# Top **URL:** https://discuss.elastic.co/top.md?page=1483&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1484 --- ## [Yarn kbn bootstrap fails， A few TS errors occurred！](https://discuss.elastic.co/t/yarn-kbn-bootstrap-fails-a-few-ts-errors-occurred/287767)
**Author:** [@nuaazt](https://discuss.elastic.co/u/nuaazt)\ **Replies:** 3\ **Last updated:** [November 2, 2021, 1:58pm UTC](https://discuss.elastic.co/t/yarn-kbn-bootstrap-fails-a-few-ts-errors-occurred/287767 "2021-11-02T13:58:25Z")
hi， I pull the code from the github (tag 7.14.0) and then build kibana on windows 10. Getting started | Kibana Guide \[7.15\] | Elastic, my os is windows10 ， git bash but got errors at the step: 'yarn kbn bootstrap' i… --- ## [Logstash Filebeat input](https://discuss.elastic.co/t/logstash-filebeat-input/251992)
**Author:** [@jafri6](https://discuss.elastic.co/u/jafri6)\ **Replies:** 3\ **Last updated:** [October 19, 2020, 9:36am UTC](https://discuss.elastic.co/t/logstash-filebeat-input/251992 "2020-10-19T09:36:39Z")
My goal is to setup filebeat on at least 5 systems, and get the data to elasticsearch via logstash. I imported data via the file plugin earlier for one of my trials, and the data was imported successfully. I tried the … --- ## [Fresh V7.5.2 installation - Windows 10](https://discuss.elastic.co/t/fresh-v7-5-2-installation-windows-10/227403)
**Author:** [@debasisc](https://discuss.elastic.co/u/debasisc)\ **Replies:** 8\ **Last updated:** [April 12, 2020, 3:11am UTC](https://discuss.elastic.co/t/fresh-v7-5-2-installation-windows-10/227403 "2020-04-12T03:11:29Z")
These are the steps I used. unzip elasticsearch.zip in folder, launch elasticsearch.bat from cmd window unzip kibana zip in separate folder and launch kibana.bat from cmd window Launched kibana console from Browser, u… --- ## [Not able to create multiple index through logstash 7.3](https://discuss.elastic.co/t/not-able-to-create-multiple-index-through-logstash-7-3/199754)
**Author:** [@manjeetsingh](https://discuss.elastic.co/u/manjeetsingh)\ **Replies:** 8\ **Last updated:** [September 19, 2019, 8:38am UTC](https://discuss.elastic.co/t/not-able-to-create-multiple-index-through-logstash-7-3/199754 "2019-09-19T08:38:33Z")
Hi Team, I have a setup of dockerized elk setup of version 7.3.1 (Elasticsearch, logstash, Kibana, Filebeat). ELK is running on docker only. I have installed filebeat package on same machine and provide input to logsta… --- ## [APP, Filebeat, and ELK - Local build works but when using Ansible, things go astray](https://discuss.elastic.co/t/app-filebeat-and-elk-local-build-works-but-when-using-ansible-things-go-astray/184670)
**Author:** [@ryh](https://discuss.elastic.co/u/ryh)\ **Replies:** 3\ **Last updated:** [June 6, 2019, 10:54pm UTC](https://discuss.elastic.co/t/app-filebeat-and-elk-local-build-works-but-when-using-ansible-things-go-astray/184670 "2019-06-06T22:54:19Z")
Hi All, I need your help. When I'm building my ELK stack with Filebeat and an app locally, I'm able to see my fields and messages are clear. But when I use Ansible, things go completely wrong. Below are my configs for … --- ## [Translog is already closed error](https://discuss.elastic.co/t/translog-is-already-closed-error/148736)
**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\ **Replies:** 0\ **Last updated:** [September 16, 2018, 8:27am UTC](https://discuss.elastic.co/t/translog-is-already-closed-error/148736 "2018-09-16T08:27:40Z")
Hello, I have elastic cluster, created from 8 hot nodes, 4 warm nodes, 3 masters and 2 coordinating nodes. I still getting error on some node (randomize), when its disconnected. \[2018-09-11T07:38:48,692\]\[ERROR\]\[o.e.b.El… --- ## [Metrics aggreregationについて](https://discuss.elastic.co/t/metrics-aggreregation/137894)
**Author:** [@m\_suga](https://discuss.elastic.co/u/m_suga)\ **Replies:** 3\ **Last updated:** [July 12, 2018, 4:27am UTC](https://discuss.elastic.co/t/metrics-aggreregation/137894 "2018-07-12T04:27:56Z")
KIBANA＋ElasticSearchでメトリックス機能でデータ検索をかけるときに 用意されているのはAVG,SUM,MAX,MIN等で 現在値を取得するCURRNTVALUEのようなものがありません。 Aggregation自体が集計機能なので、日付の期間指定して現在値を取得する場合は、どのようにして取得すればよろしいでしょうか。 例えばグラフ表示する際、ElasticのAggregationしか使用できない場合は現在値をとる… --- ## [Recover only a part of a log with multiline codec](https://discuss.elastic.co/t/recover-only-a-part-of-a-log-with-multiline-codec/42824)
**Author:** [@Justin\_V](https://discuss.elastic.co/u/Justin_V)\ **Replies:** 3\ **Last updated:** [February 29, 2016, 12:56pm UTC](https://discuss.elastic.co/t/recover-only-a-part-of-a-log-with-multiline-codec/42824 "2016-02-29T12:56:17Z")
Hello again, I'm now having trouble with some particular logs. As you can see, these are "multiline" logs : the message is continuing in the next lines. But (as you can see too), they start again with the same patte… --- ## [Search includes closed index =\> ClusterBlockException](https://discuss.elastic.co/t/search-includes-closed-index-clusterblockexception/21956)
**Author:** [@msbreuer](https://discuss.elastic.co/u/msbreuer)\ **Replies:** 3\ **Last updated:** [February 5, 2015, 7:32am UTC](https://discuss.elastic.co/t/search-includes-closed-index-clusterblockexception/21956 "2015-02-05T07:32:23Z")
I am using elasticsearch api for searching indexes. Several physical indexes are bound to an alias and the java client simply uses the alias to search in all indexes. This works if any referenced index is available, … --- ## [Help with analyzer and mapping](https://discuss.elastic.co/t/help-with-analyzer-and-mapping/9373)
**Author:** [@sujoysett](https://discuss.elastic.co/u/sujoysett)\ **Replies:** 8\ **Last updated:** [October 25, 2012, 9:46am UTC](https://discuss.elastic.co/t/help-with-analyzer-and-mapping/9373 "2012-10-25T09:46:25Z")
Hi, In an index I have a field "text", analyzed with \*standard analyzer\*. I now want to return the documents which has the \*keyword "at&t" occurring in the field "text"\*. However, "at" is probably a member of S… --- ## [Group By Field Value](https://discuss.elastic.co/t/group-by-field-value/4286)
**Author:** [@poncho](https://discuss.elastic.co/u/poncho)\ **Replies:** 3\ **Last updated:** [May 1, 2011, 6:37pm UTC](https://discuss.elastic.co/t/group-by-field-value/4286 "2011-05-01T18:37:50Z")
Hi All, I'm moving from MySQL to ElasticSearch. I'm loving ElasticSearch's speed and ease of setup, well done! Using ElasticSearch, I'm creating a database of websites that have the following fields: documen… --- ## [Add\_field processor on empty env provider fields stop ingest](https://discuss.elastic.co/t/add-field-processor-on-empty-env-provider-fields-stop-ingest/343371)
**Author:** [@sholzhauer](https://discuss.elastic.co/u/sholzhauer)\ **Replies:** 0\ **Last updated:** [September 19, 2023, 1:36pm UTC](https://discuss.elastic.co/t/add-field-processor-on-empty-env-provider-fields-stop-ingest/343371 "2023-09-19T13:36:06Z")
Hi, Our nodes have some attributes to define what asset they belong to (environment, application, component). With migrating to agent these fields got lost and we have utilized the environment provider and the add\_field… --- ## [Triggering index creation via an index template's alias](https://discuss.elastic.co/t/triggering-index-creation-via-an-index-templates-alias/171385)
**Author:** [@dan-blanchard](https://discuss.elastic.co/u/dan-blanchard)\ **Replies:** 0\ **Last updated:** [March 7, 2019, 9:13pm UTC](https://discuss.elastic.co/t/triggering-index-creation-via-an-index-templates-alias/171385 "2019-03-07T21:13:12Z")
We use versioned time-based indices at Parse.ly that are roughly of the form v1-foo-2019.03.05.20 (v{version}-{name}-{YYYY}.{MM}.{DD}.{HH}). Currently, we have a cron job that runs every 30 minutes that creates the next … --- ## [Total count of a field](https://discuss.elastic.co/t/total-count-of-a-field/339289)
**Author:** [@Dana\_Pavaday](https://discuss.elastic.co/u/Dana_Pavaday)\ **Replies:** 6\ **Last updated:** [July 28, 2023, 7:04am UTC](https://discuss.elastic.co/t/total-count-of-a-field/339289 "2023-07-28T07:04:43Z")
Hello everyone, I need to get the total count of a field in Elasticsearch (in my case, the number of clients in client field). How do I write the query in Dev tools? --- ## [Parsing duration with 00:00:00 format](https://discuss.elastic.co/t/parsing-duration-with-0000-format/281284)
**Author:** [@Sketchy](https://discuss.elastic.co/u/Sketchy)\ **Replies:** 6\ **Last updated:** [August 31, 2021, 3:00pm UTC](https://discuss.elastic.co/t/parsing-duration-with-0000-format/281284 "2021-08-31T15:00:34Z")
I have a CSV that has multiple durations that are in seconds but one of the columns has the duration as 00:00:30 for 30 seconds for example. I cant work out how to get that into seconds/integer easily. I can think of a f… --- ## [ELK cluster monitoring with Metricbeat](https://discuss.elastic.co/t/elk-cluster-monitoring-with-metricbeat/249224)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 6\ **Last updated:** [October 2, 2020, 12:53pm UTC](https://discuss.elastic.co/t/elk-cluster-monitoring-with-metricbeat/249224 "2020-10-02T12:53:54Z")
I am trying to set my cluster with metricbeat monitoring. follow the document. setup everything but all my node just keep changing what am i missing? elasticsearch.yml file on all system xpack.monitoring.collection.e… --- ## [Metricbeat couchdb module not working](https://discuss.elastic.co/t/metricbeat-couchdb-module-not-working/219094)
**Author:** [@Allan\_Johns](https://discuss.elastic.co/u/Allan_Johns)\ **Replies:** 6\ **Last updated:** [February 20, 2020, 3:23pm UTC](https://discuss.elastic.co/t/metricbeat-couchdb-module-not-working/219094 "2020-02-20T15:23:29Z")
I'm using metricbeat-7.5.2 to monitor couchdb-2.3.1. I get the following error in the docs in elastic written by metricbeat: error in http fetch: HTTP error 404 in : 404 Object Not Found I cannot get any further info,… --- ## [Cannot start service winlogbeat in Docker Windows Container](https://discuss.elastic.co/t/cannot-start-service-winlogbeat-in-docker-windows-container/190092)
**Author:** [@HippyCraig](https://discuss.elastic.co/u/HippyCraig)\ **Replies:** 6\ **Last updated:** [July 30, 2019, 12:43pm UTC](https://discuss.elastic.co/t/cannot-start-service-winlogbeat-in-docker-windows-container/190092 "2019-07-30T12:43:50Z")
I have looked through all the existing posts on this but I am still struggling with getting the service to run. I am using Chocolaty to install winlogbeat inside my windows container, (1809). Everything install fine, I… --- ## [Indexing fields without storing using Java API](https://discuss.elastic.co/t/indexing-fields-without-storing-using-java-api/9332)
**Author:** [@dean\_2](https://discuss.elastic.co/u/dean_2)\ **Replies:** 6\ **Last updated:** [October 15, 2012, 9:18am UTC](https://discuss.elastic.co/t/indexing-fields-without-storing-using-java-api/9332 "2012-10-15T09:18:36Z")
I want to just index all of the fields without storing them. How? bulkRequest.add(client.prepareIndex("sponge2", "153299", "\_ID\_") .setSource(jsonBuilder() .startObject() … --- ## [Filebeat not sending logs anymore](https://discuss.elastic.co/t/filebeat-not-sending-logs-anymore/257246)
**Author:** [@toms130](https://discuss.elastic.co/u/toms130)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 10:56am UTC](https://discuss.elastic.co/t/filebeat-not-sending-logs-anymore/257246 "2020-12-16T10:56:55Z")
Hi there, I've gor problem with a filebeat instance which ends to stop sending logs after smome time. Here is my setup : type: log enabled: true paths: - /opt/TalendRemoteEngine/TalendJobServersFiles/jobexecu… --- ## [Tips to create a Machine Larning job](https://discuss.elastic.co/t/tips-to-create-a-machine-larning-job/230244)
**Author:** [@david-vazquez](https://discuss.elastic.co/u/david-vazquez)\ **Replies:** 7\ **Last updated:** [May 5, 2020, 8:59pm UTC](https://discuss.elastic.co/t/tips-to-create-a-machine-larning-job/230244 "2020-05-05T20:59:22Z")
Hello guys, I´m trying to create a ML job which detect anomalies using an index pattern which contains information about traffic DNS (Cisco Umbrella). With this log, I can get categories about the DNS resolutions, knowi… --- ## [Metricbeat sending data that is not arriving in Elasticsearch](https://discuss.elastic.co/t/metricbeat-sending-data-that-is-not-arriving-in-elasticsearch/132138)
**Author:** [@Creat0n](https://discuss.elastic.co/u/Creat0n)\ **Replies:** 1\ **Last updated:** [May 23, 2018, 6:16am UTC](https://discuss.elastic.co/t/metricbeat-sending-data-that-is-not-arriving-in-elasticsearch/132138 "2018-05-23T06:16:42Z")
I configured metricbeat to send system metrics to elasticsearch. I'm using the exact same configuration on 13 Servers but I'm seeing only data from 12 Servers. Metricbeat Log from the missing server shows no Errors: .… --- ## [\[WARN \]\[o.e.m.j.JvmGcMonitorService\] \[esm3\] \[gc\]\[475373\] overhead, spent \[658ms\] collecting in the last \[1.2s\]](https://discuss.elastic.co/t/warn-o-e-m-j-jvmgcmonitorservice-esm3-gc-475373-overhead-spent-658ms-collecting-in-the-last-1-2s/120987)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 1\ **Last updated:** [February 22, 2018, 5:06pm UTC](https://discuss.elastic.co/t/warn-o-e-m-j-jvmgcmonitorservice-esm3-gc-475373-overhead-spent-658ms-collecting-in-the-last-1-2s/120987 "2018-02-22T17:06:22Z")
I just noticed, my master nodes all producing following in logs: esm3 | \[2018-02-22T04:32:02,931\]\[WARN \]\[o.e.m.j.JvmGcMonitorService\] \[esm3\] \[gc\]\[475373\] overhead, spent \[658ms\] collecting in the last \[1.2s… --- ## [ES ignores mapping when using Python DSL bulk](https://discuss.elastic.co/t/es-ignores-mapping-when-using-python-dsl-bulk/120050)
**Author:** [@druzmieres](https://discuss.elastic.co/u/druzmieres)\ **Replies:** 1\ **Last updated:** [February 19, 2018, 4:04pm UTC](https://discuss.elastic.co/t/es-ignores-mapping-when-using-python-dsl-bulk/120050 "2018-02-19T16:04:18Z")
I'm trying to upload a CSV file to an elasticsearch index. Let's say the file is something like this (no headers, just data): bird,10,dog cat,20,giraffe This is the code I have: from elasticsearch\_dsl import DocType, … --- ## [All shards failed after one node shutdown](https://discuss.elastic.co/t/all-shards-failed-after-one-node-shutdown/112877)
**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\ **Replies:** 1\ **Last updated:** [December 22, 2017, 11:35am UTC](https://discuss.elastic.co/t/all-shards-failed-after-one-node-shutdown/112877 "2017-12-22T11:35:32Z")
Can you help me figure out why all shards failed? 3 nodes cluster, the master was shut down. Couldn't send query APIs anymore. Maybe I should modify the timeouts in the yml file? Working with ES 5.4 \[2017-12-20T19… --- ## [Using NEST with https and TLS 1.2?](https://discuss.elastic.co/t/using-nest-with-https-and-tls-1-2/79105)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 1\ **Last updated:** [March 18, 2017, 4:39am UTC](https://discuss.elastic.co/t/using-nest-with-https-and-tls-1-2/79105 "2017-03-18T04:39:58Z")
I dont see any sample of using NEST with https. How can I encrypt data using NEST if i use https instead of http like this i get error: var node = new Uri("https://myserver:9200"); var settings = new ConnectionSettings… --- ## [Scaling an Elasticsearch cluster to \>100 billion documents, 25k/sec indexing rate](https://discuss.elastic.co/t/scaling-an-elasticsearch-cluster-to-100-billion-documents-25k-sec-indexing-rate/13764)
**Author:** [@williamejsalt](https://discuss.elastic.co/u/williamejsalt)\ **Replies:** 1\ **Last updated:** [September 26, 2013, 7:19pm UTC](https://discuss.elastic.co/t/scaling-an-elasticsearch-cluster-to-100-billion-documents-25k-sec-indexing-rate/13764 "2013-09-26T19:19:10Z")
Hi all, Im currently running an elasticsearch cluster thats storing and consuming logs from logstash. My architecture is: - x3 m1.small logstash nodes, consuming from a local redis queue, indexing to elasticse… --- ## [Unable to recover cluster after OOM](https://discuss.elastic.co/t/unable-to-recover-cluster-after-oom/6035)
**Author:** [@phobos182](https://discuss.elastic.co/u/phobos182)\ **Replies:** 7\ **Last updated:** [December 2, 2011, 3:59pm UTC](https://discuss.elastic.co/t/unable-to-recover-cluster-after-oom/6035 "2011-12-02T15:59:58Z")
Getting a ton of these in my log files. Cluster crashed on an OOM event. de\[2JqaayEqTfSwxkGSwicsfg\], \[P\], s\[INITIALIZING\], reason \[Failed to start shard, message \[IndexShardGatewayRecoveryException\[\[test\_20110601-20… --- ## [Query for documents with datetime field where time is outside office hours](https://discuss.elastic.co/t/query-for-documents-with-datetime-field-where-time-is-outside-office-hours/356297)
**Author:** [@Peter\_K](https://discuss.elastic.co/u/Peter_K)\ **Replies:** 5\ **Last updated:** [April 3, 2024, 11:25am UTC](https://discuss.elastic.co/t/query-for-documents-with-datetime-field-where-time-is-outside-office-hours/356297 "2024-04-03T11:25:08Z")
query for documents with datetime field where time is outside office hours. There's a field vraag\_datumtijd (same format as @timestamp) that's filled with a date time stamp of the moment of doing an user action and a fi… --- ## [Logstash 8.10.3 ERROR Badly formatted index, after interpolation still contains placeholder](https://discuss.elastic.co/t/logstash-8-10-3-error-badly-formatted-index-after-interpolation-still-contains-placeholder/349377)
**Author:** [@efrainMZ](https://discuss.elastic.co/u/efrainMZ)\ **Replies:** 5\ **Last updated:** [December 15, 2023, 4:33pm UTC](https://discuss.elastic.co/t/logstash-8-10-3-error-badly-formatted-index-after-interpolation-still-contains-placeholder/349377 "2023-12-15T16:33:43Z")
good day! I am trying to extract data from redis using logstash, the data comes from an apm version 8.10.3 but I receive a warining that does not allow me to see the data in kibana. The log I receive is the following: … --- ## [Unable to dynamically update instrumentation=true](https://discuss.elastic.co/t/unable-to-dynamically-update-instrumentation-true/232645)
**Author:** [@Ananda\_Babu](https://discuss.elastic.co/u/Ananda_Babu)\ **Replies:** 5\ **Last updated:** [May 15, 2020, 2:31pm UTC](https://discuss.elastic.co/t/unable-to-dynamically-update-instrumentation-true/232645 "2020-05-15T14:31:32Z")
Kibana version: 7.6.2 Elasticsearch version: 7.6.2 APM Server version: 7.6.2 APM Agent language and version: Java - elastic-apm-agent-1.15.0.jar Original install method and version: APT repository Fresh install or u… --- ## [Unable to use field named "\_Data" in Sql query anymore](https://discuss.elastic.co/t/unable-to-use-field-named-data-in-sql-query-anymore/158786)
**Author:** [@Magnus\_Andersson1](https://discuss.elastic.co/u/Magnus_Andersson1)\ **Replies:** 5\ **Last updated:** [December 13, 2018, 12:27pm UTC](https://discuss.elastic.co/t/unable-to-use-field-named-data-in-sql-query-anymore/158786 "2018-12-13T12:27:06Z")
Hi, I have a document looking like this, copied from the \_source property of a Elastic query result: { "AbstractId" : "7f424fa0-f30e-477d-8245-d3b4e97e0538", "Category" : "GUI", "Creat… --- ## [Script filed](https://discuss.elastic.co/t/script-filed/113793)
**Author:** [@radi](https://discuss.elastic.co/u/radi)\ **Replies:** 5\ **Last updated:** [January 3, 2018, 5:19pm UTC](https://discuss.elastic.co/t/script-filed/113793 "2018-01-03T17:19:29Z")
Hello , i want to add script filed to calcul members of "DO" ===\> ( 1 memberId) and "FO" ===\> ( 2 memberId) and return sum --- (3) i can't get size of doc\["model.members"\].size() or .length() to make boucle for and… --- ## [Search in Elasticsearch objects from non blocked user](https://discuss.elastic.co/t/search-in-elasticsearch-objects-from-non-blocked-user/95525)
**Author:** [@rrader](https://discuss.elastic.co/u/rrader)\ **Replies:** 5\ **Last updated:** [August 5, 2017, 9:29pm UTC](https://discuss.elastic.co/t/search-in-elasticsearch-objects-from-non-blocked-user/95525 "2017-08-05T21:29:21Z")
In Elaasticsearch we have 3 collections, users, products and blocked\_users. users{id, first\_name, last\_name, ...} products{id, user\_id, title, ...} blocked\_users{user\_id, blocked\_user\_id} I want to search products by t… --- ## [BulkRequestBuilder is slow](https://discuss.elastic.co/t/bulkrequestbuilder-is-slow/11426)
**Author:** [@muzammil\_abdul](https://discuss.elastic.co/u/muzammil_abdul)\ **Replies:** 5\ **Last updated:** [April 3, 2013, 10:00am UTC](https://discuss.elastic.co/t/bulkrequestbuilder-is-slow/11426 "2013-04-03T10:00:03Z")
I am trying to index and remove some document in the index using BulkRequestBuilder java api. When I execute the bulk the changes in the index is not happening immediately. If I do some delete operation using the b… --- ## [How to use Mustache script in percolator](https://discuss.elastic.co/t/how-to-use-mustache-script-in-percolator/129577)
**Author:** [@anoopvalluthadam](https://discuss.elastic.co/u/anoopvalluthadam)\ **Replies:** 1\ **Last updated:** [April 27, 2018, 4:01pm UTC](https://discuss.elastic.co/t/how-to-use-mustache-script-in-percolator/129577 "2018-04-27T16:01:28Z")
we are using Mustache script in the query to use params, since script contains Pattern and painless doesn't support parameterizing Pattern. query: PUT test\_index/notification/ID { "source": { "query": { … --- ## [Dashboard ID update or complete redo](https://discuss.elastic.co/t/dashboard-id-update-or-complete-redo/318982)
**Author:** [@cronwel](https://discuss.elastic.co/u/cronwel)\ **Replies:** 4\ **Last updated:** [November 21, 2022, 7:50pm UTC](https://discuss.elastic.co/t/dashboard-id-update-or-complete-redo/318982 "2022-11-21T19:50:02Z")
I'm developing a dashboard with saved objects(visualizations) that I had to reingest. I've been remaking the visualization because I receive error messages related to the id. Is there a way to update visualizations/dash… --- ## [Elasticsearch socket block OR timeout](https://discuss.elastic.co/t/elasticsearch-socket-block-or-timeout/202545)
**Author:** [@ashishtiwari1993](https://discuss.elastic.co/u/ashishtiwari1993)\ **Replies:** 4\ **Last updated:** [October 9, 2019, 2:31pm UTC](https://discuss.elastic.co/t/elasticsearch-socket-block-or-timeout/202545 "2019-10-09T14:31:52Z")
Hi Team, Cluster Specification: ES version - 6.2.2 Nodes : 3 (true =\> master, data, ingest) Heap : 30 GB per node RAM : 128 GB , 64 GB, 64 GB Core: 24 Disk Available : approx 200 GB indexes - 169 Replica - 0 Per inde… --- ## [Kibana-Metric not displaying exact count](https://discuss.elastic.co/t/kibana-metric-not-displaying-exact-count/129411)
**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\ **Replies:** 1\ **Last updated:** [April 25, 2018, 6:21am UTC](https://discuss.elastic.co/t/kibana-metric-not-displaying-exact-count/129411 "2018-04-25T06:21:17Z")
Hello Team I indexed the log data and overall, I have 43851 documents you can see it here: GET index\_name/\_count output: { "count": 43851, "\_shards": { "total": 5, "successful": 5, "skipped": 0, … --- ## [Trying to install integration APM gives '404 Not Found'](https://discuss.elastic.co/t/trying-to-install-integration-apm-gives-404-not-found/324748)
**Author:** [@benzok](https://discuss.elastic.co/u/benzok)\ **Replies:** 2\ **Last updated:** [February 23, 2023, 12:56pm UTC](https://discuss.elastic.co/t/trying-to-install-integration-apm-gives-404-not-found/324748 "2023-02-23T12:56:15Z")
Kibana version: 8.6.1 Elasticsearch version: 8.6.1 Original install method (e.g. download page, yum, deb, from source, etc.) and version: docker-compose Fresh install or upgraded from other version? Fresh Is there an… --- ## [How to make logstash filter multiple grok pattern](https://discuss.elastic.co/t/how-to-make-logstash-filter-multiple-grok-pattern/309810)
**Author:** [@lzold\_z](https://discuss.elastic.co/u/lzold_z)\ **Replies:** 2\ **Last updated:** [July 19, 2022, 9:17am UTC](https://discuss.elastic.co/t/how-to-make-logstash-filter-multiple-grok-pattern/309810 "2022-07-19T09:17:56Z")
Hello, im new to the logstash and i want to know how to make logstash filter multiple grok pattern for example from httpd error logs and access logs, im already have those pattern but logstash seem didnt catch the logs, … --- ## [How to search in attachment content?](https://discuss.elastic.co/t/how-to-search-in-attachment-content/305287)
**Author:** [@frankmehlhop](https://discuss.elastic.co/u/frankmehlhop)\ **Replies:** 2\ **Last updated:** [June 8, 2022, 7:17am UTC](https://discuss.elastic.co/t/how-to-search-in-attachment-content/305287 "2022-06-08T07:17:33Z")
I ingest pdf files into elastic. I can successful search in it using Kibana Console. But at my C# code I don't get any result. I'm quit sure the problem is syntax of my code. But I tried many things and still I don't… --- ## [Kibana pluginsまたは、REST APIよりKibana Discover、Dashboardの作成について](https://discuss.elastic.co/t/kibana-plugins-rest-api-kibana-discover-dashboard/299698)
**Author:** [@takadev](https://discuss.elastic.co/u/takadev)\ **Replies:** 2\ **Last updated:** [March 15, 2022, 10:53am UTC](https://discuss.elastic.co/t/kibana-plugins-rest-api-kibana-discover-dashboard/299698 "2022-03-15T10:53:56Z")
現在、kibana管理画面より、Discoverの作成、作成したDiscoverをPanelに配置したDashboardの作成を行っております。 作成を管理画面ではなく、REST APIやKibana pluginsを利用したアプリから作成できないか調査しているのですが、Kibana Guideからはわかりませんでした。 Kibanaが公開しているREST APIやKibana pluginsなどからDiscover、Dashboa… --- ## [Log line with multiple JSON Objects](https://discuss.elastic.co/t/log-line-with-multiple-json-objects/227562)
**Author:** [@ccabral](https://discuss.elastic.co/u/ccabral)\ **Replies:** 2\ **Last updated:** [April 10, 2020, 11:52pm UTC](https://discuss.elastic.co/t/log-line-with-multiple-json-objects/227562 "2020-04-10T23:52:13Z")
Hello, apologies if this has already been asked and answered but I can't seem to find a way to achieve what I'm looking for. I'm using logstash to break down log lines and I have everything separated but I run into a str… --- ## [How to make a hypertext link in datatable without custom formatter](https://discuss.elastic.co/t/how-to-make-a-hypertext-link-in-datatable-without-custom-formatter/227404)
**Author:** [@Goishin](https://discuss.elastic.co/u/Goishin)\ **Replies:** 2\ **Last updated:** [April 10, 2020, 4:02pm UTC](https://discuss.elastic.co/t/how-to-make-a-hypertext-link-in-datatable-without-custom-formatter/227404 "2020-04-10T16:02:57Z")
I currently have a field in my index that uses a custom formatter. I use this to go to the dashboard associated with that field. You start in one dashboard, there's a list of instances, you click on one of the instances,… --- ## [Filebeats Kubernetes File close due to inactive of 5min](https://discuss.elastic.co/t/filebeats-kubernetes-file-close-due-to-inactive-of-5min/224855)
**Author:** [@ConorTier](https://discuss.elastic.co/u/ConorTier)\ **Replies:** 2\ **Last updated:** [March 25, 2020, 8:43am UTC](https://discuss.elastic.co/t/filebeats-kubernetes-file-close-due-to-inactive-of-5min/224855 "2020-03-25T08:43:20Z")
Hey, Here is the setup currently have half working - Kubernetes - Amazon K8 - with a instance of logstash and file beats running on two pods - no demon sets for filebeats as want to read files from a specific directory … --- ## [\[Kibana 7.2\] Kibana Server Not Ready Yet, but no Errors in yml of elasticsearch or Kibana](https://discuss.elastic.co/t/kibana-7-2-kibana-server-not-ready-yet-but-no-errors-in-yml-of-elasticsearch-or-kibana/190024)
**Author:** [@spupapi](https://discuss.elastic.co/u/spupapi)\ **Replies:** 2\ **Last updated:** [July 26, 2019, 6:12am UTC](https://discuss.elastic.co/t/kibana-7-2-kibana-server-not-ready-yet-but-no-errors-in-yml-of-elasticsearch-or-kibana/190024 "2019-07-26T06:12:22Z")
Hello, why is my Kibana refusing to start up? These are my YML file of Elasticsearch and Kibana. And further below is my log of ES. There is no \[ERROR\] in the log, however only \[info\] and \[debug\] and \[warning\] # ======… --- ## [Caught exception while handling client http traffic, closing connection \[id: 0xbcdf3dcf, L:/es-ip:9200 ! R:/logstash-ip:50878\]](https://discuss.elastic.co/t/caught-exception-while-handling-client-http-traffic-closing-connection-id-0xbcdf3dcf-l-es-ip-9200-r-logstash-ip-50878/165517)
**Author:** [@xiaoyao](https://discuss.elastic.co/u/xiaoyao)\ **Replies:** 2\ **Last updated:** [January 24, 2019, 2:46am UTC](https://discuss.elastic.co/t/caught-exception-while-handling-client-http-traffic-closing-connection-id-0xbcdf3dcf-l-es-ip-9200-r-logstash-ip-50878/165517 "2019-01-24T02:46:08Z")
\[2019-01-24T10:04:40,406\]\[WARN \]\[o.e.h.n.Netty4HttpServerTransport\] \[HC-Elasticsearch-node02\_N\] caught exception while handling client http traffic, closing connection \[id: 0xbcdf3dcf, L:/es-ip:9200 ! R:/logstash-ip:5087… --- ## [Low level client vs High level client?](https://discuss.elastic.co/t/low-level-client-vs-high-level-client/128704)
**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 2\ **Last updated:** [April 19, 2018, 2:11pm UTC](https://discuss.elastic.co/t/low-level-client-vs-high-level-client/128704 "2018-04-19T14:11:34Z")
I am using elasticsearch in c# web api, so I need to make decision to use high level client or low level client.My question is which one I need to prefer and can you explain me performance wise impact for both the clien… --- ## [Inverted curves in Kibana/timelion](https://discuss.elastic.co/t/inverted-curves-in-kibana-timelion/99985)
**Author:** [@rajisankar](https://discuss.elastic.co/u/rajisankar)\ **Replies:** 2\ **Last updated:** [September 13, 2017, 1:27am UTC](https://discuss.elastic.co/t/inverted-curves-in-kibana-timelion/99985 "2017-09-13T01:27:51Z")
Is there a way to create inverted curves in Kibana/timelion visualization like the one shown below? \[16 PM\] For example, displaying 2 metrics on the same visualization, one on the positive axis and one inverted on the … [Previous page](https://discuss.elastic.co/top.md?page=1482&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1484&per_page=50&period=all)