# Top

**URL:** https://discuss.elastic.co/top.md?page=137&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 138

---

## [Error parsing csv invalid file format](https://discuss.elastic.co/t/error-parsing-csv-invalid-file-format/132147)

<div class="topic-metadata">

**Author:** [@sandeepnarla22322](https://discuss.elastic.co/u/sandeepnarla22322)\
**Replies:** 15\
**Last updated:** [May 22, 2018, 9:09pm UTC](https://discuss.elastic.co/t/error-parsing-csv-invalid-file-format/132147 "2018-05-22T21:09:13Z")

</div>

hello all below is the log format and I was using ; as separator and trying to using the following logstash configuration and I am getting parsing error Kindly suggest what can be done thanks in advance csv { separato…

---

## [Syslog input configuration for Logstash](https://discuss.elastic.co/t/syslog-input-configuration-for-logstash/211510)

<div class="topic-metadata">

**Author:** [@Marcell0e](https://discuss.elastic.co/u/Marcell0e)\
**Replies:** 10\
**Last updated:** [January 8, 2020, 2:46pm UTC](https://discuss.elastic.co/t/syslog-input-configuration-for-logstash/211510 "2020-01-08T14:46:23Z")

</div>

I want to send syslog files to my logstash, but not sure how to incorporate it with my beats input. When I have tried adding my beats stop working. Below is my logstash file. input { beats { port =\> 5044 } } …

---

## [ES - MARVEL 2.0 or 2.1 NOT working under OS WINDOWS 10 due to BOOTSTRAP](https://discuss.elastic.co/t/es-marvel-2-0-or-2-1-not-working-under-os-windows-10-due-to-bootstrap/35809)

<div class="topic-metadata">

**Author:** [@oguchi](https://discuss.elastic.co/u/oguchi)\
**Replies:** 10\
**Last updated:** [November 29, 2015, 8:41am UTC](https://discuss.elastic.co/t/es-marvel-2-0-or-2-1-not-working-under-os-windows-10-due-to-bootstrap/35809 "2015-11-29T08:41:55Z")

</div>

ES - MARVEL will not work under WIN10 OS due to error / warning sounded in the first phrase found in the log: " \[2015-11-28 09:45:48,879\]\[WARN \]\[bootstrap \] unable to install syscall filter: syscall filte…

---

## [Badly formatted index, after interpolation still contains placeholder](https://discuss.elastic.co/t/badly-formatted-index-after-interpolation-still-contains-placeholder/345205)

<div class="topic-metadata">

**Author:** [@John\_paul](https://discuss.elastic.co/u/John_paul)\
**Replies:** 14\
**Last updated:** [October 17, 2023, 5:01pm UTC](https://discuss.elastic.co/t/badly-formatted-index-after-interpolation-still-contains-placeholder/345205 "2023-10-17T17:01:21Z")

</div>

Hey guys, facing this below issue, was working fine while using indexes directly but started failing when configured to use data streams, ERROR: elasticsearch - Badly formatted index, after interpolation still contains …

---

## [Some indexes showing values as null](https://discuss.elastic.co/t/some-indexes-showing-values-as-null/57533)

<div class="topic-metadata">

**Author:** [@Mormaii](https://discuss.elastic.co/u/Mormaii)\
**Replies:** 9\
**Last updated:** [August 11, 2016, 11:27am UTC](https://discuss.elastic.co/t/some-indexes-showing-values-as-null/57533 "2016-08-11T11:27:37Z")

</div>

I'm trying to pair up elasticsearch with grafana and the strange thing I can't diagnose is that some indexes work and some don't. All of the indexes have the same kind of data and mapping so I don't have a clue why they …

---

## [Put SLM as per the documents complains about the index name?](https://discuss.elastic.co/t/put-slm-as-per-the-documents-complains-about-the-index-name/222923)

<div class="topic-metadata">

**Author:** [@runtman](https://discuss.elastic.co/u/runtman)\
**Replies:** 12\
**Last updated:** [March 23, 2020, 11:38am UTC](https://discuss.elastic.co/t/put-slm-as-per-the-documents-complains-about-the-index-name/222923 "2020-03-23T11:38:09Z")

</div>

Hello, I use elastic cloud and apart from the automatic backups that take place, I'd like to use SLM so we can have 2 sets of backups. Disaster recovery etc. So I have been following this: https://www.elastic.co/guide/…

---

## [Any way to graph this?](https://discuss.elastic.co/t/any-way-to-graph-this/55445)

<div class="topic-metadata">

**Author:** [@Mormaii](https://discuss.elastic.co/u/Mormaii)\
**Replies:** 11\
**Last updated:** [July 14, 2016, 7:53pm UTC](https://discuss.elastic.co/t/any-way-to-graph-this/55445 "2016-07-14T19:53:28Z")

</div>

I'm storing this data on Logstash and trying to find a way to create a visualize it with Kibana. { "@timestamp" =\> "2016-07-13T21:34:02.123Z", …

---

## [Logstash creates a new index every 24 hours](https://discuss.elastic.co/t/logstash-creates-a-new-index-every-24-hours/140793)

<div class="topic-metadata">

**Author:** [@APJ](https://discuss.elastic.co/u/APJ)\
**Replies:** 15\
**Last updated:** [August 3, 2018, 4:04am UTC](https://discuss.elastic.co/t/logstash-creates-a-new-index-every-24-hours/140793 "2018-08-03T04:04:17Z")

</div>

Hi all, I am using https://openweathermap.org/ current weather API to display current weather data. I was able successfully visualize the data on Kibana after it created a new index weather-2018.07.18. Here is my logs…

---

## [Terms Agg](https://discuss.elastic.co/t/terms-agg/170966)

<div class="topic-metadata">

**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\
**Replies:** 28\
**Last updated:** [March 18, 2019, 8:11pm UTC](https://discuss.elastic.co/t/terms-agg/170966 "2019-03-18T20:11:24Z")

</div>

When running a Terms Aggregation query setting min\_doc\_count: 0 doesn't return terms with no values with zero. is there anything that needs to be checked.

---

## [Azure Module Error](https://discuss.elastic.co/t/azure-module-error/227210)

<div class="topic-metadata">

**Author:** [@craigothy](https://discuss.elastic.co/u/craigothy)\
**Replies:** 13\
**Last updated:** [April 16, 2020, 6:20am UTC](https://discuss.elastic.co/t/azure-module-error/227210 "2020-04-16T06:20:13Z")

</div>

Using version 7.6.1 I am getting an error when starting filebeat with the azure module enabled. Any ideas what could be causing this? Thank you. 2020-04-08T21:35:17.140-0500 INFO \[azure-eventhub input\] azureeven…

---

## [Issue with rollover](https://discuss.elastic.co/t/issue-with-rollover/246488)

<div class="topic-metadata">

**Author:** [@sbk-elk](https://discuss.elastic.co/u/sbk-elk)\
**Replies:** 13\
**Last updated:** [September 12, 2020, 7:44pm UTC](https://discuss.elastic.co/t/issue-with-rollover/246488 "2020-09-12T19:44:57Z")

</div>

Hi, I am trying to bootstrap an index to write after and getting the below error: { "error" : { "root\_cause" : \[ { "type" : "resource\_already\_exists\_exception", "reason" : "index \[logs-sbk-000001/qa4ur3ZUQCmqugKN9…

---

## [Time stamp is wrong](https://discuss.elastic.co/t/time-stamp-is-wrong/251958)

<div class="topic-metadata">

**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\
**Replies:** 10\
**Last updated:** [October 14, 2020, 10:14pm UTC](https://discuss.elastic.co/t/time-stamp-is-wrong/251958 "2020-10-14T22:14:28Z")

</div>

I have a problem with the time stamp I get the date right, but the time is wrong I get like 5 hours in advance, the date is right but I do not know why I get another time of execution, set the time zone in kibana, but I …

---

## [Are objects searchable after updates?](https://discuss.elastic.co/t/are-objects-searchable-after-updates/98562)

<div class="topic-metadata">

**Author:** [@artelk](https://discuss.elastic.co/u/artelk)\
**Replies:** 18\
**Last updated:** [September 8, 2017, 10:07am UTC](https://discuss.elastic.co/t/are-objects-searchable-after-updates/98562 "2017-09-08T10:07:47Z")

</div>

Imagine you have an object with a property X. The initial value of the property is 13. The object is searchable by a predicate “X \> 10”. Someone modifies the property value to 42. Do we have guarantees that the objec…

---

## [How hot/warm architecture enhances query performance?](https://discuss.elastic.co/t/how-hot-warm-architecture-enhances-query-performance/134781)

<div class="topic-metadata">

**Author:** [@palashkulsh](https://discuss.elastic.co/u/palashkulsh)\
**Replies:** 10\
**Last updated:** [June 27, 2018, 4:53pm UTC](https://discuss.elastic.co/t/how-hot-warm-architecture-enhances-query-performance/134781 "2018-06-27T16:53:19Z")

</div>

In our current running architecture we are not having hot /warm nodes. So all open indices are almost equally distributed across all data nodes. All our queries specify multiple indices to query, we dont use wildcards. I…

---

## [Can I use Curator 4.2.4 with ElasticSearch 2.x](https://discuss.elastic.co/t/can-i-use-curator-4-2-4-with-elasticsearch-2-x/68816)

<div class="topic-metadata">

**Author:** [@Srinivas\_Mangipudi](https://discuss.elastic.co/u/Srinivas_Mangipudi)\
**Replies:** 14\
**Last updated:** [December 14, 2016, 11:09am UTC](https://discuss.elastic.co/t/can-i-use-curator-4-2-4-with-elasticsearch-2-x/68816 "2016-12-14T11:09:31Z")

</div>

We are using ElasticSearch 2.x on AWS EC2 instance. This is the latest version they have available and we are not getting any response to if they will ever upgrade it to the latest version. So we need to use curator on…

---

## [Translate Plugin in Logstash not working](https://discuss.elastic.co/t/translate-plugin-in-logstash-not-working/104186)

<div class="topic-metadata">

**Author:** [@sreejiths](https://discuss.elastic.co/u/sreejiths)\
**Replies:** 9\
**Last updated:** [October 19, 2017, 6:33am UTC](https://discuss.elastic.co/t/translate-plugin-in-logstash-not-working/104186 "2017-10-19T06:33:09Z")

</div>

I am using Logstash V5.2 . Using ELK for device syslog Analytics . I have requirement in which if a source of device (Ip address) sending syslog matches one column of the csv file , i need to add a field which will be th…

---

## [Script for generating index template and ascii doc](https://discuss.elastic.co/t/script-for-generating-index-template-and-ascii-doc/33756)

<div class="topic-metadata">

**Author:** [@mrkschan](https://discuss.elastic.co/u/mrkschan)\
**Replies:** 9\
**Last updated:** [November 9, 2015, 9:33am UTC](https://discuss.elastic.co/t/script-for-generating-index-template-and-ascii-doc/33756 "2015-11-09T09:33:25Z")

</div>

There are scripts living in topbeat that generates index template and ascii doc. Though, they are not supporting nested data type yet. Is nested data type a good practice to use in ES? If yes, shall they be supported in …

---

## [Fielddata breaker question](https://discuss.elastic.co/t/fielddata-breaker-question/16104)

<div class="topic-metadata">

**Author:** [@dunaeth](https://discuss.elastic.co/u/dunaeth)\
**Replies:** 35\
**Last updated:** [April 17, 2014, 2:39pm UTC](https://discuss.elastic.co/t/fielddata-breaker-question/16104 "2014-04-17T14:39:06Z")

</div>

Hi, I'd like to know how the fielddata breaker settings are used in a cluster. We had a single index in production without any issue but when we added some new indices, we started to have issues on the old index a…

---

## [I have a problem when I want to send logs of clamav-0.104.2.linux.x86\_64 to EK version 7.14.2 , ubuntu 20.04](https://discuss.elastic.co/t/i-have-a-problem-when-i-want-to-send-logs-of-clamav-0-104-2-linux-x86-64-to-ek-version-7-14-2-ubuntu-20-04/297611)

<div class="topic-metadata">

**Author:** [@khouloud1](https://discuss.elastic.co/u/khouloud1)\
**Replies:** 9\
**Last updated:** [April 4, 2022, 2:31pm UTC](https://discuss.elastic.co/t/i-have-a-problem-when-i-want-to-send-logs-of-clamav-0-104-2-linux-x86-64-to-ek-version-7-14-2-ubuntu-20-04/297611 "2022-04-04T14:31:12Z")

</div>

I have a problem when I want to send logs of clamav-0.104.2.linux.x86\_64 to EK version 7.14.2 I did configure PFSense to send logsto EK but I did not find the best procedure to configure Elasticsearch and Kibana (7.14.2…

---

## [2.0 in-memory/many-update indices best-practices?](https://discuss.elastic.co/t/2-0-in-memory-many-update-indices-best-practices/35835)

<div class="topic-metadata">

**Author:** [@yehosef](https://discuss.elastic.co/u/yehosef)\
**Replies:** 9\
**Last updated:** [December 1, 2015, 8:07am UTC](https://discuss.elastic.co/t/2-0-in-memory-many-update-indices-best-practices/35835 "2015-12-01T08:07:17Z")

</div>

I see that memory is no longer an option for the index.store.type . I'm not sure what the considerations were - but I have a specific problem that might benefit from putting the index into memory and I'm looking for ad…

---

## [Elasticsearch data indexing for logstash](https://discuss.elastic.co/t/elasticsearch-data-indexing-for-logstash/35066)

<div class="topic-metadata">

**Author:** [@raghu\_ae](https://discuss.elastic.co/u/raghu_ae)\
**Replies:** 9\
**Last updated:** [November 30, 2015, 6:03pm UTC](https://discuss.elastic.co/t/elasticsearch-data-indexing-for-logstash/35066 "2015-11-30T18:03:05Z")

</div>

As we know elasticsearch stores the logstash indices in the format logstash-yyyy.mm.dd. Does elastic search creates new indexes for new date by re-indexing previous day indexes? Ex: I am observing every day logstash-\*…

---

## [While setting path.repo for snapshot facing error](https://discuss.elastic.co/t/while-setting-path-repo-for-snapshot-facing-error/150338)

<div class="topic-metadata">

**Author:** [@johnrabi](https://discuss.elastic.co/u/johnrabi)\
**Replies:** 11\
**Last updated:** [October 4, 2018, 8:34am UTC](https://discuss.elastic.co/t/while-setting-path-repo-for-snapshot-facing-error/150338 "2018-10-04T08:34:16Z")

</div>

Hi Team, I have given the backup folder like this in elasticsearch.yml but facing error while restart the elasticsearch , can anyone help me to resolve this issue? path.repo:\["/home/ec2-user/es\_backup"\] Caused by: whi…

---

## [Not able to add links in data table to different dashboards](https://discuss.elastic.co/t/not-able-to-add-links-in-data-table-to-different-dashboards/240465)

<div class="topic-metadata">

**Author:** [@PRACHI\_GUPTA](https://discuss.elastic.co/u/PRACHI_GUPTA)\
**Replies:** 13\
**Last updated:** [July 13, 2020, 6:34am UTC](https://discuss.elastic.co/t/not-able-to-add-links-in-data-table-to-different-dashboards/240465 "2020-07-13T06:34:28Z")

</div>

Hi, I am new to kibana. I need to create a table having 4 links in each row for different dashboards. But I can not find any suitable way to do that. Please help. Thanks!!

---

## [Logstash TCP input pipeline performance issues](https://discuss.elastic.co/t/logstash-tcp-input-pipeline-performance-issues/328006)

<div class="topic-metadata">

**Author:** [@mread830](https://discuss.elastic.co/u/mread830)\
**Replies:** 9\
**Last updated:** [March 22, 2023, 9:44pm UTC](https://discuss.elastic.co/t/logstash-tcp-input-pipeline-performance-issues/328006 "2023-03-22T21:44:22Z")

</div>

I’m having an issue when a particular pipeline and i’m not sure how to track it down or trouble shoot it further.. First, I have multiple cloud environments, configured the same, sending to the same endpoints. 2 of the…

---

## [Unable to connect to Elastic search cloud with Transport client API](https://discuss.elastic.co/t/unable-to-connect-to-elastic-search-cloud-with-transport-client-api/165362)

<div class="topic-metadata">

**Author:** [@Shyju\_M](https://discuss.elastic.co/u/Shyju_M)\
**Replies:** 10\
**Last updated:** [January 24, 2019, 9:51am UTC](https://discuss.elastic.co/t/unable-to-connect-to-elastic-search-cloud-with-transport-client-api/165362 "2019-01-24T09:51:06Z")

</div>

Please help me to connect to the elastic cloud from the transport client pom.xml \<dependency\> \<groupId\>org.elasticsearch\</groupId\> \<artifactId\>elasticsearch\</artifactId\> \</dependency\> \<depende…

---

## [TCP output reconnect interval setting](https://discuss.elastic.co/t/tcp-output-reconnect-interval-setting/90885)

<div class="topic-metadata">

**Author:** [@s802645](https://discuss.elastic.co/u/s802645)\
**Replies:** 9\
**Last updated:** [July 3, 2017, 7:43am UTC](https://discuss.elastic.co/t/tcp-output-reconnect-interval-setting/90885 "2017-07-03T07:43:06Z")

</div>

The reconnect interval setting for TCP output plugin is by default 10. What would happen if I set it to 0. Does it mean logstash would not attempt to reconnect to the destination at all? thanks.

---

## [Got error when starting a elastic server cluster](https://discuss.elastic.co/t/got-error-when-starting-a-elastic-server-cluster/156209)

<div class="topic-metadata">

**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\
**Replies:** 16\
**Last updated:** [December 17, 2018, 10:09am UTC](https://discuss.elastic.co/t/got-error-when-starting-a-elastic-server-cluster/156209 "2018-12-17T10:09:14Z")

</div>

I got error like below in both servers \[2018-11-11T12:38:21,155\]\[WARN \]\[o.e.b.JNANatives \] Unable to lock JVM Memory: error=12, reason=Cannot allocate memory \[2018-11-11T12:38:21,157\]\[WARN \]\[o.e.b.JNANatives …

---

## [Installing Elastic Agent with GPO](https://discuss.elastic.co/t/installing-elastic-agent-with-gpo/364659)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 13\
**Last updated:** [August 22, 2024, 12:03pm UTC](https://discuss.elastic.co/t/installing-elastic-agent-with-gpo/364659 "2024-08-22T12:03:35Z")

</div>

Im looking to deploy Elastic Agent via a GPO. What is the best way to do it? It should autoenroll onto Fleet without any manual token needed

---

## [Periodic temporary cluster slowdown/freeze during long index process](https://discuss.elastic.co/t/periodic-temporary-cluster-slowdown-freeze-during-long-index-process/3736)

<div class="topic-metadata">

**Author:** [@vpunski](https://discuss.elastic.co/u/vpunski)\
**Replies:** 9\
**Last updated:** [January 6, 2011, 8:27am UTC](https://discuss.elastic.co/t/periodic-temporary-cluster-slowdown-freeze-during-long-index-process/3736 "2011-01-06T08:27:06Z")

</div>

I have 9 nodes ES cluster, Q9400 CPU, 8G RAM, SATA2 discs, 4G heap size. ES runs in embedded mode, with small web logic wrapping it. All 9 nodes are load balanced. GC tuned properly, no long tenured collections at al…

---

## [Can I put or update document when calling 'force merge' an index?](https://discuss.elastic.co/t/can-i-put-or-update-document-when-calling-force-merge-an-index/114039)

<div class="topic-metadata">

**Author:** [@michaelcheung](https://discuss.elastic.co/u/michaelcheung)\
**Replies:** 10\
**Last updated:** [January 15, 2018, 9:12am UTC](https://discuss.elastic.co/t/can-i-put-or-update-document-when-calling-force-merge-an-index/114039 "2018-01-15T09:12:34Z")

</div>

As mentioned in topic, I call force merge api, to manually clean up deleted docs in an index. Is it possible and safe to update document or put new document in 'merging' index?

---

## [Urgent :ELK version compatible for Windows 10 to install as a service](https://discuss.elastic.co/t/urgent-elk-version-compatible-for-windows-10-to-install-as-a-service/110270)

<div class="topic-metadata">

**Author:** [@richagautam](https://discuss.elastic.co/u/richagautam)\
**Replies:** 12\
**Last updated:** [December 5, 2017, 10:02am UTC](https://discuss.elastic.co/t/urgent-elk-version-compatible-for-windows-10-to-install-as-a-service/110270 "2017-12-05T10:02:24Z")

</div>

Hi Team, I have to install ELK for my project. Kindly advice which ELK version will be compatible for Windows 10 to install as windows service Thanks Richa

---

## [The whole log of openedr is inside the message feild in kibana. Urgent!](https://discuss.elastic.co/t/the-whole-log-of-openedr-is-inside-the-message-feild-in-kibana-urgent/358535)

<div class="topic-metadata">

**Author:** [@sandraimmaculate](https://discuss.elastic.co/u/sandraimmaculate)\
**Replies:** 39\
**Last updated:** [May 7, 2024, 1:18pm UTC](https://discuss.elastic.co/t/the-whole-log-of-openedr-is-inside-the-message-feild-in-kibana-urgent/358535 "2024-05-07T13:18:00Z")

</div>

Hi, my openedr application is in windows i have downloaded filebeat there and configure it to send logs to logstash so that i can view in kibana and yes it done successfully. I'm able to see logs in kibana\>discover, B…

---

## [Медленный unified highlighting](https://discuss.elastic.co/t/unified-highlighting/205653)

<div class="topic-metadata">

**Author:** [@GreenX](https://discuss.elastic.co/u/GreenX)\
**Replies:** 25\
**Last updated:** [October 31, 2019, 3:03pm UTC](https://discuss.elastic.co/t/unified-highlighting/205653 "2019-10-31T15:03:02Z")

</div>

День добрый! Очень медленно работает unified highlighting если в analizer используется hunspell filter. Я понимаю, что многое зависит от словаря... но в моей проблеме задерживается подсветка, а не поиск. Причем очень с…

---

## [Logstash is not able to connect to ELasticsearch](https://discuss.elastic.co/t/logstash-is-not-able-to-connect-to-elasticsearch/282206)

<div class="topic-metadata">

**Author:** [@Aboli\_77](https://discuss.elastic.co/u/Aboli_77)\
**Replies:** 12\
**Last updated:** [September 2, 2021, 1:07am UTC](https://discuss.elastic.co/t/logstash-is-not-able-to-connect-to-elasticsearch/282206 "2021-09-02T01:07:40Z")

</div>

I am trying to run logstash but getting below error: ./logstash -f /etc/logstash/conf.d/abc.conf WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. You can specify the p…

---

## [Unable to use the ODBC driver as a SQL Server Linked Server](https://discuss.elastic.co/t/unable-to-use-the-odbc-driver-as-a-sql-server-linked-server/230660)

<div class="topic-metadata">

**Author:** [@rgelb](https://discuss.elastic.co/u/rgelb)\
**Replies:** 15\
**Last updated:** [June 17, 2020, 10:39am UTC](https://discuss.elastic.co/t/unable-to-use-the-odbc-driver-as-a-sql-server-linked-server/230660 "2020-06-17T10:39:53Z")

</div>

I've setup an ODBC 64-bit driver on a server that runs SQL Server 2017. I picked the ODBC version to match the ElasticSearch installation (6.0.6). The installation of the ODBC driver and creation of a Linked Server wen…

---

## [Using Elastic SIEM and ML with Beats and Logstash](https://discuss.elastic.co/t/using-elastic-siem-and-ml-with-beats-and-logstash/242560)

<div class="topic-metadata">

**Author:** [@chancewwr](https://discuss.elastic.co/u/chancewwr)\
**Replies:** 12\
**Last updated:** [August 10, 2020, 10:16pm UTC](https://discuss.elastic.co/t/using-elastic-siem-and-ml-with-beats-and-logstash/242560 "2020-08-10T22:16:04Z")

</div>

Hello all. My question is what is the general method for using beats with logstash if you want access to Elastic SIEM and the like? Elastic SIEM works well when the data is gathered via beats and sent directly to Elasti…

---

## [Data loss when old master node dead and startup again](https://discuss.elastic.co/t/data-loss-when-old-master-node-dead-and-startup-again/169506)

<div class="topic-metadata">

**Author:** [@jffree](https://discuss.elastic.co/u/jffree)\
**Replies:** 15\
**Last updated:** [February 25, 2019, 7:08am UTC](https://discuss.elastic.co/t/data-loss-when-old-master-node-dead-and-startup-again/169506 "2019-02-25T07:08:55Z")

</div>

Describe the feature: Elasticsearch version (bin/elasticsearch --version): elasticsearch/elasticsearch-oss:6.3.2 docker version: 18.03.1-ce OS version (uname -a if on a Unix-like system): centos7.5 Description of the…

---

## [What happen to replicas after rolling restart?](https://discuss.elastic.co/t/what-happen-to-replicas-after-rolling-restart/27628)

<div class="topic-metadata">

**Author:** [@shinyke](https://discuss.elastic.co/u/shinyke)\
**Replies:** 11\
**Last updated:** [May 20, 2016, 7:11am UTC](https://discuss.elastic.co/t/what-happen-to-replicas-after-rolling-restart/27628 "2016-05-20T07:11:33Z")

</div>

Hi, We follow these steps to restart our cluster https://www.elastic.co/guide/en/elasticsearch/guide/current/\_rolling\_restarts.html . What make us confuse is the replicas‘ recovery. Do replicas lost in restart and ne…

---

## [Rally not showing tournaments](https://discuss.elastic.co/t/rally-not-showing-tournaments/58746)

<div class="topic-metadata">

**Author:** [@rsFF](https://discuss.elastic.co/u/rsFF)\
**Replies:** 12\
**Last updated:** [August 26, 2016, 6:50am UTC](https://discuss.elastic.co/t/rally-not-showing-tournaments/58746 "2016-08-26T06:50:21Z")

</div>

Hey there, So after doing some runs on my cluster "esrally --pipeline=benchmark-only" when I try to compare the runs I don't get any output. Thanks

---

## [Connecting hdfs and elasticsearch](https://discuss.elastic.co/t/connecting-hdfs-and-elasticsearch/138829)

<div class="topic-metadata">

**Author:** [@impu.vasudev](https://discuss.elastic.co/u/impu.vasudev)\
**Replies:** 10\
**Last updated:** [July 6, 2018, 12:48pm UTC](https://discuss.elastic.co/t/connecting-hdfs-and-elasticsearch/138829 "2018-07-06T12:48:53Z")

</div>

Hi all, I am new to Elasticsearch and kibana and I want to use Elasticsearch and kibana for one my project Real Time Monitoring, I want establish two-way connection between hdfs and elasticsearch. I used Hive extern…

---

## [Elastic 6 Upgrade issues on Elastic Cloud](https://discuss.elastic.co/t/elastic-6-upgrade-issues-on-elastic-cloud/112466)

<div class="topic-metadata">

**Author:** [@Adam.Reynolds](https://discuss.elastic.co/u/Adam.Reynolds)\
**Replies:** 13\
**Last updated:** [January 15, 2018, 10:11am UTC](https://discuss.elastic.co/t/elastic-6-upgrade-issues-on-elastic-cloud/112466 "2018-01-15T10:11:18Z")

</div>

When running the Cluster Checkup from ES 5.6.5 I get a message saying "Deprecated script security settings changes" followed by a long list of script security settings. This Cluster was originally a 2.4.4 cluster, upgra…

---

## [Filebeat exec](https://discuss.elastic.co/t/filebeat-exec/77850)

<div class="topic-metadata">

**Author:** [@kmroz](https://discuss.elastic.co/u/kmroz)\
**Replies:** 13\
**Last updated:** [March 8, 2017, 5:28pm UTC](https://discuss.elastic.co/t/filebeat-exec/77850 "2017-03-08T17:28:17Z")

</div>

Is there a way to run an exec on a file and then ship that output to logstash?

---

## [Add filter to send specific fields to elasticsearch](https://discuss.elastic.co/t/add-filter-to-send-specific-fields-to-elasticsearch/168096)

<div class="topic-metadata">

**Author:** [@adityak248](https://discuss.elastic.co/u/adityak248)\
**Replies:** 11\
**Last updated:** [February 12, 2019, 9:22pm UTC](https://discuss.elastic.co/t/add-filter-to-send-specific-fields-to-elasticsearch/168096 "2019-02-12T21:22:33Z")

</div>

Hello Team, Greetings I am looking to add only specific fields to send via filebeat or I am looking to receive only specific fields in elasticsearch or I am looking for Logstash to filter the incoming fields and stor…

---

## [Jvm heap size continuous increase](https://discuss.elastic.co/t/jvm-heap-size-continuous-increase/118987)

<div class="topic-metadata">

**Author:** [@junkainiu](https://discuss.elastic.co/u/junkainiu)\
**Replies:** 10\
**Last updated:** [February 8, 2018, 10:49am UTC](https://discuss.elastic.co/t/jvm-heap-size-continuous-increase/118987 "2018-02-08T10:49:33Z")

</div>

Elasticsearch version (bin/elasticsearch --version): 5.3.0 Plugins installed: \[\] None JVM version (java -version): 1.8.0\_66 OS version (uname -a if on a Unix-like system): centos 7 Linux localhost.localdomain 3.1…

---

## [Logstash не может распачрсить сообщение, а в grokdebugger парсит](https://discuss.elastic.co/t/logstash-grokdebugger/206660)

<div class="topic-metadata">

**Author:** [@artem33region](https://discuss.elastic.co/u/artem33region)\
**Replies:** 18\
**Last updated:** [November 14, 2019, 2:39pm UTC](https://discuss.elastic.co/t/logstash-grokdebugger/206660 "2019-11-14T14:39:52Z")

</div>

Всем привет, есть конфиг: #recieve syslog on Ports input { tcp { port =\> 5044 type =\> syslog tags =\> "ise" } udp { port =\> 5044 type =\> syslog tags =\> "ise" } } filter { if "ise" in \[t…

---

## [I'm receiving just one log](https://discuss.elastic.co/t/im-receiving-just-one-log/138674)

<div class="topic-metadata">

**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\
**Replies:** 27\
**Last updated:** [July 10, 2018, 12:13pm UTC](https://discuss.elastic.co/t/im-receiving-just-one-log/138674 "2018-07-10T12:13:00Z")

</div>

Hi, Please I don't why Kibana is receinving juste one log and when I refresh the timestamp changes ( It means that he is receing logs but just one and deleting other :o )

---

## [Script based conditional sorting for date fields inside nested object](https://discuss.elastic.co/t/script-based-conditional-sorting-for-date-fields-inside-nested-object/310432)

<div class="topic-metadata">

**Author:** [@M\_L](https://discuss.elastic.co/u/M_L)\
**Replies:** 9\
**Last updated:** [July 27, 2022, 12:00pm UTC](https://discuss.elastic.co/t/script-based-conditional-sorting-for-date-fields-inside-nested-object/310432 "2022-07-27T12:00:42Z")

</div>

Hello. I have the following property in my mapping: "attempts": { "type": "nested", "properties": { "type": { "type": "keyword" }, "reason": { "type": "keyword" }, "status": { …

---

## [Custom Webpack settings integration with kibana plugin](https://discuss.elastic.co/t/custom-webpack-settings-integration-with-kibana-plugin/195162)

<div class="topic-metadata">

**Author:** [@pradeep\_c8](https://discuss.elastic.co/u/pradeep_c8)\
**Replies:** 9\
**Last updated:** [September 5, 2019, 10:47pm UTC](https://discuss.elastic.co/t/custom-webpack-settings-integration-with-kibana-plugin/195162 "2019-09-05T22:47:38Z")

</div>

Hi, Am trying to merge my react application with kibana plugin, In my react application I used webpack server and webpack configurations, I used alias to refer my files, I need those configs to be inserted with kibana p…

---

## [Sharding by time](https://discuss.elastic.co/t/sharding-by-time/6071)

<div class="topic-metadata">

**Author:** [@Rafal\_Kuc](https://discuss.elastic.co/u/Rafal_Kuc)\
**Replies:** 15\
**Last updated:** [May 3, 2013, 10:42am UTC](https://discuss.elastic.co/t/sharding-by-time/6071 "2013-05-03T10:42:24Z")

</div>

Hello, I've got a question about the design of Elasticsearch deployment in the project I'm currently working on. We want to divide data by date because of the amount of data we have. We need to keep the data 'a…

---

## [Monitoring tab blank](https://discuss.elastic.co/t/monitoring-tab-blank/245525)

<div class="topic-metadata">

**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\
**Replies:** 18\
**Last updated:** [October 8, 2020, 3:47pm UTC](https://discuss.elastic.co/t/monitoring-tab-blank/245525 "2020-10-08T15:47:10Z")

</div>

Updated from 7.8.1 to 7.9 today on my monitoring cluster and after clicking on the monitoring tab, i am presented with a blank page. No error with regards to Kibana but from the web console i can see this. I assume it i…

[Previous page](https://discuss.elastic.co/top.md?page=136&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=138&per_page=50&period=all)
