# Top **URL:** https://discuss.elastic.co/top.md?page=1266&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1267 --- ## [Multiline log](https://discuss.elastic.co/t/multiline-log/43075)
**Author:** [@pecwich](https://discuss.elastic.co/u/pecwich)\ **Replies:** 5\ **Last updated:** [March 4, 2016, 9:11am UTC](https://discuss.elastic.co/t/multiline-log/43075 "2016-03-04T09:11:57Z")
In a multiline log, can parsing or indexing of fields occur only in the first line? I want to parse fields present in the second or third line for example, what should I do? --- ## [Kibana date not showing correctly](https://discuss.elastic.co/t/kibana-date-not-showing-correctly/297652)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 4\ **Last updated:** [February 22, 2022, 2:30pm UTC](https://discuss.elastic.co/t/kibana-date-not-showing-correctly/297652 "2022-02-22T14:30:12Z")
Hi All, We are using ELK 7.6.2 stack. For some reason, all of a sudden Kibana started displaying end date incorrectly. Instead of showing the current time it is stuck to an old time during the same day. Please see bel… --- ## [How to make Ruby selectively remove the top level field from a specific nested field pattern](https://discuss.elastic.co/t/how-to-make-ruby-selectively-remove-the-top-level-field-from-a-specific-nested-field-pattern/232733)
**Author:** [@kevin\_branch](https://discuss.elastic.co/u/kevin_branch)\ **Replies:** 4\ **Last updated:** [June 9, 2020, 8:53am UTC](https://discuss.elastic.co/t/how-to-make-ruby-selectively-remove-the-top-level-field-from-a-specific-nested-field-pattern/232733 "2020-06-09T08:53:10Z")
My Logstash instance will be receiving JSON records containing a wide variety of nested fields whose names start with \[data\]\[ecs\].... and I need to trim the \[data\] prefix off of all of those field names before indexing. … --- ## [SIEM Network Page Queries all indexes](https://discuss.elastic.co/t/siem-network-page-queries-all-indexes/231490)
**Author:** [@PhilA](https://discuss.elastic.co/u/PhilA)\ **Replies:** 4\ **Last updated:** [May 13, 2020, 2:31pm UTC](https://discuss.elastic.co/t/siem-network-page-queries-all-indexes/231490 "2020-05-13T14:31:26Z")
Hi I have recently spent a lot of time getting a few of my data sources ingested in ECS format so that I can get the benefits from the SIEM capability. Some data comes direct from the \*beats tools but some are via Logs… --- ## [How to separate a log line by line](https://discuss.elastic.co/t/how-to-separate-a-log-line-by-line/217232)
**Author:** [@Ben240489](https://discuss.elastic.co/u/Ben240489)\ **Replies:** 4\ **Last updated:** [February 6, 2020, 3:34pm UTC](https://discuss.elastic.co/t/how-to-separate-a-log-line-by-line/217232 "2020-02-06T15:34:28Z")
Hi, I'm pretty new here and I am experimenting with ELK. One thing I couldn't figure out until now is: How can I parse a log line by line with each line becoming its own event? For example, I have a log file which look… --- ## [Reduce lucene segment heap memory signature](https://discuss.elastic.co/t/reduce-lucene-segment-heap-memory-signature/68405)
**Author:** [@Roman\_Margolis](https://discuss.elastic.co/u/Roman_Margolis)\ **Replies:** 4\ **Last updated:** [December 8, 2016, 10:24pm UTC](https://discuss.elastic.co/t/reduce-lucene-segment-heap-memory-signature/68405 "2016-12-08T22:24:01Z")
I have a 12 node cluster + 3 masters, running ES 2.3.1, with 5000 shards cluster wide, about 410 shards per node, roughly 250 billion small documents. Shards are roughly 8GB in size, well balanced (small variance of shar… --- ## [Can Kibana 4 be installed alongside Kibana 3?](https://discuss.elastic.co/t/can-kibana-4-be-installed-alongside-kibana-3/929)
**Author:** [@Dave\_G](https://discuss.elastic.co/u/Dave_G)\ **Replies:** 4\ **Last updated:** [June 2, 2015, 1:37pm UTC](https://discuss.elastic.co/t/can-kibana-4-be-installed-alongside-kibana-3/929 "2015-06-02T13:37:01Z")
We have an existing Kibana 3 installation in production with a lot of data being gathered. I would like to install Kibana 4 to take advantage of some new features, but I don't want to break what we already have and I don… --- ## [Indexing/shard failure](https://discuss.elastic.co/t/indexing-shard-failure/7178)
**Author:** [@Adam\_Estrada](https://discuss.elastic.co/u/Adam_Estrada)\ **Replies:** 4\ **Last updated:** [April 4, 2012, 9:47pm UTC](https://discuss.elastic.co/t/indexing-shard-failure/7178 "2012-04-04T21:47:56Z")
All, There are a few other posts related to this same thing but I still can't get my index to recover correctly. I flushed and refreshed the index and deleted the translog from shard #3. Still no dice. I am running ES… --- ## [Kibana startup stuck when elasticsearch use http](https://discuss.elastic.co/t/kibana-startup-stuck-when-elasticsearch-use-http/315414)
**Author:** [@acerphoenix](https://discuss.elastic.co/u/acerphoenix)\ **Replies:** 2\ **Last updated:** [September 29, 2022, 3:11am UTC](https://discuss.elastic.co/t/kibana-startup-stuck-when-elasticsearch-use-http/315414 "2022-09-29T03:11:15Z")
Hello, I install es and kibana version 8.4.2, they enable https by default. but i prefer http in private network. so i follow the official instruction, download es and start it, and get some security information indicat… --- ## [How do I use match query inside a nested aggregation?](https://discuss.elastic.co/t/how-do-i-use-match-query-inside-a-nested-aggregation/295811)
**Author:** [@dotel](https://discuss.elastic.co/u/dotel)\ **Replies:** 2\ **Last updated:** [January 31, 2022, 11:17am UTC](https://discuss.elastic.co/t/how-do-i-use-match-query-inside-a-nested-aggregation/295811 "2022-01-31T11:17:06Z")
Is there a way to do a match query inside nested aggregation? The query below works fine for my use case but it uses a term filter instead of a match. So searching for "nursery" will result in 0 buckets. GET sushant-ten… --- ## ["Signed fields invalid" for configuring HTTPS transport layer](https://discuss.elastic.co/t/signed-fields-invalid-for-configuring-https-transport-layer/262491)
**Author:** [@gvx3](https://discuss.elastic.co/u/gvx3)\ **Replies:** 2\ **Last updated:** [January 29, 2021, 6:53am UTC](https://discuss.elastic.co/t/signed-fields-invalid-for-configuring-https-transport-layer/262491 "2021-01-29T06:53:01Z")
Hi all, I know that these kind of questions have been asking a lot, but I'm really stuck and can't help it I'm using Helm to deploy elasticsearch, I use letsencrypt to generate cert, so I have fullchain.pem which is fo… --- ## [NGINX reverse proxy problem](https://discuss.elastic.co/t/nginx-reverse-proxy-problem/142846)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 2\ **Last updated:** [August 6, 2018, 4:59am UTC](https://discuss.elastic.co/t/nginx-reverse-proxy-problem/142846 "2018-08-06T04:59:05Z")
Hi, I'm having some difficulties with setting up a reverse proxy in combination with iframes. When using / as the location browsing to sub.mydomain.com, the proxy is working but the root location is skipped and I get th… --- ## [Input Filter: Syslog vs TCP/UDP](https://discuss.elastic.co/t/input-filter-syslog-vs-tcp-udp/135437)
**Author:** [@mrahim](https://discuss.elastic.co/u/mrahim)\ **Replies:** 2\ **Last updated:** [June 12, 2018, 9:26am UTC](https://discuss.elastic.co/t/input-filter-syslog-vs-tcp-udp/135437 "2018-06-12T09:26:26Z")
Hi, I am looking to create an ELK pipeline for a variety of Syslog messages. While I thought it would make sense to use the Syslog input filter in Logstash, I read this piece about why Syslog might not be the most benefi… --- ## [Will Retry with exponential backoff](https://discuss.elastic.co/t/will-retry-with-exponential-backoff/130147)
**Author:** [@Joe\_Franklin](https://discuss.elastic.co/u/Joe_Franklin)\ **Replies:** 2\ **Last updated:** [May 2, 2018, 2:25pm UTC](https://discuss.elastic.co/t/will-retry-with-exponential-backoff/130147 "2018-05-02T14:25:25Z")
I need some help on how to track down the cause of this error: \[2018-05-01T17:40:37,503\]\[ERROR\]\[logstash.outputs.elasticsearch\] Encountered a retryable error. Will Retry with exponential backoff {:code=\>400, :url=\>"http… --- ## [Suggestion to ship logs from DMZ to LAN - Elastic stack 6.2.2](https://discuss.elastic.co/t/suggestion-to-ship-logs-from-dmz-to-lan-elastic-stack-6-2-2/121255)
**Author:** [@kattula](https://discuss.elastic.co/u/kattula)\ **Replies:** 2\ **Last updated:** [February 23, 2018, 8:02pm UTC](https://discuss.elastic.co/t/suggestion-to-ship-logs-from-dmz-to-lan-elastic-stack-6-2-2/121255 "2018-02-23T20:02:08Z")
Hi everyone, I need help from you guys as I'm new to working with Elastic stack. I have installed Elastic search, Kibana and Logstash in LAN, and Filebeat in DMZ zone. All the versions are 6.2.2. I would like to output … --- ## [Why not reconcile shards/docs after split brain recovery?](https://discuss.elastic.co/t/why-not-reconcile-shards-docs-after-split-brain-recovery/79333)
**Author:** [@Larry\_Durden](https://discuss.elastic.co/u/Larry_Durden)\ **Replies:** 2\ **Last updated:** [March 22, 2017, 6:17pm UTC](https://discuss.elastic.co/t/why-not-reconcile-shards-docs-after-split-brain-recovery/79333 "2017-03-22T18:17:49Z")
Yes split brains are bad and we can avoid it by setting discovery.zen.minimum\_master\_nodes to (n/2+1) quorums. This question is to understand why Elasticsearch cannot attempt to reconcile/replay the diverged data when a… --- ## [Recommended practise for detection tuning; filters or exceptions](https://discuss.elastic.co/t/recommended-practise-for-detection-tuning-filters-or-exceptions/262218)
**Author:** [@The1WhoPrtNocks](https://discuss.elastic.co/u/The1WhoPrtNocks)\ **Replies:** 7\ **Last updated:** [January 28, 2021, 12:36pm UTC](https://discuss.elastic.co/t/recommended-practise-for-detection-tuning-filters-or-exceptions/262218 "2021-01-28T12:36:27Z")
Hi, I have given a look through the documentation but did not come across anything conclusive. What is the recommended way of tuning detection rules, as you can get the same results from filters and exceptions. Can yo… --- ## [Как настроить хранение индексов по размеру](https://discuss.elastic.co/t/topic/259551)
**Author:** [@Peter\_Homicevich](https://discuss.elastic.co/u/Peter_Homicevich)\ **Replies:** 1\ **Last updated:** [December 25, 2020, 5:11pm UTC](https://discuss.elastic.co/t/topic/259551 "2020-12-25T17:11:36Z")
Добрый день! Подскажите как настроить хранение индексов не более 90Гб. Ситуация следующая: Имеется ELK, из одной ноды. Сервисы пишут логи в logsatsh. Logsatsh создает индекс в elasticsearch - index =\> "logs-%{+YYYY.MM… --- ## [AppSearch disk consumption keeps growing](https://discuss.elastic.co/t/appsearch-disk-consumption-keeps-growing/236101)
**Author:** [@gpribi](https://discuss.elastic.co/u/gpribi)\ **Replies:** 7\ **Last updated:** [June 28, 2020, 9:48pm UTC](https://discuss.elastic.co/t/appsearch-disk-consumption-keeps-growing/236101 "2020-06-28T21:48:47Z")
Hello, I see my dockerized Enterprise Elastic Search v7.7.0 self hosted appsearch is consuming each time more and more disk space, even my document count is almost the same. I even deleted the engine (30k records) but d… --- ## [Not able to Execute Query with Custom User](https://discuss.elastic.co/t/not-able-to-execute-query-with-custom-user/120069)
**Author:** [@eramitsinha](https://discuss.elastic.co/u/eramitsinha)\ **Replies:** 7\ **Last updated:** [February 20, 2018, 10:46pm UTC](https://discuss.elastic.co/t/not-able-to-execute-query-with-custom-user/120069 "2018-02-20T22:46:09Z")
Hi , I have ES 5.2.2 and X-Pack 5.2.2 security with Authentication mechanism: I have 6 Data Node in cluster. I have created Following Role(yy\_elastic\_search\_role) and User(yy\_transport\_client) in cluster(native rea… --- ## [Get year month and day from date field](https://discuss.elastic.co/t/get-year-month-and-day-from-date-field/110600)
**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\ **Replies:** 1\ **Last updated:** [December 7, 2017, 4:40am UTC](https://discuss.elastic.co/t/get-year-month-and-day-from-date-field/110600 "2017-12-07T04:40:22Z")
hi my csv data - "s1","salesman01","2017-06-22 00:00:00.000","2017-06-22 16:10:23.000","2017-06-22 16:11:44.000","5","25.252130,55.349060" i want to create new field which will call computeid for that i used this - m… --- ## [multi\_field and sort](https://discuss.elastic.co/t/multi-field-and-sort/6031)
**Author:** [@Jesus\_Lopes](https://discuss.elastic.co/u/Jesus_Lopes)\ **Replies:** 7\ **Last updated:** [December 15, 2011, 10:00am UTC](https://discuss.elastic.co/t/multi-field-and-sort/6031 "2011-12-15T10:00:25Z")
Hi, I'm starting to use elasticsearch. During my tests, I want sort the results by name. Some names have accents (like Éder) and may have other characters. Bellow the gist with my test: https://gist.github.com… --- ## [How can I hunt down this Java error: "a fault occurred in an unsafe memory access operation"](https://discuss.elastic.co/t/how-can-i-hunt-down-this-java-error-a-fault-occurred-in-an-unsafe-memory-access-operation/357656)
**Author:** [@artschooldropout](https://discuss.elastic.co/u/artschooldropout)\ **Replies:** 6\ **Last updated:** [April 18, 2024, 7:07pm UTC](https://discuss.elastic.co/t/how-can-i-hunt-down-this-java-error-a-fault-occurred-in-an-unsafe-memory-access-operation/357656 "2024-04-18T19:07:21Z")
I have a two-node Elasticsearch cluster with both nodes running 8.13.2. Since I added the second node to the cluster, the master node has been crashing regularly. The logs show: \[2024-04-17T15:57:09,258\]\[ERROR\]\[o.e.b.El… --- ## [Search performance difference between from&size and search&after](https://discuss.elastic.co/t/search-performance-difference-between-from-size-and-search-after/283400)
**Author:** [@MarvinLiu](https://discuss.elastic.co/u/MarvinLiu)\ **Replies:** 6\ **Last updated:** [September 7, 2021, 7:16am UTC](https://discuss.elastic.co/t/search-performance-difference-between-from-size-and-search-after/283400 "2021-09-07T07:16:43Z")
There are hundreds of millions of documents in my index. When I search, I find that search&after is much slower than from&size。 Use from&size，search is quick，took several ms return，but use search after，it took 20 seconds… --- ## [Multi-threaded update crashes elasticsearch](https://discuss.elastic.co/t/multi-threaded-update-crashes-elasticsearch/7369)
**Author:** [@Zmicier](https://discuss.elastic.co/u/Zmicier)\ **Replies:** 6\ **Last updated:** [April 21, 2012, 11:55am UTC](https://discuss.elastic.co/t/multi-threaded-update-crashes-elasticsearch/7369 "2012-04-21T11:55:14Z")
I have the following multi-threaded setup. Several threads run in parallel and may check if the same document exists (using get). If it does not exist, a thread will try to create it (sometimes DocumentAlreadyExist… --- ## [Is it possible to connect Elasticsearch with App Engine with flexible environment via VPC Connector in Google Cloud Platform?](https://discuss.elastic.co/t/is-it-possible-to-connect-elasticsearch-with-app-engine-with-flexible-environment-via-vpc-connector-in-google-cloud-platform/264961)
**Author:** [@white\_rabbit](https://discuss.elastic.co/u/white_rabbit)\ **Replies:** 3\ **Last updated:** [February 21, 2021, 1:31am UTC](https://discuss.elastic.co/t/is-it-possible-to-connect-elasticsearch-with-app-engine-with-flexible-environment-via-vpc-connector-in-google-cloud-platform/264961 "2021-02-21T01:31:57Z")
I have deployed my Django API in the App Engine with flexible environment. I have also created PostgreSQL instance in the Virtual Private Cloud and I connected my database with my Django App deployed in the App Engine us… --- ## [Get elastic search document ID and Engine ID](https://discuss.elastic.co/t/get-elastic-search-document-id-and-engine-id/227662)
**Author:** [@wickerman](https://discuss.elastic.co/u/wickerman)\ **Replies:** 3\ **Last updated:** [April 13, 2020, 1:18pm UTC](https://discuss.elastic.co/t/get-elastic-search-document-id-and-engine-id/227662 "2020-04-13T13:18:53Z")
Hello, I'm currently learning AppSearch so that I can use it for a certain project. So far so good, but I've hit a wall. One thing I know is that AppSearch indexes documents to elasticsearch. But I find AppSearch to b… --- ## [How to remove field in logstash output](https://discuss.elastic.co/t/how-to-remove-field-in-logstash-output/224055)
**Author:** [@neal1991](https://discuss.elastic.co/u/neal1991)\ **Replies:** 3\ **Last updated:** [March 19, 2020, 5:12am UTC](https://discuss.elastic.co/t/how-to-remove-field-in-logstash-output/224055 "2020-03-19T05:12:25Z")
I have set up an ELK stack. For the logstash instance, it has two output including Kafka and elasticsearch. For the output of elasticsearch, I want to keep the field @timestamp. For the output of Kafka, I want to remove… --- ## [Date Field Issue in kibana filtering](https://discuss.elastic.co/t/date-field-issue-in-kibana-filtering/218276)
**Author:** [@Sangeetha\_Sivaji](https://discuss.elastic.co/u/Sangeetha_Sivaji)\ **Replies:** 3\ **Last updated:** [February 10, 2020, 9:46am UTC](https://discuss.elastic.co/t/date-field-issue-in-kibana-filtering/218276 "2020-02-10T09:46:15Z")
Hi, In kibana, when I tried to filter the date field, it is not filtering and showing the error message. PFB the error. Error: Request to Elasticsearch failed: {"error":{"root\_cause":\[{"type":"parse\_exception","reason"… --- ## [Deprecation Log Full Of Same Warning](https://discuss.elastic.co/t/deprecation-log-full-of-same-warning/186774)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 3\ **Last updated:** [June 24, 2019, 7:22pm UTC](https://discuss.elastic.co/t/deprecation-log-full-of-same-warning/186774 "2019-06-24T19:22:16Z")
My deprecation log is about 300MB of the following line: {"type": "deprecation", "timestamp": "2019-06-20T17:20:46,105-0500", "level": "WARN", "component": "o.e.d.x.m.r.a.RestMonitoringBulkAction", "cluster.name": "Elas… --- ## [Kibana 4.0 start fails with index\_not\_found\_exception](https://discuss.elastic.co/t/kibana-4-0-start-fails-with-index-not-found-exception/166199)
**Author:** [@suraj.natarajan](https://discuss.elastic.co/u/suraj.natarajan)\ **Replies:** 3\ **Last updated:** [January 29, 2019, 6:42pm UTC](https://discuss.elastic.co/t/kibana-4-0-start-fails-with-index-not-found-exception/166199 "2019-01-29T18:42:22Z")
Settting up Elasticsearch 2.3 with Kibana 4.0. Elasticsearch is up and running, but kibana start fails with index\_not\_found\_exception. Please provide inputs to troubleshoot/fix this issue \[root@ec2-52-54-92-0 config\]# … --- ## [Resend the data from the beginning of a file with sincedb setting](https://discuss.elastic.co/t/resend-the-data-from-the-beginning-of-a-file-with-sincedb-setting/91211)
**Author:** [@SongJieCN](https://discuss.elastic.co/u/SongJieCN)\ **Replies:** 3\ **Last updated:** [June 29, 2017, 7:13am UTC](https://discuss.elastic.co/t/resend-the-data-from-the-beginning-of-a-file-with-sincedb-setting/91211 "2017-06-29T07:13:54Z")
Hi Guys, Version: 5.0.1 Operating System: CentOS6.8 Config File (if you have sensitive info, please remove it): input { file { path =\> \[ "/opt/Logs/\*", \] start\_position =\> "beginning" sincedb\_path =\> "/opt/tmp/.sincedb… --- ## [Run Logstash in Java using JRuby](https://discuss.elastic.co/t/run-logstash-in-java-using-jruby/43257)
**Author:** [@roman.k](https://discuss.elastic.co/u/roman.k)\ **Replies:** 0\ **Last updated:** [March 2, 2016, 2:23pm UTC](https://discuss.elastic.co/t/run-logstash-in-java-using-jruby/43257 "2016-03-02T14:23:00Z")
Hi, My final goal is to run Logstash within Tomcat (hence, packaged in a WAR file). Has anybody some experience with that? To gain some experience in running logstash within Java, I'm trying to start it in a small Java… --- ## [Refresh statistics](https://discuss.elastic.co/t/refresh-statistics/28644)
**Author:** [@Ilija\_Subasic](https://discuss.elastic.co/u/Ilija_Subasic)\ **Replies:** 3\ **Last updated:** [September 4, 2015, 9:51am UTC](https://discuss.elastic.co/t/refresh-statistics/28644 "2015-09-04T09:51:56Z")
Hi, I am having issues with my cluster. I had set the refresh rate at 30s to spped things up, but when I look at the index stats refresh.total is rising quite dramatically (e.g. 1500 refreshes in 5 minutes). Is the ref… --- ## [Elasticray - Liferay plugin for Elasticsearch](https://discuss.elastic.co/t/elasticray-liferay-plugin-for-elasticsearch/25980)
**Author:** [@bhaskar](https://discuss.elastic.co/u/bhaskar)\ **Replies:** 0\ **Last updated:** [July 21, 2015, 11:53am UTC](https://discuss.elastic.co/t/elasticray-liferay-plugin-for-elasticsearch/25980 "2015-07-21T11:53:32Z")
We have developed plugin for Liferay for Elasticsearch called ElasticRay. We have uploaded the project onto github aswell. We have an active community working on the product and support. For more details you can visit ww… --- ## [Kibana integration with remedy](https://discuss.elastic.co/t/kibana-integration-with-remedy/282192)
**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\ **Replies:** 2\ **Last updated:** [August 24, 2021, 3:52am UTC](https://discuss.elastic.co/t/kibana-integration-with-remedy/282192 "2021-08-24T03:52:01Z")
Hello! I am doing some tests and I have a question. Can kibana alert or create tickets in a Remedy? Thanks in advance! --- ## [Ingest Node Pipeline doesn't allow for "\\\[" pattern](https://discuss.elastic.co/t/ingest-node-pipeline-doesnt-allow-for-pattern/250227)
**Author:** [@madduck](https://discuss.elastic.co/u/madduck)\ **Replies:** 2\ **Last updated:** [October 19, 2020, 12:08pm UTC](https://discuss.elastic.co/t/ingest-node-pipeline-doesnt-allow-for-pattern/250227 "2020-10-19T12:08:33Z")
Hi gang, I'm trying to parse some logs into my index but I always get the GROK error: "Provided Grok expressions do not match field value" Error Message Provided Grok expressions do not match field value: \[Sep 28 17:1… --- ## [Filebeat/elasticsearch create daily index](https://discuss.elastic.co/t/filebeat-elasticsearch-create-daily-index/251532)
**Author:** [@Jack\_Daniels](https://discuss.elastic.co/u/Jack_Daniels)\ **Replies:** 2\ **Last updated:** [October 13, 2020, 3:54am UTC](https://discuss.elastic.co/t/filebeat-elasticsearch-create-daily-index/251532 "2020-10-13T03:54:41Z")
Hi, im trying create per day index with filebeat. Can you help me? Here is part of filebeat.yml file output.elasticsearch: # Array of hosts to connect to. hosts: \["test2019:9200"\] pipeline: "logpipe… --- ## [Metricbeatのエラーについて](https://discuss.elastic.co/t/metricbeat/222631)
**Author:** [@knm](https://discuss.elastic.co/u/knm)\ **Replies:** 2\ **Last updated:** [March 9, 2020, 5:18am UTC](https://discuss.elastic.co/t/metricbeat/222631 "2020-03-09T05:18:06Z")
metricbeatの7.6.1を起動すると、下記のようなエラーが出て起動できません。 対応方法などございましたら、ご教授いただけると助かります。 2020-03-09T10:27:22.170+0900 ERROR instance/beat.go:933 Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET r… --- ## [Speed up filebeat registrar](https://discuss.elastic.co/t/speed-up-filebeat-registrar/160873)
**Author:** [@s1p](https://discuss.elastic.co/u/s1p)\ **Replies:** 2\ **Last updated:** [December 19, 2018, 8:39am UTC](https://discuss.elastic.co/t/speed-up-filebeat-registrar/160873 "2018-12-19T08:39:55Z")
I'm searching through 200000 files on a server (24 logical cores, 48GB RAM) and want to collect logs only for the previous 24 hours: My filebeat.ymlfilebeat.inputs: - type: log enabled: true paths: - '/data/… --- ## [Composite aggregation fails on some indices (Failed to build aggregation)](https://discuss.elastic.co/t/composite-aggregation-fails-on-some-indices-failed-to-build-aggregation/139147)
**Author:** [@YNR](https://discuss.elastic.co/u/YNR)\ **Replies:** 2\ **Last updated:** [July 9, 2018, 1:47pm UTC](https://discuss.elastic.co/t/composite-aggregation-fails-on-some-indices-failed-to-build-aggregation/139147 "2018-07-09T13:47:20Z")
I use Elasticsearch 6.2.4. I read indices from Remote Elasticsearch (ver 2.4) and copy them on my local Elasticsearch (6.2.4) and then I define the mapping for each index and finally I use composite aggregation. The pseu… --- ## [Connect Hive to Elasticsearch 6.2.3](https://discuss.elastic.co/t/connect-hive-to-elasticsearch-6-2-3/126982)
**Author:** [@MARRAKCHI\_Tarik](https://discuss.elastic.co/u/MARRAKCHI_Tarik)\ **Replies:** 2\ **Last updated:** [April 9, 2018, 6:20pm UTC](https://discuss.elastic.co/t/connect-hive-to-elasticsearch-6-2-3/126982 "2018-04-09T18:20:08Z")
HI, I use Hortonworks and I created a single-node cluster, I installed elasticsearch and kibana (6.2.3). I downloaded the jar file elasticsearch-hadoop-6.2.3.jar and added it in hive-site.xml file with the property nam… --- ## [Kibana startup issue](https://discuss.elastic.co/t/kibana-startup-issue/113457)
**Author:** [@SJN8](https://discuss.elastic.co/u/SJN8)\ **Replies:** 2\ **Last updated:** [December 28, 2017, 5:58pm UTC](https://discuss.elastic.co/t/kibana-startup-issue/113457 "2017-12-28T17:58:22Z")
I am getting this error while starting Kibana , {"type":"log","@timestamp":"2017-12-28T14:31:46Z","tags":\["status","plugin:elasticsearch@6.1.1","error"\],"pid":15969,"state":"red","message":"Status changed from yellow t… --- ## [Delete by Query in ES 5.0 Java Client](https://discuss.elastic.co/t/delete-by-query-in-es-5-0-java-client/66948)
**Author:** [@jiouser](https://discuss.elastic.co/u/jiouser)\ **Replies:** 2\ **Last updated:** [November 23, 2016, 12:46pm UTC](https://discuss.elastic.co/t/delete-by-query-in-es-5-0-java-client/66948 "2016-11-23T12:46:56Z")
Hello, Just starting off with ES. Ran into problem when trying to delete the indexed documents. Seems like the Delete by Query is no longer available in ES 5.0 Java client. How do I achieve selective delete of documents … --- ## [Kibana/Shield --FATAL \[TypeError: undefined is not a function\]](https://discuss.elastic.co/t/kibana-shield-fatal-typeerror-undefined-is-not-a-function/53924)
**Author:** [@sabad](https://discuss.elastic.co/u/sabad)\ **Replies:** 2\ **Last updated:** [June 24, 2016, 11:18pm UTC](https://discuss.elastic.co/t/kibana-shield-fatal-typeerror-undefined-is-not-a-function/53924 "2016-06-24T23:18:21Z")
Shield 2.3.3 and kibana-4.4.1 Getting the error. Kibana not loading. \]# ./bin/kibana --verbose log \[18:00:32.941\] \[debug\]\[plugins\] Scanning /saba/kibana/installedPlugins for plugins log \[18:00:32.953\] \[debug\]\[p… --- ## [Performance problem because of read IOPS increase](https://discuss.elastic.co/t/performance-problem-because-of-read-iops-increase/353074)
**Author:** [@jnegredo](https://discuss.elastic.co/u/jnegredo)\ **Replies:** 4\ **Last updated:** [February 13, 2024, 9:28am UTC](https://discuss.elastic.co/t/performance-problem-because-of-read-iops-increase/353074 "2024-02-13T09:28:55Z")
Hi, I've a elasticsearch cluster with 3 nodes (version 6.8.0). It's deployed on 3 virtual machines with 16GB RAM and 4 cores, in Google Cloud. Usually we have a lot more wirting IOPS than reading (40-50 vs 0-5) without … --- ## [Logstash convert single quoted json log to double quoted](https://discuss.elastic.co/t/logstash-convert-single-quoted-json-log-to-double-quoted/317164)
**Author:** [@babuzrb](https://discuss.elastic.co/u/babuzrb)\ **Replies:** 4\ **Last updated:** [October 22, 2022, 3:40am UTC](https://discuss.elastic.co/t/logstash-convert-single-quoted-json-log-to-double-quoted/317164 "2022-10-22T03:40:05Z")
Hi I have log files with multiple json lines. Each json has single quotes and some of the values do not even has any quote. Due to this single quote and absence of quote issue, I cannot index them to elasticsearch. Thro… --- ## [Snapshot restore failing](https://discuss.elastic.co/t/snapshot-restore-failing/272117)
**Author:** [@kommineni24](https://discuss.elastic.co/u/kommineni24)\ **Replies:** 4\ **Last updated:** [May 13, 2021, 8:31am UTC](https://discuss.elastic.co/t/snapshot-restore-failing/272117 "2021-05-13T08:31:02Z")
Hi Team, I am trying to migrate data from Cluster 1(Elasticsearch version-6.4) to Cluster-2(Elasticsearch version-7.12). Have taken the snapshot and trying to restore the snapshot and seeing the error shown in the atta… --- ## [Kibana export png/PDF report missing in trial license](https://discuss.elastic.co/t/kibana-export-png-pdf-report-missing-in-trial-license/271538)
**Author:** [@dcamozzato](https://discuss.elastic.co/u/dcamozzato)\ **Replies:** 4\ **Last updated:** [May 3, 2021, 2:44pm UTC](https://discuss.elastic.co/t/kibana-export-png-pdf-report-missing-in-trial-license/271538 "2021-05-03T14:44:10Z")
I am currently using a trial license to test some of the gold subscription features. After activating the trial, I don't see the PDF / png export options in the "Share" menu in Kibana. Environment: I am running the do… --- ## [Nest 6.8.3 getting InvalidProgramException sometimes](https://discuss.elastic.co/t/nest-6-8-3-getting-invalidprogramexception-sometimes/227037)
**Author:** [@cwellborn23](https://discuss.elastic.co/u/cwellborn23)\ **Replies:** 4\ **Last updated:** [May 4, 2020, 2:07pm UTC](https://discuss.elastic.co/t/nest-6-8-3-getting-invalidprogramexception-sometimes/227037 "2020-05-04T14:07:38Z")
I see an internal ticket was created(00487754) and this topic was closed. We were getting this in our prod instance yesterday. Nest 6.6 getting InvalidProgramException sometimes Envionrment: AWS ECS Fargate Docker co… [Previous page](https://discuss.elastic.co/top.md?page=1265&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1267&per_page=50&period=all)