# Top **URL:** https://discuss.elastic.co/top.md?page=1338&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1339 --- ## [Limit of total fields \[1000\] in index exceeded and nested json](https://discuss.elastic.co/t/limit-of-total-fields-1000-in-index-exceeded-and-nested-json/247716)
**Author:** [@Luca\_P](https://discuss.elastic.co/u/Luca_P)\ **Replies:** 2\ **Last updated:** [September 8, 2020, 4:58am UTC](https://discuss.elastic.co/t/limit-of-total-fields-1000-in-index-exceeded-and-nested-json/247716 "2020-09-08T04:58:38Z")
Hi All, I need some help to avoid the well known 'Limit of total fields \[1000\] in index exceeded' problem. I don't consider to raise the default in the settings above 1000. The culprit seems to be a field with a json v… --- ## [Datetime from MySQL via JDBC --\> @timestamp assignment fails with \_dateparsefailure](https://discuss.elastic.co/t/datetime-from-mysql-via-jdbc-timestamp-assignment-fails-with-dateparsefailure/211531)
**Author:** [@Chris1234](https://discuss.elastic.co/u/Chris1234)\ **Replies:** 2\ **Last updated:** [December 11, 2019, 10:37pm UTC](https://discuss.elastic.co/t/datetime-from-mysql-via-jdbc-timestamp-assignment-fails-with-dateparsefailure/211531 "2019-12-11T22:37:28Z")
I'm using the jdbc plugin to grab table data from a MySQL database. One of the fields in the MySQL database ("created\_at") is of type DATETIME which I need to assign to the @timestamp. Here's part of my logstash.conf: … --- ## [Elasticsearch seems to ignore settings in yaml file](https://discuss.elastic.co/t/elasticsearch-seems-to-ignore-settings-in-yaml-file/189243)
**Author:** [@elasticFox](https://discuss.elastic.co/u/elasticFox)\ **Replies:** 2\ **Last updated:** [July 7, 2019, 3:27pm UTC](https://discuss.elastic.co/t/elasticsearch-seems-to-ignore-settings-in-yaml-file/189243 "2019-07-07T15:27:04Z")
Hi, I have an ES cluster on a single machine consisting of five nodes: master, data1, data2, data3 and ingest. After upgrading from 5.5.1 to 6.8.1, I have managed to get the master node up and running, however, other no… --- ## [DeleteByQuery Illegal state exception](https://discuss.elastic.co/t/deletebyquery-illegal-state-exception/84118)
**Author:** [@Shira\_Bendor](https://discuss.elastic.co/u/Shira_Bendor)\ **Replies:** 2\ **Last updated:** [May 3, 2017, 7:21pm UTC](https://discuss.elastic.co/t/deletebyquery-illegal-state-exception/84118 "2017-05-03T19:21:05Z")
Hi, I'm testing this API and have this code: BulkByScrollResponse response = DeleteByQueryAction.INSTANCE.newRequestBuilder(m\_client) .filter(eventCondition.getQueryBuilder()) … --- ## [Add set\_real\_ip\_from working with real\_ip\_header just like the nginx way](https://discuss.elastic.co/t/add-set-real-ip-from-working-with-real-ip-header-just-like-the-nginx-way/48496)
**Author:** [@hnlq715](https://discuss.elastic.co/u/hnlq715)\ **Replies:** 2\ **Last updated:** [May 3, 2016, 2:34am UTC](https://discuss.elastic.co/t/add-set-real-ip-from-working-with-real-ip-header-just-like-the-nginx-way/48496 "2016-05-03T02:34:11Z")
http://nginx.org/en/docs/http/ngx\_http\_realip\_module.html We nedd to define trusted addresses that are known to send correct replacement addresses. --- ## [Experiencing java.lang.NoSuchMethodError for logstash version higher than 1.4.2](https://discuss.elastic.co/t/experiencing-java-lang-nosuchmethoderror-for-logstash-version-higher-than-1-4-2/43077)
**Author:** [@droidnxs](https://discuss.elastic.co/u/droidnxs)\ **Replies:** 2\ **Last updated:** [March 2, 2016, 6:27am UTC](https://discuss.elastic.co/t/experiencing-java-lang-nosuchmethoderror-for-logstash-version-higher-than-1-4-2/43077 "2016-03-02T06:27:14Z")
Referencing this issue: enter link description here Tried upgrading to releases 1.5 and up and keep getting this exception even though my config file seems to be correct: io/console not supported; tty will not be manip… --- ## [ElasticSearch: service elasticsearch start, throws Exception in thread "main"](https://discuss.elastic.co/t/elasticsearch-service-elasticsearch-start-throws-exception-in-thread-main/15417)
**Author:** [@Gabriel\_Blankenship](https://discuss.elastic.co/u/Gabriel_Blankenship)\ **Replies:** 2\ **Last updated:** [January 25, 2014, 10:17pm UTC](https://discuss.elastic.co/t/elasticsearch-service-elasticsearch-start-throws-exception-in-thread-main/15417 "2014-01-25T22:17:31Z")
Hi all, New to Logstash and Elasticsearch so pardon any silliness on my end with this configuration issue I'm currently having. I'm receiving the following error when I try to startup the elasticsearch as suggest… --- ## [Dropdown select filter not working](https://discuss.elastic.co/t/dropdown-select-filter-not-working/288518)
**Author:** [@karwei](https://discuss.elastic.co/u/karwei)\ **Replies:** 4\ **Last updated:** [November 16, 2021, 4:41pm UTC](https://discuss.elastic.co/t/dropdown-select-filter-not-working/288518 "2021-11-16T16:41:21Z")
Working with v7.14.1. I'm trying to add a dropdown select filter to my workpad in Canvas, but it is not giving me the list of items in the dropdown. The preview data shows the list. essql query="SELECT appId FROM \\"oe.… --- ## [How to create and use data for indexing using Rally](https://discuss.elastic.co/t/how-to-create-and-use-data-for-indexing-using-rally/222376)
**Author:** [@Abhimanyu\_Garg](https://discuss.elastic.co/u/Abhimanyu_Garg)\ **Replies:** 4\ **Last updated:** [March 11, 2020, 2:23pm UTC](https://discuss.elastic.co/t/how-to-create-and-use-data-for-indexing-using-rally/222376 "2020-03-11T14:23:03Z")
We are using Rally to do performance benchmarking on our ELK stacks. For this we want to use our own data (like apm events) to ingest to elastic and measure index performance. https://github.com/elastic/apm-server/tree/… --- ## [APM environment variables misconfigured](https://discuss.elastic.co/t/apm-environment-variables-misconfigured/200841)
**Author:** [@alexclifford](https://discuss.elastic.co/u/alexclifford)\ **Replies:** 4\ **Last updated:** [October 13, 2019, 11:50am UTC](https://discuss.elastic.co/t/apm-environment-variables-misconfigured/200841 "2019-10-13T11:50:38Z")
Kibana version: 7.3.2 Elasticsearch version: 7.3.2 APM Server version: 7.3.2 APM Agent language and version: go.elastic.co/apm v1.5.0 go.elastic.co/apm/module/apmecho v1.5.0 go.elastic.co/apm/module/apmsql v1.5.0 B… --- ## [Email not trigger](https://discuss.elastic.co/t/email-not-trigger/127578)
**Author:** [@er.naliniranjan](https://discuss.elastic.co/u/er.naliniranjan)\ **Replies:** 4\ **Last updated:** [April 12, 2018, 10:07am UTC](https://discuss.elastic.co/t/email-not-trigger/127578 "2018-04-12T10:07:52Z")
Hi Team, I create watcher in Kibana and its getting trigger which i can see under Management-\> Elasticsearch-\> Watcher-\> Watches-\> system\_process\_watch. but email notification doesn't receive. Metric beat input \* { … --- ## [Nodes not balanced within Zone](https://discuss.elastic.co/t/nodes-not-balanced-within-zone/121663)
**Author:** [@D.J](https://discuss.elastic.co/u/D.J)\ **Replies:** 4\ **Last updated:** [March 5, 2018, 1:58pm UTC](https://discuss.elastic.co/t/nodes-not-balanced-within-zone/121663 "2018-03-05T13:58:56Z")
Hi, I have region with 3 zones. Zone1 - one allocator host Zone2 - 2 allocators hosts Zone3 - one allocator host I created a cluster with 5 nodes per zone, and in zone2 (the one with 2 hosts ) it created all 5 nod… --- ## [EmptyAllocatorSet when using allocator\_filter](https://discuss.elastic.co/t/emptyallocatorset-when-using-allocator-filter/105347)
**Author:** [@boebu](https://discuss.elastic.co/u/boebu)\ **Replies:** 4\ **Last updated:** [October 27, 2017, 7:01am UTC](https://discuss.elastic.co/t/emptyallocatorset-when-using-allocator-filter/105347 "2017-10-27T07:01:03Z")
Hi I'm trying to the influence the AZ placement of some elasticsearch clusters via the allocator\_filter using the following config: "cluster\_name": "mycluster\_z2", "plan": { "zone\_count": 1, "cluster\_topolo… --- ## [One logstash node can't stop](https://discuss.elastic.co/t/one-logstash-node-cant-stop/102073)
**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\ **Replies:** 4\ **Last updated:** [September 28, 2017, 9:19am UTC](https://discuss.elastic.co/t/one-logstash-node-cant-stop/102073 "2017-09-28T09:19:18Z")
ELK stack version：5.5.1 There is one logstash can not be restarted, I have used kill -9 PID to kill the process, but it respawn a new one automatically. There are three logstash nodes in my ELK stack, the other two are… --- ## [Custom Realm: read properties from customRealm.yml](https://discuss.elastic.co/t/custom-realm-read-properties-from-customrealm-yml/88325)
**Author:** [@Jathin](https://discuss.elastic.co/u/Jathin)\ **Replies:** 4\ **Last updated:** [June 7, 2017, 10:02pm UTC](https://discuss.elastic.co/t/custom-realm-read-properties-from-customrealm-yml/88325 "2017-06-07T22:02:41Z")
Basic difference between the CustomRealmPlugin in 2.x to CustomRealmExtension in 5.x is that now an instance needs to be provided instead of a class ref. previously realms were able to inject its own configurations by re… --- ## [Getting maxClauseCount error when using document-level security](https://discuss.elastic.co/t/getting-maxclausecount-error-when-using-document-level-security/73923)
**Author:** [@jmcginty](https://discuss.elastic.co/u/jmcginty)\ **Replies:** 4\ **Last updated:** [February 10, 2017, 4:55pm UTC](https://discuss.elastic.co/t/getting-maxclausecount-error-when-using-document-level-security/73923 "2017-02-10T16:55:12Z")
We tag our documents with security ids and wish to filter the documents at query time with a list of security ids associated with the user. We added a field to user.metadata called 'sids' which is an array of integers… --- ## [Can't get any log from one special filter](https://discuss.elastic.co/t/cant-get-any-log-from-one-special-filter/59193)
**Author:** [@cazorla19](https://discuss.elastic.co/u/cazorla19)\ **Replies:** 4\ **Last updated:** [August 31, 2016, 12:40pm UTC](https://discuss.elastic.co/t/cant-get-any-log-from-one-special-filter/59193 "2016-08-31T12:40:35Z")
The issue: I have one filter which is responsible to process Nginx error logs. I set it up the same way as the access log filter. But! When "access" filter parsing logs well, error filter just skips logs. There is no \_gr… --- ## [Grok for this log](https://discuss.elastic.co/t/grok-for-this-log/45862)
**Author:** [@Farouk\_Samu](https://discuss.elastic.co/u/Farouk_Samu)\ **Replies:** 4\ **Last updated:** [March 31, 2016, 2:09pm UTC](https://discuss.elastic.co/t/grok-for-this-log/45862 "2016-03-31T14:09:23Z")
I want to create a grok for the log below. "2016-03-30 19:14:06-0500 \[HonsshServerTransport,13657,195.154.43.29\] \[PLUG IN\]\[EXAMPLE\] - {'honey\_port': '22', 'sensor\_name': 'node3', 'session': {'auths': \[… --- ## [Java OOM error on a 64G - 8 Core CPU server](https://discuss.elastic.co/t/java-oom-error-on-a-64g-8-core-cpu-server/13617)
**Author:** [@11128](https://discuss.elastic.co/u/11128)\ **Replies:** 4\ **Last updated:** [September 23, 2013, 7:21am UTC](https://discuss.elastic.co/t/java-oom-error-on-a-64g-8-core-cpu-server/13617 "2013-09-23T07:21:08Z")
Hello, Gurus I know this must be an old question. I have a ES instance\*(Kibana+ES+Fluentd as log analyse system, indexing nginx access log) \*running on 64G - 8 core CPU VM with DEFAULT configuration. We create a i… --- ## [AWS ES logstash - Got response code '403' contacting Elasticsearch at URL 'https://search-aws-e\*](https://discuss.elastic.co/t/aws-es-logstash-got-response-code-403-contacting-elasticsearch-at-url-https-search-aws-e/212506)
**Author:** [@Kiran\_Kumar2](https://discuss.elastic.co/u/Kiran_Kumar2)\ **Replies:** 0\ **Last updated:** [December 19, 2019, 2:48pm UTC](https://discuss.elastic.co/t/aws-es-logstash-got-response-code-403-contacting-elasticsearch-at-url-https-search-aws-e/212506 "2019-12-19T14:48:09Z")
I have configured the AWS ES and logstash. and granted the default full AWS policy(AmazonESFullAccess) to the user still I am getting 403 error. my filebeats and logstash are running in same host here are the configura… --- ## [Hard-Removing Elastic Endpoint](https://discuss.elastic.co/t/hard-removing-elastic-endpoint/274102)
**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\ **Replies:** 1\ **Last updated:** [May 26, 2021, 7:27pm UTC](https://discuss.elastic.co/t/hard-removing-elastic-endpoint/274102 "2021-05-26T19:27:42Z")
Hey, after an upgrade to 7.13 and the auto-removal of Kibana-builtin Fleet, i'm now cleaning up in order to re-install Elastic Agents. On Windows Hosts, I'm not able to remove Elastic Endpoint. Unenrolling the agent … --- ## [How to show data without aggregation function](https://discuss.elastic.co/t/how-to-show-data-without-aggregation-function/211042)
**Author:** [@vin.ramesh](https://discuss.elastic.co/u/vin.ramesh)\ **Replies:** 1\ **Last updated:** [December 9, 2019, 9:38pm UTC](https://discuss.elastic.co/t/how-to-show-data-without-aggregation-function/211042 "2019-12-09T21:38:12Z")
Hi All, My settings are Elasticsearch 7.4.0 and Kibana 7.4.0. My program feeds data into ElasticSearch. The data contain a timestamp and a value. I want to create a bar chart, with the timestamp as X-axis and the valu… --- ## [Issue sending logs filebeat to logstash?](https://discuss.elastic.co/t/issue-sending-logs-filebeat-to-logstash/150448)
**Author:** [@killmasta93](https://discuss.elastic.co/u/killmasta93)\ **Replies:** 1\ **Last updated:** [September 30, 2018, 8:42pm UTC](https://discuss.elastic.co/t/issue-sending-logs-filebeat-to-logstash/150448 "2018-09-30T20:42:46Z")
Hi, I was wondering if someone could shed some light on the issue im having running logstash (on server) 6.4.1 and filebeat ( on client) 6.4.1. The idea is to send the postgresql information from the client to the serve… --- ## [Logstash strange warning](https://discuss.elastic.co/t/logstash-strange-warning/316676)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 0\ **Last updated:** [October 15, 2022, 9:50am UTC](https://discuss.elastic.co/t/logstash-strange-warning/316676 "2022-10-15T09:50:55Z")
\[2022-10-15T09:46:37,901\]\[WARN \]\[logstash.outputs.elasticsearch\]\[prima\] Elasticsearch Output configured with ecs\_compatibility =\> v8, which resolved to an UNRELEASED preview of version 8.0.0 of the Elastic Common Schema.… --- ## [Highlight behaviour](https://discuss.elastic.co/t/highlight-behaviour/199354)
**Author:** [@Gowd](https://discuss.elastic.co/u/Gowd)\ **Replies:** 0\ **Last updated:** [September 13, 2019, 3:51am UTC](https://discuss.elastic.co/t/highlight-behaviour/199354 "2019-09-13T03:51:45Z")
Referring to https://www.elastic.co/guide/en/elasticsearch//reference/current/search-request-body.html#request-body-search-highlighting The note says, Highlighters don’t reflect the boolean logic of a query when extr… --- ## [Visualizing multi-valued field in kibana using terms aggregation](https://discuss.elastic.co/t/visualizing-multi-valued-field-in-kibana-using-terms-aggregation/153710)
**Author:** [@sam5](https://discuss.elastic.co/u/sam5)\ **Replies:** 1\ **Last updated:** [October 24, 2018, 12:38pm UTC](https://discuss.elastic.co/t/visualizing-multi-valued-field-in-kibana-using-terms-aggregation/153710 "2018-10-24T12:38:37Z")
Hi, I have multi-valued key "tags" as below. { "\_source": { "tags": "\["aaa" , "bbb", "ccc"\]", "message": { "test1": "asdasd", "test2": "ddddd", } } I need to visualize the above multi-valued key in kibana to se… --- ## [How to convert format "yyyy-MM-dd HH:mm:ss in logstash?](https://discuss.elastic.co/t/how-to-convert-format-yyyy-mm-dd-hhss-in-logstash/252005)
**Author:** [@pamiers](https://discuss.elastic.co/u/pamiers)\ **Replies:** 2\ **Last updated:** [October 15, 2020, 2:28am UTC](https://discuss.elastic.co/t/how-to-convert-format-yyyy-mm-dd-hhss-in-logstash/252005 "2020-10-15T02:28:12Z")
I fetch the data through Oracle, and the database has a field updated\_at in the format "yyyy-MM-dd HH:mm:ss". However, it has been automatically changed to ISO8601 format in logstash. So I try to change the format "yyyy-… --- ## [Creation of new nested object in Ruby Filter yields no object in ElasticSearch](https://discuss.elastic.co/t/creation-of-new-nested-object-in-ruby-filter-yields-no-object-in-elasticsearch/180575)
**Author:** [@ben.dixon](https://discuss.elastic.co/u/ben.dixon)\ **Replies:** 2\ **Last updated:** [May 13, 2019, 2:55pm UTC](https://discuss.elastic.co/t/creation-of-new-nested-object-in-ruby-filter-yields-no-object-in-elasticsearch/180575 "2019-05-13T14:55:28Z")
I've got a logstash pipeline that takes discrete log trace events and writes them to a trace-oriented document in ElasticSearch. Currently I had been storing only the timestamp of the event in an array field in the docum… --- ## [ML job state "failed"](https://discuss.elastic.co/t/ml-job-state-failed/170529)
**Author:** [@Ant](https://discuss.elastic.co/u/Ant)\ **Replies:** 2\ **Last updated:** [March 4, 2019, 11:27am UTC](https://discuss.elastic.co/t/ml-job-state-failed/170529 "2019-03-04T11:27:35Z")
I have a single node cluster used for testing which when I restart it all the ML jobs "job status" go to failed. I have tried to stop the datafeed before restarting it but this made no difference and to get the job going… --- ## [How to split JSON nested arrays?](https://discuss.elastic.co/t/how-to-split-json-nested-arrays/127976)
**Author:** [@MrFrost](https://discuss.elastic.co/u/MrFrost)\ **Replies:** 2\ **Last updated:** [April 16, 2018, 7:15am UTC](https://discuss.elastic.co/t/how-to-split-json-nested-arrays/127976 "2018-04-16T07:15:47Z")
Hello, I have quite a problem in attempt to split tags below is what I have: message: {"fields":{"value":9936},"name":"sqlserver\_performance","tags":{"counter":"Log File(s) Size (KB)","host":"WIN","instance":"Total","… --- ## [Routing events to specific workers](https://discuss.elastic.co/t/routing-events-to-specific-workers/72363)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 2\ **Last updated:** [January 22, 2017, 5:15am UTC](https://discuss.elastic.co/t/routing-events-to-specific-workers/72363 "2017-01-22T05:15:17Z")
In case Logstash runs with multiple pipeline workers, events are handed out to each worker in turn as they get available. Certain plugins (e.g. such as aggregate but also a few others doing some in-memory caching) requir… --- ## [Logstash redis input thread](https://discuss.elastic.co/t/logstash-redis-input-thread/59278)
**Author:** [@zpp](https://discuss.elastic.co/u/zpp)\ **Replies:** 2\ **Last updated:** [August 31, 2016, 1:03am UTC](https://discuss.elastic.co/t/logstash-redis-input-thread/59278 "2016-08-31T01:03:05Z")
Referring to this article which talks about how to increase throughput by adjusting the redis input thread and batch size parameters, will this multi-threading (i.e. if I configure thread to \>1) affect the functionality… --- ## [Tribe node compatibility](https://discuss.elastic.co/t/tribe-node-compatibility/32015)
**Author:** [@Ievgen](https://discuss.elastic.co/u/Ievgen)\ **Replies:** 2\ **Last updated:** [October 12, 2015, 10:52pm UTC](https://discuss.elastic.co/t/tribe-node-compatibility/32015 "2015-10-12T22:52:36Z")
Hi, Our solution relies on a tribe nodes to provide a federated search across multiple ES clusters. Now, it is not always possible to keep all ES clusters on the same version all the time, some production islands migh… --- ## [ES 0.90, disable\_delete\_all\_indices](https://discuss.elastic.co/t/es-0-90-disable-delete-all-indices/606)
**Author:** [@Norberto\_Meijome](https://discuss.elastic.co/u/Norberto_Meijome)\ **Replies:** 2\ **Last updated:** [May 14, 2015, 12:38am UTC](https://discuss.elastic.co/t/es-0-90-disable-delete-all-indices/606 "2015-05-14T00:38:35Z")
Hi everyone, I have the following snippet in my elasticsearch.yaml action: disable\_delete\_all\_indices: true is there a way to apply this via the API without restarting the node ? I couldn't find any reference to… --- ## [Elastic search S3 backup speed](https://discuss.elastic.co/t/elastic-search-s3-backup-speed/22686)
**Author:** [@Alejandro\_Calderon](https://discuss.elastic.co/u/Alejandro_Calderon)\ **Replies:** 2\ **Last updated:** [March 19, 2015, 3:15pm UTC](https://discuss.elastic.co/t/elastic-search-s3-backup-speed/22686 "2015-03-19T15:15:48Z")
Hello, I am using "elasticsearch-cloud-aws" to create backups for my cluster in S3, but the backups are taking too long to finish, by using cloud watch i am seeing an average of of 760 MB/minute of network out in… --- ## [What's coming in Elastic Workplace Search 8.2?](https://discuss.elastic.co/t/whats-coming-in-elastic-workplace-search-8-2/302659)
**Author:** [@catmanjan](https://discuss.elastic.co/u/catmanjan)\ **Replies:** 5\ **Last updated:** [May 3, 2022, 4:18am UTC](https://discuss.elastic.co/t/whats-coming-in-elastic-workplace-search-8-2/302659 "2022-05-03T04:18:11Z")
I've heard some rumors and I want to know, whats coming in 8.2? Are AppSearch and Workplace Search being merged in any way? Are any new connectors coming? If so, which? --- ## [Message Parsing](https://discuss.elastic.co/t/message-parsing/256572)
**Author:** [@droidus](https://discuss.elastic.co/u/droidus)\ **Replies:** 5\ **Last updated:** [December 1, 2020, 1:32pm UTC](https://discuss.elastic.co/t/message-parsing/256572 "2020-12-01T13:32:25Z")
Here is what my logstash output looks like: output { elasticsearch { index =\> "%{\[@metadata\]\[beat\]}" hosts =\> "192.168.0.103" } } Logstash errors are as follows: \[2020-11-18T13:08:12,824\]\[WARN \]\[logstash.c… --- ## [Cant start logstash](https://discuss.elastic.co/t/cant-start-logstash/101999)
**Author:** [@111126](https://discuss.elastic.co/u/111126)\ **Replies:** 5\ **Last updated:** [September 28, 2017, 10:17am UTC](https://discuss.elastic.co/t/cant-start-logstash/101999 "2017-09-28T10:17:02Z")
\[ERROR\]\[logstash.agent \] Cannot create pipeline {:reason=\>"Cannot evaluate${DATA}. Environment variableDATAis not set and there is no default value given."} I dont understand this error and I dont know what is it ${DATA… --- ## [Failed to accept a connection](https://discuss.elastic.co/t/failed-to-accept-a-connection/37338)
**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\ **Replies:** 5\ **Last updated:** [December 22, 2015, 12:47pm UTC](https://discuss.elastic.co/t/failed-to-accept-a-connection/37338 "2015-12-22T12:47:18Z")
Hi, when I am running elasticsearch along with around 10 logstash config files . I am getting an error \> Failed to accept a connection. java.io.IOException: Too many open files and elasticsearch stops running afte… --- ## [ELK Product Inquiry!](https://discuss.elastic.co/t/elk-product-inquiry/27486)
**Author:** [@sreeram](https://discuss.elastic.co/u/sreeram)\ **Replies:** 5\ **Last updated:** [August 17, 2015, 10:19am UTC](https://discuss.elastic.co/t/elk-product-inquiry/27486 "2015-08-17T10:19:12Z")
Hi, I am writing to inquire about ELK for centralized logging implementation in production environment. We have tested ELK in development environment and We're very much interested in implementing ELK in productio… --- ## [Bulk Observable giving refresh error on inserting documents](https://discuss.elastic.co/t/bulk-observable-giving-refresh-error-on-inserting-documents/319726)
**Author:** [@ali\_haider](https://discuss.elastic.co/u/ali_haider)\ **Replies:** 3\ **Last updated:** [November 30, 2022, 9:01am UTC](https://discuss.elastic.co/t/bulk-observable-giving-refresh-error-on-inserting-documents/319726 "2022-11-30T09:01:06Z")
Hi, I am using Elastic Cloud Elastic Stack version : 7.17 NEST Nuget Package : 7.17 I am consuming bulk Observable indexing with and trying to insert records in bulk and facing the following error The Exception mes… --- ## [Controls still not showing all possibilities](https://discuss.elastic.co/t/controls-still-not-showing-all-possibilities/220616)
**Author:** [@\_Louw](https://discuss.elastic.co/u/_Louw)\ **Replies:** 3\ **Last updated:** [February 28, 2020, 12:05am UTC](https://discuss.elastic.co/t/controls-still-not-showing-all-possibilities/220616 "2020-02-28T00:05:58Z")
I ran into this post and this post about the issue of the controls visualization not showing all possible values. I have a lot of documents in my index, but not many distinct values in the desired field: "aggregations"… --- ## [Getting Inconsistent Results from subsequent queries when specifying own cache key for terms lookup filters](https://discuss.elastic.co/t/getting-inconsistent-results-from-subsequent-queries-when-specifying-own-cache-key-for-terms-lookup-filters/32400)
**Author:** [@pmichel](https://discuss.elastic.co/u/pmichel)\ **Replies:** 3\ **Last updated:** [February 23, 2017, 2:07pm UTC](https://discuss.elastic.co/t/getting-inconsistent-results-from-subsequent-queries-when-specifying-own-cache-key-for-terms-lookup-filters/32400 "2017-02-23T14:07:08Z")
Looking for a little guidance/suggestions on how to debug an issue I'm having. I'm performing a non-trivial search and each time I execute the same search, I get back one of two results. One result involves 3 hits and … --- ## [Can't parse field](https://discuss.elastic.co/t/cant-parse-field/26557)
**Author:** [@Smasell](https://discuss.elastic.co/u/Smasell)\ **Replies:** 3\ **Last updated:** [August 11, 2015, 5:26pm UTC](https://discuss.elastic.co/t/cant-parse-field/26557 "2015-08-11T17:26:38Z")
Hey, I have message: "message": "\[Fri Jul 24 23:34:09 2015\] \[error\] \[client 217.118.78.107\] device-model=Fly+IQ4415+Quad&ram=456&build-type=etc1", All I want is to parse 3 fields: "device\_model": "Fly IQ4415 Quad" "… --- ## [Grokparse failure - but grokdebugger works](https://discuss.elastic.co/t/grokparse-failure-but-grokdebugger-works/280)
**Author:** [@jayem](https://discuss.elastic.co/u/jayem)\ **Replies:** 3\ **Last updated:** [May 7, 2015, 10:43am UTC](https://discuss.elastic.co/t/grokparse-failure-but-grokdebugger-works/280 "2015-05-07T10:43:48Z")
hi all I have the following log line: {"rule":{"level":12,"comment":"apache error tagged by modsecurity","sidid":130401},"location":"(cli-git) 52.16.98.219-\>/var/log/apache2/error.log","full\_log":"\[Tue May 05 09:09:08… --- ## [Logstash as a Statefulset in Kubernetes - File Input and duplicated logs](https://discuss.elastic.co/t/logstash-as-a-statefulset-in-kubernetes-file-input-and-duplicated-logs/353162)
**Author:** [@veramendi](https://discuss.elastic.co/u/veramendi)\ **Replies:** 6\ **Last updated:** [February 13, 2024, 1:52pm UTC](https://discuss.elastic.co/t/logstash-as-a-statefulset-in-kubernetes-file-input-and-duplicated-logs/353162 "2024-02-13T13:52:06Z")
Hello, I am trying to deploy a multiple pod logstash Statefulset on a kubernetes cluster using the Input File type. It looks like each pod is reading the same logs from the logfile placed on a PVC, and therefore we are… --- ## [7.16.1 - All beats docs in Discover had unknown field and value as json](https://discuss.elastic.co/t/7-16-1-all-beats-docs-in-discover-had-unknown-field-and-value-as-json/292017)
**Author:** [@Zabulon](https://discuss.elastic.co/u/Zabulon)\ **Replies:** 6\ **Last updated:** [December 15, 2021, 6:26pm UTC](https://discuss.elastic.co/t/7-16-1-all-beats-docs-in-discover-had-unknown-field-and-value-as-json/292017 "2021-12-15T18:26:46Z")
Hi, Yeserday, I upgraded one of our cluster from 7.13.4 to 7.16.1. When I'm going to discover pane and choose a beat index, almost all field show as 'unknown field' and the values are showing as JSON. The other clus… --- ## [Dynamic log file updated automatically](https://discuss.elastic.co/t/dynamic-log-file-updated-automatically/205092)
**Author:** [@theo1991](https://discuss.elastic.co/u/theo1991)\ **Replies:** 6\ **Last updated:** [October 30, 2019, 8:38am UTC](https://discuss.elastic.co/t/dynamic-log-file-updated-automatically/205092 "2019-10-30T08:38:52Z")
Hello, My problem is that I have a dynamic file with log entries, and there're changing always. For example : a ticket with an id (never change) and a number of events, but this number can grow every minutes. Is there… --- ## [Logstash sending json written by Java](https://discuss.elastic.co/t/logstash-sending-json-written-by-java/187583)
**Author:** [@nhbala](https://discuss.elastic.co/u/nhbala)\ **Replies:** 6\ **Last updated:** [June 26, 2019, 3:35pm UTC](https://discuss.elastic.co/t/logstash-sending-json-written-by-java/187583 "2019-06-26T15:35:33Z")
I currently have code that writes a json array to a file. However, logstash only seems to attempt to parse it if I manually go in and touch the file myself, rather than take it in after the initial writing to the file. H… --- ## [Kibana plugin development inspect](https://discuss.elastic.co/t/kibana-plugin-development-inspect/212244)
**Author:** [@McKittrick\_Kaminski](https://discuss.elastic.co/u/McKittrick_Kaminski)\ **Replies:** 3\ **Last updated:** [December 18, 2019, 8:22pm UTC](https://discuss.elastic.co/t/kibana-plugin-development-inspect/212244 "2019-12-18T20:22:11Z")
So I'm trying to debug a plugin thats getting an error, but I'm having trouble launching Kibana with inspection and connecting to it. I've seen in the contributing docs that I can use yarn debug to launch kbn with debug… [Previous page](https://discuss.elastic.co/top.md?page=1337&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1339&per_page=50&period=all)