# Top **URL:** https://discuss.elastic.co/top.md?page=1264&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1265 --- ## [Cat API stuck if some data nodes are overloaded](https://discuss.elastic.co/t/cat-api-stuck-if-some-data-nodes-are-overloaded/209986)
**Author:** [@entrop](https://discuss.elastic.co/u/entrop)\ **Replies:** 5\ **Last updated:** [December 11, 2019, 12:17pm UTC](https://discuss.elastic.co/t/cat-api-stuck-if-some-data-nodes-are-overloaded/209986 "2019-12-11T12:17:35Z")
Hi! I am driving a very huge elasticsearch cluster (jdk13, elasticsearch 6.8.5) with ~200tb of data and a lot of nodes spread over several DC. We index about logs ~6-7 tb daily. To be short: curl -X GET "master.elasti… --- ## [RabbitMQ between provider and consumer](https://discuss.elastic.co/t/rabbitmq-between-provider-and-consumer/116709)
**Author:** [@Andrzej\_Rosiek](https://discuss.elastic.co/u/Andrzej_Rosiek)\ **Replies:** 5\ **Last updated:** [January 26, 2018, 2:48pm UTC](https://discuss.elastic.co/t/rabbitmq-between-provider-and-consumer/116709 "2018-01-26T14:48:37Z")
Hi, I have configuration like: nginx \> logstash \> rabbitmq \> logstash \> file provider output config: output { rabbitmq { id =\> "nginx" host =\> "rabbitmq" exchange =\> "nginx" exchang… --- ## [What are the default data types when Logstash reads from SQL DB?](https://discuss.elastic.co/t/what-are-the-default-data-types-when-logstash-reads-from-sql-db/103996)
**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\ **Replies:** 5\ **Last updated:** [October 17, 2017, 4:04am UTC](https://discuss.elastic.co/t/what-are-the-default-data-types-when-logstash-reads-from-sql-db/103996 "2017-10-17T04:04:50Z")
Hi, Can someone please say what are the default data types when Logstash reads data from SQL DB. Will it be the same as declared in the Sql server Database? And when I want to send it to Elasticsearch do I need to perfo… --- ## [Corss-index parent/child relationship](https://discuss.elastic.co/t/corss-index-parent-child-relationship/18313)
**Author:** [@Drew\_Kutcharian](https://discuss.elastic.co/u/Drew_Kutcharian)\ **Replies:** 5\ **Last updated:** [June 27, 2014, 4:02am UTC](https://discuss.elastic.co/t/corss-index-parent-child-relationship/18313 "2014-06-27T04:02:23Z")
Hi! Does ES support cross-index parent/child relationship? More specifically, can I have all the parents in one index (say users) and the children (say events) in a multiple time series style (managed by curator) indi… --- ## [ElasticSearch - Shape found but missing field - pre-indexed shape](https://discuss.elastic.co/t/elasticsearch-shape-found-but-missing-field-pre-indexed-shape/12490)
**Author:** [@Christian\_Hansen](https://discuss.elastic.co/u/Christian_Hansen)\ **Replies:** 6\ **Last updated:** [June 26, 2013, 12:43pm UTC](https://discuss.elastic.co/t/elasticsearch-shape-found-but-missing-field-pre-indexed-shape/12490 "2013-06-26T12:43:26Z")
I am trying to filter Objects in ElasticSearch with the geo\_shape filter, this is my mapping for the fields: geo: { 6: { properties: { admin\_level\_text: { type: "string", include\_in\_all: false }, location:… --- ## [Replacing standard actions from a Java plugin](https://discuss.elastic.co/t/replacing-standard-actions-from-a-java-plugin/9278)
**Author:** [@andreasch](https://discuss.elastic.co/u/andreasch)\ **Replies:** 6\ **Last updated:** [October 9, 2012, 4:39pm UTC](https://discuss.elastic.co/t/replacing-standard-actions-from-a-java-plugin/9278 "2012-10-09T16:39:50Z")
I created a plugin that tries to replace the standard index action with my own implementation. In my plugin, I have the following method: @Override public void processModule(Module module) { … --- ## [Missing documents during bulk insert](https://discuss.elastic.co/t/missing-documents-during-bulk-insert/307802)
**Author:** [@EsraKahraman](https://discuss.elastic.co/u/EsraKahraman)\ **Replies:** 4\ **Last updated:** [June 23, 2022, 2:02pm UTC](https://discuss.elastic.co/t/missing-documents-during-bulk-insert/307802 "2022-06-23T14:02:29Z")
Hi there, I am using bulk API to load data in Elasticsearch. I need to load millions of documents to an elastic index; my ETL job breaks the whole set down to 10K record chunks. And then, it splits each chunk into the JS… --- ## [Elasticsearch master node failover](https://discuss.elastic.co/t/elasticsearch-master-node-failover/307504)
**Author:** [@artem.zikov](https://discuss.elastic.co/u/artem.zikov)\ **Replies:** 4\ **Last updated:** [June 20, 2022, 2:29pm UTC](https://discuss.elastic.co/t/elasticsearch-master-node-failover/307504 "2022-06-20T14:29:11Z")
Hello. I have Elasticsearch cluster (for graylog) with Elasticsearch-oss 7.10.2 Cluster has 3 nodes: 2 data/master and 1 master # curl -XGET 'localhost:9200/\_cat/nodes?v&pretty' ip heap.percent ram.percent cp… --- ## [One Index is not recovering from the state INITIALIZING and UNASSIGNED](https://discuss.elastic.co/t/one-index-is-not-recovering-from-the-state-initializing-and-unassigned/286468)
**Author:** [@Programmer](https://discuss.elastic.co/u/Programmer)\ **Replies:** 4\ **Last updated:** [October 13, 2021, 12:46pm UTC](https://discuss.elastic.co/t/one-index-is-not-recovering-from-the-state-initializing-and-unassigned/286468 "2021-10-13T12:46:21Z")
curl -XGET http://localhost:9200/\_cat/shards app-all 1 r INITIALIZING 172.16.4.165 viepevrat02 app-all 1 p STARTED 85125705 67gb 172.16.4.164 viepevrat01 app-all 0 p RELOCATING… --- ## [Creating alerts in Kibana for a specific query](https://discuss.elastic.co/t/creating-alerts-in-kibana-for-a-specific-query/250740)
**Author:** [@vpurushottam](https://discuss.elastic.co/u/vpurushottam)\ **Replies:** 4\ **Last updated:** [October 4, 2020, 12:13pm UTC](https://discuss.elastic.co/t/creating-alerts-in-kibana-for-a-specific-query/250740 "2020-10-04T12:13:06Z")
Hi, I am struggling with creating an alert on Kibana. I have the license and have Slack notification connected. I have logs coming in from a HIDS and from those logs, which has logs for many different kind of activities… --- ## [Logstash port is not opening](https://discuss.elastic.co/t/logstash-port-is-not-opening/221564)
**Author:** [@tbhaxor](https://discuss.elastic.co/u/tbhaxor)\ **Replies:** 4\ **Last updated:** [March 2, 2020, 5:58am UTC](https://discuss.elastic.co/t/logstash-port-is-not-opening/221564 "2020-03-02T05:58:28Z")
I have configured the logstash to bind 0.0.0.0:9600, after giving logstash service some time, the output of netstat -tunlpa | grep 9600 is empty # journalctl -xe | grep logstash | tail -30 Mar 01 17:38:09 soc logstash\[1… --- ## [Create standard timestamp](https://discuss.elastic.co/t/create-standard-timestamp/124071)
**Author:** [@tharu85](https://discuss.elastic.co/u/tharu85)\ **Replies:** 4\ **Last updated:** [March 16, 2018, 2:50am UTC](https://discuss.elastic.co/t/create-standard-timestamp/124071 "2018-03-16T02:50:54Z")
In my logstash, I used KV filter to parse the log and now I have 2 fields for date and time. "date" =\> "2017-10-10", "time" =\> "12:18:23", But I need to build standard timestamp from those date and time fields as below… --- ## [Update Document in Elasticsearch using spark 1.6](https://discuss.elastic.co/t/update-document-in-elasticsearch-using-spark-1-6/116378)
**Author:** [@Gunjit\_Bansal](https://discuss.elastic.co/u/Gunjit_Bansal)\ **Replies:** 4\ **Last updated:** [January 24, 2018, 3:39pm UTC](https://discuss.elastic.co/t/update-document-in-elasticsearch-using-spark-1-6/116378 "2018-01-24T15:39:00Z")
Hi, How to update any document in elasticsearch using spark 1.6 --- ## [Visualization not showing lines correctly](https://discuss.elastic.co/t/visualization-not-showing-lines-correctly/103369)
**Author:** [@dulman](https://discuss.elastic.co/u/dulman)\ **Replies:** 4\ **Last updated:** [October 12, 2017, 8:47am UTC](https://discuss.elastic.co/t/visualization-not-showing-lines-correctly/103369 "2017-10-12T08:47:47Z")
Hello, according to closed ticket Dashboard not showing lines correctly. We have imported a lot of visualizations (created under kibana version 5.0.0) into kibana version 5.5.0. After that we have a strange behavior: … --- ## [Heartbeat 5.1.2 download](https://discuss.elastic.co/t/heartbeat-5-1-2-download/82417)
**Author:** [@open\_door8](https://discuss.elastic.co/u/open_door8)\ **Replies:** 4\ **Last updated:** [April 14, 2017, 3:47pm UTC](https://discuss.elastic.co/t/heartbeat-5-1-2-download/82417 "2017-04-14T15:47:30Z")
Where can I download Heartbeat v.5.1.2 --- ## [Curator --snapshot option matching all snapshots](https://discuss.elastic.co/t/curator-snapshot-option-matching-all-snapshots/64010)
**Author:** [@David\_McClain](https://discuss.elastic.co/u/David_McClain)\ **Replies:** 4\ **Last updated:** [November 8, 2016, 1:40pm UTC](https://discuss.elastic.co/t/curator-snapshot-option-matching-all-snapshots/64010 "2016-11-08T13:40:49Z")
I am trying to use the curator tool to automate deleting older snapshots. Up until now, I've been using the Elasticsearch API to create the snapshots instead of Curator. Curator version: 3.5.1 The following: cur… --- ## [Elasticsearch how to figure out the shard number with the specified routing?](https://discuss.elastic.co/t/elasticsearch-how-to-figure-out-the-shard-number-with-the-specified-routing/60842)
**Author:** [@hex2tan](https://discuss.elastic.co/u/hex2tan)\ **Replies:** 4\ **Last updated:** [September 20, 2016, 1:22am UTC](https://discuss.elastic.co/t/elasticsearch-how-to-figure-out-the-shard-number-with-the-specified-routing/60842 "2016-09-20T01:22:12Z")
eg: I have a index with 5 primary shard, when I query/insert a document with routing. How can I figure out the shard number? According to the document the formula is: shard\_num = hash(\_routing) % num\_primary\_shards.Certa… --- ## [Bug for PR 749](https://discuss.elastic.co/t/bug-for-pr-749/39921)
**Author:** [@biswajit86](https://discuss.elastic.co/u/biswajit86)\ **Replies:** 4\ **Last updated:** [January 22, 2016, 9:20pm UTC](https://discuss.elastic.co/t/bug-for-pr-749/39921 "2016-01-22T21:20:00Z")
Hi All, PR 749 recently got merged to master . This PR implements support for command line options in topbeat. However, I am unable to see command line options for child proceses. Some of our ancient perl scripts use… --- ## [Can I change type of current master node and how to increase performance for my Elasticsearch cluster](https://discuss.elastic.co/t/can-i-change-type-of-current-master-node-and-how-to-increase-performance-for-my-elasticsearch-cluster/18892)
**Author:** [@Warat\_Wongmaneekit](https://discuss.elastic.co/u/Warat_Wongmaneekit)\ **Replies:** 4\ **Last updated:** [July 25, 2014, 9:33am UTC](https://discuss.elastic.co/t/can-i-change-type-of-current-master-node-and-how-to-increase-performance-for-my-elasticsearch-cluster/18892 "2014-07-25T09:33:48Z")
We have 3 nodes of elastic search all nodes is mater=true and data=true. When we try to find the best practice almost is recommend to setup 1 node for master=true,data=false and another 2 nodes is master=false,data=… --- ## [Invalid Certificate Errors when setting up SSL/HTTPS for Elasticsearch in Docker](https://discuss.elastic.co/t/invalid-certificate-errors-when-setting-up-ssl-https-for-elasticsearch-in-docker/249713)
**Author:** [@encompassJeff](https://discuss.elastic.co/u/encompassJeff)\ **Replies:** 0\ **Last updated:** [September 23, 2020, 9:45pm UTC](https://discuss.elastic.co/t/invalid-certificate-errors-when-setting-up-ssl-https-for-elasticsearch-in-docker/249713 "2020-09-23T21:45:00Z")
Hi there! Some basic background: My client has recently requested that we transition to using ELK stack to power our search and metrics. We are running Laravel 5.8/PHP 7.3 on the backend (feeding a ReactJS front-end via… --- ## [“java.lang.VerifyError” occured when starting elasticsearch 1.7.1](https://discuss.elastic.co/t/java-lang-verifyerror-occured-when-starting-elasticsearch-1-7-1/29106)
**Author:** [@shinyke](https://discuss.elastic.co/u/shinyke)\ **Replies:** 1\ **Last updated:** [September 12, 2015, 8:34am UTC](https://discuss.elastic.co/t/java-lang-verifyerror-occured-when-starting-elasticsearch-1-7-1/29106 "2015-09-12T08:34:40Z")
Hi, The elasticsearch 1.7.1 release was compiled in my local environment (jdk version:1.7.71 ， win 64x). The source code was downloaded in github: https://github.com/elastic/elasticsearch/tree/v1.7.1 After build s… --- ## [Sudo service elasticsearch start is not working](https://discuss.elastic.co/t/sudo-service-elasticsearch-start-is-not-working/29050)
**Author:** [@Navaneeth\_K\_N](https://discuss.elastic.co/u/Navaneeth_K_N)\ **Replies:** 1\ **Last updated:** [September 10, 2015, 4:10pm UTC](https://discuss.elastic.co/t/sudo-service-elasticsearch-start-is-not-working/29050 "2015-09-10T16:10:38Z")
I am trying to start elasticsearch using the default init script provided. sudo service elasticsearch start This will say starting elasticsearch, but does nothing. Not sure what is going wrong. So I added some log st… --- ## [Network Speed between ES nodes](https://discuss.elastic.co/t/network-speed-between-es-nodes/12576)
**Author:** [@Antonios\_Giannopoulo](https://discuss.elastic.co/u/Antonios_Giannopoulo)\ **Replies:** 1\ **Last updated:** [June 28, 2013, 10:02am UTC](https://discuss.elastic.co/t/network-speed-between-es-nodes/12576 "2013-06-28T10:02:49Z")
Hi, I have setup a five node cluster (5 shards 1 replica) for evaluation. I have notice that during a shard relocation or during a cluster rebalance a node can achieve a maximum speed of 160 Mbp/s. The issue is tha… --- ## [Use new dataview in an existing dashboard](https://discuss.elastic.co/t/use-new-dataview-in-an-existing-dashboard/342656)
**Author:** [@javierelastic](https://discuss.elastic.co/u/javierelastic)\ **Replies:** 2\ **Last updated:** [September 12, 2023, 9:38am UTC](https://discuss.elastic.co/t/use-new-dataview-in-an-existing-dashboard/342656 "2023-09-12T09:38:25Z")
Hi. I have a dashboard created with a set of data that I passed through logstash to elasticsearch. But now I have created a new index and a new dataview with similar data. And I want to use the complete dashboard with t… --- ## [VMWare NSX Parsing](https://discuss.elastic.co/t/vmware-nsx-parsing/315054)
**Author:** [@groth](https://discuss.elastic.co/u/groth)\ **Replies:** 2\ **Last updated:** [September 23, 2022, 9:18pm UTC](https://discuss.elastic.co/t/vmware-nsx-parsing/315054 "2022-09-23T21:18:42Z")
I'm currently working on a Logstash pipeline for VMWare NSX firewall logs coming in over syslog forwarding. Some of the ICMP logs have a couple numbers between the protocol name and the source and destination IPs that VM… --- ## [Winlogbeat not creating daily indexes](https://discuss.elastic.co/t/winlogbeat-not-creating-daily-indexes/184322)
**Author:** [@srdegeus](https://discuss.elastic.co/u/srdegeus)\ **Replies:** 2\ **Last updated:** [June 5, 2019, 10:30am UTC](https://discuss.elastic.co/t/winlogbeat-not-creating-daily-indexes/184322 "2019-06-05T10:30:54Z")
I have taken over an elasticsearch 6.6.2 environment which was a proof of concept to centralize event\_logs monitoring. I have upgraded the servers to Windows 2019 and elasticsearch to 7.1.0 (and now 7.1.1) and added a d… --- ## [Can we create multiple metric using line chart in canvas](https://discuss.elastic.co/t/can-we-create-multiple-metric-using-line-chart-in-canvas/176267)
**Author:** [@Prashant\_Agrawal](https://discuss.elastic.co/u/Prashant_Agrawal)\ **Replies:** 2\ **Last updated:** [April 11, 2019, 7:43am UTC](https://discuss.elastic.co/t/can-we-create-multiple-metric-using-line-chart-in-canvas/176267 "2019-04-11T07:43:15Z")
Is there a way we can create a line chart in canvas with multiple metrics in same graph. Basically the similar to what we do in visualization -\> Line chart -\> select multiple metric as aggregation. I want to create belo… --- ## [Bad certificate error](https://discuss.elastic.co/t/bad-certificate-error/146240)
**Author:** [@Nina\_brown](https://discuss.elastic.co/u/Nina_brown)\ **Replies:** 2\ **Last updated:** [August 28, 2018, 8:44am UTC](https://discuss.elastic.co/t/bad-certificate-error/146240 "2018-08-28T08:44:17Z")
Hi, I want to create a self-signed certificate based on the IP of the logstash server, so my filebeat connection to logstash would be secure. I used the following command to generate the certificate: openssl req -config… --- ## [Modify x-axis timestamp interval](https://discuss.elastic.co/t/modify-x-axis-timestamp-interval/131878)
**Author:** [@madou23](https://discuss.elastic.co/u/madou23)\ **Replies:** 2\ **Last updated:** [May 16, 2018, 9:47am UTC](https://discuss.elastic.co/t/modify-x-axis-timestamp-interval/131878 "2018-05-16T09:47:11Z")
Hi all, I'm creating a visualization in kibana that count the total number of docs in a specific range of time which in my case between 21h and 23h. I'm using a custom timestamp interval which is 3m and I want to only s… --- ## [Certgen and the "Extended Key Usage" field](https://discuss.elastic.co/t/certgen-and-the-extended-key-usage-field/100536)
**Author:** [@Cornoualis](https://discuss.elastic.co/u/Cornoualis)\ **Replies:** 2\ **Last updated:** [September 25, 2017, 1:07pm UTC](https://discuss.elastic.co/t/certgen-and-the-extended-key-usage-field/100536 "2017-09-25T13:07:05Z")
In a previous topic, there was a discussion about the "Extended Key Usage" field that was left blank by certgen, when generating a CSR: Since we know in advance that the certificate will be used for both server and cl… --- ## [Filebeat Kafka output](https://discuss.elastic.co/t/filebeat-kafka-output/49950)
**Author:** [@anefassa](https://discuss.elastic.co/u/anefassa)\ **Replies:** 2\ **Last updated:** [May 17, 2016, 10:39am UTC](https://discuss.elastic.co/t/filebeat-kafka-output/49950 "2016-05-17T10:39:54Z")
Is it possible to specify a partition key when using filebeat to send to a Kafka topic? --- ## [Fortinet Integration not parsing all data](https://discuss.elastic.co/t/fortinet-integration-not-parsing-all-data/316849)
**Author:** [@sirineb](https://discuss.elastic.co/u/sirineb)\ **Replies:** 3\ **Last updated:** [November 10, 2022, 1:54pm UTC](https://discuss.elastic.co/t/fortinet-integration-not-parsing-all-data/316849 "2022-11-10T13:54:55Z")
Hi, I noticed a problem with the Fortinet integration. I have an Elastic Agent 8.3 installed on a virtual machine. The policy for this Agent is composed of system and the fortinet integration. Our fortianalyzer is sendi… --- ## [ELK Integration with SAP HANA](https://discuss.elastic.co/t/elk-integration-with-sap-hana/235913)
**Author:** [@Shivakarasani](https://discuss.elastic.co/u/Shivakarasani)\ **Replies:** 0\ **Last updated:** [June 5, 2020, 8:43am UTC](https://discuss.elastic.co/t/elk-integration-with-sap-hana/235913 "2020-06-05T08:43:17Z")
anyone integrated ELK with SAP HANA DB, I am trying to integrate using JDBC connector and not able to connect. Is there any document available for this? I have not an appropriate one till now. my conf file jdbc { jd… --- ## [Canvas and cumulative sum](https://discuss.elastic.co/t/canvas-and-cumulative-sum/224685)
**Author:** [@PaulSPG](https://discuss.elastic.co/u/PaulSPG)\ **Replies:** 3\ **Last updated:** [March 24, 2020, 8:29am UTC](https://discuss.elastic.co/t/canvas-and-cumulative-sum/224685 "2020-03-24T08:29:56Z")
Would it be possible to calculate the cumulative sum of a column using f.i. mapColumn. For example the price column of demodata. Something like: filters | demodata | mapColumn "CuSum Price" fn={math 'sum(price + CuSu… --- ## [Sysmon DNS Query missing Status codes](https://discuss.elastic.co/t/sysmon-dns-query-missing-status-codes/213396)
**Author:** [@Nicholas\_Penning](https://discuss.elastic.co/u/Nicholas_Penning)\ **Replies:** 3\ **Last updated:** [January 20, 2020, 6:44pm UTC](https://discuss.elastic.co/t/sysmon-dns-query-missing-status-codes/213396 "2020-01-20T18:44:05Z")
Hello, We are ingesting some SysMon (Version 10.41) DNS logs via WinLogbeat 7.4.0 and have found that some status codes are not either getting translated with the sysmon.js or are not in the list. I will focus on the ev… --- ## [Most performant way to filter for exceptions in log events?](https://discuss.elastic.co/t/most-performant-way-to-filter-for-exceptions-in-log-events/181551)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 0\ **Last updated:** [May 17, 2019, 9:28am UTC](https://discuss.elastic.co/t/most-performant-way-to-filter-for-exceptions-in-log-events/181551 "2019-05-17T09:28:22Z")
Hi all, currently I have an event which my contain exceptions like nullpointerException or javax.ejb.EJBException or my.very.OwnException in one of it's field. The event itself can get quite big because of very long sta… --- ## [Why is my \_delete\_by\_query being ignored?](https://discuss.elastic.co/t/why-is-my-delete-by-query-being-ignored/124409)
**Author:** [@jordanglassman](https://discuss.elastic.co/u/jordanglassman)\ **Replies:** 3\ **Last updated:** [March 18, 2018, 3:50pm UTC](https://discuss.elastic.co/t/why-is-my-delete-by-query-being-ignored/124409 "2018-03-18T15:50:29Z")
I understand that \_delete\_by\_query is now added to core, and no longer requires a plugin. Using org.elasticsearch:elasticsearch:5.5.2, I am starting a org.elasticsearch.node.Node with: public void before() throws Excep… --- ## [Replace winlogbeat configuration file](https://discuss.elastic.co/t/replace-winlogbeat-configuration-file/102789)
**Author:** [@justas](https://discuss.elastic.co/u/justas)\ **Replies:** 3\ **Last updated:** [October 6, 2017, 1:30am UTC](https://discuss.elastic.co/t/replace-winlogbeat-configuration-file/102789 "2017-10-06T01:30:13Z")
Hi All, What is the proper way to replace/update winlogbeat.yml file and force that file into the service? I expected modifying the .yml in programfiles/winlogbeat and service restart would pick it up, but it does not. … --- ## [Logstash-Filter-CSV plugin clarification (skip header and define column )](https://discuss.elastic.co/t/logstash-filter-csv-plugin-clarification-skip-header-and-define-column/88720)
**Author:** [@Ajay1](https://discuss.elastic.co/u/Ajay1)\ **Replies:** 0\ **Last updated:** [June 8, 2017, 2:06pm UTC](https://discuss.elastic.co/t/logstash-filter-csv-plugin-clarification-skip-header-and-define-column/88720 "2017-06-08T14:06:44Z")
Hi All, I recently upgraded Logstash from 5.0 to 5.3 and using Filter-csv plugin for some of the reports . My configuration goes fine without any changes but in Kibana i could not get the data in column specific (exp… --- ## [Java.lang.OutMemoryError](https://discuss.elastic.co/t/java-lang-outmemoryerror/84001)
**Author:** [@vineets928](https://discuss.elastic.co/u/vineets928)\ **Replies:** 8\ **Last updated:** [April 28, 2017, 1:52pm UTC](https://discuss.elastic.co/t/java-lang-outmemoryerror/84001 "2017-04-28T13:52:20Z")
Hi, I have to migrate mysql data to elasticsearch. My logstash configuration file is Getting error when starting logstash In logstash configuration file, changed the JVM configuration to 512m and 8g. But after resta… --- ## [ES Logstash config problem](https://discuss.elastic.co/t/es-logstash-config-problem/78328)
**Author:** [@Tigryss](https://discuss.elastic.co/u/Tigryss)\ **Replies:** 3\ **Last updated:** [March 16, 2017, 4:50am UTC](https://discuss.elastic.co/t/es-logstash-config-problem/78328 "2017-03-16T04:50:13Z")
hi where can i set pool size , active threads , queued tasks i get this error \[2017-03-13T12:08:29,434\]\[INFO \]\[logstash.outputs.elasticsearch\] retrying failed action with response code: 429 ({"type"=\>"es\_rejected\_… --- ## [CORS issue in Elasticsearch v2.3.3](https://discuss.elastic.co/t/cors-issue-in-elasticsearch-v2-3-3/55518)
**Author:** [@sheilj](https://discuss.elastic.co/u/sheilj)\ **Replies:** 3\ **Last updated:** [July 15, 2016, 2:13pm UTC](https://discuss.elastic.co/t/cors-issue-in-elasticsearch-v2-3-3/55518 "2016-07-15T14:13:41Z")
Hi, we are calling the elasticsearch (2.3.3.) from javascript code, using http methods. What in the headers do we need to set in the http request to get rid of the following error: Request header content-type was not pre… --- ## [Different profiles accessing different data](https://discuss.elastic.co/t/different-profiles-accessing-different-data/31790)
**Author:** [@vmcano](https://discuss.elastic.co/u/vmcano)\ **Replies:** 3\ **Last updated:** [November 6, 2015, 5:02am UTC](https://discuss.elastic.co/t/different-profiles-accessing-different-data/31790 "2015-11-06T05:02:25Z")
I need to cipher some parts of my data and I think I can do it using the Logstash filters. The difficult point of it is that I need two profiles: one which would be able to see deciphered data in Kibana and another that … --- ## [\_timestamp](https://discuss.elastic.co/t/-timestamp/11026)
**Author:** [@vinh](https://discuss.elastic.co/u/vinh)\ **Replies:** 8\ **Last updated:** [March 6, 2013, 6:48am UTC](https://discuss.elastic.co/t/-timestamp/11026 "2013-03-06T06:48:05Z")
When inserting docs, I store my own timestamp value in the default "\_timestamp" field. Then I search docs and fetch both "\_source" and "\_timestamp" fields. I notice that the value of \_source.\_timestamp correctly has my… --- ## [Proximity with intervals query question](https://discuss.elastic.co/t/proximity-with-intervals-query-question/263730)
**Author:** [@Daantie](https://discuss.elastic.co/u/Daantie)\ **Replies:** 0\ **Last updated:** [February 9, 2021, 1:12pm UTC](https://discuss.elastic.co/t/proximity-with-intervals-query-question/263730 "2021-02-09T13:12:28Z")
Hi all! I'm trying to understand the inner workings of intervals query and I'm confused and hope that anyone can explain this to me a bit. So I have encountered this piece of data (mind the bold words for the query later… --- ## [How to made logstash work with io.confluent.kafka.serializers.KafkaAvroSerializer](https://discuss.elastic.co/t/how-to-made-logstash-work-with-io-confluent-kafka-serializers-kafkaavroserializer/245503)
**Author:** [@wysouf](https://discuss.elastic.co/u/wysouf)\ **Replies:** 0\ **Last updated:** [August 18, 2020, 10:57pm UTC](https://discuss.elastic.co/t/how-to-made-logstash-work-with-io-confluent-kafka-serializers-kafkaavroserializer/245503 "2020-08-18T22:57:36Z")
output{ kafka{ topic\_id =\> "myTopic" bootstrap\_servers =\> "127.0.0.1:9092" value\_serializer =\> "io.confluent.kafka.serializers.KafkaAvroSerializer" } } \[\[main\]-pipeline-manager\] kafka - Unable to cr… --- ## [Filebeat registry (inode) clean case restart slow](https://discuss.elastic.co/t/filebeat-registry-inode-clean-case-restart-slow/213116)
**Author:** [@john\_am](https://discuss.elastic.co/u/john_am)\ **Replies:** 0\ **Last updated:** [December 27, 2019, 1:52am UTC](https://discuss.elastic.co/t/filebeat-registry-inode-clean-case-restart-slow/213116 "2019-12-27T01:52:22Z")
1 What's go on? Filebeat terrible slow to start harvest after I configure the inode clean. 2 My config are as follow: \ type: log enabled: true paths: /data/aaa/aaa/\*\* tags: \["aaa"\] fields: public\_ip: 14.1… --- ## [Filebeat connection error with logstash](https://discuss.elastic.co/t/filebeat-connection-error-with-logstash/327208)
**Author:** [@sebglon](https://discuss.elastic.co/u/sebglon)\ **Replies:** 1\ **Last updated:** [March 8, 2023, 8:24am UTC](https://discuss.elastic.co/t/filebeat-connection-error-with-logstash/327208 "2023-03-08T08:24:03Z")
Hi, We have a K8s cluster with more than 30 nodes. on each nodes we have a filebeat agent to collect container logs and node logs. filebeat agents send data to 3 logstash on the same cluster. On some nodes and after … --- ## [Filtered Log messages show up as empty fields in Kibana](https://discuss.elastic.co/t/filtered-log-messages-show-up-as-empty-fields-in-kibana/315400)
**Author:** [@Chma](https://discuss.elastic.co/u/Chma)\ **Replies:** 7\ **Last updated:** [September 29, 2022, 5:01pm UTC](https://discuss.elastic.co/t/filtered-log-messages-show-up-as-empty-fields-in-kibana/315400 "2022-09-29T17:01:49Z")
I have filtered my log message using grok. But when I check Kibana, I find the new fields on the left side of the page, but they are empty. I am also getting the \_grokparsefailure tag. Here's an example of my log messag… --- ## [Juniper log ingestion](https://discuss.elastic.co/t/juniper-log-ingestion/270964)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 7\ **Last updated:** [April 27, 2021, 7:15pm UTC](https://discuss.elastic.co/t/juniper-log-ingestion/270964 "2021-04-27T19:15:24Z")
I am trying to ingest juniper log via filebeat using juniper module but it does not give me systemname and RT\_FLOW anywhere in my ELK data. how do I get that? source = dc-fw1 Can I modify this module and add my own p… [Previous page](https://discuss.elastic.co/top.md?page=1263&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1265&per_page=50&period=all)