# Top **URL:** https://discuss.elastic.co/top.md?page=1257&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1258 --- ## [Significant Terms "No Results Found"?](https://discuss.elastic.co/t/significant-terms-no-results-found/189388)
**Author:** [@ParkerShamblin](https://discuss.elastic.co/u/ParkerShamblin)\ **Replies:** 1\ **Last updated:** [July 8, 2019, 5:24pm UTC](https://discuss.elastic.co/t/significant-terms-no-results-found/189388 "2019-07-08T17:24:48Z")
I'm trying to use the "Significance Terms" aggregation on Twitter post, however, each time I try to I receive "No Results Found" (picture attached). When I try to use the Significant Terms aggregation on the text in the… --- ## [Metricbeat kubernetes WARN unable to index event](https://discuss.elastic.co/t/metricbeat-kubernetes-warn-unable-to-index-event/147092)
**Author:** [@Alex\_Armstrong](https://discuss.elastic.co/u/Alex_Armstrong)\ **Replies:** 1\ **Last updated:** [September 4, 2018, 10:03am UTC](https://discuss.elastic.co/t/metricbeat-kubernetes-warn-unable-to-index-event/147092 "2018-09-04T10:03:57Z")
We only have one warning level error being logged by metricbeat which stated as unable to index an event with a mapper\_parsing\_exception. Could you please advise on how to correct this. log sample: 2018-09-03T14:13:05.… --- ## [INFO: os::commit\_memory(X, X, 0) failed; error='Cannot allocate memory' (errno=12)](https://discuss.elastic.co/t/info-os-commit-memory-x-x-0-failed-error-cannot-allocate-memory-errno-12/102759)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 1\ **Last updated:** [October 10, 2017, 3:20pm UTC](https://discuss.elastic.co/t/info-os-commit-memory-x-x-0-failed-error-cannot-allocate-memory-errno-12/102759 "2017-10-10T15:20:16Z")
I'm trying to follow Google Cloud Storage Repository Plugin | Elasticsearch Plugins and Integrations \[5.6\] | Elastic and while executing command, I'm getting following error: # docker exec -it elasticsearch bin/elastics… --- ## [Elasticsearch-5.0.0 & 5.0.1 not able to start the service](https://discuss.elastic.co/t/elasticsearch-5-0-0-5-0-1-not-able-to-start-the-service/66237)
**Author:** [@bumenga](https://discuss.elastic.co/u/bumenga)\ **Replies:** 1\ **Last updated:** [November 21, 2016, 3:28pm UTC](https://discuss.elastic.co/t/elasticsearch-5-0-0-5-0-1-not-able-to-start-the-service/66237 "2016-11-21T15:28:01Z")
jvm.options : -Xms20g -Xmx20g -Xss1m Logs : \[2016-11-16 13:18:20\] \[info\] \[ 7892\] Commons Daemon procrun (1.0.15.0 64-bit) started \[2016-11-16 13:18:20\] \[info\] \[ 7892\] Starting service 'ES' ... \[2016-11-16 13… --- ## [Creating grok patterns for Horizon View debug](https://discuss.elastic.co/t/creating-grok-patterns-for-horizon-view-debug/36785)
**Author:** [@havealoha](https://discuss.elastic.co/u/havealoha)\ **Replies:** 1\ **Last updated:** [December 9, 2015, 7:07pm UTC](https://discuss.elastic.co/t/creating-grok-patterns-for-horizon-view-debug/36785 "2015-12-09T19:07:53Z")
I am a little confused about how to regex\\grok the data from the Horizon View debug logs that we are forwarding to logstash. I dont know what regex to put in the pattern. Maybe I dont even have this close? Here are the… --- ## [How do I create a boolean "OR" filter?](https://discuss.elastic.co/t/how-do-i-create-a-boolean-or-filter/282281)
**Author:** [@elastic\_yogi](https://discuss.elastic.co/u/elastic_yogi)\ **Replies:** 6\ **Last updated:** [August 24, 2021, 1:16am UTC](https://discuss.elastic.co/t/how-do-i-create-a-boolean-or-filter/282281 "2021-08-24T01:16:40Z")
I'd like to filter for EITHER (OR) of two values, but a filter appears to require (AND) a document to contain EACH value. I'm using a bool query currently, and should appears to be the only way to do an OR expression. Ho… --- ## [DocValues on Strings Analyzed](https://discuss.elastic.co/t/docvalues-on-strings-analyzed/81901)
**Author:** [@billnbell](https://discuss.elastic.co/u/billnbell)\ **Replies:** 6\ **Last updated:** [April 25, 2017, 4:55am UTC](https://discuss.elastic.co/t/docvalues-on-strings-analyzed/81901 "2017-04-25T04:55:07Z")
Is there work being done on adding Strings analyzed to doc\_values fields? DocValues helps a lot with speed of Aggs and Sorting. https://www.elastic.co/guide/en/elasticsearch/reference/current/doc-values.html --- ## [Chained input query - looping over hits values in query](https://discuss.elastic.co/t/chained-input-query-looping-over-hits-values-in-query/212903)
**Author:** [@Inammathe\_Inna](https://discuss.elastic.co/u/Inammathe_Inna)\ **Replies:** 2\ **Last updated:** [December 31, 2019, 7:08am UTC](https://discuss.elastic.co/t/chained-input-query-looping-over-hits-values-in-query/212903 "2019-12-31T07:08:58Z")
Hello, So I am a little stuck with this one.. Following this example: https://github.com/elastic/examples/blob/master/Alerting/Sample%20Watches/ml\_examples/bucket\_record\_chain\_watch.json I've managed to successfully c… --- ## [Weighted Average in a DataTable of Kibana](https://discuss.elastic.co/t/weighted-average-in-a-datatable-of-kibana/185909)
**Author:** [@Henrique\_Santiago](https://discuss.elastic.co/u/Henrique_Santiago)\ **Replies:** 2\ **Last updated:** [June 18, 2019, 7:18pm UTC](https://discuss.elastic.co/t/weighted-average-in-a-datatable-of-kibana/185909 "2019-06-18T19:18:20Z")
I have this index: PUT sales { "settings": { "index": { "number\_of\_shards": 3, "number\_of\_replicas": 0 } }, "mappings": { "properties": { "@timestamp": { "type": "date" … --- ## [Kibana Data Analysis I - Virtual Training - Class Size](https://discuss.elastic.co/t/kibana-data-analysis-i-virtual-training-class-size/114945)
**Author:** [@gregpaskal](https://discuss.elastic.co/u/gregpaskal)\ **Replies:** 2\ **Last updated:** [January 11, 2018, 2:27pm UTC](https://discuss.elastic.co/t/kibana-data-analysis-i-virtual-training-class-size/114945 "2018-01-11T14:27:31Z")
Hello Elastic community. I am trying to find some information from anyone who has taken the "Kibana Data Analysis I" virtual training class. Can you tell me how many people were in your class? Was it easy/possible … --- ## [Kibana scripted fields and permissions](https://discuss.elastic.co/t/kibana-scripted-fields-and-permissions/99853)
**Author:** [@Frances\_Buontempo](https://discuss.elastic.co/u/Frances_Buontempo)\ **Replies:** 2\ **Last updated:** [September 12, 2017, 8:20am UTC](https://discuss.elastic.co/t/kibana-scripted-fields-and-permissions/99853 "2017-09-12T08:20:01Z")
I recently installed X-Packs (using 5.2 for now) the elastic user seems to be able to add script in kibana under Manage Index | Scripted fields, but another user, with a role I made, gets: "Scripting disabled: All in… --- ## [Does X-Pack Security authenticates clients via client certificates](https://discuss.elastic.co/t/does-x-pack-security-authenticates-clients-via-client-certificates/99325)
**Author:** [@Bozzerreaneaux](https://discuss.elastic.co/u/Bozzerreaneaux)\ **Replies:** 2\ **Last updated:** [September 7, 2017, 9:09am UTC](https://discuss.elastic.co/t/does-x-pack-security-authenticates-clients-via-client-certificates/99325 "2017-09-07T09:09:59Z")
Hello, I am in the process of evaluating X-Pack security and in my current setup, I’ve successfully sorted the following SSL/TLS communication: Kibana ----\> AD LDAPS Server (IIS generated self-signed certificate … --- ## [Unable to use kuromoji analyzer in custom analyzer setting](https://discuss.elastic.co/t/unable-to-use-kuromoji-analyzer-in-custom-analyzer-setting/57326)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 2\ **Last updated:** [August 5, 2016, 10:27am UTC](https://discuss.elastic.co/t/unable-to-use-kuromoji-analyzer-in-custom-analyzer-setting/57326 "2016-08-05T10:27:44Z")
Hi! I would like to ask question regarding to custom analyzer setting. My environment is below. 1 client node - 5.0.0 alpha4 3 regular node - 5.0.0 alpha4 I have installed kuromoji analysis plugin into all the nod… --- ## [Experiencing an error while restoring the snapshot](https://discuss.elastic.co/t/experiencing-an-error-while-restoring-the-snapshot/352280)
**Author:** [@AnushaTalluri](https://discuss.elastic.co/u/AnushaTalluri)\ **Replies:** 6\ **Last updated:** [February 20, 2024, 8:30am UTC](https://discuss.elastic.co/t/experiencing-an-error-while-restoring-the-snapshot/352280 "2024-02-20T08:30:16Z")
I've been trying to restore the snapshot preserved in Azure storage blobs. While restoring observed the below error, {"error":{"root\_cause":\[{"type":"repository\_exception","reason":"\[elasticsearch\_snapshot\] Could not d… --- ## [Elasticsearch clustering with External Storage](https://discuss.elastic.co/t/elasticsearch-clustering-with-external-storage/245215)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 4\ **Last updated:** [August 24, 2020, 3:07am UTC](https://discuss.elastic.co/t/elasticsearch-clustering-with-external-storage/245215 "2020-08-24T03:07:38Z")
Im having an elasticsearch cluster with local storage. Can I point all elasticsearch data nodes to same external hard disk? This will help me in Kubernetes to pull storage out of nodes/pods and keep it separate --- ## [ML with elasticsearch 5.5.2](https://discuss.elastic.co/t/ml-with-elasticsearch-5-5-2/100866)
**Author:** [@Sarah](https://discuss.elastic.co/u/Sarah)\ **Replies:** 4\ **Last updated:** [October 4, 2017, 8:24am UTC](https://discuss.elastic.co/t/ml-with-elasticsearch-5-5-2/100866 "2017-10-04T08:24:30Z")
Hi, We are trying to install x-pack for versions 5.5.1, 5.5.2 and 5.6.0 of Elasticsearch. But the same problem occurred: org.elasticsearch.bootstrap.StartupException: ElasticsearchException\[Failed to create native pro… --- ## [How to identify JDBC pipeline](https://discuss.elastic.co/t/how-to-identify-jdbc-pipeline/102281)
**Author:** [@feijiangnan](https://discuss.elastic.co/u/feijiangnan)\ **Replies:** 4\ **Last updated:** [October 3, 2017, 9:39am UTC](https://discuss.elastic.co/t/how-to-identify-jdbc-pipeline/102281 "2017-10-03T09:39:36Z")
Hello, I have pipelines of Filebeat which are identified by \[fields\]\[document\_type\] in logstash, and the indices are named with \[fields\]\[document\_type\] . Now, I am adding JDBC pipeline, how can I set \[fields\]\[document\_t… --- ## [Kibana status is Yellow due to plugins degraded (after upgrade to version 8.8.2)](https://discuss.elastic.co/t/kibana-status-is-yellow-due-to-plugins-degraded-after-upgrade-to-version-8-8-2/342901)
**Author:** [@chethan\_m](https://discuss.elastic.co/u/chethan_m)\ **Replies:** 1\ **Last updated:** [September 13, 2023, 5:33am UTC](https://discuss.elastic.co/t/kibana-status-is-yellow-due-to-plugins-degraded-after-upgrade-to-version-8-8-2/342901 "2023-09-13T05:33:18Z")
Hi, I just upgraded elasticseach/ kibana to 8.8.2. Cluster health is Green. But Kibana status is Yellow (when I navigate to http:///status ) What is see is there are lot of plugins in yellow status with the message de… --- ## [High disk read on one node out of 3](https://discuss.elastic.co/t/high-disk-read-on-one-node-out-of-3/148611)
**Author:** [@Pavel\_Prokopenko](https://discuss.elastic.co/u/Pavel_Prokopenko)\ **Replies:** 1\ **Last updated:** [September 18, 2018, 11:47am UTC](https://discuss.elastic.co/t/high-disk-read-on-one-node-out-of-3/148611 "2018-09-18T11:47:49Z")
Hi! I observe very high disk read rate on one of our elaticsearch 5.5.2 nodes. Other 2 nodes do not have such problem. iotop tool confirms that the disk reads are actually done by the elasticsearch threads: TID PRI… --- ## [Built in alerts fail to run](https://discuss.elastic.co/t/built-in-alerts-fail-to-run/281207)
**Author:** [@radovan](https://discuss.elastic.co/u/radovan)\ **Replies:** 5\ **Last updated:** [August 23, 2021, 8:16am UTC](https://discuss.elastic.co/t/built-in-alerts-fail-to-run/281207 "2021-08-23T08:16:03Z")
Hi, I decided to create a monitoring cluster and after a few problems at the start all is running now. There are metricbeat clients on the elastic nodes with only elastic/logstash/kibana modules enabled, logs are flowin… --- ## [Logstash split xml filter](https://discuss.elastic.co/t/logstash-split-xml-filter/220018)
**Author:** [@MarcoV](https://discuss.elastic.co/u/MarcoV)\ **Replies:** 5\ **Last updated:** [February 20, 2020, 6:02pm UTC](https://discuss.elastic.co/t/logstash-split-xml-filter/220018 "2020-02-20T18:02:35Z")
Hi all, I have a some problem with my logstash filter. I read data from an xml and I want to split them to send to elasticsearch. The xml is like this: \ \ \/Subasio.aac\ … --- ## [LogStash encoding Issue from Filebeat IIS Access Logs 7.4.0 Stack](https://discuss.elastic.co/t/logstash-encoding-issue-from-filebeat-iis-access-logs-7-4-0-stack/203721)
**Author:** [@Nicholas\_Penning](https://discuss.elastic.co/u/Nicholas_Penning)\ **Replies:** 5\ **Last updated:** [October 16, 2019, 3:24am UTC](https://discuss.elastic.co/t/logstash-encoding-issue-from-filebeat-iis-access-logs-7-4-0-stack/203721 "2019-10-16T03:24:05Z")
I have tried many ways to get this warning message to go away in my LogStash pipeline but am failing to do so: \[2019-10-15T17:42:15,175\]\[WARN \]\[logstash.filters.urldecode\] Received an event that has a different characte… --- ## [ECE ccs.default instance not found](https://discuss.elastic.co/t/ece-ccs-default-instance-not-found/176714)
**Author:** [@rockybean](https://discuss.elastic.co/u/rockybean)\ **Replies:** 5\ **Last updated:** [April 15, 2019, 4:04pm UTC](https://discuss.elastic.co/t/ece-ccs-default-instance-not-found/176714 "2019-04-15T16:04:19Z")
It looks like a bug in ECE 2.2.0 like below when try to setup a ccs deployment. --- ## [Elasticsearch NEST API handle failed bulk updates](https://discuss.elastic.co/t/elasticsearch-nest-api-handle-failed-bulk-updates/144986)
**Author:** [@muthucse](https://discuss.elastic.co/u/muthucse)\ **Replies:** 5\ **Last updated:** [August 22, 2018, 2:18am UTC](https://discuss.elastic.co/t/elasticsearch-nest-api-handle-failed-bulk-updates/144986 "2018-08-22T02:18:52Z")
Updating a nested document using painless script. The document will be updated only when the condition is met. Trying to get noop response for the failed conditions but not able to get the response in dotNet's NEST bulk … --- ## [Kibana tribe index](https://discuss.elastic.co/t/kibana-tribe-index/60184)
**Author:** [@jc034240](https://discuss.elastic.co/u/jc034240)\ **Replies:** 5\ **Last updated:** [September 12, 2016, 1:38pm UTC](https://discuss.elastic.co/t/kibana-tribe-index/60184 "2016-09-12T13:38:44Z")
Good afternoon, Does anyone have a suggestion for a deleted .kibana-tribe index? (.kibana is still there) Currently our Snapshots don't backup any index that starts with a "." --- ## [Logstash dying out during startup](https://discuss.elastic.co/t/logstash-dying-out-during-startup/102850)
**Author:** [@Zama\_Las](https://discuss.elastic.co/u/Zama_Las)\ **Replies:** 2\ **Last updated:** [October 6, 2017, 6:05am UTC](https://discuss.elastic.co/t/logstash-dying-out-during-startup/102850 "2017-10-06T06:05:28Z")
My logstash is dying out during startup Can see the following in log,....No errors obserbed. \[2017-10-05T14:18:33,230\]\[WARN \]\[logstash.outputs.elasticsearch\] Restored connection to ES instance {:url=\>"http://logstash\_s… --- ## [Logstash output in rabbitmq queue](https://discuss.elastic.co/t/logstash-output-in-rabbitmq-queue/33365)
**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\ **Replies:** 2\ **Last updated:** [October 31, 2015, 5:46am UTC](https://discuss.elastic.co/t/logstash-output-in-rabbitmq-queue/33365 "2015-10-31T05:46:21Z")
please guys help me out...i want my output in a rabbitmq Queue.while running this code am getting this error. bin/logstash -f /home/krishna/Downloads/logstash-2.0.0-rc1/bin/logstash.conf The error reported is: Co… --- ## [APM (Dotnet) Agent support for arrays in Global Labels](https://discuss.elastic.co/t/apm-dotnet-agent-support-for-arrays-in-global-labels/286224)
**Author:** [@PeterDK](https://discuss.elastic.co/u/PeterDK)\ **Replies:** 0\ **Last updated:** [October 8, 2021, 10:32am UTC](https://discuss.elastic.co/t/apm-dotnet-agent-support-for-arrays-in-global-labels/286224 "2021-10-08T10:32:31Z")
Hello, in order to be able to give granular access to different teams for APM services, we would like to add an extra field that could be used in the document privileges of a user role. I thought that "Global Labels" c… --- ## [We want to automatically delete some document with different expiration dates](https://discuss.elastic.co/t/we-want-to-automatically-delete-some-document-with-different-expiration-dates/243000)
**Author:** [@devin.teki](https://discuss.elastic.co/u/devin.teki)\ **Replies:** 7\ **Last updated:** [July 30, 2020, 12:54am UTC](https://discuss.elastic.co/t/we-want-to-automatically-delete-some-document-with-different-expiration-dates/243000 "2020-07-30T00:54:32Z")
How to let elasticsearch5.5.2 automatic delete document by some datetime field. The \_ttl mappings have been removed from 5.x. because effifient problem. Is there any other way I can delete expired files automatically… --- ## [Accessing Kibana from Java](https://discuss.elastic.co/t/accessing-kibana-from-java/86265)
**Author:** [@ELKibana](https://discuss.elastic.co/u/ELKibana)\ **Replies:** 1\ **Last updated:** [May 19, 2017, 9:04pm UTC](https://discuss.elastic.co/t/accessing-kibana-from-java/86265 "2017-05-19T21:04:03Z")
I want to access kibana from java, actually what I want to achieve is access Kibana , create visualization, create a dashboard and paste the dashboard frame on to the display screen of user using java code. Is this possi… --- ## [How to check if Filebeat instances are alive or not and display it in a Kibana dashboard?](https://discuss.elastic.co/t/how-to-check-if-filebeat-instances-are-alive-or-not-and-display-it-in-a-kibana-dashboard/73660)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 1\ **Last updated:** [February 2, 2017, 1:16pm UTC](https://discuss.elastic.co/t/how-to-check-if-filebeat-instances-are-alive-or-not-and-display-it-in-a-kibana-dashboard/73660 "2017-02-02T13:16:57Z")
Hi, I have a Logstash instance and several filebeat instances listening specific directories. All filebeats push data to Logstash. The files in log directories wont come in a regular basis, and the intervals can be sec… --- ## [Multiple timezones in central syslog](https://discuss.elastic.co/t/multiple-timezones-in-central-syslog/39345)
**Author:** [@nnet](https://discuss.elastic.co/u/nnet)\ **Replies:** 1\ **Last updated:** [January 17, 2016, 4:49pm UTC](https://discuss.elastic.co/t/multiple-timezones-in-central-syslog/39345 "2016-01-17T16:49:38Z")
Hi, my centralized syslog server is in timezone EST, logstash reads /var/log/messages (file input) on this server. Some of the servers sending syslog data are in timezone CST. If I do any searches 1 hour or less old, I d… --- ## [Failed start elasticsearch after install](https://discuss.elastic.co/t/failed-start-elasticsearch-after-install/333959)
**Author:** [@Addr1](https://discuss.elastic.co/u/Addr1)\ **Replies:** 3\ **Last updated:** [May 21, 2023, 6:50pm UTC](https://discuss.elastic.co/t/failed-start-elasticsearch-after-install/333959 "2023-05-21T18:50:25Z")
Hi, I've an error message after "sudo systemctl start elasticsearch" : Job for elasticsearch.service failed because the control process exited with error code. See "systemctl status elasticsearch.service" and "journalc… --- ## [Comparison of data between two time points](https://discuss.elastic.co/t/comparison-of-data-between-two-time-points/312172)
**Author:** [@RonGros](https://discuss.elastic.co/u/RonGros)\ **Replies:** 3\ **Last updated:** [August 17, 2022, 6:39am UTC](https://discuss.elastic.co/t/comparison-of-data-between-two-time-points/312172 "2022-08-17T06:39:24Z")
Hi, I think the answer is "no can do" but I will ask anyhow in case I am missing something (and if I'm right it's surprising that I'm the only one to need it) We are monitoring results of tests on a daily basis. we have… --- ## [Error restoring state from URL Cannot read properties of null (reading 'length')](https://discuss.elastic.co/t/error-restoring-state-from-url-cannot-read-properties-of-null-reading-length/290823)
**Author:** [@RobertC1](https://discuss.elastic.co/u/RobertC1)\ **Replies:** 3\ **Last updated:** [December 3, 2021, 3:32pm UTC](https://discuss.elastic.co/t/error-restoring-state-from-url-cannot-read-properties-of-null-reading-length/290823 "2021-12-03T15:32:39Z")
Hi! Please, when I switch from one dashboard to anothe I get the error Error restoring state from URL Cannot read properties of null (reading 'length'). I need help Thanks --- ## [Syslog filter for IP](https://discuss.elastic.co/t/syslog-filter-for-ip/263512)
**Author:** [@dandotwalker](https://discuss.elastic.co/u/dandotwalker)\ **Replies:** 3\ **Last updated:** [February 7, 2021, 9:57am UTC](https://discuss.elastic.co/t/syslog-filter-for-ip/263512 "2021-02-07T09:57:01Z")
Hi, I am learning Elastic so I have set it up in my home to prepare for when we start designing it at work. I have a simple set up where logstash is listening for syslog messages. It works great with most hosts but my … --- ## [Wildcard in a match\_phrase query](https://discuss.elastic.co/t/wildcard-in-a-match-phrase-query/238775)
**Author:** [@Manjunath\_Venkatram](https://discuss.elastic.co/u/Manjunath_Venkatram)\ **Replies:** 3\ **Last updated:** [June 27, 2020, 12:25pm UTC](https://discuss.elastic.co/t/wildcard-in-a-match-phrase-query/238775 "2020-06-27T12:25:49Z")
Hi I am trying to do a wildcard query on a field as below, {"clientPort":{"query":"\*"}}, my intention is for the query to bring any/all values associated with clientPort, is this possible ? currently i dont get anythin… --- ## [Error running logsatsh](https://discuss.elastic.co/t/error-running-logsatsh/139952)
**Author:** [@Chiranjeevi\_Medichar](https://discuss.elastic.co/u/Chiranjeevi_Medichar)\ **Replies:** 0\ **Last updated:** [July 13, 2018, 1:26pm UTC](https://discuss.elastic.co/t/error-running-logsatsh/139952 "2018-07-13T13:26:46Z")
Sending Logstash's logs to /root/logstash-6.3.0/logs which is now configured via log4j2.properties \[2018-07-13T14:17:46,014\]\[ERROR\]\[org.logstash.Logstash \] java.lang.IllegalStateException: Logstash stopped processing… --- ## [Bulk size in bulk processor](https://discuss.elastic.co/t/bulk-size-in-bulk-processor/100030)
**Author:** [@Sambit\_Kabi](https://discuss.elastic.co/u/Sambit_Kabi)\ **Replies:** 3\ **Last updated:** [September 11, 2017, 12:19pm UTC](https://discuss.elastic.co/t/bulk-size-in-bulk-processor/100030 "2017-09-11T12:19:57Z")
Hello , I would like to understand what does bulk size actually mean? Which size does it refer to? Is it the size of the documents we are indexing in a bulk manner per request? Please help me with it. Thanks --- ## [Logstash/Beats Issue - Logs not being published](https://discuss.elastic.co/t/logstash-beats-issue-logs-not-being-published/64601)
**Author:** [@Danxx6](https://discuss.elastic.co/u/Danxx6)\ **Replies:** 3\ **Last updated:** [November 1, 2016, 11:30pm UTC](https://discuss.elastic.co/t/logstash-beats-issue-logs-not-being-published/64601 "2016-11-01T23:30:36Z")
Hi I've recently followed a couple of guides to get a ELK stack up and working however I'm having some issues transporting my logs via filebeat to logstash. Errors: 2016-11-01T18:11:19Z ERR Failed to publish even… --- ## [Exporting Kibana report to CSV in UTF-8](https://discuss.elastic.co/t/exporting-kibana-report-to-csv-in-utf-8/288593)
**Author:** [@nati](https://discuss.elastic.co/u/nati)\ **Replies:** 2\ **Last updated:** [November 11, 2021, 7:29am UTC](https://discuss.elastic.co/t/exporting-kibana-report-to-csv-in-utf-8/288593 "2021-11-11T07:29:27Z")
Hello, Is there any solution to exporting CSV in UTF-8? My client have problems with Hebrew characters. He can not use external converting tools, as I suggested to him. Is there a way to configure UTF-8 in the kibana.… --- ## [Loading SQL table with JSON data and columnar data](https://discuss.elastic.co/t/loading-sql-table-with-json-data-and-columnar-data/251286)
**Author:** [@sanmitdesai](https://discuss.elastic.co/u/sanmitdesai)\ **Replies:** 2\ **Last updated:** [October 8, 2020, 3:49pm UTC](https://discuss.elastic.co/t/loading-sql-table-with-json-data-and-columnar-data/251286 "2020-10-08T15:49:00Z")
Hey all, I am a bit new to logstash. I have a SQL table that looks like this. As we can see we have columns 'Address' and 'Skills' in this table that are in JSON format. I want to load all the data while maintainin… --- ## [Elasticsearch integration with Vault](https://discuss.elastic.co/t/elasticsearch-integration-with-vault/250488)
**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\ **Replies:** 2\ **Last updated:** [October 5, 2020, 10:52am UTC](https://discuss.elastic.co/t/elasticsearch-integration-with-vault/250488 "2020-10-05T10:52:19Z")
Is this possible to integrate Elasticsearch with Vault. If possible, Can anyone please give the reference how to approach that --- ## [Filebeat Harvester](https://discuss.elastic.co/t/filebeat-harvester/118599)
**Author:** [@charan.gandra](https://discuss.elastic.co/u/charan.gandra)\ **Replies:** 2\ **Last updated:** [February 6, 2018, 1:40pm UTC](https://discuss.elastic.co/t/filebeat-harvester/118599 "2018-02-06T13:40:26Z")
Filebeat is not harvesting all the log file details in prospectors. Here is my prospectors: filebeat.prospectors: type: log enabled: true paths: /var/log/\*.log /var/log/secure /var/log/messages However Filebe… --- ## [Conditional mutate not working](https://discuss.elastic.co/t/conditional-mutate-not-working/101821)
**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\ **Replies:** 2\ **Last updated:** [September 26, 2017, 10:35am UTC](https://discuss.elastic.co/t/conditional-mutate-not-working/101821 "2017-09-26T10:35:15Z")
I am logging to more than one ports using syslog plugin. However the following conditional filter does not work (although logs are received in more than one port as expected. Any suggestions? input { tcp { port … --- ## [Using redis, get error like "Failed to send event to Redis"](https://discuss.elastic.co/t/using-redis-get-error-like-failed-to-send-event-to-redis/58006)
**Author:** [@kk\_op](https://discuss.elastic.co/u/kk_op)\ **Replies:** 2\ **Last updated:** [August 15, 2016, 7:24am UTC](https://discuss.elastic.co/t/using-redis-get-error-like-failed-to-send-event-to-redis/58006 "2016-08-15T07:24:40Z")
Just installed logstash 2.3.4 -redis-elasticsearch 2.3.4 when test, error repeated in file logstash.log: {:timestamp=\>"2016-08-15T14:31:35.306000+0800", :message=\>"Failed to send event to Redis", :event=\>#\ **Author:** [@shilong](https://discuss.elastic.co/u/shilong)\ **Replies:** 2\ **Last updated:** [December 23, 2015, 11:26am UTC](https://discuss.elastic.co/t/is-there-a-way-to-disable-marvel-plugin-index-but-keep-its-report-for-monitoring/37253 "2015-12-23T11:26:59Z") Is there a way to disable Marvel plugin index but keep its report for monitoring? Thanks. plugin:marvel Marvel index ready seems to be too much resource occupied sometimes. --- ## [Logstash ES plugin occasionally can't reach server](https://discuss.elastic.co/t/logstash-es-plugin-occasionally-cant-reach-server/34055)
**Author:** [@rsteckler](https://discuss.elastic.co/u/rsteckler)\ **Replies:** 2\ **Last updated:** [November 7, 2015, 4:45pm UTC](https://discuss.elastic.co/t/logstash-es-plugin-occasionally-cant-reach-server/34055 "2015-11-07T16:45:39Z")
I'm using Logsene as a hosted ELK provider. I log directly to logsene from Node.js using winston-logsene and I tail some logs to them via Logstash. The node.js integration works perfectly. The problem is that the log… --- ## [Logging Multiline events using logforwarder and log stash](https://discuss.elastic.co/t/logging-multiline-events-using-logforwarder-and-log-stash/28455)
**Author:** [@vgupta](https://discuss.elastic.co/u/vgupta)\ **Replies:** 2\ **Last updated:** [September 1, 2015, 6:01pm UTC](https://discuss.elastic.co/t/logging-multiline-events-using-logforwarder-and-log-stash/28455 "2015-09-01T18:01:19Z")
Hi I want to transfer Java logs using log forwarder on the application servers. What will be the best way to log Java exceptions as single event as log-forwarder doesn't support Multiline input codec? Can I use "… --- ## [Communication Problem between logstash and elasticsearch](https://discuss.elastic.co/t/communication-problem-between-logstash-and-elasticsearch/5714)
**Author:** [@medas3c\_medas3c](https://discuss.elastic.co/u/medas3c_medas3c)\ **Replies:** 2\ **Last updated:** [November 1, 2011, 9:22am UTC](https://discuss.elastic.co/t/communication-problem-between-logstash-and-elasticsearch/5714 "2011-11-01T09:22:35Z")
Hi all, I have some problems in intergrating logstash with elasticsearch. My model is below: -------------- (input Message Queue) logstash (output elastic search) --\> elasticsearch + logstash web. ----------… [Previous page](https://discuss.elastic.co/top.md?page=1256&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1258&per_page=50&period=all)