# Top **URL:** https://discuss.elastic.co/top.md?page=1325&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1326 --- ## [Logstash output to RabbitMQ - Connection Close](https://discuss.elastic.co/t/logstash-output-to-rabbitmq-connection-close/81202)
**Author:** [@brickpattern](https://discuss.elastic.co/u/brickpattern)\ **Replies:** 2\ **Last updated:** [April 6, 2017, 5:03am UTC](https://discuss.elastic.co/t/logstash-output-to-rabbitmq-connection-close/81202 "2017-04-06T05:03:21Z")
Logstash version 5.0.0 attempt to send information to Rabbit MQ in output results in below error \[ERROR\]\[logstash.agent \] Pipeline aborted due to error {:exception=\>java.util.concurrent.TimeoutException, … --- ## [Set the min size of a segment?](https://discuss.elastic.co/t/set-the-min-size-of-a-segment/67148)
**Author:** [@famoss](https://discuss.elastic.co/u/famoss)\ **Replies:** 2\ **Last updated:** [November 25, 2016, 10:52am UTC](https://discuss.elastic.co/t/set-the-min-size-of-a-segment/67148 "2016-11-25T10:52:22Z")
The Definitive Guide says: Small segments are merged into bigger segments, which, in turn, are merged into even bigger segments. Because my cluster has a lot of index,so there are a lot of segments,every segment cons… --- ## [Split brain problem with two master nodes](https://discuss.elastic.co/t/split-brain-problem-with-two-master-nodes/358710)
**Author:** [@Amit\_Shukla](https://discuss.elastic.co/u/Amit_Shukla)\ **Replies:** 6\ **Last updated:** [May 3, 2024, 8:35pm UTC](https://discuss.elastic.co/t/split-brain-problem-with-two-master-nodes/358710 "2024-05-03T20:35:21Z")
We have a requirement where we need to upgrade OS and for that Elasticsearch will be fresh installed on the nodes. I have a question related to master nodes removal. We have 3 master nodes as part of the cluster. What a… --- ## [Exclude meta-fileds from \_all](https://discuss.elastic.co/t/exclude-meta-fileds-from-all/145724)
**Author:** [@nikitakrasnov](https://discuss.elastic.co/u/nikitakrasnov)\ **Replies:** 6\ **Last updated:** [August 30, 2018, 5:51am UTC](https://discuss.elastic.co/t/exclude-meta-fileds-from-all/145724 "2018-08-30T05:51:24Z")
Hello. Is there the way to exclude meta-fields (for example \_id) from \_all field? --- ## [Improve search performance beyond 2x](https://discuss.elastic.co/t/improve-search-performance-beyond-2x/325537)
**Author:** [@pathaniaamn](https://discuss.elastic.co/u/pathaniaamn)\ **Replies:** 3\ **Last updated:** [February 19, 2023, 10:15am UTC](https://discuss.elastic.co/t/improve-search-performance-beyond-2x/325537 "2023-02-19T10:15:22Z")
Question on replica shard: Node1 P0 Node2 P1 Node3 R0 Node4 R1 So, overall search performance can get 2x as Primary and Replica shards will share the search load. But what is next if search load increases to 5 f… --- ## [Index Lifecycle Policies pour les index type ".monitoring"](https://discuss.elastic.co/t/index-lifecycle-policies-pour-les-index-type-monitoring/221583)
**Author:** [@MrBenett](https://discuss.elastic.co/u/MrBenett)\ **Replies:** 7\ **Last updated:** [March 2, 2020, 4:31pm UTC](https://discuss.elastic.co/t/index-lifecycle-policies-pour-les-index-type-monitoring/221583 "2020-03-02T16:31:00Z")
Bonjour, Contrairement aux index générés par Logstash, je n'arrive pas à gérer les indices systèmes type ".monitoring-" via les ILP. J'ai systématiquement des erreurs avec les rollover\_alias. Si je le définis dans le te… --- ## [Wazuh configuration file](https://discuss.elastic.co/t/wazuh-configuration-file/196140)
**Author:** [@Thibault](https://discuss.elastic.co/u/Thibault)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 7:36pm UTC](https://discuss.elastic.co/t/wazuh-configuration-file/196140 "2019-08-22T19:36:20Z")
Hi ! :slight\_smile: I set up Wazuh but the problem is that in the tutorial (https://documentation.wazuh.com/3.x/installation-guide/installing-wazuh-server/wazuh\_server\_rpm\_centos.html) they replace filebeat.yml with thi… --- ## [Remove head and tail for xml](https://discuss.elastic.co/t/remove-head-and-tail-for-xml/169331)
**Author:** [@jamespb](https://discuss.elastic.co/u/jamespb)\ **Replies:** 7\ **Last updated:** [March 4, 2019, 3:19am UTC](https://discuss.elastic.co/t/remove-head-and-tail-for-xml/169331 "2019-03-04T03:19:22Z")
I am trying to break one xml file into multiple event. I use \ "\) and the last line? or, how can I use mu… --- ## [\[SQL\] Queries against nested datatypes may be mis-translated](https://discuss.elastic.co/t/sql-queries-against-nested-datatypes-may-be-mis-translated/145180)
**Author:** [@paulcarey](https://discuss.elastic.co/u/paulcarey)\ **Replies:** 7\ **Last updated:** [August 28, 2018, 1:26pm UTC](https://discuss.elastic.co/t/sql-queries-against-nested-datatypes-may-be-mis-translated/145180 "2018-08-28T13:26:35Z")
Hi Taking the example from Nested datatype and adapting it to avoid using a reserved keyword (group), we have the following setup. DELETE my\_index PUT my\_index { "mappings": { "\_doc": { "properties": { … --- ## [Geoip filter plugin missing geohash field](https://discuss.elastic.co/t/geoip-filter-plugin-missing-geohash-field/93250)
**Author:** [@fpr](https://discuss.elastic.co/u/fpr)\ **Replies:** 1\ **Last updated:** [July 15, 2017, 7:25pm UTC](https://discuss.elastic.co/t/geoip-filter-plugin-missing-geohash-field/93250 "2017-07-15T19:25:54Z")
Hi, after upgrading to logstash-filter-geoip (4.2.1) there isn't the geo\_point -\> \[geoip\]\[location\] field anymore. Only the two fields \[geoip\]\[location\]\[lat\] and \[geoip\]\[location\]\[lon\] are created. I am using the defa… --- ## [Read Particular line from log File](https://discuss.elastic.co/t/read-particular-line-from-log-file/90256)
**Author:** [@richagautam](https://discuss.elastic.co/u/richagautam)\ **Replies:** 1\ **Last updated:** [June 23, 2017, 9:27am UTC](https://discuss.elastic.co/t/read-particular-line-from-log-file/90256 "2017-06-23T09:27:04Z")
Hi , I have to read 3 different lines from log files based on some text and then output the fields in a csv file. sample log data:- 20110607 095826 \[.\] !! Begin test. Script filename/text.txt 20110607 095826 \[.\] … --- ## [Installing Elasticsearch version 2.3.2 on Ubuntu 14.04](https://discuss.elastic.co/t/installing-elasticsearch-version-2-3-2-on-ubuntu-14-04/52670)
**Author:** [@gst](https://discuss.elastic.co/u/gst)\ **Replies:** 1\ **Last updated:** [June 13, 2016, 11:35pm UTC](https://discuss.elastic.co/t/installing-elasticsearch-version-2-3-2-on-ubuntu-14-04/52670 "2016-06-13T23:35:05Z")
Hi All, I want to install Elasticsearch v2.3.2 on Ubuntu as it is compatible with ES-Couchbase latest plugin. Following procedure installs the v2.3.3 1) wget -qO - https://packages.elastic.co/GPG-KEY-elasticsearch | … --- ## [Is there any documentation about the query query?](https://discuss.elastic.co/t/is-there-any-documentation-about-the-query-query/66826)
**Author:** [@AndreKR](https://discuss.elastic.co/u/AndreKR)\ **Replies:** 1\ **Last updated:** [November 22, 2016, 9:26am UTC](https://discuss.elastic.co/t/is-there-any-documentation-about-the-query-query/66826 "2016-11-22T09:26:32Z")
This is a normal term query: { "query": { "term" : { "user" : "Kimchy" } } } I just found out that this is also a valid query: { "query": { "query": { "term" : { "user" : "Kimchy" } } } } … --- ## [Starting Elasticsearch failed](https://discuss.elastic.co/t/starting-elasticsearch-failed/337616)
**Author:** [@stephane\_chan](https://discuss.elastic.co/u/stephane_chan)\ **Replies:** 4\ **Last updated:** [July 11, 2023, 2:43pm UTC](https://discuss.elastic.co/t/starting-elasticsearch-failed/337616 "2023-07-11T14:43:07Z")
Hi, Why does the elasticsearch.service status always give me this every time I start/restart my server? . ● elasticsearch.service - Elasticsearch Loaded: loaded (/lib/systemd/system/elasticsearch.service; enabled;… --- ## [Lock lens from filters](https://discuss.elastic.co/t/lock-lens-from-filters/287168)
**Author:** [@Greninja\_San](https://discuss.elastic.co/u/Greninja_San)\ **Replies:** 4\ **Last updated:** [October 20, 2021, 9:33am UTC](https://discuss.elastic.co/t/lock-lens-from-filters/287168 "2021-10-20T09:33:49Z")
Hello! I am currently trying to create a filter selector that is not a dropdown. Since there are no checkboxes, I'm trying to use a pie chart as the selector. Is it possible to create a checkbox list, and if not, to pr… --- ## [Kibana visual shows wrong value](https://discuss.elastic.co/t/kibana-visual-shows-wrong-value/231550)
**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\ **Replies:** 4\ **Last updated:** [May 11, 2020, 10:15am UTC](https://discuss.elastic.co/t/kibana-visual-shows-wrong-value/231550 "2020-05-11T10:15:06Z")
Hi, I've made a stacked bar chart as shown below. When I hovered on the particular stack it has shown the count is 8. But when I clicked on the same stack, it has shown the count is 10. See below the reference image. … --- ## ["compare" : { "ctx.payload.hits.total" : { "gt" : 5}} is not working](https://discuss.elastic.co/t/compare-ctx-payload-hits-total-gt-5-is-not-working/154376)
**Author:** [@gayathri](https://discuss.elastic.co/u/gayathri)\ **Replies:** 4\ **Last updated:** [November 2, 2018, 9:58am UTC](https://discuss.elastic.co/t/compare-ctx-payload-hits-total-gt-5-is-not-working/154376 "2018-11-02T09:58:07Z")
Hi Team, "compare" : { "ctx.payload.hits.total" : { "gt" : 5}} is not working for me while creating the watch alert. We are getting mail alerts if we remove the below block: "condition" : { "compare" : { "ctx.payload.… --- ## [Sampler aggregation performance vs 2 queries](https://discuss.elastic.co/t/sampler-aggregation-performance-vs-2-queries/112690)
**Author:** [@adam3](https://discuss.elastic.co/u/adam3)\ **Replies:** 4\ **Last updated:** [December 21, 2017, 2:50pm UTC](https://discuss.elastic.co/t/sampler-aggregation-performance-vs-2-queries/112690 "2017-12-21T14:50:05Z")
Ok so I am trying to increase performance of an Elasticsearch application. For this case there is a single Elasticsearch node (non-sharded) with about 7M docs (index is like 40G). We were doing a query to get top docs … --- ## [Problem While loading Filebeat Index Template in Elasticsearch](https://discuss.elastic.co/t/problem-while-loading-filebeat-index-template-in-elasticsearch/47629)
**Author:** [@OucemaBellagha](https://discuss.elastic.co/u/OucemaBellagha)\ **Replies:** 4\ **Last updated:** [April 20, 2016, 5:57pm UTC](https://discuss.elastic.co/t/problem-while-loading-filebeat-index-template-in-elasticsearch/47629 "2016-04-20T17:57:59Z")
Greetings, While loading the FileBeat template Template to my localhost Elasticsearch I encountred a problem : "\>The system returned: (113) No route to host\<" but I can can access access my localhost using the Elasticse… --- ## [Universe = mot réservé?](https://discuss.elastic.co/t/universe-mot-reserve/31459)
**Author:** [@Karel\_SUEDILE](https://discuss.elastic.co/u/Karel_SUEDILE)\ **Replies:** 4\ **Last updated:** [October 1, 2015, 10:33am UTC](https://discuss.elastic.co/t/universe-mot-reserve/31459 "2015-10-01T10:33:16Z")
Bonjour, j'ai un souci avec une nested aggrégation, j'ai l'impression que si je fais un nested terms aggregation sur un champ nommé universe, il ne me renvoie systématiquement rien. mon mapping simplifié : { "aaa… --- ## [Query for empty field, add new field later possible?](https://discuss.elastic.co/t/query-for-empty-field-add-new-field-later-possible/6617)
**Author:** [@jeangld](https://discuss.elastic.co/u/jeangld)\ **Replies:** 4\ **Last updated:** [February 21, 2012, 3:01pm UTC](https://discuss.elastic.co/t/query-for-empty-field-add-new-field-later-possible/6617 "2012-02-21T15:01:01Z")
Hi, I'm having troubles to find the correct query to get all documents where a specific field is not set at all. My test index has 3 text fields: field1, field2, field3. Some documents, have all fields filled, so… --- ## [Aggregating data from child documents in has\_child query](https://discuss.elastic.co/t/aggregating-data-from-child-documents-in-has-child-query/3935)
**Author:** [@Wojciech\_Durczynski](https://discuss.elastic.co/u/Wojciech_Durczynski)\ **Replies:** 4\ **Last updated:** [March 16, 2011, 7:45pm UTC](https://discuss.elastic.co/t/aggregating-data-from-child-documents-in-has-child-query/3935 "2011-03-16T19:45:30Z")
Hello. I'd like to search all parent documents that have child documents in index, but also would like to retrieve aggregated data about child documents for found parents. For example: every child document has pr… --- ## [Deploy Logstash pipeline through Gitlab CI/CD](https://discuss.elastic.co/t/deploy-logstash-pipeline-through-gitlab-ci-cd/316257)
**Author:** [@kmz161](https://discuss.elastic.co/u/kmz161)\ **Replies:** 3\ **Last updated:** [October 11, 2022, 12:56pm UTC](https://discuss.elastic.co/t/deploy-logstash-pipeline-through-gitlab-ci-cd/316257 "2022-10-11T12:56:22Z")
Hi! I use Centralized Pipeline Management for creation and management pipeline. But I can’t saved changing of pipeline settings . Because of it I started use Gitlab to store pipelines config. And now I need perform tw… --- ## [Kibana UI search text for specific pattern](https://discuss.elastic.co/t/kibana-ui-search-text-for-specific-pattern/243369)
**Author:** [@dvanwesh](https://discuss.elastic.co/u/dvanwesh)\ **Replies:** 3\ **Last updated:** [August 10, 2020, 3:23pm UTC](https://discuss.elastic.co/t/kibana-ui-search-text-for-specific-pattern/243369 "2020-08-10T15:23:26Z")
I have log messages with below pattern user status for userId 1 change previous state x1 new state x2 where previous and new state are different user status for userId 2 change previous state x1 new state x1 where pr… --- ## [Accessing Redis cache for dynamic keys](https://discuss.elastic.co/t/accessing-redis-cache-for-dynamic-keys/179209)
**Author:** [@Dipal\_Modi](https://discuss.elastic.co/u/Dipal_Modi)\ **Replies:** 3\ **Last updated:** [May 1, 2019, 3:14pm UTC](https://discuss.elastic.co/t/accessing-redis-cache-for-dynamic-keys/179209 "2019-05-01T15:14:23Z")
While using redis input plugin, it requires a key to be specified in the configuration only. Is there any way to build key using another data source for which we can use redis cache? The same functionality is available… --- ## [Split chart bring graph warning that single graph don't](https://discuss.elastic.co/t/split-chart-bring-graph-warning-that-single-graph-dont/68127)
**Author:** [@Nicolas\_Aizier](https://discuss.elastic.co/u/Nicolas_Aizier)\ **Replies:** 3\ **Last updated:** [December 13, 2016, 3:58pm UTC](https://discuss.elastic.co/t/split-chart-bring-graph-warning-that-single-graph-dont/68127 "2016-12-13T15:58:59Z")
First of all, hello community ! Just attended the elastic{ON}tour in Sydney and really enjoyed it. Here is my case, I'm just graphing the load average from metricbeat to get a nice output. One of my servers is giving a… --- ## [Embedding elasticsearch as a clustered server foundation](https://discuss.elastic.co/t/embedding-elasticsearch-as-a-clustered-server-foundation/10377)
**Author:** [@Raphael\_Geronimi](https://discuss.elastic.co/u/Raphael_Geronimi)\ **Replies:** 3\ **Last updated:** [March 26, 2016, 3:19pm UTC](https://discuss.elastic.co/t/embedding-elasticsearch-as-a-clustered-server-foundation/10377 "2016-03-26T15:19:44Z")
Hello, ElasticSearch is incredibly well architectured and easy to use. To simplify data center operations, I am considering switching my current app architecture from separated processes (app server instances sep… --- ## [Gc-young error in ES](https://discuss.elastic.co/t/gc-young-error-in-es/44992)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 3\ **Last updated:** [March 21, 2016, 1:35pm UTC](https://discuss.elastic.co/t/gc-young-error-in-es/44992 "2016-03-21T13:35:23Z")
Hi, can anybody tell me the meaning of this error? \[2016-03-21 14:43:27,809\]\[INFO \]\[monitor.jvm \] \[prod-data-node-2\] \[gc\]\[young\]\[261567\]\[1099\] duration \[770ms\], collections \[1\]/\[1.1s\], total \[770ms\]/\[6.6m\]… --- ## [Question about the operator clientConfig caBundle of webhooks](https://discuss.elastic.co/t/question-about-the-operator-clientconfig-cabundle-of-webhooks/299114)
**Author:** [@Fares\_Oueslati](https://discuss.elastic.co/u/Fares_Oueslati)\ **Replies:** 2\ **Last updated:** [March 12, 2022, 10:41am UTC](https://discuss.elastic.co/t/question-about-the-operator-clientconfig-cabundle-of-webhooks/299114 "2022-03-12T10:41:25Z")
Hello! I'm trying to update a manifest of a ValidatingWebhookConfiguration deployed with our elastic operator. More precisely I want to update the caBundle field in the clientConfig webhooks. I can see that a dummy va… --- ## [Options list](https://discuss.elastic.co/t/options-list/296059)
**Author:** [@iraidalavrovaa](https://discuss.elastic.co/u/iraidalavrovaa)\ **Replies:** 2\ **Last updated:** [February 3, 2022, 3:06pm UTC](https://discuss.elastic.co/t/options-list/296059 "2022-02-03T15:06:24Z")
Hi everyone, I've recently started using Elastic. While working on my dashboard I faced a problem. I want to add an options list but the information I'm interested in is located in 3 different fields: Level 1, Level 2, … --- ## [Calculating time diff between @timestamp and document date field](https://discuss.elastic.co/t/calculating-time-diff-between-timestamp-and-document-date-field/201918)
**Author:** [@Josip\_Cagalj](https://discuss.elastic.co/u/Josip_Cagalj)\ **Replies:** 2\ **Last updated:** [October 7, 2019, 8:28am UTC](https://discuss.elastic.co/t/calculating-time-diff-between-timestamp-and-document-date-field/201918 "2019-10-07T08:28:58Z")
HI, I'm having trouble calculating time diff (in seconds) between @timestamp and 'eventTime' date field using script field inside search query. My mappings for 'eventTime' field is: "mapping": { "dynamic": "fa… --- ## [Bucket script format parameter](https://discuss.elastic.co/t/bucket-script-format-parameter/198759)
**Author:** [@Evan\_Something](https://discuss.elastic.co/u/Evan_Something)\ **Replies:** 2\ **Last updated:** [September 11, 2019, 8:09pm UTC](https://discuss.elastic.co/t/bucket-script-format-parameter/198759 "2019-09-11T20:09:43Z")
In the documentation it states the "format" parameter (format to apply to the output value of this aggregation) but I can't figure out how to use it? is it possible to have it format the result (a long) as a datetime? m… --- ## [EsHadoopIllegalStateException when using ranges](https://discuss.elastic.co/t/eshadoopillegalstateexception-when-using-ranges/195733)
**Author:** [@markoutso](https://discuss.elastic.co/u/markoutso)\ **Replies:** 2\ **Last updated:** [August 26, 2019, 6:54am UTC](https://discuss.elastic.co/t/eshadoopillegalstateexception-when-using-ranges/195733 "2019-08-26T06:54:18Z")
Hello, I have the following index and data: PUT range\_index { "settings": { "number\_of\_shards": 2 }, "mappings": { "\_doc": { "properties": { "expected\_attendees": { "type": "integer… --- ## [Separate country code from phone number](https://discuss.elastic.co/t/separate-country-code-from-phone-number/186075)
**Author:** [@Andreasky](https://discuss.elastic.co/u/Andreasky)\ **Replies:** 2\ **Last updated:** [June 21, 2019, 12:56pm UTC](https://discuss.elastic.co/t/separate-country-code-from-phone-number/186075 "2019-06-21T12:56:23Z")
How can I separate the country code from a phone number? I want +4712345678 to be separated into two terms: "country code" =\> "+47", "phone number" =\> "12345678" --- ## [How to make the system indicies replicas as zero](https://discuss.elastic.co/t/how-to-make-the-system-indicies-replicas-as-zero/97197)
**Author:** [@JAYALAKSHMI](https://discuss.elastic.co/u/JAYALAKSHMI)\ **Replies:** 2\ **Last updated:** [August 21, 2017, 6:22am UTC](https://discuss.elastic.co/t/how-to-make-the-system-indicies-replicas-as-zero/97197 "2017-08-21T06:22:39Z")
Hi, We have one master,data and client node. We could see that the cluster status become yellow since some of the system indices have replicas as 1. How to change the system indices replicas as zero permanently. Syste… --- ## [Heartbeat dashboards](https://discuss.elastic.co/t/heartbeat-dashboards/75683)
**Author:** [@redrise](https://discuss.elastic.co/u/redrise)\ **Replies:** 2\ **Last updated:** [February 21, 2017, 7:32am UTC](https://discuss.elastic.co/t/heartbeat-dashboards/75683 "2017-02-21T07:32:55Z")
Has anybody got the example heartbeat dashboards to import correctly? When I try to import them I get an error as follows: No directory /tmp/tmp582450791/beats-dashboards-5.2.1/heartbeat/dashboard All the other bea… --- ## [No cluster events in index](https://discuss.elastic.co/t/no-cluster-events-in-index/49987)
**Author:** [@lennylinux](https://discuss.elastic.co/u/lennylinux)\ **Replies:** 2\ **Last updated:** [May 15, 2016, 3:08pm UTC](https://discuss.elastic.co/t/no-cluster-events-in-index/49987 "2016-05-15T15:08:45Z")
Hi! I´ve tried the Watcher example to monitor the cluster join/left events. https://www.elastic.co/guide/en/watcher/current/watching-marvel-data.html#watching-nodes But in my test cluster there isn't an event field. … --- ## [Is there a UI (User Interface) web or desktop for Shield?](https://discuss.elastic.co/t/is-there-a-ui-user-interface-web-or-desktop-for-shield/21983)
**Author:** [@Jaime\_Jr\_Jacinto](https://discuss.elastic.co/u/Jaime_Jr_Jacinto)\ **Replies:** 2\ **Last updated:** [September 16, 2015, 3:59pm UTC](https://discuss.elastic.co/t/is-there-a-ui-user-interface-web-or-desktop-for-shield/21983 "2015-09-16T15:59:49Z")
Dear Elasticsearch Community, All of Shield process, ie, creation of users, roles, mapping of roles to user, are done manually (need to type in the console). Is there a web page or desktop application wher… --- ## [Create monthly indexes based on event attribute](https://discuss.elastic.co/t/create-monthly-indexes-based-on-event-attribute/29372)
**Author:** [@karasmeitar](https://discuss.elastic.co/u/karasmeitar)\ **Replies:** 2\ **Last updated:** [September 16, 2015, 9:31am UTC](https://discuss.elastic.co/t/create-monthly-indexes-based-on-event-attribute/29372 "2015-09-16T09:31:43Z")
Hi All, can i perform JODA functions in the output section on other attributes then timestamp(%{+YYYY.MM})? i need to create indexes base on couple of attributes in my event and i can't use only the timestamp. --- ## [Ingest Pipeline - ignore\_failure is ignored](https://discuss.elastic.co/t/ingest-pipeline-ignore-failure-is-ignored/318484)
**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\ **Replies:** 5\ **Last updated:** [November 9, 2022, 12:19pm UTC](https://discuss.elastic.co/t/ingest-pipeline-ignore-failure-is-ignored/318484 "2022-11-09T12:19:21Z")
Hi, We are attempting to ingest PANW events via filebeat-\>logstash-\>elasticsearch. The filebeat-8.4.0-panw-panos-pipeline fails due to the second processor being: rename "message" to "event.original" Our event alread… --- ## [Elastic Agent Standalone Kubernetes ICMP Check; Heartbeat won't Start](https://discuss.elastic.co/t/elastic-agent-standalone-kubernetes-icmp-check-heartbeat-wont-start/296005)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 5\ **Last updated:** [February 2, 2022, 11:30pm UTC](https://discuss.elastic.co/t/elastic-agent-standalone-kubernetes-icmp-check-heartbeat-wont-start/296005 "2022-02-02T23:30:55Z")
Hi All, I'm trying to setup a standalone Elastic Agent config on Kubernetes, but am running into an issue where Heartbeat doesn't start, and eventually enters a failed state. Elastic Agent: 7.16.2 ECK: 1.9.1 Elastics… --- ## [Canvas drilldown](https://discuss.elastic.co/t/canvas-drilldown/257543)
**Author:** [@ravishka](https://discuss.elastic.co/u/ravishka)\ **Replies:** 5\ **Last updated:** [January 4, 2021, 9:51am UTC](https://discuss.elastic.co/t/canvas-drilldown/257543 "2021-01-04T09:51:29Z")
Is there a drilldown concept/option or similar concept on the canvas? --- ## [Logstash-input-salesforce plugin logstash error](https://discuss.elastic.co/t/logstash-input-salesforce-plugin-logstash-error/251811)
**Author:** [@cmay](https://discuss.elastic.co/u/cmay)\ **Replies:** 5\ **Last updated:** [October 13, 2020, 4:55pm UTC](https://discuss.elastic.co/t/logstash-input-salesforce-plugin-logstash-error/251811 "2020-10-13T16:55:49Z")
I've tried reinstalling logstash and the logstash-input-salesforce plugin after changing from Java 11 to 1.8.0. I restart the service. I never see it in Kibana. ERROR RECEIVED: \[2020-10-12T16:05:14,151\]\[ERROR\]\[logstash… --- ## [Node evicted itself?](https://discuss.elastic.co/t/node-evicted-itself/9368)
**Author:** [@Mohamed\_Lrhazi](https://discuss.elastic.co/u/Mohamed_Lrhazi)\ **Replies:** 5\ **Last updated:** [October 18, 2012, 3:01pm UTC](https://discuss.elastic.co/t/node-evicted-itself/9368 "2012-10-18T15:01:42Z")
node5 in my 5 nodes cluster somehow left the party... its log says : \[root@log-i-4 ~\]# tail -100 /data/elasticsearch/logs/elasticsearch.log \[2012-10-15 15:34:51,937\]\[WARN \]\[monitor.jvm \] \[ES5\] \[gc\]\[Par… --- ## [MasterNotDiscoveredException](https://discuss.elastic.co/t/masternotdiscoveredexception/7470)
**Author:** [@andavar](https://discuss.elastic.co/u/andavar)\ **Replies:** 5\ **Last updated:** [May 4, 2012, 1:54pm UTC](https://discuss.elastic.co/t/masternotdiscoveredexception/7470 "2012-05-04T13:54:13Z")
Dear Elasticsearch User, When I am trying to run my ES Based Java program, I got following exception org.elasticsearch.discovery.MasterNotDiscoveredException: waited for \[30s\] at org.elasticsearch.act… --- ## [Elastic-apm-node issues regarding transaction and logging](https://discuss.elastic.co/t/elastic-apm-node-issues-regarding-transaction-and-logging/337648)
**Author:** [@Kesha\_Shah](https://discuss.elastic.co/u/Kesha_Shah)\ **Replies:** 1\ **Last updated:** [July 6, 2023, 9:38pm UTC](https://discuss.elastic.co/t/elastic-apm-node-issues-regarding-transaction-and-logging/337648 "2023-07-06T21:38:32Z")
Kibana version: 8.8.1 Elasticsearch version: 8.8.1 APM Server version: 8.8.1 APM Agent language and version: NodeJs Agent elastic-apm-node": "^3.47.0 Fresh install or upgraded from other version? Upgraded from 7.17 r… --- ## [No able to Setup ELK on kubernetes](https://discuss.elastic.co/t/no-able-to-setup-elk-on-kubernetes/306358)
**Author:** [@jaskarn.kalsi](https://discuss.elastic.co/u/jaskarn.kalsi)\ **Replies:** 1\ **Last updated:** [June 27, 2022, 9:42am UTC](https://discuss.elastic.co/t/no-able-to-setup-elk-on-kubernetes/306358 "2022-06-27T09:42:10Z")
Hi I followed the Quick start guide for setting ELK on Kubernetes. My elasticsearch pod remains in Applying Changes kubectl get elasticsearch NAME HEALTH NODES VERSION PHASE AGE staging unkn… --- ## [Kibana Timelion Question Split Label More than 1 field](https://discuss.elastic.co/t/kibana-timelion-question-split-label-more-than-1-field/247283)
**Author:** [@Gundam\_Airline](https://discuss.elastic.co/u/Gundam_Airline)\ **Replies:** 1\ **Last updated:** [September 14, 2020, 4:09pm UTC](https://discuss.elastic.co/t/kibana-timelion-question-split-label-more-than-1-field/247283 "2020-09-14T16:09:47Z")
How can I split more than 1 field in the label for Timelion. I have seen multiple post that shows 1 variable as shown in the link below but nothing for 2 or more. Can someone please give me an example that could assist m… --- ## [Kibana will not start behind reverse proxy with X-Content-Type-Options: nosniff](https://discuss.elastic.co/t/kibana-will-not-start-behind-reverse-proxy-with-x-content-type-options-nosniff/214438)
**Author:** [@WillemvdW](https://discuss.elastic.co/u/WillemvdW)\ **Replies:** 1\ **Last updated:** [February 6, 2020, 2:21pm UTC](https://discuss.elastic.co/t/kibana-will-not-start-behind-reverse-proxy-with-x-content-type-options-nosniff/214438 "2020-02-06T14:21:19Z")
We have an urgent problem in moving Kibana to a production environment where the proxy adds X-Content-Type-Options: nosniff to the response headers. If we run the kibana instance directly to bypass the proxy environment… --- ## [Unable to start logstash service Windows server 64 bit](https://discuss.elastic.co/t/unable-to-start-logstash-service-windows-server-64-bit/319363)
**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\ **Replies:** 8\ **Last updated:** [November 30, 2022, 5:26am UTC](https://discuss.elastic.co/t/unable-to-start-logstash-service-windows-server-64-bit/319363 "2022-11-30T05:26:05Z")
Hi, I have downloaded and unzipped logstash and tried to install it as service using nssm. Logstash gets successfully installed but when i try to start the service it is showing as below screenshot. This is the erro… [Previous page](https://discuss.elastic.co/top.md?page=1324&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1326&per_page=50&period=all)