# Top **URL:** https://discuss.elastic.co/top.md?page=1430&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1431 --- ## [Azure Storage Repo problem](https://discuss.elastic.co/t/azure-storage-repo-problem/19150)
**Author:** [@Elvo](https://discuss.elastic.co/u/Elvo)\ **Replies:** 7\ **Last updated:** [August 7, 2014, 10:16pm UTC](https://discuss.elastic.co/t/azure-storage-repo-problem/19150 "2014-08-07T22:16:27Z")
Hello, I have problem with connecting with azure storage repository with elasticsearch-cloud-azure plugin. I installed the plugin on all machines in cluster. I added content to elasticsearch.yml file like: cloud: a… --- ## [Document delete spike in elastic v7](https://discuss.elastic.co/t/document-delete-spike-in-elastic-v7/293903)
**Author:** [@Idan\_Koch](https://discuss.elastic.co/u/Idan_Koch)\ **Replies:** 0\ **Last updated:** [January 10, 2022, 3:03pm UTC](https://discuss.elastic.co/t/document-delete-spike-in-elastic-v7/293903 "2022-01-10T15:03:32Z")
Hi, Recently we are upgrading from Elasticsearch v6 to Elasticsearch v7 we are basically doing the same thing but we see that we have huge spikes in document deleted (unlike v6) and that IOPS are higher 10x can you pl… --- ## [Cross-field atleast functionality (return documents where a term has x occurrences)](https://discuss.elastic.co/t/cross-field-atleast-functionality-return-documents-where-a-term-has-x-occurrences/260294)
**Author:** [@Daantie](https://discuss.elastic.co/u/Daantie)\ **Replies:** 0\ **Last updated:** [January 6, 2021, 8:23am UTC](https://discuss.elastic.co/t/cross-field-atleast-functionality-return-documents-where-a-term-has-x-occurrences/260294 "2021-01-06T08:23:22Z")
Hello! I'm working for a client in the patent domain. We have a feature called atleast that returns all documents where a term has a minimum of x occurrences. In the past a plugin was written for this (also mentioned he… --- ## [How to Parse Response from Elastic Search to Java Objects (Map)?](https://discuss.elastic.co/t/how-to-parse-response-from-elastic-search-to-java-objects-map/15370)
**Author:** [@Rahul\_Kalra](https://discuss.elastic.co/u/Rahul_Kalra)\ **Replies:** 0\ **Last updated:** [January 23, 2014, 2:03am UTC](https://discuss.elastic.co/t/how-to-parse-response-from-elastic-search-to-java-objects-map/15370 "2014-01-23T02:03:51Z")
Hi, Please tell me how to convert the Response from Elastic Search to Java Object (Map) I want to get the values of user attributes under "\_source" like "lastName", "firstName", "Manager", "email" Here is th… --- ## [Pipeline error "pipeline-id" :exception=\>#\ **Author:** [@Gelinski](https://discuss.elastic.co/u/Gelinski)\ **Replies:** 2\ **Last updated:** [June 27, 2023, 6:29pm UTC](https://discuss.elastic.co/t/pipeline-error-pipeline-id-exception-psych-tried-to-load-unspecified-class-time/336786 "2023-06-27T18:29:20Z") Hello folks, I have a logstash pipeline that is using a jdbc input and is configured with a schedule (0/1 \* \* \* \*) and after change its schedule to any other schedule the following error starts to happen: \[2023-06-23T… --- ## [Elastic Agent on Amazon Linux 2: "service" executable file not found in $PATH](https://discuss.elastic.co/t/elastic-agent-on-amazon-linux-2-service-executable-file-not-found-in-path/309616)
**Author:** [@ajbailey](https://discuss.elastic.co/u/ajbailey)\ **Replies:** 2\ **Last updated:** [July 18, 2022, 6:29pm UTC](https://discuss.elastic.co/t/elastic-agent-on-amazon-linux-2-service-executable-file-not-found-in-path/309616 "2022-07-18T18:29:47Z")
Hi, Following the installation guidelines for the Elastic Agent, it does not seem possible to run it on Amazon Linux 2. How can we work around this? I believe that AL2 does not use "service". docker run -it --rm amazon… --- ## [Journalbeat is being stuck](https://discuss.elastic.co/t/journalbeat-is-being-stuck/295312)
**Author:** [@qwinkler](https://discuss.elastic.co/u/qwinkler)\ **Replies:** 2\ **Last updated:** [January 28, 2022, 10:33am UTC](https://discuss.elastic.co/t/journalbeat-is-being-stuck/295312 "2022-01-28T10:33:36Z")
Journalbeat stuck for an unknown reason. Also, this only happens on the nodes with more logs than on the other ones. There are around 5 logs per second (which I don't think is a big load), but still. Here is an actual b… --- ## [Change value of a datum field using signal](https://discuss.elastic.co/t/change-value-of-a-datum-field-using-signal/273158)
**Author:** [@Dzious](https://discuss.elastic.co/u/Dzious)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 6:03am UTC](https://discuss.elastic.co/t/change-value-of-a-datum-field-using-signal/273158 "2021-05-26T06:03:51Z")
Hi, I'm trying to have data that are relative to each one of my data. I've tried to use signal's data but i didn't managed to make them relative to one and only one value of my data. i decided to add a field in my data… --- ## [How to ignore "broken pipe" exceptions?](https://discuss.elastic.co/t/how-to-ignore-broken-pipe-exceptions/268463)
**Author:** [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\ **Replies:** 2\ **Last updated:** [March 29, 2021, 12:30pm UTC](https://discuss.elastic.co/t/how-to-ignore-broken-pipe-exceptions/268463 "2021-03-29T12:30:20Z")
Hi thanks for the wonderful elastic stack! I am seeing broken pipe errors as follows: However, it seems that it is not a problem. (Please correct me if I am wrong!) Therefore, I hope I can ignore it. But currently I… --- ## [Start auditbeat](https://discuss.elastic.co/t/start-auditbeat/246267)
**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\ **Replies:** 2\ **Last updated:** [August 27, 2020, 7:05am UTC](https://discuss.elastic.co/t/start-auditbeat/246267 "2020-08-27T07:05:01Z")
I'm starting auditbeat on one of the machines and I'm getting the following message when running auditbeat: ERROR instance/beat.go:951 Exiting: 1 error: system/socket dataset setup failed: tracefs/debugfs is not mo… --- ## [Is it possible to make a filter mandatory to choose in controls visualization?](https://discuss.elastic.co/t/is-it-possible-to-make-a-filter-mandatory-to-choose-in-controls-visualization/231527)
**Author:** [@Jaishree\_Pal](https://discuss.elastic.co/u/Jaishree_Pal)\ **Replies:** 2\ **Last updated:** [May 11, 2020, 11:30am UTC](https://discuss.elastic.co/t/is-it-possible-to-make-a-filter-mandatory-to-choose-in-controls-visualization/231527 "2020-05-11T11:30:38Z")
I was trying to add some controls to my visualizations but I faced an issue that results can also be loaded whenever the user has not chosen any field. In my case, if that happens, my dashboard will face errors because o… --- ## [Logstash ver 7.4.0 in Docker :: Set AutoConfig Refresh?](https://discuss.elastic.co/t/logstash-ver-7-4-0-in-docker-set-autoconfig-refresh/203515)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 2\ **Last updated:** [October 14, 2019, 9:53pm UTC](https://discuss.elastic.co/t/logstash-ver-7-4-0-in-docker-set-autoconfig-refresh/203515 "2019-10-14T21:53:22Z")
Hi ELK Wise Ones… I recently spun up Logstash 7.4.0 as a Docker container. My host machine is a Ubuntu 16.04.4, and my Docker is 17.09.0-ce, build afdb6d4. I was following the procedure to set automatic config reloadin… --- ## [Field formatter: add link of discover to the field](https://discuss.elastic.co/t/field-formatter-add-link-of-discover-to-the-field/193485)
**Author:** [@Kwiskas](https://discuss.elastic.co/u/Kwiskas)\ **Replies:** 2\ **Last updated:** [August 12, 2019, 3:01pm UTC](https://discuss.elastic.co/t/field-formatter-add-link-of-discover-to-the-field/193485 "2019-08-12T15:01:02Z")
Hello there I am trying to do the following: On my visualise item i have created a data table where i split rows by buckets to list my applications with errors on it. Its like: application1 200 application2 15 app… --- ## [Aggregate exception occurred](https://discuss.elastic.co/t/aggregate-exception-occurred/188400)
**Author:** [@rohith1570](https://discuss.elastic.co/u/rohith1570)\ **Replies:** 2\ **Last updated:** [July 2, 2019, 2:49am UTC](https://discuss.elastic.co/t/aggregate-exception-occurred/188400 "2019-07-02T02:49:59Z")
Hi, I'm trying to generate a total file size for a day based on user Input Filter Conf if \[sum\_daily\_filesize\] == "daily" { if \[user.id\] != "" and \[user.id\] != 'null' { aggregate { task\_id =\> "%{user.id}\_%{+d}\_%{+MM… --- ## [How to change elasticsearch output index with default template](https://discuss.elastic.co/t/how-to-change-elasticsearch-output-index-with-default-template/177518)
**Author:** [@geforcesong](https://discuss.elastic.co/u/geforcesong)\ **Replies:** 2\ **Last updated:** [April 18, 2019, 8:57pm UTC](https://discuss.elastic.co/t/how-to-change-elasticsearch-output-index-with-default-template/177518 "2019-04-18T20:57:19Z")
Hello, checked the documents, i am still not able to update elasticsearch output index. i want to add a log type on it. But it keeps giving me the default one. Here is my conf, filebeat.inputs: - type: log # ch… --- ## [How to configure Metricbeat to collect filesystem data for NFS mount?](https://discuss.elastic.co/t/how-to-configure-metricbeat-to-collect-filesystem-data-for-nfs-mount/137521)
**Author:** [@Rick\_Liu](https://discuss.elastic.co/u/Rick_Liu)\ **Replies:** 2\ **Last updated:** [June 27, 2018, 5:15pm UTC](https://discuss.elastic.co/t/how-to-configure-metricbeat-to-collect-filesystem-data-for-nfs-mount/137521 "2018-06-27T17:15:27Z")
OS: Ubutnu 14.04.5 Version: Metricbeat 6.3.0 After starting Metricbeat at one of the node with NFS mount point, the data post to elasticsearch contains only the devices of "/dev/mapper/ubuntu--vg-root" (mount point: … --- ## [RangeError: Invalid typed array length](https://discuss.elastic.co/t/rangeerror-invalid-typed-array-length/130102)
**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\ **Replies:** 2\ **Last updated:** [May 3, 2018, 9:27am UTC](https://discuss.elastic.co/t/rangeerror-invalid-typed-array-length/130102 "2018-05-03T09:27:51Z")
Hi I'm trying to generate CSV reports from kibana however no matter what subset of data I try and export I get the same error RangeError: Invalid typed array length. I'm running version 6.2.2 on filebeat, logstash, kiba… --- ## [Scripted field with timezone](https://discuss.elastic.co/t/scripted-field-with-timezone/120270)
**Author:** [@sri\_harsha](https://discuss.elastic.co/u/sri_harsha)\ **Replies:** 2\ **Last updated:** [February 18, 2018, 8:28pm UTC](https://discuss.elastic.co/t/scripted-field-with-timezone/120270 "2018-02-18T20:28:08Z")
Hi , We are trying to create a scripted field as follows : doc\['Timestamp'\].date.hourOfDay The "Timestamp" is already in UTC format when we are ingesting the data. After the scripted field gets created , we applied i… --- ## [Winlogbeat Installation using Powershell ISE](https://discuss.elastic.co/t/winlogbeat-installation-using-powershell-ise/109433)
**Author:** [@Tony\_Chirillo](https://discuss.elastic.co/u/Tony_Chirillo)\ **Replies:** 2\ **Last updated:** [December 5, 2017, 4:54pm UTC](https://discuss.elastic.co/t/winlogbeat-installation-using-powershell-ise/109433 "2017-12-05T16:54:36Z")
Hello, I am following the installation instructions for Winlogbeat here: https://www.elastic.co/guide/en/beats/winlogbeat/current/winlogbeat-installation.html However, I am running the code in the install-service-winlo… --- ## [Search Profile is not working](https://discuss.elastic.co/t/search-profile-is-not-working/89052)
**Author:** [@Yashpal\_Singh](https://discuss.elastic.co/u/Yashpal_Singh)\ **Replies:** 2\ **Last updated:** [June 13, 2017, 1:17pm UTC](https://discuss.elastic.co/t/search-profile-is-not-working/89052 "2017-06-13T13:17:57Z")
Hi, I am getting below error while profiling the basic query. Cannot read property 'stack' of undefined Have tried installing the X-PACK plugin as well. Given the simple query is working fine. ES Version: 5.2.1 Kiab… --- ## [Can I calculate the cardinality of the \_id field?](https://discuss.elastic.co/t/can-i-calculate-the-cardinality-of-the--id-field/155)
**Author:** [@dave](https://discuss.elastic.co/u/dave)\ **Replies:** 2\ **Last updated:** [May 6, 2015, 1:01pm UTC](https://discuss.elastic.co/t/can-i-calculate-the-cardinality-of-the--id-field/155 "2015-05-06T13:01:28Z")
I have multiple Elasticsearch 1.3.2 indices, and I'm using custom document IDs. I want to find the number of distinct IDs across my indices. Some documents have the same ID but are in different indices, so this is dif… --- ## [\[ES-1.4.2\] Snapshot FS Repository directory structure](https://discuss.elastic.co/t/es-1-4-2-snapshot-fs-repository-directory-structure/22181)
**Author:** [@Yarden\_Bar\_2](https://discuss.elastic.co/u/Yarden_Bar_2)\ **Replies:** 2\ **Last updated:** [February 16, 2015, 9:43am UTC](https://discuss.elastic.co/t/es-1-4-2-snapshot-fs-repository-directory-structure/22181 "2015-02-16T09:43:36Z")
Hi All, We're using the snapshot API to backup our ES cluster and as time advances, the repository storage utilization is growing. Currently I use 'rsync' to copy snapshot repository data outside of our production … --- ## [Make ElasticAPM.report return an error or error id instead of true](https://discuss.elastic.co/t/make-elasticapm-report-return-an-error-or-error-id-instead-of-true/196504)
**Author:** [@greyblake](https://discuss.elastic.co/u/greyblake)\ **Replies:** 3\ **Last updated:** [August 26, 2019, 9:45am UTC](https://discuss.elastic.co/t/make-elasticapm-report-return-an-error-or-error-id-instead-of-true/196504 "2019-08-26T09:45:17Z")
APM Agent language and version: Ruby, 2.9.1 Current status Hi, currently ElasticAPM.report and ElasticAPM.report\_message return either nil or true ElasticAPM.report(exception) =\> true Proposal I would like to propose … --- ## [Kibana Enhanced Table 2 Total Values on Different Condition](https://discuss.elastic.co/t/kibana-enhanced-table-2-total-values-on-different-condition/289913)
**Author:** [@Avnish\_Singh](https://discuss.elastic.co/u/Avnish_Singh)\ **Replies:** 6\ **Last updated:** [November 24, 2021, 7:33am UTC](https://discuss.elastic.co/t/kibana-enhanced-table-2-total-values-on-different-condition/289913 "2021-11-24T07:33:23Z")
Hi, I have created an enhanced table now there is an option to do a sum on a computed column but it does the sum of the entire column whereas I want 2 sums based on condition. Is it possible if yes then how? --- ## [How Filtering logstash output from winlogbeat using winevent More detail?](https://discuss.elastic.co/t/how-filtering-logstash-output-from-winlogbeat-using-winevent-more-detail/224338)
**Author:** [@dhimasjoe](https://discuss.elastic.co/u/dhimasjoe)\ **Replies:** 6\ **Last updated:** [March 21, 2020, 4:49am UTC](https://discuss.elastic.co/t/how-filtering-logstash-output-from-winlogbeat-using-winevent-more-detail/224338 "2020-03-21T04:49:32Z")
\#Windwos event ID #I have filtering using EventID and work 100% , but how to more specific filtering , i want to dinied QueryName below : my config : thanks. --- ## [Limit of total fields \[num\] in index \[logstash-XX\] has been exceeded](https://discuss.elastic.co/t/limit-of-total-fields-num-in-index-logstash-xx-has-been-exceeded/205889)
**Author:** [@wpirraglia](https://discuss.elastic.co/u/wpirraglia)\ **Replies:** 6\ **Last updated:** [October 30, 2019, 5:51pm UTC](https://discuss.elastic.co/t/limit-of-total-fields-num-in-index-logstash-xx-has-been-exceeded/205889 "2019-10-30T17:51:12Z")
Little background story first: We had an ELK 2.6 stack, which we decided to upgrade to 6.5. After creating the new stack, we decided to use the reindex API to copy our old Logstash indexes from the old stack to the new o… --- ## [Running RUM over HTTPS](https://discuss.elastic.co/t/running-rum-over-https/268035)
**Author:** [@macaulaysouza](https://discuss.elastic.co/u/macaulaysouza)\ **Replies:** 1\ **Last updated:** [March 30, 2021, 11:24pm UTC](https://discuss.elastic.co/t/running-rum-over-https/268035 "2021-03-30T23:24:21Z")
I'm configuring a new APM server and I already have a Ruby Agent running on my backend. Now I'm trying to setup a frontend monitor and I came across with RUM JS. All my application runs over HTTPS so becuase of that, I'… --- ## [Elastic search working after install but then I again it show this error when I restart](https://discuss.elastic.co/t/elastic-search-working-after-install-but-then-i-again-it-show-this-error-when-i-restart/197031)
**Author:** [@nijanthan0](https://discuss.elastic.co/u/nijanthan0)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 9:49am UTC](https://discuss.elastic.co/t/elastic-search-working-after-install-but-then-i-again-it-show-this-error-when-i-restart/197031 "2019-08-28T09:49:41Z")
Macintosh:~ developer$ elasticsearch Java HotSpot(TM) 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release. Exception in thread "main" 2019-08-2… --- ## [Driver for Python with TCP](https://discuss.elastic.co/t/driver-for-python-with-tcp/141964)
**Author:** [@iam.Carrot](https://discuss.elastic.co/u/iam.Carrot)\ **Replies:** 1\ **Last updated:** [July 29, 2018, 2:45pm UTC](https://discuss.elastic.co/t/driver-for-python-with-tcp/141964 "2018-07-29T14:45:26Z")
Hi I am working with the python driver for elasticsearch. according to the docs here And it uses http with port 9200 to connect and work with elastic for the queries. Is there a way I can use TCP 9300 using the python… --- ## ["Counters can not be incremented by negative values" error when using metric filters freezes workers and "corrupts" the persistent queue](https://discuss.elastic.co/t/counters-can-not-be-incremented-by-negative-values-error-when-using-metric-filters-freezes-workers-and-corrupts-the-persistent-queue/108644)
**Author:** [@Dheeraj\_Gupta](https://discuss.elastic.co/u/Dheeraj_Gupta)\ **Replies:** 1\ **Last updated:** [November 23, 2017, 5:41am UTC](https://discuss.elastic.co/t/counters-can-not-be-incremented-by-negative-values-error-when-using-metric-filters-freezes-workers-and-corrupts-the-persistent-queue/108644 "2017-11-23T05:41:26Z")
Hi, I am running Logstash-6.0.0 with metrics filters to track performance. I have noticed that performance of some of my nodes decreases over time. On checking the logs I found log messages like the following \[2017-1… --- ## [Elastic-agent "Process another repeated request" in loop indefinitely](https://discuss.elastic.co/t/elastic-agent-process-another-repeated-request-in-loop-indefinitely/328251)
**Author:** [@Nicolas\_Pellletier](https://discuss.elastic.co/u/Nicolas_Pellletier)\ **Replies:** 5\ **Last updated:** [March 23, 2023, 4:45pm UTC](https://discuss.elastic.co/t/elastic-agent-process-another-repeated-request-in-loop-indefinitely/328251 "2023-03-23T16:45:41Z")
Hello, I've got an elastic-agent with no agent monitoring settings (meaning no Agent Logs/Mertrics collection) and only one integration policy. So my elastic-agent.yml is pretty small: id: 949c1a80-c8a9-11ed-8539-532f… --- ## [30 million documents in one index best hardware to use](https://discuss.elastic.co/t/30-million-documents-in-one-index-best-hardware-to-use/227757)
**Author:** [@Bharatwaj\_Sriram](https://discuss.elastic.co/u/Bharatwaj_Sriram)\ **Replies:** 5\ **Last updated:** [April 13, 2020, 1:25pm UTC](https://discuss.elastic.co/t/30-million-documents-in-one-index-best-hardware-to-use/227757 "2020-04-13T13:25:59Z")
Hi elasticsearch lovers, I really appreciate the fact that these types of questions get asked a lot in the community and a lot of these get answered. I have been through a lot of similar threads and i learn something ne… --- ## [Logstash file-input problem](https://discuss.elastic.co/t/logstash-file-input-problem/142395)
**Author:** [@sivap](https://discuss.elastic.co/u/sivap)\ **Replies:** 5\ **Last updated:** [August 2, 2018, 2:09pm UTC](https://discuss.elastic.co/t/logstash-file-input-problem/142395 "2018-08-02T14:09:58Z")
Hi Team, Every 5 minutes once my cron job will create one new text file ( filename with time - jobs\_00:00.txt, jobs\_00:05.txt, jobs\_00:10.txt, jobs\_00:15.txt, and so on..). So I have created logstash config using file-… --- ## [DeleteByQuery (ES5.0) using the Java API](https://discuss.elastic.co/t/deletebyquery-es5-0-using-the-java-api/67764)
**Author:** [@cosec](https://discuss.elastic.co/u/cosec)\ **Replies:** 5\ **Last updated:** [December 7, 2016, 1:59pm UTC](https://discuss.elastic.co/t/deletebyquery-es5-0-using-the-java-api/67764 "2016-12-07T13:59:23Z")
Hello, I'm trying to use the newly added feature DeleteByQuery using the 5.0 Java Transport Client. I could not find any documentation online. All I came up with was referring to the old feature API and/or the external 2… --- ## [How to disable capturing of specific headers only](https://discuss.elastic.co/t/how-to-disable-capturing-of-specific-headers-only/267282)
**Author:** [@kbalys](https://discuss.elastic.co/u/kbalys)\ **Replies:** 3\ **Last updated:** [March 16, 2021, 4:49pm UTC](https://discuss.elastic.co/t/how-to-disable-capturing-of-specific-headers-only/267282 "2021-03-16T16:49:33Z")
I would like to skip capturing of some of the request headers. I am aware of of the settings: \ But this disables capturing of all headers, after that I don't have for… --- ## [Ingesting CloudTrail logs from multiple AWS accounts](https://discuss.elastic.co/t/ingesting-cloudtrail-logs-from-multiple-aws-accounts/246999)
**Author:** [@vishakh](https://discuss.elastic.co/u/vishakh)\ **Replies:** 3\ **Last updated:** [September 2, 2020, 1:43pm UTC](https://discuss.elastic.co/t/ingesting-cloudtrail-logs-from-multiple-aws-accounts/246999 "2020-09-02T13:43:49Z")
Brief: We do have multiple AWS accounts and we would prefer to ingest cloudtrail logs from all our accounts via Filebeat's AWS Module. (filebeat from same/single server & single agent) ELK-Stack: 7.8.0 Filebeat: 7.8.0 … --- ## [Cant see data from Windows module in kibana](https://discuss.elastic.co/t/cant-see-data-from-windows-module-in-kibana/235203)
**Author:** [@Deny7](https://discuss.elastic.co/u/Deny7)\ **Replies:** 3\ **Last updated:** [June 2, 2020, 3:06pm UTC](https://discuss.elastic.co/t/cant-see-data-from-windows-module-in-kibana/235203 "2020-06-02T15:06:05Z")
Hi, I just installed metricbeat-7.6.2-windows-x86\_64-OSS on Windows Server 2008 R2 Enterprise. I have already in kibana metricbeat\* index where I monitor Linux servers. I disabled system.yml and enabled windows.yml mod… --- ## [Add new field to existing documents in an index from logstash is recreating the index](https://discuss.elastic.co/t/add-new-field-to-existing-documents-in-an-index-from-logstash-is-recreating-the-index/217096)
**Author:** [@Sivaraman\_Subbiah](https://discuss.elastic.co/u/Sivaraman_Subbiah)\ **Replies:** 3\ **Last updated:** [February 20, 2020, 3:33pm UTC](https://discuss.elastic.co/t/add-new-field-to-existing-documents-in-an-index-from-logstash-is-recreating-the-index/217096 "2020-02-20T15:33:24Z")
Hi, My setup includes using logstash 7.2.0 to fetch records from database and push to Elasticsearch. I have a requirement to add new field to existing documents in an index plus index new documents with the new field v… --- ## [Creating bar graph with fields in JSON document](https://discuss.elastic.co/t/creating-bar-graph-with-fields-in-json-document/211856)
**Author:** [@elasticuser3452](https://discuss.elastic.co/u/elasticuser3452)\ **Replies:** 3\ **Last updated:** [December 18, 2019, 4:03pm UTC](https://discuss.elastic.co/t/creating-bar-graph-with-fields-in-json-document/211856 "2019-12-18T16:03:43Z")
New to Kibana visualizations here... I'm planning on publishing a JSON (once a day) that has populations of list of cities. Following is a sample JSON: { "timestamp": "2019-10-10", "population\_stats": \[ { "city": "… --- ## [Unable to run kibana on secured public IP after enable security feature](https://discuss.elastic.co/t/unable-to-run-kibana-on-secured-public-ip-after-enable-security-feature/190178)
**Author:** [@Sharma3007](https://discuss.elastic.co/u/Sharma3007)\ **Replies:** 3\ **Last updated:** [July 16, 2019, 6:28am UTC](https://discuss.elastic.co/t/unable-to-run-kibana-on-secured-public-ip-after-enable-security-feature/190178 "2019-07-16T06:28:29Z")
Hi Team, I am getting error while running my kibana :slight\_smile: \[warning\]\[admin\]\[elasticsearch\] Unable to revive connection: https://0.0.0.0:9200/ I am using https for communication Elastic search is working with … --- ## [Is there any solution for Index federation?](https://discuss.elastic.co/t/is-there-any-solution-for-index-federation/177234)
**Author:** [@weizijun](https://discuss.elastic.co/u/weizijun)\ **Replies:** 3\ **Last updated:** [April 23, 2019, 1:08pm UTC](https://discuss.elastic.co/t/is-there-any-solution-for-index-federation/177234 "2019-04-23T13:08:06Z")
Our Elasticsearch Nodes are more then 2000. we create some clusters for different use case. As search federation solution can use the Cross-cluster search. Is there any solution for Index federation? I think Tribe Node… --- ## [Elasticsearch cluster IP change without downtime](https://discuss.elastic.co/t/elasticsearch-cluster-ip-change-without-downtime/165638)
**Author:** [@cciaccio](https://discuss.elastic.co/u/cciaccio)\ **Replies:** 3\ **Last updated:** [February 1, 2019, 4:45pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-ip-change-without-downtime/165638 "2019-02-01T16:45:43Z")
Hello, I'm running a cluster with: 2 coordinator nodes 3 master nodes 13 data nodes Version 6.1.3. Each shard in the cluster has 1 replica. I need to change the IP of all the nodes. Is it possible to do it without… --- ## [Logstash Shipping All Logs Except One](https://discuss.elastic.co/t/logstash-shipping-all-logs-except-one/46293)
**Author:** [@JT1234567890](https://discuss.elastic.co/u/JT1234567890)\ **Replies:** 3\ **Last updated:** [April 12, 2016, 8:27pm UTC](https://discuss.elastic.co/t/logstash-shipping-all-logs-except-one/46293 "2016-04-12T20:27:31Z")
Hello, I have a working Logstash configuration that ships syslog and Apache logs to a Graylog2 server - we love it, works great. Now we need to scrape an application's log file and ship it to the Graylog server too. … --- ## [Logstash not writing to elasticsearch if split filter is used](https://discuss.elastic.co/t/logstash-not-writing-to-elasticsearch-if-split-filter-is-used/43693)
**Author:** [@Muaaz\_Saleem](https://discuss.elastic.co/u/Muaaz_Saleem)\ **Replies:** 3\ **Last updated:** [March 10, 2016, 5:11am UTC](https://discuss.elastic.co/t/logstash-not-writing-to-elasticsearch-if-split-filter-is-used/43693 "2016-03-10T05:11:16Z")
Hi Guys, I'm trying to use the split filter. But Logstash doesn't write to elasticsearch if I do so. However, if I comment out the split filter it works like a charm. Would really appreciate the help, following is my c… --- ## [Filebeat HA servers](https://discuss.elastic.co/t/filebeat-ha-servers/256703)
**Author:** [@madhan0618](https://discuss.elastic.co/u/madhan0618)\ **Replies:** 4\ **Last updated:** [December 2, 2020, 6:17pm UTC](https://discuss.elastic.co/t/filebeat-ha-servers/256703 "2020-12-02T18:17:51Z")
I have a requirement where the log file that I am trying to pull can be on 1 of 4 servers at any given time. It is for my application that is in a HA cluster on 4 servers. Can i install filebeat on all 4 servers and make… --- ## [\[Elastic Maps\] Change overlay and link document source](https://discuss.elastic.co/t/elastic-maps-change-overlay-and-link-document-source/230495)
**Author:** [@Stimmot](https://discuss.elastic.co/u/Stimmot)\ **Replies:** 4\ **Last updated:** [April 30, 2020, 11:57am UTC](https://discuss.elastic.co/t/elastic-maps-change-overlay-and-link-document-source/230495 "2020-04-30T11:57:34Z")
Hey guys, I just started with visualizing data in Kibana and Elastic Maps, so the two questions might seem trivial, but I didn't found any solution online yet. Is there a way to change the overlay of the layer shown … --- ## [Kibana Saved Objects in Docker](https://discuss.elastic.co/t/kibana-saved-objects-in-docker/210875)
**Author:** [@atahanceylan](https://discuss.elastic.co/u/atahanceylan)\ **Replies:** 4\ **Last updated:** [December 11, 2019, 1:03pm UTC](https://discuss.elastic.co/t/kibana-saved-objects-in-docker/210875 "2019-12-11T13:03:18Z")
Is there a proper way to keep saved index templates, saved searches, visualizations and dashboards when Elastic Stack working on docker environment? --- ## [Java application disconnects from Elasticsearch cluster](https://discuss.elastic.co/t/java-application-disconnects-from-elasticsearch-cluster/122317)
**Author:** [@Affan\_Malik](https://discuss.elastic.co/u/Affan_Malik)\ **Replies:** 4\ **Last updated:** [March 5, 2018, 7:25pm UTC](https://discuss.elastic.co/t/java-application-disconnects-from-elasticsearch-cluster/122317 "2018-03-05T19:25:22Z")
We have a 3 node Elasticsearch cluster behind a AWS ELB. Our Java application communicates to the cluster using the Elasticsearch Java client pointing to the ELB. We have been noticing that the application intermittentl… --- ## [Учетверение документа после попадания в es](https://discuss.elastic.co/t/es/58951)
**Author:** [@orsa](https://discuss.elastic.co/u/orsa)\ **Replies:** 4\ **Last updated:** [August 25, 2016, 11:28pm UTC](https://discuss.elastic.co/t/es/58951 "2016-08-25T23:28:16Z")
Доброго дня Коллеги, Странная ситауция. Работает LS + ES + Ki и все хорошо идет обработка нетфлоу и сислога. Для каждого источника свой конфиг и индекс. Вчера был добавлен конфиг для Windows Event Log. События пересыла… --- ## [HTTP Output Could not fetch url (Illegal character)](https://discuss.elastic.co/t/http-output-could-not-fetch-url-illegal-character/299439)
**Author:** [@josemariafrupm](https://discuss.elastic.co/u/josemariafrupm)\ **Replies:** 2\ **Last updated:** [March 14, 2022, 8:23am UTC](https://discuss.elastic.co/t/http-output-could-not-fetch-url-illegal-character/299439 "2022-03-14T08:23:58Z")
Hi! I'm an university student working on his final degree project, and I can't find any info about the problem I'm having. I need to send logs through Logstash with http but it says it can't fetch the url. I think the pr… [Previous page](https://discuss.elastic.co/top.md?page=1429&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1431&per_page=50&period=all)