# Top **URL:** https://discuss.elastic.co/top.md?page=140&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 141 --- ## [Watcher Notifications via email and Slack](https://discuss.elastic.co/t/watcher-notifications-via-email-and-slack/205931)
**Author:** [@Mauricio\_Borges](https://discuss.elastic.co/u/Mauricio_Borges)\ **Replies:** 10\ **Last updated:** [November 8, 2019, 10:35pm UTC](https://discuss.elastic.co/t/watcher-notifications-via-email-and-slack/205931 "2019-11-08T22:35:07Z")
Hi Everyone! I am using ELK via Docker Compose and I am interesting to setup Watcher Notifications via email and integrated with Slack. Any step by step procedure to I achieve that ? When I set commented lines below fr… --- ## [Elasticsearch creating snapshots to gce with the ability to put it into a folder](https://discuss.elastic.co/t/elasticsearch-creating-snapshots-to-gce-with-the-ability-to-put-it-into-a-folder/78021)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 9\ **Last updated:** [March 9, 2017, 10:24pm UTC](https://discuss.elastic.co/t/elasticsearch-creating-snapshots-to-gce-with-the-ability-to-put-it-into-a-folder/78021 "2017-03-09T22:24:42Z")
Hello, I am using elasticsearch v5 and I am trying to create snapshots to the gce storage. I have a bucket created for all kind of backups that is why I would like to puthe elasticsearch backups into their own folder. … --- ## [Logstash dont send to output](https://discuss.elastic.co/t/logstash-dont-send-to-output/233580)
**Author:** [@ahiyaz](https://discuss.elastic.co/u/ahiyaz)\ **Replies:** 15\ **Last updated:** [May 21, 2020, 11:48am UTC](https://discuss.elastic.co/t/logstash-dont-send-to-output/233580 "2020-05-21T11:48:57Z")
its a new installation im collecting sflow data using sflow plugin debugging the sflow plugin i can see flows data getting to logstash but nothing is being sent to the output. ive tried to logz.io and to local file. … --- ## [How to translate “and or” where clause from sql query to elasticsearch filter](https://discuss.elastic.co/t/how-to-translate-and-or-where-clause-from-sql-query-to-elasticsearch-filter/18572)
**Author:** [@Artem\_Frolov](https://discuss.elastic.co/u/Artem_Frolov)\ **Replies:** 10\ **Last updated:** [July 14, 2014, 2:56pm UTC](https://discuss.elastic.co/t/how-to-translate-and-or-where-clause-from-sql-query-to-elasticsearch-filter/18572 "2014-07-14T14:56:06Z")
I have a WHERE clause in my SQL query, which have to be translated into the elasticsearch bool filter. here's the where clause: WHERE (option = "weight" AND value = "50kg")OR (option = "weight" AND value = "5… --- ## [Need help in configuring the logstash on linux box](https://discuss.elastic.co/t/need-help-in-configuring-the-logstash-on-linux-box/35909)
**Author:** [@Bharath\_Pusuluri](https://discuss.elastic.co/u/Bharath_Pusuluri)\ **Replies:** 9\ **Last updated:** [December 1, 2015, 6:29pm UTC](https://discuss.elastic.co/t/need-help-in-configuring-the-logstash-on-linux-box/35909 "2015-12-01T18:29:22Z")
our plan is to install logstash and filter the /var/log/messages based on key words and it need to log to a file and mail should be sent if any filter matches i am not able to configure also at this moment. could any … --- ## [Bulk Request Handling - Requests being handled by single node](https://discuss.elastic.co/t/bulk-request-handling-requests-being-handled-by-single-node/192115)
**Author:** [@FatalGlitch](https://discuss.elastic.co/u/FatalGlitch)\ **Replies:** 9\ **Last updated:** [July 24, 2019, 7:47pm UTC](https://discuss.elastic.co/t/bulk-request-handling-requests-being-handled-by-single-node/192115 "2019-07-24T19:47:19Z")
We have a 19 node hot/warm/master cluster. Logstash is pointed at only the hot nodes. Recently we are seeing that no matter which hot node gets the actual bulk request, only a single node is handling the request, usuall… --- ## [.raw fields not showing up for measurements field in local Elasticsearch index](https://discuss.elastic.co/t/raw-fields-not-showing-up-for-measurements-field-in-local-elasticsearch-index/139011)
**Author:** [@preranathm](https://discuss.elastic.co/u/preranathm)\ **Replies:** 9\ **Last updated:** [July 20, 2018, 6:35am UTC](https://discuss.elastic.co/t/raw-fields-not-showing-up-for-measurements-field-in-local-elasticsearch-index/139011 "2018-07-20T06:35:34Z")
Hi, I have created a local Elasticsearch index and I am using the following mapping: "docs": { "properties": { "dates": {"type": "nested","properties": {"count": {"type": "long"},"name": {"type": "long"}}}, "entities": … --- ## [Documents not showing up in Discover, but are showing up in queries in Dev Tools](https://discuss.elastic.co/t/documents-not-showing-up-in-discover-but-are-showing-up-in-queries-in-dev-tools/311451)
**Author:** [@Arjun\_Meena](https://discuss.elastic.co/u/Arjun_Meena)\ **Replies:** 10\ **Last updated:** [August 4, 2022, 9:19pm UTC](https://discuss.elastic.co/t/documents-not-showing-up-in-discover-but-are-showing-up-in-queries-in-dev-tools/311451 "2022-08-04T21:19:07Z")
I have an index spoms-audit-2022.08.04 in which there are 4 documents. When I search them from the dev console, i am able to see all the documents. Below is the search query: These are the results I get back: As… --- ## [Cannot see any host in elastic security and also cannot see any data from auditbeat or winlogbeat](https://discuss.elastic.co/t/cannot-see-any-host-in-elastic-security-and-also-cannot-see-any-data-from-auditbeat-or-winlogbeat/320983)
**Author:** [@Mohaiminul\_Islam](https://discuss.elastic.co/u/Mohaiminul_Islam)\ **Replies:** 13\ **Last updated:** [December 13, 2022, 9:03pm UTC](https://discuss.elastic.co/t/cannot-see-any-host-in-elastic-security-and-also-cannot-see-any-data-from-auditbeat-or-winlogbeat/320983 "2022-12-13T21:03:26Z")
I am trying to create a home lab. I have setup everything in ubuntu machine in vmware. The auditbeat is also in this machine. But I cannot see any data from auditbeat or even the host itself in security overview. Then I … --- ## [Tophits on transform group by a field not all field](https://discuss.elastic.co/t/tophits-on-transform-group-by-a-field-not-all-field/258373)
**Author:** [@charles97](https://discuss.elastic.co/u/charles97)\ **Replies:** 15\ **Last updated:** [December 15, 2020, 7:59am UTC](https://discuss.elastic.co/t/tophits-on-transform-group-by-a-field-not-all-field/258373 "2020-12-15T07:59:00Z")
So I have this case where I need to use top hits on transformation I want to show data based on I have this data email col2 col3 col4 col5 Time a.com a a a a 11:00 a.com a … --- ## ["Cannot find class org/jruby/Main." - why is this happening?!?](https://discuss.elastic.co/t/cannot-find-class-org-jruby-main-why-is-this-happening/177137)
**Author:** [@mgolubov55](https://discuss.elastic.co/u/mgolubov55)\ **Replies:** 11\ **Last updated:** [April 22, 2019, 12:46pm UTC](https://discuss.elastic.co/t/cannot-find-class-org-jruby-main-why-is-this-happening/177137 "2019-04-22T12:46:09Z")
... when I type ./bin/logstash-plugin list I get in response: Cannot find class org/jruby/Main. Exception in thread "main" java.lang.UnsupportedClassVersionError: org/jruby/Main : Unsupported major.minor version 51.0 … --- ## [Very high sys cpu usage with HTTP KeepAlive](https://discuss.elastic.co/t/very-high-sys-cpu-usage-with-http-keepalive/15895)
**Author:** [@K\_Cima](https://discuss.elastic.co/u/K_Cima)\ **Replies:** 10\ **Last updated:** [February 24, 2014, 4:27am UTC](https://discuss.elastic.co/t/very-high-sys-cpu-usage-with-http-keepalive/15895 "2014-02-24T04:27:35Z")
Hello, I am using ElasticSearch 1.0.0 with Kibana 3 on Solaris 11.1. My environment is as following. $ ./elasticsearch -v Version: 1.0.0, Build: a46900e/2014-02-12T16:18:34Z, JVM: 1.7.0\_07 $ java -… --- ## [Node goes down showing fatal error in network layer , thread and java heapspace error](https://discuss.elastic.co/t/node-goes-down-showing-fatal-error-in-network-layer-thread-and-java-heapspace-error/188852)
**Author:** [@Sourabh](https://discuss.elastic.co/u/Sourabh)\ **Replies:** 18\ **Last updated:** [July 15, 2019, 6:55am UTC](https://discuss.elastic.co/t/node-goes-down-showing-fatal-error-in-network-layer-thread-and-java-heapspace-error/188852 "2019-07-15T06:55:16Z")
I am having a cluster with 5 master nodes,12 coordinator nodes and 60 data nodes .Currently i am doing heavy indexing in this es cluster around 15 billion documents spread through the day.We have 3 index which are underg… --- ## [Error Watcher output for pager duty](https://discuss.elastic.co/t/error-watcher-output-for-pager-duty/172837)
**Author:** [@rpendela](https://discuss.elastic.co/u/rpendela)\ **Replies:** 17\ **Last updated:** [April 11, 2019, 1:56pm UTC](https://discuss.elastic.co/t/error-watcher-output-for-pager-duty/172837 "2019-04-11T13:56:38Z")
Hello Community, I have configured pagerduty watcher couple of weeks back and it successfully posted alerts to my company pagerduty portal when I excecute the watcher using simulation. So I thought everything seems work… --- ## [Building logstash from source fails as the http\_proxy env setting is not getting passed in](https://discuss.elastic.co/t/building-logstash-from-source-fails-as-the-http-proxy-env-setting-is-not-getting-passed-in/85920)
**Author:** [@pkempia](https://discuss.elastic.co/u/pkempia)\ **Replies:** 10\ **Last updated:** [May 17, 2017, 12:19pm UTC](https://discuss.elastic.co/t/building-logstash-from-source-fails-as-the-http-proxy-env-setting-is-not-getting-passed-in/85920 "2017-05-17T12:19:26Z")
I am trying to build logstash 5.3.2 from source. Below are the steps I followed. But the "rake bootstrap" command fails with the "Errno::EHOSTUNREACH: No route to host - connect(2)" This is been done on a empty docker … --- ## [Maps with multiple layer appear not to work as expected](https://discuss.elastic.co/t/maps-with-multiple-layer-appear-not-to-work-as-expected/268959)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 14\ **Last updated:** [April 5, 2021, 4:15am UTC](https://discuss.elastic.co/t/maps-with-multiple-layer-appear-not-to-work-as-expected/268959 "2021-04-05T04:15:12Z")
Kibaba 7.10 When I create a map with multiple layers and then hide all bar one layer the map always displays the same data when in a dashboard panel: The major difference between the two layers is that the "all auth" h… --- ## [ElasticSearch vs NoSQL](https://discuss.elastic.co/t/elasticsearch-vs-nosql/2890)
**Author:** [@Gisli\_Kristjansson](https://discuss.elastic.co/u/Gisli_Kristjansson)\ **Replies:** 21\ **Last updated:** [October 24, 2012, 9:06am UTC](https://discuss.elastic.co/t/elasticsearch-vs-nosql/2890 "2012-10-24T09:06:49Z")
I must begin by praising the effort. I have been in a nosql-research- mode for the last few days and I'm still discovering new cool projects. From what I've seen from the official website (Screencast, Docs, and forum)… --- ## [Abrupt performance drop above a certain index size](https://discuss.elastic.co/t/abrupt-performance-drop-above-a-certain-index-size/6839)
**Author:** [@Radu\_Gheorghe1](https://discuss.elastic.co/u/Radu_Gheorghe1)\ **Replies:** 15\ **Last updated:** [March 7, 2012, 9:00pm UTC](https://discuss.elastic.co/t/abrupt-performance-drop-above-a-certain-index-size/6839 "2012-03-07T21:00:14Z")
Hi, After inserting a lot of documents in elasticsearch (when the index size gets to about 4-5 times the RAM size), the performance on both inserting and querying drops abruptly. By "abruptly", I mean there is a th… --- ## [Convert latitude and longitude fields into geo\_point type,](https://discuss.elastic.co/t/convert-latitude-and-longitude-fields-into-geo-point-type/216364)
**Author:** [@bondelastic](https://discuss.elastic.co/u/bondelastic)\ **Replies:** 9\ **Last updated:** [January 29, 2020, 10:51pm UTC](https://discuss.elastic.co/t/convert-latitude-and-longitude-fields-into-geo-point-type/216364 "2020-01-29T22:51:56Z")
Hello, I have the below fields in my index. index pattern : s3-\* service.action.networkConnectionAction.remoteIpDetails.geoLocation.lat - type is number service.action.networkConnectionAction.remoteIpDetails.geoLocat… --- ## [Cluster error](https://discuss.elastic.co/t/cluster-error/118963)
**Author:** [@KenChung](https://discuss.elastic.co/u/KenChung)\ **Replies:** 10\ **Last updated:** [February 8, 2018, 6:37am UTC](https://discuss.elastic.co/t/cluster-error/118963 "2018-02-08T06:37:57Z")
I'm trying to create a test cluster Here is my cluster configuration information： server 192.168.1.171 cluster.name: esapp node.name: node-1 node.master: true node.data: true network.host: 0.0.0.0 discovery.zen.p… --- ## [How to parse csv via Elastic Agent?](https://discuss.elastic.co/t/how-to-parse-csv-via-elastic-agent/324121)
**Author:** [@test\_qweqwe](https://discuss.elastic.co/u/test_qweqwe)\ **Replies:** 16\ **Last updated:** [February 14, 2023, 9:05pm UTC](https://discuss.elastic.co/t/how-to-parse-csv-via-elastic-agent/324121 "2023-02-14T21:05:22Z")
Hi! I want to collects csv logs and if I understand correct, I need to add new integration based on "Custom Logs"? I'm not sure how to do it. I have this config for logstash under conf.d folder and everything work fin… --- ## [Use Ingestion Pipeline to split between two indexes](https://discuss.elastic.co/t/use-ingestion-pipeline-to-split-between-two-indexes/303958)
**Author:** [@painless\_elastic](https://discuss.elastic.co/u/painless_elastic)\ **Replies:** 9\ **Last updated:** [May 5, 2022, 3:34pm UTC](https://discuss.elastic.co/t/use-ingestion-pipeline-to-split-between-two-indexes/303958 "2022-05-05T15:34:02Z")
I have documents containing the field "Status", this can have three values "Draft", "In Progress", or "Approved". I am trying to pass this document through a ingest pipeline, and if the status is equal to "Approved" then… --- ## [Wildcard search not working as intended](https://discuss.elastic.co/t/wildcard-search-not-working-as-intended/108192)
**Author:** [@Feedy](https://discuss.elastic.co/u/Feedy)\ **Replies:** 9\ **Last updated:** [November 17, 2017, 10:11pm UTC](https://discuss.elastic.co/t/wildcard-search-not-working-as-intended/108192 "2017-11-17T22:11:09Z")
Hello, I am attempting to search my data to only show results for only three source ip ranges that is linked to action:drop but I am still seeing all source ips. Below are the several different search strings I've tried: … --- ## [Kibana custom plugin 7.13.3 installation fails](https://discuss.elastic.co/t/kibana-custom-plugin-7-13-3-installation-fails/279412)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 15\ **Last updated:** [August 20, 2021, 5:04pm UTC](https://discuss.elastic.co/t/kibana-custom-plugin-7-13-3-installation-fails/279412 "2021-08-20T17:04:11Z")
Hello, I am upgrading my elasticstack from version 7.9.2 to 7.13.3. I checked my plugin with the development environment I created for kibana 7.13.3. it works fine. now I need to add that plugin to my windows elasticsta… --- ## [Delete by query for nested docs for ES version 7.x](https://discuss.elastic.co/t/delete-by-query-for-nested-docs-for-es-version-7-x/232134)
**Author:** [@sg.esearch](https://discuss.elastic.co/u/sg.esearch)\ **Replies:** 10\ **Last updated:** [June 4, 2020, 7:09pm UTC](https://discuss.elastic.co/t/delete-by-query-for-nested-docs-for-es-version-7-x/232134 "2020-06-04T19:09:57Z")
Delete-by-query is in general a bit performance intensive in ES. Would you suggest to use it for nested docs too? Also, is there some different syntax to delete-by-query when the field being queried is present only in … --- ## [Slow startup (replica recovery in logs)](https://discuss.elastic.co/t/slow-startup-replica-recovery-in-logs/14200)
**Author:** [@Ryan\_S](https://discuss.elastic.co/u/Ryan_S)\ **Replies:** 10\ **Last updated:** [November 5, 2013, 10:07pm UTC](https://discuss.elastic.co/t/slow-startup-replica-recovery-in-logs/14200 "2013-11-05T22:07:24Z")
We've seen extremely slow startup/initialization/assignment of replica shards during startup. I can shutdown the cluster cleanly(from a green state), and then start it back up a few minutes later. It might take … --- ## [Can't set defaultIndex to other index patterns except logstash-\*](https://discuss.elastic.co/t/cant-set-defaultindex-to-other-index-patterns-except-logstash/121761)
**Author:** [@kesha](https://discuss.elastic.co/u/kesha)\ **Replies:** 10\ **Last updated:** [March 2, 2018, 9:43pm UTC](https://discuss.elastic.co/t/cant-set-defaultindex-to-other-index-patterns-except-logstash/121761 "2018-03-02T21:43:57Z")
I'm using Kibana 5.6.4 and I'm trying to set the defaultIndex in Kibana to other index patterns. It works for logstash-\* pattern, but if I change to other index pattern by hitting the star button in "Settings-Index Patte… --- ## [Grok patern for Cloudfront logs not work](https://discuss.elastic.co/t/grok-patern-for-cloudfront-logs-not-work/140137)
**Author:** [@mobil1](https://discuss.elastic.co/u/mobil1)\ **Replies:** 13\ **Last updated:** [August 1, 2018, 12:20pm UTC](https://discuss.elastic.co/t/grok-patern-for-cloudfront-logs-not-work/140137 "2018-08-01T12:20:53Z")
Hello all, can anybody help my ? I am use this grok pattern for cloudfont logs "%{YEAR:year}-%{MONTHNUM:month}-%{MONTHDAY:day}%{SPACE}%{TIME:time}%{SPACE}(?\\\b\\w+\\b)%{SPACE}(?:%{NUMBER:sc\_bytes}|-)%{SPA… --- ## [Утечка файловых дескрипторов](https://discuss.elastic.co/t/topic/153466)
**Author:** [@Denis\_Lamanov](https://discuss.elastic.co/u/Denis_Lamanov)\ **Replies:** 16\ **Last updated:** [October 24, 2018, 2:37pm UTC](https://discuss.elastic.co/t/topic/153466 "2018-10-24T14:37:32Z")
Добрый день!) Есть некие основания предполагать, что начиная с 6.4.0 у ElasticSearch есть утечка файловых дескрипторов. Тех самых, лимит на которые установлен в скриптах запуска в 65536 И вот почему: у нас неправильно… --- ## [Strigo "cannot connect you to this training environment"](https://discuss.elastic.co/t/strigo-cannot-connect-you-to-this-training-environment/228679)
**Author:** [@nzdpa](https://discuss.elastic.co/u/nzdpa)\ **Replies:** 12\ **Last updated:** [June 3, 2020, 2:05pm UTC](https://discuss.elastic.co/t/strigo-cannot-connect-you-to-this-training-environment/228679 "2020-06-03T14:05:55Z")
Hi I'm trying to do Kibana Fundamentals: Limited Offer and when I get to the lab I get the following Strigo error when it loads. I have given it 24 hours in case it was caused by having a lab still running from an ea… --- ## [Multiple indexes not being created for multiple log files](https://discuss.elastic.co/t/multiple-indexes-not-being-created-for-multiple-log-files/358817)
**Author:** [@developer\_cloud](https://discuss.elastic.co/u/developer_cloud)\ **Replies:** 25\ **Last updated:** [September 11, 2024, 5:27am UTC](https://discuss.elastic.co/t/multiple-indexes-not-being-created-for-multiple-log-files/358817 "2024-09-11T05:27:34Z")
Hello, I've been trying to create multiple indexes for multiple log files that get created within a server. I'm quite new to filebeat so wanted to know what I might be doing wrong within the code. The use case requires … --- ## [Price sort not working in elasticsearch 7.9.3 version](https://discuss.elastic.co/t/price-sort-not-working-in-elasticsearch-7-9-3-version/257970)
**Author:** [@magesh\_kumar](https://discuss.elastic.co/u/magesh_kumar)\ **Replies:** 11\ **Last updated:** [December 9, 2020, 8:27am UTC](https://discuss.elastic.co/t/price-sort-not-working-in-elasticsearch-7-9-3-version/257970 "2020-12-09T08:27:12Z")
Hi everyone, Currently I am using the Elasticsearch 7.9.3 version. the issue is price sort works wrong after upgrading the old version. Price data's are mixed with double , integer. Please let me know what happened in t… --- ## [Text-search using URI param query failing after upgrade to 6.2.2 from 5.4.1](https://discuss.elastic.co/t/text-search-using-uri-param-query-failing-after-upgrade-to-6-2-2-from-5-4-1/123368)
**Author:** [@vramakrishnan](https://discuss.elastic.co/u/vramakrishnan)\ **Replies:** 20\ **Last updated:** [March 29, 2018, 1:07am UTC](https://discuss.elastic.co/t/text-search-using-uri-param-query-failing-after-upgrade-to-6-2-2-from-5-4-1/123368 "2018-03-29T01:07:06Z")
I have a mapping for a field Tenant defined as follows. "Tenant": { "type": "keyword" }, And I use to do elastic query using URI param localhost:9200/\_search?q=foo (simple text search on "foo") and used to get ma… --- ## [Prune plugin](https://discuss.elastic.co/t/prune-plugin/116329)
**Author:** [@dilipchiru](https://discuss.elastic.co/u/dilipchiru)\ **Replies:** 12\ **Last updated:** [February 14, 2018, 8:17am UTC](https://discuss.elastic.co/t/prune-plugin/116329 "2018-02-14T08:17:52Z")
how to install prune plugin i didn't get the procedure please help me i am really stuck --- ## [How to write Customize grok with multiple json values?](https://discuss.elastic.co/t/how-to-write-customize-grok-with-multiple-json-values/135238)
**Author:** [@Harsh\_Sharma](https://discuss.elastic.co/u/Harsh_Sharma)\ **Replies:** 10\ **Last updated:** [June 19, 2018, 5:49am UTC](https://discuss.elastic.co/t/how-to-write-customize-grok-with-multiple-json-values/135238 "2018-06-19T05:49:11Z")
Below are the sample logs. I was able to write a customize grok on it and took 'onDPriceDetail' value in GREEDYDATA. But I want to parse this multiple child data of JSON format with different fields name. 2018-06-08 16:… --- ## [Upgrade ElasticSearh from 5.5 to 7.1](https://discuss.elastic.co/t/upgrade-elasticsearh-from-5-5-to-7-1/218588)
**Author:** [@rahulka](https://discuss.elastic.co/u/rahulka)\ **Replies:** 11\ **Last updated:** [February 12, 2020, 10:56am UTC](https://discuss.elastic.co/t/upgrade-elasticsearh-from-5-5-to-7-1/218588 "2020-02-12T10:56:56Z")
Hi, I am looking to upgrade and migrate from elasticsearch 5.5 to 7.1. Wanted to understand, Is this possible and if yes then do we need to do a rolling update to intermediate version. Also do you have any compatibilit… --- ## [GeoIP issue on logstash conf file](https://discuss.elastic.co/t/geoip-issue-on-logstash-conf-file/140031)
**Author:** [@Abdur\_Raqeeb1](https://discuss.elastic.co/u/Abdur_Raqeeb1)\ **Replies:** 11\ **Last updated:** [July 18, 2018, 3:38am UTC](https://discuss.elastic.co/t/geoip-issue-on-logstash-conf-file/140031 "2018-07-18T03:38:19Z")
Hi, Myself getting an error after giving an geoIP database separately for geoip city and geoIP country. Please find the error message below /usr/share/logstash/bin/logstash -t -f /etc/logstash/conf.d/beats.conf WARNI… --- ## [Some indices broken after updating Kibana and Elasticsearch](https://discuss.elastic.co/t/some-indices-broken-after-updating-kibana-and-elasticsearch/89149)
**Author:** [@Dmytro\_Orel](https://discuss.elastic.co/u/Dmytro_Orel)\ **Replies:** 11\ **Last updated:** [June 14, 2017, 1:44pm UTC](https://discuss.elastic.co/t/some-indices-broken-after-updating-kibana-and-elasticsearch/89149 "2017-06-14T13:44:06Z")
Hi there, I recently updated Kibana from 4.5 to 5.4.1 and Elasticsearch from 2.3 to 5.4.1. After this some indices start look broken: in 'Discover' I get '"field" is a required parameter' message and it stays in 'Sear… --- ## [Logstash as a parser for data in column](https://discuss.elastic.co/t/logstash-as-a-parser-for-data-in-column/292352)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 21\ **Last updated:** [December 27, 2021, 4:57pm UTC](https://discuss.elastic.co/t/logstash-as-a-parser-for-data-in-column/292352 "2021-12-27T16:57:25Z")
Hi I'm wonder about approach for this specific data constructed in column. How I can parser only through logstash. Some of fields a specially "ENUM" "HEADER", "BLOCK", "DATE" etc, are changing dynamically. One files i… --- ## [The number of clients in search operation](https://discuss.elastic.co/t/the-number-of-clients-in-search-operation/143255)
**Author:** [@rui\_dong](https://discuss.elastic.co/u/rui_dong)\ **Replies:** 9\ **Last updated:** [August 10, 2018, 1:38pm UTC](https://discuss.elastic.co/t/the-number-of-clients-in-search-operation/143255 "2018-08-10T13:38:55Z")
When I set the number of clients to 10, rally runs correctly, and when I set the client to 30: "schedule": \[ { "operation": { "name":"N clients randomly query 10,000 data", "operation-type": "search", "param-sou… --- ## [Best way to migrate data from mongoDB to elastic](https://discuss.elastic.co/t/best-way-to-migrate-data-from-mongodb-to-elastic/362671)
**Author:** [@Moni\_Hazarika](https://discuss.elastic.co/u/Moni_Hazarika)\ **Replies:** 11\ **Last updated:** [August 1, 2024, 12:00pm UTC](https://discuss.elastic.co/t/best-way-to-migrate-data-from-mongodb-to-elastic/362671 "2024-08-01T12:00:33Z")
Hi All, We are creating a new service which using MongoDB change stream and queue would index the data from our collection to Elasticsearch in real time for any any new changes(inserts,updates,deletes) happening on Mong… --- ## [Grok pattern(s) working in debugger but not used in logstash?](https://discuss.elastic.co/t/grok-pattern-s-working-in-debugger-but-not-used-in-logstash/274602)
**Author:** [@3lastic](https://discuss.elastic.co/u/3lastic)\ **Replies:** 14\ **Last updated:** [June 8, 2021, 8:04am UTC](https://discuss.elastic.co/t/grok-pattern-s-working-in-debugger-but-not-used-in-logstash/274602 "2021-06-08T08:04:07Z")
Hello, I try to get Sophos Firewall logs into logstash (which is working) but my grok filter to get the logline separated into fields is not working. The test via grok debugger is working... Here are my logstash conf f… --- ## [Unable to view geo.location on Kibana even though I have created an index template that includes geo.location](https://discuss.elastic.co/t/unable-to-view-geo-location-on-kibana-even-though-i-have-created-an-index-template-that-includes-geo-location/311477)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 13\ **Last updated:** [August 8, 2022, 1:53am UTC](https://discuss.elastic.co/t/unable-to-view-geo-location-on-kibana-even-though-i-have-created-an-index-template-that-includes-geo-location/311477 "2022-08-08T01:53:58Z")
I am using Logstash's geoip filter to get location information from ip. As far as I can see from the Logstash output result (codec =\> rubydebug), I am getting geoip.location, but I cannot display it on Kibana. In order… --- ## [Random node frequently removed from the cluster](https://discuss.elastic.co/t/random-node-frequently-removed-from-the-cluster/286296)
**Author:** [@JohnPhilip](https://discuss.elastic.co/u/JohnPhilip)\ **Replies:** 11\ **Last updated:** [October 11, 2021, 9:58am UTC](https://discuss.elastic.co/t/random-node-frequently-removed-from-the-cluster/286296 "2021-10-11T09:58:32Z")
I found different node removed from cluster in last month, sometimes it happens 10 times a day. ES version is 7.6.2, and there are 5000+ shards, 6 data nodes with 30gb heap size, and another 3 master node in the cluster… --- ## [Alerts don't fire](https://discuss.elastic.co/t/alerts-dont-fire/267174)
**Author:** [@ShadwDrgn](https://discuss.elastic.co/u/ShadwDrgn)\ **Replies:** 11\ **Last updated:** [March 19, 2021, 11:41pm UTC](https://discuss.elastic.co/t/alerts-dont-fire/267174 "2021-03-19T23:41:21Z")
I feel like the attached image should not be possible since it's checking every minute and CLEARLY should be active, but is in an okay state? Alerts only become active one time for me... Once they recover, they seem to n… --- ## [How to store percolate queries and documents](https://discuss.elastic.co/t/how-to-store-percolate-queries-and-documents/154438)
**Author:** [@psylone](https://discuss.elastic.co/u/psylone)\ **Replies:** 11\ **Last updated:** [October 29, 2018, 4:48pm UTC](https://discuss.elastic.co/t/how-to-store-percolate-queries-and-documents/154438 "2018-10-29T16:48:27Z")
Hi, I'm trying to understand how and where store documents and percolate queries for these documents. According to this documentation it's possible to create a new field in the index mapping with percolator data type. … --- ## [Primeiros passos](https://discuss.elastic.co/t/primeiros-passos/239525)
**Author:** [@dicto](https://discuss.elastic.co/u/dicto)\ **Replies:** 14\ **Last updated:** [July 2, 2020, 1:29pm UTC](https://discuss.elastic.co/t/primeiros-passos/239525 "2020-07-02T13:29:39Z")
Boa tarde! Por gentileza me tire uma dúvida de arquitetura do Elastic. Quero alimentar uma base de dados na Elastic Cloud, estes dsdos eu consigo enviar via rest em Json ou conectandoba um BD e fazendo inserts de banco… --- ## [Does basic license of elastic stack support basic authentication?](https://discuss.elastic.co/t/does-basic-license-of-elastic-stack-support-basic-authentication/224366)
**Author:** [@SSim](https://discuss.elastic.co/u/SSim)\ **Replies:** 13\ **Last updated:** [March 25, 2020, 2:12am UTC](https://discuss.elastic.co/t/does-basic-license-of-elastic-stack-support-basic-authentication/224366 "2020-03-25T02:12:41Z")
Hello, I am using a basic license of elastic stack and would like to confirm whether the basic license of elastic stack supports basic authentication like a prompt for basic username and password to be entered before ac… --- ## [Hi, I am trying to deploy the Elser (built-in) model, and all the configurations seems to be fine. But the deployment has started and it takes forever to complete the deployment](https://discuss.elastic.co/t/hi-i-am-trying-to-deploy-the-elser-built-in-model-and-all-the-configurations-seems-to-be-fine-but-the-deployment-has-started-and-it-takes-forever-to-complete-the-deployment/342350)
**Author:** [@Manasa4](https://discuss.elastic.co/u/Manasa4)\ **Replies:** 9\ **Last updated:** [September 11, 2023, 9:16am UTC](https://discuss.elastic.co/t/hi-i-am-trying-to-deploy-the-elser-built-in-model-and-all-the-configurations-seems-to-be-fine-but-the-deployment-has-started-and-it-takes-forever-to-complete-the-deployment/342350 "2023-09-11T09:16:43Z")
In my case I have run the deployment at 11:27AM EST on 30th of August , but till 11:30 AM EST 31st of August, it still seems to be running. Also, tried increasing the RAM and space for Elastic search and also for the M… --- ## [Kibana Watcher using monitoring index](https://discuss.elastic.co/t/kibana-watcher-using-monitoring-index/231877)
**Author:** [@Maries](https://discuss.elastic.co/u/Maries)\ **Replies:** 12\ **Last updated:** [May 13, 2020, 6:10pm UTC](https://discuss.elastic.co/t/kibana-watcher-using-monitoring-index/231877 "2020-05-13T18:10:50Z")
Created a watcher script for getting the statistics details from daily monitoring index. But the match phrase condition is not working and no rows returned ( getting NULL Values in output). The same script was working i… [Previous page](https://discuss.elastic.co/top.md?page=139&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=141&per_page=50&period=all)