# Top

**URL:** https://discuss.elastic.co/top.md?page=139&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 140

---

## [FAtal Error](https://discuss.elastic.co/t/fatal-error/45439)

<div class="topic-metadata">

**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\
**Replies:** 9\
**Last updated:** [April 25, 2016, 8:13pm UTC](https://discuss.elastic.co/t/fatal-error/45439 "2016-04-25T20:13:36Z")

</div>

While parsing bro smtp logs I am seeing the below errors. I only get this error when visualizing the data in kibana with data from the to/from/subject fields. The data and visualizations display fine but after a few s…

---

## [SSL and org.elasticsearch.transport.NodeDisconnectedException](https://discuss.elastic.co/t/ssl-and-org-elasticsearch-transport-nodedisconnectedexception/15155)

<div class="topic-metadata">

**Author:** [@Maciej\_Stoszko](https://discuss.elastic.co/u/Maciej_Stoszko)\
**Replies:** 9\
**Last updated:** [January 12, 2014, 1:35pm UTC](https://discuss.elastic.co/t/ssl-and-org-elasticsearch-transport-nodedisconnectedexception/15155 "2014-01-12T13:35:51Z")

</div>

I have an es\_client (java/dropwizard) application. It communicates with the elasticsearch just fine over plaintext connection. I have followed the instructions at https://github.com/sonian/elasticsearch-jetty …

---

## [Regarding data copy](https://discuss.elastic.co/t/regarding-data-copy/21794)

<div class="topic-metadata">

**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\
**Replies:** 13\
**Last updated:** [January 27, 2015, 7:18am UTC](https://discuss.elastic.co/t/regarding-data-copy/21794 "2015-01-27T07:18:37Z")

</div>

Hi All, I have elastic search server of version 1.3.7 i have large indices on existing server.now i am establishing new servers with hardware up-gradation.I want to move or coy indices from old elasticsearch s…

---

## [SUM for colum1 and filter](https://discuss.elastic.co/t/sum-for-colum1-and-filter/268110)

<div class="topic-metadata">

**Author:** [@EduardoM](https://discuss.elastic.co/u/EduardoM)\
**Replies:** 9\
**Last updated:** [March 30, 2021, 1:07pm UTC](https://discuss.elastic.co/t/sum-for-colum1-and-filter/268110 "2021-03-30T13:07:03Z")

</div>

I am trying to do the following: Select Sum (durationprev) from ptx\*-… where location = abc0011 and status = auto as running AVAL= running / total. filters | essql query="SELECT SUM(duration) AS running FROM \\"dat…

---

## [How to upgrade Elasticsearch version](https://discuss.elastic.co/t/how-to-upgrade-elasticsearch-version/41212)

<div class="topic-metadata">

**Author:** [@abinay](https://discuss.elastic.co/u/abinay)\
**Replies:** 15\
**Last updated:** [February 13, 2016, 6:52am UTC](https://discuss.elastic.co/t/how-to-upgrade-elasticsearch-version/41212 "2016-02-13T06:52:24Z")

</div>

Hii I am using ELK Stack . Currently I am having a single node in the Elasticsearch cluster . Using curl -XGET 'localhost:9200' i get the version as '2.1.0' . I want to add another node to the cluster but he version of t…

---

## [Packetbeat Conundrum](https://discuss.elastic.co/t/packetbeat-conundrum/183781)

<div class="topic-metadata">

**Author:** [@thev0yager](https://discuss.elastic.co/u/thev0yager)\
**Replies:** 24\
**Last updated:** [June 6, 2019, 7:21pm UTC](https://discuss.elastic.co/t/packetbeat-conundrum/183781 "2019-06-06T19:21:33Z")

</div>

Hi All, right now I just talked with some wonderful engineers at Elastic about a little problem I have been having with my deployment. I have a very bear bones setup of the Elastic Stack, and I am having an issue with my…

---

## [Ingest not reading csv input as a single line](https://discuss.elastic.co/t/ingest-not-reading-csv-input-as-a-single-line/94686)

<div class="topic-metadata">

**Author:** [@abd.wsu](https://discuss.elastic.co/u/abd.wsu)\
**Replies:** 13\
**Last updated:** [August 10, 2017, 12:45pm UTC](https://discuss.elastic.co/t/ingest-not-reading-csv-input-as-a-single-line/94686 "2017-08-10T12:45:45Z")

</div>

Hi, I am trying to process a csv file which has multiple lines as follows using ingest pipeline. Archive,Major Interval,DEV1,f328c29c-c695-11e5-addb-cc355a180000,CDBJVM,907047a8-5201-0000-0080-8e881e33280d,GetAdditional…

---

## [Adding a new node to the cluster - shows offline](https://discuss.elastic.co/t/adding-a-new-node-to-the-cluster-shows-offline/255467)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 9\
**Last updated:** [November 16, 2020, 10:06pm UTC](https://discuss.elastic.co/t/adding-a-new-node-to-the-cluster-shows-offline/255467 "2020-11-16T22:06:50Z")

</div>

Hey Added a new node to the cluster. But it is not getting added?! Any ideas? Says it has 5 nodes, but node 5 is offline? Thanks!

---

## [How to read data from a DB table and project it on KIBANA DB](https://discuss.elastic.co/t/how-to-read-data-from-a-db-table-and-project-it-on-kibana-db/254420)

<div class="topic-metadata">

**Author:** [@Dinesh\_Potey](https://discuss.elastic.co/u/Dinesh_Potey)\
**Replies:** 9\
**Last updated:** [November 12, 2020, 3:31pm UTC](https://discuss.elastic.co/t/how-to-read-data-from-a-db-table-and-project-it-on-kibana-db/254420 "2020-11-12T15:31:27Z")

</div>

Hi, I want to run a select query on a DB table so that I project the output on KIBANA DB. I am not expertise in modules. Could you please help me here in achieving this. Thanks, Dinesh

---

## [\[ERROR\]\[logstash.pipeline \] Error registering plugin {:pipeline\_id=\>"main", :plugin=\>"\<LogStash::Inputs::Jdbc jdbc\_driver\_library=\>\\"/usr/share/logstash/logstash-core/lib/jars/sqljdbc42.jar\\", jdbc\_connection\_string](https://discuss.elastic.co/t/error-logstash-pipeline-error-registering-plugin-pipeline-id-main-plugin-logstash-jdbc-jdbc-driver-library-usr-share-logstash-logstash-core-lib-jars-sqljdbc42-jar-jdbc-connection-string/252562)

<div class="topic-metadata">

**Author:** [@lynda](https://discuss.elastic.co/u/lynda)\
**Replies:** 11\
**Last updated:** [October 20, 2020, 2:27pm UTC](https://discuss.elastic.co/t/error-logstash-pipeline-error-registering-plugin-pipeline-id-main-plugin-logstash-jdbc-jdbc-driver-library-usr-share-logstash-logstash-core-lib-jars-sqljdbc42-jar-jdbc-connection-string/252562 "2020-10-20T14:27:14Z")

</div>

Hello, I have been trying to run logstash as a service but it keeps failing then restarting in a loop. I tried looking for a solution in similar topics without finding anything useful in my case. Here are the logs when…

---

## [Transform Mapping Errors](https://discuss.elastic.co/t/transform-mapping-errors/313382)

<div class="topic-metadata">

**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\
**Replies:** 12\
**Last updated:** [September 14, 2022, 6:57am UTC](https://discuss.elastic.co/t/transform-mapping-errors/313382 "2022-09-14T06:57:51Z")

</div>

Hello, I've set up a transform to aggregate on process.name, however it continues to fail exactly on the same date with the following error - Failed to index documents into destination index due to permanent error: \[or…

---

## [Node not joining cluster on boot](https://discuss.elastic.co/t/node-not-joining-cluster-on-boot/16339)

<div class="topic-metadata">

**Author:** [@Guillaume\_Loetscher](https://discuss.elastic.co/u/Guillaume_Loetscher)\
**Replies:** 12\
**Last updated:** [March 15, 2014, 2:01pm UTC](https://discuss.elastic.co/t/node-not-joining-cluster-on-boot/16339 "2014-03-15T14:01:04Z")

</div>

Hi, I've begun to test Elasticsearch recently, on a little mockup I've designed. Currently, I'm running two nodes on two LXC (v0.9) containers. Those containers are linked using veth to a bridge declared on the h…

---

## [Rally Actors exit prematurely](https://discuss.elastic.co/t/rally-actors-exit-prematurely/126985)

<div class="topic-metadata">

**Author:** [@arshdeeptinna](https://discuss.elastic.co/u/arshdeeptinna)\
**Replies:** 14\
**Last updated:** [May 3, 2018, 3:02pm UTC](https://discuss.elastic.co/t/rally-actors-exit-prematurely/126985 "2018-05-03T15:02:59Z")

</div>

I've written a new track and been trying to use that to run benchmarks against existing aws elasticsearch cluster. Default rally tracks work fine however for the custom tracks i see something like this 018-04-05 18:32:2…

---

## [Nest Deserialization](https://discuss.elastic.co/t/nest-deserialization/140464)

<div class="topic-metadata">

**Author:** [@es12](https://discuss.elastic.co/u/es12)\
**Replies:** 9\
**Last updated:** [July 19, 2018, 7:31am UTC](https://discuss.elastic.co/t/nest-deserialization/140464 "2018-07-19T07:31:28Z")

</div>

Hi All, I am using Nest 6.1.0 to get Huge Json(200000 documents) from AWS elasticsearch.. I am using scroll api and in batches of 10,000 Elastic search query is optimised no issues in executing queries using kibana Ho…

---

## [Plugin \[sample\] is incompatible with Elasticsearch \[2.4.1\]. Was designed for version \[2.3.3\]](https://discuss.elastic.co/t/plugin-sample-is-incompatible-with-elasticsearch-2-4-1-was-designed-for-version-2-3-3/63098)

<div class="topic-metadata">

**Author:** [@Sandeep\_Verma](https://discuss.elastic.co/u/Sandeep_Verma)\
**Replies:** 13\
**Last updated:** [October 17, 2016, 7:01am UTC](https://discuss.elastic.co/t/plugin-sample-is-incompatible-with-elasticsearch-2-4-1-was-designed-for-version-2-3-3/63098 "2016-10-17T07:01:53Z")

</div>

I m new in elasticsearch.Trying to create a plugin for elasticsearch. Got a sample code from https://codeload.github.com/codelibs/elasticsearch-plugin-sample/zip/master after build with maven got error ERROR: Plugin \[sa…

---

## [Troubleshooting on a data table with aggregation in Kibana](https://discuss.elastic.co/t/troubleshooting-on-a-data-table-with-aggregation-in-kibana/216220)

<div class="topic-metadata">

**Author:** [@AxelR](https://discuss.elastic.co/u/AxelR)\
**Replies:** 18\
**Last updated:** [February 11, 2020, 2:42pm UTC](https://discuss.elastic.co/t/troubleshooting-on-a-data-table-with-aggregation-in-kibana/216220 "2020-02-11T14:42:36Z")

</div>

Hello, I'm quite new to Kibana and ES, so my question might be a bit naive, I apologize in advance! I have indexed data on production test lines and I would like to compute (and then use) some specific values. Quick d…

---

## [TransportSerializationException: Failed to deserialize exception response from stream](https://discuss.elastic.co/t/transportserializationexception-failed-to-deserialize-exception-response-from-stream/15925)

<div class="topic-metadata">

**Author:** [@Tiago\_Rodrigues](https://discuss.elastic.co/u/Tiago_Rodrigues)\
**Replies:** 10\
**Last updated:** [February 6, 2015, 1:33pm UTC](https://discuss.elastic.co/t/transportserializationexception-failed-to-deserialize-exception-response-from-stream/15925 "2015-02-06T13:33:18Z")

</div>

I get this error sometimes when I try to create an index. My version of java in easticsearch is the same as the client server. Not is always this error occurs, different than seen in other posts. The log: Exception …

---

## [CSV Illegal Quoting in Line 1](https://discuss.elastic.co/t/csv-illegal-quoting-in-line-1/289834)

<div class="topic-metadata">

**Author:** [@Micah\_Barsness](https://discuss.elastic.co/u/Micah_Barsness)\
**Replies:** 13\
**Last updated:** [December 8, 2021, 8:19pm UTC](https://discuss.elastic.co/t/csv-illegal-quoting-in-line-1/289834 "2021-12-08T20:19:33Z")

</div>

I'm receiving the following error & some of my incoming logs are being not being parsed and therefore dropped. \[2021-11-22T09:50:11,381\]\[WARN \]\[logstash.filters.csv \]\[MID-CUCM\]\[6a45eeb30e5ba587e03ab6fc5b123b705e6e76…

---

## [This Should be Easy - Percent of one Value of a Field](https://discuss.elastic.co/t/this-should-be-easy-percent-of-one-value-of-a-field/242128)

<div class="topic-metadata">

**Author:** [@dandcp](https://discuss.elastic.co/u/dandcp)\
**Replies:** 12\
**Last updated:** [July 27, 2020, 1:09pm UTC](https://discuss.elastic.co/t/this-should-be-easy-percent-of-one-value-of-a-field/242128 "2020-07-27T13:09:21Z")

</div>

So here’s the deal. I am a noob. I’ve been somewhat forced into this but it is what it is. Forgive me ahead of time for not knowing the syntax or this or that. I assure you I have read a ton, I’m just not as smart as you…

---

## [Any solutions please!](https://discuss.elastic.co/t/any-solutions-please/206343)

<div class="topic-metadata">

**Author:** [@pbona](https://discuss.elastic.co/u/pbona)\
**Replies:** 22\
**Last updated:** [November 17, 2019, 11:30pm UTC](https://discuss.elastic.co/t/any-solutions-please/206343 "2019-11-17T23:30:54Z")

</div>

I have followed that link https://www.elastic.co/blog/how-to-setup-tls-for-elasticsearch-kibana-logstash-filebeat-with-offline-install-in-linux As the result, I got the below error \[root@elastic logstash\]# systemctl st…

---

## [Cancellation of tasks](https://discuss.elastic.co/t/cancellation-of-tasks/337454)

<div class="topic-metadata">

**Author:** [@henrhoi](https://discuss.elastic.co/u/henrhoi)\
**Replies:** 10\
**Last updated:** [July 3, 2023, 6:48pm UTC](https://discuss.elastic.co/t/cancellation-of-tasks/337454 "2023-07-03T18:48:51Z")

</div>

Hello Elastic community! We have been encountering some difficulties with cancelling longer running tasks in our Elasticsearch cluster and could really use some guidance from the experts here. Our current approach invol…

---

## [Logstash Value too large to output](https://discuss.elastic.co/t/logstash-value-too-large-to-output/323495)

<div class="topic-metadata">

**Author:** [@Doremanilka](https://discuss.elastic.co/u/Doremanilka)\
**Replies:** 10\
**Last updated:** [January 27, 2023, 11:43am UTC](https://discuss.elastic.co/t/logstash-value-too-large-to-output/323495 "2023-01-27T11:43:09Z")

</div>

Hello, I have new core app that I need to parse. This app has strange big message output field and I need somehow add it to ELK. Log pattern: grok { match =\> \[ "message", "%{DATA:\[event\]\[ti…

---

## ["ERR\_TOO\_MANY\_REDIRECTS" after upgrade from 5.4.1 to 5.5.1](https://discuss.elastic.co/t/err-too-many-redirects-after-upgrade-from-5-4-1-to-5-5-1/94608)

<div class="topic-metadata">

**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\
**Replies:** 10\
**Last updated:** [July 27, 2017, 6:23am UTC](https://discuss.elastic.co/t/err-too-many-redirects-after-upgrade-from-5-4-1-to-5-5-1/94608 "2017-07-27T06:23:11Z")

</div>

I followed this page and upgrade kibana from 5.4.1 to 5.5.1, then I can not access kibana with a error ERR\_TOO\_MANY\_REDIRECTS...

---

## [Create Custom Build image for customized kibana 6.4.3 source code](https://discuss.elastic.co/t/create-custom-build-image-for-customized-kibana-6-4-3-source-code/192104)

<div class="topic-metadata">

**Author:** [@vishal\_M](https://discuss.elastic.co/u/vishal_M)\
**Replies:** 14\
**Last updated:** [August 6, 2019, 9:06pm UTC](https://discuss.elastic.co/t/create-custom-build-image-for-customized-kibana-6-4-3-source-code/192104 "2019-08-06T21:06:58Z")

</div>

Hello Team, I am trying to create docker image with some customized kibana source code. So that, i can deploy it in a kubernetes cluster. Here are the steps i followed so far. Cloned kibana dev source code (GitHub - …

---

## [Loadbalancer infromt of client nodes](https://discuss.elastic.co/t/loadbalancer-infromt-of-client-nodes/103463)

<div class="topic-metadata">

**Author:** [@iam.Carrot](https://discuss.elastic.co/u/iam.Carrot)\
**Replies:** 9\
**Last updated:** [October 11, 2017, 3:49pm UTC](https://discuss.elastic.co/t/loadbalancer-infromt-of-client-nodes/103463 "2017-10-11T15:49:41Z")

</div>

Hi am running a 7 node architecture with 3 master nodes, 2 co-ordinate only (earlier known as client) and 2 data nodes. I ab API to interact with my elastic cluster to provide data. My question is, do I need to put a l…

---

## [Elasticsearch alphanumeric range search](https://discuss.elastic.co/t/elasticsearch-alphanumeric-range-search/200620)

<div class="topic-metadata">

**Author:** [@Anurup\_Borah](https://discuss.elastic.co/u/Anurup_Borah)\
**Replies:** 10\
**Last updated:** [October 11, 2019, 1:55am UTC](https://discuss.elastic.co/t/elasticsearch-alphanumeric-range-search/200620 "2019-10-11T01:55:07Z")

</div>

Hi , I need some suggestion on how to search for any alphanumeric range search if its possible in elasticsearch. I have gone through the below link , I am not able to find any solution for alphanumeric search. https:/…

---

## [Filebeat multi outputs](https://discuss.elastic.co/t/filebeat-multi-outputs/177303)

<div class="topic-metadata">

**Author:** [@Momo](https://discuss.elastic.co/u/Momo)\
**Replies:** 10\
**Last updated:** [April 30, 2019, 8:17am UTC](https://discuss.elastic.co/t/filebeat-multi-outputs/177303 "2019-04-30T08:17:59Z")

</div>

Bonjour, J'ai un filebeat (opérationnel) qui envoie des logs vers logstash puis elasticsearch. Je voudrai activer le module haproxy de filebeat pour qu'il envoie les logs haproxy vers elasticsearch mais quand je lance …

---

## [Cluster.routing.allocation.same\_shard.host doesnt seem to work properly](https://discuss.elastic.co/t/cluster-routing-allocation-same-shard-host-doesnt-seem-to-work-properly/136625)

<div class="topic-metadata">

**Author:** [@tuudik](https://discuss.elastic.co/u/tuudik)\
**Replies:** 11\
**Last updated:** [June 22, 2018, 9:21am UTC](https://discuss.elastic.co/t/cluster-routing-allocation-same-shard-host-doesnt-seem-to-work-properly/136625 "2018-06-22T09:21:06Z")

</div>

Elasticsearch version (bin/elasticsearch --version): 6.3.0 Plugins installed: \[ingest-geoip\] JVM version (java -version): openjdk version "1.8.0\_171" OS version (uname -a if on a Unix-like system): Linux elk-ela-1f 4.…

---

## [Can't connect remotely to Kibana from Windows machine](https://discuss.elastic.co/t/cant-connect-remotely-to-kibana-from-windows-machine/169486)

<div class="topic-metadata">

**Author:** [@HWCMP](https://discuss.elastic.co/u/HWCMP)\
**Replies:** 9\
**Last updated:** [February 25, 2019, 2:50pm UTC](https://discuss.elastic.co/t/cant-connect-remotely-to-kibana-from-windows-machine/169486 "2019-02-25T14:50:58Z")

</div>

I have kibana installed on ubuntu server and can't navigate to it remotely. I'm on the same private network as the server. I've edited the kibana.yml file to the following: Kibana is served by a back end server. This …

---

## [Filebeat process different log paths and write data to seperate index,Without use of logstash and follow ILM/rollover alias defined in template](https://discuss.elastic.co/t/filebeat-process-different-log-paths-and-write-data-to-seperate-index-without-use-of-logstash-and-follow-ilm-rollover-alias-defined-in-template/332593)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 17\
**Last updated:** [June 1, 2023, 7:12am UTC](https://discuss.elastic.co/t/filebeat-process-different-log-paths-and-write-data-to-seperate-index-without-use-of-logstash-and-follow-ilm-rollover-alias-defined-in-template/332593 "2023-06-01T07:12:46Z")

</div>

Hello All, I've a requirement where I will be having diffrent log path defined in server and Filebeat will read this paths and should write the data to there respective elastic index. The ILM policy and required rollo…

---

## [Watcher 2.3 hipchat action not working](https://discuss.elastic.co/t/watcher-2-3-hipchat-action-not-working/53727)

<div class="topic-metadata">

**Author:** [@nsood](https://discuss.elastic.co/u/nsood)\
**Replies:** 11\
**Last updated:** [June 24, 2016, 6:56am UTC](https://discuss.elastic.co/t/watcher-2-3-hipchat-action-not-working/53727 "2016-06-24T06:56:54Z")

</div>

Hi, I've been trying to set up a basic watcher, to send alerts to HipChat, on my v2.3 Elasticsearch cluster. However looking at the watch history tells me it has been consistently failing throwing 400-Bad request error…

---

## [Creating Logstash Configuration](https://discuss.elastic.co/t/creating-logstash-configuration/473)

<div class="topic-metadata">

**Author:** [@subrata\_mettle](https://discuss.elastic.co/u/subrata_mettle)\
**Replies:** 11\
**Last updated:** [May 29, 2015, 2:09pm UTC](https://discuss.elastic.co/t/creating-logstash-configuration/473 "2015-05-29T14:09:55Z")

</div>

Hi , I am new here and wanted to know how to separate the field and and save it to Elastic Search. below is the one example where you can see that I have various values which has been separated with ",". can any on…

---

## [Using filebeat sending logs to logstash?](https://discuss.elastic.co/t/using-filebeat-sending-logs-to-logstash/89030)

<div class="topic-metadata">

**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\
**Replies:** 9\
**Last updated:** [June 12, 2017, 10:25pm UTC](https://discuss.elastic.co/t/using-filebeat-sending-logs-to-logstash/89030 "2017-06-12T22:25:52Z")

</div>

Hi, Two types of Logs: \[2017-06-12 01:00:00,155\]\[ERROR\]\[marvel.agent.exporter.local\] local exporter \[default\_local\] - failed to delete indices RemoteTransportException\[\[data-1\]\[x.x.x.x:9200\]\[indices:admin/delete\]\]; n…

---

## [Terms aggregation bucket Sorting is not working when using with partition](https://discuss.elastic.co/t/terms-aggregation-bucket-sorting-is-not-working-when-using-with-partition/298502)

<div class="topic-metadata">

**Author:** [@truptir](https://discuss.elastic.co/u/truptir)\
**Replies:** 12\
**Last updated:** [March 25, 2022, 7:47am UTC](https://discuss.elastic.co/t/terms-aggregation-bucket-sorting-is-not-working-when-using-with-partition/298502 "2022-03-25T07:47:04Z")

</div>

I am trying to do TermAggregation + Sort order(by \_count) + pagination(using partition). But resulting bucket partitions are not sorted properly. Without using partitions, sorting is working properly. Here is my elasti…

---

## [Newbie question -- ELK 6.2, Logstash error status 400](https://discuss.elastic.co/t/newbie-question-elk-6-2-logstash-error-status-400/138286)

<div class="topic-metadata">

**Author:** [@corpengineer](https://discuss.elastic.co/u/corpengineer)\
**Replies:** 11\
**Last updated:** [July 6, 2018, 6:58am UTC](https://discuss.elastic.co/t/newbie-question-elk-6-2-logstash-error-status-400/138286 "2018-07-06T06:58:41Z")

</div>

Below is my config for ELK v6.2. Within Kibana, I see a few default fields, in addition to the 'message' field. However, I do not see (what I think that my Grok filter does) the 'message' field parsed out into several …

---

## [Duplicated Log](https://discuss.elastic.co/t/duplicated-log/269931)

<div class="topic-metadata">

**Author:** [@Paulogbr](https://discuss.elastic.co/u/Paulogbr)\
**Replies:** 9\
**Last updated:** [April 13, 2021, 6:19pm UTC](https://discuss.elastic.co/t/duplicated-log/269931 "2021-04-13T18:19:41Z")

</div>

Hello Guys, My firewall device is sending duplicated log. I tried filter with logstash. I need write the output in file. I test with logger but don´t work, I tried use fingerprint. Can you have any ideia ? inpu…

---

## [Kibana states "No Log Data Found" on ECK](https://discuss.elastic.co/t/kibana-states-no-log-data-found-on-eck/312064)

<div class="topic-metadata">

**Author:** [@papers\_hive](https://discuss.elastic.co/u/papers_hive)\
**Replies:** 13\
**Last updated:** [September 5, 2022, 5:30am UTC](https://discuss.elastic.co/t/kibana-states-no-log-data-found-on-eck/312064 "2022-09-05T05:30:38Z")

</div>

I am running Elasticsearch (ECK) on Oracle Kubernetes Engine. The version in use is 7.14.1. The stack consists of: Elasticsearch, Kibana, Filebeat+Heartbeat+Metricbeat. Each of these services runs properly and it is pro…

---

## [Logstash jdbc using tns results in error "Unknown host specified"](https://discuss.elastic.co/t/logstash-jdbc-using-tns-results-in-error-unknown-host-specified/230498)

<div class="topic-metadata">

**Author:** [@philippeE](https://discuss.elastic.co/u/philippeE)\
**Replies:** 14\
**Last updated:** [May 5, 2020, 8:11pm UTC](https://discuss.elastic.co/t/logstash-jdbc-using-tns-results-in-error-unknown-host-specified/230498 "2020-05-05T20:11:47Z")

</div>

Hello, I try to use jdbc to connect to my oracle server using tns. logstash.conf: input { jdbc { jdbc\_driver\_library =\> "" jdbc\_driver\_class =\> "Java::oracle.jdbc.driver.OracleDriver" jdbc\_connection\_string =\> "j…

---

## [Redirect logs to newly created Index by Index Roll over](https://discuss.elastic.co/t/redirect-logs-to-newly-created-index-by-index-roll-over/226780)

<div class="topic-metadata">

**Author:** [@Ozil](https://discuss.elastic.co/u/Ozil)\
**Replies:** 14\
**Last updated:** [April 22, 2020, 8:54am UTC](https://discuss.elastic.co/t/redirect-logs-to-newly-created-index-by-index-roll-over/226780 "2020-04-22T08:54:33Z")

</div>

Hi All I am using Elasticsearch 7.3 for my internal alerting module. I am planning to introduce the ILM policy in the data node to handle the high amount of data. I am facing an issue I am using custom logstash output,…

---

## [Upgrade elasticsearch , kibana - what should be flow and steps](https://discuss.elastic.co/t/upgrade-elasticsearch-kibana-what-should-be-flow-and-steps/196017)

<div class="topic-metadata">

**Author:** [@shappy123](https://discuss.elastic.co/u/shappy123)\
**Replies:** 18\
**Last updated:** [August 29, 2019, 4:05am UTC](https://discuss.elastic.co/t/upgrade-elasticsearch-kibana-what-should-be-flow-and-steps/196017 "2019-08-29T04:05:48Z")

</div>

Hi guys, I am new to elastic search, can anyone plesae guide me and tel me what are the steps to upgrade from v 6.4.2 to the latest version and Kibana as well which is v 6.4.3.... A step by step or flow will actually h…

---

## [How to disable tracestate and traceparent headers](https://discuss.elastic.co/t/how-to-disable-tracestate-and-traceparent-headers/324164)

<div class="topic-metadata">

**Author:** [@e03c5fccb551b6833a65](https://discuss.elastic.co/u/e03c5fccb551b6833a65)\
**Replies:** 11\
**Last updated:** [January 31, 2023, 3:36pm UTC](https://discuss.elastic.co/t/how-to-disable-tracestate-and-traceparent-headers/324164 "2023-01-31T15:36:17Z")

</div>

One of our services connects to a bank, and the requests are getting blocked because of these additional headers. Is there a way to disable them. I tried setting the use\_elastic\_traceparent\_header property to false, bu…

---

## [Getting strange errors after enabling kubernetes metadata in filebeat](https://discuss.elastic.co/t/getting-strange-errors-after-enabling-kubernetes-metadata-in-filebeat/335306)

<div class="topic-metadata">

**Author:** [@sunil\_s](https://discuss.elastic.co/u/sunil_s)\
**Replies:** 12\
**Last updated:** [June 6, 2023, 4:33pm UTC](https://discuss.elastic.co/t/getting-strange-errors-after-enabling-kubernetes-metadata-in-filebeat/335306 "2023-06-06T16:33:46Z")

</div>

Getting below errors when running filebeat evel":"error","@timestamp":"2023-06-06T08:37:11.110Z","log.logger":"kubernetes","log.origin":{"file.name":"add\_kubernetes\_metadata/matchers.go","file.line":95},"message":"Error…

---

## [First attempt into the world of aggregate - string should be a number?](https://discuss.elastic.co/t/first-attempt-into-the-world-of-aggregate-string-should-be-a-number/164312)

<div class="topic-metadata">

**Author:** [@fribse](https://discuss.elastic.co/u/fribse)\
**Replies:** 16\
**Last updated:** [January 21, 2019, 10:07am UTC](https://discuss.elastic.co/t/first-attempt-into-the-world-of-aggregate-string-should-be-a-number/164312 "2019-01-21T10:07:15Z")

</div>

So with the help of Badger, I got a working grok filter. Now I need to change it so that it aggregates the lines into one event. One event looks like this 2019-01-12 16:25:01.889 0EF4 \[BERLIN\_PSL -\] Starting to send…

---

## [Unable to acquire permit to use snapshot files during recovery](https://discuss.elastic.co/t/unable-to-acquire-permit-to-use-snapshot-files-during-recovery/313935)

<div class="topic-metadata">

**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\
**Replies:** 10\
**Last updated:** [September 16, 2022, 12:14pm UTC](https://discuss.elastic.co/t/unable-to-acquire-permit-to-use-snapshot-files-during-recovery/313935 "2022-09-16T12:14:28Z")

</div>

Hello there, i want to ask something about this. i haven't made any changes and i just wanted to check my cluster but suddenly one of my data node was offline and my cluster state from green to yellow. i found much log …

---

## [How to subtract two values in elasticsearch](https://discuss.elastic.co/t/how-to-subtract-two-values-in-elasticsearch/240824)

<div class="topic-metadata">

**Author:** [@adi0509](https://discuss.elastic.co/u/adi0509)\
**Replies:** 10\
**Last updated:** [July 13, 2020, 10:36am UTC](https://discuss.elastic.co/t/how-to-subtract-two-values-in-elasticsearch/240824 "2020-07-13T10:36:23Z")

</div>

if my logs looks like this, { name: "A1",X: 10} { name: "A1",Y: 8 } { name: "A2",X: 15} { name: "A2",Y: 1 } then how can I subtract (X-Y) which have same name? What I want is, for name "A1" X-Y = 10-8 = 2 for nam…

---

## [Filebeat not able to send log to different cloud](https://discuss.elastic.co/t/filebeat-not-able-to-send-log-to-different-cloud/60976)

<div class="topic-metadata">

**Author:** [@vsairam](https://discuss.elastic.co/u/vsairam)\
**Replies:** 13\
**Last updated:** [September 29, 2016, 9:38am UTC](https://discuss.elastic.co/t/filebeat-not-able-to-send-log-to-different-cloud/60976 "2016-09-29T09:38:08Z")

</div>

Hi Team, I have added a new node and installed the filebeat. It needs to send the logs from the node to the logstash server installed another cloud. Am not able to see the logs in the Kibana GUI. Here is the straight…

---

## [How can i reduce amount of segments](https://discuss.elastic.co/t/how-can-i-reduce-amount-of-segments/46997)

<div class="topic-metadata">

**Author:** [@eprst](https://discuss.elastic.co/u/eprst)\
**Replies:** 14\
**Last updated:** [April 12, 2016, 1:34pm UTC](https://discuss.elastic.co/t/how-can-i-reduce-amount-of-segments/46997 "2016-04-12T13:34:48Z")

</div>

i have the index of the documents that is constantly updated. The perfomance of the queries i'm running, are depending from amount segment. I can cron merging. I can set merge policy figures to minimum values like 2, …

---

## [How do I map a meta.title field to search within it using NEST](https://discuss.elastic.co/t/how-do-i-map-a-meta-title-field-to-search-within-it-using-nest/171343)

<div class="topic-metadata">

**Author:** [@siradude](https://discuss.elastic.co/u/siradude)\
**Replies:** 18\
**Last updated:** [March 21, 2019, 6:35pm UTC](https://discuss.elastic.co/t/how-do-i-map-a-meta-title-field-to-search-within-it-using-nest/171343 "2019-03-21T18:35:34Z")

</div>

I have a Index created by FSCRAWLER of a document (either HTML or PDF). This index has many (what I assume are) auto created fields. My needs are simple, I need to search withing the ID of the document (which) will be …

---

## [Field was not found](https://discuss.elastic.co/t/field-was-not-found/311487)

<div class="topic-metadata">

**Author:** [@Dreinale](https://discuss.elastic.co/u/Dreinale)\
**Replies:** 10\
**Last updated:** [August 10, 2022, 7:54am UTC](https://discuss.elastic.co/t/field-was-not-found/311487 "2022-08-10T07:54:48Z")

</div>

Hi, I try to install & configure elk 8.3.3 without security on the docker "host" and filebeat on another docker. All works, i have the live logs, i imported my dashboards, but i have this: and the problem is because…

---

## [Query Performance](https://discuss.elastic.co/t/query-performance/18130)

<div class="topic-metadata">

**Author:** [@ravimbhatt](https://discuss.elastic.co/u/ravimbhatt)\
**Replies:** 9\
**Last updated:** [June 19, 2014, 4:07pm UTC](https://discuss.elastic.co/t/query-performance/18130 "2014-06-19T16:07:05Z")

</div>

Hi All, I am trying to improve my ES query performance. The goal is to get response times for 3 related queries under a second!. In my test i have seen 90th percentile response time (\*took time\*) for combined 3 q…

[Previous page](https://discuss.elastic.co/top.md?page=138&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=140&per_page=50&period=all)
