# Top **URL:** https://discuss.elastic.co/top.md?page=1260&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1261 --- ## [Questions about Logstash + Elasticsearch + Kibana](https://discuss.elastic.co/t/questions-about-logstash-elasticsearch-kibana/22798)
**Author:** [@Gabriel\_Francisco](https://discuss.elastic.co/u/Gabriel_Francisco)\ **Replies:** 2\ **Last updated:** [March 23, 2015, 2:16pm UTC](https://discuss.elastic.co/t/questions-about-logstash-elasticsearch-kibana/22798 "2015-03-23T14:16:09Z")
Hi, I have some plans about using Logstash + Elasticsearch + Kibana at my company, and I have some questions. First of all, if I want to use a central elasticsearch cluster for several application logs, is there a… --- ## [Upload of multiple CSV files into same index](https://discuss.elastic.co/t/upload-of-multiple-csv-files-into-same-index/326156)
**Author:** [@Raj4](https://discuss.elastic.co/u/Raj4)\ **Replies:** 4\ **Last updated:** [February 23, 2023, 10:07pm UTC](https://discuss.elastic.co/t/upload-of-multiple-csv-files-into-same-index/326156 "2023-02-23T22:07:07Z")
Hi, Please advise me on the below. I want to upload CSV file into the same index name on daily basis and need to create Kibana dashboard. Is it possible for me to upload the CSV file directly into Elasticsearch autom… --- ## [Kibana shows old/expired Cluster's certificates even though I have updated them](https://discuss.elastic.co/t/kibana-shows-old-expired-clusters-certificates-even-though-i-have-updated-them/326120)
**Author:** [@raespinoza](https://discuss.elastic.co/u/raespinoza)\ **Replies:** 4\ **Last updated:** [February 22, 2023, 9:09pm UTC](https://discuss.elastic.co/t/kibana-shows-old-expired-clusters-certificates-even-though-i-have-updated-them/326120 "2023-02-22T21:09:01Z")
Hi all, I have updated our cluster's certificates that are about to expire. I followed the steps suggested by the official docs and completed the task with success.....at least that's what I thought. I generated all ne… --- ## [Which node ip address should I specify in Multi-Node elasticsearch cluster to store data into an elasticsearch index?](https://discuss.elastic.co/t/which-node-ip-address-should-i-specify-in-multi-node-elasticsearch-cluster-to-store-data-into-an-elasticsearch-index/273962)
**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\ **Replies:** 4\ **Last updated:** [May 26, 2021, 12:59pm UTC](https://discuss.elastic.co/t/which-node-ip-address-should-i-specify-in-multi-node-elasticsearch-cluster-to-store-data-into-an-elasticsearch-index/273962 "2021-05-26T12:59:55Z")
Hii.I am creating a Multi-Node Elasticsearch Cluster.I will collect logs from different server's using filebeat and store them into an elasticsearch index.I am little bit confuse that which elasticsearch node ip address … --- ## [Filebeat to Logatsh, csv header d'ont send in first](https://discuss.elastic.co/t/filebeat-to-logatsh-csv-header-dont-send-in-first/257075)
**Author:** [@Alexis\_Devleeschauwe](https://discuss.elastic.co/u/Alexis_Devleeschauwe)\ **Replies:** 4\ **Last updated:** [December 1, 2020, 11:04am UTC](https://discuss.elastic.co/t/filebeat-to-logatsh-csv-header-dont-send-in-first/257075 "2020-12-01T11:04:34Z")
Hi. Description I need import csv file logs to elasticsearch, for this, have 3 stack Filebeats \> logstash \> elasticsearch. Filebeat read csv , datas is filter by logstash and elasticsearch is stores datas Problem Th… --- ## [How to gather journald logs from coreos hosts in an Openshift cluster?](https://discuss.elastic.co/t/how-to-gather-journald-logs-from-coreos-hosts-in-an-openshift-cluster/247553)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 4\ **Last updated:** [October 15, 2020, 6:51pm UTC](https://discuss.elastic.co/t/how-to-gather-journald-logs-from-coreos-hosts-in-an-openshift-cluster/247553 "2020-10-15T18:51:39Z")
Hello, We are in the process of migrating from Openshift 3.11 to Openshift 4.5. We managed to get the Filebeat daemonset working to ship pod logs, but we also need to index the journalctl logs from the coreos hosts. Wha… --- ## [How to stop logstash automatically after some time](https://discuss.elastic.co/t/how-to-stop-logstash-automatically-after-some-time/100549)
**Author:** [@vishnudivakar31](https://discuss.elastic.co/u/vishnudivakar31)\ **Replies:** 4\ **Last updated:** [September 15, 2017, 6:06am UTC](https://discuss.elastic.co/t/how-to-stop-logstash-automatically-after-some-time/100549 "2017-09-15T06:06:53Z")
I am running logstash -f \ . I want this to be stopped automatically after 5 mins. --- ## [Elasticsearch logs are not Logstash friendly](https://discuss.elastic.co/t/elasticsearch-logs-are-not-logstash-friendly/38353)
**Author:** [@ave19](https://discuss.elastic.co/u/ave19)\ **Replies:** 4\ **Last updated:** [January 5, 2016, 1:17am UTC](https://discuss.elastic.co/t/elasticsearch-logs-are-not-logstash-friendly/38353 "2016-01-05T01:17:01Z")
If you've ever dissected a strange log file, you know the pain something like this brings: \[2015-12-22 23:59:40,262\]\[INFO \]\[monitor.jvm \] \[Love\] \[gc\]\[old\]\[1332914\]\[40809\] duration \[6.5s\], collections \[1\]/\[… --- ## [Fastes way to import 100m rows](https://discuss.elastic.co/t/fastes-way-to-import-100m-rows/17595)
**Author:** [@Andreas\_Hembach](https://discuss.elastic.co/u/Andreas_Hembach)\ **Replies:** 4\ **Last updated:** [May 19, 2014, 8:31pm UTC](https://discuss.elastic.co/t/fastes-way-to-import-100m-rows/17595 "2014-05-19T20:31:22Z")
Hi all, i need to import 100m rows. At the moment i use the bulk api with 100 entries at once (Is that a good or a bad value?). But i only get ~500 rows/second imported (Is that a lot or a little more?). Is there… --- ## [Multiple select with facets](https://discuss.elastic.co/t/multiple-select-with-facets/3757)
**Author:** [@Erik\_J](https://discuss.elastic.co/u/Erik_J)\ **Replies:** 4\ **Last updated:** [January 26, 2011, 10:57am UTC](https://discuss.elastic.co/t/multiple-select-with-facets/3757 "2011-01-26T10:57:41Z")
I have a small document that looks like this {country: int, state: int, city: int, studio: bool} I build a facet for listing cities using the following query: {"query": {"bool":{"must":\[ {"term":{"country":2342495… --- ## [Logstash filter if conditional fails to match string ended with "\\u0000"](https://discuss.elastic.co/t/logstash-filter-if-conditional-fails-to-match-string-ended-with-u0000/296248)
**Author:** [@juowong](https://discuss.elastic.co/u/juowong)\ **Replies:** 3\ **Last updated:** [February 8, 2022, 5:49am UTC](https://discuss.elastic.co/t/logstash-filter-if-conditional-fails-to-match-string-ended-with-u0000/296248 "2022-02-08T05:49:39Z")
I am using logstash to receive network logs using syslog input module. I would like to drop the event if the log message is equal to A10. The pipeline is as follows: input { syslog { ecs\_compatibility =\> "v1" time… --- ## [CSV file timestamp compatibility with elasticsearch](https://discuss.elastic.co/t/csv-file-timestamp-compatibility-with-elasticsearch/235321)
**Author:** [@kumar\_k](https://discuss.elastic.co/u/kumar_k)\ **Replies:** 3\ **Last updated:** [June 3, 2020, 5:33pm UTC](https://discuss.elastic.co/t/csv-file-timestamp-compatibility-with-elasticsearch/235321 "2020-06-03T17:33:50Z")
Hi, I have timestamp of a column is like below. For example 2019/04/30 Tuesday 08:00:00 How should I define properties for index mapping --- ## [Timout error when using Rest Client multiple times in production](https://discuss.elastic.co/t/timout-error-when-using-rest-client-multiple-times-in-production/198440)
**Author:** [@venky003](https://discuss.elastic.co/u/venky003)\ **Replies:** 3\ **Last updated:** [September 23, 2019, 9:03am UTC](https://discuss.elastic.co/t/timout-error-when-using-rest-client-multiple-times-in-production/198440 "2019-09-23T09:03:13Z")
public RestClient build() { if (this.failureListener == null) { this.failureListener = new FailureListener(); } CloseableHttpAsyncClient httpClient = this.createHttpCli… --- ## [Elasticsearch: Cold Nodes](https://discuss.elastic.co/t/elasticsearch-cold-nodes/190125)
**Author:** [@eightnoteight](https://discuss.elastic.co/u/eightnoteight)\ **Replies:** 3\ **Last updated:** [July 13, 2019, 3:58pm UTC](https://discuss.elastic.co/t/elasticsearch-cold-nodes/190125 "2019-07-13T15:58:44Z")
Hi Guys, We have a set of cold nodes for our logs whose utilisation is very very less, only a few developers send queries to these nodes. but because of our number of days we keep the logs in these cold nodes, the data … --- ## [Specify the Collate query in Phrase Suggestion](https://discuss.elastic.co/t/specify-the-collate-query-in-phrase-suggestion/109489)
**Author:** [@panfng](https://discuss.elastic.co/u/panfng)\ **Replies:** 3\ **Last updated:** [December 7, 2017, 7:50am UTC](https://discuss.elastic.co/t/specify-the-collate-query-in-phrase-suggestion/109489 "2017-12-07T07:50:48Z")
Phase Suggestion can be done in the search api. I wonder if there's a way to reuse the query in search api call for the Collate query. Thanks! --- ## [Log4j with ES 5.2 : delete action](https://discuss.elastic.co/t/log4j-with-es-5-2-delete-action/82359)
**Author:** [@Ailurus](https://discuss.elastic.co/u/Ailurus)\ **Replies:** 3\ **Last updated:** [April 14, 2017, 10:15am UTC](https://discuss.elastic.co/t/log4j-with-es-5-2-delete-action/82359 "2017-04-14T10:15:45Z")
Hi Elastic team and users, I have an Elasticsearch 5.2 install and I would like to configure log4j2 on it. Specifically, I'm trying to set the a rollover strategy with a delete action, like in ES 5.3 : https://www.ela… --- ## [Tile Map not working ? DNS lookup problem](https://discuss.elastic.co/t/tile-map-not-working-dns-lookup-problem/74638)
**Author:** [@paulkeogh](https://discuss.elastic.co/u/paulkeogh)\ **Replies:** 3\ **Last updated:** [February 15, 2017, 10:59pm UTC](https://discuss.elastic.co/t/tile-map-not-working-dns-lookup-problem/74638 "2017-02-15T22:59:58Z")
I have a viz with a tile map - the geopoint data in the docs is found and looks fine. However, no map is displayed. Opening the Chrome dev console, I see a GET to https://otile3-s.mqcdn.com/tiles/1.0.0/map/2/1/1.jpeg … --- ## [Store geoshape withing Pig using ESHadoop](https://discuss.elastic.co/t/store-geoshape-withing-pig-using-eshadoop/51231)
**Author:** [@roeyh](https://discuss.elastic.co/u/roeyh)\ **Replies:** 3\ **Last updated:** [June 1, 2016, 1:48pm UTC](https://discuss.elastic.co/t/store-geoshape-withing-pig-using-eshadoop/51231 "2016-06-01T13:48:44Z")
I'm trying to store geoshape (like the following) to ES via pig using org.elasticsearch.hadoop.pig.EsStorage (2.2.0) : { "location" : { "type" : "circle", "coordinates" : \[-45.0, 45… --- ## [Exact search not working with Nested multi field](https://discuss.elastic.co/t/exact-search-not-working-with-nested-multi-field/1764)
**Author:** [@Shobhit\_Tyagi](https://discuss.elastic.co/u/Shobhit_Tyagi)\ **Replies:** 3\ **Last updated:** [June 3, 2015, 4:35pm UTC](https://discuss.elastic.co/t/exact-search-not-working-with-nested-multi-field/1764 "2015-06-03T16:35:37Z")
Hi Community, I ran into an issue. I am trying to explore the multi field feature. If I use the following mapping, it all works well. I can search for exact match and fuzzy as well. { "mappings" : { "test" : { "pr… --- ## [Alphabetic sorting strategies](https://discuss.elastic.co/t/alphabetic-sorting-strategies/14554)
**Author:** [@Matthew\_Painter](https://discuss.elastic.co/u/Matthew_Painter)\ **Replies:** 3\ **Last updated:** [November 23, 2013, 12:27pm UTC](https://discuss.elastic.co/t/alphabetic-sorting-strategies/14554 "2013-11-23T12:27:51Z")
Hi all, We have a field that we would like to (approximately) sort on that is unique and unicode - and potentially long. In order to decrease the amount of memory required by elasticsearch, we have been thinkin… --- ## [Remote cluster: licensing question](https://discuss.elastic.co/t/remote-cluster-licensing-question/306455)
**Author:** [@itizir](https://discuss.elastic.co/u/itizir)\ **Replies:** 6\ **Last updated:** [June 7, 2022, 4:32pm UTC](https://discuss.elastic.co/t/remote-cluster-licensing-question/306455 "2022-06-07T16:32:17Z")
Hello! The ECK automagic setup of remote clusters is locked behind the Enterprise subscription tier, whereas Elasticsearch itself allows cross-cluster search on a Basic license and only requires a higher one for cross-c… --- ## [Change private class-fields with Advice.FieldValue and inline = true with IndyBootstrap](https://discuss.elastic.co/t/change-private-class-fields-with-advice-fieldvalue-and-inline-true-with-indybootstrap/279646)
**Author:** [@milanvdm](https://discuss.elastic.co/u/milanvdm)\ **Replies:** 6\ **Last updated:** [July 27, 2021, 1:50pm UTC](https://discuss.elastic.co/t/change-private-class-fields-with-advice-fieldvalue-and-inline-true-with-indybootstrap/279646 "2021-07-27T13:50:49Z")
I would like to do the following: @Advice.OnMethodExit(suppress = Throwable.class, inline = true) public static void onExit( @Advice.Enter @Nullable Object abstractSpanObj, @Advice.This O… --- ## [AWS NLB config infront of FileBeats Instance](https://discuss.elastic.co/t/aws-nlb-config-infront-of-filebeats-instance/269065)
**Author:** [@Ravi342883](https://discuss.elastic.co/u/Ravi342883)\ **Replies:** 6\ **Last updated:** [April 8, 2021, 2:46pm UTC](https://discuss.elastic.co/t/aws-nlb-config-infront-of-filebeats-instance/269065 "2021-04-08T14:46:40Z")
Hi All, I'm trying to setup a AWS Network Load Balancer (NLB) in-front of Filebeat instance. Need help in 1. How to configure the NLB & 2. How to do health check in NLB. Note: This setup is to collect the logs from v… --- ## [Finding errors related to transactions](https://discuss.elastic.co/t/finding-errors-related-to-transactions/233667)
**Author:** [@krishnavk](https://discuss.elastic.co/u/krishnavk)\ **Replies:** 6\ **Last updated:** [May 26, 2020, 12:03pm UTC](https://discuss.elastic.co/t/finding-errors-related-to-transactions/233667 "2020-05-26T12:03:16Z")
Elasticsearch version: 6.8.4 APM Server version: 7.6.0 APM Agent language and version: Java agent - 1.15 Original install method (e.g. download page, yum, deb, from source, etc.) and version: Download package Fre… --- ## [Curator - Filters output inconsistency - Depending on action type : delete or shrink](https://discuss.elastic.co/t/curator-filters-output-inconsistency-depending-on-action-type-delete-or-shrink/173188)
**Author:** [@ORich](https://discuss.elastic.co/u/ORich)\ **Replies:** 6\ **Last updated:** [March 22, 2019, 8:30pm UTC](https://discuss.elastic.co/t/curator-filters-output-inconsistency-depending-on-action-type-delete-or-shrink/173188 "2019-03-22T20:30:27Z")
I run curator (5.6) from command line: curator /opt/elasticsearch-curator/shrink\_metricbeat\_indices.yml --config /opt/elasticsearch-curator/curator.config.yml --dry-run No indice match as per output: 2019-03-20 16:46:… --- ## [Ideas for data distribution in a cross cluster search design](https://discuss.elastic.co/t/ideas-for-data-distribution-in-a-cross-cluster-search-design/167452)
**Author:** [@scathatheworm](https://discuss.elastic.co/u/scathatheworm)\ **Replies:** 6\ **Last updated:** [February 13, 2019, 11:10am UTC](https://discuss.elastic.co/t/ideas-for-data-distribution-in-a-cross-cluster-search-design/167452 "2019-02-13T11:10:01Z")
Hello, I am working on building a large cross cluster search setup, consisting of several underlying clusters all equally sized, and a single smaller dedicated cluster to be used to access all nodes below with cross clu… --- ## [Logstah date help](https://discuss.elastic.co/t/logstah-date-help/69171)
**Author:** [@pierre](https://discuss.elastic.co/u/pierre)\ **Replies:** 6\ **Last updated:** [December 20, 2016, 2:52pm UTC](https://discuss.elastic.co/t/logstah-date-help/69171 "2016-12-20T14:52:40Z")
i have this : 01-11-2015;17:41:01;641 filter { grok { break\_on\_match =\> "false" match =\> { "message" =\> '%{DATA}%{DATE\_EU:Date};%{TIME:Date};%{NUMBER:Nombre}%{DATA}'} } } Here my date = string and i want date = date s… --- ## [Wares Plugin: Deploying elasticsearch as a servlet](https://discuss.elastic.co/t/wares-plugin-deploying-elasticsearch-as-a-servlet/5434)
**Author:** [@kimchy](https://discuss.elastic.co/u/kimchy)\ **Replies:** 6\ **Last updated:** [April 19, 2012, 3:15am UTC](https://discuss.elastic.co/t/wares-plugin-deploying-elasticsearch-as-a-servlet/5434 "2012-04-19T03:15:30Z")
A while back, I added the wares plugin, which basically allows to deploy elasticsearch as a servlet. The plugin is here: https://github.com/elasticsearch/elasticsearch/tree/master/plugins/transport/wares, and the Node… --- ## [Nest for Generic Object index](https://discuss.elastic.co/t/nest-for-generic-object-index/226890)
**Author:** [@4ea9049c983a41c5ecf0](https://discuss.elastic.co/u/4ea9049c983a41c5ecf0)\ **Replies:** 1\ **Last updated:** [April 8, 2020, 12:25am UTC](https://discuss.elastic.co/t/nest-for-generic-object-index/226890 "2020-04-08T00:25:33Z")
Hi All, I want to index the .NET class object. There are multiple classes I have so want to keep the index generic, is there any way to do so in Nest ? I have tried dynamic but it didn't work for me. --- ## [Best practice running logstash on kubernetes](https://discuss.elastic.co/t/best-practice-running-logstash-on-kubernetes/184107)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [June 12, 2019, 12:09pm UTC](https://discuss.elastic.co/t/best-practice-running-logstash-on-kubernetes/184107 "2019-06-12T12:09:33Z")
Hi, Currently my logstash instances are running on native docker. Config and pipeline config are mounted from host filesystem into logstash's container directories. I use only one host in this environment, so mounting f… --- ## [Generating Correct Nested Filter Aggregation](https://discuss.elastic.co/t/generating-correct-nested-filter-aggregation/94021)
**Author:** [@panda2004](https://discuss.elastic.co/u/panda2004)\ **Replies:** 1\ **Last updated:** [July 22, 2017, 5:51pm UTC](https://discuss.elastic.co/t/generating-correct-nested-filter-aggregation/94021 "2017-07-22T17:51:00Z")
Hello, I have a technical question about using nested data type, as expressed in the Query DSL. Unfortunately, only today I discovered that i'm not building my nested queries as I should be. I was generating the fol… --- ## [Kibana shows status page with error](https://discuss.elastic.co/t/kibana-shows-status-page-with-error/42352)
**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\ **Replies:** 1\ **Last updated:** [August 17, 2016, 2:29pm UTC](https://discuss.elastic.co/t/kibana-shows-status-page-with-error/42352 "2016-08-17T14:29:32Z")
Hello, When I try to load kibana and see logstash entries instead I see the status page with this error: plugin:elasticsearch Request Timeout after 1500ms However the status of my cluster is green: { "cluste… --- ## [Getting kernel messages directly ala dmesg (no filesystem)?](https://discuss.elastic.co/t/getting-kernel-messages-directly-ala-dmesg-no-filesystem/56448)
**Author:** [@eldondev](https://discuss.elastic.co/u/eldondev)\ **Replies:** 1\ **Last updated:** [July 26, 2016, 9:45pm UTC](https://discuss.elastic.co/t/getting-kernel-messages-directly-ala-dmesg-no-filesystem/56448 "2016-07-26T21:45:58Z")
Is there a way to use beats to get kernel messages directly from the kernel? I am experiencing some filesystem errors, and I am not sure how to get that info back with a file or metric beat if nothing can write the error… --- ## [Elasticsearch request failed: 28 - Operation timed out after 1000 milliseconds with 0 bytes received](https://discuss.elastic.co/t/elasticsearch-request-failed-28-operation-timed-out-after-1000-milliseconds-with-0-bytes-received/294284)
**Author:** [@zeleniy](https://discuss.elastic.co/u/zeleniy)\ **Replies:** 1\ **Last updated:** [February 9, 2022, 1:31pm UTC](https://discuss.elastic.co/t/elasticsearch-request-failed-28-operation-timed-out-after-1000-milliseconds-with-0-bytes-received/294284 "2022-02-09T13:31:48Z")
I have PHP web app which interacts with Elasticsearch. It worked well but recently i got error with next text: 2022-01-13 16:43:59 \[95.161.173.18\]\[4669\]\[1tjhk618ubj7tjniq1utjpbntj\]\[error\]\[application\] delete elastic 202… --- ## [How to prevent duplicates in filebeat](https://discuss.elastic.co/t/how-to-prevent-duplicates-in-filebeat/296391)
**Author:** [@Dror\_Tirosh](https://discuss.elastic.co/u/Dror_Tirosh)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 10:46am UTC](https://discuss.elastic.co/t/how-to-prevent-duplicates-in-filebeat/296391 "2022-02-07T10:46:42Z")
My input data (which is json-formatted) as a unique field. According to the documentation, this should use it as a unique identifier, and thus pervent duplicates: processor: - fingerprint: fields: \["tx"\] target… --- ## [Data Table Time Offset](https://discuss.elastic.co/t/data-table-time-offset/260124)
**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\ **Replies:** 2\ **Last updated:** [January 4, 2021, 10:53pm UTC](https://discuss.elastic.co/t/data-table-time-offset/260124 "2021-01-04T22:53:10Z")
I have been building a dashboard with a couple of indexes. After evaluation, it turns out one of the indexes seems to be off by 1hr. For all of my timelion visualizations, this was corrected by modifying each reference… --- ## [\_cat/indices response explanation for replica shards](https://discuss.elastic.co/t/cat-indices-response-explanation-for-replica-shards/247447)
**Author:** [@sha1](https://discuss.elastic.co/u/sha1)\ **Replies:** 2\ **Last updated:** [September 4, 2020, 12:14am UTC](https://discuss.elastic.co/t/cat-indices-response-explanation-for-replica-shards/247447 "2020-09-04T00:14:00Z")
The \_cat/indices endpoint returns primary shard count and replica factor, e.g. health status index uuid pri rep docs.count docs.deleted store.size pri.store.size yellow open hioqq… --- ## [Cannot notify file changes listener](https://discuss.elastic.co/t/cannot-notify-file-changes-listener/78879)
**Author:** [@gilisade](https://discuss.elastic.co/u/gilisade)\ **Replies:** 2\ **Last updated:** [March 29, 2017, 1:09am UTC](https://discuss.elastic.co/t/cannot-notify-file-changes-listener/78879 "2017-03-29T01:09:01Z")
Hi i have elasticsearch 5.2 i'm trying to update the /etc/elasticsearch/x-pack/role\_mapping.yml file when i do that i get the following Warning: \[2017-03-16T16:36:51,535\]\[INFO \]\[o.e.x.s.a.s.DnRoleMapper \] \[elasticsea… --- ## [Beginning Question: Memory consumption while idle](https://discuss.elastic.co/t/beginning-question-memory-consumption-while-idle/21816)
**Author:** [@austin\_lee](https://discuss.elastic.co/u/austin_lee)\ **Replies:** 2\ **Last updated:** [January 24, 2015, 3:44pm UTC](https://discuss.elastic.co/t/beginning-question-memory-consumption-while-idle/21816 "2015-01-24T15:44:35Z")
I'm doing some initial POC with es building a single index into elastic search. Here is my setup running elastic search out of the box while chanting the memory params. JVM: Java 7 jre 1.7\_76 GC: CMS OS: Windows… --- ## [TLS... WARN secure connection disabled talk to server... ERROR Get "http://192.168.0.101:9200": EOF](https://discuss.elastic.co/t/tls-warn-secure-connection-disabled-talk-to-server-error-get-http-192-168-0-101-9200-eof/281969)
**Author:** [@Dubey\_Ravi\_vinod](https://discuss.elastic.co/u/Dubey_Ravi_vinod)\ **Replies:** 0\ **Last updated:** [August 19, 2021, 1:17pm UTC](https://discuss.elastic.co/t/tls-warn-secure-connection-disabled-talk-to-server-error-get-http-192-168-0-101-9200-eof/281969 "2021-08-19T13:17:18Z")
Getting this error, while configuration of winlogbeat. winlogbeat.yml winlogbeat.event\_logs: - name: Application ignore\_older: 72h - name: System - name: Security processors: - script: … --- ## [Filebeat modules with Logstash](https://discuss.elastic.co/t/filebeat-modules-with-logstash/197851)
**Author:** [@gerard1](https://discuss.elastic.co/u/gerard1)\ **Replies:** 3\ **Last updated:** [September 3, 2019, 6:19pm UTC](https://discuss.elastic.co/t/filebeat-modules-with-logstash/197851 "2019-09-03T18:19:25Z")
I've set up a Filebeat -\> Logstash -\> Kibana workflow that it's been working for the last 2 years. In the most recent Elastic package versions, new features are available, such as Filebeat modules, Kibana SIEM etc. Som… --- ## [Error trying to edit v6 filters in v7](https://discuss.elastic.co/t/error-trying-to-edit-v6-filters-in-v7/177481)
**Author:** [@jstewart\_lsa](https://discuss.elastic.co/u/jstewart_lsa)\ **Replies:** 3\ **Last updated:** [May 4, 2019, 9:24pm UTC](https://discuss.elastic.co/t/error-trying-to-edit-v6-filters-in-v7/177481 "2019-05-04T21:24:18Z")
I upgraded everything from v6 to v7. My existing searches seem to work fine, but when I attempt to edit the filter through the UI (click on filter, then "Edit filter") a "Something went wrong" page pops up with the error… --- ## [I want to calculate percentage increase of user count between two categories](https://discuss.elastic.co/t/i-want-to-calculate-percentage-increase-of-user-count-between-two-categories/166256)
**Author:** [@GitSpree23](https://discuss.elastic.co/u/GitSpree23)\ **Replies:** 3\ **Last updated:** [February 5, 2019, 5:29am UTC](https://discuss.elastic.co/t/i-want-to-calculate-percentage-increase-of-user-count-between-two-categories/166256 "2019-02-05T05:29:11Z")
I have a date histogram showing two trends in user count of two categories. But I also want to show a metric of % increase in the count in the given time period. Could you help me figure out how to do this? There is a p… --- ## [Parsing\_exception in kibana](https://discuss.elastic.co/t/parsing-exception-in-kibana/151431)
**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\ **Replies:** 3\ **Last updated:** [October 13, 2018, 10:16am UTC](https://discuss.elastic.co/t/parsing-exception-in-kibana/151431 "2018-10-13T10:16:19Z")
hi team may i know how to solve this bug Error: \[parsing\_excetion\] no \[query\] registere for \[aggs\], with {line=1 & col=590} --- ## [Field\_stats\_api deprecated?](https://discuss.elastic.co/t/field-stats-api-deprecated/85225)
**Author:** [@crickes](https://discuss.elastic.co/u/crickes)\ **Replies:** 3\ **Last updated:** [October 30, 2017, 12:14pm UTC](https://discuss.elastic.co/t/field-stats-api-deprecated/85225 "2017-10-30T12:14:13Z")
Hi, About a year ago, lots of people from Elastic were singing the praises of the field\_stats\_api, specifically how it can be used to figure out which indices to target a search on. Kibana still uses this mechanism in… --- ## [Do I Need to close and open index when synonym.txt changed?](https://discuss.elastic.co/t/do-i-need-to-close-and-open-index-when-synonym-txt-changed/184105)
**Author:** [@kimchigood](https://discuss.elastic.co/u/kimchigood)\ **Replies:** 4\ **Last updated:** [June 7, 2019, 3:53am UTC](https://discuss.elastic.co/t/do-i-need-to-close-and-open-index-when-synonym-txt-changed/184105 "2019-06-07T03:53:23Z")
As far as i know, when synonym.txt changed, index have to close and open. but now, when i changed to synonym.txt and didn't use close and open API for index and new synonym is applied. my elasicsearch engine is running… --- ## [How to split a url value separated by '?' and get top url](https://discuss.elastic.co/t/how-to-split-a-url-value-separated-by-and-get-top-url/150984)
**Author:** [@Jogendra\_Jangid](https://discuss.elastic.co/u/Jogendra_Jangid)\ **Replies:** 4\ **Last updated:** [October 4, 2018, 8:37am UTC](https://discuss.elastic.co/t/how-to-split-a-url-value-separated-by-and-get-top-url/150984 "2018-10-04T08:37:53Z")
Hi, We have Nginx URL logs like below and trying to get top URLs by API name. so how can I ignore values after '?' the question mark and get API's. /services/user/user\_messages?bid=xxxxxx&apikey=xxxxxxxxxxxx&start=xxxx… --- ## [How to config, bug watcher alert email on Elasticsearch](https://discuss.elastic.co/t/how-to-config-bug-watcher-alert-email-on-elasticsearch/86754)
**Author:** [@H\_c](https://discuss.elastic.co/u/H_c)\ **Replies:** 4\ **Last updated:** [May 24, 2017, 8:50am UTC](https://discuss.elastic.co/t/how-to-config-bug-watcher-alert-email-on-elasticsearch/86754 "2017-05-24T08:50:36Z")
I added: watcher.actions.email.service.account: gmail\_account: profile: gmail email\_defaults: from: 'alerts elasticsstack@gmail.com' smtp: auth: true startt… --- ## [Real example with elasticsearch and hadoop?](https://discuss.elastic.co/t/real-example-with-elasticsearch-and-hadoop/63190)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 4\ **Last updated:** [April 6, 2017, 8:52am UTC](https://discuss.elastic.co/t/real-example-with-elasticsearch-and-hadoop/63190 "2017-04-06T08:52:22Z")
Hello, I am looking for real examples (full code) to play with elasticsearch and hadoop. Especially about data mapping (on Pig and Spark). Thanks you, --- ## [Json parse exception on \\r in logstash 5.2. for nested json on windows](https://discuss.elastic.co/t/json-parse-exception-on-r-in-logstash-5-2-for-nested-json-on-windows/78104)
**Author:** [@Divya\_Bhardwaj](https://discuss.elastic.co/u/Divya_Bhardwaj)\ **Replies:** 4\ **Last updated:** [March 15, 2017, 8:14am UTC](https://discuss.elastic.co/t/json-parse-exception-on-r-in-logstash-5-2-for-nested-json-on-windows/78104 "2017-03-15T08:14:22Z")
Hi All, I have a nested json as a file input as below: \[ { "status": "OK", "total":2, "doc\_value": { "state": "1", "value": "0.203222", "type": "new" }, "language": "english", "doc\_st… [Previous page](https://discuss.elastic.co/top.md?page=1259&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1261&per_page=50&period=all)