# Top

**URL:** https://discuss.elastic.co/top.md?page=1473&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1474

---

## [How can I configure number\_of\_replicas at 0 by default when ElasticSearch Docker container start?](https://discuss.elastic.co/t/how-can-i-configure-number-of-replicas-at-0-by-default-when-elasticsearch-docker-container-start/77233)

<div class="topic-metadata">

**Author:** [@klein\_stephane](https://discuss.elastic.co/u/klein_stephane)\
**Replies:** 0\
**Last updated:** [March 2, 2017, 11:24pm UTC](https://discuss.elastic.co/t/how-can-i-configure-number-of-replicas-at-0-by-default-when-elasticsearch-docker-container-start/77233 "2017-03-02T23:24:24Z")

</div>

HI, I would like create docker-compose to install and configure ES for only 1 node. Question: how can I configure ES to set number\_of\_replicas at 0 by default. I see that: https://www.elastic.co/guide/en/elasticsea…

---

## [Logstash Ruby error when trying to rename a field the has a hyphen "-" in the value](https://discuss.elastic.co/t/logstash-ruby-error-when-trying-to-rename-a-field-the-has-a-hyphen-in-the-value/296618)

<div class="topic-metadata">

**Author:** [@Bryan\_Hamilton](https://discuss.elastic.co/u/Bryan_Hamilton)\
**Replies:** 4\
**Last updated:** [February 8, 2022, 6:51pm UTC](https://discuss.elastic.co/t/logstash-ruby-error-when-trying-to-rename-a-field-the-has-a-hyphen-in-the-value/296618 "2022-02-08T18:51:14Z")

</div>

I have events with nested fields and am trying and am trying the reduce the depth of some nested fields to match ecs and discarding the fields I don't need. Renaning of all other fields word except for one which causes a…

---

## [Crating visualization with two arrays in a table](https://discuss.elastic.co/t/crating-visualization-with-two-arrays-in-a-table/263054)

<div class="topic-metadata">

**Author:** [@leinad](https://discuss.elastic.co/u/leinad)\
**Replies:** 4\
**Last updated:** [February 8, 2021, 3:22pm UTC](https://discuss.elastic.co/t/crating-visualization-with-two-arrays-in-a-table/263054 "2021-02-08T15:22:28Z")

</div>

Hi , I am trying to create a table with values from two arrays arr1\[str1,str2,str30 arr2\[val1,val2,val3\] desired table should be as str1 - val1 str2 - val2 str3 - val3 and i have multiple such arrays in the json …

---

## [Error parsing JSON file](https://discuss.elastic.co/t/error-parsing-json-file/244014)

<div class="topic-metadata">

**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\
**Replies:** 4\
**Last updated:** [August 7, 2020, 6:53am UTC](https://discuss.elastic.co/t/error-parsing-json-file/244014 "2020-08-07T06:53:02Z")

</div>

I am trying to parse a json file which consists of multiple line but even though I am using multiline codec but still I am getting error. Sample of my Json file is as follows: \> \[ { "action": "drop", "clientAS…

---

## [Filebeat stop collecting the container logs while the service keeps running!](https://discuss.elastic.co/t/filebeat-stop-collecting-the-container-logs-while-the-service-keeps-running/203596)

<div class="topic-metadata">

**Author:** [@Suresh\_Pal](https://discuss.elastic.co/u/Suresh_Pal)\
**Replies:** 4\
**Last updated:** [October 23, 2019, 8:52am UTC](https://discuss.elastic.co/t/filebeat-stop-collecting-the-container-logs-while-the-service-keeps-running/203596 "2019-10-23T08:52:19Z")

</div>

Hi team, Filebeat stop collecting the container logs while the service keeps running !! When i restart the service it again start collecting . PFA filebeat.yml filebeat.prospectors: Each - is a prospector. Most optio…

---

## [Connection to ElasticSearch with Groovy](https://discuss.elastic.co/t/connection-to-elasticsearch-with-groovy/143458)

<div class="topic-metadata">

**Author:** [@chetansk](https://discuss.elastic.co/u/chetansk)\
**Replies:** 4\
**Last updated:** [August 8, 2018, 12:39pm UTC](https://discuss.elastic.co/t/connection-to-elasticsearch-with-groovy/143458 "2018-08-08T12:39:32Z")

</div>

Hi, I am quite beginner in ElasticSearch and Groovy. I have to perform CRUD (Create,Retrieve,Update and Delete) operations in ElasticSearch using Groovy.I am using IntelliJ for Groovy. I have found few lines of codes bu…

---

## [Unusual aggregations size behaviour](https://discuss.elastic.co/t/unusual-aggregations-size-behaviour/87933)

<div class="topic-metadata">

**Author:** [@Cosmin\_Marginean1](https://discuss.elastic.co/u/Cosmin_Marginean1)\
**Replies:** 4\
**Last updated:** [June 22, 2017, 4:24pm UTC](https://discuss.elastic.co/t/unusual-aggregations-size-behaviour/87933 "2017-06-22T16:24:58Z")

</div>

We have an aggregation as follows: { "from": 0, "size": 0, "aggregations": { "my\_aggregation": { "terms": { "field": "SOME\_FIELD", "min\_doc\_count": 2 …

---

## [Ever growing cpu load on cluster nodes](https://discuss.elastic.co/t/ever-growing-cpu-load-on-cluster-nodes/8748)

<div class="topic-metadata">

**Author:** [@Toni\_Birrer](https://discuss.elastic.co/u/Toni_Birrer)\
**Replies:** 4\
**Last updated:** [August 20, 2012, 4:33pm UTC](https://discuss.elastic.co/t/ever-growing-cpu-load-on-cluster-nodes/8748 "2012-08-20T16:33:02Z")

</div>

Hi there. I'm now running a elasticsearch cluster with 5 nodes on java 7 ( jre1.7.0\_04 ) using the new G1 garbage collector. We use the latest version of elasticsearch, 0.19.8 Here's an overview of our setup: ht…

---

## [Nest 6 JSonConverters](https://discuss.elastic.co/t/nest-6-jsonconverters/151016)

<div class="topic-metadata">

**Author:** [@bert\_vervaele](https://discuss.elastic.co/u/bert_vervaele)\
**Replies:** 3\
**Last updated:** [October 26, 2018, 3:15am UTC](https://discuss.elastic.co/t/nest-6-jsonconverters/151016 "2018-10-26T03:15:46Z")

</div>

Hi, we are upgrading our Elastic from 5.2.2 to 6.2.1 but we have a problem with our search requests. We use nest to communicate with our code. We use JSonConverters in our customserialization to read jsons and convert …

---

## [Manage Thread Pool in Elasticsearch](https://discuss.elastic.co/t/manage-thread-pool-in-elasticsearch/292493)

<div class="topic-metadata">

**Author:** [@yash\_196](https://discuss.elastic.co/u/yash_196)\
**Replies:** 6\
**Last updated:** [December 21, 2021, 10:22am UTC](https://discuss.elastic.co/t/manage-thread-pool-in-elasticsearch/292493 "2021-12-21T10:22:48Z")

</div>

Hi Team, Is there any way to increase the queue size for write and search using JAVA API's / High Level Rest Client?

---

## [Integrate ldap with kibana](https://discuss.elastic.co/t/integrate-ldap-with-kibana/230131)

<div class="topic-metadata">

**Author:** [@kasim123](https://discuss.elastic.co/u/kasim123)\
**Replies:** 6\
**Last updated:** [April 30, 2020, 4:48pm UTC](https://discuss.elastic.co/t/integrate-ldap-with-kibana/230131 "2020-04-30T16:48:35Z")

</div>

Hi Team, Recently, I have configured ELK stack with x-pack security enabled. it is working fine now, now I wanted to extend security by integrating kibana with ldap. Could you help us how to integrate ldap with kibana…

---

## [Filebeat - Apache module - Access - URI detail / SEO](https://discuss.elastic.co/t/filebeat-apache-module-access-uri-detail-seo/189495)

<div class="topic-metadata">

**Author:** [@willouuu](https://discuss.elastic.co/u/willouuu)\
**Replies:** 6\
**Last updated:** [August 19, 2019, 2:29pm UTC](https://discuss.elastic.co/t/filebeat-apache-module-access-uri-detail-seo/189495 "2019-08-19T14:29:37Z")

</div>

Hello I am modifying the apache access processor to cut the url There is a lot of useful information on a URI to get the correct SEO data Imagine the following cases and their associated data https://www.domain.com/p…

---

## [Insert into index, Update in index and Delete from index don't work](https://discuss.elastic.co/t/insert-into-index-update-in-index-and-delete-from-index-dont-work/175544)

<div class="topic-metadata">

**Author:** [@Guilian](https://discuss.elastic.co/u/Guilian)\
**Replies:** 6\
**Last updated:** [April 16, 2019, 4:36pm UTC](https://discuss.elastic.co/t/insert-into-index-update-in-index-and-delete-from-index-dont-work/175544 "2019-04-16T16:36:02Z")

</div>

Hello, I implemented four methods for my web app: Search(): searchs datasets by name (works) InsertIntoIndex(): adds a newly created dataset into the index (doesn't work) UpdateInIndex(): updates to values of an edite…

---

## [Highlight problem](https://discuss.elastic.co/t/highlight-problem/3692)

<div class="topic-metadata">

**Author:** [@locojay](https://discuss.elastic.co/u/locojay)\
**Replies:** 6\
**Last updated:** [December 23, 2010, 12:10am UTC](https://discuss.elastic.co/t/highlight-problem/3692 "2010-12-23T00:10:21Z")

</div>

Hi my mapping is "mongodocid":{"boost":1.0, "store": "yes", "type": "string"}, "fulltext": {"boost": 1.0, "index": "analyzed", "store": "yes", …

---

## [Metricbeat crashing - Reason:slow event handlers blocking the queue](https://discuss.elastic.co/t/metricbeat-crashing-reason-slow-event-handlers-blocking-the-queue/306648)

<div class="topic-metadata">

**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\
**Replies:** 1\
**Last updated:** [June 14, 2022, 12:35pm UTC](https://discuss.elastic.co/t/metricbeat-crashing-reason-slow-event-handlers-blocking-the-queue/306648 "2022-06-14T12:35:15Z")

</div>

I have metricbeat installed using ECK on my EKS cluster. it seems to be crashing quite frequently, the error i have spotted is the following: I0608 07:45:51.571964 8 trace.go:205\] Trace\[136023862\]: "DeltaFIFO Pop …

---

## [Last 15 to 30 minutes logs were not displaying in Kibana](https://discuss.elastic.co/t/last-15-to-30-minutes-logs-were-not-displaying-in-kibana/190537)

<div class="topic-metadata">

**Author:** [@Krish\_7](https://discuss.elastic.co/u/Krish_7)\
**Replies:** 1\
**Last updated:** [July 16, 2019, 1:24pm UTC](https://discuss.elastic.co/t/last-15-to-30-minutes-logs-were-not-displaying-in-kibana/190537 "2019-07-16T13:24:28Z")

</div>

When i am searching for the log results in Kibana i am getting results being taken into UTC timelines instead of BST which is causing problems to change the timings manually in relative to search for results. Eg., Sear…

---

## [Deploy Elastic Search cluster consisting of multiple hosts using ES docker image](https://discuss.elastic.co/t/deploy-elastic-search-cluster-consisting-of-multiple-hosts-using-es-docker-image/138944)

<div class="topic-metadata">

**Author:** [@Akhil90](https://discuss.elastic.co/u/Akhil90)\
**Replies:** 1\
**Last updated:** [July 7, 2018, 7:31am UTC](https://discuss.elastic.co/t/deploy-elastic-search-cluster-consisting-of-multiple-hosts-using-es-docker-image/138944 "2018-07-07T07:31:47Z")

</div>

I want to deploy ES cluster consisting of different hosts using ES docker image. i am running below docker-compose file on each node. On each of the node, ES gets started. But when I access http://host:port/\_cluster/he…

---

## [Unable to draw lines on timelion visualization](https://discuss.elastic.co/t/unable-to-draw-lines-on-timelion-visualization/119748)

<div class="topic-metadata">

**Author:** [@Zedd](https://discuss.elastic.co/u/Zedd)\
**Replies:** 1\
**Last updated:** [February 14, 2018, 2:16pm UTC](https://discuss.elastic.co/t/unable-to-draw-lines-on-timelion-visualization/119748 "2018-02-14T14:16:05Z")

</div>

Hi, I am currently running kibana 5.6.2 and I can't draw data as line in timelion. Though, I'm able to draw my data with points and bars. For instance, .points(radius=3,weight=1,symbol=cross) would work but .lines(width…

---

## [Node stats: Diff between available and free?](https://discuss.elastic.co/t/node-stats-diff-between-available-and-free/116125)

<div class="topic-metadata">

**Author:** [@Roy\_Russo](https://discuss.elastic.co/u/Roy_Russo)\
**Replies:** 1\
**Last updated:** [January 29, 2018, 10:21am UTC](https://discuss.elastic.co/t/node-stats-diff-between-available-and-free/116125 "2018-01-29T10:21:58Z")

</div>

Hello, Can anyone explain the different between "available\_in\_bytes" and "free\_in\_bytes" as used in the Nodes API: https://www.elastic.co/guide/en/elasticsearch/reference/current/cluster-nodes-stats.html#fs-info

---

## [High CPU usage for logstash-agent](https://discuss.elastic.co/t/high-cpu-usage-for-logstash-agent/32325)

<div class="topic-metadata">

**Author:** [@joiceedattel](https://discuss.elastic.co/u/joiceedattel)\
**Replies:** 1\
**Last updated:** [October 16, 2015, 3:40am UTC](https://discuss.elastic.co/t/high-cpu-usage-for-logstash-agent/32325 "2015-10-16T03:40:10Z")

</div>

The logstash-agent is consuming more than 100% of CPU in our nodes. Is there any solution to fix this issue . The logstash-agent.conf is as follows input { file { type =\> "hybris\_console" …

---

## [SYN flooding during boot-up](https://discuss.elastic.co/t/syn-flooding-during-boot-up/4024)

<div class="topic-metadata">

**Author:** [@Sorostaran](https://discuss.elastic.co/u/Sorostaran)\
**Replies:** 1\
**Last updated:** [March 5, 2011, 7:13am UTC](https://discuss.elastic.co/t/syn-flooding-during-boot-up/4024 "2011-03-05T07:13:35Z")

</div>

I am getting a flood of unACKed SYNs during boot-up/start of ElasticSearch servers that sends the servers into syncookie mode. Server log: "Possible SYN flooding on port 9300. Sending cookies." Is this normal? …

---

## [Benchmarking es-cluster on AWS](https://discuss.elastic.co/t/benchmarking-es-cluster-on-aws/307636)

<div class="topic-metadata">

**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\
**Replies:** 3\
**Last updated:** [June 20, 2022, 12:01pm UTC](https://discuss.elastic.co/t/benchmarking-es-cluster-on-aws/307636 "2022-06-20T12:01:22Z")

</div>

Hi All, I am running my es-cluster on kubernetes on AWS instance x2iedn(memory optimized) and i4i(Storage optimized). I tried benchmarking the es cluster on both instance type. I have 3 data nodes and 1 master node. …

---

## [Pop up is coming in discover screen after increasing network latency (20000ms)](https://discuss.elastic.co/t/pop-up-is-coming-in-discover-screen-after-increasing-network-latency-20000ms/259546)

<div class="topic-metadata">

**Author:** [@Mohitj252](https://discuss.elastic.co/u/Mohitj252)\
**Replies:** 8\
**Last updated:** [January 14, 2021, 2:14pm UTC](https://discuss.elastic.co/t/pop-up-is-coming-in-discover-screen-after-increasing-network-latency-20000ms/259546 "2021-01-14T14:14:21Z")

</div>

Hi, Use Case : I am using google chrome, and I set the network latency to 20000ms from throttling tab under the settings. Then go to the discover screen and click on the refresh button. it will process the page and it w…

---

## [Extract date and time from message field into a dedicated field](https://discuss.elastic.co/t/extract-date-and-time-from-message-field-into-a-dedicated-field/199908)

<div class="topic-metadata">

**Author:** [@Vipin\_Gaur](https://discuss.elastic.co/u/Vipin_Gaur)\
**Replies:** 3\
**Last updated:** [September 18, 2019, 4:51pm UTC](https://discuss.elastic.co/t/extract-date-and-time-from-message-field-into-a-dedicated-field/199908 "2019-09-18T16:51:52Z")

</div>

how to extract date and time from message field into a dedicated field. this is my .conf file input { beats { port =\> 5044 } } filter { if \[log\_type\] == "json" { mutate { rename =\> { "message" =\> "raw\_data…

---

## [Solved: How to get JSON example from blog to work with new index (hint: format YML correctly!)](https://discuss.elastic.co/t/solved-how-to-get-json-example-from-blog-to-work-with-new-index-hint-format-yml-correctly/156103)

<div class="topic-metadata">

**Author:** [@devops\_mike](https://discuss.elastic.co/u/devops_mike)\
**Replies:** 3\
**Last updated:** [November 12, 2018, 3:56pm UTC](https://discuss.elastic.co/t/solved-how-to-get-json-example-from-blog-to-work-with-new-index-hint-format-yml-correctly/156103 "2018-11-12T15:56:26Z")

</div>

I am following along with this guide: https://www.elastic.co/blog/structured-logging-filebeat It very closely matches my data. The difference is I need this to go into its own index. My data is JSON formatted and only i…

---

## [Not able to login in kibana](https://discuss.elastic.co/t/not-able-to-login-in-kibana/103469)

<div class="topic-metadata">

**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\
**Replies:** 3\
**Last updated:** [October 11, 2017, 7:07am UTC](https://discuss.elastic.co/t/not-able-to-login-in-kibana/103469 "2017-10-11T07:07:15Z")

</div>

I have implemented x pack security and LDAP integration. But when I create user in kibana that user is not getting logged in to kibana. Please share suggestions. Below is my configuration in elasticsearch.yml xpack: s…

---

## [Auto Login in kibana from winforms application with embeded code browser](https://discuss.elastic.co/t/auto-login-in-kibana-from-winforms-application-with-embeded-code-browser/63066)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 3\
**Last updated:** [October 18, 2016, 5:06pm UTC](https://discuss.elastic.co/t/auto-login-in-kibana-from-winforms-application-with-embeded-code-browser/63066 "2016-10-18T17:06:22Z")

</div>

I have a .NET winforms app with an embedded browser and i want to automatically login in Kibana from code so users will see kibana dashboard without having to enter credentails. Is there any way to pass credentials on …

---

## [Bulk update in Cluster mode - version conflict engine exception](https://discuss.elastic.co/t/bulk-update-in-cluster-mode-version-conflict-engine-exception/62917)

<div class="topic-metadata">

**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\
**Replies:** 0\
**Last updated:** [October 13, 2016, 8:52am UTC](https://discuss.elastic.co/t/bulk-update-in-cluster-mode-version-conflict-engine-exception/62917 "2016-10-13T08:52:47Z")

</div>

Hi All, I have a 3 node cluster. After indexing the document, i am updating the document with additional fields. Multiple process tries to add new fields (As I have a multilugual db and for each lang a process tries to…

---

## [Doc\['field\_name'\] returns unexpected big number](https://discuss.elastic.co/t/doc-field-name-returns-unexpected-big-number/59525)

<div class="topic-metadata">

**Author:** [@mhmtnlr](https://discuss.elastic.co/u/mhmtnlr)\
**Replies:** 3\
**Last updated:** [September 2, 2016, 11:59am UTC](https://discuss.elastic.co/t/doc-field-name-returns-unexpected-big-number/59525 "2016-09-02T11:59:12Z")

</div>

Hey guys, I am using ES 1.7. I run following query and i expect to get 1 which is current popularity for it. but it returns 4607464916994563600. POST /myIndex/en/\_search { "size": 1, "script\_fields": { "toTes…

---

## [Stuck in Initializing ES 2.3.0](https://discuss.elastic.co/t/stuck-in-initializing-es-2-3-0/59353)

<div class="topic-metadata">

**Author:** [@fernandozanini](https://discuss.elastic.co/u/fernandozanini)\
**Replies:** 3\
**Last updated:** [August 31, 2016, 5:49pm UTC](https://discuss.elastic.co/t/stuck-in-initializing-es-2-3-0/59353 "2016-08-31T17:49:15Z")

</div>

Scenario: 1 master node, no data 3 data nodes About 10 million documents indexed. What happened: It was indexing when master cluster disk became full. So I deleted some files and restarted elasticsearch. Then documents…

---

## [Logstash filter config to parse JSON](https://discuss.elastic.co/t/logstash-filter-config-to-parse-json/53269)

<div class="topic-metadata">

**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\
**Replies:** 3\
**Last updated:** [June 20, 2016, 7:28am UTC](https://discuss.elastic.co/t/logstash-filter-config-to-parse-json/53269 "2016-06-20T07:28:27Z")

</div>

I tried to parse json input file. But logstash doesn't parse the logs and not adding custom field "add\_field". I think, my filter configuration is wrong. Someone please help me on this. Logs file: {"web1":{"stat1":{…

---

## [Error after upgrading elasticsearch from 1.5.2 to 2.3.3 version](https://discuss.elastic.co/t/error-after-upgrading-elasticsearch-from-1-5-2-to-2-3-3-version/51314)

<div class="topic-metadata">

**Author:** [@gayathri](https://discuss.elastic.co/u/gayathri)\
**Replies:** 3\
**Last updated:** [June 6, 2016, 5:38am UTC](https://discuss.elastic.co/t/error-after-upgrading-elasticsearch-from-1-5-2-to-2-3-3-version/51314 "2016-06-06T05:38:16Z")

</div>

getting : java.lang.RuntimeException: don't run elasticsearch as root. at org.elasticsearch.bootstrap.Bootstrap.initializeNatives(Bootstrap.java:93) at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstra…

---

## [What is the performance impact of using a Match All filter?](https://discuss.elastic.co/t/what-is-the-performance-impact-of-using-a-match-all-filter/28448)

<div class="topic-metadata">

**Author:** [@anloya](https://discuss.elastic.co/u/anloya)\
**Replies:** 3\
**Last updated:** [September 3, 2015, 11:23am UTC](https://discuss.elastic.co/t/what-is-the-performance-impact-of-using-a-match-all-filter/28448 "2015-09-03T11:23:10Z")

</div>

As part of query optimization for a project, I'm considering replacing a range filter on document id (cached and due to range passed as parameters, is returning everything like match all) with a match all filter. I'm won…

---

## [Not able to create Index in ES by using logstash](https://discuss.elastic.co/t/not-able-to-create-index-in-es-by-using-logstash/1444)

<div class="topic-metadata">

**Author:** [@Dan](https://discuss.elastic.co/u/Dan)\
**Replies:** 3\
**Last updated:** [May 28, 2015, 6:38pm UTC](https://discuss.elastic.co/t/not-able-to-create-index-in-es-by-using-logstash/1444 "2015-05-28T18:38:20Z")

</div>

Hi All, I use this config file for twitter input.But its not creating index in Elastic Search. When i run this config file for first time its created index.But next time when i want to create new index by using same c…

---

## [Chef cookbook tutorial: What AWS permissions are needed to run this cookbook?](https://discuss.elastic.co/t/chef-cookbook-tutorial-what-aws-permissions-are-needed-to-run-this-cookbook/16505)

<div class="topic-metadata">

**Author:** [@Dan\_Testa](https://discuss.elastic.co/u/Dan_Testa)\
**Replies:** 3\
**Last updated:** [September 8, 2014, 4:54pm UTC](https://discuss.elastic.co/t/chef-cookbook-tutorial-what-aws-permissions-are-needed-to-run-this-cookbook/16505 "2014-09-08T16:54:02Z")

</div>

Hi, I am following the elasticsearch chef cookbook tutorial here: http://www.elasticsearch.org/tutorials/deploying-elasticsearch-with-chef-solo/ I am getting stuck on this step: time ssh -t $SSH\_OPTIONS $HOST "…

---

## [Complete cluster failure](https://discuss.elastic.co/t/complete-cluster-failure/16447)

<div class="topic-metadata">

**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\
**Replies:** 8\
**Last updated:** [March 24, 2014, 4:37pm UTC](https://discuss.elastic.co/t/complete-cluster-failure/16447 "2014-03-24T16:37:11Z")

</div>

I have been running Elasticsearch for years and I have never encountered a collapse such as the one I am experiencing. Even when experiencing split brain clusters, I still had it running and accepting search requests. …

---

## [Logstash를 통한 csv import 오류](https://discuss.elastic.co/t/logstash-csv-import/236967)

<div class="topic-metadata">

**Author:** [@Jun.8](https://discuss.elastic.co/u/Jun.8)\
**Replies:** 2\
**Last updated:** [June 19, 2020, 12:28am UTC](https://discuss.elastic.co/t/logstash-csv-import/236967 "2020-06-19T00:28:52Z")

</div>

안녕하세요. 제가 geo\_point 데이터를 2개 쓰고 싶어서 아래와 같이 작성하였는데요. logstash를 실행하면 elasticsearch에 잘 전달한 것 같은데 kibana를 보면 데이터가 들어와있지 않습니다. 어떤 오류인지 모르겠습니다. zpRQtoUy8muYIGIyxpu5Fh.png) input { file { path =\> "/Users/user/Downloads…

---

## [Calculate the timedifference between current time and future time](https://discuss.elastic.co/t/calculate-the-timedifference-between-current-time-and-future-time/216274)

<div class="topic-metadata">

**Author:** [@chandu5565](https://discuss.elastic.co/u/chandu5565)\
**Replies:** 2\
**Last updated:** [January 23, 2020, 4:24pm UTC](https://discuss.elastic.co/t/calculate-the-timedifference-between-current-time-and-future-time/216274 "2020-01-23T16:24:27Z")

</div>

Hi, I have data in the mongo db like below. "last-date": "2020-01-30T07:30:00Z" "type": "certificate" "daysleft": "7" I had inserted this kind of records in to elasticsearch. I wanted to daily monitor the number of d…

---

## [Combining a dat field and a time field into a single timestamp](https://discuss.elastic.co/t/combining-a-dat-field-and-a-time-field-into-a-single-timestamp/208890)

<div class="topic-metadata">

**Author:** [@Hyperion0](https://discuss.elastic.co/u/Hyperion0)\
**Replies:** 2\
**Last updated:** [November 21, 2019, 1:54pm UTC](https://discuss.elastic.co/t/combining-a-dat-field-and-a-time-field-into-a-single-timestamp/208890 "2019-11-21T13:54:44Z")

</div>

I have a text log with date and time listed as 2 separate fields and I want to combine them into a single date-time to use as my timestamp in Kibana. The entry looks like this: 10/03/19 18:04:40 My conf looks somethin…

---

## [Elasticsearch clustering on two hosts using docker-compose](https://discuss.elastic.co/t/elasticsearch-clustering-on-two-hosts-using-docker-compose/189480)

<div class="topic-metadata">

**Author:** [@pastechecker](https://discuss.elastic.co/u/pastechecker)\
**Replies:** 2\
**Last updated:** [July 9, 2019, 4:01pm UTC](https://discuss.elastic.co/t/elasticsearch-clustering-on-two-hosts-using-docker-compose/189480 "2019-07-09T16:01:17Z")

</div>

Hello. I am attempting to form a cluster with 6 docker containers on two docker hosts. Topology below: Docker-compose.yml on ELK1: version: '3.7' services: elk1\_es01: container\_name: elk1\_es01 image: docker.e…

---

## [Nginx setup for xpack enabled elastic cluster](https://discuss.elastic.co/t/nginx-setup-for-xpack-enabled-elastic-cluster/135661)

<div class="topic-metadata">

**Author:** [@Muj33b](https://discuss.elastic.co/u/Muj33b)\
**Replies:** 2\
**Last updated:** [June 20, 2018, 3:16pm UTC](https://discuss.elastic.co/t/nginx-setup-for-xpack-enabled-elastic-cluster/135661 "2018-06-20T15:16:53Z")

</div>

Hi, We've got an ES cluster on GCP, it is 5-3-2 (Data-Master-Client) nodes running on docker containers with X-pack enabled. We want to add nginx load balancer in front of it. It is similar to Connect Kibana to Nginx l…

---

## [Logging too much information](https://discuss.elastic.co/t/logging-too-much-information/93049)

<div class="topic-metadata">

**Author:** [@iluvcode](https://discuss.elastic.co/u/iluvcode)\
**Replies:** 2\
**Last updated:** [July 21, 2017, 5:25pm UTC](https://discuss.elastic.co/t/logging-too-much-information/93049 "2017-07-21T17:25:23Z")

</div>

We currently deployed Elasticsearch 5.3 to QA site with default log4j2.properties that came with the package. Within a week Elasticsearch log files exceeded 260 GB of space which crashed the server. How can i delete the …

---

## [NEST: Is it possible / could it be made possible to load json file into an ISearchRespone object?](https://discuss.elastic.co/t/nest-is-it-possible-could-it-be-made-possible-to-load-json-file-into-an-isearchrespone-object/50165)

<div class="topic-metadata">

**Author:** [@scottk\_1](https://discuss.elastic.co/u/scottk_1)\
**Replies:** 2\
**Last updated:** [May 17, 2016, 6:32pm UTC](https://discuss.elastic.co/t/nest-is-it-possible-could-it-be-made-possible-to-load-json-file-into-an-isearchrespone-object/50165 "2016-05-17T18:32:06Z")

</div>

I currently am running queries using NEST (ElasticClient.Search), but I don't do anything with the response objects, I just store the returned JSON. The reason for this is that just storing statistics is much smaller t…

---

## [Issue with launching Kibana 4.0.2](https://discuss.elastic.co/t/issue-with-launching-kibana-4-0-2/39411)

<div class="topic-metadata">

**Author:** [@Adam\_P](https://discuss.elastic.co/u/Adam_P)\
**Replies:** 2\
**Last updated:** [January 18, 2016, 2:48pm UTC](https://discuss.elastic.co/t/issue-with-launching-kibana-4-0-2/39411 "2016-01-18T14:48:19Z")

</div>

Greetings, I'm following along the Official Logstash book (2013) and cannot get Kibana to launch. I get strange error messages: {"@timestamp":"2016-01-14T02:06:28.943Z","level":"error","message":"unknown error","n…

---

## [Receive logs from Pfsense but noting show in charts](https://discuss.elastic.co/t/receive-logs-from-pfsense-but-noting-show-in-charts/27939)

<div class="topic-metadata">

**Author:** [@mega\_robo](https://discuss.elastic.co/u/mega_robo)\
**Replies:** 2\
**Last updated:** [August 24, 2015, 11:43am UTC](https://discuss.elastic.co/t/receive-logs-from-pfsense-but-noting-show-in-charts/27939 "2015-08-24T11:43:08Z")

</div>

hi every one i install ELK with elasticsearch and logstash 1.5 and kibana 3 and use pfsense 2.2.3 its work correctly and send logst to logstash and i can see logs in kibana and in /var/log/logstash/logstash.stutd but i…

---

## [Question related to ESA-2025-06 (security advisory)](https://discuss.elastic.co/t/question-related-to-esa-2025-06-security-advisory/375521)

<div class="topic-metadata">

**Author:** [@Tears](https://discuss.elastic.co/u/Tears)\
**Replies:** 1\
**Last updated:** [March 7, 2025, 2:26am UTC](https://discuss.elastic.co/t/question-related-to-esa-2025-06-security-advisory/375521 "2025-03-07T02:26:14Z")

</div>

Hello, ESA-2025-06 is a security advisory about a prototype pollution vulnerability. This avisory references the following CVE ID : CVE-2025-25012 Unless I'm mistaken, there is a different CVE ID in the mitre API for t…

---

## [Dec 20th, 2019 \[EN\] \[App Search\] Getting Started with App Search](https://discuss.elastic.co/t/dec-20th-2019-en-app-search-getting-started-with-app-search/211396)

<div class="topic-metadata">

**Author:** [@aravindputrevu](https://discuss.elastic.co/u/aravindputrevu)\
**Replies:** 0\
**Last updated:** [December 20, 2019, 8:00am UTC](https://discuss.elastic.co/t/dec-20th-2019-en-app-search-getting-started-with-app-search/211396 "2019-12-20T08:00:03Z")

</div>

What is Elastic App Search? App Search is a search solution that is built on Elasticsearch. Using App Search, one can build search experience faster. One can tune relevance, create synonyms or even change the index schem…

---

## [Getting "invalid internal transport message format" when using Java TransportClient + Shield](https://discuss.elastic.co/t/getting-invalid-internal-transport-message-format-when-using-java-transportclient-shield/79951)

<div class="topic-metadata">

**Author:** [@jzheaux](https://discuss.elastic.co/u/jzheaux)\
**Replies:** 0\
**Last updated:** [March 24, 2017, 9:35pm UTC](https://discuss.elastic.co/t/getting-invalid-internal-transport-message-format-when-using-java-transportclient-shield/79951 "2017-03-24T21:35:56Z")

</div>

I'm trying to use the Java client (2.4.4) to connect to our Elasticsearch cluster (2.4.4). They are both on the same version of the jdk (1.8.0u121) and both are using the same jks, which I believe I understand correctly …

---

## [Logstash-output-syslog never writes anything to local syslog on REL8 in podman with podman-compose](https://discuss.elastic.co/t/logstash-output-syslog-never-writes-anything-to-local-syslog-on-rel8-in-podman-with-podman-compose/321697)

<div class="topic-metadata">

**Author:** [@Dale\_Bingham](https://discuss.elastic.co/u/Dale_Bingham)\
**Replies:** 5\
**Last updated:** [December 21, 2022, 12:07pm UTC](https://discuss.elastic.co/t/logstash-output-syslog-never-writes-anything-to-local-syslog-on-rel8-in-podman-with-podman-compose/321697 "2022-12-21T12:07:40Z")

</div>

I have ELK in my podman-compose setup and I can push any logs I get to Logstash through to Elasticsearch just fine. It is when I am trying to also send to syslog for those that already have a process to pull all syslog d…

---

## [Add tag to filebeat modules](https://discuss.elastic.co/t/add-tag-to-filebeat-modules/288314)

<div class="topic-metadata">

**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\
**Replies:** 5\
**Last updated:** [November 5, 2021, 4:53pm UTC](https://discuss.elastic.co/t/add-tag-to-filebeat-modules/288314 "2021-11-05T16:53:46Z")

</div>

hello! I am trying to send the logs with the filebeat mysql module to my logstash and it already obtains the pipeline and does the parsing correctly. How can I differentiate both inputs ( Slowlog and errror ) to apply…

[Previous page](https://discuss.elastic.co/top.md?page=1472&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1474&per_page=50&period=all)
