# Top **URL:** https://discuss.elastic.co/top.md?page=1452&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1453 --- ## [Death index caused EsRejectedExecutionException](https://discuss.elastic.co/t/death-index-caused-esrejectedexecutionexception/45605)
**Author:** [@hierony](https://discuss.elastic.co/u/hierony)\ **Replies:** 1\ **Last updated:** [March 29, 2016, 9:00pm UTC](https://discuss.elastic.co/t/death-index-caused-esrejectedexecutionexception/45605 "2016-03-29T21:00:24Z")
Dear Fellow, I've counter the problem in my elasticsearch container. The problem is seems like elasticsearch cannot load the index and it is exhausted my resource. Here's what I found when seeing docker container stats … --- ## [Filebeats to logstash \_grokparsefailure, direct to ES is fine](https://discuss.elastic.co/t/filebeats-to-logstash--grokparsefailure-direct-to-es-is-fine/43703)
**Author:** [@jwh](https://discuss.elastic.co/u/jwh)\ **Replies:** 1\ **Last updated:** [March 7, 2016, 9:42pm UTC](https://discuss.elastic.co/t/filebeats-to-logstash--grokparsefailure-direct-to-es-is-fine/43703 "2016-03-07T21:42:46Z")
I'm having issues sending syslog to logstash using filebeat, when logstash received the entry it produces a \_grokparsefailure. However if I send directly to ES everything works fine. My logstash config is http://pasteb… --- ## [Filebeatでのhttp endpointの使用について](https://discuss.elastic.co/t/filebeat-http-endpoint/207992)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 2\ **Last updated:** [November 15, 2019, 7:30am UTC](https://discuss.elastic.co/t/filebeat-http-endpoint/207992 "2019-11-15T07:30:57Z")
filebeatでhttp endpointを有効にし、heartbeatを使用して、filebeatの死活監視を行いたいです。(version 7.4) 以下のマニュアルを参照して実施しました https://www.elastic.co/guide/en/beats/filebeat/7.4/http-endpoint.html 実施内容： ① filebeat.yml編集し、以下3行を追加 http.enabled: t… --- ## [Making the best of an existing Syslog stream](https://discuss.elastic.co/t/making-the-best-of-an-existing-syslog-stream/195662)
**Author:** [@Brent\_Ashley](https://discuss.elastic.co/u/Brent_Ashley)\ **Replies:** 2\ **Last updated:** [August 18, 2019, 10:24pm UTC](https://discuss.elastic.co/t/making-the-best-of-an-existing-syslog-stream/195662 "2019-08-18T22:24:54Z")
My task is to introduce log analysis to an environment where I am a drop-in replacement for Syslog and I do not have the option of asking clients to use a different shipper. In this environment logs are forwarded to my … --- ## [Avro data format convert into json](https://discuss.elastic.co/t/avro-data-format-convert-into-json/116720)
**Author:** [@vamsikrishna](https://discuss.elastic.co/u/vamsikrishna)\ **Replies:** 2\ **Last updated:** [January 24, 2018, 1:24pm UTC](https://discuss.elastic.co/t/avro-data-format-convert-into-json/116720 "2018-01-24T13:24:02Z")
Hiiii, The data comming from kafka by using kafkastream s ,It s avro format i will try to convert json but it s not work,Please can help me --- ## [Logstash kafka input plugin:can not read data from kafka](https://discuss.elastic.co/t/logstash-kafka-input-plugin-can-not-read-data-from-kafka/98164)
**Author:** [@xiaoxinba](https://discuss.elastic.co/u/xiaoxinba)\ **Replies:** 2\ **Last updated:** [August 24, 2017, 12:28pm UTC](https://discuss.elastic.co/t/logstash-kafka-input-plugin-can-not-read-data-from-kafka/98164 "2017-08-24T12:28:06Z")
Now,my logstash can not consume data from kafka; logstash configuration: input { kafka { bootstrap\_servers =\> group\_id =\> } } filter{ XXXX } output{ elasticsearch{XXX} } when i see logstash comsuer offset from kafka, … --- ## [Sharding is important with small dataset?](https://discuss.elastic.co/t/sharding-is-important-with-small-dataset/90668)
**Author:** [@diego.bernardes](https://discuss.elastic.co/u/diego.bernardes)\ **Replies:** 2\ **Last updated:** [June 23, 2017, 4:42pm UTC](https://discuss.elastic.co/t/sharding-is-important-with-small-dataset/90668 "2017-06-23T16:42:46Z")
My dataset is very small (+- 7gb) and our machines are big enough to keep everything on memory (32gb machines), but we do tons of queries on this dataset. I'm trying to find the the best cluster setup for this scenario. … --- ## [Adding array to webhook body](https://discuss.elastic.co/t/adding-array-to-webhook-body/74239)
**Author:** [@satishsnv](https://discuss.elastic.co/u/satishsnv)\ **Replies:** 2\ **Last updated:** [February 15, 2017, 11:50am UTC](https://discuss.elastic.co/t/adding-array-to-webhook-body/74239 "2017-02-15T11:50:45Z")
Hi i am facing one issue, In the action before webbook i am doing a transform due to which i am getting the following array of users "payload": { "\_value": \[ "xyz", "abc" … --- ## [Export elasticsearch to a JSON file with Pig](https://discuss.elastic.co/t/export-elasticsearch-to-a-json-file-with-pig/63099)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 2\ **Last updated:** [October 17, 2016, 7:17pm UTC](https://discuss.elastic.co/t/export-elasticsearch-to-a-json-file-with-pig/63099 "2016-10-17T19:17:17Z")
Using the elasticsearch-hadoop library, I want to export elasticsearch index to JSON so I tried: A = LOAD 'events-sample/events' USING org.elasticsearch.hadoop.pig.EsStorage( 'es.nodes=es.analytics.blablacar.dev', '… --- ## [Logstash hangs when uploading csv file](https://discuss.elastic.co/t/logstash-hangs-when-uploading-csv-file/46720)
**Author:** [@matts](https://discuss.elastic.co/u/matts)\ **Replies:** 2\ **Last updated:** [April 7, 2016, 6:17pm UTC](https://discuss.elastic.co/t/logstash-hangs-when-uploading-csv-file/46720 "2016-04-07T18:17:16Z")
I recently installed LogStash 2.3.0 for ElasticSearch 2.3.1 against java version "1.8.0\_73" on Windows 10 64-bit platform. Then tried running a LogStatsh CSV file upload that had about 200K lines. LogStash just hangs wit… --- ## [\_grokparsefailure\_syslog but grok filter perfectly from stdin](https://discuss.elastic.co/t/-grokparsefailure-syslog-but-grok-filter-perfectly-from-stdin/26551)
**Author:** [@BartoszZ](https://discuss.elastic.co/u/BartoszZ)\ **Replies:** 2\ **Last updated:** [August 5, 2015, 1:21pm UTC](https://discuss.elastic.co/t/-grokparsefailure-syslog-but-grok-filter-perfectly-from-stdin/26551 "2015-08-05T13:21:31Z")
Hi! I have little problem with Logstash 1.5.2 and grok filtering.. My Logstash get messages from syslog and grok have problems with one of them - it is adding grokparsefailuresyslog tag. When I put message to stdin eve… --- ## [Date format for minimum / maximum aggs in beta2](https://discuss.elastic.co/t/date-format-for-minimum-maximum-aggs-in-beta2/14866)
**Author:** [@Michael\_Sick](https://discuss.elastic.co/u/Michael_Sick)\ **Replies:** 2\ **Last updated:** [December 16, 2013, 5:26pm UTC](https://discuss.elastic.co/t/date-format-for-minimum-maximum-aggs-in-beta2/14866 "2013-12-16T17:26:27Z")
Trying to get the min / max dates for a query. Would aggregates be the right way to do so? Should the min / max aggs respect the "format": "date\_time" property that date histogram does? The Sense query: GET /vitals/… --- ## [Can't get journal beat docker image working on CoreOS](https://discuss.elastic.co/t/cant-get-journal-beat-docker-image-working-on-coreos/177533)
**Author:** [@arlen](https://discuss.elastic.co/u/arlen)\ **Replies:** 1\ **Last updated:** [April 25, 2019, 10:21am UTC](https://discuss.elastic.co/t/cant-get-journal-beat-docker-image-working-on-coreos/177533 "2019-04-25T10:21:23Z")
We can start from the top, the doc page is inoperable. Example: Download this example configuration file as a starting point: curl -L -O https://raw.githubusercontent.com/elastic/beats/6.7/deploy/docker/journalbeat.do… --- ## [Monitors failed to sync with the Synthetics service](https://discuss.elastic.co/t/monitors-failed-to-sync-with-the-synthetics-service/327373)
**Author:** [@irivas95](https://discuss.elastic.co/u/irivas95)\ **Replies:** 8\ **Last updated:** [March 14, 2023, 7:47am UTC](https://discuss.elastic.co/t/monitors-failed-to-sync-with-the-synthetics-service/327373 "2023-03-14T07:47:07Z")
Hi, I know this feature is in beta but I wanted to ask if anyone has received an error similar to the one in the image and if you know what it could be due to. I am using the synthetic monitors feature from the kibana … --- ## [Esrally giving multiple search queries in the same track.json](https://discuss.elastic.co/t/esrally-giving-multiple-search-queries-in-the-same-track-json/279184)
**Author:** [@Sameera\_De\_Silva](https://discuss.elastic.co/u/Sameera_De_Silva)\ **Replies:** 4\ **Last updated:** [July 22, 2021, 7:25am UTC](https://discuss.elastic.co/t/esrally-giving-multiple-search-queries-in-the-same-track-json/279184 "2021-07-22T07:25:27Z")
Could we give multiple search queries in the same track.json I want to give 2 queries which given below/ So I added it in several places in different ways to organize it . However, when I validate the .json , I get … --- ## [Multiple dissect in logstash](https://discuss.elastic.co/t/multiple-dissect-in-logstash/252898)
**Author:** [@juuuhuuu](https://discuss.elastic.co/u/juuuhuuu)\ **Replies:** 4\ **Last updated:** [October 21, 2020, 10:36pm UTC](https://discuss.elastic.co/t/multiple-dissect-in-logstash/252898 "2020-10-21T22:36:39Z")
Hi, I would like somehow to have multiple dissect or grok one for Errorlog : dissect { mapping =\> { "message" =\> "\[%logdate}\] %{exception}.%{CHttpException}.%{logtype}.%{loglevel}: %{errormessage}" } } and second one… --- ## [Connect to elasticsearch over SSL using found](https://discuss.elastic.co/t/connect-to-elasticsearch-over-ssl-using-found/54624)
**Author:** [@EmanuelRocha](https://discuss.elastic.co/u/EmanuelRocha)\ **Replies:** 4\ **Last updated:** [July 8, 2016, 8:18am UTC](https://discuss.elastic.co/t/connect-to-elasticsearch-over-ssl-using-found/54624 "2016-07-08T08:18:36Z")
I'm trying to connect to my elasticsearch server over SSL and tried lots of different things but couldn't fix the problem so I've tried to establish the connection using found shield example. Currently I'm using elasti… --- ## [Design woes!](https://discuss.elastic.co/t/design-woes/41068)
**Author:** [@Dylan\_Johnson1](https://discuss.elastic.co/u/Dylan_Johnson1)\ **Replies:** 1\ **Last updated:** [February 5, 2016, 2:08pm UTC](https://discuss.elastic.co/t/design-woes/41068 "2016-02-05T14:08:16Z")
I have 1600 types of logs, for example log-a, log-b, log-c and I can parse %{value:fieldName} nicely with Grok and Logstash. I have no problem indexing the data into Elasticsearch via Logstash across a 20 node cluster ma… --- ## [Multiple indices vs. routing](https://discuss.elastic.co/t/multiple-indices-vs-routing/10358)
**Author:** [@Michael\_Jackson](https://discuss.elastic.co/u/Michael_Jackson)\ **Replies:** 4\ **Last updated:** [January 16, 2013, 1:06am UTC](https://discuss.elastic.co/t/multiple-indices-vs-routing/10358 "2013-01-16T01:06:17Z")
I'm building an app where I expect to index hundreds (maybe thousands) of JSON documents every day per user. My question is about the trade-offs between using an individual index per user and using the same index with … --- ## [Trying to insert data into the external table](https://discuss.elastic.co/t/trying-to-insert-data-into-the-external-table/197368)
**Author:** [@varunakuraju](https://discuss.elastic.co/u/varunakuraju)\ **Replies:** 1\ **Last updated:** [September 6, 2019, 4:18pm UTC](https://discuss.elastic.co/t/trying-to-insert-data-into-the-external-table/197368 "2019-09-06T16:18:37Z")
Hi, Using hadoop and elasticsearch on cloud created external table but getting some errors while inserting the data into the external table set hive.execution.engine=mr hive\> insert overwrite table vgsale5es select \*… --- ## [How to parse json fields from a log which have multiple event but without delimiter](https://discuss.elastic.co/t/how-to-parse-json-fields-from-a-log-which-have-multiple-event-but-without-delimiter/191858)
**Author:** [@uma\_rengasamy](https://discuss.elastic.co/u/uma_rengasamy)\ **Replies:** 7\ **Last updated:** [July 26, 2019, 7:36am UTC](https://discuss.elastic.co/t/how-to-parse-json-fields-from-a-log-which-have-multiple-event-but-without-delimiter/191858 "2019-07-26T07:36:59Z")
How to parse json fields from a log which have multiple event but without delimiter? The logs are cloudwatch logs streamed to kinesis firehose and stored in s3 which is streamed to logstash --- ## [No data displaying in dashboard - \[Filebeat System\] SSH login attempts ECS](https://discuss.elastic.co/t/no-data-displaying-in-dashboard-filebeat-system-ssh-login-attempts-ecs/177947)
**Author:** [@bradfordaemorton](https://discuss.elastic.co/u/bradfordaemorton)\ **Replies:** 1\ **Last updated:** [April 23, 2019, 9:51am UTC](https://discuss.elastic.co/t/no-data-displaying-in-dashboard-filebeat-system-ssh-login-attempts-ecs/177947 "2019-04-23T09:51:50Z")
I have recently rebuilt my elasticsearch and kibana infrastructure to 7.0 and reinstalled filebeat and metricbeat collectors to 7.0. I currently collect access and error logs for apache2 (I have the module enabled) as w… --- ## [How to pass 2 values or More to Search Using \*\*Nest\*\* in .Net](https://discuss.elastic.co/t/how-to-pass-2-values-or-more-to-search-using-nest-in-net/119934)
**Author:** [@saineshwar\_bageri](https://discuss.elastic.co/u/saineshwar_bageri)\ **Replies:** 7\ **Last updated:** [February 15, 2018, 4:40pm UTC](https://discuss.elastic.co/t/how-to-pass-2-values-or-more-to-search-using-nest-in-net/119934 "2018-02-15T16:40:06Z")
How to pass 2 values or More to Search Using Nest in .Net I have Tried below Code Snippet. But it wont show Accurate Result ,Please Guide Me in this. string query1 = "fullname=" + applicantname + "AND district=" + "AKO… --- ## [Indices.query.bool.max\_clause\_count](https://discuss.elastic.co/t/indices-query-bool-max-clause-count/100109)
**Author:** [@tjroyy](https://discuss.elastic.co/u/tjroyy)\ **Replies:** 1\ **Last updated:** [September 12, 2017, 1:48am UTC](https://discuss.elastic.co/t/indices-query-bool-max-clause-count/100109 "2017-09-12T01:48:51Z")
If i change this setting on the elasticsearch yml after i had created does it apply to previous created indices? --- ## [Elasticsearch-rails and related gems: feels like abandoned](https://discuss.elastic.co/t/elasticsearch-rails-and-related-gems-feels-like-abandoned/92980)
**Author:** [@jogaco](https://discuss.elastic.co/u/jogaco)\ **Replies:** 1\ **Last updated:** [July 29, 2017, 4:08pm UTC](https://discuss.elastic.co/t/elasticsearch-rails-and-related-gems-feels-like-abandoned/92980 "2017-07-29T16:08:29Z")
Hello, I have been using ES for over two years now. I have it as data store for a Rails app. I love ES and I like the Ruby gems that connect your Ruby or Rails apps to ES. However, I cannot avoid a sensation of frust… --- ## [Unable to load JNA native support library](https://discuss.elastic.co/t/unable-to-load-jna-native-support-library/93804)
**Author:** [@rngrrick](https://discuss.elastic.co/u/rngrrick)\ **Replies:** 1\ **Last updated:** [July 19, 2017, 3:46pm UTC](https://discuss.elastic.co/t/unable-to-load-jna-native-support-library/93804 "2017-07-19T15:46:42Z")
Hello- I am trying to do some familiarization with Elasticsearch before deploying it in to our production environment for security analytics. So I set up a VM with Ubuntu 16.04.2 (32 bit). I have Java openjdk version … --- ## [Huge 4 minute delay after adding a document and it showing up in Kibana](https://discuss.elastic.co/t/huge-4-minute-delay-after-adding-a-document-and-it-showing-up-in-kibana/84202)
**Author:** [@Menno\_B](https://discuss.elastic.co/u/Menno_B)\ **Replies:** 1\ **Last updated:** [May 2, 2017, 7:58am UTC](https://discuss.elastic.co/t/huge-4-minute-delay-after-adding-a-document-and-it-showing-up-in-kibana/84202 "2017-05-02T07:58:31Z")
Hi all, By request this is a re-post from what I've posted in the ES forum as it supposedly has something to do with Kibana. When logstash posts even a single document to ElasticSearch, it takes about 4 minutes for i… --- ## [Logstash error while importing datas from kafka](https://discuss.elastic.co/t/logstash-error-while-importing-datas-from-kafka/71855)
**Author:** [@Grenouille06](https://discuss.elastic.co/u/Grenouille06)\ **Replies:** 7\ **Last updated:** [January 17, 2017, 2:50pm UTC](https://discuss.elastic.co/t/logstash-error-while-importing-datas-from-kafka/71855 "2017-01-17T14:50:24Z")
Hi friends, I use logstash 2.4, kafka 0.10.1 and a cluster Elasticsearch 5.1.1 I import from Active Directory three logs: Application logs, System logs and Security logs. I create three topics in zookeeper from that lo… --- ## [\[SOLVED\] Logstash 5.0, downgraded kafka to 4.10. Could not find plugin name kafka](https://discuss.elastic.co/t/solved-logstash-5-0-downgraded-kafka-to-4-10-could-not-find-plugin-name-kafka/65807)
**Author:** [@carrot](https://discuss.elastic.co/u/carrot)\ **Replies:** 1\ **Last updated:** [November 15, 2016, 2:24am UTC](https://discuss.elastic.co/t/solved-logstash-5-0-downgraded-kafka-to-4-10-could-not-find-plugin-name-kafka/65807 "2016-11-15T02:24:06Z")
I believe I followed all instructions to downgrade kafka to support my Kafka 0.9.x cluster. Although seems like logstash won't find the downgraded plugin. bin/logstash-plugin remove logstash-input-kafka bin/logstash-p… --- ## [Not able to create search index pattern in kibana](https://discuss.elastic.co/t/not-able-to-create-search-index-pattern-in-kibana/51984)
**Author:** [@abhi.kedari](https://discuss.elastic.co/u/abhi.kedari)\ **Replies:** 1\ **Last updated:** [June 7, 2016, 6:27pm UTC](https://discuss.elastic.co/t/not-able-to-create-search-index-pattern-in-kibana/51984 "2016-06-07T18:27:38Z")
I am using KibanaVersion 4.0.3. When I try to mention index pattern as \*-test and I do have indexes na-test and eu-test, It still shows pattern matches 0% of existing indices and aliases Can anyone please help me with… --- ## [Load balancing logstash](https://discuss.elastic.co/t/load-balancing-logstash/38028)
**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\ **Replies:** 1\ **Last updated:** [December 28, 2015, 10:19pm UTC](https://discuss.elastic.co/t/load-balancing-logstash/38028 "2015-12-28T22:19:26Z")
Hi, how to load balance logstash ? for ex: I have elastic node running on 3 servers , and one of them logstash also running . if any of the es node goes down other becomes master and application still runs fine .. Bu… --- ## [How to get ES to autodetect geo\_point type and if it can't, where should I define the mapping?](https://discuss.elastic.co/t/how-to-get-es-to-autodetect-geo-point-type-and-if-it-cant-where-should-i-define-the-mapping/21092)
**Author:** [@am1](https://discuss.elastic.co/u/am1)\ **Replies:** 1\ **Last updated:** [December 5, 2014, 6:12am UTC](https://discuss.elastic.co/t/how-to-get-es-to-autodetect-geo-point-type-and-if-it-cant-where-should-i-define-the-mapping/21092 "2014-12-05T06:12:51Z")
Hello, I am using ES js wrapper in a nodejs application. I would like to get ES to do some geospatial searches, so from what I understand, I need to set the following options on mylocation field: mylocation: { … --- ## [ElasticSearch spark esRDD not returing the aggregate values in aggregated query](https://discuss.elastic.co/t/elasticsearch-spark-esrdd-not-returing-the-aggregate-values-in-aggregated-query/19846)
**Author:** [@siva\_pradeep](https://discuss.elastic.co/u/siva_pradeep)\ **Replies:** 1\ **Last updated:** [October 17, 2014, 3:46pm UTC](https://discuss.elastic.co/t/elasticsearch-spark-esrdd-not-returing-the-aggregate-values-in-aggregated-query/19846 "2014-10-17T15:46:18Z")
Hi, I have a query which filters the rows and then applies the aggregation. I tried running the query in "Sense" it gave me the expected result. But when I try to run the same query using elasticsearch-spark\_2.10 … --- ## [Expensive aggregation puts load onto a single data node](https://discuss.elastic.co/t/expensive-aggregation-puts-load-onto-a-single-data-node/304607)
**Author:** [@a06ced31bae02498a46d](https://discuss.elastic.co/u/a06ced31bae02498a46d)\ **Replies:** 0\ **Last updated:** [May 12, 2022, 4:32pm UTC](https://discuss.elastic.co/t/expensive-aggregation-puts-load-onto-a-single-data-node/304607 "2022-05-12T16:32:52Z")
Hello team! I've been trying to test our effective timeouts and crafted a special expensive query for that purpose. customer\_id field cardinality is hundreds of thousands – so you can imagine how expensive this aggregat… --- ## [Fast queries in batches](https://discuss.elastic.co/t/fast-queries-in-batches/167160)
**Author:** [@magorbe](https://discuss.elastic.co/u/magorbe)\ **Replies:** 0\ **Last updated:** [February 5, 2019, 4:32pm UTC](https://discuss.elastic.co/t/fast-queries-in-batches/167160 "2019-02-05T16:32:13Z")
Hi. I'm doing a search on ES and it's: query = { "\_source": false, "query": { "ids": { "values": ids } … --- ## [Date Histogram Only Return the Last Bucket](https://discuss.elastic.co/t/date-histogram-only-return-the-last-bucket/307537)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 3\ **Last updated:** [June 28, 2022, 10:12pm UTC](https://discuss.elastic.co/t/date-histogram-only-return-the-last-bucket/307537 "2022-06-28T22:12:24Z")
Hi All, I was wondering if anyone knows of a way to get only the last bucket of a date histogram to be returned. I have the following query: GET metrics-system.filesystem-\*/\_search { "size": 0, "query": { "boo… --- ## [How to integrate CAS auth in Kibana?](https://discuss.elastic.co/t/how-to-integrate-cas-auth-in-kibana/277647)
**Author:** [@tong6462](https://discuss.elastic.co/u/tong6462)\ **Replies:** 3\ **Last updated:** [July 4, 2021, 9:12am UTC](https://discuss.elastic.co/t/how-to-integrate-cas-auth-in-kibana/277647 "2021-07-04T09:12:55Z")
Hi. I need to integrate CAS Auth in Kibana CAS URL: https://mydomain.com/sso/login Verify ticket: https://mydomain.com/sso/p3/serviceValidate? Can anyone help me please? --- ## [RabbitMQ ingest pipeline can't parse some log entries](https://discuss.elastic.co/t/rabbitmq-ingest-pipeline-cant-parse-some-log-entries/268317)
**Author:** [@amelnyk](https://discuss.elastic.co/u/amelnyk)\ **Replies:** 0\ **Last updated:** [March 25, 2021, 10:14am UTC](https://discuss.elastic.co/t/rabbitmq-ingest-pipeline-cant-parse-some-log-entries/268317 "2021-03-25T10:14:24Z")
Some logs (Erlang VM) can't be parsed by the provided grok expression, example log entries: 2019-07-29 14:14:43.032 \[error\] emulator Discarding message {'$gen\_call',{\<0.442.0\>,#Ref\<0.3746561768.1184890881.104501\>},stat}… --- ## [Filebeat to ECK on GKE](https://discuss.elastic.co/t/filebeat-to-eck-on-gke/215575)
**Author:** [@Zero\_Day](https://discuss.elastic.co/u/Zero_Day)\ **Replies:** 3\ **Last updated:** [January 20, 2020, 10:03am UTC](https://discuss.elastic.co/t/filebeat-to-eck-on-gke/215575 "2020-01-20T10:03:58Z")
I built a cluster on GKE with ECK operator and am trying to send logs from an on premises Filebeat installation to the cloud. Elasticsearch has LoadBlancer IP. I specified certificate, password and necessary things, but… --- ## [ElasticSearch Sql aggregation query bugs with SUM function](https://discuss.elastic.co/t/elasticsearch-sql-aggregation-query-bugs-with-sum-function/200996)
**Author:** [@Johna](https://discuss.elastic.co/u/Johna)\ **Replies:** 3\ **Last updated:** [October 7, 2019, 7:14am UTC](https://discuss.elastic.co/t/elasticsearch-sql-aggregation-query-bugs-with-sum-function/200996 "2019-10-07T07:14:08Z")
HI there, Sql query is a very fantastic tool offered by EL 7.3. However i cant explain that bug : When i use SUM with Match , 1 condition, query below works well POST \_xpack/sql?format=txt { "query":"SELECT SUM(Fl… --- ## [Discover: unknown error](https://discuss.elastic.co/t/discover-unknown-error/193881)
**Author:** [@Jim\_Palazzolo](https://discuss.elastic.co/u/Jim_Palazzolo)\ **Replies:** 3\ **Last updated:** [August 6, 2019, 3:09pm UTC](https://discuss.elastic.co/t/discover-unknown-error/193881 "2019-08-06T15:09:46Z")
Discover: unknown error Less Info OK SearchError: unknown error at http://IP:5601/bundles/commons.bundle.js:4:383522 at processQueue (http://IP:5601/built\_assets/dlls/vendors.bundle.dll.js:450:199687) at http://IP:… --- ## [Elastic APM - Java agent for JDK1.7 applications](https://discuss.elastic.co/t/elastic-apm-java-agent-for-jdk1-7-applications/179879)
**Author:** [@psbabu007](https://discuss.elastic.co/u/psbabu007)\ **Replies:** 3\ **Last updated:** [May 7, 2019, 8:51am UTC](https://discuss.elastic.co/t/elastic-apm-java-agent-for-jdk1-7-applications/179879 "2019-05-07T08:51:29Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: APM Server version: … --- ## [Caused by: io.netty.channel.ConnectTimeoutException: connection timed out: Elasticsearch Docker containers not connecting to each other](https://discuss.elastic.co/t/caused-by-io-netty-channel-connecttimeoutexception-connection-timed-out-elasticsearch-docker-containers-not-connecting-to-each-other/93695)
**Author:** [@Chittaranjan\_Sardar](https://discuss.elastic.co/u/Chittaranjan_Sardar)\ **Replies:** 0\ **Last updated:** [July 19, 2017, 5:27am UTC](https://discuss.elastic.co/t/caused-by-io-netty-channel-connecttimeoutexception-connection-timed-out-elasticsearch-docker-containers-not-connecting-to-each-other/93695 "2017-07-19T05:27:31Z")
Hi, I have created two Elasticsearch docker containers in two OpenStack VMs as follows - docker pull docker.elastic.co/elasticsearch/elasticsearch:5.5.0 docker run --name elasticsearch -p 9200:9200 -p 9300-9400:930… --- ## [Logging at past date in logstash and elasticsearch](https://discuss.elastic.co/t/logging-at-past-date-in-logstash-and-elasticsearch/81959)
**Author:** [@Rupesh\_Ranjan](https://discuss.elastic.co/u/Rupesh_Ranjan)\ **Replies:** 3\ **Last updated:** [April 12, 2017, 4:49am UTC](https://discuss.elastic.co/t/logging-at-past-date-in-logstash-and-elasticsearch/81959 "2017-04-12T04:49:17Z")
I have some logs logged at date say Apr 9, 2017. I am starting the filebeat and ELK on say 11th Apr. Is there any way, i can log old logs at appropriate timestamp and index (i am creadting day-wise index, say test-2017… --- ## [AccessDeniedException for .dvd files](https://discuss.elastic.co/t/accessdeniedexception-for-dvd-files/75430)
**Author:** [@nethis](https://discuss.elastic.co/u/nethis)\ **Replies:** 3\ **Last updated:** [March 6, 2017, 10:06pm UTC](https://discuss.elastic.co/t/accessdeniedexception-for-dvd-files/75430 "2017-03-06T22:06:05Z")
Hi, I am getting the below AccessDeniedException few times, why is this happening? failed to execute operation for shard \[\[itcorrelationdata\]\[13\], node\[UglfakcZQsmt1BTIBqk84g\], \[R\], v\[658\], s\[STARTED\], a\[id=sw4fwjbG… --- ## [LVM snap shots for elasticsearch](https://discuss.elastic.co/t/lvm-snap-shots-for-elasticsearch/61527)
**Author:** [@rahulcse](https://discuss.elastic.co/u/rahulcse)\ **Replies:** 3\ **Last updated:** [September 27, 2016, 12:53am UTC](https://discuss.elastic.co/t/lvm-snap-shots-for-elasticsearch/61527 "2016-09-27T00:53:01Z")
We are trying to create LVM snap shots for elasticsearch indices. Can you please let me know pros and cons of this approach? Thanks, Rahul --- ## [Build your own beat](https://discuss.elastic.co/t/build-your-own-beat/61186)
**Author:** [@overip](https://discuss.elastic.co/u/overip)\ **Replies:** 3\ **Last updated:** [September 22, 2016, 6:19pm UTC](https://discuss.elastic.co/t/build-your-own-beat/61186 "2016-09-22T18:19:22Z")
Hello everybody, I am following the tutorial on how to build your own beat from https://www.elastic.co/blog/build-your-own-beat and I can't see where to put my go code. The whole process described in the tutorial is pret… --- ## [Heap vs doc\_value](https://discuss.elastic.co/t/heap-vs-doc-value/45591)
**Author:** [@QD\_Wang](https://discuss.elastic.co/u/QD_Wang)\ **Replies:** 3\ **Last updated:** [March 29, 2016, 7:38pm UTC](https://discuss.elastic.co/t/heap-vs-doc-value/45591 "2016-03-29T19:38:42Z")
Hi Everyone i have a question about doc\_value, as a rule of thumb, we should give half memory to ES heap, but i think this is for ES 1.x, is that right? with ES 2.x, Doc values are enabled by default, so should i st… --- ## [Can I store ES indices on HDFS only?](https://discuss.elastic.co/t/can-i-store-es-indices-on-hdfs-only/32487)
**Author:** [@asatsi](https://discuss.elastic.co/u/asatsi)\ **Replies:** 3\ **Last updated:** [October 20, 2015, 2:18pm UTC](https://discuss.elastic.co/t/can-i-store-es-indices-on-hdfs-only/32487 "2015-10-20T14:18:40Z")
Hi, In one of the implementation, there is an ask whether we can store the huge data that is being indexed in Elasticsearch onto Hadoop only? Is this possible with the ES-hadoop integration? Thanks in advance. --- ## [Can dependencies be injected into a native script plugin?](https://discuss.elastic.co/t/can-dependencies-be-injected-into-a-native-script-plugin/2385)
**Author:** [@tikue](https://discuss.elastic.co/u/tikue)\ **Replies:** 3\ **Last updated:** [June 11, 2015, 3:43am UTC](https://discuss.elastic.co/t/can-dependencies-be-injected-into-a-native-script-plugin/2385 "2015-06-11T03:43:18Z")
I have a script factory class that has some dependencies that I usually manage with a Spring context. I understand ElasticSearch uses Guice internally, so I sorta naively thought things might just work if I use the javax… [Previous page](https://discuss.elastic.co/top.md?page=1451&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1453&per_page=50&period=all)