# Top

**URL:** https://discuss.elastic.co/top.md?page=131&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 132

---

## [Move json file to elasticsearch](https://discuss.elastic.co/t/move-json-file-to-elasticsearch/193644)

<div class="topic-metadata">

**Author:** [@Jim\_Palazzolo](https://discuss.elastic.co/u/Jim_Palazzolo)\
**Replies:** 26\
**Last updated:** [August 5, 2019, 3:58pm UTC](https://discuss.elastic.co/t/move-json-file-to-elasticsearch/193644 "2019-08-05T15:58:57Z")

</div>

trying to move a file from a folder using logstash to elasticsearch. here's my json.conf: input { file { path =\> "/usr/share/logstash/json" start\_position =\> "beginning" …

---

## [Unable to create filebeat-\* index pattern in kibana 7.11 after running filebeat](https://discuss.elastic.co/t/unable-to-create-filebeat-index-pattern-in-kibana-7-11-after-running-filebeat/264781)

<div class="topic-metadata">

**Author:** [@Malcolm\_Haak](https://discuss.elastic.co/u/Malcolm_Haak)\
**Replies:** 17\
**Last updated:** [February 20, 2021, 3:53pm UTC](https://discuss.elastic.co/t/unable-to-create-filebeat-index-pattern-in-kibana-7-11-after-running-filebeat/264781 "2021-02-20T15:53:41Z")

</div>

I can see the filebeat index. I go to make an index pattern with @timestamp and it just won't complete. The logs are clean on ES and Kibana. So yeah I click Create Index pattern and It just goes to the spinny thing an…

---

## [Hide/Disable runtime fields from Kibana available fields](https://discuss.elastic.co/t/hide-disable-runtime-fields-from-kibana-available-fields/301848)

<div class="topic-metadata">

**Author:** [@Ofir\_Edi](https://discuss.elastic.co/u/Ofir_Edi)\
**Replies:** 11\
**Last updated:** [November 8, 2022, 9:34am UTC](https://discuss.elastic.co/t/hide-disable-runtime-fields-from-kibana-available-fields/301848 "2022-11-08T09:34:09Z")

</div>

Hi, Is there a way to hide/disable/pick certain runtime fields from available fields in Discover? When applying many runtime fields, Discover page takes forever to load due to the number of available fields, While Elast…

---

## [Calculate disk usage](https://discuss.elastic.co/t/calculate-disk-usage/244571)

<div class="topic-metadata">

**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\
**Replies:** 11\
**Last updated:** [August 13, 2020, 11:11am UTC](https://discuss.elastic.co/t/calculate-disk-usage/244571 "2020-08-13T11:11:40Z")

</div>

I've deployed a test cluster that feeds from about 5 servers. I was asked to spec out the disk requirement once 50 servers would feed it logs with ILM setup (ILM should delete logs older than 3 month or 1 year - haven't…

---

## [Checking runner ip connectivity... FAILED Can't connect $RUNNER\_HOST\_IP \[172.xx.x.xx:22000\]: ConnectionError](https://discuss.elastic.co/t/checking-runner-ip-connectivity-failed-cant-connect-runner-host-ip-172-xx-x-xx-22000-connectionerror/278940)

<div class="topic-metadata">

**Author:** [@vjam](https://discuss.elastic.co/u/vjam)\
**Replies:** 21\
**Last updated:** [August 3, 2021, 5:31pm UTC](https://discuss.elastic.co/t/checking-runner-ip-connectivity-failed-cant-connect-runner-host-ip-172-xx-x-xx-22000-connectionerror/278940 "2021-08-03T17:31:26Z")

</div>

Hello All - We are trying to install Elastic (cloud-enterprise-version 2.8.1) in the following environment. AWS, RHEL-8 Docker (docker-ce-19.03.15) but seem to be constantly getting the error below Checking runner ip…

---

## [Elastic Search Common Documents Query](https://discuss.elastic.co/t/elastic-search-common-documents-query/239426)

<div class="topic-metadata">

**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\
**Replies:** 21\
**Last updated:** [July 6, 2020, 4:53am UTC](https://discuss.elastic.co/t/elastic-search-common-documents-query/239426 "2020-07-06T04:53:43Z")

</div>

I have the following documents in elastic search: \[{ "\_version": 1, "uid": "blt275162870bd76359", "title": "Entry1", "publish\_details": \[{ "environment": "blt603fe91adbdcff66", "locale": "en-us", "time": "2…

---

## [JVM Heap size issue. ElasticSearch stops sometimes due to this error](https://discuss.elastic.co/t/jvm-heap-size-issue-elasticsearch-stops-sometimes-due-to-this-error/333157)

<div class="topic-metadata">

**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\
**Replies:** 10\
**Last updated:** [May 15, 2023, 7:55pm UTC](https://discuss.elastic.co/t/jvm-heap-size-issue-elasticsearch-stops-sometimes-due-to-this-error/333157 "2023-05-15T19:55:13Z")

</div>

Caused by: org.elasticsearch.common.breaker.CircuitBreakingException: \[parent\] Data too large, data for \[preallocate\[aggregations\]\] would be \[4143070784/3.8gb\], which is larger than the limit of \[4080218931/3.7gb\], real …

---

## [Use same dashboard on another index](https://discuss.elastic.co/t/use-same-dashboard-on-another-index/228461)

<div class="topic-metadata">

**Author:** [@manojkrishna561994](https://discuss.elastic.co/u/manojkrishna561994)\
**Replies:** 9\
**Last updated:** [April 24, 2020, 12:39pm UTC](https://discuss.elastic.co/t/use-same-dashboard-on-another-index/228461 "2020-04-24T12:39:49Z")

</div>

I have created dashboard with multiple visualisations in it on index name: test\_1. Now i want to use this dashboard on another index name: test\_2 which has same fields and same data in fact. I have downloaded the dashb…

---

## [How to prevent Logstash file input duplicate reading with rotating log?](https://discuss.elastic.co/t/how-to-prevent-logstash-file-input-duplicate-reading-with-rotating-log/311264)

<div class="topic-metadata">

**Author:** [@kent010341](https://discuss.elastic.co/u/kent010341)\
**Replies:** 14\
**Last updated:** [August 9, 2022, 3:14am UTC](https://discuss.elastic.co/t/how-to-prevent-logstash-file-input-duplicate-reading-with-rotating-log/311264 "2022-08-09T03:14:01Z")

</div>

I have a system that keeps writing logs (with log4j) and it will rotate and compress to a .gz file when the log file reaches 100 MB. I use Logstash file input plugin to read those log files, and there are several compre…

---

## [Geo-IP Map visualization](https://discuss.elastic.co/t/geo-ip-map-visualization/302914)

<div class="topic-metadata">

**Author:** [@Bo-Wyatt](https://discuss.elastic.co/u/Bo-Wyatt)\
**Replies:** 10\
**Last updated:** [April 27, 2022, 11:07am UTC](https://discuss.elastic.co/t/geo-ip-map-visualization/302914 "2022-04-27T11:07:03Z")

</div>

Hello, I have different fields with Geo-IP data: Latitude, Longitude, Country Code, Continent code and more. How can I build a map based on that? I've tried the "Create new Maps" option but all the visualization options …

---

## [Backing up Kibana Dashboards on Docker Container with Snapshot and Restore](https://discuss.elastic.co/t/backing-up-kibana-dashboards-on-docker-container-with-snapshot-and-restore/218229)

<div class="topic-metadata">

**Author:** [@14kporter](https://discuss.elastic.co/u/14kporter)\
**Replies:** 9\
**Last updated:** [February 25, 2020, 6:47pm UTC](https://discuss.elastic.co/t/backing-up-kibana-dashboards-on-docker-container-with-snapshot-and-restore/218229 "2020-02-25T18:47:37Z")

</div>

Currently I am trying to find a way to backup the Elasticsearch data and the Kibana Dahsboards using the Snapshot and Restore. Right now the Elasticsearch and Kibana instances are hosted on their respective containers. I…

---

## [Upgrade to 8.x from 7.x | Error in Kibana](https://discuss.elastic.co/t/upgrade-to-8-x-from-7-x-error-in-kibana/317829)

<div class="topic-metadata">

**Author:** [@Senthil\_ak](https://discuss.elastic.co/u/Senthil_ak)\
**Replies:** 9\
**Last updated:** [January 3, 2023, 8:19am UTC](https://discuss.elastic.co/t/upgrade-to-8-x-from-7-x-error-in-kibana/317829 "2023-01-03T08:19:26Z")

</div>

We are running 7.2, successfully upgraded to 7.17.6, and want to move to the 8.X version. All went fine with the 7.17.6 upgrade. On Kibana I see some upgrade issues (critical) but not sure how to resolve this. First err…

---

## [ECE installation failure - 1.1.5](https://discuss.elastic.co/t/ece-installation-failure-1-1-5/147206)

<div class="topic-metadata">

**Author:** [@darren.skinner](https://discuss.elastic.co/u/darren.skinner)\
**Replies:** 9\
**Last updated:** [October 2, 2018, 12:59pm UTC](https://discuss.elastic.co/t/ece-installation-failure-1-1-5/147206 "2018-10-02T12:59:12Z")

</div>

Hi, I've been trying to install ece to test but i'm getting the following output and can't see any obvious problem to try to fix it. This is an offline installation so i have created an internal docker registry with the…

---

## [Sorting issue on keyword](https://discuss.elastic.co/t/sorting-issue-on-keyword/231133)

<div class="topic-metadata">

**Author:** [@Xavier\_Romero](https://discuss.elastic.co/u/Xavier_Romero)\
**Replies:** 10\
**Last updated:** [May 15, 2020, 5:52am UTC](https://discuss.elastic.co/t/sorting-issue-on-keyword/231133 "2020-05-15T05:52:46Z")

</div>

Hi there, I'm having some sorting issues. Below an image of the sorting problem, I expect the keyword field to be sorted A, B, C, D, E, U. However, it looks like when I set the time range to 12 hours or more, it usua…

---

## [Filebeat reading logs from S3](https://discuss.elastic.co/t/filebeat-reading-logs-from-s3/226065)

<div class="topic-metadata">

**Author:** [@Nithya](https://discuss.elastic.co/u/Nithya)\
**Replies:** 10\
**Last updated:** [April 10, 2020, 6:33pm UTC](https://discuss.elastic.co/t/filebeat-reading-logs-from-s3/226065 "2020-04-10T18:33:57Z")

</div>

Hi, I'm trying to get the AWS Logs which is stored in the centralised S3 bucket. I configured the SQS to get the file and push it to the Elastic Cloud index. I'm facing the below problems: When I see the logs, each l…

---

## [How to revive connection?](https://discuss.elastic.co/t/how-to-revive-connection/208931)

<div class="topic-metadata">

**Author:** [@ishv](https://discuss.elastic.co/u/ishv)\
**Replies:** 11\
**Last updated:** [November 21, 2019, 6:00pm UTC](https://discuss.elastic.co/t/how-to-revive-connection/208931 "2019-11-21T18:00:08Z")

</div>

I'm trying to set up Kibana and ElasticSearch in the container but continuously receive that error message: Unable to revive connection: http://maperclip-elasticsearch:9200/" This is how my docker-compose.yml looks lik…

---

## [Kibana behind ngix... proxying challenge?](https://discuss.elastic.co/t/kibana-behind-ngix-proxying-challenge/887)

<div class="topic-metadata">

**Author:** [@alexolivan](https://discuss.elastic.co/u/alexolivan)\
**Replies:** 9\
**Last updated:** [May 26, 2015, 10:45am UTC](https://discuss.elastic.co/t/kibana-behind-ngix-proxying-challenge/887 "2015-05-26T10:45:00Z")

</div>

Hi forum... I'm playing around with elk, and once I start having nice dashboards there appears the question of proxy them in a controllable manner to some people. Most of the doc around treats the nginx/kibana proxy ma…

---

## [Log duplicated in multiple indexes](https://discuss.elastic.co/t/log-duplicated-in-multiple-indexes/58341)

<div class="topic-metadata">

**Author:** [@Clement\_Ros](https://discuss.elastic.co/u/Clement_Ros)\
**Replies:** 11\
**Last updated:** [August 22, 2016, 7:41am UTC](https://discuss.elastic.co/t/log-duplicated-in-multiple-indexes/58341 "2016-08-22T07:41:31Z")

</div>

Hi, In my output section, i have multiple conditions. Each conditions alows me to route one type of log in the correct Elasticsearch indexe. This is my logstash output : \> output { \> if "nginx" in \[tags\]…

---

## [Document ALWAYS Routes to ONE Shard when BULK Loading - HELP!](https://discuss.elastic.co/t/document-always-routes-to-one-shard-when-bulk-loading-help/8827)

<div class="topic-metadata">

**Author:** [@amos\_wood](https://discuss.elastic.co/u/amos_wood)\
**Replies:** 17\
**Last updated:** [August 24, 2012, 8:34pm UTC](https://discuss.elastic.co/t/document-always-routes-to-one-shard-when-bulk-loading-help/8827 "2012-08-24T20:34:45Z")

</div>

We have an index named "partylogins" which we are trying to bulk load using the Java API. The index has 4 shards and no replicas during our bulk load process. However, all documents being indexed are being saved in…

---

## [Upgraded to Logstash 5, bulk queue started filling up?](https://discuss.elastic.co/t/upgraded-to-logstash-5-bulk-queue-started-filling-up/88288)

<div class="topic-metadata">

**Author:** [@codyaray](https://discuss.elastic.co/u/codyaray)\
**Replies:** 12\
**Last updated:** [June 30, 2017, 3:48am UTC](https://discuss.elastic.co/t/upgraded-to-logstash-5-bulk-queue-started-filling-up/88288 "2017-06-30T03:48:37Z")

</div>

Hi all, We just upgraded to Logstash 5.4 from Logstash 1.5.6. (Yes, we were way behind.) We're using the elasticsearch output to write to our existing ES 2.4.0 cluster. After upgrading, we're receiving a bunch of 429s …

---

## [Problems with ssl apm java agent to elastic cloud](https://discuss.elastic.co/t/problems-with-ssl-apm-java-agent-to-elastic-cloud/323908)

<div class="topic-metadata">

**Author:** [@irivas95](https://discuss.elastic.co/u/irivas95)\
**Replies:** 16\
**Last updated:** [February 13, 2023, 4:24pm UTC](https://discuss.elastic.co/t/problems-with-ssl-apm-java-agent-to-elastic-cloud/323908 "2023-02-13T16:24:56Z")

</div>

HI, I am trying to deploy an application with an APM java agent in GKE that sends data to an APM integration in elastic cloud. I am using this Dockerfile # vi Dockerfile FROM adoptopenjdk:11-jre-hotspot RUN export RUN…

---

## [Logstash cannot send data to elasticsearch](https://discuss.elastic.co/t/logstash-cannot-send-data-to-elasticsearch/246391)

<div class="topic-metadata">

**Author:** [@pranayv66](https://discuss.elastic.co/u/pranayv66)\
**Replies:** 16\
**Last updated:** [August 26, 2020, 11:34am UTC](https://discuss.elastic.co/t/logstash-cannot-send-data-to-elasticsearch/246391 "2020-08-26T11:34:36Z")

</div>

Hi Community, I'm trying to push some data from a data directory from filebeat to logstash and then elasticsearch. The server runs on Centos7 with the installations of all 4 components. I've pasted below the config file…

---

## [Set geopoint field from string field correctly for map visualization](https://discuss.elastic.co/t/set-geopoint-field-from-string-field-correctly-for-map-visualization/288513)

<div class="topic-metadata">

**Author:** [@ccfc1986](https://discuss.elastic.co/u/ccfc1986)\
**Replies:** 10\
**Last updated:** [November 15, 2021, 10:01pm UTC](https://discuss.elastic.co/t/set-geopoint-field-from-string-field-correctly-for-map-visualization/288513 "2021-11-15T22:01:34Z")

</div>

I have the following field in my documents: "COORDINATES" : "-11.661306;-47.506833" I have created a update\_by\_query that takes this field, extracts the lat/lon and sets to my actual geopoint defined field 'GeoLocation…

---

## [Kibana doesn't see the indices](https://discuss.elastic.co/t/kibana-doesnt-see-the-indices/193339)

<div class="topic-metadata">

**Author:** [@arseni-lipinski](https://discuss.elastic.co/u/arseni-lipinski)\
**Replies:** 10\
**Last updated:** [August 6, 2019, 2:59pm UTC](https://discuss.elastic.co/t/kibana-doesnt-see-the-indices/193339 "2019-08-06T14:59:07Z")

</div>

Hi there. I've been experiencing a problem with Kibana - the indices don't show in index patterns menu even though all the indexes are present in index management menu. The whole thing runs under proxy. Request: http:/…

---

## [Time Filter behaving strangely](https://discuss.elastic.co/t/time-filter-behaving-strangely/214680)

<div class="topic-metadata">

**Author:** [@sidhusaab](https://discuss.elastic.co/u/sidhusaab)\
**Replies:** 16\
**Last updated:** [January 14, 2020, 3:38pm UTC](https://discuss.elastic.co/t/time-filter-behaving-strangely/214680 "2020-01-14T15:38:39Z")

</div>

I have an index which contains data for the last 3 days (Jan 08 - Jan 10). I have a dashboard that shows different things from the index and it seems to only work if my time range is set to 7 days or more. If I set last …

---

## [Replica Use In Elasticsearch](https://discuss.elastic.co/t/replica-use-in-elasticsearch/357684)

<div class="topic-metadata">

**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\
**Replies:** 10\
**Last updated:** [April 23, 2024, 8:23am UTC](https://discuss.elastic.co/t/replica-use-in-elasticsearch/357684 "2024-04-23T08:23:28Z")

</div>

Hi Team, I had generic question on Elasticsearch replica. Is the replica main purpose is to provide HA to the docs which are stored in Elastic or any other benefits. My questions is suppose we are querying a index with…

---

## [ドキュメントAPIにて、インデックス名に動的に日付を設定する方法](https://discuss.elastic.co/t/api/293513)

<div class="topic-metadata">

**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\
**Replies:** 10\
**Last updated:** [February 4, 2022, 9:45am UTC](https://discuss.elastic.co/t/api/293513 "2022-02-04T09:45:41Z")

</div>

以下のドキュメントに示されるAPIにて、インデックス名に現在月を付与したいです PUT my-index-000001/\_doc/1?timeout=5m { "@timestamp": "2099-11-15T13:12:00", "message": "GET /search HTTP/1.1 200 1070000", "user": { "id": "kimchy" } } 上記APIにて、インデ…

---

## [Parsing a multiline log](https://discuss.elastic.co/t/parsing-a-multiline-log/42936)

<div class="topic-metadata">

**Author:** [@lucifer](https://discuss.elastic.co/u/lucifer)\
**Replies:** 10\
**Last updated:** [March 1, 2016, 4:59am UTC](https://discuss.elastic.co/t/parsing-a-multiline-log/42936 "2016-03-01T04:59:39Z")

</div>

How can I parse some information present in the last line of a multiline message. For example, the log format is: the first line contains the timestamp, the log level and some other important information, which is follow…

---

## [Compute ctr with more than one doc in Kibana](https://discuss.elastic.co/t/compute-ctr-with-more-than-one-doc-in-kibana/116202)

<div class="topic-metadata">

**Author:** [@Jens\_Fliege](https://discuss.elastic.co/u/Jens_Fliege)\
**Replies:** 11\
**Last updated:** [January 29, 2018, 7:18pm UTC](https://discuss.elastic.co/t/compute-ctr-with-more-than-one-doc-in-kibana/116202 "2018-01-29T19:18:07Z")

</div>

Hi there, I've got an es-index with metrics (like sessions, clicks and so on) and would like to compute a clickthrough rate in different date ranges. I have seen that Kibana has a feature called scripted fields. But th…

---

## [Instances wont see each other on AWS](https://discuss.elastic.co/t/instances-wont-see-each-other-on-aws/25457)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 9\
**Last updated:** [July 20, 2015, 3:59pm UTC](https://discuss.elastic.co/t/instances-wont-see-each-other-on-aws/25457 "2015-07-20T15:59:41Z")

</div>

Hi using ES 1.6.0 and the latest AWS dicovery plugin 2.6.0 There is no errors reported in logs, but the nodes don't see each other. I setup up 2 master nodes as follows... bootstrap.mlockall: true cluster.name: my-…

---

## [Netflow in Logstash does not find the logstash.yml file](https://discuss.elastic.co/t/netflow-in-logstash-does-not-find-the-logstash-yml-file/199115)

<div class="topic-metadata">

**Author:** [@eemtzc](https://discuss.elastic.co/u/eemtzc)\
**Replies:** 24\
**Last updated:** [September 26, 2019, 2:21am UTC](https://discuss.elastic.co/t/netflow-in-logstash-does-not-find-the-logstash-yml-file/199115 "2019-09-26T02:21:37Z")

</div>

Hello everyone, I am trying to use Netflow on my cluster, so I configured the logstash.yml file as describe on the articules as follows, this directory is located on /etc/logstash: modules: -name: netflow var.input.u…

---

## [Unable to differentiate logs](https://discuss.elastic.co/t/unable-to-differentiate-logs/83017)

<div class="topic-metadata">

**Author:** [@Raja1](https://discuss.elastic.co/u/Raja1)\
**Replies:** 12\
**Last updated:** [May 2, 2017, 9:27am UTC](https://discuss.elastic.co/t/unable-to-differentiate-logs/83017 "2017-05-02T09:27:54Z")

</div>

Hi All, I have configured ELK in my server and able to see the logs in Kibana but i am unable to find out the environment wise logs in Kibana.I have different environments like DEV,INT,UAT and PROD. All environments ha…

---

## [Initial master nodes ES 7.0.0](https://discuss.elastic.co/t/initial-master-nodes-es-7-0-0/176544)

<div class="topic-metadata">

**Author:** [@safderali5](https://discuss.elastic.co/u/safderali5)\
**Replies:** 9\
**Last updated:** [April 12, 2019, 8:21am UTC](https://discuss.elastic.co/t/initial-master-nodes-es-7-0-0/176544 "2019-04-12T08:21:06Z")

</div>

Does all the nodes specified in cluster.initial\_master\_nodes: must be up and running before the first election for master occurs? if yes, any ideas how to do that in kubernetes. As in kubernetes, the statefulset pods…

---

## [Recover runner that lost it's data](https://discuss.elastic.co/t/recover-runner-that-lost-its-data/109912)

<div class="topic-metadata">

**Author:** [@Lafunamor](https://discuss.elastic.co/u/Lafunamor)\
**Replies:** 9\
**Last updated:** [December 5, 2017, 1:14pm UTC](https://discuss.elastic.co/t/recover-runner-that-lost-its-data/109912 "2017-12-05T13:14:02Z")

</div>

Hi there I'm currently performing some reliability testing on my ECE cluster to see how I can recover from various scenarios. I'm currently stuck with the following situation: A allocator node has lost all it's data. …

---

## [Single Alias for multiple indices](https://discuss.elastic.co/t/single-alias-for-multiple-indices/45089)

<div class="topic-metadata">

**Author:** [@Prateek\_Kshtriya](https://discuss.elastic.co/u/Prateek_Kshtriya)\
**Replies:** 14\
**Last updated:** [March 31, 2016, 9:54am UTC](https://discuss.elastic.co/t/single-alias-for-multiple-indices/45089 "2016-03-31T09:54:03Z")

</div>

Hi All, Please help me to create a single alias linked to multiple indices. Required for visualization in kibana. I am not able to create it from elastic search head plugin. Please suggest. Regards, Prateek

---

## [Kibana page js cannot respond, 304 error appears in the log](https://discuss.elastic.co/t/kibana-page-js-cannot-respond-304-error-appears-in-the-log/233686)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 12\
**Last updated:** [June 6, 2020, 12:07am UTC](https://discuss.elastic.co/t/kibana-page-js-cannot-respond-304-error-appears-in-the-log/233686 "2020-06-06T00:07:05Z")

</div>

The page does not respond to my actions. I see some 304 appearing in the kibana log, what is wrong? https://paste.ubuntu.com/p/CMJ6ygY3TG/

---

## [Logstash 2.3 - GeoIP problem](https://discuss.elastic.co/t/logstash-2-3-geoip-problem/104974)

<div class="topic-metadata">

**Author:** [@gh0stid](https://discuss.elastic.co/u/gh0stid)\
**Replies:** 18\
**Last updated:** [October 31, 2017, 7:59pm UTC](https://discuss.elastic.co/t/logstash-2-3-geoip-problem/104974 "2017-10-31T19:59:47Z")

</div>

Hello people.. sorry to bother , once again ALL of my config is working and I mean it.. absolutely all of it. mostely ripped code from siemonster and other places, but all together " work " EXCEPT GeoIP Please gimme …

---

## [Elasticsearch snapshot backup in another server is not happening](https://discuss.elastic.co/t/elasticsearch-snapshot-backup-in-another-server-is-not-happening/223375)

<div class="topic-metadata">

**Author:** [@Joseph\_Raj](https://discuss.elastic.co/u/Joseph_Raj)\
**Replies:** 15\
**Last updated:** [March 23, 2020, 10:14am UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-backup-in-another-server-is-not-happening/223375 "2020-03-23T10:14:14Z")

</div>

We are able to backup the snapshot in the same server but we are unable to backup it in other destination server. We have changed the below settings in elasticsearch.yml file. path.repo: \["/XSNW10S863S.pharma.aventis.…

---

## [Elastic search snapshot and restore using Azure repository](https://discuss.elastic.co/t/elastic-search-snapshot-and-restore-using-azure-repository/54028)

<div class="topic-metadata">

**Author:** [@sheeba](https://discuss.elastic.co/u/sheeba)\
**Replies:** 11\
**Last updated:** [June 28, 2016, 9:54am UTC](https://discuss.elastic.co/t/elastic-search-snapshot-and-restore-using-azure-repository/54028 "2016-06-28T09:54:36Z")

</div>

I want to take snapshot and restore using azure repository in Linux, I have configured these below setting in yml, but in the doc it says that this configuration is for previous version,but when i tried the new version …

---

## [Explore: How to associate APM tracking with logs](https://discuss.elastic.co/t/explore-how-to-associate-apm-tracking-with-logs/199951)

<div class="topic-metadata">

**Author:** [@EDDYCJY](https://discuss.elastic.co/u/EDDYCJY)\
**Replies:** 14\
**Last updated:** [September 25, 2019, 3:07am UTC](https://discuss.elastic.co/t/explore-how-to-associate-apm-tracking-with-logs/199951 "2019-09-25T03:07:21Z")

</div>

I have an idea now, I want to associate APM tracking with its corresponding log, but I don't know if there is any good way, very distressed. What I am looking for is that when I look at the RPC method of a link trace, I…

---

## [Update a mongodb document using elasticsearch php](https://discuss.elastic.co/t/update-a-mongodb-document-using-elasticsearch-php/45129)

<div class="topic-metadata">

**Author:** [@Satyadeep\_Kumar](https://discuss.elastic.co/u/Satyadeep_Kumar)\
**Replies:** 11\
**Last updated:** [March 29, 2016, 7:08pm UTC](https://discuss.elastic.co/t/update-a-mongodb-document-using-elasticsearch-php/45129 "2016-03-29T19:08:10Z")

</div>

Hi, I am trying to update a document based on \_id of the document using the following code: require\_once 'vendor/autoload.php'; $client = Elasticsearch\\ClientBuilder::create()-\>build(); $params = \[ …

---

## [Kafka module error](https://discuss.elastic.co/t/kafka-module-error/230956)

<div class="topic-metadata">

**Author:** [@Leo-ljr](https://discuss.elastic.co/u/Leo-ljr)\
**Replies:** 12\
**Last updated:** [May 5, 2020, 11:52am UTC](https://discuss.elastic.co/t/kafka-module-error/230956 "2020-05-05T11:52:32Z")

</div>

Hi all, I try to use the producer, consumer and broker metricset for Kafka. But when I use one of them I have this error: 2020-05-04T11:06:25.118Z INFO instance/beat.go:445 metricbeat stopped. 2020-05-04T11:06:25.118Z …

---

## [Filebeat not sending most logs across the network](https://discuss.elastic.co/t/filebeat-not-sending-most-logs-across-the-network/351472)

<div class="topic-metadata">

**Author:** [@reshippie](https://discuss.elastic.co/u/reshippie)\
**Replies:** 34\
**Last updated:** [February 1, 2024, 7:16pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-most-logs-across-the-network/351472 "2024-02-01T19:16:01Z")

</div>

I changed the output to console and verified that filebeat is actually examining the logs and there are hundreds of lines that should be sent to Logstash. The only error messages that journalctl shows are about empty fi…

---

## [ODBC + Hive + Elasticsearch doesn't seem to work](https://discuss.elastic.co/t/odbc-hive-elasticsearch-doesnt-seem-to-work/42897)

<div class="topic-metadata">

**Author:** [@Jaraxal](https://discuss.elastic.co/u/Jaraxal)\
**Replies:** 11\
**Last updated:** [March 3, 2016, 9:44am UTC](https://discuss.elastic.co/t/odbc-hive-elasticsearch-doesnt-seem-to-work/42897 "2016-03-03T09:44:31Z")

</div>

I'm running Elasticsearch 1.7.2 and Hortonworks HDP 2.3. I have an external table in Hive that points to an index in Elasticsearch. Within Hive, I can run counts and queries without any problems. However, I'm not abl…

---

## [Log file parsing and ingesting into ES](https://discuss.elastic.co/t/log-file-parsing-and-ingesting-into-es/247806)

<div class="topic-metadata">

**Author:** [@ankitachow](https://discuss.elastic.co/u/ankitachow)\
**Replies:** 14\
**Last updated:** [September 8, 2020, 6:58pm UTC](https://discuss.elastic.co/t/log-file-parsing-and-ingesting-into-es/247806 "2020-09-08T18:58:36Z")

</div>

I have a log file with 1 root of xml as below. I have created a logstash parser and tested it out in manual mode and it seems to work fine. But while ingesting into ES and get the error. Input file: \<?xml version="…

---

## [ELK - APM 7.0 - No data recevied from Java agent](https://discuss.elastic.co/t/elk-apm-7-0-no-data-recevied-from-java-agent/181239)

<div class="topic-metadata">

**Author:** [@Freddy.Raj](https://discuss.elastic.co/u/Freddy.Raj)\
**Replies:** 10\
**Last updated:** [May 21, 2019, 11:02am UTC](https://discuss.elastic.co/t/elk-apm-7-0-no-data-recevied-from-java-agent/181239 "2019-05-21T11:02:44Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.0 …

---

## [Sum Aggregation returning bad value](https://discuss.elastic.co/t/sum-aggregation-returning-bad-value/175538)

<div class="topic-metadata">

**Author:** [@Nerijus\_Oftas](https://discuss.elastic.co/u/Nerijus_Oftas)\
**Replies:** 9\
**Last updated:** [April 9, 2019, 6:27am UTC](https://discuss.elastic.co/t/sum-aggregation-returning-bad-value/175538 "2019-04-09T06:27:34Z")

</div>

Hi, I am using a simple sum aggregation query. It's fine when I have a small count of documents. But if the query needs to aggregate from 10 million filtered documents, the sum value is not correct. I found that the sol…

---

## [How to use ldap realm for authorisation for SAML realm](https://discuss.elastic.co/t/how-to-use-ldap-realm-for-authorisation-for-saml-realm/183095)

<div class="topic-metadata">

**Author:** [@Ronnie16](https://discuss.elastic.co/u/Ronnie16)\
**Replies:** 18\
**Last updated:** [June 13, 2019, 10:41am UTC](https://discuss.elastic.co/t/how-to-use-ldap-realm-for-authorisation-for-saml-realm/183095 "2019-06-13T10:41:19Z")

</div>

Hi team, I have ldap realm configured to allow access to elasticsearch APIs. I also have SAML configured for kibana. Now I want to setup user authorisation in saml using ldap realm instead of api based role mapping. I …

---

## [Как достать вложенные объекты в скрипте при агрегации. How get object in script](https://discuss.elastic.co/t/how-get-object-in-script/268075)

<div class="topic-metadata">

**Author:** [@Marina\_S](https://discuss.elastic.co/u/Marina_S)\
**Replies:** 17\
**Last updated:** [March 26, 2021, 4:19pm UTC](https://discuss.elastic.co/t/how-get-object-in-script/268075 "2021-03-26T16:19:35Z")

</div>

Есть объект такой вложенности "sizeData" : { "id" : 1, "elasticSizeScale" : { "id" : 3, "sizes" : \[ { "id" : 321, "sizeOrd…

---

## [Es\_rejected\_execution\_exception](https://discuss.elastic.co/t/es-rejected-execution-exception/276472)

<div class="topic-metadata">

**Author:** [@nkarthik](https://discuss.elastic.co/u/nkarthik)\
**Replies:** 12\
**Last updated:** [June 22, 2021, 4:08am UTC](https://discuss.elastic.co/t/es-rejected-execution-exception/276472 "2021-06-22T04:08:51Z")

</div>

In Elasticsearch v7.9.3, I'm getting the below shown error while sending Kubernetes Apiserver Audit logs to Elasticsearch. Looks like Elasticsearch is not able to keep up with the number of requests being sent. Can you p…

[Previous page](https://discuss.elastic.co/top.md?page=130&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=132&per_page=50&period=all)
