastic.co/u/Joseph-Gan-wk)\
**Replies:** 3\
**Last updated:** [May 8, 2020, 12:29am UTC](https://discuss.elastic.co/t/space-selector-on-kibana-always-loading-and-cannot-be-accessed/231472 "2020-05-08T00:29:23Z")

</div>

Hi, I am getting this error, space\_selector on Kibana always loading and cannot be accessed. !\[image|294x129\](upload://slAp3iVWAtKIlt3bAMyVrQxoMzU.png) idk what is the problem?

---

## [\[Unresolved\] 5 Metricbeat Kibana Dashboards show various "X of X Shards Failed" messages](https://discuss.elastic.co/t/unresolved-5-metricbeat-kibana-dashboards-show-various-x-of-x-shards-failed-messages/166835)

<div class="topic-metadata">

**Author:** [@wad11656](https://discuss.elastic.co/u/wad11656)\
**Replies:** 3\
**Last updated:** [February 3, 2019, 2:09am UTC](https://discuss.elastic.co/t/unresolved-5-metricbeat-kibana-dashboards-show-various-x-of-x-shards-failed-messages/166835 "2019-02-03T02:09:44Z")

</div>

Host: Debian 9 ELK Stack version: 6.6.0 Logs sent to Logstash or Elasticsearch: Elasticsearch (hopefully Logstash later) Summary: When I go to Dashboards in Kibana and click on the \[Metricbeat\] dashboards, 5 of them …

---

## [Find duplicate docs by multi fields](https://discuss.elastic.co/t/find-duplicate-docs-by-multi-fields/120352)

<div class="topic-metadata">

**Author:** [@Guylot](https://discuss.elastic.co/u/Guylot)\
**Replies:** 0\
**Last updated:** [February 18, 2018, 1:16pm UTC](https://discuss.elastic.co/t/find-duplicate-docs-by-multi-fields/120352 "2018-02-18T13:16:09Z")

</div>

Hi, I need to find duplicate docs which is determined by multi fields, and I want to run this operation daily. Right now I have 2 solutions: Script query where I concate the fields into one field and do term aggrega…

---

## [Kibana 4.3.x plugins](https://discuss.elastic.co/t/kibana-4-3-x-plugins/55458)

<div class="topic-metadata">

**Author:** [@dianadijan](https://discuss.elastic.co/u/dianadijan)\
**Replies:** 3\
**Last updated:** [July 26, 2016, 8:04pm UTC](https://discuss.elastic.co/t/kibana-4-3-x-plugins/55458 "2016-07-26T20:04:31Z")

</div>

Hi , Can you please provide sample source code of plugins for Kibana 4.3.x? I tried Timelion, Elasticsearch\_status but they are all developed for Kibana 5 and throowing incompatibility error when I install for Kibana…

---

## [Switch Master Nodes (ES 1.5.2)](https://discuss.elastic.co/t/switch-master-nodes-es-1-5-2/52547)

<div class="topic-metadata">

**Author:** [@pyloor](https://discuss.elastic.co/u/pyloor)\
**Replies:** 3\
**Last updated:** [June 12, 2016, 10:15pm UTC](https://discuss.elastic.co/t/switch-master-nodes-es-1-5-2/52547 "2016-06-12T22:15:55Z")

</div>

Hi there, current setup: two master only nodes with 6 data nodes. new setup: three master only nodes with 6 data nodes. I use discovery.zen.ping.unicast.hosts and discovery.zen.ping.multicast.enabled: false. Besides th…

---

## [\[SOLVED\] Forcing a static year to date timestamps](https://discuss.elastic.co/t/solved-forcing-a-static-year-to-date-timestamps/40963)

<div class="topic-metadata">

**Author:** [@IGarvin](https://discuss.elastic.co/u/IGarvin)\
**Replies:** 3\
**Last updated:** [February 9, 2016, 1:36pm UTC](https://discuss.elastic.co/t/solved-forcing-a-static-year-to-date-timestamps/40963 "2016-02-09T13:36:09Z")

</div>

Hi, I'm trying to take a timestamp from a log and force it to use the year 2015 since the log files do not originally include the year. Here's an example log entry: LOG: 06/02 15:24:03:643 1 Check for updates In m…

---

## [Incorrect path being indexed](https://discuss.elastic.co/t/incorrect-path-being-indexed/29763)

<div class="topic-metadata">

**Author:** [@mburlington](https://discuss.elastic.co/u/mburlington)\
**Replies:** 3\
**Last updated:** [September 25, 2015, 1:35pm UTC](https://discuss.elastic.co/t/incorrect-path-being-indexed/29763 "2015-09-25T13:35:00Z")

</div>

Hi, I’m looking for help for an issue I have with Logsatsh 1.5.4. I’m using Logstash to read a number of log files from various Java services. The filenames are like this: AvailabilityAndFulfilment.log DocumentGene…

---

## [Watch Expiration Date](https://discuss.elastic.co/t/watch-expiration-date/25459)

<div class="topic-metadata">

**Author:** [@prashant\_sharma](https://discuss.elastic.co/u/prashant_sharma)\
**Replies:** 3\
**Last updated:** [July 13, 2015, 5:44pm UTC](https://discuss.elastic.co/t/watch-expiration-date/25459 "2015-07-13T17:44:45Z")

</div>

I am looking for ways to specify an expiry period for a Watch. And was thinking of using the \_ttl flag. Are there any other ways to associate an expiry date with a Watch?

---

## [ES fell down and it can't get up](https://discuss.elastic.co/t/es-fell-down-and-it-cant-get-up/23940)

<div class="topic-metadata">

**Author:** [@bdunbar](https://discuss.elastic.co/u/bdunbar)\
**Replies:** 3\
**Last updated:** [June 18, 2015, 10:22pm UTC](https://discuss.elastic.co/t/es-fell-down-and-it-cant-get-up/23940 "2015-06-18T22:22:09Z")

</div>

New ES admin. Setup my server. Shoved some data into it. Installed Shield. Uninstalled Shield. Restarted elasticsearch and that fails and poops into the log .. Primary shard is not active or isn't assigned is a kn…

---

## [Functionbeat does not update documents with existing \_id](https://discuss.elastic.co/t/functionbeat-does-not-update-documents-with-existing-id/252901)

<div class="topic-metadata">

**Author:** [@amiPorat](https://discuss.elastic.co/u/amiPorat)\
**Replies:** 4\
**Last updated:** [November 11, 2020, 4:52am UTC](https://discuss.elastic.co/t/functionbeat-does-not-update-documents-with-existing-id/252901 "2020-11-11T04:52:44Z")

</div>

Hello, I am currently deploying Functionbeat configured to accept events from an SQS queue. The goal is to use a processor/ingest pipeline to extract and set \_id from fields in the incoming messages. Documents with exis…

---

## [Filebeat with custom logfile and kubernetes metadata to elasticsearch and kibana](https://discuss.elastic.co/t/filebeat-with-custom-logfile-and-kubernetes-metadata-to-elasticsearch-and-kibana/299403)

<div class="topic-metadata">

**Author:** [@v\_anil](https://discuss.elastic.co/u/v_anil)\
**Replies:** 0\
**Last updated:** [March 11, 2022, 6:40am UTC](https://discuss.elastic.co/t/filebeat-with-custom-logfile-and-kubernetes-metadata-to-elasticsearch-and-kibana/299403 "2022-03-11T06:40:08Z")

</div>

Our applications are deployed in AWS EKS cluster, and for certain reasons we need to write our app logs to separate file lets say ${POD\_NAME}.applog instead of stdout (we mounted /var/log/container/ to the pod /log folde…

---

## [Aggregations distinct doc\_count](https://discuss.elastic.co/t/aggregations-distinct-doc-count/178184)

<div class="topic-metadata">

**Author:** [@DC\_Adams](https://discuss.elastic.co/u/DC_Adams)\
**Replies:** 0\
**Last updated:** [April 24, 2019, 8:26am UTC](https://discuss.elastic.co/t/aggregations-distinct-doc-count/178184 "2019-04-24T08:26:31Z")

</div>

Hi, I have an index with candidates and the candidates have skills as nested objects. I am using nested aggregations to build facets with a count for each skill. While the "doc\_count" works great on the aggregation it d…

---

## [Filebeat setup. could not load template error](https://discuss.elastic.co/t/filebeat-setup-could-not-load-template-error/337135)

<div class="topic-metadata">

**Author:** [@ashmistry](https://discuss.elastic.co/u/ashmistry)\
**Replies:** 7\
**Last updated:** [June 29, 2023, 6:38pm UTC](https://discuss.elastic.co/t/filebeat-setup-could-not-load-template-error/337135 "2023-06-29T18:38:14Z")

</div>

Trying to setup filebeat on my stack. It's Elasticsearch OSS 7.10.2 with opensearch 2.4.1. I am using filebeat oss 7.12.1 and got a successful test output \[root\]# filebeat test output elasticsearch: https://xyz:9200... …

---

## [Using kibana alerting with filters](https://discuss.elastic.co/t/using-kibana-alerting-with-filters/259956)

<div class="topic-metadata">

**Author:** [@VAX](https://discuss.elastic.co/u/VAX)\
**Replies:** 1\
**Last updated:** [January 5, 2021, 2:19pm UTC](https://discuss.elastic.co/t/using-kibana-alerting-with-filters/259956 "2021-01-05T14:19:10Z")

</div>

hi all, im quite new with kibana i have kibana filled with messages coming from my equipment. i created an inverted filtered of "blacklist" so i will see the only ones i care about. now i want to create an alert that…

---

## [Sending SMS, Push Notifications, emails to the real time users of the product from Kibana Dashboard](https://discuss.elastic.co/t/sending-sms-push-notifications-emails-to-the-real-time-users-of-the-product-from-kibana-dashboard/215597)

<div class="topic-metadata">

**Author:** [@Abhi12](https://discuss.elastic.co/u/Abhi12)\
**Replies:** 1\
**Last updated:** [January 19, 2020, 11:15am UTC](https://discuss.elastic.co/t/sending-sms-push-notifications-emails-to-the-real-time-users-of-the-product-from-kibana-dashboard/215597 "2020-01-19T11:15:51Z")

</div>

How can we send emails, SMS, push notifications to all the users(real time) directly from the kibana dashboard??Like all marketing companies send bulk mail to their users. I want to send mail and SMS to the all users of…

---

## [Shard count does not match active mapping](https://discuss.elastic.co/t/shard-count-does-not-match-active-mapping/187411)

<div class="topic-metadata">

**Author:** [@o1o1o11o1](https://discuss.elastic.co/u/o1o1o11o1)\
**Replies:** 7\
**Last updated:** [June 26, 2019, 1:54am UTC](https://discuss.elastic.co/t/shard-count-does-not-match-active-mapping/187411 "2019-06-26T01:54:16Z")

</div>

I have 4 Elasticsearch 7.1 clusters using the same mapping template, that I can verify being in use: localhost:9200/\_template/mytemplate ... "settings": { "index": { ... "number\_of\_shards": "40", "ref…

---

## [Performance issue when searching data in a large array](https://discuss.elastic.co/t/performance-issue-when-searching-data-in-a-large-array/159182)

<div class="topic-metadata">

**Author:** [@DexinLi](https://discuss.elastic.co/u/DexinLi)\
**Replies:** 1\
**Last updated:** [December 4, 2018, 11:29am UTC](https://discuss.elastic.co/t/performance-issue-when-searching-data-in-a-large-array/159182 "2018-12-04T11:29:48Z")

</div>

Hello, We have an ES index of 14.2GB with 880,000+ docs。 Each doc has structure like this: { "\_index": "xxx", "\_type": "playlist", "\_id": "xxx", "\_score": 0, "\_source": { "id": 660369572158…

---

## [Kibana Iframe avoid credentials](https://discuss.elastic.co/t/kibana-iframe-avoid-credentials/127663)

<div class="topic-metadata">

**Author:** [@He\_Pamela](https://discuss.elastic.co/u/He_Pamela)\
**Replies:** 1\
**Last updated:** [April 11, 2018, 6:33pm UTC](https://discuss.elastic.co/t/kibana-iframe-avoid-credentials/127663 "2018-04-11T18:33:59Z")

</div>

Hi, I want to embeed a kibana visualization on a page. I have readonlyrest as a security. and I use kibana and elastic search 5.6.0 when I embed on the page the visualization. The security ask me again for the user a…

---

## [Hiding Minor Gridlines](https://discuss.elastic.co/t/hiding-minor-gridlines/127142)

<div class="topic-metadata">

**Author:** [@motts](https://discuss.elastic.co/u/motts)\
**Replies:** 7\
**Last updated:** [April 10, 2018, 1:40pm UTC](https://discuss.elastic.co/t/hiding-minor-gridlines/127142 "2018-04-10T13:40:11Z")

</div>

I cannot seem to get the minor grid lines to go away when dealing with smaller numbers. I remember using earlier versions of Kibana that had an option to view minor gridlines, but cannot find it on 6.2. In this example,…

---

## [Unified highlighter not working properly with sentence boundary scanner](https://discuss.elastic.co/t/unified-highlighter-not-working-properly-with-sentence-boundary-scanner/92199)

<div class="topic-metadata">

**Author:** [@SaiKiran\_Vukyam](https://discuss.elastic.co/u/SaiKiran_Vukyam)\
**Replies:** 1\
**Last updated:** [July 14, 2017, 9:29am UTC](https://discuss.elastic.co/t/unified-highlighter-not-working-properly-with-sentence-boundary-scanner/92199 "2017-07-14T09:29:19Z")

</div>

ElasticSearch version used: 5.4.1 When using these(unified, postings) highlighter the fragments in the query response have some difference. For example: With this query: "fragment\_size": 200,"number\_of\_fragments": 2 Un…

---

## [Aggregation on double field](https://discuss.elastic.co/t/aggregation-on-double-field/43680)

<div class="topic-metadata">

**Author:** [@Ozgur\_O\_Akdemirci](https://discuss.elastic.co/u/Ozgur_O_Akdemirci)\
**Replies:** 1\
**Last updated:** [March 8, 2016, 10:06am UTC](https://discuss.elastic.co/t/aggregation-on-double-field/43680 "2016-03-08T10:06:29Z")

</div>

Hi all, I've installed ES on a cluster, first I added a mapping, then put the data on the index. On a double type field I query for an aggregation. GET myindex/mytype/\_search { "query": { "filtered": { "qu…

---

## [Log stash process keeps crashing](https://discuss.elastic.co/t/log-stash-process-keeps-crashing/26353)

<div class="topic-metadata">

**Author:** [@utpal\_das123](https://discuss.elastic.co/u/utpal_das123)\
**Replies:** 1\
**Last updated:** [July 27, 2015, 10:36pm UTC](https://discuss.elastic.co/t/log-stash-process-keeps-crashing/26353 "2015-07-27T22:36:26Z")

</div>

Hi, My log stash process keeps crashing periodically. I need to debug the root cause, is there any logs or crash dumps i can inspect. I have installed on red hat linux

---

## [Running multiple instances triggers exception-java.lang.IndexOutOfBoundsException](https://discuss.elastic.co/t/running-multiple-instances-triggers-exception-java-lang-indexoutofboundsexception/8240)

<div class="topic-metadata">

**Author:** [@nelalx](https://discuss.elastic.co/u/nelalx)\
**Replies:** 7\
**Last updated:** [June 28, 2012, 3:59am UTC](https://discuss.elastic.co/t/running-multiple-instances-triggers-exception-java-lang-indexoutofboundsexception/8240 "2012-06-28T03:59:43Z")

</div>

Hi, I got a problem with my ElasticSearch. When I try to run two instances of ElasticSearch from the same machine, I got the following exception..Please help me out. We are running Ubuntu. we are using the l…

---

## [Logtash |7.12.1 | Multiple pipelines](https://discuss.elastic.co/t/logtash-7-12-1-multiple-pipelines/273607)

<div class="topic-metadata">

**Author:** [@Tarun\_N](https://discuss.elastic.co/u/Tarun_N)\
**Replies:** 5\
**Last updated:** [May 27, 2021, 8:12am UTC](https://discuss.elastic.co/t/logtash-7-12-1-multiple-pipelines/273607 "2021-05-27T08:12:34Z")

</div>

Hello All I have to configure multiple pipelines for which I carried out the changes in pipelines.yml with simple test configuration, after removing all the code to debug to make it work. Below is the sample configurati…

---

## [Curator Reindex error](https://discuss.elastic.co/t/curator-reindex-error/151120)

<div class="topic-metadata">

**Author:** [@JimP](https://discuss.elastic.co/u/JimP)\
**Replies:** 5\
**Last updated:** [October 11, 2018, 7:46pm UTC](https://discuss.elastic.co/t/curator-reindex-error/151120 "2018-10-11T19:46:21Z")

</div>

I'm using painless in my reindex to create the new index name from xxxxx-yyyy.mm.dd to xxxxx-yyyy.mm.dd-ro, and I get the error that the post run quick check failed. I didn't know how to name the destination index witho…

---

## [One token multiple normalizations](https://discuss.elastic.co/t/one-token-multiple-normalizations/51312)

<div class="topic-metadata">

**Author:** [@drount](https://discuss.elastic.co/u/drount)\
**Replies:** 5\
**Last updated:** [May 30, 2016, 1:58pm UTC](https://discuss.elastic.co/t/one-token-multiple-normalizations/51312 "2016-05-30T13:58:13Z")

</div>

Hello, Im setting up a project where I need to have several normalizations for a given token. For example, the text: I Don't go should be result of the queries: I dont go I don t go I don't go Thus I need t…

---

## [Index per company - any alternatives?](https://discuss.elastic.co/t/index-per-company-any-alternatives/11013)

<div class="topic-metadata">

**Author:** [@MoD](https://discuss.elastic.co/u/MoD)\
**Replies:** 5\
**Last updated:** [February 22, 2016, 9:43am UTC](https://discuss.elastic.co/t/index-per-company-any-alternatives/11013 "2016-02-22T09:43:04Z")

</div>

Hi, We are running a saas crm service. We set up elasticsearch to create an index per company (for example abc-company has its own index, xyz-company has its own index.). But after 1000+ company we are suspecti…

---

## [java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit](https://discuss.elastic.co/t/java-lang-illegalstateexception-logstash-stopped-processing-because-of-an-error-systemexit-exit/249918)

<div class="topic-metadata">

**Author:** [@Rajan\_Gupta](https://discuss.elastic.co/u/Rajan_Gupta)\
**Replies:** 4\
**Last updated:** [September 29, 2020, 4:22am UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-logstash-stopped-processing-because-of-an-error-systemexit-exit/249918 "2020-09-29T04:22:39Z")

</div>

Hi There, Got Stuck from last three days. I m getting this error while starting the logstash. Could anyone help me on this.Stack trace is defined below :- Sending Logstash logs to D:/Elasticsearch/logstash-7.9.1/logs …

---

## [Workplace - ERRO](https://discuss.elastic.co/t/workplace-erro/238161)

<div class="topic-metadata">

**Author:** [@Gustavo\_Gavazzoni](https://discuss.elastic.co/u/Gustavo_Gavazzoni)\
**Replies:** 4\
**Last updated:** [June 23, 2020, 5:47pm UTC](https://discuss.elastic.co/t/workplace-erro/238161 "2020-06-23T17:47:50Z")

</div>

Enterprise Search is starting... scripting container class loader urls: \[file:/home/ubuntu20/enterprise-search-7.8.0/tmp/jruby14890791972561241378extract/lib/jruby-stdlib-9.2.9.0.jar, file:/home/ubuntu20/enterprise-sear…

---

## [Logstash not tracking the current position in HP-UNIX](https://discuss.elastic.co/t/logstash-not-tracking-the-current-position-in-hp-unix/24283)

<div class="topic-metadata">

**Author:** [@Kumaravel](https://discuss.elastic.co/u/Kumaravel)\
**Replies:** 4\
**Last updated:** [July 6, 2015, 5:47pm UTC](https://discuss.elastic.co/t/logstash-not-tracking-the-current-position-in-hp-unix/24283 "2015-07-06T17:47:57Z")

</div>

Hi, I am still facing issue for tracking the current position of the log file being read. Whenever I restart the logstash agent, it starts reading for the start due to which I am getting duplicate entries in my elastic…

---

## [Replica shards unassigned after Shards allocation filter applied](https://discuss.elastic.co/t/replica-shards-unassigned-after-shards-allocation-filter-applied/134630)

<div class="topic-metadata">

**Author:** [@Ghanshyam\_Singh](https://discuss.elastic.co/u/Ghanshyam_Singh)\
**Replies:** 8\
**Last updated:** [June 7, 2018, 5:14pm UTC](https://discuss.elastic.co/t/replica-shards-unassigned-after-shards-allocation-filter-applied/134630 "2018-06-07T17:14:30Z")

</div>

I want to upgrade operating system for my elasticsearch cluster so I Planned not to give downtime to my cluster so I followed below steps. pass below command to reallocate shards for one server from cluster, PUT \_clus…

---

## [Decorating \_search with additional data](https://discuss.elastic.co/t/decorating--search-with-additional-data/12547)

<div class="topic-metadata">

**Author:** [@Dawid\_Weiss](https://discuss.elastic.co/u/Dawid_Weiss)\
**Replies:** 8\
**Last updated:** [June 28, 2013, 7:25pm UTC](https://discuss.elastic.co/t/decorating--search-with-additional-data/12547 "2013-06-28T19:25:25Z")

</div>

Hi everyone, I have a question related to ES internals (providing an extension to search functionality). We have a customer that would like to integrate clustering of search results directly with ES so that …

---

## [Modeling business hours for 'open now' queries](https://discuss.elastic.co/t/modeling-business-hours-for-open-now-queries/133060)

<div class="topic-metadata">

**Author:** [@panthersquirrel](https://discuss.elastic.co/u/panthersquirrel)\
**Replies:** 2\
**Last updated:** [May 24, 2018, 3:17am UTC](https://discuss.elastic.co/t/modeling-business-hours-for-open-now-queries/133060 "2018-05-24T03:17:43Z")

</div>

Suppose i have a set of users that are businesses and these businesses can have business hours in their respective timezones (ie America/Los\_Angeles...). For each of these businesses, they have a set of items, possibly i…

---

## [Prepend a text string to json output over tcp](https://discuss.elastic.co/t/prepend-a-text-string-to-json-output-over-tcp/119510)

<div class="topic-metadata">

**Author:** [@umii](https://discuss.elastic.co/u/umii)\
**Replies:** 2\
**Last updated:** [February 13, 2018, 7:58am UTC](https://discuss.elastic.co/t/prepend-a-text-string-to-json-output-over-tcp/119510 "2018-02-13T07:58:28Z")

</div>

Hi All, We have a basic configuration file up and running adding some enrichment data to a log source, For the output the receiving platform is expecting to have the existing text string prepending the json to identi…

---

## [Tag applied to every document](https://discuss.elastic.co/t/tag-applied-to-every-document/41675)

<div class="topic-metadata">

**Author:** [@Jerry\_Hoffmeister](https://discuss.elastic.co/u/Jerry_Hoffmeister)\
**Replies:** 2\
**Last updated:** [February 16, 2016, 7:31pm UTC](https://discuss.elastic.co/t/tag-applied-to-every-document/41675 "2016-02-16T19:31:36Z")

</div>

I've updated everything to the latest versions (logstash, elasticsearch, filebeat, kibana) and I see this tag added to every document: beats\_input\_codec\_plain\_applied Everything looks to be working but what does this …

---

## [Calling shorten URL api from watcher](https://discuss.elastic.co/t/calling-shorten-url-api-from-watcher/179153)

<div class="topic-metadata">

**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\
**Replies:** 1\
**Last updated:** [April 30, 2019, 10:32pm UTC](https://discuss.elastic.co/t/calling-shorten-url-api-from-watcher/179153 "2019-04-30T22:32:48Z")

</div>

In the post below, I'm investigating if it's possible for a painless script to call the shortened URL api. I realize that is not possible. Now I'm wondering if the watcher, through a web hook possibly, can call the short…

[Previous page](https://discuss.elastic.co/top.md?page=1254&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1256&per_page=50&period=all)
