# Top

**URL:** https://discuss.elastic.co/top.md?page=1305&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1306

---

## [Logstash can't send logs to aws\_elasticsearch from kubernetes](https://discuss.elastic.co/t/logstash-cant-send-logs-to-aws-elasticsearch-from-kubernetes/159564)

<div class="topic-metadata">

**Author:** [@mreynoso](https://discuss.elastic.co/u/mreynoso)\
**Replies:** 2\
**Last updated:** [December 7, 2018, 12:26pm UTC](https://discuss.elastic.co/t/logstash-cant-send-logs-to-aws-elasticsearch-from-kubernetes/159564 "2018-12-07T12:26:06Z")

</div>

Hello, I'm trying to use Amazon Cognito authentication with Kibana on aws\_ElasticSearch and send logs using logstash from kubernetes. Authentication with kibana is working fine, but logstash seems to not be sending log…

---

## [Filebeat certificate error with kafka output + replicats](https://discuss.elastic.co/t/filebeat-certificate-error-with-kafka-output-replicats/100163)

<div class="topic-metadata">

**Author:** [@willouuu](https://discuss.elastic.co/u/willouuu)\
**Replies:** 2\
**Last updated:** [September 13, 2017, 11:55am UTC](https://discuss.elastic.co/t/filebeat-certificate-error-with-kafka-output-replicats/100163 "2017-09-13T11:55:38Z")

</div>

Hi I have a first problem with SSL usage with the output to kafka. It seems that filebeat truncates the fqdn, in the configuration I use "kafka1.domain.fr" and it tells me that the certification is invalid for "kafka1".…

---

## [Data export from Kibana](https://discuss.elastic.co/t/data-export-from-kibana/95829)

<div class="topic-metadata">

**Author:** [@LeonSun](https://discuss.elastic.co/u/LeonSun)\
**Replies:** 2\
**Last updated:** [August 11, 2017, 8:56pm UTC](https://discuss.elastic.co/t/data-export-from-kibana/95829 "2017-08-11T20:56:42Z")

</div>

Hi, Is there any way to export the data from Kibana to excel sheet? thanks

---

## [Packetbeat configtest error](https://discuss.elastic.co/t/packetbeat-configtest-error/96598)

<div class="topic-metadata">

**Author:** [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Replies:** 2\
**Last updated:** [August 10, 2017, 12:26pm UTC](https://discuss.elastic.co/t/packetbeat-configtest-error/96598 "2017-08-10T12:26:45Z")

</div>

packetbeat configtest error $ sudo ./packetbeat -configtest -e packetbeat2017/08/10 11:37:52.442668 beat.go:339: CRIT Exiting: error loading config file: stat packetbeat.yml: no such file or directory Exiting: error l…

---

## [Elasticsearch 5.2.0, embedded node, script\_lang not supported \[groovy\]](https://discuss.elastic.co/t/elasticsearch-5-2-0-embedded-node-script-lang-not-supported-groovy/92856)

<div class="topic-metadata">

**Author:** [@noelcurtis](https://discuss.elastic.co/u/noelcurtis)\
**Replies:** 2\
**Last updated:** [July 13, 2017, 3:29pm UTC](https://discuss.elastic.co/t/elasticsearch-5-2-0-embedded-node-script-lang-not-supported-groovy/92856 "2017-07-13T15:29:07Z")

</div>

Im migrating from Elasticsearch 2.1.1 to Elasticsearch 5.2.0. We have an existing integration test suite written against an embedded node & we are using groovy scripting. Ive updated the build an embedded node with ES 5.…

---

## [How to find all unique Index names for a matching document](https://discuss.elastic.co/t/how-to-find-all-unique-index-names-for-a-matching-document/71627)

<div class="topic-metadata">

**Author:** [@riki](https://discuss.elastic.co/u/riki)\
**Replies:** 2\
**Last updated:** [January 15, 2017, 9:14am UTC](https://discuss.elastic.co/t/how-to-find-all-unique-index-names-for-a-matching-document/71627 "2017-01-15T09:14:02Z")

</div>

Hi, I am keeping log file information in the Indices. The Indices are created every 6 hours. Each Indices has a field which has a logical name based on the Collection Source. These details are kept for historical analy…

---

## [Empty Report](https://discuss.elastic.co/t/empty-report/63184)

<div class="topic-metadata">

**Author:** [@sathishkumar](https://discuss.elastic.co/u/sathishkumar)\
**Replies:** 2\
**Last updated:** [October 18, 2016, 7:22am UTC](https://discuss.elastic.co/t/empty-report/63184 "2016-10-18T07:22:36Z")

</div>

Hi i installed reporting plugin , after generating report , it is coming empty pdf, following parameters are i used in kibana.yml file. Please give solution for this, what i need to do. reporting.capture.loadDelay: …

---

## [Parsing problems on logstash + filebeat](https://discuss.elastic.co/t/parsing-problems-on-logstash-filebeat/57967)

<div class="topic-metadata">

**Author:** [@dfaropennetwork](https://discuss.elastic.co/u/dfaropennetwork)\
**Replies:** 2\
**Last updated:** [August 17, 2016, 5:35am UTC](https://discuss.elastic.co/t/parsing-problems-on-logstash-filebeat/57967 "2016-08-17T05:35:39Z")

</div>

Hi all, I've problems for parsing multiline logs with logstash and filebeat: There my error on logstash: {:timestamp=\>"2016-08-13T05:41:22.216000+0000", :message=\>"fetched an invalid config", :config=\>" filter {\\n if…

---

## [Compile logstash-output-elasticsearch](https://discuss.elastic.co/t/compile-logstash-output-elasticsearch/23815)

<div class="topic-metadata">

**Author:** [@marczis](https://discuss.elastic.co/u/marczis)\
**Replies:** 2\
**Last updated:** [October 22, 2015, 3:52pm UTC](https://discuss.elastic.co/t/compile-logstash-output-elasticsearch/23815 "2015-10-22T15:52:49Z")

</div>

Hello everyone ! First of all thanks a lot for your great products ! I have an add-on idea for logstash-output-elasticsearch plugin, but I don't manage to compile / install the plugin... I really read the instructions bu…

---

## [Filter out buckets in an aggregated query](https://discuss.elastic.co/t/filter-out-buckets-in-an-aggregated-query/25327)

<div class="topic-metadata">

**Author:** [@claudio](https://discuss.elastic.co/u/claudio)\
**Replies:** 2\
**Last updated:** [July 10, 2015, 5:01pm UTC](https://discuss.elastic.co/t/filter-out-buckets-in-an-aggregated-query/25327 "2015-07-10T17:01:57Z")

</div>

Hi, I have an aggregation query to get the top\_hits documents filtered by terms of a multi value filed, and I want to filter out the buckets that don't match the filtered values. Let me explain the situation with an ex…

---

## [Service States: No results found](https://discuss.elastic.co/t/service-states-no-results-found/240021)

<div class="topic-metadata">

**Author:** [@Kawther](https://discuss.elastic.co/u/Kawther)\
**Replies:** 6\
**Last updated:** [July 21, 2020, 9:45am UTC](https://discuss.elastic.co/t/service-states-no-results-found/240021 "2020-07-21T09:45:12Z")

</div>

Hello, I am working with metricbeat 7.7.0 , I enabled system module to monitor service status module: system period: 10s metricsets: cpu load memory network process process\_summary socket\_summary entropy core diski…

---

## [Kibana: "No living connections"](https://discuss.elastic.co/t/kibana-no-living-connections/196567)

<div class="topic-metadata">

**Author:** [@jonaspreisler](https://discuss.elastic.co/u/jonaspreisler)\
**Replies:** 6\
**Last updated:** [August 26, 2019, 3:21pm UTC](https://discuss.elastic.co/t/kibana-no-living-connections/196567 "2019-08-26T15:21:32Z")

</div>

I added Elasticsearch locally and to my Ubuntu server. Now I downloaded Kibana and try to open it with 'bin/kibana'. I try to visit http://localhost:5601/ and get a huge list that keeps growing until I press 'ctrl + c'…

---

## [\[MSSQL module\] - Transaction log stop after few hours](https://discuss.elastic.co/t/mssql-module-transaction-log-stop-after-few-hours/293323)

<div class="topic-metadata">

**Author:** [@Delta32000](https://discuss.elastic.co/u/Delta32000)\
**Replies:** 5\
**Last updated:** [February 14, 2022, 10:07am UTC](https://discuss.elastic.co/t/mssql-module-transaction-log-stop-after-few-hours/293323 "2022-02-14T10:07:21Z")

</div>

I was able to configure the mssql module on metricbeat. I use the ssl config for each Elasticsearch and Kibana. I was able to load the default dashboards in kibana. The thing is that I can see transaction log data for a …

---

## [In Packetloss dropping packets](https://discuss.elastic.co/t/in-packetloss-dropping-packets/248680)

<div class="topic-metadata">

**Author:** [@pankaj0172](https://discuss.elastic.co/u/pankaj0172)\
**Replies:** 5\
**Last updated:** [September 16, 2020, 4:55am UTC](https://discuss.elastic.co/t/in-packetloss-dropping-packets/248680 "2020-09-16T04:55:50Z")

</div>

Hi, Can we see time period like at what time "In Packet loss" drop the packets?

---

## [Storing username and password somewhere and somehow](https://discuss.elastic.co/t/storing-username-and-password-somewhere-and-somehow/142220)

<div class="topic-metadata">

**Author:** [@lucas.alvarez](https://discuss.elastic.co/u/lucas.alvarez)\
**Replies:** 5\
**Last updated:** [August 2, 2018, 6:35pm UTC](https://discuss.elastic.co/t/storing-username-and-password-somewhere-and-somehow/142220 "2018-08-02T18:35:53Z")

</div>

Hello everybody!. I would like to know how/where I can store credentials like username and password to be consumed from the output.conf file. Any ideas?

---

## [My Macos elastic-endpoint process CPU is too high, up to 103%](https://discuss.elastic.co/t/my-macos-elastic-endpoint-process-cpu-is-too-high-up-to-103/310640)

<div class="topic-metadata">

**Author:** [@xqaiviwjxzw](https://discuss.elastic.co/u/xqaiviwjxzw)\
**Replies:** 3\
**Last updated:** [July 27, 2022, 7:55am UTC](https://discuss.elastic.co/t/my-macos-elastic-endpoint-process-cpu-is-too-high-up-to-103/310640 "2022-07-27T07:55:11Z")

</div>

My Macos elastic-endpoint process CPU is too high, up to 103%，It causes the computer to heat up badly, how can I solve this problem：

---

## [A kibana query with hot-warm-cold node](https://discuss.elastic.co/t/a-kibana-query-with-hot-warm-cold-node/201919)

<div class="topic-metadata">

**Author:** [@Kaiser\_Cheng](https://discuss.elastic.co/u/Kaiser_Cheng)\
**Replies:** 3\
**Last updated:** [October 4, 2019, 6:16pm UTC](https://discuss.elastic.co/t/a-kibana-query-with-hot-warm-cold-node/201919 "2019-10-04T18:16:30Z")

</div>

We have a index with daily-based indexing. For example, hot node for a weak data , warm for a month, then move to cold node. When we do a simple query in Kibana , ex doc count for last 15mins, how do we avoid searching…

---

## [Elastic in kubernetes - how to gracefully shutdown](https://discuss.elastic.co/t/elastic-in-kubernetes-how-to-gracefully-shutdown/196373)

<div class="topic-metadata">

**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\
**Replies:** 3\
**Last updated:** [August 26, 2019, 3:20pm UTC](https://discuss.elastic.co/t/elastic-in-kubernetes-how-to-gracefully-shutdown/196373 "2019-08-26T15:20:56Z")

</div>

5 data nodes, 5 ingest nodes and a master (+ kibana) running in kubernetes. Looking for a way to tell elastic to close indexes and put away all of its stuff so I can work on k8. If I just kill it outright when it gets r…

---

## [Clustering Dockerized Elasticsearch with multiple Docker Host](https://discuss.elastic.co/t/clustering-dockerized-elasticsearch-with-multiple-docker-host/193950)

<div class="topic-metadata">

**Author:** [@ts-kazuob](https://discuss.elastic.co/u/ts-kazuob)\
**Replies:** 0\
**Last updated:** [August 6, 2019, 7:30am UTC](https://discuss.elastic.co/t/clustering-dockerized-elasticsearch-with-multiple-docker-host/193950 "2019-08-06T07:30:30Z")

</div>

Trying to make it clustering with docker compose. I have two elasticsearch docker containers which are deployed in different Docker Hosts. docker-compose.yml for docker-container-1 services: elasticsearch: rest…

---

## [Network.host issue](https://discuss.elastic.co/t/network-host-issue/109063)

<div class="topic-metadata">

**Author:** [@AskingBoy](https://discuss.elastic.co/u/AskingBoy)\
**Replies:** 3\
**Last updated:** [November 24, 2017, 7:46pm UTC](https://discuss.elastic.co/t/network-host-issue/109063 "2017-11-24T19:46:44Z")

</div>

when network.host: 127.0.0.1, es can be working normally. However, when i set network.host: (real ip like ) "234.233.232.0", the error will come up .... does anyone know this issue...please kindly help... logs here: \[2…

---

## [Logstash-output-zabbix (question about multi\_value)](https://discuss.elastic.co/t/logstash-output-zabbix-question-about-multi-value/101515)

<div class="topic-metadata">

**Author:** [@vl.zemtsov](https://discuss.elastic.co/u/vl.zemtsov)\
**Replies:** 3\
**Last updated:** [September 22, 2017, 4:21pm UTC](https://discuss.elastic.co/t/logstash-output-zabbix-question-about-multi-value/101515 "2017-09-22T16:21:30Z")

</div>

Hello. I dont understand how use multi\_value in logstash (zabbix output). (Use logstash 5.5.2) For example: in filter: filter { mutate { add\_field =\> { "zabbix\_key" =\> \[ "zabbix.key.1", "zabb…

---

## [Logstash solr\_http plugin not working](https://discuss.elastic.co/t/logstash-solr-http-plugin-not-working/86217)

<div class="topic-metadata">

**Author:** [@Divya\_Prakash](https://discuss.elastic.co/u/Divya_Prakash)\
**Replies:** 3\
**Last updated:** [June 29, 2017, 9:06am UTC](https://discuss.elastic.co/t/logstash-solr-http-plugin-not-working/86217 "2017-06-29T09:06:41Z")

</div>

Logstash version 5.4.0 Tried to comment out line 65 in solr\_http as suggested in another post - However, that workaround is not helping with logstash v5.4.0. (https://discuss.elastic.co/t/solr6-logstash-5-timestamp-error…

---

## [Is there a way to get value of \_id or assign value of \_id to another field in elastic search?](https://discuss.elastic.co/t/is-there-a-way-to-get-value-of--id-or-assign-value-of--id-to-another-field-in-elastic-search/60879)

<div class="topic-metadata">

**Author:** [@Elita\_Lobo](https://discuss.elastic.co/u/Elita_Lobo)\
**Replies:** 3\
**Last updated:** [September 22, 2016, 12:41pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-get-value-of--id-or-assign-value-of--id-to-another-field-in-elastic-search/60879 "2016-09-22T12:41:08Z")

</div>

Is there a way to get value of \_id or assign value of \_id to another field in elastic search?

---

## [The error about data type filed](https://discuss.elastic.co/t/the-error-about-data-type-filed/46337)

<div class="topic-metadata">

**Author:** [@lester015](https://discuss.elastic.co/u/lester015)\
**Replies:** 3\
**Last updated:** [April 13, 2016, 6:46am UTC](https://discuss.elastic.co/t/the-error-about-data-type-filed/46337 "2016-04-13T06:46:32Z")

</div>

hi everyone, I foud the weird problem about my es mapping,it's as flows: curl -XPUT 'localhost:9200/v\_ajusted\_fund\_v1' -d '{ "mappings" : { "v\_ajusted\_fund" : { "properties" : { …

---

## [Kibana 5.0.0-snapshot and Latest Elasticsearch 5.0.0-SNAPSHOT throwing exception](https://discuss.elastic.co/t/kibana-5-0-0-snapshot-and-latest-elasticsearch-5-0-0-snapshot-throwing-exception/43515)

<div class="topic-metadata">

**Author:** [@michaeladams](https://discuss.elastic.co/u/michaeladams)\
**Replies:** 3\
**Last updated:** [March 4, 2016, 6:25pm UTC](https://discuss.elastic.co/t/kibana-5-0-0-snapshot-and-latest-elasticsearch-5-0-0-snapshot-throwing-exception/43515 "2016-03-04T18:25:06Z")

</div>

I am trying to set up an evaluation environment for the latest Kibana/ ES because I need to see what the new features are in Kibana (e.g.setting labels on table columns). I have downloaded latest Kibana 5.0.-snapshot (…

---

## [Visualization using one field as term but label with another field](https://discuss.elastic.co/t/visualization-using-one-field-as-term-but-label-with-another-field/91242)

<div class="topic-metadata">

**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\
**Replies:** 1\
**Last updated:** [June 29, 2017, 10:16am UTC](https://discuss.elastic.co/t/visualization-using-one-field-as-term-but-label-with-another-field/91242 "2017-06-29T10:16:08Z")

</div>

I would like to use Kibana to do some visualization, but am having trouble figuring how to use one field for calculation but then label the result using another field. The way I have structured my data has been using s…

---

## [Unable to index a json string (array of json objects) to elastic search](https://discuss.elastic.co/t/unable-to-index-a-json-string-array-of-json-objects-to-elastic-search/264851)

<div class="topic-metadata">

**Author:** [@schawla](https://discuss.elastic.co/u/schawla)\
**Replies:** 7\
**Last updated:** [February 19, 2021, 5:47pm UTC](https://discuss.elastic.co/t/unable-to-index-a-json-string-array-of-json-objects-to-elastic-search/264851 "2021-02-19T17:47:10Z")

</div>

I have an array of objects in the form of a single json string something like "\[{"id": 1, "name":"test"}, {"id": 2, "name":"test2"}\]" I want to be able to bulk index this json string directly to elastic search without …

---

## [Custom Transactions no longer detect external.http spans automatically](https://discuss.elastic.co/t/custom-transactions-no-longer-detect-external-http-spans-automatically/202702)

<div class="topic-metadata">

**Author:** [@Kartheek\_Mannepalli](https://discuss.elastic.co/u/Kartheek_Mannepalli)\
**Replies:** 7\
**Last updated:** [November 5, 2019, 11:04pm UTC](https://discuss.elastic.co/t/custom-transactions-no-longer-detect-external-http-spans-automatically/202702 "2019-11-05T23:04:25Z")

</div>

I am upgrading my JS agent from 3.0.0 to 4.5.0 and the custom transactions I had already implemented no longer work. I have an angular app so I am using angular-rum 0.2.0. I have enabled debug mode so I can see it is de…

---

## [Upgrade after trial license](https://discuss.elastic.co/t/upgrade-after-trial-license/73669)

<div class="topic-metadata">

**Author:** [@Jakovitz](https://discuss.elastic.co/u/Jakovitz)\
**Replies:** 1\
**Last updated:** [February 3, 2017, 12:07am UTC](https://discuss.elastic.co/t/upgrade-after-trial-license/73669 "2017-02-03T00:07:22Z")

</div>

Hi I've tried out x-pack security, but decided not to buy it, and reverted to a basic license. Today, when I upgraded ES from 5.1.2 to 5.2.0, I got the following errors: \[INFO \]\[o.e.x.s.a.e.NativeRealmMigrator\] \[log\]…

---

## [Logstash Imap for shared mailbox](https://discuss.elastic.co/t/logstash-imap-for-shared-mailbox/51808)

<div class="topic-metadata">

**Author:** [@Alex.C](https://discuss.elastic.co/u/Alex.C)\
**Replies:** 1\
**Last updated:** [July 5, 2016, 3:21pm UTC](https://discuss.elastic.co/t/logstash-imap-for-shared-mailbox/51808 "2016-07-05T15:21:31Z")

</div>

Hello, I have a mailbox bind with shared mailbox on office365. My mailbox is define: user@mydomain.com My shared mailbox is define: sharedmailbox01@subdomain.mydomain.com Reffering to this article : Access Shared mai…

---

## [Facing issue when there is non uniform data](https://discuss.elastic.co/t/facing-issue-when-there-is-non-uniform-data/34126)

<div class="topic-metadata">

**Author:** [@Amit2015](https://discuss.elastic.co/u/Amit2015)\
**Replies:** 7\
**Last updated:** [November 10, 2015, 6:47am UTC](https://discuss.elastic.co/t/facing-issue-when-there-is-non-uniform-data/34126 "2015-11-10T06:47:34Z")

</div>

Hi Guys, I am using ElasticSearch with Python. In my txt file DOB is non uniform like 1991-12-12 , 1991/12/12, 1991-Dec-12 something like that.Using same formate date like YYYY-MM-DD, I can import txt file but not abl…

---

## [Hi, Can you help me with post?](https://discuss.elastic.co/t/hi-can-you-help-me-with-post/10774)

<div class="topic-metadata">

**Author:** [@tehila\_madmon](https://discuss.elastic.co/u/tehila_madmon)\
**Replies:** 1\
**Last updated:** [February 18, 2013, 1:10pm UTC](https://discuss.elastic.co/t/hi-can-you-help-me-with-post/10774 "2013-02-18T13:10:59Z")

</div>

When I try to do: "curl -XPUT http://localhost:9200 -d '{ "name" : "Dilbert Brown" }' " I get this message: No handler found for uri \[/\] and method \[PUT\]curl: (6) Could not resolve host: name; Host not found c…

---

## [●\[TLS\] Question: Secure communication between Winlogbeat/ElasticSearch causes an error](https://discuss.elastic.co/t/tls-question-secure-communication-between-winlogbeat-elasticsearch-causes-an-error/350898)

<div class="topic-metadata">

**Author:** [@YUUTA.INOUE-JPN](https://discuss.elastic.co/u/YUUTA.INOUE-JPN)\
**Replies:** 2\
**Last updated:** [January 12, 2024, 3:33am UTC](https://discuss.elastic.co/t/tls-question-secure-communication-between-winlogbeat-elasticsearch-causes-an-error/350898 "2024-01-12T03:33:52Z")

</div>

I am configuring "Elastic Stack" using a self-signed certificate. Secure communication between Elasticsearch worked fine, but Secure communication between Winlogbeat/Elasticsearch will result in an error. Please teach…

---

## [Strange results when trying to run an aggregration query](https://discuss.elastic.co/t/strange-results-when-trying-to-run-an-aggregration-query/308100)

<div class="topic-metadata">

**Author:** [@gep13](https://discuss.elastic.co/u/gep13)\
**Replies:** 2\
**Last updated:** [June 27, 2022, 7:20am UTC](https://discuss.elastic.co/t/strange-results-when-trying-to-run-an-aggregration-query/308100 "2022-06-27T07:20:41Z")

</div>

Hello, I am trying to run a query similar to the following: "aggs": { "authors": { "terms": { "field": "packageAuthors.keyword" } } } Initially, this seems to be working exactly as I wo…

---

## [\[elasticsearch.server\]\[WARN\] caught exception while handling client http traffic, closing connection Netty4HttpChannel](https://discuss.elastic.co/t/elasticsearch-server-warn-caught-exception-while-handling-client-http-traffic-closing-connection-netty4httpchannel/365301)

<div class="topic-metadata">

**Author:** [@ETFJeff](https://discuss.elastic.co/u/ETFJeff)\
**Replies:** 4\
**Last updated:** [April 30, 2025, 2:41pm UTC](https://discuss.elastic.co/t/elasticsearch-server-warn-caught-exception-while-handling-client-http-traffic-closing-connection-netty4httpchannel/365301 "2025-04-30T14:41:55Z")

</div>

Hi, I get the following error in the cluster log about every hour. \[elasticsearch.server\]\[WARN\] caught exception while handling client http traffic, closing connection Netty4HttpChannel Any suggestions on where to sta…

---

## [Kibana bouncing degraded - available](https://discuss.elastic.co/t/kibana-bouncing-degraded-available/346685)

<div class="topic-metadata">

**Author:** [@wrsnrno](https://discuss.elastic.co/u/wrsnrno)\
**Replies:** 4\
**Last updated:** [November 10, 2023, 1:06am UTC](https://discuss.elastic.co/t/kibana-bouncing-degraded-available/346685 "2023-11-10T01:06:28Z")

</div>

Would appreciate some points in the right direction here. I have a new stack up and running but Kibana is bouncing availalbe - degraded, frequently but not at regular intervals. The environment is new, (so am I to Elas…

---

## [Best practices for Elastic DB deployment for 100TB data](https://discuss.elastic.co/t/best-practices-for-elastic-db-deployment-for-100tb-data/298918)

<div class="topic-metadata">

**Author:** [@noamsh88](https://discuss.elastic.co/u/noamsh88)\
**Replies:** 4\
**Last updated:** [March 7, 2022, 8:35pm UTC](https://discuss.elastic.co/t/best-practices-for-elastic-db-deployment-for-100tb-data/298918 "2022-03-07T20:35:19Z")

</div>

Hello, We are designing new product that based on Elasticsearch that suppose to have around 100TB data Deployment will be on-prem (bare metal with Linux OS installed on it) and would like to ask: What is best practic…

---

## [I deleted index like files into OS when I had a diskspace problem and now have to fix it](https://discuss.elastic.co/t/i-deleted-index-like-files-into-os-when-i-had-a-diskspace-problem-and-now-have-to-fix-it/294558)

<div class="topic-metadata">

**Author:** [@marlybyliganget](https://discuss.elastic.co/u/marlybyliganget)\
**Replies:** 1\
**Last updated:** [January 17, 2022, 9:31am UTC](https://discuss.elastic.co/t/i-deleted-index-like-files-into-os-when-i-had-a-diskspace-problem-and-now-have-to-fix-it/294558 "2022-01-17T09:31:10Z")

</div>

Hi guys I have a problem with Elasticsearch cluster I deleted index like files into OS, when I had a diskspace problem I deleted index through this command find ./data/nodes/0/indices -type d -mtime +30 -exec rm -rf …

---

## [Downgrading the standalone agent causes the services and transactions to disapper from Kibana](https://discuss.elastic.co/t/downgrading-the-standalone-agent-causes-the-services-and-transactions-to-disapper-from-kibana/248721)

<div class="topic-metadata">

**Author:** [@Bhavani\_Ananth](https://discuss.elastic.co/u/Bhavani_Ananth)\
**Replies:** 4\
**Last updated:** [October 12, 2020, 9:38am UTC](https://discuss.elastic.co/t/downgrading-the-standalone-agent-causes-the-services-and-transactions-to-disapper-from-kibana/248721 "2020-10-12T09:38:10Z")

</div>

Kibana version: 7.8.1 Elasticsearch version: 7.8.1 APM Server version: 7.8.1 APM Agent language and version: Java Original install method (e.g. download page, yum, deb, from source, etc.) and version: yum Fresh inst…

---

## [Kibana "Logs" application Tiebreaker field grayed out](https://discuss.elastic.co/t/kibana-logs-application-tiebreaker-field-grayed-out/228375)

<div class="topic-metadata">

**Author:** [@cotjoey](https://discuss.elastic.co/u/cotjoey)\
**Replies:** 4\
**Last updated:** [April 22, 2020, 12:54pm UTC](https://discuss.elastic.co/t/kibana-logs-application-tiebreaker-field-grayed-out/228375 "2020-04-22T12:54:08Z")

</div>

Hello, I am trying to set up a tiebreaker field in the the Kibana "Logs" application, but it is grayed out. There is a banner showing "Deprecation Notice". I am unsure how to set that tiebreaker field now that it's depr…

---

## [No "blogs" data for Elasticsearch Engineer II](https://discuss.elastic.co/t/no-blogs-data-for-elasticsearch-engineer-ii/207837)

<div class="topic-metadata">

**Author:** [@Andrew\_Pouckatch](https://discuss.elastic.co/u/Andrew_Pouckatch)\
**Replies:** 4\
**Last updated:** [November 14, 2019, 5:45pm UTC](https://discuss.elastic.co/t/no-blogs-data-for-elasticsearch-engineer-ii/207837 "2019-11-14T17:45:19Z")

</div>

Hi I've started Elasticsearch Engineer II (on-demand). There is neither blogs.csv on Strigo's server1 nor pre-loaded index in cluster: get \_cat/indices?v health status index uuid …

---

## [Help parsing XML-filter processed data with ruby](https://discuss.elastic.co/t/help-parsing-xml-filter-processed-data-with-ruby/176841)

<div class="topic-metadata">

**Author:** [@makibroshett](https://discuss.elastic.co/u/makibroshett)\
**Replies:** 4\
**Last updated:** [April 16, 2019, 6:53am UTC](https://discuss.elastic.co/t/help-parsing-xml-filter-processed-data-with-ruby/176841 "2019-04-16T06:53:42Z")

</div>

Hi, I need some help writing seemingly simple ruby code, but I can't figure out how (newbie). At some point, my pipeline produces a field structured as follows:: "xmldata" =\> { "uplinkMessage" =\> { "constrained…

---

## [Stop logstash when finish import](https://discuss.elastic.co/t/stop-logstash-when-finish-import/111969)

<div class="topic-metadata">

**Author:** [@afonso.ribeiro](https://discuss.elastic.co/u/afonso.ribeiro)\
**Replies:** 4\
**Last updated:** [December 15, 2017, 1:11pm UTC](https://discuss.elastic.co/t/stop-logstash-when-finish-import/111969 "2017-12-15T13:11:16Z")

</div>

Hi guys, I know this topic has already been answered but I wanted to know if with these new release is there any news about this? If not, can anyone give an example of how to stop logstash with stdin or similar, automa…

---

## [Readiness and Liveness probes for elasticsearch 6.3.0 on Kubernetes failing](https://discuss.elastic.co/t/readiness-and-liveness-probes-for-elasticsearch-6-3-0-on-kubernetes-failing/199370)

<div class="topic-metadata">

**Author:** [@kar251188](https://discuss.elastic.co/u/kar251188)\
**Replies:** 0\
**Last updated:** [September 13, 2019, 6:40am UTC](https://discuss.elastic.co/t/readiness-and-liveness-probes-for-elasticsearch-6-3-0-on-kubernetes-failing/199370 "2019-09-13T06:40:00Z")

</div>

Hi guys, I am trying to setup EFK stack on Kubernetes . The Elasticsearch version being used is 6.3.2. Everything works fine until I place the probes configuration in the deployment YAML file. I am getting error as belo…

---

## [Cassandra data into ES : Elassandra?](https://discuss.elastic.co/t/cassandra-data-into-es-elassandra/75660)

<div class="topic-metadata">

**Author:** [@Preeti\_Raj\_Buchhada](https://discuss.elastic.co/u/Preeti_Raj_Buchhada)\
**Replies:** 0\
**Last updated:** [February 20, 2017, 3:43am UTC](https://discuss.elastic.co/t/cassandra-data-into-es-elassandra/75660 "2017-02-20T03:43:21Z")

</div>

Hello all, I am looking for ways to import data in Cassandra into ES to enable search capabilities. From the post below, I understand that one way is to index data into ES simultaneously when writing to Cassandra: ht…

---

## [Failed to execute watch](https://discuss.elastic.co/t/failed-to-execute-watch/256213)

<div class="topic-metadata">

**Author:** [@devdatta\_mulgund](https://discuss.elastic.co/u/devdatta_mulgund)\
**Replies:** 2\
**Last updated:** [November 24, 2020, 5:58am UTC](https://discuss.elastic.co/t/failed-to-execute-watch/256213 "2020-11-24T05:58:14Z")

</div>

I am facing the below errors in elastic search. Please note I am using docker-compose \*\*Elasticsearch logs\*\* cluster.name": "docker-cluster", "node.name": "482e9f3c4d6a", "message": "using \[1\] data paths, mounts \[\[/usr…

---

## [Multiple Files CSV automatic create index with filename and column header](https://discuss.elastic.co/t/multiple-files-csv-automatic-create-index-with-filename-and-column-header/167235)

<div class="topic-metadata">

**Author:** [@andrewjo](https://discuss.elastic.co/u/andrewjo)\
**Replies:** 2\
**Last updated:** [February 7, 2019, 4:44pm UTC](https://discuss.elastic.co/t/multiple-files-csv-automatic-create-index-with-filename-and-column-header/167235 "2019-02-07T16:44:20Z")

</div>

Hi Guys, I have multiple CSV and I want to ingest into elasticsearch with logstash. Here is my logstash config : file { path =\> '/tmp/email/\*.csv' type =\> 'testcsv' # start\_position =\> 'beginning' sinced…

---

## [Winlogbeat Throughput Seems Low](https://discuss.elastic.co/t/winlogbeat-throughput-seems-low/142966)

<div class="topic-metadata">

**Author:** [@BrandonF](https://discuss.elastic.co/u/BrandonF)\
**Replies:** 2\
**Last updated:** [August 10, 2018, 2:54pm UTC](https://discuss.elastic.co/t/winlogbeat-throughput-seems-low/142966 "2018-08-10T14:54:45Z")

</div>

We are running a POC with beats to see if it can replace our current connector infrastructure. We can't seem to get winlogbeat to get past 1,500-2,000 eps. Our current connectors are able to peak at about 3k...Any sugges…

---

## [kibana.defaultAppId for user "kibana\_dashboard\_only\_user"](https://discuss.elastic.co/t/kibana-defaultappid-for-user-kibana-dashboard-only-user/120595)

<div class="topic-metadata">

**Author:** [@ashwinichhipa](https://discuss.elastic.co/u/ashwinichhipa)\
**Replies:** 2\
**Last updated:** [February 20, 2018, 4:36pm UTC](https://discuss.elastic.co/t/kibana-defaultappid-for-user-kibana-dashboard-only-user/120595 "2018-02-20T16:36:14Z")

</div>

Hi All, I have setup default dashboard page (post login) for my admin user, using below mentioned config set in kibana.yml file: kibana.defaultAppId: "dashboard/id\_of\_one\_of\_my\_dashboards". It works completely fine wi…

---

## [Suggestion improving filebeat performance](https://discuss.elastic.co/t/suggestion-improving-filebeat-performance/105508)

<div class="topic-metadata">

**Author:** [@max\_dodo](https://discuss.elastic.co/u/max_dodo)\
**Replies:** 2\
**Last updated:** [October 27, 2017, 3:29pm UTC](https://discuss.elastic.co/t/suggestion-improving-filebeat-performance/105508 "2017-10-27T15:29:44Z")

</div>

My ELK setup goes like : Filebeats --\> Logstash(ingest nodes) --\> Elasticsearch ( master + Datanodes ) --\> Kibana Recently we are observing a huge amount of delay in logfile ingestion ( 4 ~ 5 hr) . From the capacity p…

[Previous page](https://discuss.elastic.co/top.md?page=1304&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1306&per_page=50&period=all)
