# Top **URL:** https://discuss.elastic.co/top.md?page=1419&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1420 --- ## [OSQuery field types](https://discuss.elastic.co/t/osquery-field-types/190875)
**Author:** [@DPattee](https://discuss.elastic.co/u/DPattee)\ **Replies:** 5\ **Last updated:** [July 18, 2019, 6:09pm UTC](https://discuss.elastic.co/t/osquery-field-types/190875 "2019-07-18T18:09:31Z")
I just realized all osquery fields get set to type 'string'. In osquery fields have appropriate types (for example for a temperature sensor it will have a string name and a double celsius temperature) But the json osqu… --- ## [Creating beat from Metricbeat](https://discuss.elastic.co/t/creating-beat-from-metricbeat/160586)
**Author:** [@fdmsantos](https://discuss.elastic.co/u/fdmsantos)\ **Replies:** 5\ **Last updated:** [December 20, 2018, 5:57pm UTC](https://discuss.elastic.co/t/creating-beat-from-metricbeat/160586 "2018-12-20T17:57:43Z")
Hello, I'm trying to create a beat based on Metricbeat. I have followed the steps described in https://www.elastic.co/guide/en/beats/devguide/current/creating-beat-from-metricbeat.html#creating-beat-from-metricbeat. A… --- ## [Samples of grok filter](https://discuss.elastic.co/t/samples-of-grok-filter/124427)
**Author:** [@jason\_smith](https://discuss.elastic.co/u/jason_smith)\ **Replies:** 5\ **Last updated:** [March 23, 2018, 7:52pm UTC](https://discuss.elastic.co/t/samples-of-grok-filter/124427 "2018-03-23T19:52:44Z")
Hello folks, Being new to ELK, I struggled to understand from the following sample grok filter script which reads Apache log file as shown in the picture. I want to find out from this forum if there are any good sample… --- ## [View Data from specific index over 24hr period](https://discuss.elastic.co/t/view-data-from-specific-index-over-24hr-period/288941)
**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\ **Replies:** 3\ **Last updated:** [November 11, 2021, 2:48pm UTC](https://discuss.elastic.co/t/view-data-from-specific-index-over-24hr-period/288941 "2021-11-11T14:48:51Z")
Hi, I am trying to come up with a way to view the data from a field within Elasticsearch index called "dns.highest\_registered\_domain" over a 24 hour period. I have come up with the following but I am not sure if it is … --- ## [Changing Time Format](https://discuss.elastic.co/t/changing-time-format/278115)
**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\ **Replies:** 3\ **Last updated:** [July 8, 2021, 12:53pm UTC](https://discuss.elastic.co/t/changing-time-format/278115 "2021-07-08T12:53:25Z")
I have a filter that is reading 2 fields (STARTTIME and ENDTIME) from a CSV file and then changing to deviceCustomString1 and deviceCustomString2 and I need to change the time layout. I am trying to change the time form… --- ## [Utilising an internal floorplan as a map layer](https://discuss.elastic.co/t/utilising-an-internal-floorplan-as-a-map-layer/247860)
**Author:** [@benji87](https://discuss.elastic.co/u/benji87)\ **Replies:** 3\ **Last updated:** [September 10, 2020, 9:39am UTC](https://discuss.elastic.co/t/utilising-an-internal-floorplan-as-a-map-layer/247860 "2020-09-10T09:39:34Z")
Hi all, I just wondered whether anyone has any experience with using a custom WMS server or mapping feature for an internal structure or setting? I'm currently using the Open Street Maps WMS, and zooming in on a buildi… --- ## [Вывод ограниченной части текста на предпросмотр](https://discuss.elastic.co/t/topic/57675)
**Author:** [@whispersofdew](https://discuss.elastic.co/u/whispersofdew)\ **Replies:** 3\ **Last updated:** [August 19, 2016, 11:46am UTC](https://discuss.elastic.co/t/topic/57675 "2016-08-19T11:46:30Z")
Наверняка ответ есть в документации, но не знаю как правильно загуглить. Я индексирую целиком весь документ. В нем много текста. У меня есть менюшка поисковика, частично напоминающая гугл. В ней должны выводиться час… --- ## [Question about path in filebeat configuration](https://discuss.elastic.co/t/question-about-path-in-filebeat-configuration/54186)
**Author:** [@nanshan](https://discuss.elastic.co/u/nanshan)\ **Replies:** 3\ **Last updated:** [June 30, 2016, 9:50am UTC](https://discuss.elastic.co/t/question-about-path-in-filebeat-configuration/54186 "2016-06-30T09:50:02Z")
for different services, I have different path of log files. Can I add all the paths of my log files to a single filebeat.yml? --- ## [Intermittently slow GET requests](https://discuss.elastic.co/t/intermittently-slow-get-requests/14896)
**Author:** [@Joel\_Abrahamsson](https://discuss.elastic.co/u/Joel_Abrahamsson)\ **Replies:** 3\ **Last updated:** [December 17, 2013, 4:00pm UTC](https://discuss.elastic.co/t/intermittently-slow-get-requests/14896 "2013-12-17T16:00:17Z")
=== Context === We have a cluster with five nodes on virtual machines. The machines are running CentOS on OpenVZ. Using ES beta2. Four of the machines have 4GB of memory and 3 cores each. The fifth one has 6GB of … --- ## [Logstash error](https://discuss.elastic.co/t/logstash-error/249194)
**Author:** [@grazer](https://discuss.elastic.co/u/grazer)\ **Replies:** 4\ **Last updated:** [September 20, 2020, 1:25am UTC](https://discuss.elastic.co/t/logstash-error/249194 "2020-09-20T01:25:43Z")
Running version 7.8.0 everthing seems to be running fine however, I'm getting error... not sure what it is.. I have the correct java version, all the mutations seem to work, the paths are correct etc.. This extract is fr… --- ## [How to aggregate classifieds that have a date-range](https://discuss.elastic.co/t/how-to-aggregate-classifieds-that-have-a-date-range/179487)
**Author:** [@marcuslankenau](https://discuss.elastic.co/u/marcuslankenau)\ **Replies:** 4\ **Last updated:** [May 3, 2019, 2:22pm UTC](https://discuss.elastic.co/t/how-to-aggregate-classifieds-that-have-a-date-range/179487 "2019-05-03T14:22:44Z")
I am quite new to elasticsearch and have a design/query question. We have a lot of classifieds that we store and query via elasticsearch. Each contain some product data, a visibility date-range (when did it appear and di… --- ## [Ability to configure "root" field for an object type](https://discuss.elastic.co/t/ability-to-configure-root-field-for-an-object-type/170662)
**Author:** [@sdavids](https://discuss.elastic.co/u/sdavids)\ **Replies:** 4\ **Last updated:** [March 4, 2019, 5:42pm UTC](https://discuss.elastic.co/t/ability-to-configure-root-field-for-an-object-type/170662 "2019-03-04T17:42:49Z")
I have a mapping definition with multiple object types that looks like: { "mappings": { "\_doc": { "properties": { "identifier": { "type": "object", … --- ## [Opening custom links in same tab](https://discuss.elastic.co/t/opening-custom-links-in-same-tab/100848)
**Author:** [@blueren](https://discuss.elastic.co/u/blueren)\ **Replies:** 4\ **Last updated:** [September 19, 2017, 12:06pm UTC](https://discuss.elastic.co/t/opening-custom-links-in-same-tab/100848 "2017-09-19T12:06:34Z")
Hello, I am using x-pack and have just begun with machine learning elements. In the metric viewer page, at the bottom, I see a table that contains the data pertaining to the anomalies detected. I was playing around with… --- ## [Multiline codec applied (without multiline in logs)](https://discuss.elastic.co/t/multiline-codec-applied-without-multiline-in-logs/79868)
**Author:** [@rosselg](https://discuss.elastic.co/u/rosselg)\ **Replies:** 4\ **Last updated:** [March 28, 2017, 10:34am UTC](https://discuss.elastic.co/t/multiline-codec-applied-without-multiline-in-logs/79868 "2017-03-28T10:34:17Z")
Hi folks, Filebeat applies the "multiline coded", even if the log file doesn't contains any multiline logs. I guess this is related to Drupal log mechanism, as the log file is written every 10sec. with all the logs t… --- ## [Elasticsearch-river-kafka not creating daily indexes](https://discuss.elastic.co/t/elasticsearch-river-kafka-not-creating-daily-indexes/25273)
**Author:** [@nivinm](https://discuss.elastic.co/u/nivinm)\ **Replies:** 4\ **Last updated:** [July 10, 2015, 7:28pm UTC](https://discuss.elastic.co/t/elasticsearch-river-kafka-not-creating-daily-indexes/25273 "2015-07-10T19:28:44Z")
Hello, We are transferring data from logstash \> kafka \> elasticsearch-river-kafka \> elasticsearch || kibana. While this method works, we are noticing that daily indexes are not created. Is there a way to have daily in… --- ## [Clean shutdown of an Elasticsearch node](https://discuss.elastic.co/t/clean-shutdown-of-an-elasticsearch-node/8016)
**Author:** [@Dan\_Everton](https://discuss.elastic.co/u/Dan_Everton)\ **Replies:** 4\ **Last updated:** [June 13, 2012, 11:01pm UTC](https://discuss.elastic.co/t/clean-shutdown-of-an-elasticsearch-node/8016 "2012-06-13T23:01:00Z")
I've read the documentation for the node shutdown API (http://www.elasticsearch.org/guide/reference/api/admin-cluster-nodes-shutdown.html) and it's not clear to me what happens to inflight requests when a shutdown i… --- ## [Create rule using KQL query](https://discuss.elastic.co/t/create-rule-using-kql-query/333859)
**Author:** [@nitisha](https://discuss.elastic.co/u/nitisha)\ **Replies:** 2\ **Last updated:** [May 22, 2023, 11:04am UTC](https://discuss.elastic.co/t/create-rule-using-kql-query/333859 "2023-05-22T11:04:37Z")
Hi , We are using metricbeat to monitor containers in our environment. We need to create an email alert to get triggered when any container's CPU usage exceeds 70%. I was trying to create a rule under "Alerts and Insig… --- ## [Ruby filter to whitelist nested fields](https://discuss.elastic.co/t/ruby-filter-to-whitelist-nested-fields/298424)
**Author:** [@lordcosmos1978](https://discuss.elastic.co/u/lordcosmos1978)\ **Replies:** 2\ **Last updated:** [March 1, 2022, 9:48am UTC](https://discuss.elastic.co/t/ruby-filter-to-whitelist-nested-fields/298424 "2022-03-01T09:48:27Z")
I am trying to whitelist a number of nested fields. I first tried it using the prune filter but it seems that one does not support nested fields only top level fields. I saw in this topic Logstash prune nested fields t… --- ## [Filebeat 7.9+ Registry Format](https://discuss.elastic.co/t/filebeat-7-9-registry-format/283843)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 2\ **Last updated:** [September 10, 2021, 11:23am UTC](https://discuss.elastic.co/t/filebeat-7-9-registry-format/283843 "2021-09-10T11:23:24Z")
I run a script that checks the status of processing by comparing the file offset in the registry log.json to the byte size on the OS. The offset is generally saved in two places: log.json -\> multiple lines /d/d/d/d/d/… --- ## [Creating object with ruby](https://discuss.elastic.co/t/creating-object-with-ruby/189551)
**Author:** [@Rom1](https://discuss.elastic.co/u/Rom1)\ **Replies:** 2\ **Last updated:** [July 9, 2019, 9:48pm UTC](https://discuss.elastic.co/t/creating-object-with-ruby/189551 "2019-07-09T21:48:54Z")
Hi all, I have an event with fields containing tables: {"pfp":{"cfr":\["A", "B", "C"\], "name":\["X", "Y", "Z"\]}} I would like to transform them into objects: "pfp" =\> \[ \[0\] { "cfr" =\> "A", "name" =\> "X" }, \[1\] … --- ## [Multiple Line charts](https://discuss.elastic.co/t/multiple-line-charts/164497)
**Author:** [@diogo.goncalves](https://discuss.elastic.co/u/diogo.goncalves)\ **Replies:** 2\ **Last updated:** [January 17, 2019, 6:35pm UTC](https://discuss.elastic.co/t/multiple-line-charts/164497 "2019-01-17T18:35:06Z")
good afternoon, I'm trying to create a line graph with 2 lines (call opening and closing). I only managed to make a different graphics, as shown in the image. How to join the 2 graphics in only one, with 2 lines? Tha… --- ## [Mutate is not working](https://discuss.elastic.co/t/mutate-is-not-working/82041)
**Author:** [@saad](https://discuss.elastic.co/u/saad)\ **Replies:** 2\ **Last updated:** [April 12, 2017, 1:18pm UTC](https://discuss.elastic.co/t/mutate-is-not-working/82041 "2017-04-12T13:18:40Z")
Hi, I am trying to work on mutate to convert some the source and destination IP addresses from string to ip. However, it is not working below are the results logstash.conf input { stdin { type=\>"soc" } } filte… --- ## [Total number of hits is less than expected](https://discuss.elastic.co/t/total-number-of-hits-is-less-than-expected/62310)
**Author:** [@Pavlo](https://discuss.elastic.co/u/Pavlo)\ **Replies:** 2\ **Last updated:** [October 6, 2016, 7:28am UTC](https://discuss.elastic.co/t/total-number-of-hits-is-less-than-expected/62310 "2016-10-06T07:28:39Z")
Hello. I am using autogenerated index for documents with string field. When I try to search the prefix of the word, I do not receive expected document in the result and overall number of hits is less than expected. "… --- ## [Settings Exception with repository-hdfs plugin](https://discuss.elastic.co/t/settings-exception-with-repository-hdfs-plugin/22985)
**Author:** [@Scott\_E\_Lundgren](https://discuss.elastic.co/u/Scott_E_Lundgren)\ **Replies:** 2\ **Last updated:** [April 1, 2015, 3:20pm UTC](https://discuss.elastic.co/t/settings-exception-with-repository-hdfs-plugin/22985 "2015-04-01T15:20:18Z")
Can someone point out what's wrong with my configuration of the repository-hdfs plugin in my elasticsearch.yml ? I'm using Elasticsearch v1.3.4, repository-hdfs v2.0.2. The relevant part of elasticsearch.yml: repo… --- ## [Collapse + rescore функциональность](https://discuss.elastic.co/t/collapse-rescore/176870)
**Author:** [@Maxim\_Sychenko](https://discuss.elastic.co/u/Maxim_Sychenko)\ **Replies:** 6\ **Last updated:** [April 24, 2019, 12:02pm UTC](https://discuss.elastic.co/t/collapse-rescore/176870 "2019-04-24T12:02:25Z")
Я знаю что раньше в версии 5.3 была функциональность rescore+collapse https://github.com/elastic/elasticsearch/pull/28521 и что ее выпилили, но в моей ситуации мне такая функциональность необходима. Основная идея - созда… --- ## [Filebeat monitoring problem](https://discuss.elastic.co/t/filebeat-monitoring-problem/154278)
**Author:** [@pauldon2](https://discuss.elastic.co/u/pauldon2)\ **Replies:** 6\ **Last updated:** [November 3, 2018, 9:03am UTC](https://discuss.elastic.co/t/filebeat-monitoring-problem/154278 "2018-11-03T09:03:20Z")
I tried to enable filebeat monitoring on elasticsearch. Enabled it in the configuration: xpack.monitoring: enabled: true elasticsearch: hosts: \["http://10.10.8.77:9200"\] Thus configured 8 servers. But in kibana I s… --- ## [Packetbeat installation issues](https://discuss.elastic.co/t/packetbeat-installation-issues/114528)
**Author:** [@purpleturtle99](https://discuss.elastic.co/u/purpleturtle99)\ **Replies:** 6\ **Last updated:** [January 10, 2018, 12:20pm UTC](https://discuss.elastic.co/t/packetbeat-installation-issues/114528 "2018-01-10T12:20:04Z")
I have installed Elastic search and Kibana on Fedora 27 and got them to work. But I would like to do network monitoring with packetbeat. When I follow the rpm install instructions as per : https://www.elastic.co/guide/e… --- ## [Is it possible to add a customized merging strategy to alleviate split-brain impact?](https://discuss.elastic.co/t/is-it-possible-to-add-a-customized-merging-strategy-to-alleviate-split-brain-impact/16720)
**Author:** [@Jing\_Liu](https://discuss.elastic.co/u/Jing_Liu)\ **Replies:** 6\ **Last updated:** [April 16, 2014, 11:55pm UTC](https://discuss.elastic.co/t/is-it-possible-to-add-a-customized-merging-strategy-to-alleviate-split-brain-impact/16720 "2014-04-16T23:55:25Z")
Hi ES team, When split-brain occurs, I found following behaviors on ES during the merge between A and B (i.e., a group of nodes with master A or B): Assume we don't know when the split-brain happens and both node g… --- ## [Get all \*STORED\* fields from a query](https://discuss.elastic.co/t/get-all-stored-fields-from-a-query/5962)
**Author:** [@ikarius\_2](https://discuss.elastic.co/u/ikarius_2)\ **Replies:** 6\ **Last updated:** [September 9, 2013, 10:15am UTC](https://discuss.elastic.co/t/get-all-stored-fields-from-a-query/5962 "2013-09-09T10:15:27Z")
Hi all, First, i'm a beginner with ES, so .. be kind (though i've a strong background with Lucene). I'm trying to get all the stored fields (with a mapping) in my seach. These stored fields seems to be stored al… --- ## [Elasticsearch Cloud SSO with ActiveDirectory](https://discuss.elastic.co/t/elasticsearch-cloud-sso-with-activedirectory/265859)
**Author:** [@tchaudhry](https://discuss.elastic.co/u/tchaudhry)\ **Replies:** 7\ **Last updated:** [March 2, 2021, 7:22pm UTC](https://discuss.elastic.co/t/elasticsearch-cloud-sso-with-activedirectory/265859 "2021-03-02T19:22:49Z")
We jut subscribed to ElasticCloud. In the process of implementing SSO with Active Directory. Does SSO setup have to be done on a per deployment basis? The Kibana URLs I have used according to the following article: ar… --- ## [How add field using apache module in filebeat](https://discuss.elastic.co/t/how-add-field-using-apache-module-in-filebeat/253477)
**Author:** [@randoran](https://discuss.elastic.co/u/randoran)\ **Replies:** 1\ **Last updated:** [October 27, 2020, 7:35pm UTC](https://discuss.elastic.co/t/how-add-field-using-apache-module-in-filebeat/253477 "2020-10-27T19:35:42Z")
I am using the apache module in filebeat to send logs to elasticsearch. How can I add a field to what gets sent? When I was using type: log I did something like this to get a field added but not sure how to do it when us… --- ## [Dots in index and searching](https://discuss.elastic.co/t/dots-in-index-and-searching/194737)
**Author:** [@codecandy](https://discuss.elastic.co/u/codecandy)\ **Replies:** 1\ **Last updated:** [August 12, 2019, 7:03am UTC](https://discuss.elastic.co/t/dots-in-index-and-searching/194737 "2019-08-12T07:03:44Z")
Hi, I am pretty new to ES: I have to create an index which is dot seperated something like, // minions.dev.contents/minion02.retro/noise:2019-08-01T19:42:45.000Z and the contents is // { "noise" : "25", "temperatu… --- ## [Parent-child and Nested datatypes alternatives for ES 6.0 and beyond](https://discuss.elastic.co/t/parent-child-and-nested-datatypes-alternatives-for-es-6-0-and-beyond/94012)
**Author:** [@moy2010](https://discuss.elastic.co/u/moy2010)\ **Replies:** 1\ **Last updated:** [July 21, 2017, 6:33am UTC](https://discuss.elastic.co/t/parent-child-and-nested-datatypes-alternatives-for-es-6-0-and-beyond/94012 "2017-07-21T06:33:20Z")
Now that ES 6.0 is just around the corner and as a preparation for typeless mapping in ES 7.0, what alternatives are for parent-child and nested datatypes? This thread will also be helpful for users of Kibana as part o… --- ## [Corrupted HTTP transactions data under heavy load](https://discuss.elastic.co/t/corrupted-http-transactions-data-under-heavy-load/49946)
**Author:** [@Vladimir\_Aleksandrov](https://discuss.elastic.co/u/Vladimir_Aleksandrov)\ **Replies:** 1\ **Last updated:** [May 17, 2016, 10:14am UTC](https://discuss.elastic.co/t/corrupted-http-transactions-data-under-heavy-load/49946 "2016-05-17T10:14:27Z")
Under heavy load (~100K tpm) I see various data corruption for HTTP transaction recorded: \* broken request methods names like GEGET, GETGET \* invalid response codes instead of 200 - 0, 1, 2, 65 etc \* missed forward slash… --- ## [ElasticSearch Marvel - how to load sample data from .json file](https://discuss.elastic.co/t/elasticsearch-marvel-how-to-load-sample-data-from-json-file/20237)
**Author:** [@Ravi\_Kumar\_Maddi](https://discuss.elastic.co/u/Ravi_Kumar_Maddi)\ **Replies:** 1\ **Last updated:** [October 14, 2014, 2:09pm UTC](https://discuss.elastic.co/t/elasticsearch-marvel-how-to-load-sample-data-from-json-file/20237 "2014-10-14T14:09:46Z")
I am practising elasticsearch(ES) and using Marvel plugin to run my queries. I see the query in ES documentation to load data from a .json file but, http://www.elasticsearch.org/guide/en/elasticsearch/reference/… --- ## [Kibana Nodejs main module](https://discuss.elastic.co/t/kibana-nodejs-main-module/232797)
**Author:** [@Sarmad](https://discuss.elastic.co/u/Sarmad)\ **Replies:** 6\ **Last updated:** [May 16, 2020, 1:06pm UTC](https://discuss.elastic.co/t/kibana-nodejs-main-module/232797 "2020-05-16T13:06:12Z")
Hello Everyone, I am installing an in-app waf for kibana security, it's installation guide says that i should add \*require('sqreen');\* in the main module of nodejs app. Since kibana is nodejs based, where can I find i… --- ## [Aggregations on Unique Documents by field per day](https://discuss.elastic.co/t/aggregations-on-unique-documents-by-field-per-day/297999)
**Author:** [@baahubali](https://discuss.elastic.co/u/baahubali)\ **Replies:** 3\ **Last updated:** [February 23, 2022, 11:38am UTC](https://discuss.elastic.co/t/aggregations-on-unique-documents-by-field-per-day/297999 "2022-02-23T11:38:29Z")
We can find the Average of fields of all of the docs by using simple Metric. Great! We can find the Average of Averages per day using Average Bucket. Great! But how do we find Average of fields in single unique documen… --- ## [Unexplainable slow queries on Elasticsearch 😔](https://discuss.elastic.co/t/unexplainable-slow-queries-on-elasticsearch/282512)
**Author:** [@silex-kbui](https://discuss.elastic.co/u/silex-kbui)\ **Replies:** 3\ **Last updated:** [August 30, 2021, 8:59am UTC](https://discuss.elastic.co/t/unexplainable-slow-queries-on-elasticsearch/282512 "2021-08-30T08:59:29Z")
Hi community, I’m asking for help today because we’re experiencing huge latencies on some Elasticsearch queries, and we’re in a lack of ideas to explore to find the actual source of the trouble. We are not looking for … --- ## [FIlebeat terminating || service/service.go:56 Received sighup, stopping](https://discuss.elastic.co/t/filebeat-terminating-service-service-go-56-received-sighup-stopping/250595)
**Author:** [@Boris\_Joseph](https://discuss.elastic.co/u/Boris_Joseph)\ **Replies:** 3\ **Last updated:** [October 10, 2020, 11:22am UTC](https://discuss.elastic.co/t/filebeat-terminating-service-service-go-56-received-sighup-stopping/250595 "2020-10-10T11:22:05Z")
Hi, I am using filebeats 7.9.2 to send log data + internal collection metrics from our prod environment servers(Linux box) to ELK Stack (7.9.2) via 3 node Kafka Cluster(2.6.0). But every time the filebeat stops/termina… --- ## [Strigo Lab asks to create a new account](https://discuss.elastic.co/t/strigo-lab-asks-to-create-a-new-account/204549)
**Author:** [@KChesney](https://discuss.elastic.co/u/KChesney)\ **Replies:** 3\ **Last updated:** [October 21, 2019, 9:53pm UTC](https://discuss.elastic.co/t/strigo-lab-asks-to-create-a-new-account/204549 "2019-10-21T21:53:47Z")
I just started the Kibana Data Analyst On Demand Training course. Following the video instructions, I expected to be taken to a Unix like prompt, however Strigo insists on creating an account. I tried using the same ema… --- ## [Logstash degraded when jvm heap size is near its limit](https://discuss.elastic.co/t/logstash-degraded-when-jvm-heap-size-is-near-its-limit/203337)
**Author:** [@toosaman](https://discuss.elastic.co/u/toosaman)\ **Replies:** 3\ **Last updated:** [October 16, 2019, 8:52am UTC](https://discuss.elastic.co/t/logstash-degraded-when-jvm-heap-size-is-near-its-limit/203337 "2019-10-16T08:52:49Z")
Hello! I have a logstash performance degradation problem. It happens when jvm heap memory size is near its upper level. Events received/emitted rate drops sharply and latency increases dramatically. Only after service r… --- ## [FORBIDDEN/12/index read-only / allow delete (api)\] : indexes are set to "read only mode"](https://discuss.elastic.co/t/forbidden-12-index-read-only-allow-delete-api-indexes-are-set-to-read-only-mode/194843)
**Author:** [@wadhah](https://discuss.elastic.co/u/wadhah)\ **Replies:** 3\ **Last updated:** [August 26, 2019, 1:39pm UTC](https://discuss.elastic.co/t/forbidden-12-index-read-only-allow-delete-api-indexes-are-set-to-read-only-mode/194843 "2019-08-26T13:39:25Z")
Hello, I have deployed ELK stack (version 7.2.0) on kubernetes, and everything was working just fine till I got this error " \[FORBIDDEN/12/index read-only / allow delete (api)\]\]" while doing some stuff on kibana. What I… --- ## [Not able to hit target throughput](https://discuss.elastic.co/t/not-able-to-hit-target-throughput/101137)
**Author:** [@sharathr83](https://discuss.elastic.co/u/sharathr83)\ **Replies:** 3\ **Last updated:** [September 20, 2017, 9:27am UTC](https://discuss.elastic.co/t/not-able-to-hit-target-throughput/101137 "2017-09-20T09:27:59Z")
Hi, I have a benchmark which kinda looks like this: { "name": "standard-benchmark", "description": "Measure ES performance in standard use cases", "default": true, "schedule": \[ {… --- ## [Cant append documents on existing index](https://discuss.elastic.co/t/cant-append-documents-on-existing-index/86099)
**Author:** [@nishant2](https://discuss.elastic.co/u/nishant2)\ **Replies:** 3\ **Last updated:** [May 23, 2017, 6:33am UTC](https://discuss.elastic.co/t/cant-append-documents-on-existing-index/86099 "2017-05-23T06:33:13Z")
Hello We are using logstash to sink kafka data to elastic search. When we are trying to insert docs on a non-existing index on elastic search, then logstash creates the index and starts docs there. But when we try t… --- ## [Exist 43 child process of filebeat, is it normal?](https://discuss.elastic.co/t/exist-43-child-process-of-filebeat-is-it-normal/65450)
**Author:** [@WangXiangUSTC](https://discuss.elastic.co/u/WangXiangUSTC)\ **Replies:** 3\ **Last updated:** [November 17, 2016, 1:25pm UTC](https://discuss.elastic.co/t/exist-43-child-process-of-filebeat-is-it-normal/65450 "2016-11-17T13:25:47Z")
their is only one log file to ship (and this log file will logrotate by day) and send to kafka with 10 partitions , but have so many child process. Is it normal? why filebeat create so many child process? pstree -p |g… --- ## [Another Kibana instance appears to be migrating the index. Waiting for that migration to complete. If no other Kibana instance is attempting migrations, you can get past this message by deleting index .kibana\_1 and restarting Kibana](https://discuss.elastic.co/t/another-kibana-instance-appears-to-be-migrating-the-index-waiting-for-that-migration-to-complete-if-no-other-kibana-instance-is-attempting-migrations-you-can-get-past-this-message-by-deleting-index-kibana-1-and-restarting-kibana/204051)
**Author:** [@subha1](https://discuss.elastic.co/u/subha1)\ **Replies:** 0\ **Last updated:** [October 17, 2019, 12:35pm UTC](https://discuss.elastic.co/t/another-kibana-instance-appears-to-be-migrating-the-index-waiting-for-that-migration-to-complete-if-no-other-kibana-instance-is-attempting-migrations-you-can-get-past-this-message-by-deleting-index-kibana-1-and-restarting-kibana/204051 "2019-10-17T12:35:09Z")
I have deployed ELK-7 , All the pods have come up successfully , But kibana pod shows this error . Another Kibana instance appears to be migrating the index. Waiting for that migration to complete. If no other Kibana in… --- ## [Logstash 5.1.2 not working with Java 8](https://discuss.elastic.co/t/logstash-5-1-2-not-working-with-java-8/72201)
**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\ **Replies:** 0\ **Last updated:** [January 19, 2017, 5:49pm UTC](https://discuss.elastic.co/t/logstash-5-1-2-not-working-with-java-8/72201 "2017-01-19T17:49:27Z")
Hi, I'm new to elastic and was trying to get Logstash working on my RHEL 6.8 server. The Java I have installed is (openjdk version "1.8.0\_111") however when I try running the "/usr/share/logstash/bin/logstash -e 'input {… --- ## [Kibana service keeps failing after upgrade from 7.17 to 8.7](https://discuss.elastic.co/t/kibana-service-keeps-failing-after-upgrade-from-7-17-to-8-7/333099)
**Author:** [@A\_Abdellah](https://discuss.elastic.co/u/A_Abdellah)\ **Replies:** 2\ **Last updated:** [May 16, 2023, 12:17am UTC](https://discuss.elastic.co/t/kibana-service-keeps-failing-after-upgrade-from-7-17-to-8-7/333099 "2023-05-16T00:17:04Z")
Hi, I'm trying to upgrade my cluster from 7.17.7 to 8.7 and I'm testing the upgrade on a single node cluster. I treated all the errors found by the upgrade assistant and upgraded elasticsearch just fine and tried witho… --- ## [Gsub - Replace windows line terminators (\\r\\n) with unix (\\n)](https://discuss.elastic.co/t/gsub-replace-windows-line-terminators-r-n-with-unix-n/277394)
**Author:** [@metalshanked](https://discuss.elastic.co/u/metalshanked)\ **Replies:** 2\ **Last updated:** [June 30, 2021, 2:50am UTC](https://discuss.elastic.co/t/gsub-replace-windows-line-terminators-r-n-with-unix-n/277394 "2021-06-30T02:50:59Z")
Hi, I am trying to format a csv file so that it can be used in the translate filter. the csv file has only two columns (comma separated) with windows line ending format (CRLF) which somehow causes the translate filter… --- ## [Multiple TCP output plugins in Logstash](https://discuss.elastic.co/t/multiple-tcp-output-plugins-in-logstash/142437)
**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\ **Replies:** 2\ **Last updated:** [August 1, 2018, 1:23pm UTC](https://discuss.elastic.co/t/multiple-tcp-output-plugins-in-logstash/142437 "2018-08-01T13:23:34Z")
Hi, I am planning to send logs to 2 different servers over TCP. My output section looks looks something like, output { tcp { host =\> "XX.X.XXX.XXX" #ip address of server 1 mode =\> "… [Previous page](https://discuss.elastic.co/top.md?page=1418&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1420&per_page=50&period=all)