# Top **URL:** https://discuss.elastic.co/top.md?page=1353&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1354 --- ## [Filebeat include\_lines issue](https://discuss.elastic.co/t/filebeat-include-lines-issue/213211)
**Author:** [@RunningSmurf](https://discuss.elastic.co/u/RunningSmurf)\ **Replies:** 3\ **Last updated:** [December 30, 2019, 9:12pm UTC](https://discuss.elastic.co/t/filebeat-include-lines-issue/213211 "2019-12-30T21:12:39Z")
Hello, I have Filebeat installed on a Windows server. I configured it to read logs from SQL Server. I can see that all lines are individually passed to ES, as I can see them in Kibana. My goal is to only send the lin… --- ## [To cluster or not to cluster?](https://discuss.elastic.co/t/to-cluster-or-not-to-cluster/181724)
**Author:** [@nandrik](https://discuss.elastic.co/u/nandrik)\ **Replies:** 3\ **Last updated:** [May 21, 2019, 3:55pm UTC](https://discuss.elastic.co/t/to-cluster-or-not-to-cluster/181724 "2019-05-21T15:55:51Z")
Hi, I have the following setup with two apps running on two servers, both on the same subnet: app\_1 \> filebeat\_1 \> logstash\_1 \> elasticsearch\_1 (es\_1) \> kibana\_1 app\_2 \> filebeat\_2 \> logstash\_2 \> elasticsearch\_2 (es\_2)… --- ## [Scroll vs search\_after memory](https://discuss.elastic.co/t/scroll-vs-search-after-memory/173765)
**Author:** [@xodn0812](https://discuss.elastic.co/u/xodn0812)\ **Replies:** 3\ **Last updated:** [March 25, 2019, 3:10pm UTC](https://discuss.elastic.co/t/scroll-vs-search-after-memory/173765 "2019-03-25T15:10:05Z")
Questions related to elasticsearch search. In an instance using 4Gb memory, elasticsearch dies with OOM when querying data over 4Gb with scroll API, What about search\_arter ?? Would not it be okay to search 50Gb for s… --- ## [Manually run kibana request or use kibana API?](https://discuss.elastic.co/t/manually-run-kibana-request-or-use-kibana-api/106337)
**Author:** [@nsur1](https://discuss.elastic.co/u/nsur1)\ **Replies:** 3\ **Last updated:** [November 3, 2017, 4:15pm UTC](https://discuss.elastic.co/t/manually-run-kibana-request-or-use-kibana-api/106337 "2017-11-03T16:15:03Z")
I have a visualization created in Kibana and I wanted to know if I can take the request that kibana sends to elastic search and run that request manually? Currently when I do that, elasticsearch throws exceptions. I woul… --- ## [Making fields aggregate-able](https://discuss.elastic.co/t/making-fields-aggregate-able/65296)
**Author:** [@midget2000x](https://discuss.elastic.co/u/midget2000x)\ **Replies:** 3\ **Last updated:** [November 16, 2016, 2:17am UTC](https://discuss.elastic.co/t/making-fields-aggregate-able/65296 "2016-11-16T02:17:40Z")
I'm just digging into aggregations and in my testing, I'm running into this problem: "Fielddata is disabled on text fields by default. Set fielddata=true on \[skuid\] in order to load fielddata in memory by uninverting t… --- ## [Courier Fetch Error while using shield authentication](https://discuss.elastic.co/t/courier-fetch-error-while-using-shield-authentication/57755)
**Author:** [@Sivashankar](https://discuss.elastic.co/u/Sivashankar)\ **Replies:** 3\ **Last updated:** [August 12, 2016, 7:24am UTC](https://discuss.elastic.co/t/courier-fetch-error-while-using-shield-authentication/57755 "2016-08-12T07:24:22Z")
Hi Experts, I am facing an issue while using trying to assign a role for a specific user. I am using window AD for authenticating the users. this is my roles.yml file claims\_read: indices: 'claims': pri… --- ## [Unable to install watcher](https://discuss.elastic.co/t/unable-to-install-watcher/56568)
**Author:** [@pchernik](https://discuss.elastic.co/u/pchernik)\ **Replies:** 3\ **Last updated:** [July 27, 2016, 10:55pm UTC](https://discuss.elastic.co/t/unable-to-install-watcher/56568 "2016-07-27T22:55:17Z")
While trying to install the watcher plugin for elasticsearch 2.3.4 I get the following: =-\>bin/plugin install elasticsearch/watcher/latest -\> Installing elasticsearch/watcher/latest... Trying https://download.elastic.c… --- ## [ElasticSearch cluster unreachable every night between 00.00 and 02.00](https://discuss.elastic.co/t/elasticsearch-cluster-unreachable-every-night-between-00-00-and-02-00/237249)
**Author:** [@Zeroc0pter](https://discuss.elastic.co/u/Zeroc0pter)\ **Replies:** 4\ **Last updated:** [June 16, 2020, 8:15am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-unreachable-every-night-between-00-00-and-02-00/237249 "2020-06-16T08:15:36Z")
Hi fellows, I have a question regarding the 'possible' scheduled jobs of ElasticSeach. We monitor the application with cURL and run it every 30 seconds to inspect the HTTPS response. Somehow, we receive an unavailable e… --- ## [Adding Datasource from 3rd Party Applications](https://discuss.elastic.co/t/adding-datasource-from-3rd-party-applications/233714)
**Author:** [@Chad](https://discuss.elastic.co/u/Chad)\ **Replies:** 4\ **Last updated:** [May 25, 2020, 1:33pm UTC](https://discuss.elastic.co/t/adding-datasource-from-3rd-party-applications/233714 "2020-05-25T13:33:16Z")
Hi, i'm new in ELK, and i'm looking to get logs from my AD AuditPlus tool ( screenshot attached). How to do I go about it from setting it up , up to creation of dashboard. --- ## [有关于侧边栏的问题](https://discuss.elastic.co/t/topic/177173)
**Author:** [@hanyongsheng](https://discuss.elastic.co/u/hanyongsheng)\ **Replies:** 4\ **Last updated:** [May 13, 2019, 7:25am UTC](https://discuss.elastic.co/t/topic/177173 "2019-05-13T07:25:24Z")
机器学习，地图，画布，堆栈监控， 以上这几个侧边栏功能如何让它消失，我找了很久都没有找到解决的办法，希望可以得到你们的帮助 --- ## [Error on reindex using WordNet synonyms file](https://discuss.elastic.co/t/error-on-reindex-using-wordnet-synonyms-file/109692)
**Author:** [@techpeace](https://discuss.elastic.co/u/techpeace)\ **Replies:** 4\ **Last updated:** [December 13, 2017, 11:06pm UTC](https://discuss.elastic.co/t/error-on-reindex-using-wordnet-synonyms-file/109692 "2017-12-13T23:06:31Z")
Running elasticsearch 6.0.0 on macOS 10.12.6, I'm encountering the following error on indexing when trying to use the wn\_s.pl synonyms file (which I've moved to /usr/local/etc/elasticsearch): { "error": { "root\_cause… --- ## [Java failure in the middle of index restore process](https://discuss.elastic.co/t/java-failure-in-the-middle-of-index-restore-process/110689)
**Author:** [@eugene\_pirogov](https://discuss.elastic.co/u/eugene_pirogov)\ **Replies:** 4\ **Last updated:** [December 8, 2017, 12:04pm UTC](https://discuss.elastic.co/t/java-failure-in-the-middle-of-index-restore-process/110689 "2017-12-08T12:04:26Z")
After rebooting elasticsearch, I am now unable to restore it into a working state. Below are my startup logs, mostly to depict versions and JVM arguments. What I'm seeing is the following: as I restart elasticsearch, … --- ## [Logstash6 recommended way of filtering for the future?](https://discuss.elastic.co/t/logstash6-recommended-way-of-filtering-for-the-future/107748)
**Author:** [@MarcusCaepio](https://discuss.elastic.co/u/MarcusCaepio)\ **Replies:** 4\ **Last updated:** [November 16, 2017, 6:19am UTC](https://discuss.elastic.co/t/logstash6-recommended-way-of-filtering-for-the-future/107748 "2017-11-16T06:19:31Z")
Hi all, GZ for Elastic Stack 6. I am still a noobie in ELK and after reading most of the changelog I have a question: In https://www.elastic.co/blog/elasticsearch-6-0-0-released it is said that elastic is already goin… --- ## [\[ANN\] ElasticUI AngularJS Directives - Easily Build an Interface on top of Elasticsearch](https://discuss.elastic.co/t/ann-elasticui-angularjs-directives-easily-build-an-interface-on-top-of-elasticsearch/18436)
**Author:** [@Yousef\_El\_Dardiry](https://discuss.elastic.co/u/Yousef_El_Dardiry)\ **Replies:** 4\ **Last updated:** [July 21, 2014, 9:40am UTC](https://discuss.elastic.co/t/ann-elasticui-angularjs-directives-easily-build-an-interface-on-top-of-elasticsearch/18436 "2014-07-21T09:40:00Z")
Hi all, I just open sourced a set of AngularJS Directives for Elasticsearch. It enables developers to rapidly build a frontend (e.g.: faceted search engine) on top of Elasticsearch. http://www.elasticui.com (or… --- ## [Capturing elastic search requests](https://discuss.elastic.co/t/capturing-elastic-search-requests/17096)
**Author:** [@miki\_haiat](https://discuss.elastic.co/u/miki_haiat)\ **Replies:** 4\ **Last updated:** [April 19, 2014, 5:43pm UTC](https://discuss.elastic.co/t/capturing-elastic-search-requests/17096 "2014-04-19T17:43:37Z")
Hi, im using elastic search on a local node configuration, also im using a client (elastic4s) in order to index the data , so i want to see that the client is actually sending to the server . i configure Wiresha… --- ## [Elk stack docker with traefik](https://discuss.elastic.co/t/elk-stack-docker-with-traefik/271872)
**Author:** [@siara](https://discuss.elastic.co/u/siara)\ **Replies:** 1\ **Last updated:** [May 1, 2021, 10:03pm UTC](https://discuss.elastic.co/t/elk-stack-docker-with-traefik/271872 "2021-05-01T22:03:51Z")
Hi I have elk stack in docker with tls from documentation Running the Elastic Stack on Docker | Getting Started \[7.12\] | Elastic I try run this on server with traefik. I add traefik network for kibana container and add… --- ## [\[logstash-filter-multiline\]安装使用](https://discuss.elastic.co/t/logstash-filter-multiline/162038)
**Author:** [@haoyun](https://discuss.elastic.co/u/haoyun)\ **Replies:** 1\ **Last updated:** [January 7, 2019, 2:35am UTC](https://discuss.elastic.co/t/logstash-filter-multiline/162038 "2019-01-07T02:35:04Z")
logstash 插件 \[logstash-filter-multiline\]要怎么安装？ 我在这个页面看到 ，但是不明白怎么装上去（最好是可以离线安装）~ https://rubygems.org/gems/logstash-filter-multiline/versions/3.0.4 --- ## [Reverse proxy for Logstash - is this even possible now?](https://discuss.elastic.co/t/reverse-proxy-for-logstash-is-this-even-possible-now/147550)
**Author:** [@pastechecker](https://discuss.elastic.co/u/pastechecker)\ **Replies:** 1\ **Last updated:** [September 6, 2018, 12:17pm UTC](https://discuss.elastic.co/t/reverse-proxy-for-logstash-is-this-even-possible-now/147550 "2018-09-06T12:17:33Z")
Hello, I have Logstash 6.4 installed on Debian 9.5. Recently I had to move Logstash to one zone where the only option to get out to the internet is over reverse proxy. I have multiple http\_pollers in my Logstash config… --- ## [Illegal\_argument\_exception mapper](https://discuss.elastic.co/t/illegal-argument-exception-mapper/124086)
**Author:** [@rdm87](https://discuss.elastic.co/u/rdm87)\ **Replies:** 1\ **Last updated:** [March 15, 2018, 11:50am UTC](https://discuss.elastic.co/t/illegal-argument-exception-mapper/124086 "2018-03-15T11:50:04Z")
Hi at all, From Kibana Console, I have created the following index PUT riskevents { "mappings": { "doc": { "dynamic\_date\_formats": \["yyyy-MM-dd'T'HH:mm:ssZ"\], "properties": { "category": { "type": "keyword"… --- ## [MQTT Integration using Elastc Agent](https://discuss.elastic.co/t/mqtt-integration-using-elastc-agent/358653)
**Author:** [@allatrue](https://discuss.elastic.co/u/allatrue)\ **Replies:** 1\ **Last updated:** [May 19, 2026, 11:18am UTC](https://discuss.elastic.co/t/mqtt-integration-using-elastc-agent/358653 "2026-05-19T11:18:02Z")
Hi all, I'm wondering, if there is an integration for Elastic Agent to collect data from MQTT-Broker? It's possible with filebeat, but how can I configure it in Elastic Agent managed by Fleet? Thanks, Regards --- ## [New semantic relevance ranking API for Elastic Enterprise Search](https://discuss.elastic.co/t/new-semantic-relevance-ranking-api-for-elastic-enterprise-search/322640)
**Author:** [@jamie\_l](https://discuss.elastic.co/u/jamie_l)\ **Replies:** 2\ **Last updated:** [May 9, 2023, 6:42am UTC](https://discuss.elastic.co/t/new-semantic-relevance-ranking-api-for-elastic-enterprise-search/322640 "2023-05-09T06:42:57Z")
Hi all! I’m on the product team at Cohere (a managed LLM provider). We are working on a new endpoint to provide easy semantic relevance scoring of search results using our language models. We think this could be especia… --- ## [Not able to start, remove the filebeat](https://discuss.elastic.co/t/not-able-to-start-remove-the-filebeat/208113)
**Author:** [@newafounder](https://discuss.elastic.co/u/newafounder)\ **Replies:** 2\ **Last updated:** [November 21, 2019, 9:47pm UTC](https://discuss.elastic.co/t/not-able-to-start-remove-the-filebeat/208113 "2019-11-21T21:47:25Z")
Hi, so i have ansible playbook install filebeat agent on a server. After installation, i went to check the service and it was working fine. But then i manually stopped the service and starting again, afterwards i have ge… --- ## [Apache/nginx logs wrapped in syslog format](https://discuss.elastic.co/t/apache-nginx-logs-wrapped-in-syslog-format/207211)
**Author:** [@w\_o\_j\_t\_e\_k](https://discuss.elastic.co/u/w_o_j_t_e_k)\ **Replies:** 2\ **Last updated:** [November 11, 2019, 10:40am UTC](https://discuss.elastic.co/t/apache-nginx-logs-wrapped-in-syslog-format/207211 "2019-11-11T10:40:33Z")
Hi, I've got a centralized log server that receives apache + nginx logs. I would like to use filebeat on this box to forward these logs into elastic. The logs are wrapped in the syslog format, e.q: 2019-11-09T11:50:5… --- ## [REST High Level Client: CreateIndexRequest Timeout](https://discuss.elastic.co/t/rest-high-level-client-createindexrequest-timeout/161828)
**Author:** [@higgs01](https://discuss.elastic.co/u/higgs01)\ **Replies:** 2\ **Last updated:** [December 21, 2018, 12:43pm UTC](https://discuss.elastic.co/t/rest-high-level-client-createindexrequest-timeout/161828 "2018-12-21T12:43:51Z")
Hello I'm trying to create an index: client.indices().create(new CreateIndexRequest(indexName) .settings(Settings.builder().put("index.number\_of\_replicas", 0)) .mapping(shipmentI… --- ## [Multiple actions in the watcher yet?](https://discuss.elastic.co/t/multiple-actions-in-the-watcher-yet/136925)
**Author:** [@vgersh99](https://discuss.elastic.co/u/vgersh99)\ **Replies:** 2\ **Last updated:** [June 22, 2018, 5:43pm UTC](https://discuss.elastic.co/t/multiple-actions-in-the-watcher-yet/136925 "2018-06-22T17:43:04Z")
I know this topic has been discussed previously ... Continuing the discussion from Loop through watcher results to create multiple actions: Wondering if there was any additional watcher functionality introduced yet. Ru… --- ## [Upgrade from 5.5 to 5.6](https://discuss.elastic.co/t/upgrade-from-5-5-to-5-6/125962)
**Author:** [@Retenodus](https://discuss.elastic.co/u/Retenodus)\ **Replies:** 2\ **Last updated:** [March 31, 2018, 11:05am UTC](https://discuss.elastic.co/t/upgrade-from-5-5-to-5-6/125962 "2018-03-31T11:05:43Z")
Hello, I recently upgraded my cluster from 5.5 to 5.6 (I have same issues on a 6.1 cluster too). Soon, I got two issues: DateHistogramAggregation queries took a long time (related to https://github.com/elastic/elastic… --- ## [Watcher and Moogsoft](https://discuss.elastic.co/t/watcher-and-moogsoft/101636)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [September 26, 2017, 11:52am UTC](https://discuss.elastic.co/t/watcher-and-moogsoft/101636 "2017-09-26T11:52:11Z")
Whether webhook needs to be used integrate with Moogsoft? Or is there any other option? --- ## [Can't get headers dropped from CSV](https://discuss.elastic.co/t/cant-get-headers-dropped-from-csv/77873)
**Author:** [@jcannell](https://discuss.elastic.co/u/jcannell)\ **Replies:** 2\ **Last updated:** [March 8, 2017, 8:25pm UTC](https://discuss.elastic.co/t/cant-get-headers-dropped-from-csv/77873 "2017-03-08T20:25:29Z")
Hi Everyone, Using logstash version 2.4.1 I'm having a lot of trouble getting the first row in my CSV dropped. My filter keeps picking it up and trying to convert it to a date. Here is the filter portion my config: f… --- ## [How does Curator achieve TLS from EC2 to AWS S3?](https://discuss.elastic.co/t/how-does-curator-achieve-tls-from-ec2-to-aws-s3/172855)
**Author:** [@jonassteinberg1](https://discuss.elastic.co/u/jonassteinberg1)\ **Replies:** 8\ **Last updated:** [March 20, 2019, 12:17pm UTC](https://discuss.elastic.co/t/how-does-curator-achieve-tls-from-ec2-to-aws-s3/172855 "2019-03-20T12:17:00Z")
@theuntergeek I have a policy on an S3 bucket that will reject anything not using TLS. And my cluster snapshots are making it to S3 so obviously transport from my EC2 box (where Curator is running) to S3 is encrypted, … --- ## [Courier fetch: 5 of 10 of shard fail](https://discuss.elastic.co/t/courier-fetch-5-of-10-of-shard-fail/139106)
**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\ **Replies:** 8\ **Last updated:** [July 10, 2018, 1:32pm UTC](https://discuss.elastic.co/t/courier-fetch-5-of-10-of-shard-fail/139106 "2018-07-10T13:32:14Z")
Hi, Can someone explain to me whay I have this error ? --- ## [Slower indexing](https://discuss.elastic.co/t/slower-indexing/97275)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 8\ **Last updated:** [August 18, 2017, 2:08pm UTC](https://discuss.elastic.co/t/slower-indexing/97275 "2017-08-18T14:08:05Z")
Hello, With 5.5 stack version, i find indexing very slow. 2 600 000 messages / 15 minutes. Impossible for the stack to follow. Stack : 3 Els cluster (12 cpu-16 Go RAM), 1 logstash (24 cpu-24 Go RAM), 1 kibana --- ## [Ignore failures while performing \_reindex](https://discuss.elastic.co/t/ignore-failures-while-performing-reindex/159822)
**Author:** [@gnumoksha](https://discuss.elastic.co/u/gnumoksha)\ **Replies:** 0\ **Last updated:** [December 7, 2018, 12:03am UTC](https://discuss.elastic.co/t/ignore-failures-while-performing-reindex/159822 "2018-12-07T00:03:57Z")
I just want to create a new index in order to apply this pipeline: PUT \_ingest/pipeline/foobar { "description": "Converts foobar data into json", "processors": \[ { "gsub": { "field": "message", "pattern": """\[fo… --- ## [Force-deleting index that is being snapshotted](https://discuss.elastic.co/t/force-deleting-index-that-is-being-snapshotted/104079)
**Author:** [@vicpav](https://discuss.elastic.co/u/vicpav)\ **Replies:** 0\ **Last updated:** [October 16, 2017, 10:32am UTC](https://discuss.elastic.co/t/force-deleting-index-that-is-being-snapshotted/104079 "2017-10-16T10:32:46Z")
Our system is using Elastic Cloud service to host Elasticsearch cluster. A few days ago, to identify the root cause of an issue with our logging system, Logstash log-level was switched to DEBUG. That has resulted in 52GB… --- ## [Error when Registering new Snapshot Repository](https://discuss.elastic.co/t/error-when-registering-new-snapshot-repository/225828)
**Author:** [@cpb14pk](https://discuss.elastic.co/u/cpb14pk)\ **Replies:** 5\ **Last updated:** [April 1, 2020, 9:35am UTC](https://discuss.elastic.co/t/error-when-registering-new-snapshot-repository/225828 "2020-04-01T09:35:21Z")
Hi, I am trying to snapshot an elasticsearch repository. I have three different nodes across three different servers, e.g. 10.212.145.10, 10.212.145.20, 10.212.145.30. I have added the path.repo field in my elasticsear… --- ## [Http\_poller only outputs hash?](https://discuss.elastic.co/t/http-poller-only-outputs-hash/125426)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 5\ **Last updated:** [March 27, 2018, 6:39am UTC](https://discuss.elastic.co/t/http-poller-only-outputs-hash/125426 "2018-03-27T06:39:16Z")
Below is my pipeline. Trying to pull a list from a site and then parse it out with xml filter. input { http\_poller { urls =\> { isctop100 =\> "https://isc.sans.edu/api/topips/records/100?xml" } schedu… --- ## [How to convert case at runtime at search query in kibana](https://discuss.elastic.co/t/how-to-convert-case-at-runtime-at-search-query-in-kibana/101797)
**Author:** [@kanchan](https://discuss.elastic.co/u/kanchan)\ **Replies:** 5\ **Last updated:** [September 29, 2017, 3:05pm UTC](https://discuss.elastic.co/t/how-to-convert-case-at-runtime-at-search-query-in-kibana/101797 "2017-09-29T15:05:59Z")
hi, How we can achieve this in kibana: select \* from CEM\_SOLR\_REPORT where lower(PROGRESS\_FLAG)='success'; --- ## [Multiple Line in Single Event](https://discuss.elastic.co/t/multiple-line-in-single-event/88739)
**Author:** [@sanupam](https://discuss.elastic.co/u/sanupam)\ **Replies:** 5\ **Last updated:** [June 14, 2017, 7:16am UTC](https://discuss.elastic.co/t/multiple-line-in-single-event/88739 "2017-06-14T07:16:20Z")
Hi, Consider the below example: Logfile: START INFO: NOTIFICATION\_ID,NOTIFICATION\_TYPE,NOTIFICATION\_DATE,ORDER\_REFERENCE,US\_ID,SIO\_ID,ORIGINAL\_ORDER\_REFERENCE,ACCESS\_QUOTE\_REF,PHONE,ADDRESS1,ADDRESS2,ADDRESS3,POSTA… --- ## [Fleet Agent Goes from Online to Offline](https://discuss.elastic.co/t/fleet-agent-goes-from-online-to-offline/266745)
**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\ **Replies:** 1\ **Last updated:** [March 24, 2021, 6:04pm UTC](https://discuss.elastic.co/t/fleet-agent-goes-from-online-to-offline/266745 "2021-03-24T18:04:11Z")
I enrolled my agent, but after a few minutes it goes offline .I found errors in my endpoint agent logs The error is "Error \[SSL certificate problem: self signed certificate in certificate chain\]". I was able to bypass th… --- ## [Couldn't Make the Package of metricbeats in Windows-7 32 bit](https://discuss.elastic.co/t/couldnt-make-the-package-of-metricbeats-in-windows-7-32-bit/172462)
**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\ **Replies:** 7\ **Last updated:** [March 20, 2019, 9:18am UTC](https://discuss.elastic.co/t/couldnt-make-the-package-of-metricbeats-in-windows-7-32-bit/172462 "2019-03-20T09:18:38Z")
Hi- I have to Make Package of metricbeats (got to test couple of bugs in Windows module which has been fixed, which is still in a pull request, but not yet into the master), but its failing with an error message as belo… --- ## [Improving Reindex Performance in v5.6](https://discuss.elastic.co/t/improving-reindex-performance-in-v5-6/161659)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 7\ **Last updated:** [December 21, 2018, 10:53am UTC](https://discuss.elastic.co/t/improving-reindex-performance-in-v5-6/161659 "2018-12-21T10:53:55Z")
I'm currently reindexing 3.2bn documents from a 5 shard index into a 20 shard index on a 2-node cluster where the machines are AWS EC2 i3.4xlarge instances. The elasticsearch installs are configured to use both ephemera… --- ## [Data node not getting shards automatically](https://discuss.elastic.co/t/data-node-not-getting-shards-automatically/155602)
**Author:** [@ChrisW](https://discuss.elastic.co/u/ChrisW)\ **Replies:** 1\ **Last updated:** [November 6, 2018, 8:00pm UTC](https://discuss.elastic.co/t/data-node-not-getting-shards-automatically/155602 "2018-11-06T20:00:55Z")
I have an elasticsearch cluster with the following configuration All versions are ES 6.4.2 es1 - coordinating node only (also runs logstash and kibana) es2 - master node, data node, ingest node es3 - master node, dat… --- ## [Droping entire document](https://discuss.elastic.co/t/droping-entire-document/111097)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 7\ **Last updated:** [December 11, 2017, 2:34pm UTC](https://discuss.elastic.co/t/droping-entire-document/111097 "2017-12-11T14:34:39Z")
Hi All, Iam monitoring the windows events using Beats , but i could find lot of events generated every second and its kind of overloaded I want to drop this event id event\_id : 5,516 Eventid is the field name and … --- ## [Elasticsearch 5.6.3 \_source is empty](https://discuss.elastic.co/t/elasticsearch-5-6-3-source-is-empty/105946)
**Author:** [@Ersoy\_Vatansever](https://discuss.elastic.co/u/Ersoy_Vatansever)\ **Replies:** 1\ **Last updated:** [November 2, 2017, 6:43am UTC](https://discuss.elastic.co/t/elasticsearch-5-6-3-source-is-empty/105946 "2017-11-02T06:43:43Z")
I'll crazy about it. I create new index with a document type. This is my mapping { "settings": { "number\_of\_shards": 2, "number\_of\_replicas": 1, "refresh\_interval": "30s", "max\_result\_window" : 500000 }, "mappin… --- ## [Diamond system metrics collector is now Beats compatible!](https://discuss.elastic.co/t/diamond-system-metrics-collector-is-now-beats-compatible/31477)
**Author:** [@imre](https://discuss.elastic.co/u/imre)\ **Replies:** 1\ **Last updated:** [October 4, 2015, 7:54pm UTC](https://discuss.elastic.co/t/diamond-system-metrics-collector-is-now-beats-compatible/31477 "2015-10-04T19:54:01Z")
Hi folks, I have written a Beats compatible ElasticSearch metrics shipper plugin for the popular Diamond system metrics collector. Until it gets accepted into Diamond's master repo, you can find my branch here: https… --- ## [Nested XML with Logstash- Recommendation needed](https://discuss.elastic.co/t/nested-xml-with-logstash-recommendation-needed/106333)
**Author:** [@moriol](https://discuss.elastic.co/u/moriol)\ **Replies:** 3\ **Last updated:** [November 30, 2017, 2:38pm UTC](https://discuss.elastic.co/t/nested-xml-with-logstash-recommendation-needed/106333 "2017-11-30T14:38:34Z")
Hello, I am looking for some recommendations, where I have an XML file which is nested and needs to be an input in Logstash. My xml has the following structure: \< subsystem\> \< component\> \< Parameter\> \< /Parameter\> … --- ## [Issue with filter and timestamp](https://discuss.elastic.co/t/issue-with-filter-and-timestamp/88842)
**Author:** [@desai.amogh](https://discuss.elastic.co/u/desai.amogh)\ **Replies:** 3\ **Last updated:** [June 9, 2017, 2:41pm UTC](https://discuss.elastic.co/t/issue-with-filter-and-timestamp/88842 "2017-06-09T14:41:03Z")
I am getting errors, I guess due to the grok filters. check the Logstash parsed log below: { "message" =\> "2017-06-09 05:02:16,751 \[30\] DEBUG - WS206 - ApplicationName - someapp.Logging.someappLogger - REQ\_END P… --- ## [Logstash 5.1.1 "bad URI(is not URI?)"](https://discuss.elastic.co/t/logstash-5-1-1-bad-uri-is-not-uri/70062)
**Author:** [@andiroot](https://discuss.elastic.co/u/andiroot)\ **Replies:** 0\ **Last updated:** [December 27, 2016, 12:48pm UTC](https://discuss.elastic.co/t/logstash-5-1-1-bad-uri-is-not-uri/70062 "2016-12-27T12:48:20Z")
Hello. I try to run Logstash 5.1.1 but receive an error: "bad URI (is not URI?)". In logstash.yml host and port specified. Where is the problem ? Tell me please. Thank you. error: c: \\ Program Files \\ Logstash \\ bin\> l… --- ## [Why the graph is suddenly falling to ZERO?](https://discuss.elastic.co/t/why-the-graph-is-suddenly-falling-to-zero/63250)
**Author:** [@Ravi\_Shanker\_Reddy](https://discuss.elastic.co/u/Ravi_Shanker_Reddy)\ **Replies:** 3\ **Last updated:** [November 25, 2016, 11:13am UTC](https://discuss.elastic.co/t/why-the-graph-is-suddenly-falling-to-zero/63250 "2016-11-25T11:13:29Z")
I am using a trail version of Marvel to monitor my ES. I am observing that the Lucene memory, Index size & document count is suddenly falling to 0 and retains its position after a second. Whats happening in that second… --- ## [Dynamic Analyzer in Search](https://discuss.elastic.co/t/dynamic-analyzer-in-search/38605)
**Author:** [@rrecacharedk](https://discuss.elastic.co/u/rrecacharedk)\ **Replies:** 3\ **Last updated:** [January 7, 2016, 8:55pm UTC](https://discuss.elastic.co/t/dynamic-analyzer-in-search/38605 "2016-01-07T20:55:56Z")
Hi, I have a custom analyzer ( custom\_asciifolding is "mapping" type =\> \["á=\>a", "é=\>e" ... etc\] ): ... "analyzer": { "standard\_custom": { "type": "custom", "char\_filter": \["custom\_asciifolding"\], "filter": \["lowe… --- ## [Kibana - неправильная сортировка по полю с датой](https://discuss.elastic.co/t/kibana/284655)
**Author:** [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\ **Replies:** 6\ **Last updated:** [September 20, 2021, 8:03pm UTC](https://discuss.elastic.co/t/kibana/284655 "2021-09-20T20:03:43Z")
Добрый день! Заметил, что Kibana иногда неправильно сортирует по полю с датой - подчеркнутое на картинке значение больше значения и из предыдущей, и из следующей строки. Индекс-паттерн создан на основе поля из документа… [Previous page](https://discuss.elastic.co/top.md?page=1352&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1354&per_page=50&period=all)