# Top **URL:** https://discuss.elastic.co/top.md?page=1376&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1377 --- ## [Snapshot between 5.4.x versions](https://discuss.elastic.co/t/snapshot-between-5-4-x-versions/100193)
**Author:** [@magrossi](https://discuss.elastic.co/u/magrossi)\ **Replies:** 5\ **Last updated:** [September 13, 2017, 10:00am UTC](https://discuss.elastic.co/t/snapshot-between-5-4-x-versions/100193 "2017-09-13T10:00:31Z")
Hi, I have a 5.4.1 Elastic cluster that takes snapshots for backup. In case of a disaster (ie. our current cloud provider goes offline) we would need to quickly move to a different cloud provider. I'm looking into movin… --- ## [EET Time converted to UTC....... why?](https://discuss.elastic.co/t/eet-time-converted-to-utc-why/88021)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 5\ **Last updated:** [June 2, 2017, 8:00am UTC](https://discuss.elastic.co/t/eet-time-converted-to-utc-why/88021 "2017-06-02T08:00:42Z")
Hi, I have below configuration to logstash indexer. grok { match =\> { "message" =\> "%{TIMESTAMP\_ISO8601:logTime}" } } log message: 2017-06-02 08:28:59,335 | INFO acknowledgeMessages Acknowl… --- ## [Cannot export monitoring data from a cluster to to monitoring cluster](https://discuss.elastic.co/t/cannot-export-monitoring-data-from-a-cluster-to-to-monitoring-cluster/173926)
**Author:** [@worapojc](https://discuss.elastic.co/u/worapojc)\ **Replies:** 1\ **Last updated:** [March 26, 2019, 9:15pm UTC](https://discuss.elastic.co/t/cannot-export-monitoring-data-from-a-cluster-to-to-monitoring-cluster/173926 "2019-03-26T21:15:53Z")
It shows connection refused. This monitoring was work before what should I do. Is that cause from the connection timeout issue? \[2019-03-26T11:39:10,592\]\[WARN \]\[o.e.x.m.e.h.NodeFailureListener\] \[10.49.116.129-master-no… --- ## [Elasticsearch\_dsl set query size to 0 automaticly](https://discuss.elastic.co/t/elasticsearch-dsl-set-query-size-to-0-automaticly/159620)
**Author:** [@Aviran](https://discuss.elastic.co/u/Aviran)\ **Replies:** 1\ **Last updated:** [December 5, 2018, 11:31pm UTC](https://discuss.elastic.co/t/elasticsearch-dsl-set-query-size-to-0-automaticly/159620 "2018-12-05T23:31:43Z")
Im getting very odd behavior from elasticseach\_dsl Im running the following from python es\_controller.es\_dsl.index('management\_users') \\ .doc\_type('user') \\ .filter('term', email=email).execute() When … --- ## [ElasticSearch - MongoDB sync](https://discuss.elastic.co/t/elasticsearch-mongodb-sync/113663)
**Author:** [@Koustav\_Chatterjee](https://discuss.elastic.co/u/Koustav_Chatterjee)\ **Replies:** 1\ **Last updated:** [December 31, 2017, 5:39pm UTC](https://discuss.elastic.co/t/elasticsearch-mongodb-sync/113663 "2017-12-31T17:39:47Z")
I have a elasticSearch server and mongodb Server.Data is feed into mongodb which needs to in turn pushed into ElasticSearch.I am looking for realtime updates into the ES server. I evaluated logstash using logstash-inpu… --- ## [Hourly log rotation?](https://discuss.elastic.co/t/hourly-log-rotation/106958)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 1\ **Last updated:** [November 10, 2017, 3:33pm UTC](https://discuss.elastic.co/t/hourly-log-rotation/106958 "2017-11-10T15:33:58Z")
Hi, Is it possible to create hourly log files? output { if \[type\] == "netflow" { file { path =\> "/home/test/Desktop/test/netflow-%{+YYYY-MM-dd-HH}.gz" gzip =\> true } } } Creates a properly timestamped file whe… --- ## [Long vs Integer](https://discuss.elastic.co/t/long-vs-integer/65967)
**Author:** [@Sundar\_V](https://discuss.elastic.co/u/Sundar_V)\ **Replies:** 1\ **Last updated:** [November 14, 2016, 1:25pm UTC](https://discuss.elastic.co/t/long-vs-integer/65967 "2016-11-14T13:25:50Z")
Hello Is there an advantage or disadvantage is choosing a variable as integer vs long. From the answer here, it seems that even if I choose integer, the variable internal to ES is still long. So the only advantage … --- ## [Elasticsearch does not start after changing data path?](https://discuss.elastic.co/t/elasticsearch-does-not-start-after-changing-data-path/62107)
**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\ **Replies:** 1\ **Last updated:** [October 6, 2016, 5:35pm UTC](https://discuss.elastic.co/t/elasticsearch-does-not-start-after-changing-data-path/62107 "2016-10-06T17:35:43Z")
I configured Elasticsearch with Search Guard SSL and Search Guard and am able to run it correctly with the default data path setting, i.e., path.data commented out in elasticsearch.yml. The default data path is /var/lib/… --- ## [Aws ingest pipeline error in processor rename "message" to "event.original"](https://discuss.elastic.co/t/aws-ingest-pipeline-error-in-processor-rename-message-to-event-original/341472)
**Author:** [@diogoeverson](https://discuss.elastic.co/u/diogoeverson)\ **Replies:** 8\ **Last updated:** [August 24, 2023, 2:46pm UTC](https://discuss.elastic.co/t/aws-ingest-pipeline-error-in-processor-rename-message-to-event-original/341472 "2023-08-24T14:46:48Z")
Parse aws vpcflow or cloudtrail logs is not working. When testing the pipeline auto generate by filebeat it returns an error: field \[event.original\] already exists. Processors: \[ { "drop": { "if": "ctx.mess… --- ## [Increasing indexing performance without sacrificing reliability](https://discuss.elastic.co/t/increasing-indexing-performance-without-sacrificing-reliability/162718)
**Author:** [@amomchilov](https://discuss.elastic.co/u/amomchilov)\ **Replies:** 8\ **Last updated:** [January 24, 2019, 6:37am UTC](https://discuss.elastic.co/t/increasing-indexing-performance-without-sacrificing-reliability/162718 "2019-01-24T06:37:45Z")
Hey guys, I've got a 6.5 PB cluster, composed of 150 d2.8xlarge instances (36 cores @ 2.5 GHz, 244 GB RAM, 24 hard disks (2 TB each, not in RAID)) that act as both data and ingest nodes. I have Filebeat running on 700+ p… --- ## [\[ANN\] geocluster-facet 0.0.1](https://discuss.elastic.co/t/ann-geocluster-facet-0-0-1/9748)
**Author:** [@Eric\_Jain](https://discuss.elastic.co/u/Eric_Jain)\ **Replies:** 8\ **Last updated:** [November 19, 2012, 1:14pm UTC](https://discuss.elastic.co/t/ann-geocluster-facet-0-0-1/9748 "2012-11-19T13:14:18Z")
Here's a (somewhat simplistic) facet that clusters geo\_points: https://github.com/zenobase/geocluster-facet You can see this plugin in action here: https://zenobase.com/#/buckets/u07qih0a27/ Hoping to get… --- ## [Is there a way to install Elasticsearch Curator offline?](https://discuss.elastic.co/t/is-there-a-way-to-install-elasticsearch-curator-offline/82)
**Author:** [@robyn](https://discuss.elastic.co/u/robyn)\ **Replies:** 0\ **Last updated:** [May 1, 2015, 6:28am UTC](https://discuss.elastic.co/t/is-there-a-way-to-install-elasticsearch-curator-offline/82 "2015-05-01T06:28:00Z")
To install Elasticsearch Curator offline, you will first need to have pip installed on the offline host. Then you will be able to install Curator by following the procedure below: Download the required packages on a… --- ## [Dependencies "an error happened when trying to fetch data"](https://discuss.elastic.co/t/dependencies-an-error-happened-when-trying-to-fetch-data/296954)
**Author:** [@Bevaldss](https://discuss.elastic.co/u/Bevaldss)\ **Replies:** 4\ **Last updated:** [February 15, 2022, 9:19am UTC](https://discuss.elastic.co/t/dependencies-an-error-happened-when-trying-to-fetch-data/296954 "2022-02-15T09:19:29Z")
APM Server version: 7.16 APM Agent language and version: dotnet 1.8.0+8605545e8cbc5b7d68941354a22099a9c43a4aca Browser version: Same problem with Chrome 98.0.4758.82 as with MS Edge 98.0.1108.43 and also same with F… --- ## [Xpath Functions in Logstash](https://discuss.elastic.co/t/xpath-functions-in-logstash/295119)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 4\ **Last updated:** [January 23, 2022, 6:43pm UTC](https://discuss.elastic.co/t/xpath-functions-in-logstash/295119 "2022-01-23T18:43:31Z")
I am needing to use xpath functions like string-join() and concat() to extract what I need from my XML file, however whenever I use these functions I get the following warning in my logstash-plain.log: \[2022-01-21T20:4… --- ## [ILM: index not showing in Cold phase and Delete phase](https://discuss.elastic.co/t/ilm-index-not-showing-in-cold-phase-and-delete-phase/272289)
**Author:** [@neko](https://discuss.elastic.co/u/neko)\ **Replies:** 4\ **Last updated:** [June 1, 2021, 11:42am UTC](https://discuss.elastic.co/t/ilm-index-not-showing-in-cold-phase-and-delete-phase/272289 "2021-06-01T11:42:48Z")
Hi, I'm using Winlogbeat and i've defined a lifecycle with the following phases: Hot, Warm, Cold and Delete. In Index Management i have indices only for Hot and Warm phases. Could someone tell me what is wrong? Any he… --- ## [Logstash has duplicate timestamp field](https://discuss.elastic.co/t/logstash-has-duplicate-timestamp-field/183557)
**Author:** [@ramzey1981](https://discuss.elastic.co/u/ramzey1981)\ **Replies:** 4\ **Last updated:** [May 31, 2019, 12:04am UTC](https://discuss.elastic.co/t/logstash-has-duplicate-timestamp-field/183557 "2019-05-31T00:04:44Z")
I have some cassandra logs that use this custom pattern for logging MILLISECOND (\\d{3}) JAVALOGBACKTIMESTAMP %{YEAR}-%{MONTHNUM}-%{MONTHDAY}\[T \]%{HOUR}:%{MINUTE}:%{SECOND},%{MILLISECOND} CASS\_BASE ^%{LOGLEVEL:level} \\\[… --- ## [Problema con Plugin Twitter](https://discuss.elastic.co/t/problema-con-plugin-twitter/79437)
**Author:** [@raulrivas85](https://discuss.elastic.co/u/raulrivas85)\ **Replies:** 4\ **Last updated:** [March 21, 2017, 3:26pm UTC](https://discuss.elastic.co/t/problema-con-plugin-twitter/79437 "2017-03-21T15:26:08Z")
Estimados, espero me puedan ayudar, estoy teniendo el siguiente error al recolectar twitte con logstash: {:timestamp=\>"2017-03-21T11:24:08.575000-0300", :message=\>"End of file reached", :exception=\>#, :backtrace=\>\["o… --- ## [Dashboard table: color boolean cell](https://discuss.elastic.co/t/dashboard-table-color-boolean-cell/320274)
**Author:** [@emmanuel\_t](https://discuss.elastic.co/u/emmanuel_t)\ **Replies:** 2\ **Last updated:** [December 2, 2022, 9:18am UTC](https://discuss.elastic.co/t/dashboard-table-color-boolean-cell/320274 "2022-12-02T09:18:12Z")
Hello, I have boolean data in my index, that I'm rendering in a dashboard table (currently lens, but I could change to another system, as long as the final rendering looks like a table). I would like to color the boolea… --- ## [Helm chart - readinessProbe failure without errors](https://discuss.elastic.co/t/helm-chart-readinessprobe-failure-without-errors/295091)
**Author:** [@aumthanki](https://discuss.elastic.co/u/aumthanki)\ **Replies:** 2\ **Last updated:** [January 24, 2022, 2:21pm UTC](https://discuss.elastic.co/t/helm-chart-readinessprobe-failure-without-errors/295091 "2022-01-24T14:21:39Z")
Hi, Has anyone been forced to tweak the readinessprobe for the filebeat chart? readinessProbe: exec: command: - sh - -c - | #!/usr/bin/env bash -e filebeat test output failureThreshold: 3 initialDelaySeconds: … --- ## [Cant create index after deleted them all](https://discuss.elastic.co/t/cant-create-index-after-deleted-them-all/216564)
**Author:** [@zilahir](https://discuss.elastic.co/u/zilahir)\ **Replies:** 2\ **Last updated:** [January 27, 2020, 9:58am UTC](https://discuss.elastic.co/t/cant-create-index-after-deleted-them-all/216564 "2020-01-27T09:58:29Z")
So, i have deleted all my indicies, using the endpoint: DELETE \/\* after this, started to add data to Elasticsearch again, which are arriving there successfully. In kibana, when i create index, it seems i… --- ## [Missing User-ID field on Netflow from Palo Alto](https://discuss.elastic.co/t/missing-user-id-field-on-netflow-from-palo-alto/208327)
**Author:** [@fpieressa](https://discuss.elastic.co/u/fpieressa)\ **Replies:** 2\ **Last updated:** [November 19, 2019, 1:57am UTC](https://discuss.elastic.co/t/missing-user-id-field-on-netflow-from-palo-alto/208327 "2019-11-19T01:57:44Z")
Hi team, we have configured a Palo Alto Firewall to send Netflow to a Filebeat. We are seeing all events right, except that the "User-ID" Netflow field (value 56702) its not shown. We have replaced the Filebeat with a … --- ## [Is there a way to disable the search profiler in Kibana?](https://discuss.elastic.co/t/is-there-a-way-to-disable-the-search-profiler-in-kibana/79764)
**Author:** [@Emilie\_Lavigne](https://discuss.elastic.co/u/Emilie_Lavigne)\ **Replies:** 2\ **Last updated:** [March 24, 2017, 3:04pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-disable-the-search-profiler-in-kibana/79764 "2017-03-24T15:04:18Z")
For some customer facing deployments, we would like to include xpack, but not show the dev tools tabs. Without xpack, the following kibana property properly hides the dev tools tab: console.enabled: false But once x… --- ## [Unable to get rid off error: "Visualize: Fielddata is disabled on text fields by default."](https://discuss.elastic.co/t/unable-to-get-rid-off-error-visualize-fielddata-is-disabled-on-text-fields-by-default/71229)
**Author:** [@rootameen](https://discuss.elastic.co/u/rootameen)\ **Replies:** 2\ **Last updated:** [January 17, 2017, 7:07am UTC](https://discuss.elastic.co/t/unable-to-get-rid-off-error-visualize-fielddata-is-disabled-on-text-fields-by-default/71229 "2017-01-17T07:07:54Z")
Hi guys, I recently started a new setup of ELK stack based on version 5.1. Everything went smoothly except for the visualization section on Kibana. Whenever I try to create something (like a visual of beat.name), I get … --- ## [Keep Strings when Labeling](https://discuss.elastic.co/t/keep-strings-when-labeling/59351)
**Author:** [@yeikel](https://discuss.elastic.co/u/yeikel)\ **Replies:** 2\ **Last updated:** [August 31, 2016, 3:07am UTC](https://discuss.elastic.co/t/keep-strings-when-labeling/59351 "2016-08-31T03:07:02Z")
I have the following sample Json file: \`{"id":1,"name":"Rachel Moreno","street":"Kinsman","gender":"Female","email":"rmoreno0@huffingtonpost.com","username":"rmoreno0","credit\_card\_type":"mastercard","balance":"$65306.7… --- ## [ExpressionScriptCompilationException\[Field \[\\] used in expression does not exist in mappings\];](https://discuss.elastic.co/t/expressionscriptcompilationexception-field-field-name-used-in-expression-does-not-exist-in-mappings/22560)
**Author:** [@AlexBV](https://discuss.elastic.co/u/AlexBV)\ **Replies:** 2\ **Last updated:** [June 19, 2016, 7:25am UTC](https://discuss.elastic.co/t/expressionscriptcompilationexception-field-field-name-used-in-expression-does-not-exist-in-mappings/22560 "2016-06-19T07:25:11Z")
Hi there, We're just getting started with ELK and are using: Elasticsearch 1.4.4 Kibana 4.0 on Ubuntu 14.04 We needed to create a scripted field to calculate the ratio between two numeric fields. These fields a… --- ## [Access nested fields with wildcards?](https://discuss.elastic.co/t/access-nested-fields-with-wildcards/37160)
**Author:** [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\ **Replies:** 2\ **Last updated:** [December 14, 2015, 8:23pm UTC](https://discuss.elastic.co/t/access-nested-fields-with-wildcards/37160 "2015-12-14T20:23:53Z")
I'm using the XML filter to parse an XML log, targeting "doc": filter{ xml{ source =\> "message" target =\> "doc" } But I have some numeric fields that come through as Strings. They are not in qu… --- ## [Elasticsearch Script merge the results of two aggregations](https://discuss.elastic.co/t/elasticsearch-script-merge-the-results-of-two-aggregations/22263)
**Author:** [@legend\_blue](https://discuss.elastic.co/u/legend_blue)\ **Replies:** 2\ **Last updated:** [February 20, 2015, 6:42am UTC](https://discuss.elastic.co/t/elasticsearch-script-merge-the-results-of-two-aggregations/22263 "2015-02-20T06:42:41Z")
I use aggregrations on elasticsearch version 1.3.8. I use aggregation script for awhile today ıt didnt work. Please help ı cant find any solution : This the mapping: "mappings": { "product": { … --- ## [Escaping field names in queries](https://discuss.elastic.co/t/escaping-field-names-in-queries/279861)
**Author:** [@stexxen](https://discuss.elastic.co/u/stexxen)\ **Replies:** 7\ **Last updated:** [July 29, 2021, 1:29pm UTC](https://discuss.elastic.co/t/escaping-field-names-in-queries/279861 "2021-07-29T13:29:11Z")
We have discovered that some documents in our index contain a source that resembles the following { "a": { "b" : \["test1"\] }, "a.b" : \["test2"\] } I'm aware of how to perform queries with "exists", but how do… --- ## [Ingestion from ES-Spark to Ingestion node](https://discuss.elastic.co/t/ingestion-from-es-spark-to-ingestion-node/247812)
**Author:** [@snambu5878](https://discuss.elastic.co/u/snambu5878)\ **Replies:** 7\ **Last updated:** [September 11, 2020, 8:36am UTC](https://discuss.elastic.co/t/ingestion-from-es-spark-to-ingestion-node/247812 "2020-09-11T08:36:26Z")
Hi Everyone, We have 12 node cluster, 1 ingestion, 3 master, 3 hot data, 2 warm data, 2 kibana (same for coordinating) nodes and 1 monitoring node. We are trying to ingestion data from Hadoop environment using ES-Spar… --- ## [Optimal configuration of the ES cluster](https://discuss.elastic.co/t/optimal-configuration-of-the-es-cluster/247825)
**Author:** [@IliaIsakhin](https://discuss.elastic.co/u/IliaIsakhin)\ **Replies:** 7\ **Last updated:** [September 8, 2020, 9:36am UTC](https://discuss.elastic.co/t/optimal-configuration-of-the-es-cluster/247825 "2020-09-08T09:36:40Z")
Hello! My ES 7.8.0 cluster contains 5 nodes with 120 GB heap memory and 32 CPU in it. Also, I have pretty large index with 6.6kk docs and, according to \_cat/indices/ API, with store.size 59.8gb and pri.store.size 30.1gb… --- ## [AWS through Proxy](https://discuss.elastic.co/t/aws-through-proxy/232022)
**Author:** [@spike83](https://discuss.elastic.co/u/spike83)\ **Replies:** 7\ **Last updated:** [May 12, 2020, 1:18pm UTC](https://discuss.elastic.co/t/aws-through-proxy/232022 "2020-05-12T13:18:28Z")
Hi, How can I add a proxy setting the the AWS module to get to the outside world? I appear to run into issues using the system variable https\_proxy when outputting to elastic internally, I can either get to AWS and not … --- ## [Watcher - How to reference an index field value in an email body](https://discuss.elastic.co/t/watcher-how-to-reference-an-index-field-value-in-an-email-body/205063)
**Author:** [@fim](https://discuss.elastic.co/u/fim)\ **Replies:** 1\ **Last updated:** [October 24, 2019, 2:41pm UTC](https://discuss.elastic.co/t/watcher-how-to-reference-an-index-field-value-in-an-email-body/205063 "2019-10-24T14:41:42Z")
I would like to trigger a watcher alert using Kibana Watcher UI. The condition works fine but I would like to give additional information in the email body. In my case the watcher will triggered when a transaction durat… --- ## [Adding support for kerberos authentication for kafka output](https://discuss.elastic.co/t/adding-support-for-kerberos-authentication-for-kafka-output/185020)
**Author:** [@file\_descriptor](https://discuss.elastic.co/u/file_descriptor)\ **Replies:** 1\ **Last updated:** [June 13, 2019, 8:59pm UTC](https://discuss.elastic.co/t/adding-support-for-kerberos-authentication-for-kafka-output/185020 "2019-06-13T20:59:57Z")
Hello, I'm a junior dev willing to start looking into implementing kerberos authentication for the kafka output of the \*Beats products. I've seen issues mentioning it, but to my knowledge nobody is working actively on i… --- ## [Error at updating ES index using JS API](https://discuss.elastic.co/t/error-at-updating-es-index-using-js-api/180356)
**Author:** [@matheusribeirogarcia](https://discuss.elastic.co/u/matheusribeirogarcia)\ **Replies:** 1\ **Last updated:** [May 9, 2019, 12:43pm UTC](https://discuss.elastic.co/t/error-at-updating-es-index-using-js-api/180356 "2019-05-09T12:43:11Z")
Basically I have this function: this.es.update({ index: 'contentman', type: 'sites', id: "\_id", body: { name: form.value.name, … --- ## [Nested fields vs. flat document](https://discuss.elastic.co/t/nested-fields-vs-flat-document/167191)
**Author:** [@SpeedDaemon](https://discuss.elastic.co/u/SpeedDaemon)\ **Replies:** 1\ **Last updated:** [March 5, 2019, 1:36pm UTC](https://discuss.elastic.co/t/nested-fields-vs-flat-document/167191 "2019-03-05T13:36:50Z")
I'm currently creating an index template for network logs. I currently have something like this: "mappings" : { "doc" : { "properties" : { ... "ip\_src" : { "type" : "ip" … --- ## [Processor for csv filter](https://discuss.elastic.co/t/processor-for-csv-filter/104922)
**Author:** [@Pratiksha\_Tewary](https://discuss.elastic.co/u/Pratiksha_Tewary)\ **Replies:** 7\ **Last updated:** [October 25, 2017, 3:14pm UTC](https://discuss.elastic.co/t/processor-for-csv-filter/104922 "2017-10-25T15:14:24Z")
Hi, I wanted to know if there are any Ingest node plugins similar to the "csv" filter in Logstash. I need to separate a tab delimited event into separate fields using ingest pipeline. Any help would be much appreciated. … --- ## [Install marvel free licence without Kibana](https://discuss.elastic.co/t/install-marvel-free-licence-without-kibana/80999)
**Author:** [@ledoc](https://discuss.elastic.co/u/ledoc)\ **Replies:** 1\ **Last updated:** [April 3, 2017, 12:10pm UTC](https://discuss.elastic.co/t/install-marvel-free-licence-without-kibana/80999 "2017-04-03T12:10:54Z")
Hi, I would like to know If i can install Marvel on my ES but without install Kibana. This database is installed for Graylog, so I don't need Kibana. I use 2.3.1 version of elastic. Thanks --- ## [How to set elasticsearch upsert content in logstash](https://discuss.elastic.co/t/how-to-set-elasticsearch-upsert-content-in-logstash/66792)
**Author:** [@satheeshravir](https://discuss.elastic.co/u/satheeshravir)\ **Replies:** 1\ **Last updated:** [November 22, 2016, 5:33pm UTC](https://discuss.elastic.co/t/how-to-set-elasticsearch-upsert-content-in-logstash/66792 "2016-11-22T17:33:19Z")
I am trying to index/update same event as json chunks (due to event size limit set by input file plugin) using elastic search output plugin. I can see only the last updated chunk in the elastisearch index. I would like t… --- ## [Logstash unable to read file in 6.6.0](https://discuss.elastic.co/t/logstash-unable-to-read-file-in-6-6-0/168672)
**Author:** [@shilpa.ks](https://discuss.elastic.co/u/shilpa.ks)\ **Replies:** 6\ **Last updated:** [February 16, 2019, 8:19pm UTC](https://discuss.elastic.co/t/logstash-unable-to-read-file-in-6-6-0/168672 "2019-02-16T20:19:10Z")
Hello Team, I have a .conf file which works perfectly fine with Logstash 6.3.2 but the same conf file is not working in 6.6.0 Please see below the conf file; input { #stdin { } file { path =\> \["C:\\ELK\\Test.txt"… --- ## [Elasticsearch 7.10.2 error](https://discuss.elastic.co/t/elasticsearch-7-10-2-error/334975)
**Author:** [@anderstr1](https://discuss.elastic.co/u/anderstr1)\ **Replies:** 3\ **Last updated:** [June 2, 2023, 9:08am UTC](https://discuss.elastic.co/t/elasticsearch-7-10-2-error/334975 "2023-06-02T09:08:53Z")
I am trying to setup Elasticsearch version 7.10.2 using the official docker image. I only need a single-node cluster and I have successfully managed to set it up locally in the container. This is the output from health … --- ## [Dotnet Client(\`Elastic.Clients.Elasticsearch\`) doesn't support knn\_search](https://discuss.elastic.co/t/dotnet-client-elastic-clients-elasticsearch-doesnt-support-knn-search/319795)
**Author:** [@Jiaxiang\_Wang](https://discuss.elastic.co/u/Jiaxiang_Wang)\ **Replies:** 3\ **Last updated:** [November 30, 2022, 3:29pm UTC](https://discuss.elastic.co/t/dotnet-client-elastic-clients-elasticsearch-doesnt-support-knn-search/319795 "2022-11-30T15:29:32Z")
I try to use elasticsearch knn\_search feature in dotnet. However, I don't think last stable version of es dotnet client Elastic.Clients.Elasticsearch(version 8.0.1) support knn\_search. I try to use Knn feature like cod… --- ## [Waiting for input plugin, Dropping events to unblock input plugin, Pipeline terminated](https://discuss.elastic.co/t/waiting-for-input-plugin-dropping-events-to-unblock-input-plugin-pipeline-terminated/319081)
**Author:** [@AdxDaz](https://discuss.elastic.co/u/AdxDaz)\ **Replies:** 3\ **Last updated:** [November 17, 2022, 11:19pm UTC](https://discuss.elastic.co/t/waiting-for-input-plugin-dropping-events-to-unblock-input-plugin-pipeline-terminated/319081 "2022-11-17T23:19:38Z")
Hi Elastic team, I was working in the next post "Locate json field with jsonpath (logstash) - #2 by Badger" and despite the code works, i have the next error when the position of the json value change: \[2022-11-15T09:3… --- ## [Unable to use painless script in group\_by term in transform](https://discuss.elastic.co/t/unable-to-use-painless-script-in-group-by-term-in-transform/239294)
**Author:** [@ayazahmed](https://discuss.elastic.co/u/ayazahmed)\ **Replies:** 3\ **Last updated:** [June 30, 2020, 2:38pm UTC](https://discuss.elastic.co/t/unable-to-use-painless-script-in-group-by-term-in-transform/239294 "2020-06-30T14:38:07Z")
following the tutorial from https://www.elastic.co/guide/en/elasticsearch/reference/current/transform-painless-examples.html#painless-group-by POST \_transform/\_preview { "source": { "index": \[ "kibana\_sampl… --- ## [Error trying reindex from remote host](https://discuss.elastic.co/t/error-trying-reindex-from-remote-host/174819)
**Author:** [@Turnover\_Dev](https://discuss.elastic.co/u/Turnover_Dev)\ **Replies:** 3\ **Last updated:** [April 1, 2019, 8:14pm UTC](https://discuss.elastic.co/t/error-trying-reindex-from-remote-host/174819 "2019-04-01T20:14:53Z")
Hi, dear Community of elastic I got this problem trying to reindex from a remote host of my production environment to my development one in the elastic cloud It may the error caused by the different versions of the host… --- ## ["error registering plugin" on logstash](https://discuss.elastic.co/t/error-registering-plugin-on-logstash/121744)
**Author:** [@Jose\_Ramierez](https://discuss.elastic.co/u/Jose_Ramierez)\ **Replies:** 0\ **Last updated:** [February 27, 2018, 10:24pm UTC](https://discuss.elastic.co/t/error-registering-plugin-on-logstash/121744 "2018-02-27T22:24:28Z")
I am chasing a stability problem in logstash and have turned on debug logging in the log4j config found in /etc/logstash/ Running logstash 5.6 We use only a custom tcp listener. issues spotted: \[2018-02-27T16:19:21,3… --- ## [Kibana 6.x dynamically loading and viewing dashboards](https://discuss.elastic.co/t/kibana-6-x-dynamically-loading-and-viewing-dashboards/114440)
**Author:** [@mksavic](https://discuss.elastic.co/u/mksavic)\ **Replies:** 3\ **Last updated:** [January 8, 2018, 8:04pm UTC](https://discuss.elastic.co/t/kibana-6-x-dynamically-loading-and-viewing-dashboards/114440 "2018-01-08T20:04:06Z")
Hello, I am attempting to dynamically load and view dashboards within a kibana instance. I have created a sample dashboard with a few visualizations, but cannot seem to find where this dashboard is located in the kibana… --- ## [IBM jdk problems with Elasticsearch](https://discuss.elastic.co/t/ibm-jdk-problems-with-elasticsearch/42104)
**Author:** [@punit\_naik1](https://discuss.elastic.co/u/punit_naik1)\ **Replies:** 3\ **Last updated:** [February 18, 2016, 7:24pm UTC](https://discuss.elastic.co/t/ibm-jdk-problems-with-elasticsearch/42104 "2016-02-18T19:24:26Z")
I am using IBM jdk on my power PC and running an Elasticsearch instance. But he problem is, when I start Elsaticsearch, it guves me th efollowing message in the log file and terminates: IBM runtimes suffer from several… --- ## [Logstash shipper or filebeat?](https://discuss.elastic.co/t/logstash-shipper-or-filebeat/39445)
**Author:** [@Kishore](https://discuss.elastic.co/u/Kishore)\ **Replies:** 3\ **Last updated:** [January 19, 2016, 7:08am UTC](https://discuss.elastic.co/t/logstash-shipper-or-filebeat/39445 "2016-01-19T07:08:29Z")
We are under the process of upgrading the versions of logstash and elasticsearch. Currently we are using logstash-1.4.2 version. Our project flow is like this " logstash shipper (parse the logs here only) ---\> ( ( redis… --- ## [File input breaks my logstash config](https://discuss.elastic.co/t/file-input-breaks-my-logstash-config/38909)
**Author:** [@CamJN](https://discuss.elastic.co/u/CamJN)\ **Replies:** 3\ **Last updated:** [January 13, 2016, 7:51pm UTC](https://discuss.elastic.co/t/file-input-breaks-my-logstash-config/38909 "2016-01-13T19:51:15Z")
I was previously using the stdin input plugin for testing and while startup was slow, it worked. When I switched to the file input startup takes ages and never actually completes (I don't get the startup completed messag… --- ## [Master-Slave not detected](https://discuss.elastic.co/t/master-slave-not-detected/10994)
**Author:** [@Ophir\_Michaeli](https://discuss.elastic.co/u/Ophir_Michaeli)\ **Replies:** 3\ **Last updated:** [March 14, 2013, 4:21pm UTC](https://discuss.elastic.co/t/master-slave-not-detected/10994 "2013-03-14T16:21:54Z")
Hi, I have 2 nodes that are on the same cluster and are not recognizing one another (both are becoming "new master" when node loaded). What should I check to resolve the issue? Thanks, Ophir … [Previous page](https://discuss.elastic.co/top.md?page=1375&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1377&per_page=50&period=all)