# Top **URL:** https://discuss.elastic.co/top.md?page=1408&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1409 --- ## [Whitespace tokenizer not working as I'd expect](https://discuss.elastic.co/t/whitespace-tokenizer-not-working-as-id-expect/22634)
**Author:** [@cching](https://discuss.elastic.co/u/cching)\ **Replies:** 2\ **Last updated:** [March 16, 2015, 1:41pm UTC](https://discuss.elastic.co/t/whitespace-tokenizer-not-working-as-id-expect/22634 "2015-03-16T13:41:43Z")
Hi all, I'm trying to break up some strings to use in a full text search leaving the original field intact. I have created a "full\_text" field that is populated from a "name" field using "copy\_to" and an analyzer… --- ## [Help with window sort in vega](https://discuss.elastic.co/t/help-with-window-sort-in-vega/286783)
**Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\ **Replies:** 3\ **Last updated:** [October 15, 2021, 10:04pm UTC](https://discuss.elastic.co/t/help-with-window-sort-in-vega/286783 "2021-10-15T22:04:43Z")
Hello All, I am trying to get a window transform to sort data, and am having some issues, either my expectations are wrong or I am just doing something wrong: { "$schema": "https://vega.github.io/schema/vega/v5.json"… --- ## [Logs are no longer sent to elasticsearch](https://discuss.elastic.co/t/logs-are-no-longer-sent-to-elasticsearch/260378)
**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\ **Replies:** 3\ **Last updated:** [January 11, 2021, 4:46am UTC](https://discuss.elastic.co/t/logs-are-no-longer-sent-to-elasticsearch/260378 "2021-01-11T04:46:20Z")
I receive the logs in logstash, but the logs are no longer sent to elasticsearch. Can you help me? Below are the logs in logstash: \[root@scs90104vu logstash\]# tail -f /var/log/logstash/logstash-plain.log \[2021-01-06T… --- ## [Filebeat module vs filebeat output plugin?](https://discuss.elastic.co/t/filebeat-module-vs-filebeat-output-plugin/234143)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 3\ **Last updated:** [May 28, 2020, 12:24am UTC](https://discuss.elastic.co/t/filebeat-module-vs-filebeat-output-plugin/234143 "2020-05-28T00:24:00Z")
Hi, what is the difference between so called filebeat module and output plugin like: output.elasticsearch: --- ## [Trouble to understand some simple query](https://discuss.elastic.co/t/trouble-to-understand-some-simple-query/217387)
**Author:** [@Guss4241](https://discuss.elastic.co/u/Guss4241)\ **Replies:** 3\ **Last updated:** [January 31, 2020, 3:49pm UTC](https://discuss.elastic.co/t/trouble-to-understand-some-simple-query/217387 "2020-01-31T15:49:54Z")
Hi, i'm working with elasticsearch since some weeks now and I'm on the final step for my company project, but I have have some trouble to understand a trouble with a simple query. in my index I have a nested field call… --- ## [Using Interval of visual builder](https://discuss.elastic.co/t/using-interval-of-visual-builder/180630)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 3\ **Last updated:** [May 14, 2019, 3:33am UTC](https://discuss.elastic.co/t/using-interval-of-visual-builder/180630 "2019-05-14T03:33:53Z")
Hi all I am using visual builder of kibana to create an visualize for TPS. in the Time series part of kibana I used "Count" aggregation and in Option part I set interval as 1s (because the desire result is number of tra… --- ## [Distinct count with filter](https://discuss.elastic.co/t/distinct-count-with-filter/155795)
**Author:** [@winder](https://discuss.elastic.co/u/winder)\ **Replies:** 3\ **Last updated:** [November 9, 2018, 3:05pm UTC](https://discuss.elastic.co/t/distinct-count-with-filter/155795 "2018-11-09T15:05:04Z")
Hoping to get some guidance here. I'm trying to correlate session-id's from two different events, a heartbeat sent every 10 minutes and a disconnect which could be sent any time. The goal is to get the number of active … --- ## [Visualization with Date different between 2 fields](https://discuss.elastic.co/t/visualization-with-date-different-between-2-fields/143701)
**Author:** [@ginu](https://discuss.elastic.co/u/ginu)\ **Replies:** 3\ **Last updated:** [August 9, 2018, 1:52pm UTC](https://discuss.elastic.co/t/visualization-with-date-different-between-2-fields/143701 "2018-08-09T13:52:27Z")
Hi there I have 2 Date fields Field1 and Field2 and LABEL. I need to have a visualization which is a list which shows the difference in seconds for all the items: |Items| timeTakeninSeconds| |LABEL1| (Field2-Field1).s… --- ## [Loading a REST call response JSON with Vega-Lite, is it possible?](https://discuss.elastic.co/t/loading-a-rest-call-response-json-with-vega-lite-is-it-possible/128722)
**Author:** [@KibanaUse](https://discuss.elastic.co/u/KibanaUse)\ **Replies:** 3\ **Last updated:** [April 20, 2018, 3:27pm UTC](https://discuss.elastic.co/t/loading-a-rest-call-response-json-with-vega-lite-is-it-possible/128722 "2018-04-20T15:27:36Z")
Hello, I started using Vega plugin and trying to load data from a url, which is actually a REST call that returns a json file. Is it doable? --- ## [Error when setting default index in Kibana 5.1](https://discuss.elastic.co/t/error-when-setting-default-index-in-kibana-5-1/75060)
**Author:** [@StephenGoodall](https://discuss.elastic.co/u/StephenGoodall)\ **Replies:** 3\ **Last updated:** [February 15, 2017, 11:29am UTC](https://discuss.elastic.co/t/error-when-setting-default-index-in-kibana-5-1/75060 "2017-02-15T11:29:54Z")
Hi, I've recently taken a snapshot from a 2.3 cluster and restored it to a 5.1 cluster. (The AWS hosted service version :frowning: ) When I go to Kibana and make a new index pattern it lets me, but if I try to set any … --- ## [Multiple Index Data directories](https://discuss.elastic.co/t/multiple-index-data-directories/74702)
**Author:** [@OptimusB](https://discuss.elastic.co/u/OptimusB)\ **Replies:** 3\ **Last updated:** [February 11, 2017, 12:26am UTC](https://discuss.elastic.co/t/multiple-index-data-directories/74702 "2017-02-11T00:26:46Z")
We recently suffered a power outage and the 2 nodes become split brained. I managed to bring it back to green, but suffered a bit of data loss. When I was review the index data directories, I noticed that one of the node… --- ## [Watcher 5-rc1 Java API. Where's searchRequest("idx") method?](https://discuss.elastic.co/t/watcher-5-rc1-java-api-wheres-searchrequest-idx-method/63207)
**Author:** [@djmcgreal](https://discuss.elastic.co/u/djmcgreal)\ **Replies:** 3\ **Last updated:** [October 18, 2016, 7:22am UTC](https://discuss.elastic.co/t/watcher-5-rc1-java-api-wheres-searchrequest-idx-method/63207 "2016-10-18T07:22:13Z")
Hi Elastic Watchers, Following https://www.elastic.co/guide/en/x-pack/current/api-java.html, the guide says: .input(searchInput(searchRequest("idx").source(... But I can't find a searchRequest method anywhere. Any… --- ## [Allow logstash-output-http to send binary data](https://discuss.elastic.co/t/allow-logstash-output-http-to-send-binary-data/62919)
**Author:** [@marcoh00](https://discuss.elastic.co/u/marcoh00)\ **Replies:** 0\ **Last updated:** [October 13, 2016, 9:11am UTC](https://discuss.elastic.co/t/allow-logstash-output-http-to-send-binary-data/62919 "2016-10-13T09:11:05Z")
Hello there, I'm trying to process binary data through Logstash to upload it to an HTTP endpoint (via PUT). My input data contains some fields I want to index into ElasticSearch and a field containing binary data encod… --- ## [Downloading mapper attachments](https://discuss.elastic.co/t/downloading-mapper-attachments/37494)
**Author:** [@jan\_javinto](https://discuss.elastic.co/u/jan_javinto)\ **Replies:** 3\ **Last updated:** [December 18, 2015, 6:11am UTC](https://discuss.elastic.co/t/downloading-mapper-attachments/37494 "2015-12-18T06:11:03Z")
Hi, I want to install the latest Mapper Attachments plugin on my Vagrant Ubuntu system, but get this as a result: Failed: FileNotFoundException\[https://download.elastic.co/elasticsearch/release/org/elasticsearch/plug… --- ## [Bulk Data using Scan & Scroll API](https://discuss.elastic.co/t/bulk-data-using-scan-scroll-api/29244)
**Author:** [@code\_blue](https://discuss.elastic.co/u/code_blue)\ **Replies:** 3\ **Last updated:** [September 14, 2015, 12:19pm UTC](https://discuss.elastic.co/t/bulk-data-using-scan-scroll-api/29244 "2015-09-14T12:19:00Z")
We are trying to fetch all documents inside a mapping using Scan & Scroll API in batches. Is it possible same document is being sent multiple times or to put it in other words duplicate records are being returning whil… --- ## [Aggregations over fields which have multiple words in them](https://discuss.elastic.co/t/aggregations-over-fields-which-have-multiple-words-in-them/18456)
**Author:** [@Ankit\_Jain\_2](https://discuss.elastic.co/u/Ankit_Jain_2)\ **Replies:** 3\ **Last updated:** [July 3, 2014, 5:52pm UTC](https://discuss.elastic.co/t/aggregations-over-fields-which-have-multiple-words-in-them/18456 "2014-07-03T17:52:12Z")
Hey Folks, how do I do aggregations on a multi word field? i.e. if i have a field named "device model" which could have "samsung galaxy s5" or "iphone 5s" when I do an aggregation, it aggregates "samsung" separately … --- ## [Filebeat Can't parse MSSQL Logs](https://discuss.elastic.co/t/filebeat-cant-parse-mssql-logs/316773)
**Author:** [@praveenpesala33](https://discuss.elastic.co/u/praveenpesala33)\ **Replies:** 4\ **Last updated:** [October 26, 2022, 9:01pm UTC](https://discuss.elastic.co/t/filebeat-cant-parse-mssql-logs/316773 "2022-10-26T21:01:29Z")
I have installed filebeat 7.15.1 on windows server with mssql logs module. When I run filebeat in foreground with .\\filebeat.exe -c .\\filebeat.yml -e -d "\*" , it can not parse the logs. Filebeat Config: filebeat.inputs… --- ## [Kibana Vega boxplot tooltip appears at wrong positions](https://discuss.elastic.co/t/kibana-vega-boxplot-tooltip-appears-at-wrong-positions/235464)
**Author:** [@Nani\_20](https://discuss.elastic.co/u/Nani_20)\ **Replies:** 4\ **Last updated:** [June 7, 2020, 7:08pm UTC](https://discuss.elastic.co/t/kibana-vega-boxplot-tooltip-appears-at-wrong-positions/235464 "2020-06-07T19:08:43Z")
Hi, I am trying to draw box plots in Kibana using Vega. To indicate a few values(min, median, max), I have added a few points using symbol Mark and configured tooltip for these points. But, the tooltip appears on the t… --- ## [Need help with custom Filebeat modules, no input data in real tests but local dev test yes](https://discuss.elastic.co/t/need-help-with-custom-filebeat-modules-no-input-data-in-real-tests-but-local-dev-test-yes/235374)
**Author:** [@Stefan\_Sabolowitsch](https://discuss.elastic.co/u/Stefan_Sabolowitsch)\ **Replies:** 4\ **Last updated:** [June 4, 2020, 7:19pm UTC](https://discuss.elastic.co/t/need-help-with-custom-filebeat-modules-no-input-data-in-real-tests-but-local-dev-test-yes/235374 "2020-06-04T19:19:49Z")
Hi there, i created my own filebeat module, "filebeat-modules-devguide" served as the basis. All tests had been successful and now wanted to test them in real. The index and the ingest pipelines are created successful… --- ## [Custom realm extension configuration](https://discuss.elastic.co/t/custom-realm-extension-configuration/192403)
**Author:** [@iainardo](https://discuss.elastic.co/u/iainardo)\ **Replies:** 4\ **Last updated:** [July 29, 2019, 12:42pm UTC](https://discuss.elastic.co/t/custom-realm-extension-configuration/192403 "2019-07-29T12:42:40Z")
Hi, I'm having trouble with custom realm configuration when upgrading from Elasticsearch from 6.8.0 to 7.2.0 with custom realm configuration. I can't see what the problem is... Could anyone help me here please - thanks!… --- ## [Stopping any incoming data from filebeat](https://discuss.elastic.co/t/stopping-any-incoming-data-from-filebeat/187497)
**Author:** [@EldrosKandar](https://discuss.elastic.co/u/EldrosKandar)\ **Replies:** 4\ **Last updated:** [July 11, 2019, 12:06am UTC](https://discuss.elastic.co/t/stopping-any-incoming-data-from-filebeat/187497 "2019-07-11T00:06:24Z")
Since a while, I've been suffering from timeout each time I wanted to make a change through REST API calls. I've given the issue some thoughts and came to the idea of temporary blocking any incoming data so it wouldn't … --- ## [Removing node in ElasticSearch where cluster awareness is enabled](https://discuss.elastic.co/t/removing-node-in-elasticsearch-where-cluster-awareness-is-enabled/81013)
**Author:** [@manjukdvg](https://discuss.elastic.co/u/manjukdvg)\ **Replies:** 4\ **Last updated:** [April 4, 2017, 9:57am UTC](https://discuss.elastic.co/t/removing-node-in-elasticsearch-where-cluster-awareness-is-enabled/81013 "2017-04-04T09:57:30Z")
I have a ES cluster created with Cluster allocation awareness enabled with 4 zones and each zone has 2 masters and 3 data nodes. I have primary shards on those zone nodes. Currently I got a requirement to remove 1 zone c… --- ## [Incremental updates and searches java.net.BindException](https://discuss.elastic.co/t/incremental-updates-and-searches-java-net-bindexception/9727)
**Author:** [@Ilija\_Subasic](https://discuss.elastic.co/u/Ilija_Subasic)\ **Replies:** 4\ **Last updated:** [November 7, 2015, 4:05am UTC](https://discuss.elastic.co/t/incremental-updates-and-searches-java-net-bindexception/9727 "2015-11-07T04:05:05Z")
Hi, I have got a map/reduce job which does queries against the elasticsearch index, and could force some updates on the index. It runs for a while, up to a certain point (about 2000 documents, and I have tried dif… --- ## [Retrieve filters KQL Query](https://discuss.elastic.co/t/retrieve-filters-kql-query/317784)
**Author:** [@bandodkarD](https://discuss.elastic.co/u/bandodkarD)\ **Replies:** 5\ **Last updated:** [October 31, 2022, 12:08pm UTC](https://discuss.elastic.co/t/retrieve-filters-kql-query/317784 "2022-10-31T12:08:41Z")
Can you advise how we can retrieve the backend KQL query once we filter out data on Kibana Dashboard? Our requirement is to filter out data using charts and other visualisations are retrieve the query generated in backe… --- ## [Fetch Realm settings from elasticsearch.yml file in a static way on class load](https://discuss.elastic.co/t/fetch-realm-settings-from-elasticsearch-yml-file-in-a-static-way-on-class-load/146592)
**Author:** [@gautu7](https://discuss.elastic.co/u/gautu7)\ **Replies:** 5\ **Last updated:** [August 30, 2018, 2:58am UTC](https://discuss.elastic.co/t/fetch-realm-settings-from-elasticsearch-yml-file-in-a-static-way-on-class-load/146592 "2018-08-30T02:58:18Z")
Hi, I have a CustomRealm class which handles the custom realm logic to authenticate. I have a static cache so that it's only 1 per jvm, which has a value - setExpireAfterAccess(10). I want this value to come from the ym… --- ## [Jolokia module not found exception](https://discuss.elastic.co/t/jolokia-module-not-found-exception/137999)
**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\ **Replies:** 5\ **Last updated:** [July 2, 2018, 10:52am UTC](https://discuss.elastic.co/t/jolokia-module-not-found-exception/137999 "2018-07-02T10:52:21Z")
Hi All, I have installed jolokia agent and attached to the java process successfully . but in metric beat yml i have specified following configuration and getting error please advice me how to install jolokia module in… --- ## [Inter record functions in Kibana?](https://discuss.elastic.co/t/inter-record-functions-in-kibana/95580)
**Author:** [@Cristian](https://discuss.elastic.co/u/Cristian)\ **Replies:** 5\ **Last updated:** [August 29, 2017, 2:24pm UTC](https://discuss.elastic.co/t/inter-record-functions-in-kibana/95580 "2017-08-29T14:24:31Z")
Hi All! I have forex information for each day. Close, Open, Low, High. Now, I would like to calculate the difference in % between a point in time, lets say today (t0), and the day before (-t1). That is: (|t0-t1|/((t0-… --- ## [\[2.1.3\] Regarding Outputs to Multiple ES Clusters](https://discuss.elastic.co/t/2-1-3-regarding-outputs-to-multiple-es-clusters/50408)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 5\ **Last updated:** [May 19, 2016, 1:14pm UTC](https://discuss.elastic.co/t/2-1-3-regarding-outputs-to-multiple-es-clusters/50408 "2016-05-19T13:14:32Z")
Hi, Atm, most of our traffic is hitting logstash via the beats input. We output to two clusters, one of which is significantly bigger than the other. And periodically, we see congestion reported by beats and it backs off… --- ## [Getting error while executing logstash conf file](https://discuss.elastic.co/t/getting-error-while-executing-logstash-conf-file/25422)
**Author:** [@Ashok](https://discuss.elastic.co/u/Ashok)\ **Replies:** 5\ **Last updated:** [July 13, 2015, 10:24am UTC](https://discuss.elastic.co/t/getting-error-while-executing-logstash-conf-file/25422 "2015-07-13T10:24:27Z")
Hi Team, Getting folloowing error while executing logstash conf file. ←\[31mGot error to send bulk of actions: blocked by: \[SERVICE\_UNAVAILABLE/1/state not recovered / initialized\];\[SERVICE\_UNAVAILABLE/2/no master\]; {:lev… --- ## [A couple of exceptions from stress testing scrolling](https://discuss.elastic.co/t/a-couple-of-exceptions-from-stress-testing-scrolling/6131)
**Author:** [@Erick\_Tryzelaar](https://discuss.elastic.co/u/Erick_Tryzelaar)\ **Replies:** 5\ **Last updated:** [December 14, 2011, 10:17pm UTC](https://discuss.elastic.co/t/a-couple-of-exceptions-from-stress-testing-scrolling/6131 "2011-12-14T22:17:17Z")
I was doing some stress testing, and I ran into a couple interesting errors when I switched from sorting by \_id to sorting on \_uid. This has only happened once, and rerunning the query over and over doesn't seem to tr… --- ## [Combine two fields in search](https://discuss.elastic.co/t/combine-two-fields-in-search/284277)
**Author:** [@markuso](https://discuss.elastic.co/u/markuso)\ **Replies:** 1\ **Last updated:** [September 15, 2021, 10:29pm UTC](https://discuss.elastic.co/t/combine-two-fields-in-search/284277 "2021-09-15T22:29:30Z")
Hey, I have the JSON data in elasticsearch as { "prefix": "+46", "number":"123456789" } So this is a phone number, together with the country code prefix. And searching for them as separate prefix: +46 number: 1… --- ## [Preserve @timestamp Field for Custom Filebeat JSON logs](https://discuss.elastic.co/t/preserve-timestamp-field-for-custom-filebeat-json-logs/264495)
**Author:** [@Tim\_Estes](https://discuss.elastic.co/u/Tim_Estes)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 9:54am UTC](https://discuss.elastic.co/t/preserve-timestamp-field-for-custom-filebeat-json-logs/264495 "2021-02-25T09:54:39Z")
I've deployed agents across two machines that are ingesting custom log data stored in json files. However, the @timestamp field present in the log files are not getting preserved. For example, here's a json log generate… --- ## [Перемешивает логи](https://discuss.elastic.co/t/topic/239484)
**Author:** [@111360](https://discuss.elastic.co/u/111360)\ **Replies:** 7\ **Last updated:** [July 2, 2020, 3:50pm UTC](https://discuss.elastic.co/t/topic/239484 "2020-07-02T15:50:48Z")
Всем привет! Собираю логи logstash с сервера. input { file { path =\> "C:/HTTP/test/log/\*\*/\*" start\_position =\> "beginning" close\_older =\> "1 hour" ignore\_older =\> "2 hour" sincedb\_clean\_after =\> "2 hour" } } output {… --- ## [Current transaction is empty - AspNetFullFramework](https://discuss.elastic.co/t/current-transaction-is-empty-aspnetfullframework/206812)
**Author:** [@sgudjonsson](https://discuss.elastic.co/u/sgudjonsson)\ **Replies:** 1\ **Last updated:** [November 10, 2019, 11:43am UTC](https://discuss.elastic.co/t/current-transaction-is-empty-aspnetfullframework/206812 "2019-11-10T11:43:41Z")
APM Agent language and version: ASP.Net Full Framework 1.1.2 I'm trying to integrate the Full Framework agent into .Net 4.6.2 Web application via the IHttpModule \ **Author:** [@retzkek](https://discuss.elastic.co/u/retzkek)\ **Replies:** 1\ **Last updated:** [October 2, 2019, 3:22pm UTC](https://discuss.elastic.co/t/elasticsearch-6-8-in-docker-crashing-with-sigill-after-restart-corrupt-state/200452 "2019-10-02T15:22:10Z") Somewhat recently we upgraded our cluster to 6.8, and in the process started running elasticsearch in Docker containers, one per host, using the elasticsearch:6.8.0 image from docker hub. Testing and deployment went fine… --- ## [Metricbeat to elasticsearch (same host with docker) connection failed \[forsaken\]](https://discuss.elastic.co/t/metricbeat-to-elasticsearch-same-host-with-docker-connection-failed-forsaken/157525)
**Author:** [@tyteck](https://discuss.elastic.co/u/tyteck)\ **Replies:** 1\ **Last updated:** [November 20, 2018, 4:13pm UTC](https://discuss.elastic.co/t/metricbeat-to-elasticsearch-same-host-with-docker-connection-failed-forsaken/157525 "2018-11-20T16:13:55Z")
Hi there I'm pretty new on docker and elasticsearch and I'm trying to install a supervision for my company. The goal is to have one server hosting both elasticsearch and kibana and many node that are running beats. I … --- ## [ELK on PUTTY RHEL/CentOS?](https://discuss.elastic.co/t/elk-on-putty-rhel-centos/88583)
**Author:** [@atharvajava](https://discuss.elastic.co/u/atharvajava)\ **Replies:** 1\ **Last updated:** [June 7, 2017, 9:40pm UTC](https://discuss.elastic.co/t/elk-on-putty-rhel-centos/88583 "2017-06-07T21:40:38Z")
Hi, I just started exploring elastic search and was trying to install the ELK stack via putty but I wanted to know that is it possible to run it and get something out of it by using pure CLI for learning purpose as I … --- ## [How to localize kibana visualization of kibana?](https://discuss.elastic.co/t/how-to-localize-kibana-visualization-of-kibana/66966)
**Author:** [@jamal](https://discuss.elastic.co/u/jamal)\ **Replies:** 1\ **Last updated:** [November 23, 2016, 12:32pm UTC](https://discuss.elastic.co/t/how-to-localize-kibana-visualization-of-kibana/66966 "2016-11-23T12:32:48Z")
I want to localize "Have multi language English,Dari" visualization of kibana, is there any way to do it ? --- ## [Logstash 6.8.23 Cannot put data into elastic index, mapping issue](https://discuss.elastic.co/t/logstash-6-8-23-cannot-put-data-into-elastic-index-mapping-issue/310940)
**Author:** [@Akhil\_Chandran](https://discuss.elastic.co/u/Akhil_Chandran)\ **Replies:** 8\ **Last updated:** [August 10, 2022, 12:59pm UTC](https://discuss.elastic.co/t/logstash-6-8-23-cannot-put-data-into-elastic-index-mapping-issue/310940 "2022-08-10T12:59:26Z")
HI, I am trying to pass data from logstash to ES index, but it throws error as shown below 2022-07-28T10:28:17,909\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\[… --- ## [The rebalance tasks keeps going and not stop](https://discuss.elastic.co/t/the-rebalance-tasks-keeps-going-and-not-stop/282619)
**Author:** [@casterQ](https://discuss.elastic.co/u/casterQ)\ **Replies:** 8\ **Last updated:** [August 27, 2021, 6:56am UTC](https://discuss.elastic.co/t/the-rebalance-tasks-keeps-going-and-not-stop/282619 "2021-08-27T06:56:20Z")
version ：7.10.2 i add a dataNode to cluster，and then the rebalance tasks started... but a week has passed，rebalance keeps going now and not only for new dataNode。 i found this situation exists for GET \_cat/recovery?v … --- ## [Node not joining Elasticsearch cluster](https://discuss.elastic.co/t/node-not-joining-elasticsearch-cluster/272667)
**Author:** [@ravi-shanker](https://discuss.elastic.co/u/ravi-shanker)\ **Replies:** 8\ **Last updated:** [May 12, 2021, 7:33am UTC](https://discuss.elastic.co/t/node-not-joining-elasticsearch-cluster/272667 "2021-05-12T07:33:04Z")
I have made an Elasticsearch cluster of 3 nodes but one of the node is not joining the cluster. Below are my elasticsearch.yml file for all 3 nodes. NODE1 cluster.name: ES-Cluster node.name: node-1 node.master: true … --- ## [Mapper conflicts with existing mapping in other types](https://discuss.elastic.co/t/mapper-conflicts-with-existing-mapping-in-other-types/53635)
**Author:** [@Joel\_Shadbolt](https://discuss.elastic.co/u/Joel_Shadbolt)\ **Replies:** 0\ **Last updated:** [June 22, 2016, 9:29am UTC](https://discuss.elastic.co/t/mapper-conflicts-with-existing-mapping-in-other-types/53635 "2016-06-22T09:29:42Z")
Hi, I am attempting to index two separate copies of the same log file (different environments) into two separate indexes (one for each environment) and I have in place a mapping template for which through wildcarding m… --- ## [Replace DailyRollingFileAppender for index slow log](https://discuss.elastic.co/t/replace-dailyrollingfileappender-for-index-slow-log/14917)
**Author:** [@olivier\_morel](https://discuss.elastic.co/u/olivier_morel)\ **Replies:** 8\ **Last updated:** [December 19, 2013, 3:31pm UTC](https://discuss.elastic.co/t/replace-dailyrollingfileappender-for-index-slow-log/14917 "2013-12-19T15:31:30Z")
hy all i try to set up the slow log in elasticsearch, i read a lot of doc and i found a email between igor motov and kimchy where they say " Slow queries are logged by a standard ES logger. The logging.xml file c… --- ## [Kibana TSVB Markdown](https://discuss.elastic.co/t/kibana-tsvb-markdown/243999)
**Author:** [@david.preston](https://discuss.elastic.co/u/david.preston)\ **Replies:** 2\ **Last updated:** [August 6, 2020, 3:33pm UTC](https://discuss.elastic.co/t/kibana-tsvb-markdown/243999 "2020-08-06T15:33:18Z")
Hi, Can conditional logic be added to the TSVB Markdown visualisation? I saw a post where the Markdown element in a canvas could be conditionally customised by editing the expression. However I cannot see the same fe… --- ## [Load balancing with Kibana](https://discuss.elastic.co/t/load-balancing-with-kibana/223753)
**Author:** [@drautenbach](https://discuss.elastic.co/u/drautenbach)\ **Replies:** 2\ **Last updated:** [March 16, 2020, 4:57pm UTC](https://discuss.elastic.co/t/load-balancing-with-kibana/223753 "2020-03-16T16:57:00Z")
Hi, We have the following configuration: 2x Elastic Master+Data Nodes (Live data centre) 1x Elastic Voting node (DR data centre) 2x Kibana Nodes (live data centre) 2x Logstash Nodes If I turn off any of the master+… --- ## [Filebeat / Kafka bug?](https://discuss.elastic.co/t/filebeat-kafka-bug/185843)
**Author:** [@Rob3](https://discuss.elastic.co/u/Rob3)\ **Replies:** 2\ **Last updated:** [June 19, 2019, 6:57pm UTC](https://discuss.elastic.co/t/filebeat-kafka-bug/185843 "2019-06-19T18:57:26Z")
Filebeat Version: 7.x (testing on 7.1.1 and 7.1.2) Kafka Version: Azure Event Hubs Kafka surface Logstash and Fluentd both work with Event Hubs Kafka interface, Filebeat not so much. For some reason it appears the Eve… --- ## [Filebeat (6.5.4) modules how to remove unused fields](https://discuss.elastic.co/t/filebeat-6-5-4-modules-how-to-remove-unused-fields/171943)
**Author:** [@Stancho](https://discuss.elastic.co/u/Stancho)\ **Replies:** 2\ **Last updated:** [March 14, 2019, 11:12am UTC](https://discuss.elastic.co/t/filebeat-6-5-4-modules-how-to-remove-unused-fields/171943 "2019-03-14T11:12:32Z")
Hi, i am using some filebeat modules (nginx, logstash, elasticsearch, kibana, redis), but some of the produced fields are not important for me and I don't want to save them in elasticsearch. Is there a possibility to re… --- ## [Can I set the Y-axis to show integer values only?](https://discuss.elastic.co/t/can-i-set-the-y-axis-to-show-integer-values-only/97063)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 2\ **Last updated:** [August 15, 2017, 10:48am UTC](https://discuss.elastic.co/t/can-i-set-the-y-axis-to-show-integer-values-only/97063 "2017-08-15T10:48:07Z")
I want a vertical bar chart of a count of documents over time—a date histogram with auto time interval—with each bar split according to a string field value: top 20 error codes. I can do that, but, for some time ranges,… --- ## [Can the filebeat clients do Kerberos authentication](https://discuss.elastic.co/t/can-the-filebeat-clients-do-kerberos-authentication/91875)
**Author:** [@venky1987](https://discuss.elastic.co/u/venky1987)\ **Replies:** 2\ **Last updated:** [July 5, 2017, 1:57pm UTC](https://discuss.elastic.co/t/can-the-filebeat-clients-do-kerberos-authentication/91875 "2017-07-05T13:57:17Z")
Can the filebeat clients do Kerberos authentication to Kafka brokers? --- ## [Rename default output field names](https://discuss.elastic.co/t/rename-default-output-field-names/91021)
**Author:** [@hding](https://discuss.elastic.co/u/hding)\ **Replies:** 2\ **Last updated:** [June 27, 2017, 8:05pm UTC](https://discuss.elastic.co/t/rename-default-output-field-names/91021 "2017-06-27T20:05:16Z")
Is the default Filebeat output name for log lines "message"? Can I give it a different name by configuring filebeat.yml, instead of using the rename processor in ingest node? Also, can I change the default "source" fie… [Previous page](https://discuss.elastic.co/top.md?page=1407&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1409&per_page=50&period=all)