# Top

**URL:** https://discuss.elastic.co/top.md?page=1362&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1363

---

## [Log threshold alert](https://discuss.elastic.co/t/log-threshold-alert/245317)

<div class="topic-metadata">

**Author:** [@Ronin](https://discuss.elastic.co/u/Ronin)\
**Replies:** 1\
**Last updated:** [August 20, 2020, 12:27pm UTC](https://discuss.elastic.co/t/log-threshold-alert/245317 "2020-08-20T12:27:50Z")

</div>

We are attempting to make a Log Threshold alert, however it is sending alerts when it shouldn't be. The query we are trying to alert on is labels.application: "theapp" and message: "\*limit request headers fields size\*". …

---

## [Where is the Logstash in ECE](https://discuss.elastic.co/t/where-is-the-logstash-in-ece/164376)

<div class="topic-metadata">

**Author:** [@Giovanni\_Mazza](https://discuss.elastic.co/u/Giovanni_Mazza)\
**Replies:** 1\
**Last updated:** [January 15, 2019, 9:48pm UTC](https://discuss.elastic.co/t/where-is-the-logstash-in-ece/164376 "2019-01-15T21:48:31Z")

</div>

Where is logstash in ECE. I though it was part of the ingest node it seems it does not comes with the product at ALL. is there anything else that need to be installed to get logstash to work on the managed infrastructur…

---

## [Gauge with max count](https://discuss.elastic.co/t/gauge-with-max-count/150001)

<div class="topic-metadata">

**Author:** [@wheelq](https://discuss.elastic.co/u/wheelq)\
**Replies:** 1\
**Last updated:** [September 27, 2018, 2:02am UTC](https://discuss.elastic.co/t/gauge-with-max-count/150001 "2018-09-27T02:02:00Z")

</div>

Please help me to figure out how to create a gauge where: max is based on the total unique count of particular field (in my case this is total unique number of logins) gauge value is based on total unique count of part…

---

## [Multiple boost queries](https://discuss.elastic.co/t/multiple-boost-queries/142917)

<div class="topic-metadata">

**Author:** [@NewScientists](https://discuss.elastic.co/u/NewScientists)\
**Replies:** 1\
**Last updated:** [August 3, 2018, 2:03pm UTC](https://discuss.elastic.co/t/multiple-boost-queries/142917 "2018-08-03T14:03:42Z")

</div>

Hello, i've been trying to find the right format for a mutliple boost query for the last hour, could someone assist me in writing this correctly? essentially it is a single query that can do the below many times. This W…

---

## [Opinions on new AMD EPYC CPUs](https://discuss.elastic.co/t/opinions-on-new-amd-epyc-cpus/120148)

<div class="topic-metadata">

**Author:** [@xenoid](https://discuss.elastic.co/u/xenoid)\
**Replies:** 1\
**Last updated:** [February 20, 2018, 10:59am UTC](https://discuss.elastic.co/t/opinions-on-new-amd-epyc-cpus/120148 "2018-02-20T10:59:58Z")

</div>

Hello everybody, We want to expand our system by adding new hardware. Now we need some opinions on CPUs. Since AMD recently released their new EPYC lineup we were curious exactly how "epyc" these chips really are. Th…

---

## [SIP Integration](https://discuss.elastic.co/t/sip-integration/94324)

<div class="topic-metadata">

**Author:** [@luis.carvalho](https://discuss.elastic.co/u/luis.carvalho)\
**Replies:** 1\
**Last updated:** [July 24, 2017, 12:20pm UTC](https://discuss.elastic.co/t/sip-integration/94324 "2017-07-24T12:20:48Z")

</div>

Hi! I have a pcaps SIP source that i would like to index on Elasticsearch. Does anyone knows what is the best way to do it? Anyone knows when we have sip protocol support for packetbeat? Thanks, LC

---

## [How to get RSS feed plugin from indexing duplicate posts](https://discuss.elastic.co/t/how-to-get-rss-feed-plugin-from-indexing-duplicate-posts/40776)

<div class="topic-metadata">

**Author:** [@MaxOrelus](https://discuss.elastic.co/u/MaxOrelus)\
**Replies:** 1\
**Last updated:** [April 24, 2016, 12:16pm UTC](https://discuss.elastic.co/t/how-to-get-rss-feed-plugin-from-indexing-duplicate-posts/40776 "2016-04-24T12:16:13Z")

</div>

I'm currently playing with the RSS plugin for Logstash to index articles from my website. The plugin works good, but I notice if your interval is every 30 seconds or so, Logstash seems to re-index the same posts over and…

---

## [Update API Problem](https://discuss.elastic.co/t/update-api-problem/11392)

<div class="topic-metadata">

**Author:** [@okhafi](https://discuss.elastic.co/u/okhafi)\
**Replies:** 7\
**Last updated:** [April 4, 2013, 6:36am UTC](https://discuss.elastic.co/t/update-api-problem/11392 "2013-04-04T06:36:17Z")

</div>

Hello, I'm new to elasticsearch. testing logstash,redis,elasticsearch and kibana. Version - \*elasticsearch-0.20.5\*. For now, I'm doing this operations: 1) I'm searching specific messages with elastic api. 2) Sendi…

---

## [Custom Request Handler](https://discuss.elastic.co/t/custom-request-handler/6605)

<div class="topic-metadata">

**Author:** [@Eugene\_Strokin](https://discuss.elastic.co/u/Eugene_Strokin)\
**Replies:** 1\
**Last updated:** [February 7, 2012, 10:08am UTC](https://discuss.elastic.co/t/custom-request-handler/6605 "2012-02-07T10:08:05Z")

</div>

Hello, very often I have a case when I need to make 2 calls to ES for a single search, one to get ID's of the documents which I realy need, and the second call to actually get those documents. The queries are fast, so…

---

## ['dot' analyzer](https://discuss.elastic.co/t/dot-analyzer/3635)

<div class="topic-metadata">

**Author:** [@Rich\_Kroll](https://discuss.elastic.co/u/Rich_Kroll)\
**Replies:** 1\
**Last updated:** [December 7, 2010, 10:30am UTC](https://discuss.elastic.co/t/dot-analyzer/3635 "2010-12-07T10:30:13Z")

</div>

I am indexing some log data, and just realized that the class/package names are not being indexed. For example "com.java.util.List" could only be searched using "\*list\*". Is there a way to modify the analyzer to toke…

---

## [Mapping Conflict with Several Types](https://discuss.elastic.co/t/mapping-conflict-with-several-types/318366)

<div class="topic-metadata">

**Author:** [@JakBains](https://discuss.elastic.co/u/JakBains)\
**Replies:** 2\
**Last updated:** [November 9, 2022, 8:44pm UTC](https://discuss.elastic.co/t/mapping-conflict-with-several-types/318366 "2022-11-09T20:44:37Z")

</div>

Hello - my organization recently had an issue where the latest index in our datastream from logstash has the wrong mappings. This has made our IP addresses and geopoints appear as text and keyword types, as a result many…

---

## [Ctx.payload.hits NOT working error (Good format)](https://discuss.elastic.co/t/ctx-payload-hits-not-working-error-good-format/280071)

<div class="topic-metadata">

**Author:** [@alex14](https://discuss.elastic.co/u/alex14)\
**Replies:** 2\
**Last updated:** [August 2, 2021, 8:14am UTC](https://discuss.elastic.co/t/ctx-payload-hits-not-working-error-good-format/280071 "2021-08-02T08:14:58Z")

</div>

Hey there, I´m trying to create a watcher but i need to use some fields from my index to send that information via email but i always get the same error I need to use the fields hit.\_source.service.address, 'NodeName':…

---

## [Kibana uses the kbn-version and kbn-name headers to prevent XSRF attacks](https://discuss.elastic.co/t/kibana-uses-the-kbn-version-and-kbn-name-headers-to-prevent-xsrf-attacks/275665)

<div class="topic-metadata">

**Author:** [@ravi\_yadav2](https://discuss.elastic.co/u/ravi_yadav2)\
**Replies:** 2\
**Last updated:** [June 11, 2021, 7:36pm UTC](https://discuss.elastic.co/t/kibana-uses-the-kbn-version-and-kbn-name-headers-to-prevent-xsrf-attacks/275665 "2021-06-11T19:36:58Z")

</div>

Could anyone please explain how Kibana uses the kbn-version and kbn-name headers to prevent XSRF attacks.

---

## [Filebeat setup command can not find environment variables](https://discuss.elastic.co/t/filebeat-setup-command-can-not-find-environment-variables/271550)

<div class="topic-metadata">

**Author:** [@user8753123](https://discuss.elastic.co/u/user8753123)\
**Replies:** 2\
**Last updated:** [May 4, 2021, 5:45pm UTC](https://discuss.elastic.co/t/filebeat-setup-command-can-not-find-environment-variables/271550 "2021-05-04T17:45:48Z")

</div>

Hi there, I've read up a lot of the various posts on this topic but cannot seem to find something specific to my particular issue. I've got filebeat running on centos as a service with systemd as per the docs. I'm usin…

---

## [The Request Rate makes me confused](https://discuss.elastic.co/t/the-request-rate-makes-me-confused/215909)

<div class="topic-metadata">

**Author:** [@bringyou](https://discuss.elastic.co/u/bringyou)\
**Replies:** 2\
**Last updated:** [January 23, 2020, 1:10pm UTC](https://discuss.elastic.co/t/the-request-rate-makes-me-confused/215909 "2020-01-23T13:10:32Z")

</div>

Hello, I' am using Kibana's stack monitoring tools, and I found something confusing me, that is, in the indices overview window, there is a line chart called "search rate" and in advance window, there is a line chart…

---

## [Elasticsearch service is getting stopped automatically](https://discuss.elastic.co/t/elasticsearch-service-is-getting-stopped-automatically/162082)

<div class="topic-metadata">

**Author:** [@faruks](https://discuss.elastic.co/u/faruks)\
**Replies:** 2\
**Last updated:** [December 25, 2018, 9:34pm UTC](https://discuss.elastic.co/t/elasticsearch-service-is-getting-stopped-automatically/162082 "2018-12-25T21:34:19Z")

</div>

hi elasticsearch service is getting stopped automatically service elasticsearch start \<log\> elasticsearch\]# tail -f my-application.log at org.elasticsearch.plugins.PluginsService.loadBundle(PluginsService.java:524) ~…

---

## [Change index of saved searches](https://discuss.elastic.co/t/change-index-of-saved-searches/155844)

<div class="topic-metadata">

**Author:** [@Ludovic9](https://discuss.elastic.co/u/Ludovic9)\
**Replies:** 2\
**Last updated:** [November 8, 2018, 6:41pm UTC](https://discuss.elastic.co/t/change-index-of-saved-searches/155844 "2018-11-08T18:41:42Z")

</div>

Hi, I'm using filebeat to send logs from Filezilla server to ELK server. It's working, and the default index is filebeat-6.3.0-YYYY.mm.dd I want to change that because more logs with filebeat will be sent and i don't w…

---

## [Elasticsearch service keeps failing](https://discuss.elastic.co/t/elasticsearch-service-keeps-failing/148048)

<div class="topic-metadata">

**Author:** [@manuelasticsearch](https://discuss.elastic.co/u/manuelasticsearch)\
**Replies:** 2\
**Last updated:** [September 11, 2018, 6:40am UTC](https://discuss.elastic.co/t/elasticsearch-service-keeps-failing/148048 "2018-09-11T06:40:26Z")

</div>

Hi All, I have implemented EFK in my environment. Kibana and Elasticsearch are installed on a separate instance and Fluentd is configured on my kubernetes cluster. Everything was working perfect. But sometimes my Elast…

---

## [緯度、経度情報からKibanaにマッピングする方法について](https://discuss.elastic.co/t/kibana/140423)

<div class="topic-metadata">

**Author:** [@yamamotoh](https://discuss.elastic.co/u/yamamotoh)\
**Replies:** 2\
**Last updated:** [July 19, 2018, 11:59pm UTC](https://discuss.elastic.co/t/kibana/140423 "2018-07-19T23:59:32Z")

</div>

位置情報を活用すべく、Kibanaを活用しております。 geoipによるIPアドレスからのマッピングは便利ですね。 今回下記サイトを参考にし、経度、緯度の情報からのマッピングを試みておりますがうまくいきません。 ①NYC OpenData https://nycopendata.socrata.com/Social-Services/311-Service-Requests-from-2010-to-Present/erm2-n…

---

## [Conditionals within filter using fields generated by cloudwatch logs plugin](https://discuss.elastic.co/t/conditionals-within-filter-using-fields-generated-by-cloudwatch-logs-plugin/140609)

<div class="topic-metadata">

**Author:** [@vacovsky](https://discuss.elastic.co/u/vacovsky)\
**Replies:** 2\
**Last updated:** [July 18, 2018, 8:10pm UTC](https://discuss.elastic.co/t/conditionals-within-filter-using-fields-generated-by-cloudwatch-logs-plugin/140609 "2018-07-18T20:10:24Z")

</div>

I'm having an issue getting my grok filter to apply to VPC logs, and hoping someone here can help. filter { if "vpc-logs" in \[cloudwatch\_logs.log\_group\] { grok { patterns\_dir =\> \["/etc/logstash/p…

---

## [BulkProcessor performance problem](https://discuss.elastic.co/t/bulkprocessor-performance-problem/110070)

<div class="topic-metadata">

**Author:** [@soner](https://discuss.elastic.co/u/soner)\
**Replies:** 2\
**Last updated:** [December 7, 2017, 11:46am UTC](https://discuss.elastic.co/t/bulkprocessor-performance-problem/110070 "2017-12-07T11:46:06Z")

</div>

Hi all, I'm using Elasticsearch for my thesis to develop a new index pruning algorithm and making benchmarking different index pruning methodologies. Hardware: I'm using Elasticsearch 6.0 on MacBBook Pro (CPU 2.6 GHz …

---

## [Unable to load pie charts with sub-buckets aggregation after migrating to es/kibana 5.4.0](https://discuss.elastic.co/t/unable-to-load-pie-charts-with-sub-buckets-aggregation-after-migrating-to-es-kibana-5-4-0/85407)

<div class="topic-metadata">

**Author:** [@maniel](https://discuss.elastic.co/u/maniel)\
**Replies:** 2\
**Last updated:** [May 12, 2017, 6:13am UTC](https://discuss.elastic.co/t/unable-to-load-pie-charts-with-sub-buckets-aggregation-after-migrating-to-es-kibana-5-4-0/85407 "2017-05-12T06:13:19Z")

</div>

Hi Today i migrated my stack to elasticsearch and kibana to 5.4.0, from elasticsearch 2.4.0 and kibana 4.5, now every time i try to create a pie chart with sub-buckets i get the following error: Error: Request to Elas…

---

## [Client Example, Elasticsearch with Active Directory Security Enabled](https://discuss.elastic.co/t/client-example-elasticsearch-with-active-directory-security-enabled/72337)

<div class="topic-metadata">

**Author:** [@CharlesB](https://discuss.elastic.co/u/CharlesB)\
**Replies:** 2\
**Last updated:** [January 24, 2017, 9:34am UTC](https://discuss.elastic.co/t/client-example-elasticsearch-with-active-directory-security-enabled/72337 "2017-01-24T09:34:19Z")

</div>

I am querying Elasticsearch via a client written in C# that uses Elasticsearch.NET and Nest. It works fine without security on. Once Active Directory is enabled I can query it via cURL easy enough adding user:pass as nee…

---

## [Logstash Metrics unavailable on Kibana Stack Monitoring UI](https://discuss.elastic.co/t/logstash-metrics-unavailable-on-kibana-stack-monitoring-ui/343328)

<div class="topic-metadata">

**Author:** [@gsekar](https://discuss.elastic.co/u/gsekar)\
**Replies:** 8\
**Last updated:** [October 5, 2023, 3:01pm UTC](https://discuss.elastic.co/t/logstash-metrics-unavailable-on-kibana-stack-monitoring-ui/343328 "2023-10-05T15:01:56Z")

</div>

Hi all Have installed metricbeat to monitor Logstash Nodes. The data stream - .monitoring-logstash-8-mb does get created and am seeing the data in the discover tab. But in the Stack Monitoring page for some reason the d…

---

## [Creating external case from Elastic to XSOAR](https://discuss.elastic.co/t/creating-external-case-from-elastic-to-xsoar/278354)

<div class="topic-metadata">

**Author:** [@randomguyneedhelp](https://discuss.elastic.co/u/randomguyneedhelp)\
**Replies:** 3\
**Last updated:** [July 14, 2021, 6:53pm UTC](https://discuss.elastic.co/t/creating-external-case-from-elastic-to-xsoar/278354 "2021-07-14T18:53:21Z")

</div>

Hi, I will like to know if there are such integration between Elastic and XSOAR. Understand there are integrations for such functions with ServiceNow, JIRA and IBM Resilient, however I am trying to make use Cortex XSOAR…

---

## [Jre crash after running for days or hours](https://discuss.elastic.co/t/jre-crash-after-running-for-days-or-hours/262439)

<div class="topic-metadata">

**Author:** [@billhong-just](https://discuss.elastic.co/u/billhong-just)\
**Replies:** 8\
**Last updated:** [February 22, 2021, 1:19am UTC](https://discuss.elastic.co/t/jre-crash-after-running-for-days-or-hours/262439 "2021-02-22T01:19:19Z")

</div>

Hi community, My single node elasticsearch cluster crashed after running for days or hours. And here are relevant information and logs. Elasticsearch version (bin/elasticsearch --version): 7.10.2 Plugins installed: I…

---

## [Loading Incremental data into Elastic Search](https://discuss.elastic.co/t/loading-incremental-data-into-elastic-search/262180)

<div class="topic-metadata">

**Author:** [@gaurav1](https://discuss.elastic.co/u/gaurav1)\
**Replies:** 3\
**Last updated:** [January 26, 2021, 3:12pm UTC](https://discuss.elastic.co/t/loading-incremental-data-into-elastic-search/262180 "2021-01-26T15:12:34Z")

</div>

I am getting Json response from JIRA using Api containing issue details and loading those as logs in Elasticsearch. This activity we are doing continuously. So every time we need to provide an incremental data. In data w…

---

## [Logstash OSS license features and X-PACK](https://discuss.elastic.co/t/logstash-oss-license-features-and-x-pack/209124)

<div class="topic-metadata">

**Author:** [@Sunil\_Chadha](https://discuss.elastic.co/u/Sunil_Chadha)\
**Replies:** 3\
**Last updated:** [November 23, 2019, 8:04pm UTC](https://discuss.elastic.co/t/logstash-oss-license-features-and-x-pack/209124 "2019-11-23T20:04:23Z")

</div>

Hi, I am using Logstash OSS, and I want to be sure that I dont use x-pack features without Elastic license. I want to know Can i use TLS between Filebeat - Logstash, with Logstash/Filebeat OSS Apache 2.0. Or I need …

---

## [Forward log to siem](https://discuss.elastic.co/t/forward-log-to-siem/143369)

<div class="topic-metadata">

**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\
**Replies:** 3\
**Last updated:** [August 9, 2018, 12:46pm UTC](https://discuss.elastic.co/t/forward-log-to-siem/143369 "2018-08-09T12:46:23Z")

</div>

I would like to forward syslog from many device cisco to a siem using logstash. I tried to use syslog plugin but logstash insert a message into log and don't forward only the syslog message. this is the part of logstas…

---

## [Filebeat not trasnferring messages to Logstash](https://discuss.elastic.co/t/filebeat-not-trasnferring-messages-to-logstash/141311)

<div class="topic-metadata">

**Author:** [@Nithani25](https://discuss.elastic.co/u/Nithani25)\
**Replies:** 8\
**Last updated:** [July 25, 2018, 7:06am UTC](https://discuss.elastic.co/t/filebeat-not-trasnferring-messages-to-logstash/141311 "2018-07-25T07:06:20Z")

</div>

HI Team, I have completed ELK setup completed and successful in creating many visualtisation, however, offlate my filebeat is not sending any messages to my logstash system. I am getting below message when trying to pub…

---

## [Logstash cannot read /var/log/maillog](https://discuss.elastic.co/t/logstash-cannot-read-var-log-maillog/140331)

<div class="topic-metadata">

**Author:** [@robs](https://discuss.elastic.co/u/robs)\
**Replies:** 3\
**Last updated:** [July 18, 2018, 8:56am UTC](https://discuss.elastic.co/t/logstash-cannot-read-var-log-maillog/140331 "2018-07-18T08:56:07Z")

</div>

Hi all, I can't find this problem or a related answer in recent postings (after 2014) so I drop this here. I'm running this: CentOS 6.8 (final) Logstash 6.2.3 Elasticsearch 6.2.3 To allow logstash to read log files …

---

## [How to update Nested object in elasticsearch](https://discuss.elastic.co/t/how-to-update-nested-object-in-elasticsearch/131611)

<div class="topic-metadata">

**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\
**Replies:** 3\
**Last updated:** [May 16, 2018, 8:10pm UTC](https://discuss.elastic.co/t/how-to-update-nested-object-in-elasticsearch/131611 "2018-05-16T20:10:11Z")

</div>

Hi all developing an application and i need to update nested object. I'm not able to update the nested document.Can anyone help me please/ { "\_index": "i9", "\_type": "i9details", "\_id": "OjmfWGMBhKzS2hoOoiJC", "\_sc…

---

## [Read log files from the http url](https://discuss.elastic.co/t/read-log-files-from-the-http-url/83649)

<div class="topic-metadata">

**Author:** [@Hareesh](https://discuss.elastic.co/u/Hareesh)\
**Replies:** 3\
**Last updated:** [April 27, 2017, 7:34am UTC](https://discuss.elastic.co/t/read-log-files-from-the-http-url/83649 "2017-04-27T07:34:19Z")

</div>

I am trying to read the log file from a remote location. Example, All log files are available in the below url: http://host\_name:port/path1/path2 And the log file name would be as follows (Time format) web\_server…

---

## [Use of App.js in Kibana Plugin](https://discuss.elastic.co/t/use-of-app-js-in-kibana-plugin/49537)

<div class="topic-metadata">

**Author:** [@Veer\_Shubhranshu\_Shr](https://discuss.elastic.co/u/Veer_Shubhranshu_Shr)\
**Replies:** 3\
**Last updated:** [May 10, 2016, 5:18am UTC](https://discuss.elastic.co/t/use-of-app-js-in-kibana-plugin/49537 "2016-05-10T05:18:39Z")

</div>

I have recently started with developing Visualization plugin for Kibana 4.x. I understood couple of things from the Kibana Plugin Development Tutorial. I understand that the fist JS to be called will be index.js, and …

---

## [Dedicated master - quorum and recovery settings](https://discuss.elastic.co/t/dedicated-master-quorum-and-recovery-settings/34893)

<div class="topic-metadata">

**Author:** [@Chris\_Fraschetti](https://discuss.elastic.co/u/Chris_Fraschetti)\
**Replies:** 3\
**Last updated:** [November 19, 2015, 12:49am UTC](https://discuss.elastic.co/t/dedicated-master-quorum-and-recovery-settings/34893 "2015-11-19T00:49:46Z")

</div>

My cluster has finally reached the size/complexity where I'm ready to roll out dedicated master nodes. What I haven't been able to 100% nail down is what settings belong on the data nodes vs. what belong on the master …

---

## [Is it wise to use ES for saving shopping Carts?](https://discuss.elastic.co/t/is-it-wise-to-use-es-for-saving-shopping-carts/17677)

<div class="topic-metadata">

**Author:** [@Matthias\_Feist](https://discuss.elastic.co/u/Matthias_Feist)\
**Replies:** 3\
**Last updated:** [May 23, 2014, 7:39am UTC](https://discuss.elastic.co/t/is-it-wise-to-use-es-for-saving-shopping-carts/17677 "2014-05-23T07:39:24Z")

</div>

Hi Guys, I'm working on an online shop. Currently we are storing the cart's content in a MySQL Database so we can very easy access the amount of a certain product and determine the reserved quantity. This is very…

---

## [How can I display current data and time in kibana canvas？](https://discuss.elastic.co/t/how-can-i-display-current-data-and-time-in-kibana-canvas/333011)

<div class="topic-metadata">

**Author:** [@1455929251](https://discuss.elastic.co/u/1455929251)\
**Replies:** 4\
**Last updated:** [May 31, 2023, 10:26pm UTC](https://discuss.elastic.co/t/how-can-i-display-current-data-and-time-in-kibana-canvas/333011 "2023-05-31T22:26:49Z")

</div>

I want to add a shape element and show current data and time on it, like "2023-05-10 10:06:23" which can automatically refresh. But I can not find some function or system variables can query current time.

---

## [Logstash process stops abruptly](https://discuss.elastic.co/t/logstash-process-stops-abruptly/245895)

<div class="topic-metadata">

**Author:** [@tarund](https://discuss.elastic.co/u/tarund)\
**Replies:** 4\
**Last updated:** [September 3, 2020, 7:37pm UTC](https://discuss.elastic.co/t/logstash-process-stops-abruptly/245895 "2020-09-03T19:37:09Z")

</div>

I am using Logstash version 7.7.1 to parse some log files located on the same server. Using file input filter, grok filter & Elasticsearch output The process stops abruptly after some time, with nothing in the logs, ev…

---

## [./bin/elasticsearch -version kills any running elasticsearch](https://discuss.elastic.co/t/bin-elasticsearch-version-kills-any-running-elasticsearch/156822)

<div class="topic-metadata">

**Author:** [@JohanRask](https://discuss.elastic.co/u/JohanRask)\
**Replies:** 4\
**Last updated:** [November 15, 2018, 10:33am UTC](https://discuss.elastic.co/t/bin-elasticsearch-version-kills-any-running-elasticsearch/156822 "2018-11-15T10:33:11Z")

</div>

From elasticsearch-6.4.3, if we run ./bin/elasticsearch -version any running elasticsearch instance seems to be killed with -9. This does did not happen before this version. We are performing a version check before updat…

---

## [Why all the Indices not upgraded in ES 6.1.1 after upgradation from 5.4.1?](https://discuss.elastic.co/t/why-all-the-indices-not-upgraded-in-es-6-1-1-after-upgradation-from-5-4-1/115626)

<div class="topic-metadata">

**Author:** [@PinkiMondal](https://discuss.elastic.co/u/PinkiMondal)\
**Replies:** 4\
**Last updated:** [January 16, 2018, 5:07am UTC](https://discuss.elastic.co/t/why-all-the-indices-not-upgraded-in-es-6-1-1-after-upgradation-from-5-4-1/115626 "2018-01-16T05:07:43Z")

</div>

I have upgraded data from 5.4.1 to 6.1.1 using Full Cluster Restart But all the indices not coming in ES 6.1.1 These are the steps that I followed: 1. Start ES 5.4.1 and Kibana 5.4.1 2. Go to DevTools 3. Run PUT \_cl…

---

## [Logstash cannot upload files, "failed to open Permission Denied"](https://discuss.elastic.co/t/logstash-cannot-upload-files-failed-to-open-permission-denied/76584)

<div class="topic-metadata">

**Author:** [@ArieTwigt](https://discuss.elastic.co/u/ArieTwigt)\
**Replies:** 4\
**Last updated:** [February 27, 2017, 11:22am UTC](https://discuss.elastic.co/t/logstash-cannot-upload-files-failed-to-open-permission-denied/76584 "2017-02-27T11:22:47Z")

</div>

I am facing an issue with uploading XML-files to an index in the cloud using Logstash. I have a directory with around 10.000 files and configured a Logstash in which all the contents of that directory are indicated. When…

---

## [Delete by query stuck after installing plugin](https://discuss.elastic.co/t/delete-by-query-stuck-after-installing-plugin/51837)

<div class="topic-metadata">

**Author:** [@arpan](https://discuss.elastic.co/u/arpan)\
**Replies:** 4\
**Last updated:** [June 22, 2016, 7:21pm UTC](https://discuss.elastic.co/t/delete-by-query-stuck-after-installing-plugin/51837 "2016-06-22T19:21:58Z")

</div>

I installed the delete-by-query plugin for elasticsearch 2.3. and I am running a time query and unable to get the query to run. It just gets stuck before timing out. Has anyone encountered something similar? This is wh…

---

## [Deleting all documents in an index](https://discuss.elastic.co/t/deleting-all-documents-in-an-index/37442)

<div class="topic-metadata">

**Author:** [@AOzoukou](https://discuss.elastic.co/u/AOzoukou)\
**Replies:** 4\
**Last updated:** [December 17, 2015, 9:10am UTC](https://discuss.elastic.co/t/deleting-all-documents-in-an-index/37442 "2015-12-17T09:10:16Z")

</div>

Hello, I have installed latest version (2.1.0) of ElasticSearch. It works very well, you have done a very good job \[:smile:\] . I would want to know how to clear all the documents in an index (of a specific type) without …

---

## [Querying a not\_analyzed field returning analyzed results](https://discuss.elastic.co/t/querying-a-not-analyzed-field-returning-analyzed-results/29714)

<div class="topic-metadata">

**Author:** [@aitchon](https://discuss.elastic.co/u/aitchon)\
**Replies:** 4\
**Last updated:** [September 21, 2015, 6:54pm UTC](https://discuss.elastic.co/t/querying-a-not-analyzed-field-returning-analyzed-results/29714 "2015-09-21T18:54:45Z")

</div>

I set a template mapping for an index like this: PUT template/testtemplate { "template" : "testsites-\*", "mappings": { "type1": { "properties": { "testurl": { "type":"string"…

---

## [Elasticsearch Development: Subsets of Documents](https://discuss.elastic.co/t/elasticsearch-development-subsets-of-documents/20566)

<div class="topic-metadata">

**Author:** [@Brook\_Miller](https://discuss.elastic.co/u/Brook_Miller)\
**Replies:** 4\
**Last updated:** [November 4, 2014, 8:45pm UTC](https://discuss.elastic.co/t/elasticsearch-development-subsets-of-documents/20566 "2014-11-04T20:45:15Z")

</div>

We are pretty comfortable with Lucene and have used it extensively but we'd like to move from our existing proprietary application layer to using ElasticSearch (support for merging results across shards, replication)…

---

## [User Activities on Kibana](https://discuss.elastic.co/t/user-activities-on-kibana/116642)

<div class="topic-metadata">

**Author:** [@tony0918](https://discuss.elastic.co/u/tony0918)\
**Replies:** 1\
**Last updated:** [January 26, 2018, 7:48pm UTC](https://discuss.elastic.co/t/user-activities-on-kibana/116642 "2018-01-26T19:48:49Z")

</div>

Is that possible to get user activities happened on Kibana by enabling X-pack? Actually what we need to figure out is: Who has visited which dashboard / visualization? Which dashboard is the most popular one? Thanks. …

---

## [\[esaggs\] \> Internal Server Error in Dashboard error](https://discuss.elastic.co/t/esaggs-internal-server-error-in-dashboard-error/243500)

<div class="topic-metadata">

**Author:** [@nisargtest1](https://discuss.elastic.co/u/nisargtest1)\
**Replies:** 1\
**Last updated:** [August 3, 2020, 9:03pm UTC](https://discuss.elastic.co/t/esaggs-internal-server-error-in-dashboard-error/243500 "2020-08-03T21:03:06Z")

</div>

While visualizing data through dashboard,I am getting \[esaggs\] \> Internal Server Error for long time range e.g. 100 hours, 1 week, 8 days. It works fine for short time range e.g. 24 hours, 48 hours

---

## [I cant access S3 repo CEPH using repository-s3](https://discuss.elastic.co/t/i-cant-access-s3-repo-ceph-using-repository-s3/180621)

<div class="topic-metadata">

**Author:** [@Marcio\_Roberto\_Miran](https://discuss.elastic.co/u/Marcio_Roberto_Miran)\
**Replies:** 1\
**Last updated:** [May 11, 2019, 7:21am UTC](https://discuss.elastic.co/t/i-cant-access-s3-repo-ceph-using-repository-s3/180621 "2019-05-11T07:21:25Z")

</div>

Hi, im using the elasticsearch oss 6.4.3 and repository-s3. I want send my snapshots to a CEPH repository. My problem is i cant send, always is returned a error. IMO the pluging try create repository in amazon and not a…

---

## [\[o.e.d.r.RestController \] Content type detection for rest requests is deprecated. Specify the content type using the \[Content-Type\] header](https://discuss.elastic.co/t/o-e-d-r-restcontroller-content-type-detection-for-rest-requests-is-deprecated-specify-the-content-type-using-the-content-type-header/98564)

<div class="topic-metadata">

**Author:** [@zheng\_mao\_Peng](https://discuss.elastic.co/u/zheng_mao_Peng)\
**Replies:** 1\
**Last updated:** [August 28, 2017, 2:36pm UTC](https://discuss.elastic.co/t/o-e-d-r-restcontroller-content-type-detection-for-rest-requests-is-deprecated-specify-the-content-type-using-the-content-type-header/98564 "2017-08-28T14:36:25Z")

</div>

my Elasticearch version 5.5.2 OS：centos 6.5 Java version:openjdk version “1.8.0\_51” Elasticearch status: yellow xxxx\_deprecation.log: \[2017-08-28T20:05:36,357\]\[WARN \]\[o.e.d.r.RestController \] Content type detectio…

---

## [Elasticsearch username and password](https://discuss.elastic.co/t/elasticsearch-username-and-password/60018)

<div class="topic-metadata">

**Author:** [@Jose\_Campos](https://discuss.elastic.co/u/Jose_Campos)\
**Replies:** 1\
**Last updated:** [September 7, 2016, 9:24pm UTC](https://discuss.elastic.co/t/elasticsearch-username-and-password/60018 "2016-09-07T21:24:54Z")

</div>

Hi there Someone can help me with this issue? \[security\_exception\] action \[cluster:monitor/nodes/info\] requires authentication, with: {"header":{"WWW-Authenticate":"Basic realm=\\"shield\\""}} This is happening in …

[Previous page](https://discuss.elastic.co/top.md?page=1361&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1363&per_page=50&period=all)
