# Top **URL:** https://discuss.elastic.co/top.md?page=1385&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1386 --- ## [Logstash can't recognize csv columns](https://discuss.elastic.co/t/logstash-cant-recognize-csv-columns/196396)
**Author:** [@m.thecoder](https://discuss.elastic.co/u/m.thecoder)\ **Replies:** 5\ **Last updated:** [August 23, 2019, 12:01am UTC](https://discuss.elastic.co/t/logstash-cant-recognize-csv-columns/196396 "2019-08-23T00:01:35Z")
Hello Guys, I've configured logstah to read multiple csv files, each one has a different columns set (different column names), it reads the first one successfully, but it never reads the columns for any csv after readin… --- ## [Keyword datatype and analysis](https://discuss.elastic.co/t/keyword-datatype-and-analysis/66359)
**Author:** [@knights](https://discuss.elastic.co/u/knights)\ **Replies:** 5\ **Last updated:** [December 9, 2016, 2:27pm UTC](https://discuss.elastic.co/t/keyword-datatype-and-analysis/66359 "2016-12-09T14:27:13Z")
Hello, everyone I am currently testing elasticsearch 5.0. That version should, as far as I understand, solve and old problem of mine : allowing doc values to be used on keyword-analyzed fields. This is great, because I… --- ## [Kibana down with Error saying out of memory](https://discuss.elastic.co/t/kibana-down-with-error-saying-out-of-memory/197921)
**Author:** [@jasmineL](https://discuss.elastic.co/u/jasmineL)\ **Replies:** 1\ **Last updated:** [September 4, 2019, 8:05pm UTC](https://discuss.elastic.co/t/kibana-down-with-error-saying-out-of-memory/197921 "2019-09-04T20:05:09Z")
Hi, I build Kibana 6.8 package from source file with basic license of x-pack and deployed to our servers. But I always get Out of memory error after running like every 3 days or 4. FATAL ERROR: CALL\_AND\_RETRY\_LAST Allo… --- ## [Markdown on Kibana 6x image sizing is not working](https://discuss.elastic.co/t/markdown-on-kibana-6x-image-sizing-is-not-working/130289)
**Author:** [@Nsearch](https://discuss.elastic.co/u/Nsearch)\ **Replies:** 1\ **Last updated:** [May 2, 2018, 4:58pm UTC](https://discuss.elastic.co/t/markdown-on-kibana-6x-image-sizing-is-not-working/130289 "2018-05-02T16:58:55Z")
All, I used markdown to render image on my Kibana page. The syntax below is working fine with exception of resizing the image. !\[Alt text\](http://image server/image.png) ----\> this is working !\[Alt text\](http://image … --- ## [Elasticsearch with X-pack on Windows fails to run](https://discuss.elastic.co/t/elasticsearch-with-x-pack-on-windows-fails-to-run/126431)
**Author:** [@Ongun](https://discuss.elastic.co/u/Ongun)\ **Replies:** 1\ **Last updated:** [April 2, 2018, 7:47pm UTC](https://discuss.elastic.co/t/elasticsearch-with-x-pack-on-windows-fails-to-run/126431 "2018-04-02T19:47:04Z")
I recently installed X-pack for Elasticsearch and Kibana 6.2.2 on Windows 10. I followed the instructions on the this internet guide word by word. However, after installing X-pack for Kibana and restarting the ELK stack … --- ## [How to scale logstash-kafka](https://discuss.elastic.co/t/how-to-scale-logstash-kafka/55193)
**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\ **Replies:** 1\ **Last updated:** [July 30, 2016, 1:41am UTC](https://discuss.elastic.co/t/how-to-scale-logstash-kafka/55193 "2016-07-30T01:41:11Z")
We are using the logstash-kafka input with this configuration: kafka { #Kafka Consumer Group ("logstash" is default, specifying for clarity) group\_id =\> "logstash" white\_list =\> "topic1,topic2,topic3,...,to… --- ## [How can I see server time in kibana](https://discuss.elastic.co/t/how-can-i-see-server-time-in-kibana/56035)
**Author:** [@aniamin](https://discuss.elastic.co/u/aniamin)\ **Replies:** 1\ **Last updated:** [July 21, 2016, 4:03pm UTC](https://discuss.elastic.co/t/how-can-i-see-server-time-in-kibana/56035 "2016-07-21T16:03:25Z")
Currently I am using Kibana version 4.1.10 (Updated one). As we have a distributed team we would like to see Server time in Kibana Dash Board. Is it possible to set the Kibana Time of Dashboard as Server Time so that I d… --- ## [Selective Filtering In Visualizations Using Scripted Fields](https://discuss.elastic.co/t/selective-filtering-in-visualizations-using-scripted-fields/52085)
**Author:** [@PatriciaSauer](https://discuss.elastic.co/u/PatriciaSauer)\ **Replies:** 1\ **Last updated:** [June 7, 2016, 8:55pm UTC](https://discuss.elastic.co/t/selective-filtering-in-visualizations-using-scripted-fields/52085 "2016-06-07T20:55:31Z")
Hi all, I wanted to apply filters to only some visualizations. Those visualizations are using scripted fields and as far as I know I cannot search for scripted fields. When trying to search for scripted fields I was no… --- ## [Kibana pipelines ui not found?](https://discuss.elastic.co/t/kibana-pipelines-ui-not-found/241622)
**Author:** [@lework](https://discuss.elastic.co/u/lework)\ **Replies:** 6\ **Last updated:** [August 7, 2020, 12:20pm UTC](https://discuss.elastic.co/t/kibana-pipelines-ui-not-found/241622 "2020-08-07T12:20:06Z")
version : 7.8.0 kibana ui http://node1:5601/logstash/pipelines/nginx?\_g=(cluster\_uuid:%278vWjGROoTxeIW2yGB2UUng%27,refreshInterval:(pause:!f,value:10000),time:(from:now-1h,to:now)) {"statusCode":404,"error":"Not Found"… --- ## [What’s the means about this params in the metricbeat log file?](https://discuss.elastic.co/t/what-s-the-means-about-this-params-in-the-metricbeat-log-file/108999)
**Author:** [@AmosChen](https://discuss.elastic.co/u/AmosChen)\ **Replies:** 6\ **Last updated:** [November 29, 2017, 3:39am UTC](https://discuss.elastic.co/t/what-s-the-means-about-this-params-in-the-metricbeat-log-file/108999 "2017-11-29T03:39:14Z")
Hi, We run some metricbeat in our machines. And collect the run log every 10 mins. After check the log at /etc/log/metricbeat, we feel puzzled. And we don't find any document about it. One log record like followed: f… --- ## [Index .kibana\_1 already exists during startup(7.7.0)](https://discuss.elastic.co/t/index-kibana-1-already-exists-during-startup-7-7-0/258549)
**Author:** [@zj27](https://discuss.elastic.co/u/zj27)\ **Replies:** 3\ **Last updated:** [December 16, 2020, 8:30am UTC](https://discuss.elastic.co/t/index-kibana-1-already-exists-during-startup-7-7-0/258549 "2020-12-16T08:30:56Z")
Hi when I first start the Kibana on a clean environment, sometimes it will fail with error "Index .kibana\_1 already exists ". I checked the log and code, then noticed the the .kibana\_1 was created but took too long time … --- ## [(Storing products) Storing and retrieving items with subsets of configuration](https://discuss.elastic.co/t/storing-products-storing-and-retrieving-items-with-subsets-of-configuration/154196)
**Author:** [@mrncgirc](https://discuss.elastic.co/u/mrncgirc)\ **Replies:** 3\ **Last updated:** [October 26, 2018, 1:36pm UTC](https://discuss.elastic.co/t/storing-products-storing-and-retrieving-items-with-subsets-of-configuration/154196 "2018-10-26T13:36:10Z")
Using Elasticsearch for storing product data Use case We are using Elasticsearch to store "complex" products. Specifically I store Rims and Tire products. Mapping We currently store a "group" of products per. hit. To be… --- ## [Creating separate documents from xml file : \_split\_type\_failure](https://discuss.elastic.co/t/creating-separate-documents-from-xml-file-split-type-failure/144205)
**Author:** [@safaa](https://discuss.elastic.co/u/safaa)\ **Replies:** 3\ **Last updated:** [August 13, 2018, 5:47pm UTC](https://discuss.elastic.co/t/creating-separate-documents-from-xml-file-split-type-failure/144205 "2018-08-13T17:47:37Z")
Hi, i parse xml file that contains 500 tag named" ReportItem ". I am using split filter to add disctint documents for each ReportItem . Logstash only parse the 3 documents and return file \_split\_type\_failure. Here is my… --- ## [Logs pulling from different server](https://discuss.elastic.co/t/logs-pulling-from-different-server/139092)
**Author:** [@amritesh\_mishra](https://discuss.elastic.co/u/amritesh_mishra)\ **Replies:** 3\ **Last updated:** [July 9, 2018, 8:22pm UTC](https://discuss.elastic.co/t/logs-pulling-from-different-server/139092 "2018-07-09T20:22:52Z")
Hi, I was looking for a following pipeline : RemoteServers(FileBeat) =\> Central Server (LogStash) =\> ElasticSearch I want FileBeat to copy files from client servers to a central repository (specific directory) and the… --- ## [GAUGE: Color is not changing](https://discuss.elastic.co/t/gauge-color-is-not-changing/128800)
**Author:** [@PolterFox](https://discuss.elastic.co/u/PolterFox)\ **Replies:** 3\ **Last updated:** [April 20, 2018, 4:10pm UTC](https://discuss.elastic.co/t/gauge-color-is-not-changing/128800 "2018-04-20T16:10:03Z")
Hello everybody :sunny: , I have a problem with an gauge. I have an value which average value I want to use. If the value is less than a specific value it should have the color green if the value is above, yellow and w… --- ## [Questions around Mapper Attachments 3.1.1 / ES 2.1.1](https://discuss.elastic.co/t/questions-around-mapper-attachments-3-1-1-es-2-1-1/38481)
**Author:** [@drixen](https://discuss.elastic.co/u/drixen)\ **Replies:** 3\ **Last updated:** [January 8, 2016, 3:45pm UTC](https://discuss.elastic.co/t/questions-around-mapper-attachments-3-1-1-es-2-1-1/38481 "2016-01-08T15:45:52Z")
Hello, I am testing the plugin Mapper Attachments 3.1.1 with ES 2.1.1, and using a set of xml files. After indexing my files as base64 encoded, i query the cluster like this : POST /test/divers/\_search { "fiel… --- ## [Share Canvas on website](https://discuss.elastic.co/t/share-canvas-on-website/288480)
**Author:** [@AlexM566](https://discuss.elastic.co/u/AlexM566)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 8:19am UTC](https://discuss.elastic.co/t/share-canvas-on-website/288480 "2021-11-17T08:19:10Z")
Hello everyone, I have a problem. I want to share a canvas in static website, and I follow every step from the documentation and it really show the workpad, BUT without my panels. I inserted in my canvas presentation s… --- ## [Custom Date range selectors](https://discuss.elastic.co/t/custom-date-range-selectors/226567)
**Author:** [@edwardj3](https://discuss.elastic.co/u/edwardj3)\ **Replies:** 2\ **Last updated:** [April 5, 2020, 7:39pm UTC](https://discuss.elastic.co/t/custom-date-range-selectors/226567 "2020-04-05T19:39:24Z")
Hi community, Had Data Analyst training this week and I asked if there were options to add the following to date picker section:- Yesterday Last Week Last Month This Week This Month I was advised that this could not … --- ## [Why I'm getting Invalid NEST Error](https://discuss.elastic.co/t/why-im-getting-invalid-nest-error/195743)
**Author:** [@bryanAlvarez](https://discuss.elastic.co/u/bryanAlvarez)\ **Replies:** 2\ **Last updated:** [August 20, 2019, 9:16pm UTC](https://discuss.elastic.co/t/why-im-getting-invalid-nest-error/195743 "2019-08-20T21:16:26Z")
Below is the error that I'm getting when trying to index, Invalid NEST response built from a unsuccessful low level call on POST: /bunzlecom07252019-2e68bd75-d741-474e-905f-121fb23a8847/product/\_bulk Invalid Bulk items… --- ## [Unable to view Filebeat index in Kibana](https://discuss.elastic.co/t/unable-to-view-filebeat-index-in-kibana/178836)
**Author:** [@vbrundavanam](https://discuss.elastic.co/u/vbrundavanam)\ **Replies:** 2\ **Last updated:** [April 29, 2019, 9:19am UTC](https://discuss.elastic.co/t/unable-to-view-filebeat-index-in-kibana/178836 "2019-04-29T09:19:21Z")
Hi, I configured filebeat and winlogbeat on my windows VM. I am able to see winlogbeat and i cant see filebeat. Please suggest on this. Below are the details. Elasticsearch version : 6.3.2 Logstash version : 6.3.2 Ki… --- ## [Change mapping question](https://discuss.elastic.co/t/change-mapping-question/110451)
**Author:** [@peterch](https://discuss.elastic.co/u/peterch)\ **Replies:** 2\ **Last updated:** [December 7, 2017, 3:33am UTC](https://discuss.elastic.co/t/change-mapping-question/110451 "2017-12-07T03:33:03Z")
Dear All, I would like change one of the field type from "text" to "IP" for geoip use but fail. May i know how to do that. Thanks GET /syslog/\_mapping { "syslog": { "mappings": { "doc": { "properties": { "@timest… --- ## [Compute duration between two ISO8601 fields in the same event](https://discuss.elastic.co/t/compute-duration-between-two-iso8601-fields-in-the-same-event/87497)
**Author:** [@Myles](https://discuss.elastic.co/u/Myles)\ **Replies:** 2\ **Last updated:** [May 30, 2017, 12:46pm UTC](https://discuss.elastic.co/t/compute-duration-between-two-iso8601-fields-in-the-same-event/87497 "2017-05-30T12:46:35Z")
I have an oracle ETL table that I am polling with the JDBC input and wanted to add a field as a calculation between the start and end time of the event which is logged in the same event. Here is what I've tried: fi… --- ## [How to avoid data loss when using CollectD?](https://discuss.elastic.co/t/how-to-avoid-data-loss-when-using-collectd/25167)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 2\ **Last updated:** [July 8, 2015, 5:06pm UTC](https://discuss.elastic.co/t/how-to-avoid-data-loss-when-using-collectd/25167 "2015-07-08T17:06:31Z")
I've successfully tested getting system load/RAM/etc statistics as described in the CollectD codec docs. That said, I haven't been able to figure out how to avoid a loss of data from my nodes when/if the Logstash indexer… --- ## [Join us for our first ever Developer Hangout](https://discuss.elastic.co/t/join-us-for-our-first-ever-developer-hangout/2553)
**Author:** [@Leslie\_Hawthorn](https://discuss.elastic.co/u/Leslie_Hawthorn)\ **Replies:** 2\ **Last updated:** [June 15, 2015, 5:36pm UTC](https://discuss.elastic.co/t/join-us-for-our-first-ever-developer-hangout/2553 "2015-06-15T17:36:53Z")
Dev Hangout with Aaron Mildenstein, Software Engineer - Logstash June 12 at 6 PM UTC / 11 AM PST / 8 PM CEST / 7 PM BST Please join us for our first ever Dev Hangout! You'll hear from Aaron Mildenstein about his journe… --- ## [No highlighting of exact mach terms in analyzed field](https://discuss.elastic.co/t/no-highlighting-of-exact-mach-terms-in-analyzed-field/14871)
**Author:** [@Maya](https://discuss.elastic.co/u/Maya)\ **Replies:** 2\ **Last updated:** [December 16, 2013, 11:53am UTC](https://discuss.elastic.co/t/no-highlighting-of-exact-mach-terms-in-analyzed-field/14871 "2013-12-16T11:53:11Z")
Hello All, We perform exact match query on \_all field and highlight an analyzed field (text.), which contains the text: { "query" : { "bool" : { "must" : \[ { "bool" : { "must" : \[ { "query\_string" : { "query" :… --- ## [Elastic APM Not Displaying Scheduler jobs](https://discuss.elastic.co/t/elastic-apm-not-displaying-scheduler-jobs/213956)
**Author:** [@vinay\_menon](https://discuss.elastic.co/u/vinay_menon)\ **Replies:** 1\ **Last updated:** [January 7, 2020, 9:48am UTC](https://discuss.elastic.co/t/elastic-apm-not-displaying-scheduler-jobs/213956 "2020-01-07T09:48:13Z")
7.5.1 Elastic search: 7.5.1 Kibana: 7.5.1 APM server: Java 1.8: Chrome 79.0.xx: download page: Fresh install Plain setup with ELasticsearch kibana and APM Server with agent in a simple tomcat server Scheduled job… --- ## [Visualizing with multiple fields](https://discuss.elastic.co/t/visualizing-with-multiple-fields/183191)
**Author:** [@madhan\_dc](https://discuss.elastic.co/u/madhan_dc)\ **Replies:** 1\ **Last updated:** [May 29, 2019, 2:30pm UTC](https://discuss.elastic.co/t/visualizing-with-multiple-fields/183191 "2019-05-29T14:30:48Z")
New to ELK, got things up and running. Here is my set up. Our MQ monitoring tool writes data to Oracle database every 10 minutes with a cumulative statistics information. I have set up log stash to pull data from oracl… --- ## [How to create alert for multiple login attemps (failed attempts) for every 10mins](https://discuss.elastic.co/t/how-to-create-alert-for-multiple-login-attemps-failed-attempts-for-every-10mins/180518)
**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\ **Replies:** 1\ **Last updated:** [May 10, 2019, 11:27am UTC](https://discuss.elastic.co/t/how-to-create-alert-for-multiple-login-attemps-failed-attempts-for-every-10mins/180518 "2019-05-10T11:27:49Z")
This is my watcher configuration: PUT \_xpack/watcher/watch/my-watch2 { "trigger" : { "schedule" : { "interval" : "10s" } }, "input" : { "search" : { "request" : { "indices" : \[ "firewall" \], "body": { "siz… --- ## [Zen Discovery and the transport ports](https://discuss.elastic.co/t/zen-discovery-and-the-transport-ports/166194)
**Author:** [@darefilz](https://discuss.elastic.co/u/darefilz)\ **Replies:** 1\ **Last updated:** [February 1, 2019, 10:28am UTC](https://discuss.elastic.co/t/zen-discovery-and-the-transport-ports/166194 "2019-02-01T10:28:18Z")
Hi, I maybe fail to understand the principles of zen discovery. But I can not make the Elasticsearch nodes join the cluster. Info: All Elasticsearch nodes live in Docker containers Everything happens on my local mach… --- ## [Cast Long to String](https://discuss.elastic.co/t/cast-long-to-string/148216)
**Author:** [@caub](https://discuss.elastic.co/u/caub)\ **Replies:** 1\ **Last updated:** [September 11, 2018, 8:50pm UTC](https://discuss.elastic.co/t/cast-long-to-string/148216 "2018-09-11T20:50:56Z")
I'm getting errors "cannot convert MethodHandle(Longs)long to (Object)String" with this scripts: doc\['req.method'\].value + ' ' + doc\['req.path'\].value + ' ' + (String)doc\['res.status'\].value String s = (String)doc\['re… --- ## [HELP with NEST FluentAPI create Parent-Child Mapping on existing index](https://discuss.elastic.co/t/help-with-nest-fluentapi-create-parent-child-mapping-on-existing-index/90248)
**Author:** [@Dmitry\_Bolshakov](https://discuss.elastic.co/u/Dmitry_Bolshakov)\ **Replies:** 1\ **Last updated:** [June 23, 2017, 9:10am UTC](https://discuss.elastic.co/t/help-with-nest-fluentapi-create-parent-child-mapping-on-existing-index/90248 "2017-06-23T09:10:01Z")
I found a way how to create Parent-Child Mapping on existing index using direct request to server Parent-Child Mapping, but i don't find any example how to do it using Fluent API, is it possible ? PS I use ES 5.4.0 and… --- ## [Do RabbitMQ Input and Output plugins support TLSv1.1 or TLSv1.2?](https://discuss.elastic.co/t/do-rabbitmq-input-and-output-plugins-support-tlsv1-1-or-tlsv1-2/41919)
**Author:** [@marke72](https://discuss.elastic.co/u/marke72)\ **Replies:** 1\ **Last updated:** [May 24, 2016, 5:49pm UTC](https://discuss.elastic.co/t/do-rabbitmq-input-and-output-plugins-support-tlsv1-1-or-tlsv1-2/41919 "2016-05-24T17:49:13Z")
I can't seem to find much information about it but I have been trying to connect my Logstash servers to RabbitMQ through either TLSv1.1 or TLSv1.2 because there are some security issues with TLSv1. How I currently have i… --- ## [Prevent leading wildcard in uri search](https://discuss.elastic.co/t/prevent-leading-wildcard-in-uri-search/26153)
**Author:** [@andimak](https://discuss.elastic.co/u/andimak)\ **Replies:** 1\ **Last updated:** [July 23, 2015, 9:38pm UTC](https://discuss.elastic.co/t/prevent-leading-wildcard-in-uri-search/26153 "2015-07-23T21:38:24Z")
Hello , I use uri searches and i found out that it took about 20 seconds or more if i use leading wildcard searches. For example: http:localhost:9200/\_search?q=user:andrea\*&pretty works very fast and http:localhost… --- ## [High count of threadpools getting created](https://discuss.elastic.co/t/high-count-of-threadpools-getting-created/19037)
**Author:** [@John\_D\_Ament](https://discuss.elastic.co/u/John_D_Ament)\ **Replies:** 7\ **Last updated:** [August 2, 2014, 5:58pm UTC](https://discuss.elastic.co/t/high-count-of-threadpools-getting-created/19037 "2014-08-02T17:58:08Z")
Hi all Based on another thread I started, I'm embedding ES into my application. Starting today, and I'm sure there's something that got thrown into the mix causing this, we have started seeing high counts of thre… --- ## [Bulk updates not respecting \_version](https://discuss.elastic.co/t/bulk-updates-not-respecting--version/14134)
**Author:** [@Anand\_Nalya](https://discuss.elastic.co/u/Anand_Nalya)\ **Replies:** 7\ **Last updated:** [October 28, 2013, 7:28pm UTC](https://discuss.elastic.co/t/bulk-updates-not-respecting--version/14134 "2013-10-28T19:28:38Z")
Hi, I'm trying to do bulk updates on a index with \_version in the conditional but ES is updating the document even when there is a version conflict: {"update":{"\_index":"urls","\_type":"url","\_version":1,"\_id":"ef… --- ## [Failed shard on node \[bnK31ibrRG6bSpw\_pYK2BA\]: shard failure, reason \[corrupt file (source: \[index id\[CTR0CY4BdvDW7Z2cSc8C\] origin\[PRIMARY\] seq#\[27209007\]\])\], failure org.apache.lucene.store.AlreadyClosedException: this IndexWriter is closed](https://discuss.elastic.co/t/failed-shard-on-node-bnk31ibrrg6bspw-pyk2ba-shard-failure-reason-corrupt-file-source-index-id-ctr0cy4bdvdw7z2csc8c-origin-primary-seq-27209007-failure-org-apache-lucene-store-alreadyclosedexception-this-indexwriter-is-closed/354711)
**Author:** [@kishor1](https://discuss.elastic.co/u/kishor1)\ **Replies:** 8\ **Last updated:** [March 18, 2024, 2:00pm UTC](https://discuss.elastic.co/t/failed-shard-on-node-bnk31ibrrg6bspw-pyk2ba-shard-failure-reason-corrupt-file-source-index-id-ctr0cy4bdvdw7z2csc8c-origin-primary-seq-27209007-failure-org-apache-lucene-store-alreadyclosedexception-this-indexwriter-is-closed/354711 "2024-03-18T14:00:03Z")
I have deployed my elasticsearch,kibana and filebeat in kuberntes 3 days before through ECK operator. i was able to access it through kibana dashboard. but now when i am trying to access this elasticsearch showing sta… --- ## [Retiring data to another Datacenter](https://discuss.elastic.co/t/retiring-data-to-another-datacenter/58652)
**Author:** [@shaharmor](https://discuss.elastic.co/u/shaharmor)\ **Replies:** 8\ **Last updated:** [August 24, 2016, 8:57pm UTC](https://discuss.elastic.co/t/retiring-data-to-another-datacenter/58652 "2016-08-24T20:57:26Z")
Hi, We are looking for a way to move old indices to a different datacenter, still using the same cluster. All new data will go to specific "hot" nodes (using shard allocation awareness), and each day an old index wil… --- ## [Pipeline stopped with "Index 83 out of bounds for length 16"](https://discuss.elastic.co/t/pipeline-stopped-with-index-83-out-of-bounds-for-length-16/296898)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 4\ **Last updated:** [February 14, 2022, 6:07pm UTC](https://discuss.elastic.co/t/pipeline-stopped-with-index-83-out-of-bounds-for-length-16/296898 "2022-02-14T18:07:01Z")
Hi, We have a configuration of logstash with several pipelines, having a main pipeline that receives the information, identifies the type of information and sends to different pipelines for procesing before sending the … --- ## [Parse error on Tshark generated JSON](https://discuss.elastic.co/t/parse-error-on-tshark-generated-json/129587)
**Author:** [@pohsun.teh](https://discuss.elastic.co/u/pohsun.teh)\ **Replies:** 4\ **Last updated:** [April 26, 2018, 8:36am UTC](https://discuss.elastic.co/t/parse-error-on-tshark-generated-json/129587 "2018-04-26T08:36:30Z")
Greetings. I have a JSON generated using Tshark -T ek command converting Wireshark PCAP file to JSON to be inserted to Elasticsearch. The thing is I am having parse error exception on production side. :exception=\>#\ **Author:** [@santhoshchn](https://discuss.elastic.co/u/santhoshchn)\ **Replies:** 4\ **Last updated:** [November 8, 2017, 12:37am UTC](https://discuss.elastic.co/t/data-missing-between-discover-and-graphs/106597 "2017-11-08T00:37:48Z") Hi, I find data missing between the data on discover and graphs. I have used the average of the column "m1" of type numeric in Y axis. And I have used column named time series and "siteId"(numeric) on X axis. All siteI… --- ## [Filters in Kibana 5.0.0](https://discuss.elastic.co/t/filters-in-kibana-5-0-0/91986)
**Author:** [@ICG](https://discuss.elastic.co/u/ICG)\ **Replies:** 4\ **Last updated:** [July 7, 2017, 6:08pm UTC](https://discuss.elastic.co/t/filters-in-kibana-5-0-0/91986 "2017-07-07T18:08:26Z")
I am newbie in Kibana and Elasticsearch, and I am investigating functionalities of these tools. I have traffic data that I want to load to Elasticsearch and visualize in Kibana's dashboard. In particular I need to create… --- ## [Cant access ES data in Kibana generated by Rally benchmarks](https://discuss.elastic.co/t/cant-access-es-data-in-kibana-generated-by-rally-benchmarks/84148)
**Author:** [@russmac](https://discuss.elastic.co/u/russmac)\ **Replies:** 4\ **Last updated:** [May 2, 2017, 12:32am UTC](https://discuss.elastic.co/t/cant-access-es-data-in-kibana-generated-by-rally-benchmarks/84148 "2017-05-02T00:32:14Z")
So heres my indices: curl --user elastic:secret -XGET 'localhost:9200/\_cat/indices' yellow open .kibana 0gfdsSymSVWU-5wnzqosXw 1 1 1 0 3.1kb 3.1kb yellow open rally-2017 … --- ## [Issue with multiple shards and parent / child Edit](https://discuss.elastic.co/t/issue-with-multiple-shards-and-parent-child-edit/13851)
**Author:** [@benjamin\_roth](https://discuss.elastic.co/u/benjamin_roth)\ **Replies:** 4\ **Last updated:** [October 8, 2013, 2:48pm UTC](https://discuss.elastic.co/t/issue-with-multiple-shards-and-parent-child-edit/13851 "2013-10-08T14:48:54Z")
Hi, I've nested documents, everything is fine in dev since I've only one shard, but in production it fails with the following message: {"error"=\>"RoutingMissingException\[routing is required for \[users\]/\[timeline\_… --- ## [Can ES Ignore the stemmer filter when the query is a phrase?](https://discuss.elastic.co/t/can-es-ignore-the-stemmer-filter-when-the-query-is-a-phrase/7289)
**Author:** [@Brett\_Anderson](https://discuss.elastic.co/u/Brett_Anderson)\ **Replies:** 4\ **Last updated:** [May 10, 2012, 8:39am UTC](https://discuss.elastic.co/t/can-es-ignore-the-stemmer-filter-when-the-query-is-a-phrase/7289 "2012-05-10T08:39:53Z")
My use case relates to the percolator function in ES, but I imagine it's just as valid for traditional document indexing. If I set up a percolator for the query: "\\"empire\\"", i.e. empire with quotations around i… --- ## [Suggestion for wildcard field type](https://discuss.elastic.co/t/suggestion-for-wildcard-field-type/280553)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 5\ **Last updated:** [August 5, 2021, 6:14pm UTC](https://discuss.elastic.co/t/suggestion-for-wildcard-field-type/280553 "2021-08-05T18:14:22Z")
Hello, We need to do a lot of (front) wildcard queries on certain fields. One such field is url.original. Currently this is mapped in ECS as keyword. I'm wondering if this could be changed to wildcard field type? For e… --- ## [Decode error with input plugin pipe](https://discuss.elastic.co/t/decode-error-with-input-plugin-pipe/84525)
**Author:** [@LmYjQ](https://discuss.elastic.co/u/LmYjQ)\ **Replies:** 5\ **Last updated:** [May 4, 2017, 11:48am UTC](https://discuss.elastic.co/t/decode-error-with-input-plugin-pipe/84525 "2017-05-04T11:48:16Z")
I tried the following conf input { file { type =\> "gz\_log" path =\> \["/data1/logs/logs/20170501/\*.log.gz"\] # path =\> \["/var/log/lastlog"\] start\_position =\> "beginning" } pipe { com… --- ## [Elasticsearch performance (problem with requests timeout)](https://discuss.elastic.co/t/elasticsearch-performance-problem-with-requests-timeout/6627)
**Author:** [@quain](https://discuss.elastic.co/u/quain)\ **Replies:** 5\ **Last updated:** [February 9, 2012, 7:03am UTC](https://discuss.elastic.co/t/elasticsearch-performance-problem-with-requests-timeout/6627 "2012-02-09T07:03:02Z")
I am fairly new to elasticsearch, and I have some questions related to performance. My use case is an autocomplete system, so I am only really searching one field, and so far I only have about 1000 documents indexed.… --- ## [Fields with a "dot" in them do not persist](https://discuss.elastic.co/t/fields-with-a-dot-in-them-do-not-persist/234965)
**Author:** [@jayson](https://discuss.elastic.co/u/jayson)\ **Replies:** 3\ **Last updated:** [June 1, 2020, 8:09pm UTC](https://discuss.elastic.co/t/fields-with-a-dot-in-them-do-not-persist/234965 "2020-06-01T20:09:53Z")
I'm trying to use Painless to do a transform for a Slack alert message. I believe I've followed the standard for using Painless to be able to persist the field that have a dot in them. However, those fields always show… --- ## [Fields not populated](https://discuss.elastic.co/t/fields-not-populated/189390)
**Author:** [@GregL](https://discuss.elastic.co/u/GregL)\ **Replies:** 3\ **Last updated:** [July 10, 2019, 1:11am UTC](https://discuss.elastic.co/t/fields-not-populated/189390 "2019-07-10T01:11:06Z")
I have installed the 7.2 versions of elasticsearch, logstash and kibana. Trying to follow this blog: However when filtering down to event\_id 4624 the TargetUserName and targetDomainName fields don't seem to be popula… --- ## [Openstack log filter](https://discuss.elastic.co/t/openstack-log-filter/182487)
**Author:** [@DavideG](https://discuss.elastic.co/u/DavideG)\ **Replies:** 3\ **Last updated:** [May 28, 2019, 11:02am UTC](https://discuss.elastic.co/t/openstack-log-filter/182487 "2019-05-28T11:02:58Z")
Hello guys, I'm having a problem where I have been stuck for the past 3 days if you would be able to help me I would appreciate very much :smiley: I'm trying to filter logs coming from openstack more precisely from the… [Previous page](https://discuss.elastic.co/top.md?page=1384&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1386&per_page=50&period=all)