# Top

**URL:** https://discuss.elastic.co/top.md?page=1339&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1340

---

## [Error: Limit of total fields \[1000\] has been exceeded but index limit is higher](https://discuss.elastic.co/t/error-limit-of-total-fields-1000-has-been-exceeded-but-index-limit-is-higher/350103)

<div class="topic-metadata">

**Author:** [@MColeman](https://discuss.elastic.co/u/MColeman)\
**Replies:** 7\
**Last updated:** [January 2, 2024, 3:00pm UTC](https://discuss.elastic.co/t/error-limit-of-total-fields-1000-has-been-exceeded-but-index-limit-is-higher/350103 "2024-01-02T15:00:37Z")

</div>

I'm re-indexing some data from our old cluster into a new one. I pre-created my index (logstash-2023.10.02) and changed the total field mappings to 4000, the same as the old index on the old host. If I look at the new i…

---

## [Ajout d'une colonne avec Logstash](https://discuss.elastic.co/t/ajout-dune-colonne-avec-logstash/232846)

<div class="topic-metadata">

**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\
**Replies:** 7\
**Last updated:** [May 18, 2020, 1:06pm UTC](https://discuss.elastic.co/t/ajout-dune-colonne-avec-logstash/232846 "2020-05-18T13:06:16Z")

</div>

Bonjour, J'utilise Logstash et file beat pour l'ingestion de mon fichiers CSV dans Elastisearch: Est-il possible d'ajouter une colonne date de fraicheur en utilisant Logstash: comme ci dissous:

---

## [Filebeat - ERROR registrar/registrar.go:374](https://discuss.elastic.co/t/filebeat-error-registrar-registrar-go-374/191878)

<div class="topic-metadata">

**Author:** [@bizomb](https://discuss.elastic.co/u/bizomb)\
**Replies:** 1\
**Last updated:** [July 25, 2019, 5:37pm UTC](https://discuss.elastic.co/t/filebeat-error-registrar-registrar-go-374/191878 "2019-07-25T17:37:04Z")

</div>

When I run filebeat setup when processing the files I get error about the registry. Please assist on why and how to fix the error in the log file. ERROR registrar/registrar.go:374 2019-07-23T10:26:55.875-0700 ERR…

---

## [Elastic search has problem with the java](https://discuss.elastic.co/t/elastic-search-has-problem-with-the-java/183265)

<div class="topic-metadata">

**Author:** [@Navaneetha\_Krishnan](https://discuss.elastic.co/u/Navaneetha_Krishnan)\
**Replies:** 1\
**Last updated:** [May 29, 2019, 9:40am UTC](https://discuss.elastic.co/t/elastic-search-has-problem-with-the-java/183265 "2019-05-29T09:40:06Z")

</div>

Error: Could not find or load main class org.elasticsearch.tools.JavaVersionChecker Elasticsearch requires at least Java 8 but your Java version from C:/Program Files/Java/jdk1.8.0\_201/bin/java does not meet this requir…

---

## [Unable to get files from filebeat to kafka](https://discuss.elastic.co/t/unable-to-get-files-from-filebeat-to-kafka/178963)

<div class="topic-metadata">

**Author:** [@massiveashok](https://discuss.elastic.co/u/massiveashok)\
**Replies:** 7\
**Last updated:** [April 30, 2019, 12:51pm UTC](https://discuss.elastic.co/t/unable-to-get-files-from-filebeat-to-kafka/178963 "2019-04-30T12:51:36Z")

</div>

Am new in using filebeat 7.0.0 and populate log files to kafka 2.10. ###################### Filebeat Configuration Example #=========================== Filebeat inputs ============================= filebeat.inputs: E…

---

## [Beats and logstash](https://discuss.elastic.co/t/beats-and-logstash/171402)

<div class="topic-metadata">

**Author:** [@Farhan\_Umer](https://discuss.elastic.co/u/Farhan_Umer)\
**Replies:** 7\
**Last updated:** [March 9, 2019, 2:16am UTC](https://discuss.elastic.co/t/beats-and-logstash/171402 "2019-03-09T02:16:19Z")

</div>

Hi, I have 2 logstash files i want to create indexes with specific names such as IIS-Log-\<Today's Date\> and windows-eventlogs-\<Today's Date\>. I am using logstash with filebeat and winlogbeat. Right now everything is goi…

---

## [How to remove \\ in logstash](https://discuss.elastic.co/t/how-to-remove-in-logstash/157504)

<div class="topic-metadata">

**Author:** [@arun5635](https://discuss.elastic.co/u/arun5635)\
**Replies:** 7\
**Last updated:** [November 22, 2018, 9:01am UTC](https://discuss.elastic.co/t/how-to-remove-in-logstash/157504 "2018-11-22T09:01:15Z")

</div>

Hi All I am new to the Logstash, I need to remove \\ from request and Http\_method request": ""GET https://www.docsapp.in:443/dashboardapp/forward/0/content?patientId=6009237 HTTP/2.0"" http\_method": ""GET" I want lik…

---

## [What is the difference between \*:logstash-\* & logstash-\*](https://discuss.elastic.co/t/what-is-the-difference-between-logstash-logstash/106115)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 7\
**Last updated:** [November 2, 2017, 8:05am UTC](https://discuss.elastic.co/t/what-is-the-difference-between-logstash-logstash/106115 "2017-11-02T08:05:57Z")

</div>

Hi Guys, Wondering what is the difference between creating index pattern :logstash- and logstash-\* other than index names starting with any:logstatsh? I mean not sure if there is any other significance?

---

## [Logstash's OutOfMemoryError](https://discuss.elastic.co/t/logstashs-outofmemoryerror/45319)

<div class="topic-metadata">

**Author:** [@lester015](https://discuss.elastic.co/u/lester015)\
**Replies:** 1\
**Last updated:** [March 29, 2016, 3:07am UTC](https://discuss.elastic.co/t/logstashs-outofmemoryerror/45319 "2016-03-29T03:07:03Z")

</div>

hi everyone, after I execute logstash orders the console show error as bellows: ""Ruby-0-Thread-6: /usr/pds/logstash-2.2.2/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-2.5.1-java/lib/logstash/outputs…

---

## [When will the patch be available for CVE-2023-38552/39331/39332/44487 upgrading nodejs \>= 18.18.2](https://discuss.elastic.co/t/when-will-the-patch-be-available-for-cve-2023-38552-39331-39332-44487-upgrading-nodejs-18-18-2/346356)

<div class="topic-metadata">

**Author:** [@stanislasm](https://discuss.elastic.co/u/stanislasm)\
**Replies:** 8\
**Last updated:** [November 14, 2023, 9:58pm UTC](https://discuss.elastic.co/t/when-will-the-patch-be-available-for-cve-2023-38552-39331-39332-44487-upgrading-nodejs-18-18-2/346356 "2023-11-14T21:58:24Z")

</div>

Hello, When will the fix for CVE-2023-38552/39331/39332/44487 upgrading nodejs \>= 18.18.2 be available in the Kibana 8.10.x version? Thanks

---

## [Problems getting started with Filebeat and Elasticsearch?](https://discuss.elastic.co/t/problems-getting-started-with-filebeat-and-elasticsearch/229974)

<div class="topic-metadata">

**Author:** [@Forcep](https://discuss.elastic.co/u/Forcep)\
**Replies:** 8\
**Last updated:** [May 4, 2020, 8:13am UTC](https://discuss.elastic.co/t/problems-getting-started-with-filebeat-and-elasticsearch/229974 "2020-05-04T08:13:36Z")

</div>

Hi, Im running the following on a local computer for test : Elastcisserach 7.5.1 Kibana 7.5.1 Filebeat 7.5.1 Its using HTTPS connection with ignor cert errors. I have followed the guide on how ti install filebeat wit…

---

## [Skewed bars on a graph](https://discuss.elastic.co/t/skewed-bars-on-a-graph/206943)

<div class="topic-metadata">

**Author:** [@Anne\_Kim](https://discuss.elastic.co/u/Anne_Kim)\
**Replies:** 8\
**Last updated:** [December 5, 2019, 3:16pm UTC](https://discuss.elastic.co/t/skewed-bars-on-a-graph/206943 "2019-12-05T15:16:13Z")

</div>

Hello! There is a graph where each value of X-axis is splited onto 3 bars. When creating the visualization I noticed that each third bar is located above its "neightboring" right value. I mean that the 3rd bar of the 1s…

---

## [Winlogbeat keywords filtering issue in Logstash](https://discuss.elastic.co/t/winlogbeat-keywords-filtering-issue-in-logstash/127278)

<div class="topic-metadata">

**Author:** [@sru](https://discuss.elastic.co/u/sru)\
**Replies:** 8\
**Last updated:** [April 11, 2018, 8:26am UTC](https://discuss.elastic.co/t/winlogbeat-keywords-filtering-issue-in-logstash/127278 "2018-04-11T08:26:37Z")

</div>

Hello, I'm strugling with filtering (drop) of events with certain keywords delivered from winlogbeat (6.2.1 / 6.2.3) to logstash (6.2.1). Events with this pattern should be droped in Logstash and I know, it would be be…

---

## [Filewatch.tailmode.handlers.createinitial open\_file OPEN\_WARN\_INTERVAL is 300](https://discuss.elastic.co/t/filewatch-tailmode-handlers-createinitial-open-file-open-warn-interval-is-300/138175)

<div class="topic-metadata">

**Author:** [@usrjph](https://discuss.elastic.co/u/usrjph)\
**Replies:** 0\
**Last updated:** [July 2, 2018, 10:42am UTC](https://discuss.elastic.co/t/filewatch-tailmode-handlers-createinitial-open-file-open-warn-interval-is-300/138175 "2018-07-02T10:42:19Z")

</div>

Hi, Logstash has started outputting the following message sometimes: \[2018-07-02T\*\*10:19\*\*:11,155\]\[WARN \]\[filewatch.tailmode.handlers.createinitial\] open\_file OPEN\_WARN\_INTERVAL is '300' ... \[20…

---

## [Timestamp is not correct](https://discuss.elastic.co/t/timestamp-is-not-correct/310278)

<div class="topic-metadata">

**Author:** [@BaseSL](https://discuss.elastic.co/u/BaseSL)\
**Replies:** 4\
**Last updated:** [August 22, 2022, 5:32am UTC](https://discuss.elastic.co/t/timestamp-is-not-correct/310278 "2022-08-22T05:32:53Z")

</div>

I have the problem that the time does not match the one in the log file. What can I do about it ? It only occurs with this log file (filebeat). On another system, where Logstash is running, this does not occur. Unfo…

---

## [Autogenerating field names from csv headers](https://discuss.elastic.co/t/autogenerating-field-names-from-csv-headers/258638)

<div class="topic-metadata">

**Author:** [@toucan](https://discuss.elastic.co/u/toucan)\
**Replies:** 4\
**Last updated:** [December 17, 2020, 9:27am UTC](https://discuss.elastic.co/t/autogenerating-field-names-from-csv-headers/258638 "2020-12-17T09:27:07Z")

</div>

Hi, I'm trying to parse CSV files with Logstash. Some of the files have a column called time, others have two columns called time\_from and time\_to (and they have several other columns). Ideally I'd like to have one pipe…

---

## [Kibana Canvas querying](https://discuss.elastic.co/t/kibana-canvas-querying/199593)

<div class="topic-metadata">

**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\
**Replies:** 4\
**Last updated:** [September 17, 2019, 7:11am UTC](https://discuss.elastic.co/t/kibana-canvas-querying/199593 "2019-09-17T07:11:07Z")

</div>

Hi everyone! I have log messages that look like "number.suffix" and the message can have two different suffix values either dn or mt. If message has the same number and both suffix are occurred it means that log message…

---

## [Jackson error on startup of upgraded 5.6 cluster](https://discuss.elastic.co/t/jackson-error-on-startup-of-upgraded-5-6-cluster/137714)

<div class="topic-metadata">

**Author:** [@eswenson](https://discuss.elastic.co/u/eswenson)\
**Replies:** 4\
**Last updated:** [June 29, 2018, 12:50am UTC](https://discuss.elastic.co/t/jackson-error-on-startup-of-upgraded-5-6-cluster/137714 "2018-06-29T00:50:31Z")

</div>

I have a 2.4 cluster that I'm trying to upgrade to 5.6. I've followed the documentation (including making sure clustermigration helper plugin says things are ok) and upon startup of the 5.6 cluster, I get a jackson XML p…

---

## [Question about sizing](https://discuss.elastic.co/t/question-about-sizing/43037)

<div class="topic-metadata">

**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\
**Replies:** 4\
**Last updated:** [February 29, 2016, 8:23pm UTC](https://discuss.elastic.co/t/question-about-sizing/43037 "2016-02-29T20:23:12Z")

</div>

I am using ES in production but I am getting a log of 429 errors when logstash attempts to put data into elasticsearch. My current set is is as follows: 4 logstash nodes pulling data off a redis cluster. These nodes p…

---

## [Can i use NLP (Question answer) on structured data?](https://discuss.elastic.co/t/can-i-use-nlp-question-answer-on-structured-data/352596)

<div class="topic-metadata">

**Author:** [@9d224d4833094bd482cf](https://discuss.elastic.co/u/9d224d4833094bd482cf)\
**Replies:** 6\
**Last updated:** [February 16, 2024, 1:09pm UTC](https://discuss.elastic.co/t/can-i-use-nlp-question-answer-on-structured-data/352596 "2024-02-16T13:09:01Z")

</div>

We are using Elasticsearch database. We are planning to provide global search with lot of filters. Our data is mostly structured and there are built in relationships. Having many filters on global search can create usabi…

---

## [Watcher - Write painless script for looping aggregated buckets](https://discuss.elastic.co/t/watcher-write-painless-script-for-looping-aggregated-buckets/321763)

<div class="topic-metadata">

**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\
**Replies:** 2\
**Last updated:** [December 21, 2022, 3:01pm UTC](https://discuss.elastic.co/t/watcher-write-painless-script-for-looping-aggregated-buckets/321763 "2022-12-21T15:01:10Z")

</div>

Hi, My Watcher condition is giving output as below: Watcher condition Output: { "\_shards": { "total": 1, "failed": 0, "successful": 1, "skipped": 0 }, "hits": { "hit…

---

## [Exporting CSV from save search in dashboard shows blank values](https://discuss.elastic.co/t/exporting-csv-from-save-search-in-dashboard-shows-blank-values/292774)

<div class="topic-metadata">

**Author:** [@Amy\_Peng](https://discuss.elastic.co/u/Amy_Peng)\
**Replies:** 2\
**Last updated:** [December 27, 2021, 6:47am UTC](https://discuss.elastic.co/t/exporting-csv-from-save-search-in-dashboard-shows-blank-values/292774 "2021-12-27T06:47:17Z")

</div>

Hello Team, I was using kibana 7.13.1 and wanted to export CSV from saved search in dashboard. But the exported CSV file only showed timestamp and column fields name but with blank values. I also tried Discover -- ope…

---

## [Can't connect filebeat to logstash on the separate instances](https://discuss.elastic.co/t/cant-connect-filebeat-to-logstash-on-the-separate-instances/241132)

<div class="topic-metadata">

**Author:** [@Denis\_Denis](https://discuss.elastic.co/u/Denis_Denis)\
**Replies:** 2\
**Last updated:** [July 14, 2020, 5:28pm UTC](https://discuss.elastic.co/t/cant-connect-filebeat-to-logstash-on-the-separate-instances/241132 "2020-07-14T17:28:31Z")

</div>

Hello, I'm new with Elastic Stack and currently trying to build logging system with infrastructure type filebeat -\> logstash -\> elastic search -\> kibana. I'm using the separate AWS EC2 instance for logstash, elastic sea…

---

## [Infrastructure dashboard legends not clear](https://discuss.elastic.co/t/infrastructure-dashboard-legends-not-clear/187924)

<div class="topic-metadata">

**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\
**Replies:** 2\
**Last updated:** [July 2, 2019, 9:54pm UTC](https://discuss.elastic.co/t/infrastructure-dashboard-legends-not-clear/187924 "2019-07-02T21:54:50Z")

</div>

Hi Can you please explain what this graph is showing exactly. The legends are not clear to me to what actually they mean. I am referring to the hover over values shown. What does these colors indicate.

---

## [Return Empty URL Scripted Field if fields do not exist](https://discuss.elastic.co/t/return-empty-url-scripted-field-if-fields-do-not-exist/152669)

<div class="topic-metadata">

**Author:** [@craig.wampler](https://discuss.elastic.co/u/craig.wampler)\
**Replies:** 2\
**Last updated:** [October 16, 2018, 10:24pm UTC](https://discuss.elastic.co/t/return-empty-url-scripted-field-if-fields-do-not-exist/152669 "2018-10-16T22:24:33Z")

</div>

I have a scripted field that generates a URL. Example data: { "field1": "foo", "field2": "bar", ... other fields ... } Some records have values for field1/field2, others do not. Scripted Field Info: URL Templ…

---

## [FileBeat file is falling under ignore older Part2](https://discuss.elastic.co/t/filebeat-file-is-falling-under-ignore-older-part2/62920)

<div class="topic-metadata">

**Author:** [@il.bert](https://discuss.elastic.co/u/il.bert)\
**Replies:** 2\
**Last updated:** [October 13, 2016, 12:18pm UTC](https://discuss.elastic.co/t/filebeat-file-is-falling-under-ignore-older-part2/62920 "2016-10-13T12:18:34Z")

</div>

@ruflin my old post has been closed if you reopen it I copy the answer there You're right I pasted the wrong logs, anyway there where nothing usefull in ther, right now I removed all those conf, but FB sizes in memo…

---

## [Logstash count key words in Kafka and increment statsd](https://discuss.elastic.co/t/logstash-count-key-words-in-kafka-and-increment-statsd/34064)

<div class="topic-metadata">

**Author:** [@Chengcheng\_Pei](https://discuss.elastic.co/u/Chengcheng_Pei)\
**Replies:** 2\
**Last updated:** [November 8, 2015, 3:14am UTC](https://discuss.elastic.co/t/logstash-count-key-words-in-kafka-and-increment-statsd/34064 "2015-11-08T03:14:08Z")

</div>

New to logstash. Assume messages in kafka look like: {"key":"val1"} {"key":"val2"} {"key":"val2"} {"key":"val1"} ... Try to count the numbers of val1 and val2 in key field, and increase statsd keys: total.val1 and to…

---

## [Can't get Tile Map working (Kibana 4.1.1, ElasticSearch 2.7.1)](https://discuss.elastic.co/t/cant-get-tile-map-working-kibana-4-1-1-elasticsearch-2-7-1/29602)

<div class="topic-metadata">

**Author:** [@dougdaly](https://discuss.elastic.co/u/dougdaly)\
**Replies:** 2\
**Last updated:** [September 24, 2015, 4:33pm UTC](https://discuss.elastic.co/t/cant-get-tile-map-working-kibana-4-1-1-elasticsearch-2-7-1/29602 "2015-09-24T16:33:05Z")

</div>

Though the Kibana tutorial works fine w/ the Tile Map, my data always gives me a 'no data found' error. The lat/longs are read in ok and the values are valid. Below are the details: The template seems simple enough: cu…

---

## [Trouble enrolling Elastic Agent on Windows 2019](https://discuss.elastic.co/t/trouble-enrolling-elastic-agent-on-windows-2019/360990)

<div class="topic-metadata">

**Author:** [@hcherry](https://discuss.elastic.co/u/hcherry)\
**Replies:** 3\
**Last updated:** [July 8, 2024, 3:11pm UTC](https://discuss.elastic.co/t/trouble-enrolling-elastic-agent-on-windows-2019/360990 "2024-07-08T15:11:07Z")

</div>

Hello - While trying to install and enroll Elastic Agent on a Windows 2019 server, I am getting the following errors. Has anyone seen this before? I am finding no information about a cause or a solution. Thanks in advanc…

---

## [Ingesting large number of files in a directory using logstash](https://discuss.elastic.co/t/ingesting-large-number-of-files-in-a-directory-using-logstash/268168)

<div class="topic-metadata">

**Author:** [@Razeen](https://discuss.elastic.co/u/Razeen)\
**Replies:** 3\
**Last updated:** [March 24, 2021, 8:24pm UTC](https://discuss.elastic.co/t/ingesting-large-number-of-files-in-a-directory-using-logstash/268168 "2021-03-24T20:24:31Z")

</div>

Hi, I have a logstash configuration to ingest large number of json files from a directory. The ingestion works perfectly fine, But for a particular number of json files. For example i pointed the input for a folder wi…

---

## [How to join 2 index using 2 common values](https://discuss.elastic.co/t/how-to-join-2-index-using-2-common-values/234248)

<div class="topic-metadata">

**Author:** [@aannee](https://discuss.elastic.co/u/aannee)\
**Replies:** 3\
**Last updated:** [May 26, 2020, 10:19am UTC](https://discuss.elastic.co/t/how-to-join-2-index-using-2-common-values/234248 "2020-05-26T10:19:55Z")

</div>

Hi, is it possible to join 2 index in elasticsearch? Maybe using query. Or I'm thinking if I could do a logstash pipeline that will query the two index and join them inside the pipeline. First time to face a request lik…

---

## [Logstash logs are read but are not pushed to elasticsearch](https://discuss.elastic.co/t/logstash-logs-are-read-but-are-not-pushed-to-elasticsearch/210319)

<div class="topic-metadata">

**Author:** [@ghimisradu](https://discuss.elastic.co/u/ghimisradu)\
**Replies:** 3\
**Last updated:** [December 4, 2019, 2:28pm UTC](https://discuss.elastic.co/t/logstash-logs-are-read-but-are-not-pushed-to-elasticsearch/210319 "2019-12-04T14:28:47Z")

</div>

I have the following logstash configuration: logstash-configration.confinput { file { codec =\> "json\_lines" path =\> \["/etc/logstash/input.log"\] sincedb\_path =\> "/etc/logstash/dbfil…

---

## [Logstash stopping without any error](https://discuss.elastic.co/t/logstash-stopping-without-any-error/203602)

<div class="topic-metadata">

**Author:** [@Ayden](https://discuss.elastic.co/u/Ayden)\
**Replies:** 3\
**Last updated:** [November 4, 2019, 5:32pm UTC](https://discuss.elastic.co/t/logstash-stopping-without-any-error/203602 "2019-11-04T17:32:02Z")

</div>

Hello, I have two logstash pipelines (in docker containers) running with a jdbc input and elastic output. Both pipelines are set to run with a schedule every 1 minute. My problem is that sometimes the pipelines suddenl…

---

## [Add tag dynamically to create index dynamically](https://discuss.elastic.co/t/add-tag-dynamically-to-create-index-dynamically/164794)

<div class="topic-metadata">

**Author:** [@Roque\_Moyano](https://discuss.elastic.co/u/Roque_Moyano)\
**Replies:** 3\
**Last updated:** [January 18, 2019, 1:40pm UTC](https://discuss.elastic.co/t/add-tag-dynamically-to-create-index-dynamically/164794 "2019-01-18T13:40:43Z")

</div>

Hi , I'm trying to create an index for every application that we have in our company , like : index-app1 , index-app2 , we have a lot of team and every team is owner about theirs apps , so I'm trying that approach so be…

---

## [Performance implications of using mongo id as elastic \_id](https://discuss.elastic.co/t/performance-implications-of-using-mongo-id-as-elastic-id/133731)

<div class="topic-metadata">

**Author:** [@Luke\_Rossy](https://discuss.elastic.co/u/Luke_Rossy)\
**Replies:** 3\
**Last updated:** [May 30, 2018, 4:24pm UTC](https://discuss.elastic.co/t/performance-implications-of-using-mongo-id-as-elastic-id/133731 "2018-05-30T16:24:24Z")

</div>

Hi, i am wondering if there is a performance issue when using a mongodb objectId as the \_id in elasticsearch instead of allowing elastic to autogenerate its own. I am using this to prevent duplicates when syncing, and I…

---

## [Would Kibana preserve dashboards after deleting/recreating same index?](https://discuss.elastic.co/t/would-kibana-preserve-dashboards-after-deleting-recreating-same-index/125668)

<div class="topic-metadata">

**Author:** [@Natalia\_Kuleniuk](https://discuss.elastic.co/u/Natalia_Kuleniuk)\
**Replies:** 3\
**Last updated:** [March 27, 2018, 2:13pm UTC](https://discuss.elastic.co/t/would-kibana-preserve-dashboards-after-deleting-recreating-same-index/125668 "2018-03-27T14:13:32Z")

</div>

Question about Kibana and ElasticSearch: I have index with data, and I created some Kibana Dashboards and Visualization for my index. Everyday, I need to delete all existed data from my index and populate my ES index w…

---

## [Filebeat beta1: Insane memory footprint](https://discuss.elastic.co/t/filebeat-beta1-insane-memory-footprint/61998)

<div class="topic-metadata">

**Author:** [@shog](https://discuss.elastic.co/u/shog)\
**Replies:** 3\
**Last updated:** [October 4, 2016, 1:31pm UTC](https://discuss.elastic.co/t/filebeat-beta1-insane-memory-footprint/61998 "2016-10-04T13:31:03Z")

</div>

Hi, Version: Filebeat beta1 System: CentOS6 I observe an insane memory footprint of filebeat beta1. PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 23818 filebeat 15 -5 3…

---

## [Timeouts - 2 or 3 Nodes](https://discuss.elastic.co/t/timeouts-2-or-3-nodes/49487)

<div class="topic-metadata">

**Author:** [@Garrett\_Johnson](https://discuss.elastic.co/u/Garrett_Johnson)\
**Replies:** 3\
**Last updated:** [May 16, 2016, 7:26pm UTC](https://discuss.elastic.co/t/timeouts-2-or-3-nodes/49487 "2016-05-16T19:26:25Z")

</div>

Received response for a request that has timed out, sent \[0ms\] ago, timed out \[0ms\] ago, action \[cluster:monitor/nodes/info\[n\]\], node I have a 2 and 3 node cluster on ES 2.2.0. On both of those clusters the above erro…

---

## [Upgrading ELK screwed up Marvel nodes monitoring display](https://discuss.elastic.co/t/upgrading-elk-screwed-up-marvel-nodes-monitoring-display/37176)

<div class="topic-metadata">

**Author:** [@maxhyjal](https://discuss.elastic.co/u/maxhyjal)\
**Replies:** 3\
**Last updated:** [December 15, 2015, 1:49am UTC](https://discuss.elastic.co/t/upgrading-elk-screwed-up-marvel-nodes-monitoring-display/37176 "2015-12-15T01:49:26Z")

</div>

After I upgraded ES and LS from 2.0 to 2.1 and Kibana from 4.2.1 to 4.3, everything seems to work fine except nodes monitoring information collected by marvel agents. I used to see hostnames, now I can't tell which is wh…

---

## [Treatment of special characters in elasticsearch](https://discuss.elastic.co/t/treatment-of-special-characters-in-elasticsearch/20897)

<div class="topic-metadata">

**Author:** [@prachicsa](https://discuss.elastic.co/u/prachicsa)\
**Replies:** 3\
**Last updated:** [November 23, 2014, 1:32pm UTC](https://discuss.elastic.co/t/treatment-of-special-characters-in-elasticsearch/20897 "2014-11-23T13:32:24Z")

</div>

I use the following analyzer: curl -XPUT 'http://localhost:9200/sample/' -d ' { "settings" : { "index": { "analysis": { "analyzer": { "default": { "type": "custom", "…

---

## [Problem Watchers Failed Logins Index out of bounds exception Index 0 out of bounds for length 0](https://discuss.elastic.co/t/problem-watchers-failed-logins-index-out-of-bounds-exception-index-0-out-of-bounds-for-length-0/246694)

<div class="topic-metadata">

**Author:** [@SerSSH](https://discuss.elastic.co/u/SerSSH)\
**Replies:** 1\
**Last updated:** [September 16, 2020, 12:30pm UTC](https://discuss.elastic.co/t/problem-watchers-failed-logins-index-out-of-bounds-exception-index-0-out-of-bounds-for-length-0/246694 "2020-09-16T12:30:26Z")

</div>

Hi Experts, Currently I have an error that I have not been able to solve in a watcher, I am making some failed logins, so that when more than 3 attempts are detected per user it is activated and sends a notification by …

---

## [Save PySpark DataFRame to ElasticSEarch index](https://discuss.elastic.co/t/save-pyspark-dataframe-to-elasticsearch-index/244581)

<div class="topic-metadata">

**Author:** [@larryrodrigues](https://discuss.elastic.co/u/larryrodrigues)\
**Replies:** 1\
**Last updated:** [August 12, 2020, 5:08pm UTC](https://discuss.elastic.co/t/save-pyspark-dataframe-to-elasticsearch-index/244581 "2020-08-12T17:08:15Z")

</div>

Using Spark 2.6 and elasticsearch 6.8 I am trying to save a PySpark DataFrame to elasticsearch index using the external library: df\_to\_save.write.format('org.elasticsearch.spark.sql').option('es.resource', '%s/%s' % ('…

---

## [LoadError: no such file to load -- bundler](https://discuss.elastic.co/t/loaderror-no-such-file-to-load-bundler/229081)

<div class="topic-metadata">

**Author:** [@csaket](https://discuss.elastic.co/u/csaket)\
**Replies:** 1\
**Last updated:** [April 21, 2020, 4:07pm UTC](https://discuss.elastic.co/t/loaderror-no-such-file-to-load-bundler/229081 "2020-04-21T16:07:28Z")

</div>

I am running Fedora 31 and have just installed logstash 7.6.2 When I try to install a plugin I get this error LoadError: no such file to load -- bundler sudo DEBUG=1 /usr/share/logstash/bin/logstash-plugin install --lo…

---

## [Indexing JSON with nested fields](https://discuss.elastic.co/t/indexing-json-with-nested-fields/161941)

<div class="topic-metadata">

**Author:** [@Buntu\_Dev](https://discuss.elastic.co/u/Buntu_Dev)\
**Replies:** 1\
**Last updated:** [January 2, 2019, 4:38pm UTC](https://discuss.elastic.co/t/indexing-json-with-nested-fields/161941 "2019-01-02T16:38:55Z")

</div>

I've a nested json data with nested fields that I want to extract and construct a Scala Map. Heres the sample JSON: "nested\_field": \[ { "airport": "sfo", "score": 1.0 }, { "airport": "phx", "score…

---

## [Need help with 403 errors Logstash 6.2.4 with X-Pack](https://discuss.elastic.co/t/need-help-with-403-errors-logstash-6-2-4-with-x-pack/132876)

<div class="topic-metadata">

**Author:** [@jn1965](https://discuss.elastic.co/u/jn1965)\
**Replies:** 1\
**Last updated:** [May 24, 2018, 7:29pm UTC](https://discuss.elastic.co/t/need-help-with-403-errors-logstash-6-2-4-with-x-pack/132876 "2018-05-24T19:29:54Z")

</div>

Everythign was working fine until I installed X-Pack on a remote logstash server. Now I am geting this error: \[2018-05-22T18:30:12,500\]\[ERROR\]\[logstash.config.sourceloader\] Could not fetch all the sources {:exception=\>L…

---

## [Understanding elasticsearch and index creation](https://discuss.elastic.co/t/understanding-elasticsearch-and-index-creation/116376)

<div class="topic-metadata">

**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\
**Replies:** 1\
**Last updated:** [January 21, 2018, 9:48am UTC](https://discuss.elastic.co/t/understanding-elasticsearch-and-index-creation/116376 "2018-01-21T09:48:05Z")

</div>

I currently use Elasticsearch with a normalized data model. But now I am presented with a project, with other characteristics, and I can not see without it or how to work with it. The problem is that there is no fixed f…

---

## [Delete data in Elasticsearch Automatically](https://discuss.elastic.co/t/delete-data-in-elasticsearch-automatically/95968)

<div class="topic-metadata">

**Author:** [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Replies:** 1\
**Last updated:** [August 5, 2017, 8:46am UTC](https://discuss.elastic.co/t/delete-data-in-elasticsearch-automatically/95968 "2017-08-05T08:46:08Z")

</div>

Is it possible to delete the indexed data once in 30 days automatically ? As i dont need my old data after 30 days(for certain amount of time)

---

## [Grok to parse SAP NetWeaver access logs](https://discuss.elastic.co/t/grok-to-parse-sap-netweaver-access-logs/79664)

<div class="topic-metadata">

**Author:** [@zhmq0124v](https://discuss.elastic.co/u/zhmq0124v)\
**Replies:** 1\
**Last updated:** [March 23, 2017, 2:02am UTC](https://discuss.elastic.co/t/grok-to-parse-sap-netweaver-access-logs/79664 "2017-03-23T02:02:06Z")

</div>

Hi, I am trying to parse the following log but failed, as you can see first 12 lines are not needed and from line 12 it's CATALINA\_DATESTAMP, client ip, http verb, URL, http version, http code, data size and response ti…

---

## [IO processing speed requirements for Elastic product line](https://discuss.elastic.co/t/io-processing-speed-requirements-for-elastic-product-line/310108)

<div class="topic-metadata">

**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\
**Replies:** 5\
**Last updated:** [July 20, 2022, 9:47am UTC](https://discuss.elastic.co/t/io-processing-speed-requirements-for-elastic-product-line/310108 "2022-07-20T09:47:41Z")

</div>

We are considering moving Elasticsearch from vsan to fnas or synology nas. We are thinking that the IO processing speed will be reduced, but how much is the impact? Or are there any hardware requirements for IO process…

---

## [Unconfined services with Elasticsearch](https://discuss.elastic.co/t/unconfined-services-with-elasticsearch/260151)

<div class="topic-metadata">

**Author:** [@redplastic](https://discuss.elastic.co/u/redplastic)\
**Replies:** 5\
**Last updated:** [January 14, 2021, 4:01pm UTC](https://discuss.elastic.co/t/unconfined-services-with-elasticsearch/260151 "2021-01-14T16:01:17Z")

</div>

I'm attempting to use Elasticsearch on Centos but have some concerns over the unconfined java and controller services that Elasticsearch uses. With the system's initial blocking of unconfined services due to security con…

[Previous page](https://discuss.elastic.co/top.md?page=1338&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1340&per_page=50&period=all)
